last executing test programs: 8m23.842829563s ago: executing program 32 (id=990): capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000100)) 6m31.346159367s ago: executing program 33 (id=1987): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) 5m52.15726108s ago: executing program 4 (id=2271): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a04", 0x8}], 0x1}, 0x48800) 5m51.637845546s ago: executing program 4 (id=2277): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 5m51.207131254s ago: executing program 4 (id=2282): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) 5m50.72532291s ago: executing program 4 (id=2288): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@gid}, {@force}, {@force}]}, 0xff, 0x6bb, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)='proc\x00', 0x8010, 0x0) 5m50.054342984s ago: executing program 4 (id=2292): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d}) 5m48.991232092s ago: executing program 4 (id=2300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 5m47.731133727s ago: executing program 34 (id=2300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 5m15.764075227s ago: executing program 6 (id=2557): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5m15.227375901s ago: executing program 6 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf08c3bddf0f", 0x0, 0x3802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m13.961524027s ago: executing program 6 (id=2569): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r0, 0x8de13c6b70ae92c3, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m13.485351111s ago: executing program 6 (id=2572): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f00000002c0)={[{@errors_remount}, {@bh}, {@norecovery}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r0, &(0x7f0000000580)=""/174, 0xae) 5m12.279477863s ago: executing program 6 (id=2580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x20, 0x68}, 0x90) 5m11.406321306s ago: executing program 6 (id=2588): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x6, 0x2, 0x0, @loopback, @private=0xa010100}, {0x1e, 0x7f, 0x0, @remote}}}}}, 0x0) 5m10.663841208s ago: executing program 35 (id=2588): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x5, 0x1c, 0x65, 0x0, 0x6, 0x2, 0x0, @loopback, @private=0xa010100}, {0x1e, 0x7f, 0x0, @remote}}}}}, 0x0) 4m48.920064968s ago: executing program 8 (id=2733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9fa04ac500025552d86563ddcd", &(0x7f0000000680), 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f00000014c0), &(0x7f0000000040)=""/30}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a030000000000000000000082000000000000632d11f83a18018a196fb9d065e08bf5a878f611bfffdeb52d3a6637771c6501389d70a66eb5531553b2a3b9cb58ae1562067e521b908d927fcfd621d25e70c741608f7cce72529e22081f300ccb5a1189b5c017799fea881ecd21abea4d8fb5772b404671386b412833dc3f71f9dbdebf9fb845c78b34ad6bff24ab5cbbda20a53b111b34c6b3629fa349237a48f7a39017ad787caa844d4b96fcf6455ee56b190e8c5b3fca133df8ded2d107fbd4652321e6e6cfe1881200000000fc0fb471b1062572eb248d87a10e08d6fcfdfe"], &(0x7f00000000c0)=""/196, 0x32, 0xc4, 0x1}, 0x28) 4m47.781317454s ago: executing program 8 (id=2741): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) gettid() bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 4m47.469435584s ago: executing program 8 (id=2744): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) 4m47.077107639s ago: executing program 8 (id=2749): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x54a, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 4m46.214611802s ago: executing program 8 (id=2753): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 4m45.684498158s ago: executing program 8 (id=2760): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x27) 4m30.487902059s ago: executing program 36 (id=2760): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x27) 1m52.946464715s ago: executing program 5 (id=4402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffef, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 1m52.685417083s ago: executing program 5 (id=4406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1m52.259608637s ago: executing program 5 (id=4411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4040852}, 0x40) 1m52.015094127s ago: executing program 5 (id=4415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x58, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="22d8dd48cf8d"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cae131b1a2"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) 1m51.758187883s ago: executing program 5 (id=4417): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) 1m51.354658609s ago: executing program 5 (id=4420): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) 1m36.231937265s ago: executing program 37 (id=4420): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) 3.130223388s ago: executing program 9 (id=5372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x28}}, 0x0) 2.752848841s ago: executing program 9 (id=5376): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 2.686108266s ago: executing program 1 (id=5379): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.451449695s ago: executing program 7 (id=5381): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) 2.394194841s ago: executing program 0 (id=5382): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) 2.363335081s ago: executing program 3 (id=5383): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x40, 0x0, 0x3b}, {0x6, 0xfc, 0x0, 0x1000000}]}) write(r0, &(0x7f00000001c0)='\x00\x00', 0x2) 2.314753305s ago: executing program 1 (id=5384): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x33680}], 0x1}, 0x8054) 2.223346794s ago: executing program 9 (id=5385): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.164418247s ago: executing program 0 (id=5386): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1000, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) 2.031955336s ago: executing program 7 (id=5387): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.9485613s ago: executing program 3 (id=5388): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 1.715401331s ago: executing program 2 (id=5389): r0 = socket$inet(0x2, 0x801, 0x100) listen(r0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1.482670408s ago: executing program 3 (id=5390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x200008d0) 1.435035954s ago: executing program 2 (id=5391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010126d24e17292a87948e00000008000300", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 1.387606594s ago: executing program 7 (id=5392): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1e) 1.238833954s ago: executing program 0 (id=5393): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.194654258s ago: executing program 1 (id=5394): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$TUNSETLINK(r0, 0x400454cd, 0x205) 1.063232333s ago: executing program 2 (id=5395): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.062891245s ago: executing program 3 (id=5396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001380)={0x4c, r1, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="9be3c04fbfab", {0xb, 0x5}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x0, 0x3, 0x65, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}}, 0x0) 1.004000062s ago: executing program 7 (id=5397): mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 863.69687ms ago: executing program 0 (id=5398): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 757.46496ms ago: executing program 1 (id=5399): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) 723.728998ms ago: executing program 3 (id=5400): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x94) 680.975309ms ago: executing program 9 (id=5401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 621.844651ms ago: executing program 7 (id=5402): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) unshare(0x22020600) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 584.047409ms ago: executing program 2 (id=5403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x80) 500.597002ms ago: executing program 0 (id=5404): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYyf287MTxzbh87Gu3/3zu+f8zrv33SNfv/dO+CZrNpvVdI/LF36zncmy+5wd/+rTzz4upx/dyJ705JXii6Q/ST3pTXIoydj43Ox0l4KuJ5eS3EyKJHvTetyQSyl+ln3LyzdT/Kqqt3ThHhvGhjT5Vtvp8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHajYmx8eHikyNTkzIU36p1VQ4B32lhbLu/LatTv4suu9SZFOaW/f2mo70MHlzc/Wf46mqdbS09XA5KnPx898uSB157orS3tv07Cm/H39mDIm97xvQ8/uv7W4uKVdzts72k3574z3KXONWYm52cnp8+ca9Qn52frp0+dGj5xfmK+PjE51Zi/OL/QmK6PzTXOLMzO1QfHXqyPnD59st4Yujh7Yebc+NBUY2nlq/8+Ojx8qv760P80zszNz86ceH1ofuz85NTU5My5KqbcXMa8Wp6I/z25UF9onJmu169eW7xy8o6M1niqy6CRbi0pg0a7BY0Oj46OjIyOjpx65fQrrw4P9y6v6Em1YvguWbXL7ZM2+x7e8+Jb6JPaBoLKi2N9C6/ecH9q7f4/U5nMTC7kjdTX/BnLeOYym+kO29uW+v9jJxrr1ruy/1/q5Q8tb34qVf//bGvp2U79f4dctu/nvXyYj3I9b2Uxi7mSd+/YuvceSmw2127Vr//Qei52usV3/pxLIzOZzHxmM5npnKnW1Ntr6jmdUzmV4byZ85nIfOqZyGSm0sh8LmY+C2lUZ9RY5tLImSz0tto4mLG8mHpGcjqnczL1NDKUi5nNhczkXMZzpirlaq5Vz/vJdXK8HTSykaDRdYJGy5N77f6/vWIT/T/fUlt9CYd71mz3/3vuWl9bHTo4tl1JAQAAAFvqX3+f/Qcf/92fk748U91jBwAAAB421dv1ni4f+sq5Z1JMTE41hlcHvr/9uQEAAABbo6g+Y1ckGcjh1tzSJ6HWuAkAAAAAfBNV//9/tnwYKOcOp/D3PwAAADxsun/HfteI4njquVFuql9uRV5uR6T6VEExMDE51Rgam516bSTPV98yUH3SYFVpPTmQVB8/eClHWlFHBlqPA8sllnX2l1EjQ6+NpD9H2w0ZfK58eG5wjcjRMvKlvNCKfGEpsj+rIk+WkQDwsDu6Tn+80f7/pRxvRRx/qvr69t6n1uiDh1s96w93qJ0AwLLuY+x0jSj+Y2n4nzX+/i8jenL1cOstBUN5O+9kMZdzvPq0QfWOg3apuVlkudSBFW9DON7lbsDAihFeji/dDzi8b837AQMrBno5vuqOQKfYk2s+d8WWHw0A2B5HV/XD6/T/zWZrbtX9//X//h/wlkIA2FVuj2D/AGfurrNvZ5oKALR17qXX0fMAEwIAAAAAAAAAAAAAAAAAAAAAAAAAAICHwIP8/v9akgc7ssB9zNxIsgvS2OaZv7QP+6pN7fU3djzDFTN7c//l9G/LCBcf/t+eXXyq39vMDl6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DZF0rPW+lqyN+kdTnJi+7N6cG7sdAI7rLiVW/kg+3c6DwAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh037+/9raT0+0lqV3lpyLMmlJP+70zlupVs7ncDWGig2ucOK7/8vj3maRXpbhz1F39j43Ox0VeLecvtXn372cTndS2JlAWUNdwwu0a6h816PVXsNjF957/r33/leffxsleTZhYmp8elzc/+1HPhk8XlST2taspTvD4r2WXxnyz8vW9q93rKWiare8dX1/stae9+u99hvf965bcuW07i2eGW0rGmh8cbC+9+99sGKoMdzJHluMBm8s6bvlFOHmo6kb716i6+LnxT788tcqo5/mUbRLMpD9GiyJ7V/unpt8crQ2+8sXu6Q04EcTnI56d94TodXH4kl1VlX6ytrHa6Cyl8Hu5S3rkd69jebrRJHOrThseqUGdhUG+qd21Dp8ry323iyQ0ZP5PlNH+nnu9TY9rdmS2up+Lr4U3E+f8yPV4z/USuP/7Fs5NVZxlSRK86Uzm0+ttzy0ZUb3rw7suOrkgfgp/n//Oft419bcf1vH6vtuR6tqPGBvS6KVi/UVs0fvKtHal99OmXZzvNgK6pDnv+cl1fv1yXPl7tcUbbo9X+n4uvik2Iwf80N4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7X5H0rLW+lhxLciDJo+VyPWluRX21gWIritmgPavW3NjG2neP2u254lZu5YPs39F0AAAAAAAAANgyZ8e/+vSzj8up+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVnO928uh3K/7FtevlkuHdp8WwCAjflHAAAA///nD22t") r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 459.253919ms ago: executing program 1 (id=5405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x58, r1, 0x405, 0x70bd23, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}}, 0x4040084) 363.556734ms ago: executing program 9 (id=5406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 312.241643ms ago: executing program 2 (id=5407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001400)=""/18, 0x1c) 311.308142ms ago: executing program 7 (id=5408): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/75, 0x4b}], 0x1}, 0x5}], 0x1, 0x40000022, 0x0) 168.039853ms ago: executing program 1 (id=5409): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffbffffff7, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000000000002, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8001, 0xffffffff9673e35d]}}) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 73.656193ms ago: executing program 0 (id=5410): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x0, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}}, 0x0) 15.586661ms ago: executing program 9 (id=5411): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 13.940968ms ago: executing program 3 (id=5412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) 0s ago: executing program 2 (id=5413): r0 = getpid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.2.4301'. [ 591.761729][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1146.tmp-b7:9' failed: Read-only file system [ 591.867352][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1142.tmp-b7:2' failed: Read-only file system [ 591.994913][T17302] loop2: detected capacity change from 0 to 128 [ 592.069762][T17302] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.096880][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1145.tmp-b7:3' failed: Read-only file system [ 592.166701][T17302] ext4 filesystem being mounted at /739/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.218742][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1140.tmp-b7:1' failed: Read-only file system [ 592.224753][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1147.tmp-b7:2' failed: Read-only file system [ 592.292350][ T6370] udevd[6370]: symlink '../../loop9' '/dev/disk/by-diskseq/1146.tmp-b7:9' failed: Read-only file system [ 592.481730][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.208034][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 593.234329][T17338] netlink: 'syz.1.4321': attribute type 30 has an invalid length. [ 593.242185][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4321'. [ 593.316494][T17332] loop2: detected capacity change from 0 to 2048 [ 593.357752][T17332] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 594.043749][ T5899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 594.192250][T17361] loop2: detected capacity change from 0 to 512 [ 594.226832][T17361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.233770][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 594.248914][T17361] ext4 filesystem being mounted at /744/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.271972][T17341] loop9: detected capacity change from 0 to 32768 [ 594.310666][T17341] [ 594.310666][T17341] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 594.310666][T17341] [ 594.343716][ T5899] usb 2-1: config index 0 descriptor too short (expected 50325, got 36) [ 594.407790][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.447797][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.459720][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.480851][T17341] ERROR: (device loop9): diWrite: ixpxd invalid [ 594.480851][T17341] [ 594.491180][ T5899] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 594.515980][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.547541][T17341] ERROR: (device loop9): remounting filesystem as read-only [ 594.584577][ T5899] usb 2-1: config 0 descriptor?? [ 594.611232][T17341] ERROR: (device loop9): txAbort: [ 594.611232][T17341] [ 594.669616][T17341] non-latin1 character 0x3ff found in JFS file name [ 594.732933][T17341] mount with iocharset=utf8 to access [ 595.045855][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.053178][T17381] IPv6: NLM_F_CREATE should be set when creating new route [ 595.060504][T17381] IPv6: NLM_F_CREATE should be set when creating new route [ 595.069271][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.083185][ T5899] hid-steam 0003:28DE:1102.0056: unknown main item tag 0x1 [ 595.137000][ T5899] hid-steam 0003:28DE:1102.0056: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 595.343390][ T913] usb 2-1: USB disconnect, device number 22 [ 595.403928][T17386] fido_id[17386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 596.337176][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1145.tmp-b7:3' failed: Read-only file system [ 596.575636][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 596.653425][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1145.tmp-b7:3' failed: Read-only file system [ 596.797773][T17432] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4361'. [ 596.871936][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 596.901435][T17430] loop3: detected capacity change from 0 to 4096 [ 596.931312][T17430] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 596.998322][T17430] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 597.031285][T17437] erspan0: entered promiscuous mode [ 597.239166][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 597.299328][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1155.tmp-b7:3' failed: Read-only file system [ 597.336852][ T6370] udevd[6370]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 597.385842][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 597.435151][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:3' failed: Read-only file system [ 597.531478][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 598.614095][T17481] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4384'. [ 598.817266][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 598.817310][ T30] audit: type=1326 audit(1772026027.716:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17457 comm="syz.7.4373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334599c629 code=0x7fc00000 [ 599.012781][T17476] loop1: detected capacity change from 0 to 32768 [ 599.030326][T17491] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4388'. [ 599.071060][ T6202] loop1: p9 p11 p16 [ 599.175236][T17476] loop1: p9 p11 p16 [ 600.368695][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4405'. [ 600.853583][ T29] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 600.856521][T17494] kexec: Could not allocate control_code_buffer [ 601.056733][ T29] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 601.087810][ T29] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 601.123548][ T29] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 601.163368][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.383256][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1159.tmp-b7:3' failed: Read-only file system [ 601.476596][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 601.648192][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 601.735738][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1158.tmp-b7:1' failed: