last executing test programs: 18.184095994s ago: executing program 3 (id=398): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c") ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 17.904736811s ago: executing program 3 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x21) 17.549637677s ago: executing program 3 (id=406): r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) eventfd(0xffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x50, 0x0, 0x0}) 17.347119295s ago: executing program 3 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 17.12023859s ago: executing program 3 (id=410): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xb320, 0x72242}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 16.238738461s ago: executing program 3 (id=415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 15.237130389s ago: executing program 32 (id=415): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 2.964830443s ago: executing program 1 (id=499): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.799497944s ago: executing program 4 (id=501): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.663338585s ago: executing program 4 (id=502): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x100000000) 2.606776985s ago: executing program 2 (id=503): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000001340)="89d87df03855", 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) 2.463534693s ago: executing program 4 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 2.239040799s ago: executing program 1 (id=506): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', &(0x7f0000000080)={0x8440, 0x40, 0x6}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 2.137249704s ago: executing program 2 (id=507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000300000000000000000000000005ffffffff0000000000000000000000000000000000000000020000000000f7ff00000000ffffffffffffffff07"], 0xb8}}, 0x10) 2.043787674s ago: executing program 0 (id=508): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="24200400858d0000500012800e00010069703665727370616e0000003c0002800500160002000000060018000100000004001200"], 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2.001972496s ago: executing program 4 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) 1.903028177s ago: executing program 2 (id=510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1.639060943s ago: executing program 1 (id=511): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x80}, 0x40000) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 1.583129701s ago: executing program 0 (id=512): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r0, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) 1.466710934s ago: executing program 1 (id=513): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.132368329s ago: executing program 0 (id=514): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x64010102}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r2, 0xa19, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020}, 0x80) 937.831405ms ago: executing program 0 (id=515): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x1c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0179e08}) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0x81a) 931.4691ms ago: executing program 5 (id=416): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, 0x0, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff0f000000000000}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 875.060454ms ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001ab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 665.098997ms ago: executing program 5 (id=517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000f80)=0xd) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1}}, 0x14}}, 0x20040080) 663.507829ms ago: executing program 4 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @remote}}}}}}, 0x0) 581.371518ms ago: executing program 0 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x48f, 0x0, 0xffffffffffffffff}]}) writev(r2, 0x0, 0x0) 580.091081ms ago: executing program 1 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x302) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 395.982891ms ago: executing program 5 (id=521): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 210.859844ms ago: executing program 2 (id=522): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x6e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 201.31242ms ago: executing program 1 (id=523): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000340)={{0xc, @empty, 0x4e20, 0x2, 'sh\x00', 0x28, 0x1, 0x40080}, {@multicast1, 0x0, 0x0, 0x0, 0x5, 0x800}}, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 159.991106ms ago: executing program 4 (id=524): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c696f636861727365743d63703933362c6572726f72733d72656d6f756e742d726f2c757466382c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030342c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c007718493fa5e1236995baf2ad873ae8a6dcba132eaa9b3fc33fca0eae1117284d531e0b15de5920ba8a9def72ef71fa641ef945666de6243e41bb8a0d9891ba7da5b33fb6bf7c7523288c5ee3cd60793ca5e511de63ffdaff0aee632ad6e89f82002b43d590db5fc4d2f43254f8930172f330adcd3cc857a05479d5b30736918a2cadb61c826243c33db0e3bf385b005236710fa3aef32a9eca8f6978e6f582ddb2514f7178088106458bf95f327c8ec213f75eb9a7942bdef6afca47a252fe8d2e6dca8f25704e6e7031521fa0f8aad51387e033e016b1a9c460", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='.\x00', 0x81bc68, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 86.631595ms ago: executing program 0 (id=525): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d40), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 0s ago: executing program 2 (id=526): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000700)='\x00') pread64(r1, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 78.717495][ T5611] cgroup: Unknown subsys name 'net' [ 78.865438][ T5611] cgroup: Unknown subsys name 'cpuset' [ 78.873342][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.543800][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.914354][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.916626][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.924918][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.925846][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.933332][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.933448][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.944307][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.947475][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.962172][ T4939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.985987][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.031676][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.041929][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.049659][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.059381][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.067221][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.077316][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.084812][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.088379][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.103733][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.103984][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.118401][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.129874][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.136797][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.140179][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.153992][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.021545][ T52] Bluetooth: hci0: command tx timeout [ 85.022190][ T4939] Bluetooth: hci1: command tx timeout [ 85.060729][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.061143][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.061768][ T5631] bridge_slave_0: entered allmulticast mode [ 85.067602][ T5631] bridge_slave_0: entered promiscuous mode [ 85.127767][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.128292][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.128667][ T5631] bridge_slave_1: entered allmulticast mode [ 85.135906][ T5631] bridge_slave_1: entered promiscuous mode [ 85.180299][ T52] Bluetooth: hci2: command tx timeout [ 85.180960][ T52] Bluetooth: hci4: command tx timeout [ 85.181537][ T4939] Bluetooth: hci3: command tx timeout [ 85.246758][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.250956][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.251396][ T5633] bridge_slave_0: entered allmulticast mode [ 85.256056][ T5633] bridge_slave_0: entered promiscuous mode [ 85.282125][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.291538][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.306009][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.306386][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.307486][ T5621] bridge_slave_0: entered allmulticast mode [ 85.319282][ T5621] bridge_slave_0: entered promiscuous mode [ 85.332431][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.332542][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.333630][ T5633] bridge_slave_1: entered allmulticast mode [ 85.347449][ T5633] bridge_slave_1: entered promiscuous mode [ 85.389811][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.391083][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.393224][ T5621] bridge_slave_1: entered allmulticast mode [ 85.398211][ T5621] bridge_slave_1: entered promiscuous mode [ 85.482454][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.483011][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.483268][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.483612][ T5632] bridge_slave_0: entered allmulticast mode [ 85.494774][ T5632] bridge_slave_0: entered promiscuous mode [ 85.503758][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.504042][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.505171][ T5632] bridge_slave_1: entered allmulticast mode [ 85.510004][ T5632] bridge_slave_1: entered promiscuous mode [ 85.529993][ T5631] team0: Port device team_slave_0 added [ 85.556832][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.557063][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.557403][ T5622] bridge_slave_0: entered allmulticast mode [ 85.570713][ T5622] bridge_slave_0: entered promiscuous mode [ 85.586403][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.608778][ T5631] team0: Port device team_slave_1 added [ 85.616828][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.618315][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.618811][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.619177][ T5622] bridge_slave_1: entered allmulticast mode [ 85.633807][ T5622] bridge_slave_1: entered promiscuous mode [ 85.698552][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.730203][ T5633] team0: Port device team_slave_0 added [ 85.737710][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.748888][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.755545][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.755597][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.755670][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.817015][ T5633] team0: Port device team_slave_1 added [ 85.833509][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.833550][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.833578][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.882003][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.926583][ T5621] team0: Port device team_slave_0 added [ 85.933334][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.941796][ T5621] team0: Port device team_slave_1 added [ 85.959900][ T5632] team0: Port device team_slave_0 added [ 85.985785][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.985836][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.985863][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.004817][ T5632] team0: Port device team_slave_1 added [ 86.039286][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.039334][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.039362][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.122041][ T5622] team0: Port device team_slave_0 added [ 86.153307][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.153353][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.154129][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.168905][ T5622] team0: Port device team_slave_1 added [ 86.204404][ T5631] hsr_slave_0: entered promiscuous mode [ 86.210605][ T5631] hsr_slave_1: entered promiscuous mode [ 86.216805][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.216840][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.216868][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.222627][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.222669][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.222745][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.306186][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.306219][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.307230][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.383299][ T5633] hsr_slave_0: entered promiscuous mode [ 86.390596][ T5633] hsr_slave_1: entered promiscuous mode [ 86.393519][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 86.393817][ T5633] Cannot create hsr debugfs directory [ 86.408520][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.408577][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.408605][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.496365][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.496413][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.496454][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.573526][ T5621] hsr_slave_0: entered promiscuous mode [ 86.581013][ T5621] hsr_slave_1: entered promiscuous mode [ 86.583097][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.583159][ T5621] Cannot create hsr debugfs directory [ 86.631842][ T5632] hsr_slave_0: entered promiscuous mode [ 86.634473][ T5632] hsr_slave_1: entered promiscuous mode [ 86.636484][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 86.636535][ T5632] Cannot create hsr debugfs directory [ 86.790744][ T5622] hsr_slave_0: entered promiscuous mode [ 86.793467][ T5622] hsr_slave_1: entered promiscuous mode [ 86.795467][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 86.795527][ T5622] Cannot create hsr debugfs directory [ 87.100993][ T5625] Bluetooth: hci0: command tx timeout [ 87.106562][ T4939] Bluetooth: hci1: command tx timeout [ 87.261386][ T4939] Bluetooth: hci3: command tx timeout [ 87.261437][ T4939] Bluetooth: hci4: command tx timeout [ 87.261478][ T4939] Bluetooth: hci2: command tx timeout [ 87.375956][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.392612][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.395298][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.412961][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.424935][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.437519][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.445643][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.462276][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.544500][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.556916][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.568757][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.580012][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.587474][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.595508][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.601827][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.613859][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.707367][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.718466][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.732784][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.743641][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.774091][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.784142][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.797040][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.808376][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.875836][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.888632][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.897686][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.908205][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.930835][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.941556][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.951363][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.976416][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.987975][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.084567][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.096206][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.107084][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.124292][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.134506][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.152219][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.162687][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.173593][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.173883][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.189120][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.189369][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.210809][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.221615][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.303274][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.356468][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.383943][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.384214][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.419512][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.419899][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.456876][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.577102][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.595527][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.638212][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.638493][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.689053][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.689324][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.751365][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.771106][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.788945][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.789073][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.836980][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.837253][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.925323][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.974202][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.974418][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.009924][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.010319][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.180531][ T5625] Bluetooth: hci1: command tx timeout [ 89.180583][ T5625] Bluetooth: hci0: command tx timeout [ 89.275822][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.341183][ T4939] Bluetooth: hci2: command tx timeout [ 89.343463][ T4939] Bluetooth: hci4: command tx timeout [ 89.343525][ T4939] Bluetooth: hci3: command tx timeout [ 89.508509][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.771060][ T5631] veth0_vlan: entered promiscuous mode [ 89.818524][ T5631] veth1_vlan: entered promiscuous mode [ 89.978528][ T5631] veth0_macvtap: entered promiscuous mode [ 90.026255][ T5631] veth1_macvtap: entered promiscuous mode [ 90.106395][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.135694][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.158317][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.193487][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.231794][ T1399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.373704][ T27] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.373782][ T27] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.373883][ T27] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566173][ T5633] veth0_vlan: entered promiscuous mode [ 90.604088][ T1399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.604135][ T1399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.658759][ T5633] veth1_vlan: entered promiscuous mode [ 90.682316][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.718384][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.756468][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.756524][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.888856][ T5633] veth0_macvtap: entered promiscuous mode [ 90.925110][ T5631] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.974260][ T5633] veth1_macvtap: entered promiscuous mode [ 90.998156][ T5632] veth0_vlan: entered promiscuous mode [ 91.098765][ T5632] veth1_vlan: entered promiscuous mode [ 91.105018][ T5622] veth0_vlan: entered promiscuous mode [ 91.184758][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.219333][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.244876][ T5622] veth1_vlan: entered promiscuous mode [ 91.261110][ T4939] Bluetooth: hci1: command tx timeout [ 91.264554][ T5625] Bluetooth: hci0: command tx timeout [ 91.313978][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330847][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330925][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330968][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.394359][ T5632] veth0_macvtap: entered promiscuous mode [ 91.409105][ T5621] veth0_vlan: entered promiscuous mode [ 91.420504][ T5625] Bluetooth: hci3: command tx timeout [ 91.420555][ T5625] Bluetooth: hci4: command tx timeout [ 91.420594][ T5625] Bluetooth: hci2: command tx timeout [ 91.449856][ T5632] veth1_macvtap: entered promiscuous mode [ 91.535469][ T5621] veth1_vlan: entered promiscuous mode [ 91.634310][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.655677][ T5622] veth0_macvtap: entered promiscuous mode [ 91.701656][ T5824] loop2: detected capacity change from 0 to 1024 [ 91.729205][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.739784][ T5622] veth1_macvtap: entered promiscuous mode [ 91.780827][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.780867][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.822389][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.835684][ T1399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.928578][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.940501][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.940693][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.940895][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948681][ T5621] veth0_macvtap: entered promiscuous mode [ 91.988010][ T25] cfg80211: failed to load regulatory.db [ 92.011110][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.024020][ T5621] veth1_macvtap: entered promiscuous mode [ 92.037699][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.058838][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.058882][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.205244][ T1013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218319][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218416][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.243916][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.307150][ T5829] No fuse device found [ 92.307860][ T5829] No fuse device found [ 92.307957][ T5829] No fuse device found [ 92.308042][ T5829] No fuse device found [ 92.308134][ T5829] No fuse device found [ 92.308222][ T5829] No fuse device found [ 92.308308][ T5829] No fuse device found [ 92.308386][ T5829] No fuse device found [ 92.308470][ T5829] No fuse device found [ 92.308553][ T5829] No fuse device found [ 92.360571][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.387316][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.392615][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.392669][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.515255][ T5833] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 92.550825][ T1399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.550908][ T1399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551005][ T1399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551156][ T1399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.662953][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.662999][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.768860][ T1390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.768914][ T1390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.034616][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.034655][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.194599][ T1390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.194646][ T1390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.404033][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.404120][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.840692][ T5767] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.946603][ T5864] Illegal XDP return value 32768 on prog (id 3) dev syz_tun, expect packet loss! [ 94.036723][ T5767] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 94.083876][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.097282][ T5767] usb 4-1: Product: syz [ 94.097334][ T5767] usb 4-1: Manufacturer: syz [ 94.097356][ T5767] usb 4-1: SerialNumber: syz [ 94.128030][ T5860] loop2: detected capacity change from 0 to 32768 [ 94.129570][ T5860] ======================================================= [ 94.129570][ T5860] WARNING: The mand mount option has been deprecated and [ 94.129570][ T5860] and is ignored by this kernel. Remove the mand [ 94.129570][ T5860] option from the mount to silence this warning. [ 94.129570][ T5860] ======================================================= [ 94.246417][ T5860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.292545][ T32] audit: type=1800 audit(1787767998.243:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 94.692635][ T5767] rtl8150 4-1:1.0: couldn't reset the device [ 94.703799][ T5767] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 94.758861][ T5767] usb 4-1: USB disconnect, device number 2 [ 94.856671][ T5860] syz.2.15 (5860) used greatest stack depth: 19272 bytes left [ 95.197836][ T5876] loop1: detected capacity change from 0 to 32768 [ 95.199196][ T5876] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 