Read-only file system [ 601.880290][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 602.127848][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1158.tmp-b7:1' failed: Read-only file system [ 602.229633][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 602.279001][ T29] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 602.306745][ T29] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input32 [ 602.428193][ T29] input: failed to attach handler kbd to device input32, error: -5 [ 602.468489][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1158.tmp-b7:1' failed: Read-only file system [ 602.523195][ T29] usb 3-1: USB disconnect, device number 36 [ 602.669311][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1154.tmp-b7:9' failed: Read-only file system [ 602.908793][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 603.129046][T17582] loop9: detected capacity change from 0 to 1024 [ 603.203010][T17582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 603.229085][T17582] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.242439][T17585] loop1: detected capacity change from 0 to 512 [ 603.294711][T17585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 603.356675][T17582] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm syz.9.4430: lblock 3 mapped to illegal pblock 3 (length 1) [ 603.388023][T17585] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 603.396395][T17585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 603.407967][T17585] EXT4-fs (loop1): orphan cleanup on readonly fs [ 603.415926][T17585] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 603.427541][T17585] EXT4-fs warning (device loop1): ext4_enable_quotas:7232: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 603.442627][T17585] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 603.444252][T17582] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.4430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 603.471557][T17585] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.4432: bg 0: block 40: padding at end of block bitmap is not set [ 603.499256][T17585] loop1: lost filesystem error report for type 5 error -117 [ 603.509278][T17585] EXT4-fs (loop1): Remounting filesystem read-only [ 603.516794][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 603.516830][ C0] EXT4-fs (loop1): initial error at time 1772026032: ext4_validate_block_bitmap:440 [ 603.516875][ C0] EXT4-fs (loop1): last error at time 1772026032: ext4_validate_block_bitmap:440 [ 603.596095][T17585] EXT4-fs (loop1): 1 truncate cleaned up [ 603.626250][T17585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.665150][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 604.017772][T13524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.143684][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'. [ 604.201977][T17598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4437'. [ 604.231357][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'. [ 604.353152][T17598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4437'. [ 604.967018][T17596] loop9: detected capacity change from 0 to 32768 [ 605.065705][T17614] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4442'. [ 605.264848][ T36] wlan1: Trigger new scan to find an IBSS to join [ 605.710187][T17628] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 605.814223][ T29] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 605.993745][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 606.032149][ T29] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 606.051514][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.070095][ T29] usb 2-1: config 0 descriptor?? [ 606.240661][T17640] netlink: 808 bytes leftover after parsing attributes in process `syz.9.4454'. [ 606.335591][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 606.368847][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 606.410199][T17644] loop3: detected capacity change from 0 to 2048 [ 606.413099][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1165.tmp-b7:9' failed: Read-only file system [ 606.435597][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 606.480403][ T29] usb 2-1: media controller created [ 606.518060][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 606.518431][T17644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.541471][ T29] az6027: usb out operation failed. (-71) [ 606.547782][ T29] az6027: usb out operation failed. (-71) [ 606.554037][ T29] stb0899_attach: Driver disabled by Kconfig [ 606.560036][ T29] az6027: no front-end attached [ 606.560036][ T29] [ 606.569584][ T29] az6027: usb out operation failed. (-71) [ 606.589015][ T5844] udevd[5844]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 606.600308][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 606.624067][T17644] ext4 filesystem being mounted at /729/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.660478][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1167.tmp-b7:3' failed: Read-only file system [ 606.675916][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 606.705517][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1166.tmp-b7:9' failed: Read-only file system [ 606.741591][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 606.755801][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 606.767580][T17653] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.772311][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 606.820278][ T29] usb 2-1: USB disconnect, device number 23 [ 606.901705][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1167.tmp-b7:3' failed: Read-only file system [ 606.976130][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 607.042441][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1166.tmp-b7:9' failed: Read-only file system [ 607.064404][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 607.073152][ T5835] udevd[5835]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 607.112795][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.250393][ T6202] udevd[6202]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 607.638429][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4465'. [ 609.116714][ T5836] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 610.871221][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4495'. [ 611.078334][T17715] loop9: detected capacity change from 0 to 131072 [ 611.088493][T17715] F2FS-fs (loop9): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 611.097166][T17715] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 611.113196][T17715] F2FS-fs (loop9): invalid crc value [ 611.257130][T17715] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 611.274408][T17715] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 611.281528][T17715] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 611.314286][T17715] F2FS-fs (loop9): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366] [ 611.618954][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1169.tmp-b7:9' failed: Read-only file system [ 611.670464][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 611.695284][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:9' failed: Read-only file system [ 611.726775][ T6370] udevd[6370]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 611.869818][T17752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.965093][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1153.tmp-b7:2' failed: Read-only file system [ 612.015772][T17754] netlink: 'syz.9.4500': attribute type 1 has an invalid length. [ 612.019762][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1169.tmp-b7:9' failed: Read-only file system [ 612.056297][T17754] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4500'. [ 612.103861][T17754] netlink: 'syz.9.4500': attribute type 1 has an invalid length. [ 612.105928][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 612.125655][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:9' failed: Read-only file system [ 612.133741][T17754] netlink: 'syz.9.4500': attribute type 8 has an invalid length. [ 612.183378][T17754] netlink: 582 bytes leftover after parsing attributes in process `syz.9.4500'. [ 612.209366][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4506'. [ 612.220122][T17754] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4500'. [ 612.319809][T17757] loop2: detected capacity change from 0 to 4096 [ 612.480749][ T6370] udevd[6370]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 612.758834][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1171.tmp-b7:2' failed: Read-only file system [ 613.183659][ T5836] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 613.193955][ T5836] Bluetooth: hci5: Injecting HCI hardware error event [ 613.203590][ T5836] Bluetooth: hci5: hardware error 0x00 [ 613.837770][T17774] loop2: detected capacity change from 0 to 512 [ 613.868694][T17774] EXT4-fs: Ignoring removed mblk_io_submit option [ 613.928805][T17779] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4514'. [ 613.969591][T17774] EXT4-fs (loop2): orphan cleanup on readonly fs [ 614.045567][T17774] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 614.093810][T17774] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #13: comm syz.2.4511: attempt to clear invalid blocks 2 len 1 [ 614.157413][T17774] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 614.163498][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 614.179110][ C0] EXT4-fs (loop2): initial error at time 1772026043: ext4_clear_blocks:874: inode 13 [ 614.199371][ C0] EXT4-fs (loop2): last error at time 1772026043: ext4_clear_blocks:874: inode 13 [ 614.212307][T17774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 614.238883][T17774] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.4511: invalid indirect mapped block 1819239214 (level 0) [ 614.256564][T17774] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 614.258011][T17774] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.4511: invalid indirect mapped block 1819239214 (level 1) [ 614.320686][T17774] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 614.320846][ T5838] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 614.322182][T17774] EXT4-fs (loop2): 1 truncate cleaned up [ 614.370057][T17774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.506454][T17787] bridge0: entered promiscuous mode [ 614.512101][T17787] macvlan4: entered promiscuous mode [ 614.656088][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.844151][ T5926] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 615.033825][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 615.049941][ T5926] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 615.083656][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.132469][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 615.153029][ T5926] pvrusb2: ********** [ 615.168547][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 615.193640][ T5926] pvrusb2: Important functionality might not be entirely working. [ 615.212458][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 615.238670][ T5926] pvrusb2: ********** [ 615.337640][ T2339] pvrusb2: Invalid write control endpoint [ 615.383639][ T5913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 615.442388][ T2339] pvrusb2: Invalid write control endpoint [ 615.451349][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 615.468716][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 615.480243][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 615.496248][ T2339] pvrusb2: Device being rendered inoperable [ 615.506593][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 615.518604][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 615.528174][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 615.543709][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 615.578656][ T2339] pvrusb2: Attached sub-driver cx25840 [ 615.587536][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 615.600432][ T913] usb 2-1: USB disconnect, device number 24 [ 615.608040][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 615.616168][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 615.626087][ T5913] usb 4-1: no configurations [ 615.636447][ T5913] usb 4-1: can't read configurations, error -22 [ 616.314301][ T30] audit: type=1326 audit(1772026045.236:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 616.655387][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 616.838310][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 616.902971][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 617.040201][ T30] audit: type=1326 audit(1772026045.956:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.150803][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.164137][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.172427][ T30] audit: type=1326 audit(1772026045.956:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.216091][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.238881][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 617.253034][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 617.267669][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.292460][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.313246][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 617.323748][ T30] audit: type=1326 audit(1772026045.956:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.351156][ T30] audit: type=1326 audit(1772026045.956:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.374465][ T30] audit: type=1326 audit(1772026045.956:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.408644][ T30] audit: type=1326 audit(1772026045.956:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.431557][ T30] audit: type=1326 audit(1772026045.956:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.454804][ T30] audit: type=1326 audit(1772026045.956:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.477427][ T30] audit: type=1326 audit(1772026045.956:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.3.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74819c629 code=0x7fc00000 [ 617.636984][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 617.752180][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 617.839220][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1168.tmp-b7:3' failed: Read-only file system [ 618.110178][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 618.150027][T17828] chnl_net:caif_netlink_parms(): no params data found [ 618.563620][T17853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4545'. [ 618.604051][T17853] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4545'. [ 618.613041][T17853] netlink: 'syz.2.4545': attribute type 5 has an invalid length. [ 618.624957][T17853] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4545'. [ 619.021570][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.404485][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.423719][ T5838] Bluetooth: hci1: command tx timeout [ 619.855258][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.067352][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.118670][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.134163][T17828] bridge_slave_0: entered allmulticast mode [ 620.154276][T17828] bridge_slave_0: entered promiscuous mode [ 620.357190][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 620.405945][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.451671][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.478133][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.513732][T17828] bridge_slave_1: entered allmulticast mode [ 620.542236][T17828] bridge_slave_1: entered promiscuous mode [ 620.747402][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.831424][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.953046][T17881] loop3: detected capacity change from 0 to 32768 [ 621.043280][T17828] team0: Port device team_slave_0 added [ 621.222742][T17828] team0: Port device team_slave_1 added [ 621.360277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 621.513602][ T5838] Bluetooth: hci1: command tx timeout [ 621.528978][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.544556][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.596182][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.644097][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.651079][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.728542][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 621.733715][ T6370] udevd[6370]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 621.746514][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 621.783152][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.826139][ T36] bridge_slave_1: left allmulticast mode [ 621.832435][ T36] bridge_slave_1: left promiscuous mode [ 621.847838][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.886307][ T36] bridge_slave_0: left allmulticast mode [ 621.910415][ T36] bridge_slave_0: left promiscuous mode [ 621.923119][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 621.930608][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.042379][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1175.tmp-b7:3' failed: Read-only file system [ 622.070051][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1175.tmp-b7:3' failed: Read-only file system [ 622.226798][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 622.261091][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1176.tmp-b7:3' failed: Read-only file system [ 622.371324][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1176.tmp-b7:3' failed: Read-only file system [ 622.436456][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 622.709248][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.733182][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.747006][ T36] bond0 (unregistering): Released all slaves [ 623.000383][T17828] hsr_slave_0: entered promiscuous mode [ 623.016419][ T36] IPVS: stopping backup sync thread 9409 ... [ 623.057271][T17828] hsr_slave_1: entered promiscuous