95.208905][ T5876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17 (5876) [ 95.250969][ T5876] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.251038][ T5876] BTRFS info (device loop1): using crc32c checksum algorithm [ 95.449008][ T5876] BTRFS info (device loop1): rebuilding free space tree [ 95.501743][ T5876] BTRFS info (device loop1): disabling free space tree [ 95.501848][ T5876] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.501891][ T5876] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.544753][ T5876] BTRFS info (device loop1): enabling ssd optimizations [ 95.544805][ T5876] BTRFS info (device loop1): disabling tree log [ 95.544845][ T5876] BTRFS info (device loop1): turning on sync discard [ 95.544872][ T5876] BTRFS info (device loop1): force clearing of disk cache [ 95.913830][ T5631] ocfs2: Unmounting device (7,2) on (node local) [ 96.129393][ T5632] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.698651][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.749882][ T5918] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 96.750157][ T5918] Zero length message leads to an empty skb [ 96.771292][ T5921] loop0: detected capacity change from 0 to 256 [ 96.786638][ T5921] exfat: Deprecated parameter 'utf8' [ 96.793922][ T5921] exfat: Deprecated parameter 'namecase' [ 96.948846][ T5921] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 97.358147][ T5936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 97.358178][ T5936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.364382][ T5936] vhci_hcd vhci_hcd.0: Device attached [ 97.574074][ T5751] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 97.640476][ T5751] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 97.673166][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.845206][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 97.846793][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 97.859304][ T9] usb 1-1: config 0 has no interfaces? [ 97.872142][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.872194][ T9] usb 1-1: Product: syz [ 97.872211][ T9] usb 1-1: Manufacturer: syz [ 97.872287][ T9] usb 1-1: SerialNumber: syz [ 97.928627][ T9] usb 1-1: config 0 descriptor?? [ 98.100264][ T5624] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.159138][ T5938] usb 33-1: recv xbuf, 0 [ 98.165840][ T1013] vhci_hcd vhci_hcd.0: stop threads [ 98.165885][ T1013] vhci_hcd vhci_hcd.0: release socket [ 98.177754][ T5767] usb 1-1: USB disconnect, device number 2 [ 98.187286][ T1013] vhci_hcd vhci_hcd.0: disconnect device [ 98.201164][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.240233][ T5751] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 98.261464][ T5624] usb 4-1: Using ep0 maxpacket: 16 [ 98.271001][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.271086][ T5624] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 98.279741][ T5624] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 98.301951][ T5624] usb 4-1: string descriptor 0 read error: -22 [ 98.302254][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.332710][ T5942] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 98.350672][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 98.352578][ T9] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 98.376262][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.376314][ T9] usb 2-1: config 0 has no interfaces? [ 98.419769][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.419825][ T9] usb 2-1: Product: syz [ 98.419841][ T9] usb 2-1: Manufacturer: syz [ 98.419857][ T9] usb 2-1: SerialNumber: syz [ 98.484189][ T9] usb 2-1: config 0 descriptor?? [ 98.489686][ T5624] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.489824][ T5624] usb 4-1: MIDIStreaming interface descriptor not found [ 98.799361][ T5943] mmap: syz.1.28 (5943) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.980003][ T5624] usb 4-1: USB disconnect, device number 3 [ 99.212377][ T5954] printk: legacy console [ttyGS0] disabled [ 99.436193][ T5624] usb 2-1: USB disconnect, device number 2 [ 99.477503][ T5955] loop0: detected capacity change from 0 to 4096 [ 99.643482][ T5955] ntfs3(loop0): Failed to read $AttrDef (-5). [ 99.991206][ T5635] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.150943][ T5635] usb 3-1: Using ep0 maxpacket: 8 [ 100.159919][ T5635] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 100.179812][ T5635] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.179871][ T5635] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.179924][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 100.179958][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 100.180008][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.250297][ T5635] hub 3-1:1.0: bad descriptor, ignoring hub [ 100.250369][ T5635] hub 3-1:1.0: probe with driver hub failed with error -5 [ 100.252502][ T5635] cdc_wdm 3-1:1.0: skipping garbage [ 100.252529][ T5635] cdc_wdm 3-1:1.0: skipping garbage [ 100.285433][ T5635] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 100.292099][ T5635] cdc_wdm 3-1:1.0: Unknown control protocol [ 101.111427][ T5998] loop3: detected capacity change from 0 to 4096 [ 101.161061][ T5998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.161137][ T5998] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.232819][ T5998] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 101.233358][ T5998] System zones: 0-5 [ 101.344034][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.476664][ T5998] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 101.865788][ T6006] fscrypt: AES-256-XTS using blk-crypto-fallback [ 102.032429][ T5724] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.195174][ T5724] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.208384][ T5724] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.208463][ T5724] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.208513][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.472483][ T6026] loop4: detected capacity change from 0 to 1024 [ 102.483211][ T5724] usb 2-1: usb_control_msg returned -32 [ 102.483280][ T5724] usbtmc 2-1:16.0: can't read capabilities [ 102.524964][ T6026] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 102.566386][ T6026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.566547][ T6026] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.702091][ T6026] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.64: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.727405][ T5624] usb 3-1: USB disconnect, device number 2 [ 102.727514][ T6026] EXT4-fs (loop4): Remounting filesystem read-only [ 102.933157][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.948448][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.003112][ T6033] loop2: detected capacity change from 0 to 512 [ 103.010617][ T6033] EXT4-fs: Ignoring removed bh option [ 103.081687][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.081810][ T6033] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.231996][ T6039] loop3: detected capacity change from 0 to 128 [ 103.285853][ T6039] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.342021][ T6039] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.359851][ T6039] ext2 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.462175][ T32] audit: type=1800 audit(1787768007.413:3): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=15 res=0 errno=0 [ 103.559118][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.749802][ T5633] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.271536][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.341296][ T6061] fuse_uring_cmd: 3150 callbacks suppressed [ 104.341984][ T6061] No fuse device found [ 104.342155][ T6061] No fuse device found [ 104.342252][ T6061] No fuse device found [ 104.342329][ T6061] No fuse device found [ 104.342414][ T6061] No fuse device found [ 104.342499][ T6061] No fuse device found [ 104.342589][ T6061] No fuse device found [ 104.342667][ T6061] No fuse device found [ 104.342751][ T6061] No fuse device found [ 104.342827][ T6061] No fuse device found [ 104.433320][ T5751] usb 1-1: Using ep0 maxpacket: 16 [ 104.447949][ T5751] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.452194][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.452288][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.452355][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.452517][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.485650][ T5751] usb 1-1: config 0 descriptor?? [ 104.843736][ T5624] usb 2-1: USB disconnect, device number 3 [ 104.973855][ T5751] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 104.991373][ T5751] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 105.220297][ T5751] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 105.274399][ T5751] usb 1-1: USB disconnect, device number 3 [ 105.449121][ T6065] loop3: detected capacity change from 0 to 40427 [ 105.501730][ T6065] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.520879][ T6065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.540941][ T6065] F2FS-fs (loop3): invalid crc value [ 105.569279][ T6075] fido_id[6075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.725451][ T6072] loop4: detected capacity change from 0 to 32768 [ 105.753338][ T6072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.79 (6072) [ 105.767758][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 105.783720][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.936518][ T6072] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.936584][ T6072] BTRFS info (device loop4): using sha256 checksum algorithm [ 105.957648][ T189] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.967243][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.967268][ T189] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.993621][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.993676][ T189] usb 2-1: SerialNumber: syz [ 106.166219][ T6065] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.202909][ T6065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.210706][ T6065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.276042][ T6072] BTRFS info (device loop4): rebuilding free space tree [ 106.326701][ T189] usb 2-1: 0:2 : does not exist [ 106.326878][ T189] usb 2-1: unit 2 not found! [ 106.457946][ T6072] BTRFS info (device loop4): enabling ssd optimizations [ 106.458013][ T6072] BTRFS info (device loop4): using spread ssd allocation scheme [ 106.458053][ T6072] BTRFS info (device loop4): turning on async discard [ 106.458071][ T6072] BTRFS info (device loop4): enabling free space tree [ 106.458143][ T6072] BTRFS info (device loop4): force clearing of disk cache [ 106.698206][ T189] usb 2-1: USB disconnect, device number 4 [ 107.025932][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.235126][ T5621] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.315156][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.315743][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.315837][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.315924][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316013][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316087][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316160][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316228][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316303][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.316371][ T6141] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 108.478818][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 108.478872][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 108.478901][ T6146] netlink: 'syz.1.101': attribute type 12 has an invalid length. [ 108.656228][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.656463][ T135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.656509][ T135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.656550][ T135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.127441][ T50] Bluetooth: (null): Invalid header checksum [ 109.127628][ T50] Bluetooth: (null): Invalid header checksum [ 109.224345][ T6157] loop4: detected capacity change from 0 to 32768 [ 109.235106][ T1013] Bluetooth: (null): Invalid header checksum [ 109.274143][ T6157] JBD2: Ignoring recovery information on journal [ 109.342950][ T1013] Bluetooth: (null): Invalid header checksum [ 109.354943][ T6157] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 109.701519][ T6164] loop0: detected capacity change from 0 to 32768 [ 109.732601][ T6164] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 109.764748][ T6164] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.848267][ T32] audit: type=1800 audit(1787768013.793:4): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.900486][ T6166] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 6 used bits, but a count shows 5 [ 109.921964][ T6166] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.933675][ T6166] OCFS2: File system is now read-only. [ 109.939651][ T6166] (syz.4.106,6166,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 109.949518][ T6166] (syz.4.106,6166,0):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30 [ 109.997173][ T6166] (syz.4.106,6166,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30 [ 109.997252][ T6166] (syz.4.106,6166,0):ocfs2_mknod:366 ERROR: status = -30 [ 109.997549][ T6166] (syz.4.106,6166,0):ocfs2_mknod:513 ERROR: status = -30 [ 109.997581][ T6166] (syz.4.106,6166,0):ocfs2_create:685 ERROR: status = -30 [ 110.148042][ T6166] syz.4.106 (6166) used greatest stack depth: 19240 bytes left [ 110.424833][ T5621] ocfs2: Unmounting device (7,4) on (node local) [ 110.608841][ T6164] syz.0.110 (6164) used greatest stack depth: 19104 bytes left [ 110.752549][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 112.056789][ T6220] process 'syz.4.127' launched './file1' with NULL argv: empty string added [ 112.398594][ T6231] loop2: detected capacity change from 0 to 128 [ 112.459378][ T6231] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.486137][ T6231] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.749896][ T5631] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.903527][ T6242] loop0: detected capacity change from 0 to 512 [ 112.918532][ T6242] overlayfs: failed lookup in lower (newroot/24, name='file0', err=-40): overlapping layers [ 112.944964][ T6242] overlayfs: failed lookup in lower (newroot/24, name='file0', err=-40): overlapping layers [ 112.972169][ T6242] evm: overlay not supported [ 114.145383][ T6254] loop3: detected capacity change from 0 to 131072 [ 114.147746][ T6254] xfs: Deprecated parameter 'ikeep' [ 114.147796][ T6254] XFS: ikeep mount option is deprecated. [ 114.242094][ T6254] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 114.385497][ T6254] XFS (loop3): Starting recovery (logdev: internal) [ 114.493106][ T6263] loop4: detected capacity change from 0 to 131072 [ 114.494039][ T6263] xfs: Deprecated parameter 'ikeep' [ 114.494077][ T6263] XFS: ikeep mount option is deprecated. [ 114.555943][ T6254] XFS (loop3): Ending recovery (logdev: internal) [ 114.592832][ T6275] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 114.624572][ T6263] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 114.795213][ T6263] XFS (loop4): Starting recovery (logdev: internal) [ 114.869246][ T6263] XFS (loop4): Ending recovery (logdev: internal) [ 115.193588][ T6290] netlink: 27 bytes leftover after parsing attributes in process `syz.1.146'. [ 115.202677][ T5621] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 115.275226][ T5633] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 115.805487][ T6288] loop2: detected capacity change from 0 to 32768 [ 115.847202][ T6288] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 115.906843][ T6288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.145 (6288) [ 116.033946][ T6298] loop0: detected capacity change from 0 to 1024 [ 116.066559][ T6298] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.151: inode #327680: comm syz.0.151: iget: illegal inode # [ 116.067009][ T6298] loop0: lost filesystem error report for type 5 error -117 [ 116.082796][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 116.082857][ C0] EXT4-fs (loop0): initial error at time 1787768020: ext4_get_journal_inode:5927 [ 116.082903][ C0] EXT4-fs (loop0): last error at time 1787768020: ext4_get_journal_inode:5927 [ 116.143875][ T6298] EXT4-fs (loop0): no journal found [ 116.245743][ T6288] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.245831][ T6288] BTRFS info (device loop2): using crc32c checksum algorithm [ 116.591681][ T6288] BTRFS info (device loop2): rebuilding free space tree [ 116.770911][ T6288] BTRFS info (device loop2): disabling free space tree [ 116.770997][ T6288] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.771040][ T6288] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.812223][ T6288] BTRFS info (device loop2): setting nodatasum [ 116.812270][ T6288] BTRFS info (device loop2): enabling ssd optimizations [ 116.812312][ T6288] BTRFS info (device loop2): turning off barriers [ 116.812335][ T6288] BTRFS info (device loop2): turning on flush-on-commit [ 116.812358][ T6288] BTRFS info (device loop2): force clearing of disk cache [ 116.919314][ T32] audit: type=1800 audit(1787768020.863:5): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 117.903883][ T5631] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.504100][ T6333] loop4: detected capacity change from 0 to 40427 [ 118.520228][ T6333] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 118.528982][ T6333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.574299][ T6336] loop0: detected capacity change from 0 to 32768 [ 118.700618][ T6333] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.724936][ T6336] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.749822][ T6333] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.757702][ T6333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.816356][ T32] audit: type=1800 audit(1787768022.763:6): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.158" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 118.984676][ T5621] syz-executor: attempt to access beyond end of device [ 118.984676][ T5621] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.015791][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 119.015833][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.015854][ T5621] Call Trace: [ 119.015868][ T5621] [ 119.015877][ T5621] dump_stack_lvl+0xe8/0x150 [ 119.015928][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 119.015962][ T5621] f2fs_write_end_bio+0x1211/0x16e0 [ 119.015998][ T5621] ? blkg_put+0x22/0x240 [ 119.016039][ T5621] __submit_merged_bio+0x258/0x6a0 [ 119.016066][ T5621] ? rcu_is_watching+0x16/0xb0 [ 119.016099][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 119.016142][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 119.016194][ T5621] f2fs_write_data_pages+0x2a27/0x36f0 [ 119.016225][ T5621] ? __lock_acquire+0x6df/0x2e50 [ 119.016284][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.016314][ T5621] ? is_bpf_text_address+0x26/0x2b0 [ 119.016359][ T5621] ? arch_stack_walk+0xfb/0x150 [ 119.016416][ T5621] ? add_lock_to_list+0xc7/0x100 [ 119.016446][ T5621] ? lockdep_unlock+0x5c/0xd0 [ 119.016477][ T5621] ? __lock_acquire+0x14b9/0x2e50 [ 119.016534][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.016578][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 119.016609][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.016642][ T5621] do_writepages+0x338/0x560 [ 119.016690][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 119.016726][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 119.016754][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 119.016825][ T5621] ? preempt_schedule_common+0x7f/0xd0 [ 119.016859][ T5621] ? preempt_schedule_thunk+0x16/0x40 [ 119.016894][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 119.016943][ T5621] f2fs_write_checkpoint+0xa3d/0x2710 [ 119.016975][ T5621] ? __lock_acquire+0x6df/0x2e50 [ 119.017032][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 119.017122][ T5621] kill_f2fs_super+0x2dd/0x700 [ 119.017164][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 119.017209][ T5621] ? call_rcu+0x64d/0x8b0 [ 119.017236][ T5621] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.017284][ T5621] deactivate_locked_super+0xbc/0x110 [ 119.017318][ T5621] cleanup_mnt+0x3d3/0x460 [ 119.017359][ T5621] task_work_run+0x1d9/0x270 [ 119.017388][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 119.017424][ T5621] exit_to_user_mode_loop+0x204/0x770 [ 119.017448][ T5621] ? rcu_is_watching+0x16/0xb0 [ 119.017480][ T5621] do_syscall_64+0x328/0x520 [ 119.017512][ T5621] ? trace_irq_disable+0x3b/0x140 [ 119.017533][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.017556][ T5621] ? clear_bhb_loop+0x70/0xc0 [ 119.017584][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.017606][ T5621] RIP: 0033:0x7f0af5f9f317 [ 119.017635][ T5621] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.017659][ T5621] RSP: 002b:00007ffebcd4d7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.017684][ T5621] RAX: 0000000000000000 RBX: 00007f0af6034474 RCX: 00007f0af5f9f317 [ 119.017699][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebcd4d870 [ 119.017713][ T5621] RBP: 00007ffebcd4d870 R08: 00007ffebcd4e870 R09: 00000000ffffffff [ 119.017728][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebcd4e900 [ 119.017742][ T5621] R13: 00007f0af6034474 R14: 000000000001d00e R15: 00007ffebcd4e940 [ 119.017778][ T5621] [ 119.060302][ T5621] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 119.400654][ T5751] loop4: lost filesystem error report for type 5 error -108 [ 119.455966][ T6368] netlink: 232 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.519505][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 119.623947][ T6366] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 119.673393][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 120.273700][ T6391] binder: 6388:6391 ioctl c0306201 2000000001c0 returned -14 [ 120.468267][ T6401] loop3: detected capacity change from 0 to 512 [ 120.530372][ T6405] loop4: detected capacity change from 0 to 128 [ 120.602788][ T6401] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.183: bg 0: block 7: invalid block bitmap [ 120.602866][ T6401] loop3: lost filesystem error report for type 5 error -117 [ 120.620098][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 120.620154][ C0] EXT4-fs (loop3): initial error at time 1787768280: ext4_validate_block_bitmap:436 [ 120.620715][ C0] EXT4-fs (loop3): last error at time 1787768280: ext4_validate_block_bitmap:436 [ 120.714816][ T6401] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 120.714870][ T6401] loop3: lost filesystem error report for type 5 error -117 [ 120.767184][ T6401] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.183: corrupted xattr block 95: invalid header [ 120.796684][ T6401] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.813745][ T6401] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 120.814725][ T6401] EXT4-fs (loop3): 1 orphan inode deleted [ 120.839028][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.948074][ T6401] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.161815][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.471630][ T6433] jffs2: notice: (6433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.125129][ T6462] loop3: detected capacity change from 0 to 512 [ 122.168918][ T6462] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 122.270756][ T6464] netlink: 156 bytes leftover after parsing attributes in process `syz.2.205'. [ 122.492396][ T6476] loop3: detected capacity change from 0 to 512 [ 122.522735][ T6476] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.543173][ T6476] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 122.543229][ T6476] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 122.584343][ T6476] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 122.593741][ T6476] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.219: corrupted in-inode xattr: e_name out of bounds [ 122.607894][ T6476] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.608604][ T6476] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.219: couldn't read orphan inode 15 (err -117) [ 122.618538][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 122.618565][ C1] EXT4-fs (loop3): initial error at time 1787768282: ext4_iget_extra_inode:5210: inode 15 [ 122.618602][ C1] EXT4-fs (loop3): last error at time 1787768282: ext4_iget_extra_inode:5210: inode 15 [ 122.642938][ T6476] loop3: lost filesystem error report for type 5 error -117 [ 122.669696][ T6476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.749399][ T6476] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.749461][ T6476] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 122.749498][ T6476] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 122.757449][ T6476] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.757490][ T6476] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 122.757527][ T6476] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 122.845839][ T6480] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.861370][ T6480] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 122.871688][ T6480] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.219: Corrupt directory, running e2fsck is recommended [ 122.966990][ T6476] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 123.156870][ T6484] loop2: detected capacity change from 0 to 8 [ 123.193176][ T6485] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 123.261628][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.321778][ T6487] loop0: detected capacity change from 0 to 4096 [ 123.380243][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 123.632312][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 124.385506][ T6510] loop4: detected capacity change from 0 to 4096 [ 124.392000][ T6510] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 124.459912][ T6510] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 124.790917][ T6524] loop2: detected capacity change from 0 to 128 [ 124.943445][ T6524] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.943526][ T6524] hpfs: filesystem error: improperly stopped [ 124.943549][ T6524] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.943572][ T6524] hpfs: You really don't want any checks? You are crazy... [ 124.943594][ T6524] hpfs: Code page index out of array [ 124.943606][ T6524] hpfs: code page support is disabled [ 124.990527][ T6524] hpfs: hpfs_map_4sectors(): unaligned read [ 125.021447][ T6524] hpfs: hpfs_map_4sectors(): unaligned read [ 125.021491][ T6524] hpfs: filesystem error: unable to find root dir [ 125.223922][ T6524] hpfs: hpfs_map_4sectors(): unaligned read [ 125.473832][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.238'. [ 125.602606][ T6556] netlink: 7 bytes leftover after parsing attributes in process `syz.0.240'. [ 125.721923][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.862704][ T6568] loop2: detected capacity change from 0 to 4096 [ 125.891527][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 125.894994][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.918697][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.919887][ T9] usb 5-1: config 0 has no interface number 0 [ 125.919947][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 125.938828][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.938932][ T9] usb 5-1: Product: syz [ 125.943479][ T9] usb 5-1: Manufacturer: syz [ 125.943532][ T9] usb 5-1: SerialNumber: syz [ 125.989332][ T9] usb 5-1: config 0 descriptor?? [ 126.045397][ T32] audit: type=1800 audit(1787768285.989:7): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="nullb0" dev="tmpfs" ino=294 res=0 errno=0 [ 126.264973][ T6580] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.428480][ T32] audit: type=1800 audit(1787768286.369:8): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 126.665211][ T6579] loop3: detected capacity change from 0 to 40427 [ 126.689080][ T6579] F2FS-fs (loop3): build fault injection rate: 174 [ 126.689122][ T6579] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 126.707357][ T6579] F2FS-fs (loop3): invalid crc value [ 127.075422][ T6579] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 127.159112][ T6579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.267066][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 127.267126][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 127.273686][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.273774][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.273822][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 127.273869][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 127.336366][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 127.347690][ T6579] syz.3.249: attempt to access beyond end of device [ 127.347690][ T6579] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.409751][ T9] usb 5-1: USB disconnect, device number 2 [ 127.445562][ T6579] syz.3.249: attempt to access beyond end of device [ 127.445562][ T6579] loop3: rw=8390659, sector=45096, nr_sectors = 8 limit=40427 [ 127.563687][ T6611] loop9: detected capacity change from 0 to 8 [ 127.587181][ T5633] syz-executor: attempt to access beyond end of device [ 127.587181][ T5633] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 127.587689][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 127.587722][ T5633] Tainted: [L]=SOFTLOCKUP [ 127.587731][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.587744][ T5633] Call Trace: [ 127.587752][ T5633] [ 127.587762][ T5633] dump_stack_lvl+0xe8/0x150 [ 127.587801][ T5633] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 127.587838][ T5633] f2fs_write_end_bio+0x1211/0x16e0 [ 127.587874][ T5633] ? blkg_put+0x22/0x240 [ 127.587916][ T5633] __submit_merged_bio+0x258/0x6a0 [ 127.587942][ T5633] ? rcu_is_watching+0x16/0xb0 [ 127.587975][ T5633] __submit_merged_write_cond+0x3c9/0x4e0 [ 127.588012][ T5633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 127.588064][ T5633] f2fs_write_data_pages+0x2a27/0x36f0 [ 127.588095][ T5633] ? __lock_acquire+0x6df/0x2e50 [ 127.588155][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.588251][ T5633] ? __bfs+0x153/0x290 [ 127.588278][ T5633] ? __pfx_hlock_conflict+0x10/0x10 [ 127.588324][ T5633] ? lockdep_unlock+0x5c/0xd0 [ 127.588356][ T5633] ? __lock_acquire+0x14b9/0x2e50 [ 127.588407][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.588440][ T5633] do_writepages+0x338/0x560 [ 127.588486][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 127.588588][ T5633] filemap_fdatawrite+0x1e9/0x2f0 [ 127.588679][ T5633] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 127.588869][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 127.588963][ T5633] f2fs_sync_dirty_inodes+0x30e/0x830 [ 127.589093][ T5633] f2fs_write_checkpoint+0xa3d/0x2710 [ 127.589176][ T5633] ? __lock_acquire+0x6df/0x2e50 [ 127.589314][ T5633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 127.589582][ T5633] kill_f2fs_super+0x2dd/0x700 [ 127.589697][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 127.589808][ T5633] ? call_rcu+0x64d/0x8b0 [ 127.589882][ T5633] ? lockdep_hardirqs_on+0x7b/0x110 [ 127.590010][ T5633] deactivate_locked_super+0xbc/0x110 [ 127.590104][ T5633] cleanup_mnt+0x3d3/0x460 [ 127.590218][ T5633] task_work_run+0x1d9/0x270 [ 127.590295][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 127.590391][ T5633] exit_to_user_mode_loop+0x204/0x770 [ 127.590454][ T5633] ? rcu_is_watching+0x16/0xb0 [ 127.590537][ T5633] do_syscall_64+0x328/0x520 [ 127.590623][ T5633] ? trace_irq_disable+0x3b/0x140 [ 127.590685][ T5633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.590741][ T5633] ? clear_bhb_loop+0x70/0xc0 [ 127.590815][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.590872][ T5633] RIP: 0033:0x7f21bcd9f317 [ 127.590934][ T5633] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 127.590978][ T5633] RSP: 002b:00007ffd1736b4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.591036][ T5633] RAX: 0000000000000000 RBX: 00007f21bce34474 RCX: 00007f21bcd9f317 [ 127.591078][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1736b560 [ 127.591112][ T5633] RBP: 00007ffd1736b560 R08: 00007ffd1736c560 R09: 00000000ffffffff [ 127.591154][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1736c5f0 [ 127.591188][ T5633] R13: 00007f21bce34474 R14: 000000000001f1ab R15: 00007ffd1736c630 [ 127.591275][ T5633] [ 127.766046][ T5633] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 127.932464][ T6611] Dev loop9: unable to read RDB block 8 [ 127.932529][ T6611] loop9: unable to read partition table [ 127.932753][ T6611] loop9: partition table beyond EOD, truncated [ 127.932797][ T6611] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.630919][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.671511][ T6636] loop2: detected capacity change from 0 to 512 [ 128.687809][ T6636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.687849][ T6636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.687880][ T6636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.750832][ T6636] EXT4-fs (loop2): 1 truncate cleaned up [ 128.771586][ T6636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.786426][ T6638] overlay: filesystem on ./file0 is read-only [ 128.800801][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 128.812334][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.995282][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.059151][ T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 129.342624][ T25] usb 5-1: USB disconnect, device number 3 [ 130.567518][ T6653] loop3: detected capacity change from 0 to 131072 [ 130.622859][ T6653] F2FS-fs (loop3): invalid crc value [ 130.713584][ T6653] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.726832][ T6653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 130.881951][ T6653] F2FS-fs (loop3): f2fs_lookup: inode (ino=4) has zero i_nlink [ 130.895645][ T6653] F2FS-fs (loop3): Found FS corruption, run fsck to fix. [ 130.968511][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 131.528156][ T6689] loop0: detected capacity change from 0 to 128 [ 131.607315][ T6689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.622489][ T6689] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.807354][ T5622] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.974776][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 132.008259][ T6702] Bluetooth: MGMT ver 1.23 [ 132.120578][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.282086][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 132.294124][ T25] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 132.294174][ T25] usb 3-1: config 128 has no interface number 0 [ 132.294240][ T25] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 132.294272][ T25] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 132.294306][ T25] usb 3-1: config 128 interface 148 has no altsetting 0 [ 132.344110][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.344159][ T25] usb 3-1: Product: syz [ 132.344192][ T25] usb 3-1: Manufacturer: syz [ 132.344213][ T25] usb 3-1: SerialNumber: syz [ 132.576374][ T6706] capability: warning: `syz.4.300' uses 32-bit capabilities (legacy support in use) [ 132.755003][ T25] usb 3-1: USB disconnect, device number 3 [ 132.870355][ T6710] loop4: detected capacity change from 0 to 2048 [ 132.983234][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983335][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151401][ T6710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.165474][ T6710] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.240685][ T32] audit: type=1800 audit(1787768293.179:9): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 133.261462][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.287420][ T6710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.301: bg 0: block 345: padding at end of block bitmap is not set [ 133.308507][ T6710] EXT4-fs (loop4): Remounting filesystem read-only [ 133.348051][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.422814][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 133.431023][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.442392][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 133.442470][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.442507][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.442534][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 133.442560][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.442604][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.727792][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 133.727863][ T25] usbtmc 3-1:16.0: can't read capabilities [ 133.997827][ T189] usb 3-1: USB disconnect, device number 4 [ 135.049446][ T6742] loop4: detected capacity change from 0 to 32768 [ 135.058478][ T6742] xfs: Deprecated parameter 'noattr2' [ 135.064485][ T6742] XFS: noattr2 mount option is deprecated. [ 135.106725][ T6742] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.142697][ T6763] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 135.237533][ T6742] XFS (loop4): Ending clean mount [ 135.265417][ T6742] XFS (loop4): Quotacheck needed: Please wait. [ 135.302890][ T6540] XFS (loop4): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 135.302965][ T6540] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 135.318381][ T6540] XFS (loop4): Unmount and run xfs_repair [ 135.318435][ T6540] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 135.318487][ T6540] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 135.318530][ T6540] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 135.318573][ T6540] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 135.318660][ T6540] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 135.318674][ T6540] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 135.318689][ T6540] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.318703][ T6540] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.318718][ T6540] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.318976][ T6540] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 135.319137][ T6540] loop4: lost filesystem error report for type 5 error -117 [ 135.408262][ T6773] netlink: 'syz.2.321': attribute type 30 has an invalid length. [ 135.494198][ T6775] loop3: detected capacity change from 0 to 512 [ 135.548446][ T6742] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 135.562175][ T6742] loop4: lost filesystem error report for type 5 error -117 [ 135.651538][ T6742] XFS (loop4): Corruption warning: Metadata has LSN (-1593835519:128) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 135.684305][ T6742] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 135.684381][ T6742] XFS (loop4): Unmount and run xfs_repair [ 135.684420][ T6742] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 135.684444][ T6742] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 135.684466][ T6742] 00000010: 00 00 00 00 00 00 00 04 a1 00 00 01 00 00 00 80 ................ [ 135.684487][ T6742] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 135.684507][ T6742] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 135.684524][ T6742] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 135.684542][ T6742] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.684560][ T6742] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.684579][ T6742] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.684600][ T6742] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 135.796000][ T6773] netlink: 'syz.2.321': attribute type 30 has an invalid length. [ 135.830639][ T189] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 135.839452][ T6742] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 135.857566][ T6742] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 135.909277][ T5621] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.075940][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 136.075997][ T189] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 136.086497][ T189] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 136.086563][ T189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 64 [ 136.086617][ T189] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 136.086671][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.189025][ T6775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.205532][ T189] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 136.355225][ T189] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 136.386773][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 136.387115][ T189] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 136.475619][ T189] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 136.660111][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.814583][ T25] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 136.826596][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 136.826665][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.826693][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.826741][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.872591][ T6787] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.882670][ T25] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 136.900702][ T25] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB2 [ 136.931866][ T25] usb 4-1: USB disconnect, device number 4 [ 136.986706][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 137.009865][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.022273][ T25] keyspan 4-1:1.0: device disconnected [ 137.057270][ T32] audit: type=1800 audit(1787768296.999:10): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.332" name="dbroot" dev="configfs" ino=11217 res=0 errno=0 [ 137.118866][ T189] usb 3-1: USB disconnect, device number 5 [ 137.203487][ T189] cyberjack ttyUSB2: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB2 [ 137.217772][ T189] cyberjack 3-1:1.0: device disconnected [ 137.376635][ T6811] loop0: detected capacity change from 0 to 2048 [ 137.422962][ T6813] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.484875][ T32] audit: type=1800 audit(1787768297.429:11): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 137.638785][ T6817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.648567][ T6817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.763520][ T6817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 137.896177][ T6817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.896638][ T6817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 137.928046][ T6817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 137.950523][ T6817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.993788][ T6817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.009554][ T6817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 138.010860][ T6826] loop0: detected capacity change from 0 to 512 [ 138.042583][ T6817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.042595][ T6826] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.339: iget: bad i_size value: 38620345925642 [ 138.047001][ T6817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.068758][ T6826] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.070013][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 138.070059][ C1] EXT4-fs (loop0): initial error at time 1787768298: ext4_orphan_get:1403: inode 15 [ 138.070101][ C1] EXT4-fs (loop0): last error at time 1787768298: ext4_orphan_get:1403: inode 15 [ 138.110043][ T6826] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.339: couldn't read orphan inode 15 (err -117) [ 138.110100][ T6826] loop0: lost filesystem error report for type 5 error -117 [ 138.137906][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.195614][ T6817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 138.220536][ T6817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.232056][ T6817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.254665][ T6817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 138.580067][ T189] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 138.739377][ T189] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 138.755268][ T189] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 105, changing to 4 [ 138.760334][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.760426][ T189] usb 1-1: Product: syz [ 138.760468][ T189] usb 1-1: Manufacturer: syz [ 138.760510][ T189] usb 1-1: SerialNumber: syz [ 138.845991][ T6840] loop4: detected capacity change from 0 to 64 [ 139.192920][ T189] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 139.224829][ T189] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.518598][ T189] usb 1-1: USB disconnect, device number 4 [ 139.627258][ T6860] loop4: detected capacity change from 0 to 512 [ 139.643322][ T6860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.661922][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.693911][ T6860] EXT4-fs (loop4): 1 truncate cleaned up [ 139.702410][ T6860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.789356][ T6860] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6537: inode #12: comm syz.4.350: bad extra_isize 62 (inode size 256) [ 139.815718][ T6860] EXT4-fs (loop4): Remounting filesystem read-only [ 139.858010][ T6843] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:28: bg 0: block 5: invalid block bitmap [ 139.878006][ T6843] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 872 with error 28 [ 139.901737][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.909430][ T6843] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.909430][ T6843] [ 139.911852][ T6843] EXT4-fs (loop0): Total free blocks count 0 [ 139.911879][ T6843] EXT4-fs (loop0): Free/Dirty block details [ 139.911902][ T6843] EXT4-fs (loop0): free_blocks=0 [ 139.911940][ T6843] EXT4-fs (loop0): dirty_blocks=4172 [ 139.911958][ T6843] EXT4-fs (loop0): Block reservation details [ 139.911973][ T6843] EXT4-fs (loop0): i_reserved_data_blocks=4172 [ 139.981616][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.075587][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.086299][ T3372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 888 with max blocks 2048 with error 28 [ 140.148193][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.164346][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.300346][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.357450][ T5622] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 140.942730][ T32] audit: type=1400 audit(1787768300.879:12): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=6886 comm="syz.3.360" name="test" offset=36 [ 140.976347][ T6889] loop4: detected capacity change from 0 to 512 [ 141.053463][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.281603][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.715832][ T5635] Process accounting resumed [ 141.740103][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.765225][ T6905] Process accounting resumed [ 141.800086][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.950746][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 141.956744][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.969776][ T25] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.969825][ T25] usb 5-1: config 0 has no interface number 0 [ 141.989120][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.989175][ T25] usb 5-1: Product: syz [ 141.989208][ T25] usb 5-1: Manufacturer: syz [ 141.989228][ T25] usb 5-1: SerialNumber: syz [ 142.003649][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.039032][ T25] usb 5-1: config 0 descriptor?? [ 142.060077][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.140501][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.272404][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.327025][ T6928] loop2: detected capacity change from 0 to 256 [ 142.381351][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.422315][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 142.425700][ T10] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 142.436107][ T10] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 142.436199][ T10] usb 1-1: config 1 has no interface number 0 [ 142.436314][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 142.436380][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.436455][ T10] usb 1-1: config 1 interface 105 has no altsetting 0 [ 142.492894][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 142.492954][ T10] usb 1-1: Product: syz [ 142.492990][ T10] usb 1-1: Manufacturer: syz [ 142.493020][ T10] usb 1-1: SerialNumber: syz [ 142.521964][ T6928] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.538680][ T6918] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.554513][ T6918] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.598576][ T32] audit: type=1800 audit(1787768302.539:13): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file1" dev="loop2" ino=1048619 res=0 errno=0 [ 142.707509][ T6928] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 142.707564][ T6928] FAT-fs (loop2): Filesystem has been set read-only [ 142.932900][ T5635] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.974696][ T6918] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.974882][ T6918] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 143.090142][ T5635] usb 4-1: Using ep0 maxpacket: 16 [ 143.096543][ T5635] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.108802][ T5635] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 143.119537][ T5635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.136157][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.144493][ T5635] usb 4-1: Product: syz [ 143.144516][ T5635] usb 4-1: Manufacturer: syz [ 143.144533][ T5635] usb 4-1: SerialNumber: syz [ 143.176715][ T5635] usb 4-1: 0:2 : does not exist [ 143.188000][ T6948] overlayfs: failed to clone lowerpath [ 143.363560][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 143.363642][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 143.386072][ T25] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.386430][ T25] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 143.414058][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 143.443912][ T25] usb 5-1: USB disconnect, device number 4 [ 143.458649][ T5635] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 143.574897][ T5635] usb 4-1: USB disconnect, device number 5 [ 143.627694][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 143.689260][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.780415][ T10] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:8a:b8:e6:f8:fe [ 143.799394][ T10] usb 1-1: USB disconnect, device number 5 [ 143.813245][ T10] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 143.826911][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.964997][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 143.965292][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 143.966710][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 144.060712][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.143121][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.222875][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.461109][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.963395][ T6996] loop4: detected capacity change from 0 to 40427 [ 145.988226][ T6996] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 145.988279][ T6996] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 146.009048][ T6996] F2FS-fs (loop4): invalid crc value [ 146.331525][ T6996] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 146.344731][ T32] audit: type=1326 audit(1787768306.289:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f19e0d9 code=0x7ffc0000 [ 146.375529][ T6996] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 146.375580][ T6996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.389076][ T32] audit: type=1326 audit(1787768306.339:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f19e0d9 code=0x7ffc0000 [ 146.424434][ T32] audit: type=1326 audit(1787768306.339:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f19e0d9 code=0x7ffc0000 [ 146.424611][ T32] audit: type=1326 audit(1787768306.369:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957f19e0d9 code=0x7ffc0000 [ 146.430224][ T32] audit: type=1326 audit(1787768306.369:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f957f19e0d9 code=0x7ffc0000 [ 146.479233][ T32] audit: type=1326 audit(1787768306.429:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f957f15e90e code=0x7ffc0000 [ 146.537217][ T32] audit: type=1326 audit(1787768306.459:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f957f15e90e code=0x7ffc0000 [ 146.602987][ T32] audit: type=1326 audit(1787768306.549:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f957f15e90e code=0x7ffc0000 [ 146.623293][ T32] audit: type=1326 audit(1787768306.549:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f957f15e90e code=0x7ffc0000 [ 146.628476][ T32] audit: type=1326 