mode [ 623.088139][T17828] debugfs: 'hsr0' already exists in 'hsr' [ 623.106656][T17828] Cannot create hsr debugfs directory [ 623.205379][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4584'. [ 623.583590][ T5838] Bluetooth: hci1: command tx timeout [ 623.754093][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.760529][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.821278][ T36] hsr_slave_0: left promiscuous mode [ 623.849569][ T36] hsr_slave_1: left promiscuous mode [ 623.871159][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.890996][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.953290][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.998772][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.091764][T17974] loop8: detected capacity change from 0 to 7 [ 624.124865][ T36] veth1_macvtap: left promiscuous mode [ 624.131609][ C0] blk_print_req_error: 24 callbacks suppressed [ 624.131637][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.147463][ C0] buffer_io_error: 23 callbacks suppressed [ 624.147487][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.171433][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.181149][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.189244][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.197198][ T36] veth0_macvtap: left promiscuous mode [ 624.198917][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.231589][ T36] veth1_vlan: left promiscuous mode [ 624.237015][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.246653][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.263595][ T36] veth0_vlan: left promiscuous mode [ 624.273293][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.282936][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.291042][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.300705][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.310759][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.320470][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.328720][T17974] ldm_validate_partition_table(): Disk read failed. [ 624.338180][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.347847][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.356874][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.366541][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.385510][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.395194][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 624.409141][T17974] Dev loop8: unable to read RDB block 0 [ 624.418873][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4596'. [ 624.445194][T17978] netlink: 'syz.9.4596': attribute type 21 has an invalid length. [ 624.458547][T17974] loop8: unable to read partition table [ 624.464675][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4595'. [ 624.490904][T17974] loop8: partition table beyond EOD, truncated [ 624.507469][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4595'. [ 624.525698][T17974] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 624.840966][ T36] pimreg3 (unregistering): left allmulticast mode [ 625.516325][T18004] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4606'. [ 625.576210][ T36] team0 (unregistering): Port device team_slave_1 removed [ 625.625706][ T36] team0 (unregistering): Port device team_slave_0 removed [ 625.666093][ T5838] Bluetooth: hci1: command tx timeout [ 626.713962][ T5926] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 626.812373][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 626.892044][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 626.919336][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 626.940236][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.959148][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 626.991481][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.013712][ T5926] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 627.036476][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.065405][ T5926] usb 4-1: config 0 descriptor?? [ 627.090425][ T5926] hub 4-1:0.0: USB hub found [ 627.137262][T18041] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4622'. [ 627.239829][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 627.291828][ T5926] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 627.392956][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 627.497182][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 627.520536][ T36] IPVS: stop unused estimator thread 0... [ 627.630156][T18060] input: syz1 as /devices/virtual/input/input34 [ 627.680874][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 627.739639][ T5926] hid-generic 0003:046D:C31C.0057: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 627.914306][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 628.098411][ T6370] udevd[6370]: symlink '../../loop9' '/dev/disk/by-diskseq/1170.tmp-b7:9' failed: Read-only file system [ 628.140007][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system [ 628.174967][ T24] usb 4-1: USB disconnect, device number 36 [ 628.215901][T18074] mkiss: ax0: crc mode is auto. [ 628.286425][T18070] fido_id[18070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 628.392680][T17828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.458092][T17828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.526488][T17828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.601063][T17828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.984524][T18101] loop1: detected capacity change from 0 to 256 [ 629.019029][T18101] exfat: Deprecated parameter 'namecase' [ 629.062064][T18101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 629.081584][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.190491][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.296858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.304094][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.366195][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.373400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.780736][T18119] loop1: detected capacity change from 0 to 512 [ 629.832695][T18119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 629.908677][T18119] EXT4-fs (loop1): 1 truncate cleaned up [ 629.927066][T18119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.053703][ T29] kernel write not supported for file /uhid (pid: 29 comm: kworker/1:1) [ 630.057802][T18129] input: syz1 as /devices/virtual/input/input35 [ 630.199911][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4652'. [ 630.297105][T13524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.641757][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.796140][T18149] loop1: detected capacity change from 0 to 2048 [ 630.817583][T17828] veth0_vlan: entered promiscuous mode [ 630.841647][T17828] veth1_vlan: entered promiscuous mode [ 630.886236][ T6202] loop1: p3 < > p4 < > [ 630.896505][ T6202] loop1: partition table partially beyond EOD, truncated [ 630.921143][ T6202] loop1: p3 start 4284289 is beyond EOD, truncated [ 630.970427][T18149] loop1: p3 < > p4 < > [ 630.979008][T17828] veth0_macvtap: entered promiscuous mode [ 630.985785][T18149] loop1: partition table partially beyond EOD, truncated [ 631.015902][T17828] veth1_macvtap: entered promiscuous mode [ 631.023924][T18149] loop1: p3 start 4284289 is beyond EOD, truncated [ 631.109571][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.152209][T18155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4657'. [ 631.211540][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.289981][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.326938][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.400283][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.440490][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.592092][T18135] loop9: detected capacity change from 0 to 32768 [ 631.603655][ T5926] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 631.663563][T18135] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4651 (18135) [ 631.696551][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4663'. [ 631.736618][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4663'. [ 631.754784][T18135] BTRFS info (device loop9): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 631.773560][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 631.792293][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 631.804085][T18135] BTRFS info (device loop9): using blake2b checksum algorithm [ 631.819762][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1176.tmp-b7:3' failed: Read-only file system [ 631.828451][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.852907][ T237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.906645][ T237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.934004][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 631.977585][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.993721][ T5926] usb 2-1: Product: syz [ 631.998026][ T5926] usb 2-1: Manufacturer: syz [ 632.002636][ T5926] usb 2-1: SerialNumber: syz [ 632.021279][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1185.tmp-b7:9' failed: Read-only file system [ 632.036649][ T5926] usb 2-1: config 0 descriptor?? [ 632.048292][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-uuid/c6b85f58-0c7e-41ca-a553-c8d9f94f6663.tmp-b7:9' failed: Read-only file system [ 632.078794][ T5926] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.092739][T18135] BTRFS info (device loop9): enabling ssd optimizations [ 632.099025][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 632.114872][ T5926] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 632.134935][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.173728][T18135] BTRFS info (device loop9): turning on async discard [ 632.180858][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.243553][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 632.243581][ T30] audit: type=1326 audit(1772026061.156:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18192 comm="syz.2.4666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dfab9c629 code=0x0 [ 632.256199][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1176.tmp-b7:3' failed: Read-only file system [ 632.283953][T18135] BTRFS info (device loop9): enabling free space tree [ 632.394354][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4667'. [ 632.430714][T18197] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4667'. [ 632.467211][ T8872] udevd[8872]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 632.489313][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4667'. [ 632.520207][ T8872] udevd[8872]: symlink '../../loop0' '/dev/disk/by-diskseq/647.tmp-b7:0' failed: Read-only file system [ 632.690693][ T8872] udevd[8872]: symlink '../../loop0' '/dev/disk/by-diskseq/647.tmp-b7:0' failed: Read-only file system [ 632.702145][ T6370] udevd[6370]: symlink '../../loop3' '/dev/disk/by-diskseq/1176.tmp-b7:3' failed: Read-only file system [ 632.755552][ T5926] em28xx 2-1:0.0: chip ID is em2874 [ 632.809490][T12725] BTRFS info (device loop9): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 632.850593][ T8872] udevd[8872]: symlink '../../loop0' '/dev/disk/by-diskseq/1186.tmp-b7:0' failed: Read-only file system [ 633.075109][ T5899] usb 2-1: USB disconnect, device number 25 [ 633.083050][ T5899] em28xx 2-1:0.0: Disconnecting em28xx [ 633.201402][ T5899] em28xx 2-1:0.0: Freeing device [ 634.597290][T18203] loop0: detected capacity change from 0 to 32768 [ 635.848448][ T30] audit: type=1326 audit(1772026064.756:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.1.4683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7dcf9c629 code=0x0 [ 636.247030][T18262] macvtap1: entered promiscuous mode [ 636.277855][T18262] macvtap1: entered allmulticast mode [ 636.317507][T18262] dummy0: entered promiscuous mode [ 636.337141][T18262] dummy0: entered allmulticast mode [ 636.368379][T18262] team0: Device macvtap1 failed to register rx_handler [ 636.392570][T18266] xt_hashlimit: size too large, truncated to 1048576 [ 636.409194][T18262] dummy0: left allmulticast mode [ 636.414677][T18262] dummy0: left promiscuous mode [ 636.473308][T18268] loop3: detected capacity change from 0 to 256 [ 636.896108][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1184.tmp-b7:1' failed: Read-only file system [ 636.910697][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1188.tmp-b7:9' failed: Read-only file system [ 636.936980][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1190.tmp-b7:3' failed: Read-only file system [ 636.959728][T18278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4695'. [ 637.004207][T18278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4695'. [ 637.036653][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 637.213850][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 637.287386][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1188.tmp-b7:9' failed: Read-only file system [ 637.370258][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1174.tmp-b7:2' failed: Read-only file system [ 637.388441][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1184.tmp-b7:1' failed: Read-only file system [ 637.513793][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1189.tmp-b7:0' failed: Read-only file system [ 637.592979][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1188.tmp-b7:9' failed: Read-only file system [ 637.774590][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4705'. [ 637.967114][T18319] Attempt to restore checkpoint with obsolete wellknown handles [ 639.012190][T18350] blkio.reset_stats is deprecated [ 639.047174][T18353] batman_adv: batadv0: Adding interface: ipvlan2 [ 639.083516][T18353] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.189446][T18353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.230485][T18353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.251335][T18353] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 639.318866][T18361] loop9: detected capacity change from 0 to 1024 [ 639.362117][T18361] EXT4-fs: Ignoring removed bh option [ 639.372110][T18361] EXT4-fs: Ignoring removed nobh option [ 639.476146][T18361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.526287][T18366] loop2: detected capacity change from 0 to 1024 [ 639.534283][T18366] EXT4-fs: inline encryption not supported [ 639.565870][T18366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.624706][T18361] EXT4-fs error (device loop9): mb_free_blocks:2044: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 640.032324][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4729'. [ 640.052893][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.061799][T18385] loop1: detected capacity change from 0 to 256 [ 640.102971][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.112656][T18385] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 640.291814][T18340] loop0: detected capacity change from 0 to 32768 [ 640.354827][T18340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4717 (18340) [ 640.450652][T18340] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 640.513397][T18340] BTRFS info (device loop0): using crc32c checksum algorithm [ 640.583625][T18340] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 640.895522][T18388] loop2: detected capacity change from 0 to 32768 [ 640.915911][T18388] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 8e5acd05-2e54-4003-9f28-6eae57fe749e [ 640.930451][T18388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4732 (18388) [ 640.952611][T18340] BTRFS info (device loop0): rebuilding free space tree [ 641.006707][T18388] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 641.086991][T18388] BTRFS info (device loop2): using crc32c checksum algorithm [ 641.107125][T18340] BTRFS info (device loop0): disabling free space tree [ 641.165851][T18340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 641.213672][T18340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 641.334720][T18340] BTRFS info (device loop0): enabling ssd optimizations [ 641.341746][T18340] BTRFS info (device loop0): turning off barriers [ 641.348582][T18340] BTRFS info (device loop0): enabling disk space caching [ 641.356258][T18340] BTRFS info (device loop0): force clearing of disk cache [ 641.364499][T18340] BTRFS info (device loop0): force lzo compression, level 1 [ 641.371879][T18340] BTRFS info (device loop0): max_inline set to 0 [ 641.548144][T18388] BTRFS info (device loop2): enabling ssd optimizations [ 641.593552][T18388] BTRFS info (device loop2): turning on async discard [ 641.643532][T18388] BTRFS info (device loop2): enabling free space tree [ 641.734255][ T30] audit: type=1800 audit(1772026070.646:195): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4717" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 641.868354][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4743'. [ 641.911775][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 641.952812][T17828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 642.148621][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1198.tmp-b7:1' failed: Read-only file system [ 642.323754][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 642.387059][ T5832] BTRFS info (device loop2): last unmount of filesystem 8e5acd05-2e54-4003-9f28-6eae57fe749e [ 642.471186][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1198.tmp-b7:1' failed: Read-only file system [ 642.552512][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1197.tmp-b7:0' failed: Read-only file system [ 642.607904][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1196.tmp-b7:9' failed: Read-only file system [ 642.627828][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 642.788779][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system [ 642.856967][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 642.925163][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1199.tmp-b7:2' failed: Read-only file system [ 643.796702][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4761'. [ 643.864677][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4761'. [ 