audit(1787768306.549:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.0.413" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f957f15e90e code=0x7ffc0000 [ 147.036634][ T5621] syz-executor: attempt to access beyond end of device [ 147.036634][ T5621] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.070087][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 147.070127][ T5621] Tainted: [L]=SOFTLOCKUP [ 147.070135][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.070148][ T5621] Call Trace: [ 147.070157][ T5621] [ 147.070167][ T5621] dump_stack_lvl+0xe8/0x150 [ 147.070205][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 147.070240][ T5621] f2fs_write_end_bio+0x1211/0x16e0 [ 147.070277][ T5621] ? blkg_put+0x22/0x240 [ 147.070319][ T5621] __submit_merged_bio+0x258/0x6a0 [ 147.070347][ T5621] ? rcu_is_watching+0x16/0xb0 [ 147.070380][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 147.070418][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 147.070504][ T5621] f2fs_write_data_pages+0x2a27/0x36f0 [ 147.070574][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.070604][ T5621] ? __pfx_usage_match+0x10/0x10 [ 147.070643][ T5621] ? __pfx_usage_match+0x10/0x10 [ 147.070705][ T5621] ? __bfs+0x153/0x290 [ 147.070728][ T5621] ? __pfx_hlock_conflict+0x10/0x10 [ 147.070774][ T5621] ? lockdep_unlock+0x5c/0xd0 [ 147.070810][ T5621] ? __lock_acquire+0x14b9/0x2e50 [ 147.070863][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.070896][ T5621] do_writepages+0x338/0x560 [ 147.070947][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 147.070985][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 147.071013][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 147.071086][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 147.071122][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 147.071172][ T5621] f2fs_write_checkpoint+0xa3d/0x2710 [ 147.071204][ T5621] ? __lock_acquire+0x6df/0x2e50 [ 147.071261][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 147.071354][ T5621] kill_f2fs_super+0x2dd/0x700 [ 147.071396][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 147.071449][ T5621] ? call_rcu+0x64d/0x8b0 [ 147.071476][ T5621] ? lockdep_hardirqs_on+0x7b/0x110 [ 147.071526][ T5621] deactivate_locked_super+0xbc/0x110 [ 147.071560][ T5621] cleanup_mnt+0x3d3/0x460 [ 147.071601][ T5621] task_work_run+0x1d9/0x270 [ 147.071630][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 147.071666][ T5621] exit_to_user_mode_loop+0x204/0x770 [ 147.071691][ T5621] ? rcu_is_watching+0x16/0xb0 [ 147.071723][ T5621] do_syscall_64+0x328/0x520 [ 147.071755][ T5621] ? trace_irq_disable+0x3b/0x140 [ 147.071778][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.071801][ T5621] ? clear_bhb_loop+0x70/0xc0 [ 147.071830][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.071852][ T5621] RIP: 0033:0x7f0af5f9f317 [ 147.071873][ T5621] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 147.071892][ T5621] RSP: 002b:00007ffebcd4d7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 147.071917][ T5621] RAX: 0000000000000000 RBX: 00007f0af6034474 RCX: 00007f0af5f9f317 [ 147.071933][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebcd4d870 [ 147.071947][ T5621] RBP: 00007ffebcd4d870 R08: 00007ffebcd4e870 R09: 00000000ffffffff [ 147.071963][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebcd4e900 [ 147.071977][ T5621] R13: 00007f0af6034474 R14: 0000000000023dec R15: 00007ffebcd4e940 [ 147.072013][ T5621] [ 147.082939][ T5621] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 147.476354][ T27] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.905613][ T27] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.016132][ T7030] loop2: detected capacity change from 0 to 16 [ 148.097083][ T7030] erofs (device loop2): dirblkbits 6 isn't supported [ 148.129002][ T5623] udevd[5623]: incorrect erofs checksum on /dev/loop2 [ 148.136138][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.280838][ T5724] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.291167][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.291216][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.291246][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.291293][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.337254][ T5724] usb 1-1: config 0 descriptor?? [ 148.421479][ T27] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.541964][ T4939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.553567][ T4939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.562659][ T4939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.576584][ T4939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.587809][ T4939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.769885][ T7038] loop2: detected capacity change from 0 to 2048 [ 148.782465][ T7038] udf: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 148.793173][ T27] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.952864][ T5724] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 149.092005][ T5724] kernel read not supported for file /v4l-touch0 (pid: 5724 comm: kworker/1:5) [ 149.235960][ T5724] usb 1-1: USB disconnect, device number 6 [ 149.373164][ T7050] input: syz0 as /devices/virtual/input/input7 [ 149.661877][ T27] bridge_slave_1: left allmulticast mode [ 149.661948][ T27] bridge_slave_1: left promiscuous mode [ 149.662760][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.693095][ T5623] udevd[5623]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 149.721713][ T27] bridge_slave_0: left allmulticast mode [ 149.734086][ T27] bridge_slave_0: left promiscuous mode [ 149.742070][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.036230][ T7069] loop0: detected capacity change from 0 to 4096 [ 150.052937][ T7069] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 150.106968][ T7069] ntfs3(loop0): ino=19, mi_enum_attr [ 150.107054][ T7069] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 150.149770][ T7069] ntfs3(loop0): ino=1a, mi_enum_attr [ 150.155301][ T7069] ntfs3(loop0): ino=1a, mi_enum_attr [ 150.155326][ T7069] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 150.185680][ T27] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.228180][ T27] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.246964][ T27] bond0 (unregistering): Released all slaves [ 150.702514][ T4939] Bluetooth: hci4: command tx timeout [ 150.919579][ T7092] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 150.941133][ T7092] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 151.674710][ T27] hsr_slave_0: left promiscuous mode [ 151.684525][ T27] hsr_slave_1: left promiscuous mode [ 151.693530][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.710596][ T27] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.747298][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.747346][ T27] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.845214][ T27] veth1_macvtap: left promiscuous mode [ 151.845310][ T27] veth0_macvtap: left promiscuous mode [ 151.848088][ T27] veth1_vlan: left promiscuous mode [ 151.848371][ T27] veth0_vlan: left promiscuous mode [ 152.189506][ T7106] loop4: detected capacity change from 0 to 40427 [ 152.228007][ T7106] F2FS-fs (loop4): invalid crc value [ 152.433997][ T7106] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 152.460748][ T7106] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 152.468642][ T7106] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 152.468731][ T7106] F2FS-fs (loop4): Start checkpoint disabled! [ 152.489072][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.509968][ T7106] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 152.526310][ T7106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 152.581939][ T7106] syz.4.441: attempt to access beyond end of device [ 152.581939][ T7106] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.596902][ T7106] syz.4.441: attempt to access beyond end of device [ 152.596902][ T7106] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 152.642281][ T6538] kworker/u8:24: attempt to access beyond end of device [ 152.642281][ T6538] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 152.651333][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: kworker/u8:24 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.651431][ T6538] Tainted: [L]=SOFTLOCKUP [ 152.651453][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.651497][ T6538] Workqueue: writeback wb_workfn (flush-7:4) [ 152.651613][ T6538] Call Trace: [ 152.651643][ T6538] [ 152.651674][ T6538] dump_stack_lvl+0xe8/0x150 [ 152.651776][ T6538] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 152.651863][ T6538] f2fs_write_end_bio+0x1211/0x16e0 [ 152.651954][ T6538] ? blkg_put+0x22/0x240 [ 152.652066][ T6538] __submit_merged_bio+0x258/0x6a0 [ 152.652140][ T6538] ? rcu_is_watching+0x16/0xb0 [ 152.652229][ T6538] __submit_merged_write_cond+0x3c9/0x4e0 [ 152.652328][ T6538] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 152.652462][ T6538] f2fs_write_data_pages+0x2a27/0x36f0 [ 152.652640][ T6538] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.652772][ T6538] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 152.652961][ T6538] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 152.653091][ T6538] ? __lock_acquire+0x6df/0x2e50 [ 152.653207][ T6538] ? __lock_acquire+0x6df/0x2e50 [ 152.653270][ T6538] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.653350][ T6538] do_writepages+0x338/0x560 [ 152.653470][ T6538] ? reacquire_held_locks+0x117/0x1a0 [ 152.653549][ T6538] ? writeback_sb_inodes+0x450/0x1b00 [ 152.653638][ T6538] __writeback_single_inode+0x136/0x1220 [ 152.653730][ T6538] ? do_raw_spin_unlock+0xf5/0x200 [ 152.653829][ T6538] writeback_sb_inodes+0x9de/0x1b00 [ 152.653897][ T6538] ? __lock_acquire+0x6df/0x2e50 [ 152.654021][ T6538] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 152.654220][ T6538] ? rcu_is_watching+0x16/0xb0 [ 152.654288][ T6538] ? queue_io+0x2d3/0x470 [ 152.654375][ T6538] wb_writeback+0x41c/0xad0 [ 152.654483][ T6538] ? queue_io+0x201/0x470 [ 152.654591][ T6538] ? __pfx_wb_writeback+0x10/0x10 [ 152.654659][ T6538] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.654783][ T6538] wb_workfn+0x431/0x10f0 [ 152.654896][ T6538] ? __pfx_wb_workfn+0x10/0x10 [ 152.654962][ T6538] ? irqentry_exit+0x218/0x910 [ 152.655054][ T6538] ? lockdep_hardirqs_on+0x7b/0x110 [ 152.655160][ T6538] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.655263][ T6538] ? lock_acquire+0x115/0x350 [ 152.655351][ T6538] ? rcu_is_watching+0x16/0xb0 [ 152.655422][ T6538] ? process_scheduled_works+0x97a/0x1630 [ 152.655501][ T6538] process_scheduled_works+0xc3d/0x1630 [ 152.655672][ T6538] ? __pfx_process_scheduled_works+0x10/0x10 [ 152.655771][ T6538] ? assign_work+0x3cf/0x5d0 [ 152.655921][ T6538] worker_thread+0xa47/0xfb0 [ 152.656069][ T6538] kthread+0x38b/0x480 [ 152.656134][ T6538] ? __pfx_worker_thread+0x10/0x10 [ 152.656211][ T6538] ? __pfx_kthread+0x10/0x10 [ 152.656276][ T6538] ret_from_fork+0x514/0xb70 [ 152.656344][ T6538] ? __pfx_ret_from_fork+0x10/0x10 [ 152.656401][ T6538] ? __switch_to+0xc89/0x1420 [ 152.656491][ T6538] ? __pfx_kthread+0x10/0x10 [ 152.656568][ T6538] ret_from_fork_asm+0x1a/0x30 [ 152.656678][ T6538] [ 152.656942][ T6538] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 152.672137][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 152.726079][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.726164][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.726228][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.780705][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 152.780733][ T9] usb 1-1: Product: syz [ 152.780745][ T9] usb 1-1: Manufacturer: syz [ 152.780757][ T9] usb 1-1: SerialNumber: syz [ 152.801083][ T4939] Bluetooth: hci4: command tx timeout [ 153.166308][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.272586][ T27] team0 (unregistering): Port device team_slave_1 removed [ 153.305067][ T27] team0 (unregistering): Port device team_slave_0 removed [ 153.351758][ T1226] usb 1-1: USB disconnect, device number 7 [ 153.399175][ T1226] usblp0: removed [ 153.618553][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 153.770877][ T7139] netlink: 'syz.2.453': attribute type 2 has an invalid length. [ 153.790904][ T7140] netlink: 'syz.2.453': attribute type 2 has an invalid length. [ 154.118392][ T7142] loop4: detected capacity change from 0 to 65536 [ 154.171908][ T7142] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 154.227705][ T7157] loop0: detected capacity change from 0 to 1024 [ 154.237760][ T7157] EXT4-fs: Ignoring removed bh option [ 154.256363][ T7142] XFS (loop4): Ending clean mount [ 154.340924][ T7157] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 154.399455][ T5621] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 154.419050][ T7157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.860116][ T4939] Bluetooth: hci4: command tx timeout [ 154.924579][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.926862][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.927383][ T7035] bridge_slave_0: entered allmulticast mode [ 154.947717][ T7035] bridge_slave_0: entered promiscuous mode [ 154.958775][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.959078][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.963227][ T7035] bridge_slave_1: entered allmulticast mode [ 154.979521][ T7035] bridge_slave_1: entered promiscuous mode [ 155.015923][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.073050][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.151504][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.171017][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.331928][ T7035] team0: Port device team_slave_0 added [ 155.371608][ T7035] team0: Port device team_slave_1 added [ 155.481531][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.559641][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 155.574603][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.592561][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.634580][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.657039][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.657074][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.657119][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.045260][ T7035] hsr_slave_0: entered promiscuous mode [ 156.055149][ T7035] hsr_slave_1: entered promiscuous mode [ 156.062836][ T7035] debugfs: 'hsr0' already exists in 'hsr' [ 156.062877][ T7035] Cannot create hsr debugfs directory [ 156.835434][ T32] kauditd_printk_skb: 53 callbacks suppressed [ 156.835505][ T32] audit: type=1326 audit(1787768316.779:77): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.468" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b799e0d9 code=0x0 [ 156.941661][ T4939] Bluetooth: hci4: command tx timeout [ 157.057975][ T7035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.078985][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.089809][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 157.093743][ T7035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.148309][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.154825][ T7035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.179797][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.191943][ T7035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.229272][ T7035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.335439][ T7239] xt_CT: No such helper "netbios-ns" [ 157.382176][ T7245] net_ratelimit: 56 callbacks suppressed [ 157.388424][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.709700][ T7035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.810700][ T7035] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.852688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.852815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.929047][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.929298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.098291][ T7263] loop0: detected capacity change from 0 to 256 [ 158.122771][ T7263] exfat: Deprecated parameter 'utf8' [ 158.122819][ T7263] exfat: Deprecated parameter 'utf8' [ 158.161242][ T7262] tls_set_device_offload: netdev not found [ 158.271193][ T7263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 158.379260][ T7265] loop4: detected capacity change from 0 to 512 [ 159.139319][ T7291] loop2: detected capacity change from 0 to 2048 [ 159.314831][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.412498][ T7291] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.488: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 159.435435][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 159.443372][ T3372] IPVS: starting estimator thread 0... [ 159.521104][ T7306] IPVS: using max 37 ests per chain, 88800 per kthread [ 159.656828][ T5631] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.703870][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 159.722319][ T7315] block2mtd: error: cannot open device [ 159.967326][ T7325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.497'. [ 159.985135][ T7035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.632549][ T7348] loop0: detected capacity change from 0 to 2048 [ 160.686169][ T7348] NILFS (loop0): invalid segment: Inconsistency found [ 160.686226][ T7348] NILFS (loop0): trying rollback from an earlier position [ 160.769736][ T7348] NILFS (loop0): recovery complete [ 160.792272][ T7354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.808945][ T7035] veth0_vlan: entered promiscuous mode [ 160.924127][ T7035] veth1_vlan: entered promiscuous mode [ 160.999222][ T7035] veth0_macvtap: entered promiscuous mode [ 161.033984][ T7035] veth1_macvtap: entered promiscuous mode [ 161.163861][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.209453][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 161.245499][ T7035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.265625][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 161.290808][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.299751][ T6536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.299802][ T6536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.299854][ T6536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.600078][ T7370] loop0: detected capacity change from 0 to 512 [ 161.621672][ T7370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.664899][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.664945][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.671061][ T7370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 161.671387][ T7370] System zones: 1-12 [ 161.711815][ T7370] EXT4-fs (loop0): 1 truncate cleaned up [ 161.728080][ T7370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.828052][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.842220][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.881046][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.574539][ T7388] capability: warning: `syz.1.520' uses deprecated v2 capabilities in a way that may be insecure [ 162.935967][ T7398] loop4: detected capacity change from 0 to 256 [ 162.952070][ T7398] exfat: Deprecated parameter 'utf8' [ 163.011955][ T7398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 163.092129][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 163.107913][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 163.127225][ T7391] ceph: No mds server is up or the cluster is laggy [ 163.141058][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 163.141240][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 163.180942][ C1] [ 163.183351][ C1] ================================ [ 163.188579][ C1] WARNING: inconsistent lock state [ 163.193731][ C1] syzkaller #0 Tainted: G L [ 163.199754][ C1] -------------------------------- [ 163.204923][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 163.211795][ C1] ksoftirqd/1/24 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 163.218063][ C1] ffff888031226260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 163.227414][ C1] {SOFTIRQ-ON-W} state was registered at: [ 163.233173][ C1] lock_acquire+0x115/0x350 [ 163.237810][ C1] lock_sock_nested+0x41/0x100 [ 163.242721][ C1] x25_bind+0x209/0x450 [ 163.247000][ C1] __sys_bind+0x2e3/0x410 [ 163.251471][ C1] __x64_sys_bind+0x7a/0x90 [ 163.256111][ C1] do_syscall_64+0x166/0x520 [ 163.260826][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.266847][ C1] irq event stamp: 1469588 [ 163.271379][ C1] hardirqs last enabled at (1469588): [] __local_bh_enable_ip+0xd6/0x140 [ 163.281496][ C1] hardirqs last disabled at (1469587): [] __local_bh_enable_ip+0x72/0x140 [ 163.291598][ C1] softirqs last enabled at (1469532): [] run_ksoftirqd+0x36/0x60 [ 163.301025][ C1] softirqs last disabled at (1469537): [] run_ksoftirqd+0x36/0x60 [ 163.311420][ C1] [ 163.311420][ C1] other info that might help us debug this: [ 163.319523][ C1] Possible unsafe locking scenario: [ 163.319523][ C1] [ 163.327008][ C1] CPU0 [ 163.330327][ C1] ---- [ 163.333644][ C1] lock(sk_lock-AF_X25); [ 163.338027][ C1] [ 163.341512][ C1] lock(sk_lock-AF_X25); [ 163.346066][ C1] [ 163.346066][ C1] *** DEADLOCK *** [ 163.346066][ C1] [ 163.354246][ C1] locks held by ksoftirqd/1/24: 1, last CPU#1: [ 163.360439][ C1] #0: ffffffff8ed5c6a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 163.370519][ C1] [ 163.370519][ C1] stack backtrace: [ 163.376482][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.387298][ C1] Tainted: [L]=SOFTLOCKUP [ 163.391660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.401774][ C1] Call Trace: [ 163.405082][ C1] [ 163.408036][ C1] dump_stack_lvl+0xe8/0x150 [ 163.412768][ C1] print_usage_bug+0x28c/0x2e0 [ 163.417577][ C1] valid_state+0xbe/0xf0 [ 163.422027][ C1] mark_lock_irq+0x36/0x380 [ 163.426577][ C1] mark_lock+0x117/0x190 [ 163.431111][ C1] __lock_acquire+0x6b7/0x2e50 [ 163.435903][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 163.441209][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.446437][ C1] ? lock_acquire+0x115/0x350 [ 163.451137][ C1] lock_acquire+0x115/0x350 [ 163.455730][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 163.460876][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 163.466037][ C1] lock_sock_nested+0x41/0x100 [ 163.470849][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 163.475993][ C1] x25_kill_by_neigh+0x10d/0x250 [ 163.480960][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 163.486373][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 163.491867][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 163.497398][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 163.503334][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 163.508770][ C1] lapbeth_napi_poll+0x42/0x90 [ 163.513561][ C1] __napi_poll+0xaa/0x330 [ 163.518013][ C1] net_rx_action+0x61d/0xf50 [ 163.522655][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 163.527808][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 163.533052][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 163.538370][ C1] handle_softirqs+0x226/0x860 [ 163.543169][ C1] ? schedule+0x90/0x2b0 [ 163.547438][ C1] ? run_ksoftirqd+0x36/0x60 [ 163.552059][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 163.557110][ C1] run_ksoftirqd+0x36/0x60 [ 163.561559][ C1] smpboot_thread_fn+0x565/0xa70 [ 163.566531][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 163.571608][ C1] kthread+0x38b/0x480 [ 163.575717][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 163.581258][ C1] ? __pfx_kthread+0x10/0x10 [ 163.585891][ C1] ret_from_fork+0x514/0xb70 [ 163.590513][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 163.596105][ C1] ? __switch_to+0xc89/0x1420 [ 163.600835][ C1] ? __pfx_kthread+0x10/0x10 [ 163.605475][ C1] ret_from_fork_asm+0x1a/0x30 [ 163.610282][ C1] [ 163.613482][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 163.613503][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1 [ 163.613524][ C1] preempt_count: 100, expected: 0 [ 163.613537][ C1] RCU nest depth: 1, expected: 0 [ 163.613551][ C1] INFO: lockdep is turned off. [ 163.613561][ C1] Preemption disabled at: [ 163.613570][ C1] [] handle_softirqs+0xab/0x860 [ 163.613616][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.613654][ C1] Tainted: [L]=SOFTLOCKUP [ 163.613662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.613674][ C1] Call Trace: [ 163.613681][ C1] [ 163.613689][ C1] dump_stack_lvl+0xe8/0x150 [ 163.613723][ C1] __might_resched+0x36a/0x4c0 [ 163.613768][ C1] ? handle_softirqs+0xab/0x860 [ 163.613798][ C1] lock_sock_nested+0x56/0x100 [ 163.613831][ C1] x25_kill_by_neigh+0x10d/0x250 [ 163.613860][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 163.613886][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 163.613915][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 163.613943][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 163.613967][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 163.614008][ C1] lapbeth_napi_poll+0x42/0x90 [ 163.614038][ C1] __napi_poll+0xaa/0x330 [ 163.614071][ C1] net_rx_action+0x61d/0xf50 [ 163.614109][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 163.614147][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 163.614186][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 163.614214][ C1] handle_softirqs+0x226/0x860 [ 163.614243][ C1] ? schedule+0x90/0x2b0 [ 163.614270][ C1] ? run_ksoftirqd+0x36/0x60 [ 163.614304][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 163.614338][ C1] run_ksoftirqd+0x36/0x60 [ 163.614367][ C1] smpboot_thread_fn+0x565/0xa70 [ 163.614402][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 163.614439][ C1] kthread+0x38b/0x480 [ 163.614461][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 163.614494][ C1] ? __pfx_kthread+0x10/0x10 [ 163.614516][ C1] ret_from_fork+0x514/0xb70 [ 163.614539][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 163.614560][ C1] ? __switch_to+0xc89/0x1420 [ 163.614593][ C1] ? __pfx_kthread+0x10/0x10 [ 163.614616][ C1] ret_from_fork_asm+0x1a/0x30 [ 163.614645][ C1] [ 163.616495][ T1226] libceph: connect (1)[c::]:6789 error -101 [ 163.616615][ T1226] libceph: mon0 (1)[c::]:6789 connect error [ 163.821687][ T5724] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.020574][ T5724] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 164.022951][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.023064][ T5724] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.027482][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.027547][ T5724] usb 3-1: Product: syz [ 164.027590][ T5724] usb 3-1: Manufacturer: syz [ 164.027639][ T5724] usb 3-1: SerialNumber: syz [ 165.501863][ T9] usb 3-1: USB disconnect, device number 6