644.273658][T18461] loop0: detected capacity change from 0 to 32768 [ 644.315329][T18461] (syz.0.4747,18461,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 644.463001][T18461] (syz.0.4747,18461,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 644.673806][T18461] JBD2: Ignoring recovery information on journal [ 644.805997][T18461] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 644.959719][T18532] batman_adv: batadv0: Adding interface: macsec2 [ 645.010279][T18532] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.091986][T18532] batman_adv: batadv0: Interface activated: macsec2 [ 645.632047][T17828] ocfs2: Unmounting device (7,0) on (node local) [ 646.048453][T18567] loop2: detected capacity change from 0 to 128 [ 646.269133][T18571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4786'. [ 646.505741][T18578] loop9: detected capacity change from 0 to 1024 [ 646.918186][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1206.tmp-b7:9' failed: Read-only file system [ 646.951555][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1203.tmp-b7:0' failed: Read-only file system [ 646.991645][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:9' failed: Read-only file system [ 647.016019][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1203.tmp-b7:0' failed: Read-only file system [ 647.119731][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1198.tmp-b7:1' failed: Read-only file system [ 647.149234][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4795'. [ 647.169748][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1206.tmp-b7:9' failed: Read-only file system [ 647.208905][T18591] netlink: set zone limit has 4 unknown bytes [ 647.298525][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1206.tmp-b7:9' failed: Read-only file system [ 647.345099][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 647.431666][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1205.tmp-b7:2' failed: Read-only file system [ 647.447814][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1206.tmp-b7:9' failed: Read-only file system [ 647.576040][ T30] audit: type=1326 audit(1772026076.496:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 647.660079][ T30] audit: type=1326 audit(1772026076.526:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 647.775536][ T30] audit: type=1326 audit(1772026076.536:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 647.862458][ T30] audit: type=1326 audit(1772026076.536:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 647.949003][T18622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.024311][ T30] audit: type=1326 audit(1772026076.536:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.144097][ T30] audit: type=1326 audit(1772026076.536:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.251090][ T30] audit: type=1326 audit(1772026076.536:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.347151][T18636] input: syz1 as /devices/virtual/input/input36 [ 648.353578][ T30] audit: type=1326 audit(1772026076.536:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.353668][ T30] audit: type=1326 audit(1772026076.536:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.353742][ T30] audit: type=1326 audit(1772026076.536:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17bd9c629 code=0x7ffc0000 [ 648.943919][ T5805] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 649.144225][ T5805] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.173944][ T5805] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 649.232160][ T5805] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.270841][ T5805] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 649.291401][ T5805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 649.312158][ T5805] usb 10-1: Product: syz [ 649.322271][ T5805] usb 10-1: Manufacturer: syz [ 649.332405][ T5805] usb 10-1: SerialNumber: syz [ 649.615534][ T5805] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 649.849429][ T24] usb 10-1: USB disconnect, device number 13 [ 649.875157][ T24] usblp0: removed [ 650.340657][T18690] loop0: detected capacity change from 0 to 512 [ 650.355800][T18690] ext2: Unknown parameter 'seclabel' [ 650.693676][ T5926] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 650.883626][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 650.898573][T18705] Invalid ELF header magic: != ELF [ 650.923993][ T5926] usb 1-1: config 0 interface 0 altsetting 90 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.956426][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 650.963109][ T5926] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 651.011795][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.034710][ T5926] usb 1-1: config 0 descriptor?? [ 651.426447][T18711] loop1: detected capacity change from 0 to 4096 [ 651.477695][ T5926] uclogic 0003:28BD:0074.0058: interface is invalid, ignoring [ 651.561229][T18720] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.718687][ T5899] usb 1-1: USB disconnect, device number 19 [ 652.123408][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1210.tmp-b7:1' failed: Read-only file system [ 652.220701][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1207.tmp-b7:9' failed: Read-only file system [ 652.265126][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 652.316829][ T8872] udevd[8872]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 652.595346][T18702] loop2: detected capacity change from 0 to 40427 [ 652.644485][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1210.tmp-b7:1' failed: Read-only file system [ 652.647993][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1209.tmp-b7:0' failed: Read-only file system [ 652.683959][T18702] F2FS-fs (loop2): invalid crc value [ 652.799932][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1210.tmp-b7:1' failed: Read-only file system [ 652.857917][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1207.tmp-b7:9' failed: Read-only file system [ 652.929251][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1211.tmp-b7:1' failed: Read-only file system [ 653.119810][T18702] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 653.158633][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1191.tmp-b7:3' failed: Read-only file system [ 653.244023][T18702] F2FS-fs (loop2): Start checkpoint disabled! [ 653.343790][T18702] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 653.369337][T18702] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 653.396674][T18760] loop3: detected capacity change from 0 to 512 [ 653.567465][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 653.567493][ T30] audit: type=1800 audit(1772026082.486:208): pid=18702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4835" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 653.594549][T18760] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 653.878151][ T13] kworker/u8:1: attempt to access beyond end of device [ 653.878151][ T13] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 653.940301][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.940369][ T13] Tainted: [L]=SOFTLOCKUP [ 653.940384][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.940411][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 653.940469][ T13] Call Trace: [ 653.940482][ T13] [ 653.940497][ T13] dump_stack_lvl+0x100/0x190 [ 653.940557][ T13] f2fs_handle_critical_error+0x5d7/0x970 [ 653.940618][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.940666][ T13] ? f2fs_build_fault_attr+0x53/0x280 [ 653.940730][ T13] f2fs_write_end_io+0xc3f/0xf30 [ 653.940796][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 653.940864][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.940922][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 653.940984][ T13] bio_endio+0x7a3/0x910 [ 653.941042][ T13] submit_bio_noacct+0x64c/0x2010 [ 653.941096][ T13] f2fs_submit_write_bio+0x133/0x350 [ 653.941155][ T13] __submit_merged_bio+0x331/0x7b0 [ 653.941224][ T13] __submit_merged_write_cond+0x3fe/0x510 [ 653.941297][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 653.941379][ T13] ? __pfx___might_resched+0x10/0x10 [ 653.941419][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.941477][ T13] f2fs_write_cache_pages+0x21c0/0x2720 [ 653.941546][ T13] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 653.941587][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.941645][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.941694][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.941741][ T13] ? find_held_lock+0x2b/0x80 [ 653.941786][ T13] ? nr_blockdev_pages+0xde/0x120 [ 653.941823][ T13] ? nr_blockdev_pages+0xde/0x120 [ 653.941859][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.941926][ T13] ? si_meminfo+0x118/0x230 [ 653.941985][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942033][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942150][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942198][ T13] ? rcu_is_watching+0x12/0xc0 [ 653.942246][ T13] f2fs_write_data_pages+0x799/0x16d0 [ 653.942288][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942358][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 653.942420][ T13] ? __lock_acquire+0x4a5/0x2630 [ 653.942477][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 653.942523][ T13] do_writepages+0x278/0x600 [ 653.942585][ T13] ? __pfx_do_writepages+0x10/0x10 [ 653.942642][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942696][ T13] __writeback_single_inode+0x164/0x13c0 [ 653.942743][ T13] ? find_held_lock+0x2b/0x80 [ 653.942791][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942842][ T13] ? __pfx___writeback_single_inode+0x10/0x10 [ 653.942888][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.942936][ T13] ? do_raw_spin_unlock+0x145/0x1e0 [ 653.942976][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943030][ T13] writeback_sb_inodes+0x72e/0x1bf0 [ 653.943098][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 653.943143][ T13] ? do_raw_spin_lock+0x128/0x260 [ 653.943184][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943292][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943340][ T13] ? rcu_is_watching+0x12/0xc0 [ 653.943388][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943439][ T13] ? queue_io+0x287/0x550 [ 653.943481][ T13] wb_writeback+0x1c0/0xbe0 [ 653.943522][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943584][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 653.943643][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943690][ T13] ? mark_held_locks+0x40/0x70 [ 653.943749][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.943794][ T13] wb_workfn+0x142/0xc00 [ 653.943845][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.943893][ T13] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 653.943936][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 653.943986][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944039][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944091][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944139][ T13] ? rcu_is_watching+0x12/0xc0 [ 653.944188][ T13] process_one_work+0x9d7/0x1920 [ 653.944275][ T13] ? __pfx_process_one_work+0x10/0x10 [ 653.944339][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944459][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944515][ T13] worker_thread+0x5da/0xe40 [ 653.944571][ T13] ? kthread+0x13a/0x450 [ 653.944629][ T13] ? __pfx_worker_thread+0x10/0x10 [ 653.944663][ T13] kthread+0x370/0x450 [ 653.944722][ T13] ? __pfx_kthread+0x10/0x10 [ 653.944785][ T13] ret_from_fork+0x754/0xd80 [ 653.944852][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 653.944916][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.944965][ T13] ? __switch_to+0x7b4/0x1120 [ 653.945009][ T13] ? __pfx_kthread+0x10/0x10 [ 653.945073][ T13] ret_from_fork_asm+0x1a/0x30 [ 653.945142][ T13] [ 654.520496][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 654.656316][ T237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 655.971386][T18816] loop1: detected capacity change from 0 to 256 [ 656.024969][T18816] exfat: Deprecated parameter 'utf8' [ 656.030439][T18816] exfat: Deprecated parameter 'namecase' [ 656.096172][T18818] loop2: detected capacity change from 0 to 1024 [ 656.108307][T18824] loop0: detected capacity change from 0 to 256 [ 656.127805][T18816] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 656.162980][T18824] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 656.236685][T18818] hfsplus: xattr search failed [ 656.403540][ T30] audit: type=1804 audit(1772026085.316:209): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4874" name="/newroot/23/file2/file2" dev="loop0" ino=1048873 res=1 errno=0 [ 656.974099][T18842] loop0: detected capacity change from 0 to 512 [ 657.027919][T18842] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 657.161699][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1222.tmp-b7:0' failed: Read-only file system [ 657.223195][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1207.tmp-b7:9' failed: Read-only file system [ 657.225497][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:0' failed: Read-only file system [ 657.315726][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1219.tmp-b7:2' failed: Read-only file system [ 657.332274][T18857] loop9: detected capacity change from 0 to 1024 [ 657.434465][T18857] hfsplus: bad catalog folder thread [ 657.462738][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1214.tmp-b7:3' failed: Read-only file system [ 657.476796][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1223.tmp-b7:9' failed: Read-only file system [ 657.527039][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system [ 657.527673][ T8872] udevd[8872]: symlink '../../loop0' '/dev/disk/by-diskseq/1222.tmp-b7:0' failed: Read-only file system [ 657.588530][T18865] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 657.615597][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:9' failed: Read-only file system [ 657.648951][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1222.tmp-b7:0' failed: Read-only file system [ 658.055189][T18875] loop0: detected capacity change from 0 to 2048 [ 658.138828][T18875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.204764][T18875] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.392904][T18887] netlink: 'syz.9.4899': attribute type 1 has an invalid length. [ 658.444506][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 658.606701][T17828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.647695][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 658.669174][ T5899] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 658.727097][ T5899] usb 2-1: config 0 has no interface number 0 [ 658.733331][ T5899] usb 2-1: config 0 interface 209 has no altsetting 0 [ 658.744771][T18870] loop2: detected capacity change from 0 to 32768 [ 658.751347][ T5899] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 658.761098][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.779537][ T5899] usb 2-1: Product: syz [ 658.789580][ T5899] usb 2-1: Manufacturer: syz [ 658.799738][ T5899] usb 2-1: SerialNumber: syz [ 658.847828][ T30] audit: type=1800 audit(1772026087.766:210): pid=18870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4893" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 658.908378][ T5899] usb 2-1: config 0 descriptor?? [ 659.373526][ T5899] usb 2-1: USB disconnect, device number 26 [ 659.635232][T18923] input: syz1 as /devices/virtual/input/input37 [ 659.887104][T18931] loop9: detected capacity change from 0 to 1024 [ 659.918218][T18931] EXT4-fs: inline encryption not supported [ 659.949557][T18931] EXT4-fs: Ignoring removed nobh option [ 659.978232][T18931] EXT4-fs: Ignoring removed bh option [ 660.062883][T18931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.220049][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.663814][ T5900] kernel write not supported for file /sequencer2 (pid: 5900 comm: kworker/1:5) [ 661.378670][T18965] 9p: Bad value for 'wfdno' [ 661.859295][T18942] loop1: detected capacity change from 0 to 32768 [ 661.949331][T18942] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4917 (18942) [ 662.219019][T18942] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 662.303672][T18942] BTRFS info (device loop1): using blake2b checksum algorithm [ 662.321310][T18960] loop0: detected capacity change from 0 to 131072 [ 662.331457][T18960] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 662.344338][T18960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 662.357657][T18960] F2FS-fs (loop0): invalid crc value [ 662.370909][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1229.tmp-b7:2' failed: Read-only file system [ 662.442691][T18960] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 662.459717][T18960] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 662.467132][T18960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 662.490566][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1232.tmp-b7:1' failed: Read-only file system [ 662.539994][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:1' failed: Read-only file system [ 662.590130][T18993] loop2: detected capacity change from 0 to 1024 [ 662.633115][T18942] BTRFS info (device loop1): enabling ssd optimizations [ 662.644785][T18993] EXT4-fs: inline encryption not supported [ 662.663611][T18942] BTRFS info (device loop1): turning on async discard [ 662.670515][T18942] BTRFS info (device loop1): enabling free space tree [ 662.704194][T18942] BTRFS info (device loop1): use zstd compression, level 3 [ 662.790253][T18993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.836539][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1234.tmp-b7:2' failed: Read-only file system [ 662.939585][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 663.062700][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1233.tmp-b7:0' failed: Read-only file system [ 663.155757][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-uuid/1cfefce0-b2cb-4c1d-89df-92d67f97f153.tmp-b7:0' failed: Read-only file system [ 663.183789][T18993] EXT4-fs error (device loop2): mb_free_blocks:2044: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 663.221156][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-diskseq/1234.tmp-b7:2' failed: Read-only file system [ 663.275976][T13524] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 663.290817][ T8872] udevd[8872]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 663.339367][T18993] EXT4-fs (loop2): Remounting filesystem read-only [ 663.423145][T19012] EXT4-fs (loop2): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 15; err -30 [ 663.484678][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4933'. [ 663.673883][T18169] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 663.678882][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1233.tmp-b7:0' failed: Read-only file system [ 663.710938][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.858703][T18169] usb 4-1: config index 0 descriptor too short (expected 1314, got 34) [ 663.883989][T18169] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 663.932756][T18169] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 663.997866][T18169] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.066894][T18169] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 664.126776][T18169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 664.168865][T18169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 664.206004][T18169] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.255245][T18169] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 664.279319][T18169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.329128][T18169] usb 4-1: Product: syz [ 664.333339][T18169] usb 4-1: Manufacturer: syz [ 664.370471][T18169] usb 4-1: SerialNumber: syz [ 664.412136][T18169] usb 4-1: config 0 descriptor?? [ 664.791858][ T5900] usb 4-1: USB disconnect, device number 37 [ 664.985872][T19040] loop9: detected capacity change from 0 to 32768 [ 665.097325][T19040] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 665.224352][T19040] XFS (loop9): Ending clean mount [ 665.239051][T19040] XFS (loop9): Quotacheck needed: Please wait. [ 665.379412][T19040] XFS (loop9): Quotacheck: Done. [ 665.781659][T19063] erspan0: entered promiscuous mode [ 665.968122][T12725] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 666.884020][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4959'. [ 667.193655][T18169] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 667.376055][T19101] loop0: detected capacity change from 0 to 4096 [ 667.388557][T19103] loop3: detected capacity change from 0 to 1024 [ 667.403605][T18169] usb 10-1: Using ep0 maxpacket: 16 [ 667.418624][T18169] usb 10-1: config 0 has no interfaces? [ 667.435863][T18169] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.448949][T18169] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.457270][T18169] usb 10-1: Manufacturer: syz [ 667.474749][T18169] usb 10-1: config 0 descriptor?? [ 667.558686][T19103] hfsplus: bad catalog folder thread [ 667.571212][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1241.tmp-b7:3' failed: Read-only file system [ 667.657057][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 667.677239][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1235.tmp-b7:1' failed: Read-only file system [ 667.726574][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system [ 667.751090][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1240.tmp-b7:0' failed: Read-only file system [ 667.783038][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/1237.tmp-b7:2' failed: Read-only file system [ 667.852953][T19112] loop1: detected capacity change from 0 to 128 [ 667.854249][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 667.880328][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 667.887744][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 667.916100][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1241.tmp-b7:3' failed: Read-only file system [ 667.923401][T19112] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 667.971706][T19091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 668.002553][T19116] loop3: detected capacity change from 0 to 256 [ 668.028518][ T30] audit: type=1800 audit(1772026096.946:211): pid=19112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4968" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 668.110200][ T5900] usb 10-1: USB disconnect, device number 14 [ 668.212847][T19112] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 668.401425][T19123] loop0: detected capacity change from 0 to 128 [ 668.432476][T19123] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 668.469814][T19123] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 668.794699][ T237] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 669.259857][T19134] loop9: detected capacity change from 0 to 4096 [ 669.269782][T19142] loop1: detected capacity change from 0 to 1024 [ 669.456869][T19142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.769567][T19134] ntfs3(loop9): failed to convert "0080" to cp1255 [ 669.785688][T19134] ntfs3(loop9): failed to convert name for inode 1e. [ 669.803548][T19134] ntfs3(loop9): ino=1f, mi_enum_attr [ 669.808909][T19134] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 669.915372][T13524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.932450][T19125] loop3: detected capacity change from 0 to 32768 [ 670.312687][T19164] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.351000][T19164] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.420485][T19164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.477614][T19167] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.520246][T19167] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.561869][T19167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4983'. [ 670.574049][ T913] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 670.745207][ T913] usb 10-1: Using ep0 maxpacket: 8 [ 670.767216][ T913] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 670.792785][ T913] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 670.831314][ T913] usb 10-1: Product: syz [ 670.838253][ T913] usb 10-1: Manufacturer: syz [ 670.854807][ T913] usb 10-1: SerialNumber: syz [ 670.901544][ T913] usb 10-1: config 0 descriptor?? [ 670.933066][ T913] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 671.245350][T19184] netlink: 360 bytes leftover after parsing attributes in process `syz.7.4994'. [ 671.417432][T19188] input: syz1 as /devices/virtual/input/input38 [ 671.597005][ T913] input: gspca_zc3xx as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39 [ 671.830471][ T5900] usb 10-1: USB disconnect, device number 15 [ 672.097428][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 672.110401][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 672.157733][T19206] gretap0: entered promiscuous mode [ 672.197871][T19206] gretap0: left promiscuous mode [ 672.314411][T19211] fuse: Unknown parameter 'racerPid: 0 [ 672.314411][T19211] Uid: 0 0 0 0 [ 672.314411][T19211] Gid: 0 0 0 0 [ 672.314411][T19211] FDSize: 256 [ 672.314411][T19211] Groups: 0 10 [ 672.314411][T19211] NStgid: 793 [ 672.314411][T19211] NSpid: 794 [ 672.314411][T19211] NSpgid: 793 [ 672.314411][T19211] NSsid: 0 [ 672.314411][T19211] Kthread: 0 [ 672.314411][T19211] VmPeak: 104272 kB [ 672.314411][T19211] VmSize: 104272 kB [ 672.314411][T19211] VmLck: 0 kB [ 672.314411][T19211] VmPin: 0 kB [ 672.314411][T19211] VmHWM: 24228 kB [ 672.314411][T19211] VmRSS: 24228 kB [ 672.314411][T19211] RssAnon: 1416 kB [ 672.314411][T19211] RssFile: 22812 kB [ 672.314411][T19211] RssShmem: 0 kB [ 672.314411][T19211] VmData: 36584 kB [ 672.314411][T19211] VmStk: 132 kB [ 672.314411][T19211] VmExe: 1772 kB [ 672.314411][T19211] VmLib: 8 kB [ 672.314411][T19211] VmPTE: 132 kB [ 672.314411][T19211] VmSwap: 0 kB [ 672.314411][T19211] HugetlbPages: 0 kB [ 672.314411][T19211] CoreDumping: 0 [ 672.314411][T19211] THP_enabled: 1 [ 672.314411][T19211] untag_mask: 0xffffffffffffffff [ 672.314411][T19211] Threads: 2 [ 672.314411][T19211] SigQ: 0/12960 [ 672.314411][T19211] SigPnd: 0000000000000000 [ 672.314411][T19211] ShdPnd: 0000000000000000 [ 672.314411][T19211] SigBlk: 0000000000000000 [ 672.314411][T19211] SigIgn: fffffffefffaba35 [ 672.314411][T19211] SigCgt: 0000000100010440 [ 672.314411][T19211] CapInh: 0000000000000000 [ 672.314411][T19211] CapPrm: 000001ffff77ffff [ 672.314411][T19211] CapEff: 000001ffff77ffff [ 672.314411][T19211] CapBnd: 000001ffffffffff [ 672.314411][T19211] CapAmb: 0000000000000000 [ 672.314411][T19211] NoNewPrivs: 0 [ 672.314411][T19211] Seccomp: 0 [ 672.314411][T19211] Seccomp_filters: 0 [ 672.314411][T19211] Speculation_Store_Bypass: thread vulnerable [ 672.314411][T19211] SpeculationIndirectBranch: conditional enabled [ 672.314411][T19211] Cpus_allowed: 3 [ 672.583725][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1237.tmp-b7:2' failed: Read-only file system [ 672.605299][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1249.tmp-b7:0' failed: Read-only file system [ 672.712385][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1253.tmp-b7:1' failed: Read-only file system [ 672.771486][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1237.tmp-b7:2' failed: Read-only file system [ 672.819239][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1254.tmp-b7:9' failed: Read-only file system [ 672.877539][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1249.tmp-b7:0' failed: Read-only file system [ 672.913022][T19227] kernel read not supported for file /file0 (pid: 19227 comm: syz.0.5011) [ 672.923091][ T30] audit: type=1800 audit(1772026357.840:212): pid=19227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5011" name="file0" dev="mqueue" ino=51517 res=0 errno=0 [ 673.028426][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1237.tmp-b7:2' failed: Read-only file system [ 673.101903][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1253.tmp-b7:1' failed: Read-only file system [ 673.145809][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1249.tmp-b7:0' failed: Read-only file system [ 673.223324][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1237.tmp-b7:2' failed: Read-only file system [ 674.101922][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5027'. [ 674.132032][T19263] netlink: 'syz.7.5027': attribute type 5 has an invalid length. [ 674.484359][T19274] loop2: detected capacity change from 0 to 256 [ 674.514238][T19274] exfat: Deprecated parameter 'utf8' [ 674.526935][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.534202][T19273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.545176][T19273] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.552358][T19273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.633241][T19274] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 674.668573][T19273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.964192][T19311] loop3: detected capacity change from 0 to 64 [ 676.014753][T19311] Trying to free block not in datazone [ 676.040738][T19309] loop0: detected capacity change from 0 to 4096 [ 676.169812][T19318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 676.643995][T18169] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 676.717988][T19327] loop0: detected capacity change from 0 to 512 [ 676.767510][T19327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 676.818156][T19327] EXT4-fs (loop0): 1 truncate cleaned up [ 676.847729][T19327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.884037][T18169] usb 10-1: Using ep0 maxpacket: 16 [ 676.934550][T18169] usb 10-1: config 0 interface 0 altsetting 131 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.998452][T18169] usb 10-1: config 0 interface 0 altsetting 131 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 677.040123][T17828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.055842][T18169] usb 10-1: config 0 interface 0 has no altsetting 0 [ 677.072811][T18169] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 677.118173][T18169] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.147851][T18169] usb 10-1: config 0 descriptor?? [ 677.582554][T18169] logitech 0003:046D:C24F.0059: hidraw0: USB HID v0.07 Device [HID 046d:c24f] on usb-dummy_hcd.9-1/input0 [ 677.635040][T18169] logitech 0003:046D:C24F.0059: no inputs found [ 677.646819][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1253.tmp-b7:1' failed: Read-only file system [ 677.808159][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 677.885415][ T5926] usb 10-1: USB disconnect, device number 16 [ 677.921221][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1263.tmp-b7:0' failed: Read-only file system [ 678.013825][T19344] fido_id[19344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 678.258850][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 678.536083][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1260.tmp-b7:3' failed: Read-only file system [ 678.655928][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1254.tmp-b7:9' failed: Read-only file system [ 678.776625][T19367] loop9: detected capacity change from 0 to 64 [ 678.823043][T19345] loop1: detected capacity change from 0 to 32768 [ 678.880151][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1264.tmp-b7:9' failed: Read-only file system [ 678.923573][T19345] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5062 (19345) [ 679.035696][T19345] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 679.082247][T19345] BTRFS info (device loop1): using blake2b checksum algorithm [ 679.106021][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1264.tmp-b7:9' failed: Read-only file system [ 679.233907][T19375] __nla_validate_parse: 1 callbacks suppressed [ 679.233934][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5071'. [ 679.263078][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1264.tmp-b7:9' failed: Read-only file system [ 679.280821][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1265.tmp-b7:1' failed: Read-only file system [ 679.546352][T19393] loop9: detected capacity change from 0 to 1024 [ 679.556677][T19345] BTRFS info (device loop1): enabling ssd optimizations [ 679.627943][T19345] BTRFS info (device loop1): turning on async discard [ 679.659876][T19393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 679.733013][T19345] BTRFS info (device loop1): enabling free space tree [ 679.803674][T19345] BTRFS info (device loop1): use zstd compression, level 3 [ 679.824008][T19393] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.134888][ T2978] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 680.253524][ T2978] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 680.334862][ T2978] EXT4-fs (loop9): This should not happen!! Data will be lost [ 680.334862][ T2978] [ 680.354752][T13524] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 680.389879][ T2978] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 680.497609][ T2978] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117 [ 680.549782][ T2978] EXT4-fs (loop9): This should not happen!! Data will be lost [ 680.549782][ T2978] [ 680.570012][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 680.928742][T19424] loop3: detected capacity change from 0 to 8 [ 680.960616][T19424] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 681.177324][T18169] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 681.270604][T19435] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 681.360925][T18169] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.397490][T18169] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.443543][T18169] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.483522][T18169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.519173][T19423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 681.589711][T19438] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5087'. [ 681.608032][T18169] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.631743][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5087'. [ 681.635042][ T791] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 681.875315][ T791] usb 1-1: Using ep0 maxpacket: 8 [ 681.928853][ T791] usb 1-1: config 0 has no interfaces? [ 681.939677][ T791] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 681.980010][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.033624][ T791] usb 1-1: Product: syz [ 682.058575][ T791] usb 1-1: Manufacturer: syz [ 682.081589][ T791] usb 1-1: SerialNumber: syz [ 682.093777][T18169] usb 2-1: USB disconnect, device number 27 [ 682.180392][ T791] usb 1-1: config 0 descriptor?? [ 682.445912][ T29] usb 1-1: USB disconnect, device number 20 [ 682.805831][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1268.tmp-b7:9' failed: Read-only file system [ 682.876296][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1265.tmp-b7:1' failed: Read-only file system [ 682.985298][ T6370] udevd[6370]: symlink '../../loop3' '/dev/disk/by-diskseq/1270.tmp-b7:3' failed: Read-only file system [ 683.016250][T19475] input: syz0 as /devices/virtual/input/input40 [ 683.023365][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1265.tmp-b7:1' failed: Read-only file system [ 683.133543][ T5926] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 683.162532][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1271.tmp-b7:1' failed: Read-only file system [ 683.172342][ T8872] udevd[8872]: symlink '../../loop0' '/dev/disk/by-diskseq/1263.tmp-b7:0' failed: Read-only file system [ 683.236460][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1257.tmp-b7:2' failed: Read-only file system [ 683.366871][ T5926] usb 10-1: Using ep0 maxpacket: 32 [ 683.393587][ T5926] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.425353][ T5926] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.438112][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1270.tmp-b7:3' failed: Read-only file system [ 683.473624][ T5926] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.497842][ T5926] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 683.559823][ T5926] usb 10-1: Product: syz [ 683.576403][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1271.tmp-b7:1' failed: Read-only file system [ 683.578015][ T5926] usb 10-1: Manufacturer: syz [ 683.800229][ T5848] udevd[5848]: symlink '../../loop0' '/dev/disk/by-diskseq/1263.tmp-b7:0' failed: Read-only file system [ 683.831218][ T5926] hub 10-1:4.0: USB hub found [ 683.858256][T19502] loop0: detected capacity change from 0 to 512 [ 683.895798][T19502] EXT4-fs: Ignoring removed orlov option [ 683.917257][T19502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 684.031665][ T5926] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 684.041022][T19502] EXT4-fs (loop0): 1 orphan inode deleted [ 684.049133][T19502] EXT4-fs (loop0): 1 truncate cleaned up [ 684.071366][T19502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.265022][T19502] EXT4-fs error (device loop0): ext4_check_all_de:658: inode #12: block 7: comm syz.0.5105: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 684.425862][ T5805] usb 10-1: USB disconnect, device number 17 [ 684.511671][T17828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.823386][T19526] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5111'. [ 684.836494][T19527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5113'. [ 684.913599][ T5805] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 685.095667][ T5805] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 685.127348][ T5805] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 685.187488][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.194102][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.199464][ T5805] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 685.235362][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.287393][T19521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.299429][ T5805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 685.604473][ T5805] usb 3-1: USB disconnect, device number 37 [ 687.429748][T19593] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5139'. [ 687.447228][T19587] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 687.878705][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1268.tmp-b7:9' failed: Read-only file system [ 687.979096][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1273.tmp-b7:0' failed: Read-only file system [ 688.018887][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1271.tmp-b7:1' failed: Read-only file system [ 688.167707][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1268.tmp-b7:9' failed: Read-only file system [ 688.346755][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1273.tmp-b7:0' failed: Read-only file system [ 688.447250][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1268.tmp-b7:9' failed: Read-only file system [ 688.470005][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1271.tmp-b7:1' failed: Read-only file system [ 688.516785][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5151'. [ 688.589214][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1271.tmp-b7:1' failed: Read-only file system [ 688.663000][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1268.tmp-b7:9' failed: Read-only file system [ 688.799023][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1273.tmp-b7:0' failed: Read-only file system [ 689.166700][T19641] Invalid logical block size (4) [ 689.294962][T19649] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5165'. [ 689.755955][T19661] loop2: detected capacity change from 0 to 1756 [ 689.896594][T19666] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5173'. [ 690.033225][T19668] tap0: tun_chr_ioctl cmd 1074025681 [ 690.669112][T19688] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 690.675675][T19688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 690.740671][T19688] vhci_hcd vhci_hcd.0: Device attached [ 690.973611][ T5805] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 690.983575][T18169] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 691.096219][T19704] loop3: detected capacity change from 0 to 8 [ 691.163529][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 691.169696][T19704] SQUASHFS error: Failed to read block 0x636: -5 [ 691.195474][ T5805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.216090][T19704] SQUASHFS error: Unable to read metadata cache entry [634] [ 691.226378][ T5805] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.248429][T19704] SQUASHFS error: Unable to read metadata cache entry [634] [ 691.264552][ T5805] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 691.275765][T19704] SQUASHFS error: Unable to read directory block [634:0] [ 691.293003][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.347636][ T5805] usb 2-1: config 0 descriptor?? [ 691.625626][ T791] usb 2-1: USB disconnect, device number 28 [ 691.649396][T19690] usb 35-1: recv xbuf, 0 [ 691.689792][ T13] vhci_hcd vhci_hcd.1: stop threads [ 691.705357][ T13] vhci_hcd vhci_hcd.1: release socket [ 691.711606][T19717] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5195'. [ 691.749704][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 692.637923][T19699] loop2: detected capacity change from 0 to 32768 [ 692.745279][T19699] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 692.940210][T19738] loop1: detected capacity change from 0 to 4096 [ 693.025738][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5207'. [ 693.082095][T19699] XFS (loop2): Ending clean mount [ 693.136205][T19724] loop9: detected capacity change from 0 to 131072 [ 693.140202][T19699] XFS (loop2): Quotacheck needed: Please wait. [ 693.182469][T19724] F2FS-fs (loop9): invalid crc value [ 693.282263][T19724] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 693.297163][T19724] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 693.319948][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1278.tmp-b7:2' failed: Read-only file system [ 693.333477][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 693.454638][T19699] XFS (loop2): Quotacheck: Done. [ 693.513770][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1279.tmp-b7:1' failed: Read-only file system [ 693.549433][ T6370] udevd[6370]: symlink '../../loop3' '/dev/disk/by-diskseq/1277.tmp-b7:3' failed: Read-only file system [ 693.581997][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 693.632392][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system [ 693.672345][T19760] 9p: Bad value for 'rfdno' [ 693.717145][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1278.tmp-b7:2' failed: Read-only file system [ 693.771796][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 693.825779][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1280.tmp-b7:9' failed: Read-only file system [ 693.853069][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.893312][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1277.tmp-b7:3' failed: Read-only file system [ 694.852372][T19777] loop9: detected capacity change from 0 to 4096 [ 694.889906][T19777] NILFS (loop9): invalid segment: Checksum error in segment payload [ 694.901289][T19777] NILFS (loop9): trying rollback from an earlier position [ 694.963091][T19777] NILFS (loop9): recovery complete [ 694.998975][T19784] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 695.815060][T19804] tipc: Started in network mode [ 695.837373][T19804] tipc: Node identity ac14140f, cluster identity 4711 [ 695.863879][T19804] tipc: New replicast peer: 255.255.255.255 [ 695.889386][T19804] tipc: Enabled bearer , priority 7 [ 695.893566][ T5900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 695.931973][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5230'. [ 695.993508][T19806] tipc: Disabling bearer [ 696.037054][T19811] loop0: detected capacity change from 0 to 512 [ 696.058659][T19811] EXT4-fs: Ignoring removed orlov option [ 696.077070][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.103121][ T5900] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 696.191346][T19811] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 696.213808][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.238077][T19809] bond1: invalid ARP target 0.0.0.0 specified for addition [ 696.265186][T19814] loop2: detected capacity change from 0 to 256 [ 696.275800][T19811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 696.288222][ T5900] usb 2-1: config 0 descriptor?? [ 696.313609][T19809] bond1: option arp_ip_target: invalid value (0) [ 696.353914][T19811] EXT4-fs error (device loop0): ext4_iget_extra_inode:5024: inode #15: comm syz.0.5233: corrupted in-inode xattr: e_value size too large [ 696.378441][T19811] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 696.381435][T19811] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5233: couldn't read orphan inode 15 (err -117) [ 696.387367][T19809] bond1 (unregistering): Released all slaves [ 696.390978][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 696.414858][ C0] EXT4-fs (loop0): initial error at time 1772026381: ext4_iget_extra_inode:5024: inode 15 [ 696.424936][ C0] EXT4-fs (loop0): last error at time 1772026381: ext4_iget_extra_inode:5024: inode 15 [ 696.453500][T19811] loop0: lost filesystem error report for type 5 error -117 [ 696.460685][T19814] exfat: Deprecated parameter 'utf8' [ 696.504233][T19811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.537289][T19814] exfat: Deprecated parameter 'namecase' [ 696.613668][T19814] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 696.977589][T17828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.994079][ T5900] razer 0003:1532:010E.005A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 697.184067][T18169] usb 2-1: USB disconnect, device number 29 [ 697.299649][T19826] fido_id[19826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 697.831922][T19846] batadv_slave_1: entered promiscuous mode [ 697.875638][T19852] vivid-008: disconnect [ 697.984662][T19848] bond1 (unregistering): Released all slaves [ 698.059565][T19845] batadv_slave_1: left promiscuous mode [ 698.375710][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1277.tmp-b7:3' failed: Read-only file system [ 698.442745][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 698.514142][ T6202] udevd[6202]: symlink '../../loop0' '/dev/disk/by-diskseq/1289.tmp-b7:0' failed: Read-only file system [ 698.559797][T19867] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 698.566365][T19867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 698.574762][T19867] vhci_hcd vhci_hcd.0: Device attached [ 698.612986][T19844] vivid-008: reconnect [ 698.670721][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 698.736293][T19873] fuse: Bad value for 'fd' [ 698.760821][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1285.tmp-b7:9' failed: Read-only file system [ 698.833987][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 698.841811][T18169] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 698.910780][ T6202] udevd[6202]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 698.953950][T19880] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5262'. [ 698.974455][T19880] hsr_slave_0: left promiscuous mode [ 698.981621][T19880] hsr_slave_1: left promiscuous mode [ 699.017094][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 699.041699][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1285.tmp-b7:9' failed: Read-only file system [ 699.077232][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.089975][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 699.105780][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 699.106223][T19858] loop2: detected capacity change from 0 to 32768 [ 699.115559][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.139059][T19858] (syz.2.5253,19858,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 699.140448][ T9] usb 1-1: config 0 descriptor?? [ 699.214132][T19858] (syz.2.5253,19858,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 699.260096][T19858] JBD2: Ignoring recovery information on journal [ 699.343016][ T5848] udevd[5848]: symlink '../../loop9' '/dev/disk/by-diskseq/1285.tmp-b7:9' failed: Read-only file system [ 699.456051][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 699.499913][ T29] usb 1-1: USB disconnect, device number 21 [ 699.506925][T19858] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 699.518691][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1290.tmp-b7:2' failed: Read-only file system [ 699.533455][T19868] usb 33-1: recv xbuf, 0 [ 699.577324][ T12] vhci_hcd vhci_hcd.0: stop threads [ 699.587912][ T12] vhci_hcd vhci_hcd.0: release socket [ 699.625674][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 699.957953][ T5832] ocfs2: Unmounting device (7,2) on (node local) [ 699.998594][T19902] netlink: 'syz.7.5272': attribute type 14 has an invalid length. [ 700.030821][T19904] loop3: detected capacity change from 0 to 2048 [ 700.135154][T19906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.230767][T19907] loop9: detected capacity change from 0 to 512 [ 700.436237][T19907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.456096][T19907] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.621494][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.748841][T19919] loop0: detected capacity change from 0 to 2048 [ 700.816871][T19919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.148366][T19978] loop9: detected capacity change from 0 to 4096 [ 703.185797][T19978] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 703.232461][T19980] loop2: detected capacity change from 0 to 512 [ 703.345965][T19980] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.5305: invalid indirect mapped block 32768 (level 0) [ 703.410441][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 703.420389][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-diskseq/1298.tmp-b7:9' failed: Read-only file system [ 703.437344][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 703.451317][ T6202] udevd[6202]: symlink '../../loop9' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:9' failed: Read-only file system [ 703.452371][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1299.tmp-b7:2' failed: Read-only file system [ 703.463529][T19980] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 703.493453][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 703.509137][ C0] EXT4-fs (loop2): initial error at time 1772026388: ext4_free_branches:1020: inode 13 [ 703.518885][ C0] EXT4-fs (loop2): last error at time 1772026388: ext4_free_branches:1020: inode 13 [ 703.546138][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 703.550624][T19980] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #13: comm syz.2.5305: attempt to clear invalid blocks 1024 len 1 [ 703.604079][T19980] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 703.604802][T19980] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 703.643745][T19980] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.5305: invalid indirect mapped block 1819213824 (level 0) [ 703.685245][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-diskseq/1299.tmp-b7:2' failed: Read-only file system [ 703.711043][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-diskseq/1294.tmp-b7:3' failed: Read-only file system [ 703.733295][T19980] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 703.746892][T19980] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.5305: invalid indirect mapped block 33554432 (level 2) [ 703.748802][ T6202] udevd[6202]: symlink '../../loop2' '/dev/disk/by-label/\x86\x5b.tmp-b7:2' failed: Read-only file system [ 703.761315][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 703.822059][T19980] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 703.827938][T19980] EXT4-fs (loop2): 1 truncate cleaned up [ 703.848350][T19980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.894574][T19990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5308'. [ 704.205433][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.563889][T20007] Context (ID=0x4d8) not attached to queue pair (handle=0x1:0x1) [ 704.609094][T20005] loop2: detected capacity change from 0 to 2048 [ 704.640663][T20014] loop9: detected capacity change from 0 to 256 [ 704.682851][T20014] FAT-fs (loop9): Directory bread(block 1285) failed [ 704.691498][T20005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.731876][T20014] FAT-fs (loop9): Directory bread(block 1286) failed [ 704.754271][T20014] FAT-fs (loop9): Directory bread(block 1287) failed [ 704.790264][T20014] FAT-fs (loop9): Directory bread(block 1288) failed [ 704.814502][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 704.880050][T20014] FAT-fs (loop9): FAT read failed (blocknr 1281) [ 705.060460][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 705.083562][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.096859][T20022] netlink: 'syz.0.5322': attribute type 14 has an invalid length. [ 705.120806][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 705.173350][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 705.224242][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 705.273804][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.282355][T20026] loop2: detected capacity change from 0 to 128 [ 705.317406][ T9] usb 2-1: config 0 descriptor?? [ 705.324110][T20010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 705.334725][T20026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 705.421534][T20026] ext4 filesystem being mounted at /907/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 705.563661][T20026] fscrypt (loop2, inode 12): Unsupported encryption flags (0x2a) [ 705.747976][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 705.788561][ T9] konepure 0003:1E7D:2DBE.005B: unknown main item tag 0x3 [ 705.850198][ T9] konepure 0003:1E7D:2DBE.005B: hidraw0: USB HID v0.07 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 706.021913][ T9] usb 2-1: USB disconnect, device number 30 [ 706.207063][T20042] fido_id[20042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 706.257690][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5333'. [ 706.554467][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 706.767649][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 706.796556][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 706.811660][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.854419][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.888378][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 706.912108][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 706.939084][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 706.994035][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.069133][ T29] usb 1-1: config 0 descriptor?? [ 707.089916][T20051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 707.270838][T20077] loop9: detected capacity change from 0 to 1024 [ 707.294156][T20077] EXT4-fs: Ignoring removed bh option [ 707.331447][T20072] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 707.370557][T20077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.499851][T12725] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.500517][T20084] netlink: 'syz.1.5348': attribute type 5 has an invalid length. [ 707.540561][ T5805] usb 1-1: USB disconnect, device number 22 [ 707.547606][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 708.241954][T20074] loop3: detected capacity change from 0 to 32768 [ 708.276143][T20074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5345 (20074) [ 708.347713][T20074] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 708.352477][T20103] xt_connbytes: Forcing CT accounting to be enabled [ 708.390595][T20074] BTRFS info (device loop3): using sha256 checksum algorithm [ 708.460885][T20117] xt_hashlimit: size too large, truncated to 1048576 [ 708.514954][T20114] loop2: detected capacity change from 0 to 256 [ 708.540007][ T8872] udevd[8872]: symlink '../../loop9' '/dev/disk/by-diskseq/1309.tmp-b7:9' failed: Read-only file system [ 708.589789][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 708.638718][T20074] BTRFS info (device loop3): enabling ssd optimizations [ 708.695877][T20074] BTRFS info (device loop3): turning on async discard [ 708.730942][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 708.744131][T20074] BTRFS info (device loop3): enabling free space tree [ 708.764025][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/1307.tmp-b7:2' failed: Read-only file system [ 708.783851][T20114] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 708.824650][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 708.921907][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-diskseq/1310.tmp-b7:3' failed: Read-only file system [ 708.971547][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-diskseq/1311.tmp-b7:2' failed: Read-only file system [ 709.009234][ T6202] udevd[6202]: symlink '../../loop3' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:3' failed: Read-only file system [ 709.060000][ T8872] udevd[8872]: symlink '../../loop1' '/dev/disk/by-diskseq/1281.tmp-b7:1' failed: Read-only file system [ 709.081378][ T5848] udevd[5848]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system [ 709.129893][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 709.265002][ T13] wlan1: Trigger new scan to find an IBSS to join [ 709.740888][T20149] gtp0: entered promiscuous mode [ 709.764526][T20149] gtp0: entered allmulticast mode [ 709.998158][ T29] kernel read not supported for file /dsp (pid: 29 comm: kworker/1:1) [ 710.804180][T20171] loop2: detected capacity change from 0 to 4096 [ 710.859080][T20171] EXT4-fs (loop2): Test dummy encryption mode enabled [ 710.903601][T20171] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 710.933062][T20185] loop9: detected capacity change from 0 to 7 [ 710.933356][T20171] System zones: 0-5 [ 710.954130][T20171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.975340][T20185] buffer_io_error: 10 callbacks suppressed [ 710.975367][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 710.990273][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 710.998805][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.008339][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.016585][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.025297][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.036293][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.044635][T20185] ldm_validate_partition_table(): Disk read failed. [ 711.061715][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.085984][T20185] Buffer I/O error on dev loop9, logical block 0, async page read [ 711.161636][T20186] loop9: detected capacity change from 7 to 0 [ 711.169678][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.170934][T20185] Dev loop9: unable to read RDB block 0 [ 711.231648][T20185] loop9: unable to read partition table [ 711.349314][T20185] loop9: partition table beyond EOD, truncated [ 711.374634][T20185] loop_reread_partitions: partition scan of loop9 ( DŸiXK׉jÌ”S{³ÑáÎ<ÚB/ŽøØc¼:Šé¦ÛßÝ¡>C(Îí¨z£ìU-1`¶\ uRtœÇOÒ¯öj) failed (rc=-5) [ 711.673842][T20197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5391'. [ 711.966552][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5395'. [ 711.988492][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5395'. [ 712.041659][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5395'. [ 712.075386][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5395'. [ 712.346337][T20219] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5400'. [ 712.431904][T20219] hsr_slave_0: left promiscuous mode [ 712.483950][T20219] hsr_slave_1: left promiscuous mode [ 712.596080][T20227] loop0: detected capacity change from 0 to 1764 [ 712.960832][ C1] [ 712.963199][ C1] ================================ [ 712.968291][ C1] WARNING: inconsistent lock state [ 712.973481][ C1] syzkaller #0 Tainted: G L [ 712.979455][ C1] -------------------------------- [ 712.984563][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 712.991409][ C1] kworker/u8:4/58 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 712.997748][ C1] ffff88805971c4a0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x1a2/0x860 [ 713.007098][ C1] {SOFTIRQ-ON-W} state was registered at: [ 713.012807][ C1] lock_acquire+0x1cf/0x380 [ 713.017413][ C1] lock_sock_nested+0x41/0xf0 [ 713.022265][ C1] tcp_sock_set_nodelay+0x1c/0x120 [ 713.027470][ C1] rds_tcp_listen_init+0x157/0x4e0 [ 713.032669][ C1] rds_tcp_init_net+0x16d/0x310 [ 713.037623][ C1] ops_init+0x1e2/0x5f0 [ 713.041865][ C1] register_pernet_operations+0x3cb/0x740 [ 713.047671][ C1] register_pernet_device+0x29/0x80 [ 713.052964][ C1] rds_tcp_init+0x85/0x110 [ 713.057479][ C1] do_one_initcall+0x11d/0x760 [ 713.062324][ C1] kernel_init_freeable+0x6e5/0x7a0 [ 713.067608][ C1] kernel_init+0x1f/0x1e0 [ 713.072035][ C1] ret_from_fork+0x754/0xd80 [ 713.076743][ C1] ret_from_fork_asm+0x1a/0x30 [ 713.081609][ C1] irq event stamp: 5241988 [ 713.086017][ C1] hardirqs last enabled at (5241988): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 713.096640][ C1] hardirqs last disabled at (5241987): [] _raw_spin_lock_irqsave+0x52/0x60 [ 713.106847][ C1] softirqs last enabled at (5241900): [] __dev_queue_xmit+0x7dc/0x4750 [ 713.116767][ C1] softirqs last disabled at (5241901): [] do_softirq+0xac/0xe0 [ 713.125888][ C1] [ 713.125888][ C1] other info that might help us debug this: [ 713.133932][ C1] Possible unsafe locking scenario: [ 713.133932][ C1] [ 713.141363][ C1] CPU0 [ 713.144642][ C1] ---- [ 713.147905][ C1] lock(k-sk_lock-AF_INET6); [ 713.152578][ C1] [ 713.156017][ C1] lock(k-sk_lock-AF_INET6); [ 713.160867][ C1] [ 713.160867][ C1] *** DEADLOCK *** [ 713.160867][ C1] [ 713.168990][ C1] 12 locks held by kworker/u8:4/58: [ 713.174272][ C1] #0: ffff88807d140948 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 713.185462][ C1] #1: ffffc900015f7d08 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 713.197689][ C1] #2: ffff888087888260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x1c/0xc0 [ 713.207681][ C1] #3: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x136/0x760 [ 713.217138][ C1] #4: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x2dc/0x26e0 [ 713.226142][ C1] #5: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 713.235279][ C1] #6: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x32a/0x1580 [ 713.244903][ C1] #7: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0xf8/0x820 [ 713.254521][ C1] #8: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: nf_hook.constprop.0+0x98/0x750 [ 713.264333][ C1] #9: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x29/0x2f0 [ 713.273317][ C1] #10: ffff88805971c420 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x285b/0x42c0 [ 713.283153][ C1] #11: ffff88805971c648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x90/0x790 [ 713.293210][ C1] [ 713.293210][ C1] stack backtrace: [ 713.299101][ C1] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.299145][ C1] Tainted: [L]=SOFTLOCKUP [ 713.299156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.299177][ C1] Workqueue: krds_cp_wq#7/0 rds_send_worker [ 713.299222][ C1] Call Trace: [ 713.299234][ C1] [ 713.299246][ C1] dump_stack_lvl+0x100/0x190 [ 713.299291][ C1] print_usage_bug.part.0+0x257/0x340 [ 713.299339][ C1] mark_lock+0x74a/0xa20 [ 713.299382][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.299418][ C1] ? lock_acquire+0x1cf/0x380 [ 713.299475][ C1] __lock_acquire+0x103a/0x2630 [ 713.299519][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 713.299552][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.299590][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.299629][ C1] lock_acquire+0x1cf/0x380 [ 713.299673][ C1] ? inet6_getname+0x1a2/0x860 [ 713.299714][ C1] lock_sock_nested+0x41/0xf0 [ 713.299744][ C1] ? inet6_getname+0x1a2/0x860 [ 713.299776][ C1] inet6_getname+0x1a2/0x860 [ 713.299813][ C1] rds_tcp_get_peer_sport+0x7c/0x110 [ 713.299843][ C1] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 713.299887][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.299923][ C1] ? rds_addr_cmp+0x10d/0x150 [ 713.299962][ C1] rds_tcp_conn_slots_available+0x279/0x390 [ 713.299993][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 713.300027][ C1] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 713.300060][ C1] ? br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 713.300095][ C1] ? br_nf_pre_routing_ipv6+0x351/0x8b0 [ 713.300129][ C1] ? __netif_receive_skb+0x1f/0x120 [ 713.300175][ C1] ? process_backlog+0x37a/0x1580 [ 713.300219][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 713.300266][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 713.300300][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 713.300334][ C1] ? neigh_resolve_output+0x51f/0x8f0 [ 713.300371][ C1] ? __ip6_finish_output+0x357/0x1080 [ 713.300412][ C1] ? ip6_xmit+0x1002/0x26e0 [ 713.300455][ C1] ? inet6_csk_xmit+0x387/0x760 [ 713.300482][ C1] ? __tcp_transmit_skb+0x1dd1/0x4b50 [ 713.300530][ C1] ? tcp_write_xmit+0x12a2/0x8980 [ 713.300556][ C1] ? __tcp_push_pending_frames+0xaf/0x3b0 [ 713.300584][ C1] ? __tcp_sock_set_cork.part.0+0x105/0x140 [ 713.300627][ C1] rds_recv_incoming+0xdbf/0x1150 [ 713.300664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.300701][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 713.300736][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.300772][ C1] ? skb_copy_bits+0x5c8/0x8d0 [ 713.300805][ C1] rds_tcp_data_recv+0x278/0xce0 [ 713.300846][ C1] __tcp_read_sock+0x204/0x8d0 [ 713.300891][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 713.300923][ C1] ? __pfx___tcp_read_sock+0x10/0x10 [ 713.300966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301002][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301042][ C1] rds_tcp_read_sock+0x12e/0x280 [ 713.301072][ C1] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 713.301100][ C1] ? lock_acquire+0x1cf/0x380 [ 713.301145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301182][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301218][ C1] ? __sk_mem_schedule+0xd0/0x100 [ 713.301254][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 713.301281][ C1] rds_tcp_data_ready+0x1c9/0x790 [ 713.301311][ C1] ? tcp_data_ecn_check+0x1c0/0x750 [ 713.301348][ C1] tcp_data_ready+0x114/0x5a0 [ 713.301391][ C1] tcp_data_queue+0x1aca/0x4fd0 [ 713.301442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301481][ C1] ? tcp_urg+0x10f/0xb80 [ 713.301515][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 713.301557][ C1] ? tcp_ecn_create_request+0x800/0x8d0 [ 713.301593][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 713.301626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301699][ C1] ? ktime_get+0x1a7/0x300 [ 713.301741][ C1] tcp_rcv_established+0xb64/0x3980 [ 713.301796][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 713.301839][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 713.301877][ C1] ? lock_acquire+0x1cf/0x380 [ 713.301920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.301967][ C1] tcp_v6_do_rcv+0x118b/0x1dd0 [ 713.302013][ C1] tcp_v6_rcv+0x2b03/0x42c0 [ 713.302062][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 713.302099][ C1] ? raw6_local_deliver+0x3f3/0xa80 [ 713.302134][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.302174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.302213][ C1] ? raw6_local_deliver+0x3fd/0xa80 [ 713.302248][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 713.302291][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.302328][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 713.302367][ C1] ip6_protocol_deliver_rcu+0x188/0x1500 [ 713.302422][ C1] ip6_input_finish+0x1e4/0x4a0 [ 713.302471][ C1] ip6_input+0x105/0x2f0 [ 713.302515][ C1] ip6_rcv_finish+0x1a9/0x550 [ 713.302558][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 713.302603][ C1] ip_sabotage_in+0x21e/0x290 [ 713.302631][ C1] nf_hook_slow+0xbf/0x220 [ 713.302665][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 713.302708][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 713.302754][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 713.302800][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 713.302850][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 713.302892][ C1] ipv6_rcv+0xa4/0x610 [ 713.302934][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 713.302976][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 713.303023][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 713.303072][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303107][ C1] ? lock_acquire+0x1cf/0x380 [ 713.303150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303191][ C1] __netif_receive_skb+0x1f/0x120 [ 713.303237][ C1] netif_receive_skb+0x139/0x820 [ 713.303281][ C1] ? br_multicast_count+0x8d/0xbc0 [ 713.303311][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 713.303357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303398][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303448][ C1] ? br_netif_receive_skb+0xff/0x1f0 [ 713.303484][ C1] br_pass_frame_up+0x346/0x490 [ 713.303519][ C1] br_handle_frame_finish+0x166a/0x1f00 [ 713.303558][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 713.303596][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 713.303636][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303675][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 713.303721][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 713.303765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.303804][ C1] ? nf_hook_slow+0x167/0x220 [ 713.303841][ C1] br_nf_hook_thresh+0x30d/0x420 [ 713.303875][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 713.303913][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 713.303950][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 713.303984][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 713.304037][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304076][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304115][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 713.304159][ C1] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 713.304198][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 713.304235][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 713.304269][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 713.304301][ C1] ? lock_acquire+0x1cf/0x380 [ 713.304346][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 713.304380][ C1] ? net_generic+0xea/0x2a0 [ 713.304405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304447][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304487][ C1] br_nf_pre_routing+0x93b/0x1510 [ 713.304518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304557][ C1] br_handle_frame+0xcdd/0x1520 [ 713.304590][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 713.304623][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 713.304656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304695][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 713.304730][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 713.304781][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 713.304823][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.304860][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 713.304905][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 713.304954][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 713.304991][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 713.305028][ C1] ? ip6_protocol_deliver_rcu+0x7ce/0x1500 [ 713.305085][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.305120][ C1] ? __lock_acquire+0x4a5/0x2630 [ 713.305168][ C1] ? process_backlog+0x32a/0x1580 [ 713.305212][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 713.305264][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 713.305313][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.305352][ C1] ? lock_acquire+0x1cf/0x380 [ 713.305396][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.305434][ C1] ? process_backlog+0x32a/0x1580 [ 713.305537][ C1] ? process_backlog+0x32a/0x1580 [ 713.305581][ C1] __netif_receive_skb+0x1f/0x120 [ 713.305627][ C1] process_backlog+0x37a/0x1580 [ 713.305678][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 713.305732][ C1] net_rx_action+0xa40/0xf20 [ 713.305781][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 713.305819][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 713.305867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.305904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.305939][ C1] ? sched_clock+0x38/0x60 [ 713.305979][ C1] ? sched_clock_cpu+0x6c/0x570 [ 713.306030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306066][ C1] ? mark_held_locks+0x40/0x70 [ 713.306111][ C1] handle_softirqs+0x1eb/0x9e0 [ 713.306147][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 713.306180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306217][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 713.306262][ C1] do_softirq+0xac/0xe0 [ 713.306294][ C1] [ 713.306304][ C1] [ 713.306316][ C1] __local_bh_enable_ip+0xf8/0x120 [ 713.306349][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 713.306392][ C1] __dev_queue_xmit+0x7f1/0x4750 [ 713.306462][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306535][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 713.306569][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 713.306612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306648][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 713.306690][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306726][ C1] ? __lock_acquire+0x4a5/0x2630 [ 713.306772][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 713.306812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306848][ C1] ? __asan_memcpy+0x3c/0x60 [ 713.306875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.306910][ C1] ? eth_header+0x120/0x1f0 [ 713.306944][ C1] neigh_resolve_output+0x51f/0x8f0 [ 713.306990][ C1] ip6_finish_output2+0xb0f/0x1ce0 [ 713.307038][ C1] __ip6_finish_output+0x357/0x1080 [ 713.307086][ C1] ip6_output+0x2aa/0xa60 [ 713.307127][ C1] ? __pfx_ip6_output+0x10/0x10 [ 713.307170][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 713.307216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307256][ C1] ip6_xmit+0x1002/0x26e0 [ 713.307295][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307330][ C1] ? __lock_acquire+0x4a5/0x2630 [ 713.307381][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 713.307420][ C1] ? __lock_acquire+0x4a5/0x2630 [ 713.307466][ C1] ? ip6_dst_check+0x343/0x950 [ 713.307501][ C1] ? __pfx_dst_output+0x10/0x10 [ 713.307545][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307582][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307624][ C1] inet6_csk_xmit+0x387/0x760 [ 713.307654][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 713.307690][ C1] __tcp_transmit_skb+0x1dd1/0x4b50 [ 713.307748][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 713.307800][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307843][ C1] ? ktime_get+0x200/0x300 [ 713.307879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307914][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 713.307946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.307985][ C1] tcp_write_xmit+0x12a2/0x8980 [ 713.308026][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.308064][ C1] __tcp_push_pending_frames+0xaf/0x3b0 [ 713.308095][ C1] __tcp_sock_set_cork.part.0+0x105/0x140 [ 713.308136][ C1] tcp_sock_set_cork+0x9b/0xc0 [ 713.308172][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 713.308207][ C1] rds_send_xmit+0x17cb/0x2950 [ 713.308257][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 713.308296][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.308337][ C1] rds_send_worker+0x94/0x320 [ 713.308377][ C1] process_one_work+0x9d7/0x1920 [ 713.308435][ C1] ? __pfx_process_one_work+0x10/0x10 [ 713.308485][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.308528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.308567][ C1] worker_thread+0x5da/0xe40 [ 713.308601][ C1] ? kthread+0x13a/0x450 [ 713.308643][ C1] ? __pfx_worker_thread+0x10/0x10 [ 713.308669][ C1] kthread+0x370/0x450 [ 713.308716][ C1] ? __pfx_kthread+0x10/0x10 [ 713.308761][ C1] ret_from_fork+0x754/0xd80 [ 713.308808][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 713.308860][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.308895][ C1] ? __switch_to+0x7b4/0x1120 [ 713.308927][ C1] ? __pfx_kthread+0x10/0x10 [ 713.308972][ C1] ret_from_fork_asm+0x1a/0x30 [ 713.309015][ C1] [ 714.614792][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 714.623582][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 58, name: kworker/u8:4 [ 714.632723][ C1] preempt_count: 303, expected: 0 [ 714.637757][ C1] RCU nest depth: 7, expected: 0 [ 714.642683][ C1] INFO: lockdep is turned off. [ 714.647447][ C1] Preemption disabled at: [ 714.647460][ C1] [] __dev_queue_xmit+0x27c/0x4750 [ 714.658525][ C1] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.658568][ C1] Tainted: [L]=SOFTLOCKUP [ 714.658578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.658599][ C1] Workqueue: krds_cp_wq#7/0 rds_send_worker [ 714.658642][ C1] Call Trace: [ 714.658655][ C1] [ 714.658668][ C1] dump_stack_lvl+0x100/0x190 [ 714.658712][ C1] __might_resched.cold+0x1ec/0x232 [ 714.658753][ C1] ? __pfx___might_resched+0x10/0x10 [ 714.658787][ C1] lock_sock_nested+0x52/0xf0 [ 714.658816][ C1] ? inet6_getname+0x1a2/0x860 [ 714.658850][ C1] inet6_getname+0x1a2/0x860 [ 714.658886][ C1] rds_tcp_get_peer_sport+0x7c/0x110 [ 714.658916][ C1] ? __pfx_rds_tcp_get_peer_sport+0x10/0x10 [ 714.658956][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.658992][ C1] ? rds_addr_cmp+0x10d/0x150 [ 714.659031][ C1] rds_tcp_conn_slots_available+0x279/0x390 [ 714.659062][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 714.659096][ C1] rds_recv_hs_exthdrs+0x5cb/0x7e0 [ 714.659130][ C1] ? br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 714.659164][ C1] ? br_nf_pre_routing_ipv6+0x351/0x8b0 [ 714.659198][ C1] ? __netif_receive_skb+0x1f/0x120 [ 714.659243][ C1] ? process_backlog+0x37a/0x1580 [ 714.659286][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 714.659333][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 714.659368][ C1] ? __local_bh_enable_ip+0xf8/0x120 [ 714.659402][ C1] ? neigh_resolve_output+0x51f/0x8f0 [ 714.659439][ C1] ? __ip6_finish_output+0x357/0x1080 [ 714.659480][ C1] ? ip6_xmit+0x1002/0x26e0 [ 714.659524][ C1] ? inet6_csk_xmit+0x387/0x760 [ 714.659551][ C1] ? __tcp_transmit_skb+0x1dd1/0x4b50 [ 714.659599][ C1] ? tcp_write_xmit+0x12a2/0x8980 [ 714.659625][ C1] ? __tcp_push_pending_frames+0xaf/0x3b0 [ 714.659653][ C1] ? __tcp_sock_set_cork.part.0+0x105/0x140 [ 714.659695][ C1] rds_recv_incoming+0xdbf/0x1150 [ 714.659732][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.659769][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 714.659803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.659839][ C1] ? skb_copy_bits+0x5c8/0x8d0 [ 714.659873][ C1] rds_tcp_data_recv+0x278/0xce0 [ 714.659913][ C1] __tcp_read_sock+0x204/0x8d0 [ 714.659958][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 714.659990][ C1] ? __pfx___tcp_read_sock+0x10/0x10 [ 714.660033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660070][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660109][ C1] rds_tcp_read_sock+0x12e/0x280 [ 714.660139][ C1] ? __pfx_rds_tcp_read_sock+0x10/0x10 [ 714.660168][ C1] ? lock_acquire+0x1cf/0x380 [ 714.660211][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660285][ C1] ? __sk_mem_schedule+0xd0/0x100 [ 714.660321][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 714.660348][ C1] rds_tcp_data_ready+0x1c9/0x790 [ 714.660378][ C1] ? tcp_data_ecn_check+0x1c0/0x750 [ 714.660415][ C1] tcp_data_ready+0x114/0x5a0 [ 714.660458][ C1] tcp_data_queue+0x1aca/0x4fd0 [ 714.660510][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660546][ C1] ? tcp_urg+0x10f/0xb80 [ 714.660580][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 714.660622][ C1] ? tcp_ecn_create_request+0x800/0x8d0 [ 714.660658][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 714.660691][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.660762][ C1] ? ktime_get+0x1a7/0x300 [ 714.660803][ C1] tcp_rcv_established+0xb64/0x3980 [ 714.660851][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 714.660893][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 714.660928][ C1] ? lock_acquire+0x1cf/0x380 [ 714.660971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.661010][ C1] tcp_v6_do_rcv+0x118b/0x1dd0 [ 714.661052][ C1] tcp_v6_rcv+0x2b03/0x42c0 [ 714.661102][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 714.661139][ C1] ? raw6_local_deliver+0x3f3/0xa80 [ 714.661173][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.661213][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.661248][ C1] ? raw6_local_deliver+0x3fd/0xa80 [ 714.661283][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 714.661327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.661364][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 714.661403][ C1] ip6_protocol_deliver_rcu+0x188/0x1500 [ 714.661457][ C1] ip6_input_finish+0x1e4/0x4a0 [ 714.661507][ C1] ip6_input+0x105/0x2f0 [ 714.661550][ C1] ip6_rcv_finish+0x1a9/0x550 [ 714.661594][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 714.661639][ C1] ip_sabotage_in+0x21e/0x290 [ 714.661667][ C1] nf_hook_slow+0xbf/0x220 [ 714.661702][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 714.661745][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 714.661790][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 714.661837][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 714.661886][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 714.661928][ C1] ipv6_rcv+0xa4/0x610 [ 714.661971][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 714.662013][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 714.662060][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 714.662109][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662145][ C1] ? lock_acquire+0x1cf/0x380 [ 714.662187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662228][ C1] __netif_receive_skb+0x1f/0x120 [ 714.662274][ C1] netif_receive_skb+0x139/0x820 [ 714.662319][ C1] ? br_multicast_count+0x8d/0xbc0 [ 714.662349][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 714.662395][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662440][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662477][ C1] ? br_netif_receive_skb+0xff/0x1f0 [ 714.662512][ C1] br_pass_frame_up+0x346/0x490 [ 714.662544][ C1] br_handle_frame_finish+0x166a/0x1f00 [ 714.662579][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 714.662613][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 714.662649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662685][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 714.662725][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 714.662765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.662801][ C1] ? nf_hook_slow+0x167/0x220 [ 714.662835][ C1] br_nf_hook_thresh+0x30d/0x420 [ 714.662865][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 714.662900][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 714.662933][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 714.662965][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 714.663014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663086][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 714.663127][ C1] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 714.663162][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 714.663199][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 714.663236][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 714.663269][ C1] ? lock_acquire+0x1cf/0x380 [ 714.663314][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 714.663348][ C1] ? net_generic+0xea/0x2a0 [ 714.663373][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663469][ C1] br_nf_pre_routing+0x93b/0x1510 [ 714.663514][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663556][ C1] br_handle_frame+0xcdd/0x1520 [ 714.663594][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 714.663630][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 714.663666][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.663708][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 714.663742][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 714.663921][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 714.663971][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.664153][ C1] ? nf_hook.constprop.0+0x2d9/0x750 [ 714.664229][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 714.664286][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 714.664328][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 714.664367][ C1] ? ip6_protocol_deliver_rcu+0x7ce/0x1500 [ 714.664442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.664484][ C1] ? __lock_acquire+0x4a5/0x2630 [ 714.664533][ C1] ? process_backlog+0x32a/0x1580 [ 714.664583][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 714.664635][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 714.664684][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.664727][ C1] ? lock_acquire+0x1cf/0x380 [ 714.664770][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.664806][ C1] ? process_backlog+0x32a/0x1580 [ 714.664853][ C1] ? process_backlog+0x32a/0x1580 [ 714.664897][ C1] __netif_receive_skb+0x1f/0x120 [ 714.664944][ C1] process_backlog+0x37a/0x1580 [ 714.664995][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 714.665044][ C1] net_rx_action+0xa40/0xf20 [ 714.665092][ C1] ? __entry_text_end+0x1020b5/0x1020b9 [ 714.665131][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 714.665178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665215][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665251][ C1] ? sched_clock+0x38/0x60 [ 714.665291][ C1] ? sched_clock_cpu+0x6c/0x570 [ 714.665346][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665381][ C1] ? mark_held_locks+0x40/0x70 [ 714.665426][ C1] handle_softirqs+0x1eb/0x9e0 [ 714.665465][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 714.665497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665535][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 714.665581][ C1] do_softirq+0xac/0xe0 [ 714.665614][ C1] [ 714.665624][ C1] [ 714.665634][ C1] __local_bh_enable_ip+0xf8/0x120 [ 714.665667][ C1] ? __dev_queue_xmit+0x7dc/0x4750 [ 714.665805][ C1] __dev_queue_xmit+0x7f1/0x4750 [ 714.665866][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665912][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.665956][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 714.665997][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 714.666050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.666094][ C1] ? ip6t_do_table+0xc1d/0x1c90 [ 714.666148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.666192][ C1] ? __lock_acquire+0x4a5/0x2630 [ 714.666250][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 714.666303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.666346][ C1] ? __asan_memcpy+0x3c/0x60 [ 714.666381][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.667012][ C1] ? eth_header+0x120/0x1f0 [ 714.667053][ C1] neigh_resolve_output+0x51f/0x8f0 [ 714.667101][ C1] ip6_finish_output2+0xb0f/0x1ce0 [ 714.667152][ C1] __ip6_finish_output+0x357/0x1080 [ 714.667197][ C1] ip6_output+0x2aa/0xa60 [ 714.667238][ C1] ? __pfx_ip6_output+0x10/0x10 [ 714.667281][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 714.667324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.667364][ C1] ip6_xmit+0x1002/0x26e0 [ 714.667403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.667439][ C1] ? __lock_acquire+0x4a5/0x2630 [ 714.667590][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 714.667630][ C1] ? __lock_acquire+0x4a5/0x2630 [ 714.667676][ C1] ? ip6_dst_check+0x343/0x950 [ 714.667717][ C1] ? __pfx_dst_output+0x10/0x10 [ 714.667773][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.667810][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.667855][ C1] inet6_csk_xmit+0x387/0x760 [ 714.667890][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 714.667920][ C1] __tcp_transmit_skb+0x1dd1/0x4b50 [ 714.667985][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 714.668141][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.668203][ C1] ? ktime_get+0x200/0x300 [ 714.668243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.669762][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 714.669806][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.669847][ C1] tcp_write_xmit+0x12a2/0x8980 [ 714.669892][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.669931][ C1] __tcp_push_pending_frames+0xaf/0x3b0 [ 714.669963][ C1] __tcp_sock_set_cork.part.0+0x105/0x140 [ 714.670005][ C1] tcp_sock_set_cork+0x9b/0xc0 [ 714.670041][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 714.670077][ C1] rds_send_xmit+0x17cb/0x2950 [ 714.670128][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 714.670166][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.670206][ C1] rds_send_worker+0x94/0x320 [ 714.670248][ C1] process_one_work+0x9d7/0x1920 [ 714.670309][ C1] ? __pfx_process_one_work+0x10/0x10 [ 714.670357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.670399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.670459][ C1] worker_thread+0x5da/0xe40 [ 714.670493][ C1] ? kthread+0x13a/0x450 [ 714.670540][ C1] ? __pfx_worker_thread+0x10/0x10 [ 714.670565][ C1] kthread+0x370/0x450 [ 714.670608][ C1] ? __pfx_kthread+0x10/0x10 [ 714.670653][ C1] ret_from_fork+0x754/0xd80 [ 714.670703][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 714.670750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.670786][ C1] ? __switch_to+0x7b4/0x1120 [ 714.670819][ C1] ? __pfx_kthread+0x10/0x10 [ 714.670864][ C1] ret_from_fork_asm+0x1a/0x30 [ 714.670907][ C1]