last executing test programs: 9m57.546141837s ago: executing program 3 (id=8514): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) semop(0x0, 0x0, 0x0) 9m57.06506523s ago: executing program 3 (id=8518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9m56.033107364s ago: executing program 3 (id=8527): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, 0x0, 0x0, &(0x7f0000001dc0)={0x100088, 0x0, 0x0, {r0}}, 0x20) 9m55.742356315s ago: executing program 3 (id=8532): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0) 9m55.388747174s ago: executing program 3 (id=8536): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 9m54.501074466s ago: executing program 3 (id=8543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00') 9m53.404699237s ago: executing program 32 (id=8543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00') 8m5.92804834s ago: executing program 1 (id=9786): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'caif0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 8m5.826766307s ago: executing program 1 (id=9789): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x100000, @local, 0x8}, 0x1c) 8m5.775060318s ago: executing program 1 (id=9790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 8m5.644730778s ago: executing program 1 (id=9793): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) 8m5.255001907s ago: executing program 1 (id=9797): unshare(0x100000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) 8m4.664245427s ago: executing program 1 (id=9805): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 8m4.145972428s ago: executing program 33 (id=9805): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 2m12.246340139s ago: executing program 2 (id=14182): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x365}]}) write$ppp(r0, &(0x7f0000000040)='\x00 ', 0x2) 2m11.695294599s ago: executing program 2 (id=14186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 2m11.323969866s ago: executing program 2 (id=14189): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) 2m10.90253275s ago: executing program 2 (id=14192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) 2m10.740418415s ago: executing program 2 (id=14195): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) fstat(r0, &(0x7f0000002e00)) 2m10.519501775s ago: executing program 2 (id=14197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) 2m2.38362787s ago: executing program 0 (id=14261): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) 2m1.32745512s ago: executing program 0 (id=14267): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2m0.948460346s ago: executing program 0 (id=14270): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 2m0.772561471s ago: executing program 0 (id=14272): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000480)={0x2, "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"}, 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000ec0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x8}, 0x0, 0x0, 0x3, 0xfffffffffffffff6, 0x5, 0xfffffffffffffffc, 0xffffffffffffff81, 0x9, 0x8001, 0xbb}) 2m0.427123843s ago: executing program 0 (id=14276): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 2m0.22350582s ago: executing program 0 (id=14278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x104, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319aedc0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xfff, 0x205, 0xfffffffa, 0x9}, 0x10) 1m55.391755452s ago: executing program 34 (id=14197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) 1m45.070977355s ago: executing program 35 (id=14278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x104, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319aedc0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xfff, 0x205, 0xfffffffa, 0x9}, 0x10) 12.01010381s ago: executing program 8 (id=15173): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 11.726511696s ago: executing program 8 (id=15175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="04080076657273696f6e00020500000001", 0x11) 11.580367636s ago: executing program 8 (id=15177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x5b3b3000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x3ff, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x0) 11.502097162s ago: executing program 8 (id=15178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8008, 0x0) r0 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x14b142, 0x0) sendfile(r0, r0, 0x0, 0x1000000201005) 11.330234642s ago: executing program 8 (id=15179): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 11.216313294s ago: executing program 8 (id=15180): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2a, 0x0, {0x2, 0x78, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 2.891487879s ago: executing program 6 (id=15247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x800) 2.877044479s ago: executing program 5 (id=15248): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b0000000000000000000000c188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000980)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 2.816372803s ago: executing program 7 (id=15249): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000003000000000000010000000400048008000200010000000800010000ee8f000400088018000c8014000b8008000a008fee"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.55261798s ago: executing program 6 (id=15250): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x9004, 0x0, @local, 0x9}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) 2.243495299s ago: executing program 5 (id=15252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add syz0 127.0.0.1+70:3\n', 0x18) 2.039600753s ago: executing program 7 (id=15253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x146) write(r0, &(0x7f0000000300)='1', 0x1) 1.923005107s ago: executing program 4 (id=15254): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000332000/0x4000)=nil, 0x4000}) 1.852581089s ago: executing program 5 (id=15255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x8, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.771566442s ago: executing program 7 (id=15256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 1.715384084s ago: executing program 4 (id=15257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0xffffffffffffffff}]}) 1.647064191s ago: executing program 5 (id=15258): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.5577195s ago: executing program 7 (id=15259): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 1.467628542s ago: executing program 6 (id=15260): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) 1.413182256s ago: executing program 4 (id=15261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) lseek(r0, 0xc, 0x0) 1.27462593s ago: executing program 4 (id=15262): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x801070cf, 0x0) 1.213157205s ago: executing program 6 (id=15263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x82) ioctl(r0, 0xc178fd0c, &(0x7f0000000138)="04000000000000000000000078010000380100000100000000000000000000000000000000000000000000000000000063") 1.089517384s ago: executing program 4 (id=15264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40ec}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.032229269s ago: executing program 6 (id=15265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c1}, 0x80) 868.479306ms ago: executing program 6 (id=15266): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x14, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}}}}}}, 0x0) 705.628199ms ago: executing program 7 (id=15267): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x7) 632.055313ms ago: executing program 5 (id=15268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e65", 0x4, 0x2) 525.767907ms ago: executing program 7 (id=15269): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 489.839082ms ago: executing program 5 (id=15270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 0s ago: executing program 4 (id=15271): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001b80)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="40111b00"], 0x0, 0x0}) kernel console output (not intermixed with test programs): x41613352, 0x61417272 (sector = 1) [ 1190.346555][T21923] hid (null): global environment stack underflow [ 1190.346574][T21923] hid (null): global environment stack underflow [ 1190.407346][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/1910.tmp-b7:4' failed: Read-only file system [ 1190.504877][T21923] hid-generic 0000:0000:0000.0038: global environment stack underflow [ 1190.504902][T21923] hid-generic 0000:0000:0000.0038: item 0 2 1 11 parsing failed [ 1190.522080][T21923] hid-generic 0000:0000:0000.0038: probe with driver hid-generic failed with error -22 [ 1190.570457][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.609424][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1909.tmp-b7:6' failed: Read-only file system [ 1190.693532][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.693564][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1190.881278][ T7783] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1190.972080][ T7783] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1191.467597][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.467635][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.467661][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1192.060825][ T7304] veth0_vlan: entered promiscuous mode [ 1192.083787][ T7495] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1192.114972][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1192.135536][ T7495] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1192.137733][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 1192.223497][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.231603][ T7495] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1192.278696][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.285888][ T7495] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1192.325097][ T7495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.353796][ T7304] veth1_vlan: entered promiscuous mode [ 1192.614422][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14463'. [ 1192.614447][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14463'. [ 1192.614471][ T7855] netlink: 'syz.5.14463': attribute type 11 has an invalid length. [ 1192.614484][ T7855] netlink: 'syz.5.14463': attribute type 13 has an invalid length. [ 1192.681623][ T7304] veth0_macvtap: entered promiscuous mode [ 1192.702712][ T7854] loop6: detected capacity change from 0 to 2048 [ 1192.714572][ T7854] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1192.738309][ T7854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.098910][ T7304] veth1_macvtap: entered promiscuous mode [ 1193.482433][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.510871][ T42] bond0: left allmulticast mode [ 1193.510895][ T42] bond_slave_0: left allmulticast mode [ 1193.510914][ T42] bond_slave_1: left allmulticast mode [ 1193.510929][ T42] batadv0: left allmulticast mode [ 1193.519392][ T42] bond0: left promiscuous mode [ 1193.519412][ T42] bond_slave_0: left promiscuous mode [ 1193.519601][ T42] bond_slave_1: left promiscuous mode [ 1193.519797][ T42] batadv0: left promiscuous mode [ 1193.522054][ T42] bridge0: port 3(bond0) entered disabled state [ 1193.679201][ T42] bridge_slave_1: left allmulticast mode [ 1193.679236][ T42] bridge_slave_1: left promiscuous mode [ 1193.685823][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.692461][ T7874] vimc link validate: Sensor A:src:16x16 (0x33424752, 3, 0, 4, 0) Raw Capture 0:snk:16x2160 (0x33424752, 4, 0, 0, 0) [ 1193.740294][ T42] bridge_slave_0: left allmulticast mode [ 1193.740322][ T42] bridge_slave_0: left promiscuous mode [ 1193.740513][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.830398][ T42] pimreg: left allmulticast mode [ 1193.830534][ T42] dvmrp8: left allmulticast mode [ 1193.862409][ T42] batman_adv: batadv0: Interface deactivated: gretap4 [ 1194.217854][ T7865] loop5: detected capacity change from 0 to 32768 [ 1194.292521][ T7865] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1194.457359][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1915.tmp-b7:5' failed: Read-only file system [ 1194.463423][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 1194.606086][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1915.tmp-b7:5' failed: Read-only file system [ 1194.608778][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 1194.727490][T25432] ocfs2: Unmounting device (7,5) on (node local) [ 1194.785162][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1915.tmp-b7:5' failed: Read-only file system [ 1194.850585][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1915.tmp-b7:5' failed: Read-only file system [ 1195.104390][ T42] batman_adv: batadv0: Removing interface: gretap4 [ 1195.732896][ T7926] loop4: detected capacity change from 0 to 4096 [ 1195.781418][ T7926] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1195.874694][ T7926] ntfs3(loop4): ino=1a, mi_enum_attr [ 1195.874818][ T7926] ntfs3(loop4): ino=1a, mi_enum_attr [ 1195.874838][ T7926] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1196.069109][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1917.tmp-b7:4' failed: Read-only file system [ 1196.073549][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1196.077064][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system [ 1196.171775][ T33] audit: type=1800 audit(35738108.049:1235): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14483" name="file1" dev="loop4" ino=30 res=0 errno=-5 [ 1196.173533][ T7923] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex [ 1196.401688][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1917.tmp-b7:4' failed: Read-only file system [ 1196.488486][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.506533][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.537020][ T42] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1196.541698][ T42] bond0 (unregistering): Released all slaves [ 1196.589684][ T42] bond1 (unregistering): Released all slaves [ 1196.672940][ T42] bond2 (unregistering): Released all slaves [ 1196.754975][ T7941] macvlan0: entered promiscuous mode [ 1196.755690][ T7941] netlink: 'syz.6.14488': attribute type 1 has an invalid length. [ 1196.755711][ T7941] netlink: 'syz.6.14488': attribute type 2 has an invalid length. [ 1196.781927][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.870641][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.870717][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.870754][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.870790][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.154465][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.407242][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.489289][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.489404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.621509][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.621612][T10621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.685965][T10621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.685987][T10621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.008263][T10621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.008286][T10621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.660764][ T7988] lo speed is unknown, defaulting to 1000 [ 1199.675242][ T7978] block device autoloading is deprecated and will be removed. [ 1200.006578][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.349066][ T7997] loop6: detected capacity change from 0 to 32768 [ 1200.400263][ T7997] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14498 (7997) [ 1200.465603][ T7997] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1200.465639][ T7997] BTRFS info (device loop6): using crc32c checksum algorithm [ 1200.628710][ T7997] BTRFS info (device loop6): rebuilding free space tree [ 1200.658696][ T7997] BTRFS info (device loop6): setting nodatasum [ 1200.658722][ T7997] BTRFS info (device loop6): enabling ssd optimizations [ 1200.658740][ T7997] BTRFS info (device loop6): turning on async discard [ 1200.658757][ T7997] BTRFS info (device loop6): enabling free space tree [ 1200.658774][ T7997] BTRFS info (device loop6): force clearing of disk cache [ 1200.658792][ T7997] BTRFS info (device loop6): use lzo compression, level 1 [ 1200.720481][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1920.tmp-b7:6' failed: Read-only file system [ 1200.730129][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-uuid/24c7a497-3402-47dd-bef8-82358f5f30e0.tmp-b7:6' failed: Read-only file system [ 1200.995040][T28625] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1201.079323][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1201.861966][ T42] hsr_slave_0: left promiscuous mode [ 1201.864539][ T42] hsr_slave_1: left promiscuous mode [ 1201.877299][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.877322][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.881903][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.881925][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.254425][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1920.tmp-b7:6' failed: Read-only file system [ 1202.282741][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1920.tmp-b7:6' failed: Read-only file system [ 1202.332471][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1920.tmp-b7:6' failed: Read-only file system [ 1202.348563][ T42] veth1_vlan: left promiscuous mode [ 1202.348637][ T42] veth0_vlan: left promiscuous mode [ 1202.764527][ T8047] loop4: detected capacity change from 0 to 32768 [ 1202.988960][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1922.tmp-b7:4' failed: Read-only file system [ 1202.990386][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 1203.072394][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1922.tmp-b7:4' failed: Read-only file system [ 1203.073541][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:4' failed: Read-only file system [ 1203.294016][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1203.342881][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1203.424146][ T8067] loop5: detected capacity change from 0 to 32768 [ 1203.462651][ T8067] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1203.539880][ T8067] XFS (loop5): Ending clean mount [ 1203.545027][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1923.tmp-b7:5' failed: Read-only file system [ 1203.771624][T25432] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1204.123370][ T8077] loop6: detected capacity change from 0 to 40427 [ 1204.206068][ T8077] F2FS-fs (loop6): invalid crc value [ 1204.364919][ T4415] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1204.429048][ T8073] smc: removing ib device sz1 [ 1204.519179][ T4415] usb 5-1: Using ep0 maxpacket: 16 [ 1204.520735][ T4415] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1204.522745][ T4415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1204.535845][ T4415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.535869][ T4415] usb 5-1: Product: syz [ 1204.535883][ T4415] usb 5-1: Manufacturer: syz [ 1204.535898][ T4415] usb 5-1: SerialNumber: syz [ 1204.567821][ T4415] usb 5-1: Device is not authorized for usage [ 1204.601260][ T8077] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1204.624990][ T8092] loop5: detected capacity change from 0 to 32768 [ 1204.673291][ T1221] infiniband sz1: ib_query_port failed (-19) [ 1204.685028][ T7495] veth0_vlan: entered promiscuous mode [ 1204.693314][ T8077] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1204.742935][ T7495] veth1_vlan: entered promiscuous mode [ 1204.771859][ T8092] JBD2: Ignoring recovery information on journal [ 1204.845412][ T8073] smbdirect: ib_dev[sz1] removed [ 1204.888716][ T8092] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1204.923005][ T7495] veth0_macvtap: entered promiscuous mode [ 1204.938886][ T7495] veth1_macvtap: entered promiscuous mode [ 1204.965628][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.025783][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.139773][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.139830][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.139866][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.147601][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.452002][T28625] syz-executor: attempt to access beyond end of device [ 1205.452002][T28625] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1205.520094][T28625] CPU: 1 UID: 0 PID: 28625 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.520131][T28625] Tainted: [L]=SOFTLOCKUP [ 1205.520140][T28625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1205.520153][T28625] Call Trace: [ 1205.520160][T28625] [ 1205.520168][T28625] dump_stack_lvl+0xe8/0x150 [ 1205.520201][T28625] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1205.520232][T28625] f2fs_write_end_bio+0xda7/0x11c0 [ 1205.520280][T28625] __submit_merged_bio+0x258/0x6a0 [ 1205.520304][T28625] ? rcu_is_watching+0x16/0xb0 [ 1205.520340][T28625] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1205.520367][T28625] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1205.520418][T28625] f2fs_write_data_pages+0x2a13/0x36e0 [ 1205.520480][T28625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1205.520506][T28625] ? is_bpf_text_address+0x26/0x2b0 [ 1205.520538][T28625] ? arch_stack_walk+0xfb/0x150 [ 1205.520589][T28625] ? add_lock_to_list+0xc7/0x100 [ 1205.520620][T28625] ? lockdep_unlock+0x5c/0xd0 [ 1205.520641][T28625] ? __lock_acquire+0x1511/0x2de0 [ 1205.520695][T28625] ? do_raw_spin_lock+0x12b/0x2f0 [ 1205.520736][T28625] ? do_raw_spin_unlock+0xf5/0x200 [ 1205.520758][T28625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1205.520787][T28625] do_writepages+0x338/0x560 [ 1205.520820][T28625] ? do_raw_spin_unlock+0xf5/0x200 [ 1205.520846][T28625] filemap_fdatawrite+0x1e9/0x2f0 [ 1205.520874][T28625] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1205.520941][T28625] ? do_raw_spin_unlock+0xf5/0x200 [ 1205.520968][T28625] f2fs_sync_dirty_inodes+0x471/0x970 [ 1205.521014][T28625] f2fs_write_checkpoint+0x860/0x24d0 [ 1205.521081][T28625] kill_f2fs_super+0x2dc/0x700 [ 1205.521114][T28625] ? rcu_do_enqueue+0x616/0x870 [ 1205.521139][T28625] ? lockdep_hardirqs_on+0x7b/0x110 [ 1205.521164][T28625] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1205.521204][T28625] ? __pfx_call_rcu+0x10/0x10 [ 1205.521235][T28625] ? shrinker_free+0x2a7/0x3b0 [ 1205.521260][T28625] deactivate_locked_super+0xbe/0x110 [ 1205.521286][T28625] cleanup_mnt+0x3d3/0x460 [ 1205.521319][T28625] task_work_run+0x1d9/0x260 [ 1205.521346][T28625] ? __pfx_task_work_run+0x10/0x10 [ 1205.521379][T28625] exit_to_user_mode_loop+0x204/0x770 [ 1205.521406][T28625] ? rcu_is_watching+0x16/0xb0 [ 1205.521437][T28625] do_syscall_64+0x328/0x520 [ 1205.521462][T28625] ? trace_irq_disable+0x3b/0x140 [ 1205.521488][T28625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.521509][T28625] ? clear_bhb_loop+0x70/0xc0 [ 1205.521533][T28625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.521553][T28625] RIP: 0033:0x7eff2559f397 [ 1205.521573][T28625] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1205.521590][T28625] RSP: 002b:00007ffe9686cdc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1205.521612][T28625] RAX: 0000000000000000 RBX: 00007eff256344bb RCX: 00007eff2559f397 [ 1205.521626][T28625] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9686ce80 [ 1205.521639][T28625] RBP: 00007ffe9686ce80 R08: 00007ffe9686de80 R09: 00000000ffffffff [ 1205.521654][T28625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9686df10 [ 1205.521667][T28625] R13: 00007eff256344bb R14: 0000000000126555 R15: 00007ffe9686df50 [ 1205.521706][T28625] [ 1205.599993][T25432] ocfs2: Unmounting device (7,5) on (node local) [ 1205.685735][T28625] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1205.834775][T32367] udevd[32367]: symlink '../../loop5' '/dev/disk/by-diskseq/1927.tmp-b7:5' failed: Read-only file system [ 1205.951398][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1927.tmp-b7:5' failed: Read-only file system [ 1206.098664][ T8072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.098685][ T8072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.296686][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1206.546543][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1926.tmp-b7:6' failed: Read-only file system [ 1206.615693][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.615716][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.651369][ T8114] loop5: detected capacity change from 0 to 256 [ 1206.683858][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/1926.tmp-b7:6' failed: Read-only file system [ 1206.878452][T32367] udevd[32367]: symlink '../../loop5' '/dev/disk/by-diskseq/1930.tmp-b7:5' failed: Read-only file system [ 1207.049571][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1930.tmp-b7:5' failed: Read-only file system [ 1207.097905][ T4392] usb 5-1: USB disconnect, device number 88 [ 1207.214003][T32367] udevd[32367]: symlink '../../loop5' '/dev/disk/by-diskseq/1930.tmp-b7:5' failed: Read-only file system [ 1207.259179][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1930.tmp-b7:5' failed: Read-only file system [ 1207.450861][ T8123] loop4: detected capacity change from 0 to 2048 [ 1207.565738][ T8131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.701546][ T8131] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1207.701575][ T8131] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1207.704121][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1932.tmp-b7:4' failed: Read-only file system [ 1207.714112][ T8131] Remounting filesystem read-only [ 1207.714124][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 1207.914680][ T8138] loop7: detected capacity change from 0 to 128 [ 1208.001695][ T8138] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1208.018045][ T5613] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1208.100168][ T8138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.283871][ T8144] loop8: detected capacity change from 0 to 512 [ 1208.438400][ T8149] 9p: Invalid gid '0x00000000ffffffff' [ 1208.444843][ T8144] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1208.526262][ T8144] EXT4-fs (loop8): 1 truncate cleaned up [ 1208.547824][ T8144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.571193][ T8156] loop4: detected capacity change from 0 to 16 [ 1208.572104][ T8156] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1208.771587][ T7495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.094553][ T8165] <½ [ 1209.149467][ T33] audit: type=1400 audit(35738121.029:1236): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8168 comm="syz.5.14531" name="p" offset=58 [ 1209.469996][ T8178] loop4: detected capacity change from 0 to 2048 [ 1209.538227][ T8178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1210.704368][ T8187] loop5: detected capacity change from 0 to 32768 [ 1210.936300][ T8218] loop4: detected capacity change from 0 to 512 [ 1210.969371][ T8218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1211.059429][ T8218] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.14547: invalid indirect mapped block 32768 (level 2) [ 1211.059466][ T8218] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1211.073516][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1211.073540][ C0] EXT4-fs (loop4): initial error at time 35738122: ext4_free_branches:1023: inode 16 [ 1211.073569][ C0] EXT4-fs (loop4): last error at time 35738122: ext4_free_branches:1023: inode 16 [ 1211.113987][ T8221] macvtap1: entered allmulticast mode [ 1211.114326][ T8221] veth0_to_bond: entered promiscuous mode [ 1211.114342][ T8221] veth0_to_bond: entered allmulticast mode [ 1211.121587][ T8221] team0: Device macvtap1 failed to register rx_handler [ 1211.122699][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/1943.tmp-b7:4' failed: Read-only file system [ 1211.125614][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1211.138827][ T8218] EXT4-fs (loop4): 1 orphan inode deleted [ 1211.138849][ T8218] EXT4-fs (loop4): 1 truncate cleaned up [ 1211.152035][ T8218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.205862][ T8221] veth0_to_bond: left allmulticast mode [ 1211.205890][ T8221] veth0_to_bond: left promiscuous mode [ 1211.208124][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1942.tmp-b7:5' failed: Read-only file system [ 1211.229278][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/1943.tmp-b7:4' failed: Read-only file system [ 1211.237350][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1211.260775][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:5' failed: Read-only file system [ 1211.393094][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1942.tmp-b7:5' failed: Read-only file system [ 1211.484909][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1942.tmp-b7:5' failed: Read-only file system [ 1211.504780][ T8227] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1211.539105][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1942.tmp-b7:5' failed: Read-only file system [ 1211.564356][ T8218] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1211.727115][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.809365][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/1943.tmp-b7:4' failed: Read-only file system [ 1211.993316][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14550'. [ 1212.140922][ T8248] vcan0: tx address claim with dlc 0 [ 1212.250852][ T42] IPVS: stop unused estimator thread 0... [ 1212.517492][ T33] audit: type=1326 audit(35738124.389:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.519074][ T33] audit: type=1326 audit(35738124.399:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.521041][ T33] audit: type=1326 audit(35738124.399:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.521088][ T33] audit: type=1326 audit(35738124.399:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.521129][ T33] audit: type=1326 audit(35738124.399:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.523587][ T33] audit: type=1326 audit(35738124.399:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.524974][ T33] audit: type=1326 audit(35738124.399:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.613744][ T33] audit: type=1326 audit(35738124.469:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.641604][ T33] audit: type=1326 audit(35738124.499:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.6.14558" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2559e159 code=0x7ffc0000 [ 1212.969777][ T8253] loop8: detected capacity change from 0 to 40427 [ 1212.995988][ T8253] F2FS-fs (loop8): build fault injection rate: 174 [ 1212.996577][ T8253] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 1213.013387][ T8253] F2FS-fs (loop8): invalid crc value [ 1213.173828][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1213.174716][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1213.174739][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1213.174757][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1213.175190][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1213.175208][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1213.175227][ T8282] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1213.215646][ T8272] loop4: detected capacity change from 0 to 4096 [ 1213.357148][T10621] IPVS: starting estimator thread 0... [ 1213.391792][ T8282] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1213.391809][ T8282] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1213.432105][ T8272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.450010][ T8284] IPVS: using max 27 ests per chain, 64800 per kthread [ 1213.770016][ T8272] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #12: block 80: comm syz.4.14562: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1213.801953][ T8272] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz.4.14562: directory missing '..' [ 1213.875826][ T8277] loop6: detected capacity change from 0 to 131072 [ 1213.906525][ T8277] F2FS-fs (loop6): invalid crc value [ 1213.913523][ T8253] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1213.976666][ T8277] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1213.977876][ T8277] loop6: lost filesystem error report for type 5 error -117 [ 1213.989779][ T8277] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1214.018183][ T8277] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1214.078478][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14568'. [ 1214.191731][ T8253] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1214.226881][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.702796][ T7495] syz-executor: attempt to access beyond end of device [ 1214.702796][ T7495] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1214.712414][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.712447][ T7495] Tainted: [L]=SOFTLOCKUP [ 1214.712455][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1214.712467][ T7495] Call Trace: [ 1214.712476][ T7495] [ 1214.712485][ T7495] dump_stack_lvl+0xe8/0x150 [ 1214.712519][ T7495] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1214.712549][ T7495] f2fs_write_end_bio+0xda7/0x11c0 [ 1214.712594][ T7495] __submit_merged_bio+0x258/0x6a0 [ 1214.712616][ T7495] ? rcu_is_watching+0x16/0xb0 [ 1214.712650][ T7495] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1214.712676][ T7495] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1214.712734][ T7495] f2fs_write_data_pages+0x2a13/0x36e0 [ 1214.712797][ T7495] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1214.712820][ T7495] ? is_bpf_text_address+0x26/0x2b0 [ 1214.712851][ T7495] ? arch_stack_walk+0xfb/0x150 [ 1214.712906][ T7495] ? add_lock_to_list+0xc7/0x100 [ 1214.712936][ T7495] ? lockdep_unlock+0x5c/0xd0 [ 1214.712955][ T7495] ? __lock_acquire+0x1511/0x2de0 [ 1214.713011][ T7495] ? do_raw_spin_lock+0x12b/0x2f0 [ 1214.713043][ T7495] ? do_raw_spin_unlock+0xf5/0x200 [ 1214.713063][ T7495] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1214.713090][ T7495] do_writepages+0x338/0x560 [ 1214.713123][ T7495] ? do_raw_spin_unlock+0xf5/0x200 [ 1214.713148][ T7495] filemap_fdatawrite+0x1e9/0x2f0 [ 1214.713174][ T7495] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1214.713241][ T7495] ? do_raw_spin_unlock+0xf5/0x200 [ 1214.713266][ T7495] f2fs_sync_dirty_inodes+0x471/0x970 [ 1214.713310][ T7495] f2fs_write_checkpoint+0x860/0x24d0 [ 1214.713373][ T7495] kill_f2fs_super+0x2dc/0x700 [ 1214.713405][ T7495] ? rcu_do_enqueue+0x616/0x870 [ 1214.713428][ T7495] ? lockdep_hardirqs_on+0x7b/0x110 [ 1214.713454][ T7495] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1214.713496][ T7495] ? __pfx_call_rcu+0x10/0x10 [ 1214.713530][ T7495] ? shrinker_free+0x2a7/0x3b0 [ 1214.713556][ T7495] deactivate_locked_super+0xbe/0x110 [ 1214.713582][ T7495] cleanup_mnt+0x3d3/0x460 [ 1214.713614][ T7495] task_work_run+0x1d9/0x260 [ 1214.713641][ T7495] ? __pfx_task_work_run+0x10/0x10 [ 1214.713676][ T7495] exit_to_user_mode_loop+0x204/0x770 [ 1214.713702][ T7495] ? rcu_is_watching+0x16/0xb0 [ 1214.713733][ T7495] do_syscall_64+0x328/0x520 [ 1214.713758][ T7495] ? trace_irq_disable+0x3b/0x140 [ 1214.713782][ T7495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.713802][ T7495] ? clear_bhb_loop+0x70/0xc0 [ 1214.713826][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.713845][ T7495] RIP: 0033:0x7f38ac39f397 [ 1214.713865][ T7495] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1214.713881][ T7495] RSP: 002b:00007ffef9102cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1214.713902][ T7495] RAX: 0000000000000000 RBX: 00007f38ac4344bb RCX: 00007f38ac39f397 [ 1214.713916][ T7495] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef9102db0 [ 1214.713928][ T7495] RBP: 00007ffef9102db0 R08: 00007ffef9103db0 R09: 00000000ffffffff [ 1214.713941][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef9103e40 [ 1214.713954][ T7495] R13: 00007f38ac4344bb R14: 0000000000128a2e R15: 00007ffef9103e80 [ 1214.713991][ T7495] [ 1214.739120][ T7495] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1214.787531][ T9] loop8: lost filesystem error report for type 5 error -108 [ 1214.942489][ T8322] netlink: 'syz.5.14577': attribute type 2 has an invalid length. [ 1215.771936][ T8325] loop7: detected capacity change from 0 to 32768 [ 1215.804806][ T8325] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1215.831903][ T8325] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1216.054525][ T8325] XFS (loop7): Ending clean mount [ 1216.093854][ T8325] XFS (loop7): Quotacheck needed: Please wait. [ 1216.230675][T32367] udevd[32367]: symlink '../../loop6' '/dev/disk/by-diskseq/1948.tmp-b7:6' failed: Read-only file system [ 1216.275033][T32367] udevd[32367]: symlink '../../loop6' '/dev/disk/by-diskseq/1948.tmp-b7:6' failed: Read-only file system [ 1216.360575][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1216.378228][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/1952.tmp-b7:7' failed: Read-only file system [ 1216.379442][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:7' failed: Read-only file system [ 1216.476606][ T8325] XFS (loop7): Quotacheck: Done. [ 1216.529384][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 1216.529403][ T33] audit: type=1800 audit(35738128.409:1255): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14578" name="file1" dev="loop7" ino=4422 res=0 errno=-22 [ 1217.066945][ T7304] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1217.185514][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14600'. [ 1217.191107][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14600'. [ 1217.351361][ T8413] netlink: 67 bytes leftover after parsing attributes in process `syz.4.14604'. [ 1217.351445][ T8413] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1217.362228][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/1952.tmp-b7:7' failed: Read-only file system [ 1217.400659][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/1952.tmp-b7:7' failed: Read-only file system [ 1217.441162][ T8414] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1217.441186][ T8414] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1217.659860][ T8419] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1217.660393][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1218.014602][ T8438] veth1_macvtap: left promiscuous mode [ 1218.014627][ T8438] macsec0: entered promiscuous mode [ 1218.044316][ T8438] veth1_macvtap: entered promiscuous mode [ 1218.053027][ T8438] macsec0: left promiscuous mode [ 1218.159960][ T8444] loop8: detected capacity change from 0 to 128 [ 1218.177608][ T8444] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1218.232845][ T8444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1218.232944][ T8444] System zones: 1-3, 19-19, 35-36 [ 1218.264286][ T8444] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1218.312661][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1954.tmp-b7:8' failed: Read-only file system [ 1218.324905][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 1218.435006][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1954.tmp-b7:8' failed: Read-only file system [ 1218.446434][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 1218.514995][ T8444] fscrypt: AES-256-XTS using blk-crypto-fallback [ 1218.534489][ T8459] loop7: detected capacity change from 0 to 512 [ 1218.549305][ T33] audit: type=1800 audit(35738130.389:1256): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14613" name="file3" dev="loop8" ino=12 res=0 errno=-22 [ 1218.581591][ T8463] loop5: detected capacity change from 0 to 128 [ 1218.603600][ T8463] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1218.704035][ T8463] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1218.726508][ T2252] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1218.773676][ T7495] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1218.891792][ T2252] usb 7-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 1218.898002][ T2252] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.898031][ T2252] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.898052][ T2252] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1218.898079][ T2252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.901309][ T2252] usb 7-1: config 0 descriptor?? [ 1219.162784][ T8481] loop4: detected capacity change from 0 to 256 [ 1219.248799][ T8481] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 1219.320332][ T8481] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1219.348462][ T2252] hid-multitouch 0003:0EEF:72C4.0039: unbalanced collection at end of report description [ 1219.356874][ T2252] hid-multitouch 0003:0EEF:72C4.0039: probe with driver hid-multitouch failed with error -22 [ 1219.407931][ T33] audit: type=1326 audit(35738131.289:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8489 comm="syz.8.14628" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38ac39e159 code=0x0 [ 1219.529518][ T2252] usb 7-1: USB disconnect, device number 26 [ 1219.622757][ T8501] netlink: 'syz.7.14632': attribute type 2 has an invalid length. [ 1219.622795][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14632'. [ 1220.155732][T30852] logitech-hidpp-device 0003:046D:C082.003A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1220.176906][ T8523] kvm [8520]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x80000074 [ 1220.392681][ T8527] fido_id[8527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1220.451094][ T8509] loop7: detected capacity change from 0 to 40427 [ 1220.487072][ T8509] F2FS-fs (loop7): Wrong segment_count / block_count (31 > 0) [ 1220.487101][ T8509] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1220.509752][ T8509] F2FS-fs (loop7): invalid crc value [ 1220.632999][ T8509] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1220.677662][ T8509] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1220.677691][ T8509] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1220.843783][ T8544] netlink: 104 bytes leftover after parsing attributes in process `syz.8.14647'. [ 1221.079837][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.104050][ T8557] bridge_slave_1 (unregistering): left allmulticast mode [ 1221.104076][ T8557] bridge_slave_1 (unregistering): left promiscuous mode [ 1221.104162][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.201708][ T8564] scsi_dev_info_list_add_str: bad dev info string 'Q' '' '' [ 1221.593409][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/1962.tmp-b7:7' failed: Read-only file system [ 1221.613262][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/1962.tmp-b7:7' failed: Read-only file system [ 1221.714246][ T8583] loop5: detected capacity change from 0 to 4096 [ 1221.769168][ T8583] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1221.825094][ T8583] ntfs3(loop5): Failed to load $Extend (-22). [ 1221.825119][ T8583] ntfs3(loop5): Failed to initialize $Extend. [ 1222.002321][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1964.tmp-b7:5' failed: Read-only file system [ 1222.010282][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1222.017708][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system [ 1222.302949][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1964.tmp-b7:5' failed: Read-only file system [ 1222.307847][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1222.308926][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system [ 1222.439324][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1964.tmp-b7:5' failed: Read-only file system [ 1222.490542][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1964.tmp-b7:5' failed: Read-only file system [ 1222.744531][ T8631] netlink: 'syz.8.14674': attribute type 11 has an invalid length. [ 1222.744555][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14674'. [ 1222.909649][ T8633] loop6: detected capacity change from 0 to 256 [ 1223.508416][ T8660] loop6: detected capacity change from 0 to 2048 [ 1223.575114][ T8660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1223.683396][T28625] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.696616][ T8674] loop7: detected capacity change from 0 to 1024 [ 1223.921532][ T8684] Bluetooth: MGMT ver 1.23 [ 1224.281473][ T8681] loop8: detected capacity change from 0 to 32768 [ 1224.537788][ T8693] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1225.065566][ T8696] loop7: detected capacity change from 0 to 131072 [ 1225.073868][ T8696] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 1225.073890][ T8696] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1225.081812][ T8696] F2FS-fs (loop7): invalid crc value [ 1225.110796][ T8681] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1225.174002][ T8696] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1225.191415][ T8696] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1225.191442][ T8696] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1225.373235][ T8681] XFS (loop8): Ending clean mount [ 1225.548875][ T7495] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1226.238652][T10621] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.368039][ T8738] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1226.368156][ T8738] pim6reg0: linktype set to 823 [ 1226.449999][ T8740] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1226.450027][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.4.14715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.450057][ T8740] Tainted: [L]=SOFTLOCKUP [ 1226.450066][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1226.450079][ T8740] Call Trace: [ 1226.450088][ T8740] [ 1226.450097][ T8740] dump_stack_lvl+0xe8/0x150 [ 1226.450138][ T8740] sysfs_create_dir_ns+0x271/0x2a0 [ 1226.450171][ T8740] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1226.450204][ T8740] ? do_raw_spin_unlock+0xf5/0x200 [ 1226.450231][ T8740] kobject_add_internal+0x622/0xcd0 [ 1226.450262][ T8740] kobject_add+0x163/0x240 [ 1226.450294][ T8740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1226.450328][ T8740] ? __pfx_kobject_add+0x10/0x10 [ 1226.450366][ T8740] ? get_device_parent+0x366/0x3a0 [ 1226.450397][ T8740] device_add+0x3fa/0xb80 [ 1226.450425][ T8740] tty_register_device_attr+0x425/0x990 [ 1226.450457][ T8740] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1226.450489][ T8740] ? tty_port_init+0x136/0x1a0 [ 1226.450511][ T8740] ? gsm_dlci_alloc+0x330/0x640 [ 1226.450539][ T8740] gsm_activate_mux+0x110/0x2a0 [ 1226.450567][ T8740] gsmld_ioctl+0x12d3/0x1930 [ 1226.450596][ T8740] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1226.450630][ T8740] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1226.450667][ T8740] ? ldsem_down_read+0x12/0x40 [ 1226.450701][ T8740] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1226.450723][ T8740] tty_ioctl+0x9bd/0xde0 [ 1226.450744][ T8740] ? __pfx_tty_ioctl+0x10/0x10 [ 1226.450765][ T8740] __se_sys_ioctl+0xfc/0x170 [ 1226.450800][ T8740] do_syscall_64+0x166/0x520 [ 1226.450827][ T8740] ? trace_irq_disable+0x3b/0x140 [ 1226.450855][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.450876][ T8740] ? clear_bhb_loop+0x70/0xc0 [ 1226.450902][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.450923][ T8740] RIP: 0033:0x7f043219e159 [ 1226.450943][ T8740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.450961][ T8740] RSP: 002b:00007f0432f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.450984][ T8740] RAX: ffffffffffffffda RBX: 00007f0432426090 RCX: 00007f043219e159 [ 1226.451000][ T8740] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1226.451014][ T8740] RBP: 00007f043223506b R08: 0000000000000000 R09: 0000000000000000 [ 1226.451028][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.451042][ T8740] R13: 00007f0432426128 R14: 00007f0432426090 R15: 00007ffe9f030298 [ 1226.451075][ T8740] [ 1226.464703][ T8740] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1226.537587][T21981] Bluetooth: hci0: command 0x0401 tx timeout [ 1226.847906][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1226.874852][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1226.880090][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1226.898678][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1226.899281][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1226.978229][T10621] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.484646][ T8756] dvmrp6: entered allmulticast mode [ 1227.622788][T10621] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.999860][T10621] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.231836][ T8785] IPv6: NLM_F_CREATE should be specified when creating new route [ 1228.232007][ T8785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.232019][ T8785] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.232057][ T8785] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.232080][ T8785] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.233208][ T8785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.382673][ T8770] loop8: detected capacity change from 0 to 32768 [ 1229.009622][T21981] Bluetooth: hci2: command tx timeout [ 1229.110531][ T8787] loop4: detected capacity change from 0 to 131072 [ 1229.134771][ T8787] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 1229.134800][ T8787] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1229.135574][ T8787] F2FS-fs (loop4): invalid crc value [ 1229.230537][ T8787] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1229.254101][ T8787] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1229.254126][ T8787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1229.297714][ T8787] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 1229.384531][ T8792] loop5: detected capacity change from 0 to 32768 [ 1229.405274][T10621] bridge_slave_1: left allmulticast mode [ 1229.405298][T10621] bridge_slave_1: left promiscuous mode [ 1229.405503][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.419926][ T8807] ea_get: invalid extended attribute [ 1229.419942][ T8807] ffff888056b03828: 04 00 00 00 .... [ 1229.496623][ T8792] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1229.587912][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-diskseq/1976.tmp-b7:8' failed: Read-only file system [ 1229.589302][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:8' failed: Read-only file system [ 1229.620281][ T7013] udevd[7013]: symlink '../../loop5' '/dev/disk/by-diskseq/1978.tmp-b7:5' failed: Read-only file system [ 1229.621606][ T7013] udevd[7013]: symlink '../../loop5' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:5' failed: Read-only file system [ 1229.639318][T10621] bridge_slave_0: left allmulticast mode [ 1229.639343][T10621] bridge_slave_0: left promiscuous mode [ 1229.639558][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.674641][T32366] udevd[32366]: symlink '../../loop4' '/dev/disk/by-diskseq/1977.tmp-b7:4' failed: Read-only file system [ 1229.682450][T32366] udevd[32366]: symlink '../../loop4' '/dev/disk/by-uuid/5be83a48-3981-4785-8eba-e01e66b0c3ac.tmp-b7:4' failed: Read-only file system [ 1229.689559][ T8792] XFS (loop5): Ending clean mount [ 1229.868944][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1976.tmp-b7:8' failed: Read-only file system [ 1229.870120][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:8' failed: Read-only file system [ 1229.881670][T25432] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1230.030973][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/1977.tmp-b7:4' failed: Read-only file system [ 1230.032190][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-uuid/5be83a48-3981-4785-8eba-e01e66b0c3ac.tmp-b7:4' failed: Read-only file system [ 1230.413460][ T8829] program syz.8.14742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.007196][T10621] bond0 (unregistering): (slave 45ÿ): Releasing backup interface [ 1231.031131][T10621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.042079][T10621] bond0 (unregistering): Released all slaves [ 1231.086583][T21981] Bluetooth: hci2: command tx timeout [ 1231.093606][T10621] bond1 (unregistering): Released all slaves [ 1231.144306][T10621] bond2 (unregistering): Released all slaves [ 1231.238694][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1231.698107][ T8877] loop7: detected capacity change from 0 to 512 [ 1231.753096][ T8877] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1231.771609][ T8877] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.14756: invalid indirect mapped block 32768 (level 2) [ 1231.771646][ T8877] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1231.776016][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1231.776038][ C1] EXT4-fs (loop7): initial error at time 35738143: ext4_free_branches:1023: inode 16 [ 1231.776067][ C1] EXT4-fs (loop7): last error at time 35738143: ext4_free_branches:1023: inode 16 [ 1231.900246][ T8877] EXT4-fs (loop7): 1 orphan inode deleted [ 1231.900270][ T8877] EXT4-fs (loop7): 1 truncate cleaned up [ 1231.968553][ T8877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.998529][ T8877] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1232.120744][ T7304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.599647][ T8867] loop8: detected capacity change from 0 to 32768 [ 1232.608294][ T8867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14753 (8867) [ 1232.633700][T10621] hsr_slave_0: left promiscuous mode [ 1232.635922][T10621] hsr_slave_1: left promiscuous mode [ 1232.663137][ T8909] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1232.701813][ T8867] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1232.701850][ T8867] BTRFS info (device loop8): using sha256 checksum algorithm [ 1232.743000][T10621] veth0_to_bond: left allmulticast mode [ 1232.743191][T10621] veth0_to_bond: left promiscuous mode [ 1232.743448][T10621] veth1_macvtap: left promiscuous mode [ 1232.743480][T10621] veth0_macvtap: left promiscuous mode [ 1232.743741][T10621] veth1_vlan: left promiscuous mode [ 1232.753541][T10621] veth0_vlan: left promiscuous mode [ 1232.901749][ T8867] BTRFS info (device loop8): enabling ssd optimizations [ 1232.901775][ T8867] BTRFS info (device loop8): turning on async discard [ 1232.901793][ T8867] BTRFS info (device loop8): enabling free space tree [ 1233.014956][ T8867] BTRFS warning (device loop8): this kernel does not support the compat:1 feature bit [ 1233.150534][ T7495] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1233.166054][T21981] Bluetooth: hci2: command tx timeout [ 1233.498760][ T8937] loop7: detected capacity change from 0 to 256 [ 1234.031625][T10621] team0 (unregistering): Port device team_slave_1 removed [ 1234.063876][T10621] team0 (unregistering): Port device team_slave_0 removed [ 1234.330977][ T8964] loop5: detected capacity change from 0 to 512 [ 1234.381459][ T8964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.433208][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1234.511531][ T8969] rnbd_client L127: Can't parse path ip: -93 [ 1234.584223][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.584329][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.584472][ T8741] bridge_slave_0: entered allmulticast mode [ 1234.608520][ T8741] bridge_slave_0: entered promiscuous mode [ 1234.620682][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.620851][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.620978][ T8741] bridge_slave_1: entered allmulticast mode [ 1234.672197][T25432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.672998][ T8741] bridge_slave_1: entered promiscuous mode [ 1234.783312][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1988.tmp-b7:5' failed: Read-only file system [ 1234.824025][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/1988.tmp-b7:5' failed: Read-only file system [ 1234.908067][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.924378][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.129650][ T8741] team0: Port device team_slave_0 added [ 1235.160895][ T8741] team0: Port device team_slave_1 added [ 1235.171548][ T8983] loop8: detected capacity change from 0 to 1024 [ 1235.237836][ T8982] loop5: detected capacity change from 0 to 4096 [ 1235.253652][T21981] Bluetooth: hci2: command tx timeout [ 1235.329952][ T8982] ntfs3(loop5): ino=3, mi_enum_attr [ 1235.340216][T10621] IPVS: stop unused estimator thread 0... [ 1235.394945][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1990.tmp-b7:8' failed: Read-only file system [ 1235.415785][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 1235.440767][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:8' failed: Read-only file system [ 1235.459984][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.460001][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.460028][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.471895][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.471910][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.471935][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.640731][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1990.tmp-b7:8' failed: Read-only file system [ 1235.661332][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 1235.676531][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:8' failed: Read-only file system [ 1235.785254][T32367] udevd[32367]: symlink '../../loop5' '/dev/disk/by-diskseq/1991.tmp-b7:5' failed: Read-only file system [ 1235.792222][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/1990.tmp-b7:8' failed: Read-only file system [ 1235.827444][ T8741] hsr_slave_0: entered promiscuous mode [ 1235.839043][ T8741] hsr_slave_1: entered promiscuous mode [ 1235.891531][ T8982] ntfs3(loop5): ino=1f, mi_enum_attr [ 1235.891585][ T8982] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1235.911182][ T8982] ntfs3(loop5): ino=1f, mi_enum_attr [ 1235.984719][ T9002] ntfs3(loop5): ino=9, attr_set_size_ex [ 1236.345894][ T33] audit: type=1400 audit(35738148.219:1258): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=":" pid=9015 comm="syz.4.14798" name=":" offset=58 [ 1236.708322][ T9031] loop8: detected capacity change from 0 to 16 [ 1236.788069][ T5269] veth0_vlan: left promiscuous mode [ 1236.825449][ T9034] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14805'. [ 1236.838341][ T5799] veth0_vlan: entered promiscuous mode [ 1237.262627][ T9031] erofs (device loop8): mounted with root inode @ nid 36. [ 1237.298228][ T9048] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1237.704938][ T9043] loop4: detected capacity change from 0 to 40427 [ 1237.717276][ T9043] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1237.717302][ T9043] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1238.083953][ T9043] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1238.171644][ T8741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1238.189910][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1238.190776][ T8741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1238.212501][ T9043] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1238.212526][ T9043] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1238.217059][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.217110][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.231326][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1238.240087][ T8741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1238.281216][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1238.282047][ T8741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1238.405054][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1238.727359][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.799906][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.821678][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.821773][ T8073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.851531][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.851629][ T8072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.282411][ T9114] loop5: detected capacity change from 0 to 128 [ 1239.315074][ T9114] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1239.465316][T25432] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1240.038977][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.185161][ T33] audit: type=1400 audit(35738152.059:1259): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313220202020302020202030202020202030202020202020203220202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313120202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203420202020342020202030202020202030202020202020203420202020202020202020300A2020736974303A2020202020 [ 1240.389622][ T9160] loop7: detected capacity change from 0 to 64 [ 1240.395722][ T9160] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1240.455206][ T9127] loop8: detected capacity change from 0 to 32768 [ 1240.472285][ T9127] (syz.8.14830,9127,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1240.474894][ T9127] (syz.8.14830,9127,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1240.565267][ T9127] JBD2: Ignoring recovery information on journal [ 1240.660613][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2000.tmp-b7:7' failed: Read-only file system [ 1240.763505][ T9127] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1240.813207][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2000.tmp-b7:7' failed: Read-only file system [ 1240.872623][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2000.tmp-b7:7' failed: Read-only file system [ 1240.923236][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2000.tmp-b7:7' failed: Read-only file system [ 1240.964104][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-diskseq/2001.tmp-b7:8' failed: Read-only file system [ 1240.971868][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:8' failed: Read-only file system [ 1241.084415][ T8741] veth0_vlan: entered promiscuous mode [ 1241.150794][ T8741] veth1_vlan: entered promiscuous mode [ 1241.300824][ T9187] loop4: detected capacity change from 0 to 512 [ 1241.304630][ T9187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1241.304687][ T9187] EXT4-fs: Ignoring removed mblk_io_submit option [ 1241.337012][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2001.tmp-b7:8' failed: Read-only file system [ 1241.349639][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:8' failed: Read-only file system [ 1241.375664][ T9187] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1241.375698][ T9187] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1241.416773][ T9187] EXT4-fs (loop4): 1 truncate cleaned up [ 1241.421867][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.424852][ T8741] veth0_macvtap: entered promiscuous mode [ 1241.466352][ T8741] veth1_macvtap: entered promiscuous mode [ 1241.466762][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2003.tmp-b7:4' failed: Read-only file system [ 1241.473452][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system [ 1241.474651][ T9187] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 4: comm syz.4.14843: lblock 0 mapped to illegal pblock 4 (length 1) [ 1241.480591][ T9187] EXT4-fs (loop4): Remounting filesystem read-only [ 1241.531875][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.569531][ T8741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.606985][ T8068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.607033][ T8068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.607066][ T8068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.607098][ T8068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.683129][ T9127] (syz.8.14830,9127,1):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume. [ 1241.683163][ T9127] (syz.8.14830,9127,1):ocfs2_group_add:513 ERROR: status = -22 [ 1241.717861][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.100554][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.100576][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.273379][ T7495] ocfs2: Unmounting device (7,8) on (node local) [ 1242.344080][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.344102][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.399976][ T9212] loop4: detected capacity change from 0 to 128 [ 1242.412623][ T9212] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1242.412671][ T9212] hpfs: filesystem error: improperly stopped [ 1242.412687][ T9212] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1242.412702][ T9212] hpfs: You really don't want any checks? You are crazy... [ 1242.413115][ T9212] hpfs: hpfs_map_sector(): read error [ 1242.413127][ T9212] hpfs: code page support is disabled [ 1242.414930][ T9212] hpfs: hpfs_map_4sectors(): unaligned read [ 1242.415006][ T9212] hpfs: hpfs_map_4sectors(): unaligned read [ 1242.415018][ T9212] hpfs: filesystem error: unable to find root dir [ 1242.487039][ T9212] hpfs: hpfs_map_4sectors(): unaligned read [ 1242.742688][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.854940][ T9258] loop4: detected capacity change from 0 to 512 [ 1243.917942][ T9258] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1243.917967][ T9258] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1243.943048][ T9258] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1243.943430][ T9258] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.14859: bad orphan inode 15 [ 1243.943456][ T9258] loop4: lost filesystem error report for type 5 error -117 [ 1243.946605][ C0] EXT4-fs (loop4): initial error at time 35738155: ext4_orphan_get:1429 [ 1243.946632][ C0] EXT4-fs (loop4): last error at time 35738155: ext4_orphan_get:1429 [ 1243.974262][ T9258] ext4_test_bit(bit=14, block=18) = 1 [ 1243.974284][ T9258] is_bad_inode(inode)=0 [ 1243.974293][ T9258] NEXT_ORPHAN(inode)=1023 [ 1243.974301][ T9258] max_ino=32 [ 1243.974310][ T9258] i_nlink=0 [ 1244.089150][ T9258] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz.4.14859: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 1244.089178][ T9258] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1244.091032][ T9258] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 1244.092026][ T9258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1244.232186][ T9273] loop7: detected capacity change from 0 to 4096 [ 1244.312354][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.382375][ T9273] ntfs3(loop7): failed to convert "0080" to macinuit [ 1244.383213][ T9273] ntfs3(loop7): failed to convert name for inode 1e. [ 1244.383642][ T9273] ntfs3(loop7): ino=1f, mi_enum_attr [ 1245.036008][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1245.174333][ T9316] loop5: detected capacity change from 0 to 256 [ 1245.186788][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1245.192239][ T10] usb 7-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1245.196191][ T10] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1245.196218][ T10] usb 7-1: config 1 has no interface number 0 [ 1245.196258][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1245.196281][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1245.196308][ T10] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1245.200219][ T10] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1245.200245][ T10] usb 7-1: Product: syz [ 1245.200261][ T10] usb 7-1: Manufacturer: syz [ 1245.200275][ T10] usb 7-1: SerialNumber: syz [ 1245.216722][ T9291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1245.216849][ T9291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1245.687336][ T9291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1245.687465][ T9291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1245.902633][ T10] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1245.902890][ T10] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 1245.929526][ T10] usb 7-1: USB disconnect, device number 27 [ 1246.233032][ T9348] netlink: 'syz.4.14886': attribute type 3 has an invalid length. [ 1246.652175][ T9319] loop8: detected capacity change from 0 to 40427 [ 1246.662673][ T9319] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64) [ 1246.662701][ T9319] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1246.662999][ T9319] F2FS-fs (loop8): Image doesn't support compression [ 1246.668444][ T9319] F2FS-fs (loop8): invalid crc value [ 1246.921531][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2014.tmp-b7:8' failed: Read-only file system [ 1246.929475][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 1247.018691][ T9319] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1247.202250][ T9319] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 1247.202281][ T9319] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1247.202307][ T9319] F2FS-fs (loop8): Start checkpoint disabled! [ 1247.313576][ T9378] loop4: detected capacity change from 0 to 8192 [ 1247.323715][ T9319] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 1247.329362][ T9378] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1247.358219][ T9319] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1247.358245][ T9319] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1247.460233][ T9387] loop7: detected capacity change from 0 to 4096 [ 1247.482719][ T9387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1247.529901][ T9387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.579595][T10621] kworker/u8:9: attempt to access beyond end of device [ 1247.579595][T10621] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1247.579672][T10621] CPU: 1 UID: 0 PID: 10621 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.579699][T10621] Tainted: [L]=SOFTLOCKUP [ 1247.579706][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1247.579719][T10621] Workqueue: writeback wb_workfn (flush-7:8) [ 1247.579761][T10621] Call Trace: [ 1247.579770][T10621] [ 1247.579778][T10621] dump_stack_lvl+0xe8/0x150 [ 1247.579810][T10621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1247.579841][T10621] f2fs_write_end_bio+0xda7/0x11c0 [ 1247.579885][T10621] __submit_merged_bio+0x258/0x6a0 [ 1247.579908][T10621] ? rcu_is_watching+0x16/0xb0 [ 1247.579945][T10621] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1247.579973][T10621] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1247.580020][T10621] f2fs_write_data_pages+0x2a13/0x36e0 [ 1247.580079][T10621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1247.580118][T10621] ? __lock_acquire+0x747/0x2de0 [ 1247.580198][T10621] ? __lock_acquire+0x747/0x2de0 [ 1247.580243][T10621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1247.580271][T10621] do_writepages+0x338/0x560 [ 1247.580304][T10621] ? reacquire_held_locks+0x117/0x1a0 [ 1247.580332][T10621] ? writeback_sb_inodes+0x450/0x1af0 [ 1247.580362][T10621] __writeback_single_inode+0x136/0x1220 [ 1247.580390][T10621] ? do_raw_spin_unlock+0xf5/0x200 [ 1247.580414][T10621] writeback_sb_inodes+0x9de/0x1af0 [ 1247.580435][T10621] ? __lock_acquire+0x747/0x2de0 [ 1247.580472][T10621] ? lock_acquire+0x115/0x350 [ 1247.580499][T10621] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1247.580584][T10621] ? rcu_is_watching+0x16/0xb0 [ 1247.580615][T10621] ? queue_io+0x2d3/0x470 [ 1247.580640][T10621] wb_writeback+0x41c/0xad0 [ 1247.580666][T10621] ? queue_io+0x251/0x470 [ 1247.580692][T10621] ? __pfx_wb_writeback+0x10/0x10 [ 1247.580712][T10621] ? do_raw_spin_lock+0x12b/0x2f0 [ 1247.580746][T10621] wb_workfn+0x431/0x10f0 [ 1247.580792][T10621] ? __pfx_wb_workfn+0x10/0x10 [ 1247.580823][T10621] ? lockdep_hardirqs_on+0x7b/0x110 [ 1247.580867][T10621] ? do_raw_spin_lock+0x12b/0x2f0 [ 1247.580896][T10621] ? lock_acquire+0x115/0x350 [ 1247.580928][T10621] ? rcu_is_watching+0x16/0xb0 [ 1247.580958][T10621] ? process_scheduled_works+0x97a/0x1630 [ 1247.580990][T10621] process_scheduled_works+0xc3d/0x1630 [ 1247.581047][T10621] ? __pfx_process_scheduled_works+0x10/0x10 [ 1247.581081][T10621] ? assign_work+0x3cf/0x5d0 [ 1247.581114][T10621] worker_thread+0xa47/0xfb0 [ 1247.581171][T10621] kthread+0x38b/0x480 [ 1247.581194][T10621] ? __pfx_worker_thread+0x10/0x10 [ 1247.581219][T10621] ? __pfx_kthread+0x10/0x10 [ 1247.581243][T10621] ret_from_fork+0x514/0xb70 [ 1247.581267][T10621] ? __pfx_ret_from_fork+0x10/0x10 [ 1247.581287][T10621] ? __switch_to+0xc78/0x1410 [ 1247.581317][T10621] ? __pfx_kthread+0x10/0x10 [ 1247.581342][T10621] ret_from_fork_asm+0x1a/0x30 [ 1247.581389][T10621] [ 1247.584955][T10621] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1247.639723][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2015.tmp-b7:4' failed: Read-only file system [ 1247.650424][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1247.802004][T32367] udevd[32367]: symlink '../../loop7' '/dev/disk/by-diskseq/2016.tmp-b7:7' failed: Read-only file system [ 1247.808191][T32367] udevd[32367]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1247.884186][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2015.tmp-b7:4' failed: Read-only file system [ 1247.922831][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2015.tmp-b7:4' failed: Read-only file system [ 1247.974263][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2015.tmp-b7:4' failed: Read-only file system [ 1248.163283][ T7304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.169251][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2014.tmp-b7:8' failed: Read-only file system [ 1248.388802][ T9408] loop8: detected capacity change from 0 to 2048 [ 1248.468012][ T9408] NILFS (loop8): invalid segment: Magic number mismatch [ 1248.468040][ T9408] NILFS (loop8): trying rollback from an earlier position [ 1248.581850][ T9408] NILFS (loop8): recovery complete [ 1248.620111][ T9423] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.710836][ T9425] loop7: detected capacity change from 0 to 4096 [ 1248.725208][ T9425] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1248.755870][ T9408] syz.8.14899: attempt to access beyond end of device [ 1248.755870][ T9408] loop8: rw=8388608, sector=2388, nr_sectors = 4 limit=2048 [ 1248.758184][ T9408] NILFS (loop8): I/O error reading node block for GC (ino=6, vblocknr=2147483649) [ 1248.758215][ T9408] NILFS (loop8): error -5 preparing GC: cannot read source blocks [ 1248.842102][ T9425] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1248.849748][ T9425] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1248.930248][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 1249.049177][ T9438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1249.514112][ T9427] loop6: detected capacity change from 0 to 32768 [ 1249.530659][ T9427] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14912 (9427) [ 1249.581779][ T9427] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1249.581813][ T9427] BTRFS info (device loop6): using crc32c checksum algorithm [ 1249.748093][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14925'. [ 1249.748472][ T9427] BTRFS info (device loop6): rebuilding free space tree [ 1249.892149][ T9427] BTRFS info (device loop6): enabling ssd optimizations [ 1249.892179][ T9427] BTRFS info (device loop6): turning on async discard [ 1249.892197][ T9427] BTRFS info (device loop6): enabling free space tree [ 1249.892214][ T9427] BTRFS info (device loop6): force clearing of disk cache [ 1249.892234][ T9427] BTRFS info (device loop6): use lzo compression, level 1 [ 1250.163205][ T8741] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1250.293357][ T9486] loop4: detected capacity change from 0 to 1024 [ 1250.449083][ T9486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.528674][ T9486] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz.4.14934: directory missing '..' [ 1250.651930][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1250.729068][ T9498] MTRR 2 not used [ 1250.781388][ T9500] loop5: detected capacity change from 0 to 1024 [ 1250.853652][ T9503] loop6: detected capacity change from 0 to 1024 [ 1251.121129][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14942'. [ 1251.121158][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14942'. [ 1251.689432][ T9536] loop6: detected capacity change from 0 to 256 [ 1251.937295][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2032.tmp-b7:6' failed: Read-only file system [ 1252.600449][ T9576] sctp: [Deprecated]: syz.5.14969 (pid 9576) Use of int in max_burst socket option deprecated. [ 1252.600449][ T9576] Use struct sctp_assoc_value instead [ 1252.602324][ T9578] loop8: detected capacity change from 0 to 256 [ 1252.679668][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2034.tmp-b7:8' failed: Read-only file system [ 1252.765738][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-diskseq/2034.tmp-b7:8' failed: Read-only file system [ 1252.817572][T32367] udevd[32367]: symlink '../../loop8' '/dev/disk/by-diskseq/2034.tmp-b7:8' failed: Read-only file system [ 1253.182180][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14980'. [ 1253.506228][ T9627] loop4: detected capacity change from 0 to 64 [ 1253.557740][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2036.tmp-b7:4' failed: Read-only file system [ 1253.562297][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-label/unt.tmp-b7:4' failed: Read-only file system [ 1253.641358][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2036.tmp-b7:4' failed: Read-only file system [ 1253.649705][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-label/unt.tmp-b7:4' failed: Read-only file system [ 1254.025064][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2036.tmp-b7:4' failed: Read-only file system [ 1254.049543][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2036.tmp-b7:4' failed: Read-only file system [ 1254.303817][ T9642] loop7: detected capacity change from 0 to 32768 [ 1254.310079][ T9653] loop8: detected capacity change from 0 to 4096 [ 1254.319053][ T9642] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.14999 (9642) [ 1254.351656][ T9642] BTRFS info (device loop7): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1254.351690][ T9642] BTRFS info (device loop7): using xxhash64 checksum algorithm [ 1254.375379][ T9655] loop6: detected capacity change from 0 to 512 [ 1254.382987][ T9655] EXT4-fs: Ignoring removed mblk_io_submit option [ 1254.401811][ T9655] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.15004: corrupted in-inode xattr: e_value size too large [ 1254.401844][ T9655] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1254.416417][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1254.416442][ C0] EXT4-fs (loop6): initial error at time 35738166: ext4_iget_extra_inode:5210: inode 15 [ 1254.416475][ C0] EXT4-fs (loop6): last error at time 35738166: ext4_iget_extra_inode:5210: inode 15 [ 1254.418219][ T9655] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.15004: couldn't read orphan inode 15 (err -117) [ 1254.418250][ T9655] loop6: lost filesystem error report for type 5 error -117 [ 1254.467974][ T9655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.503988][ T9653] ntfs3(loop8): ino=b, mi_enum_attr [ 1254.504017][ T9653] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1254.505098][ T9653] ntfs3(loop8): Failed to load $Extend (-22). [ 1254.505119][ T9653] ntfs3(loop8): Failed to initialize $Extend. [ 1254.603772][ T33] audit: type=1800 audit(35738166.479:1260): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.15003" name="file1" dev="loop8" ino=30 res=0 errno=-22 [ 1254.634280][ T9642] BTRFS info (device loop7): enabling ssd optimizations [ 1254.634308][ T9642] BTRFS info (device loop7): turning on async discard [ 1254.634324][ T9642] BTRFS info (device loop7): enabling free space tree [ 1254.668547][ T9653] ntfs3(loop8): ino=1e, "file1" attr_set_size_ex [ 1254.670419][ T9650] ntfs3(loop8): ino=1e, "file1" attr_set_size_ex [ 1254.726661][ T8741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.952294][ T9676] loop6: detected capacity change from 0 to 512 [ 1255.026777][ T9676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.255230][ T8741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.407298][ T7304] BTRFS info (device loop7): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1255.490002][ T9687] evm: overlay not supported [ 1255.763730][ T9696] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1256.235084][ T9718] loop4: detected capacity change from 0 to 512 [ 1256.296771][ T9718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.340537][ T9718] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 1256.340642][ T9718] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1256.340663][ T9718] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.15023: Failed to acquire dquot type 0 [ 1256.451521][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.759055][ T9710] loop6: detected capacity change from 0 to 32768 [ 1256.774859][ T9710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15021 (9710) [ 1256.814912][ T9710] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1256.814948][ T9710] BTRFS info (device loop6): using crc32c checksum algorithm [ 1256.911253][ T9710] BTRFS info (device loop6): enabling ssd optimizations [ 1256.911280][ T9710] BTRFS info (device loop6): turning on flush-on-commit [ 1256.911298][ T9710] BTRFS info (device loop6): enabling free space tree [ 1256.911314][ T9710] BTRFS info (device loop6): enabling auto defrag [ 1256.911331][ T9710] BTRFS info (device loop6): use lzo compression, level 1 [ 1256.911350][ T9710] BTRFS info (device loop6): max_inline set to 4096 [ 1257.468448][ T8741] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1257.626861][ T9763] netlink: 56 bytes leftover after parsing attributes in process `syz.7.15038'. [ 1257.680045][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2048.tmp-b7:6' failed: Read-only file system [ 1257.711593][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2048.tmp-b7:6' failed: Read-only file system [ 1257.916845][ T9773] loop5: detected capacity change from 0 to 512 [ 1257.921057][ T9773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1257.921900][ T9773] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1257.999551][ T9773] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1257.999985][ T9773] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.15043: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1258.000029][ T9773] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1258.000500][ T9773] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.15043: couldn't read orphan inode 13 (err -117) [ 1258.000532][ T9773] loop5: lost filesystem error report for type 5 error -117 [ 1258.015805][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2050.tmp-b7:5' failed: Read-only file system [ 1258.019795][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1258.021342][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 1258.021364][ C1] EXT4-fs (loop5): last error at time 35738169: ext4_orphan_get:1408 [ 1258.023827][ T9773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1258.036303][T29160] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1258.071250][ T9773] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.15043: inode #15: comm syz.5.15043: iget: illegal inode # [ 1258.077614][ T9750] loop4: detected capacity change from 0 to 32768 [ 1258.081993][ T9773] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1258.140053][ T9773] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1258.144366][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2050.tmp-b7:5' failed: Read-only file system [ 1258.163528][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1258.225505][T29160] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1258.225556][T29160] usb 9-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 1258.240670][ T9750] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1258.256415][T29160] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.280103][T29160] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1258.280130][T29160] usb 9-1: Product: syz [ 1258.280146][T29160] usb 9-1: Manufacturer: syz [ 1258.295218][T29160] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1258.351879][ T9750] XFS (loop4): Ending clean mount [ 1258.374386][T25432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.377567][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2051.tmp-b7:4' failed: Read-only file system [ 1258.410196][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system [ 1258.507900][ T7013] udevd[7013]: symlink '../../loop5' '/dev/disk/by-diskseq/2050.tmp-b7:5' failed: Read-only file system [ 1258.597058][ T7013] udevd[7013]: symlink '../../loop5' '/dev/disk/by-diskseq/2050.tmp-b7:5' failed: Read-only file system [ 1258.728701][ T5613] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1258.754475][T29160] uvcvideo 9-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1258.858621][T29160] videodev: could not get a free minor [ 1258.858643][T29160] uvcvideo 9-1:1.1: Failed to register meta-cap device (-23). [ 1259.017150][T29160] usb 9-1: USB disconnect, device number 2 [ 1259.064748][ T9810] loop7: detected capacity change from 0 to 128 [ 1259.618311][ T9778] loop6: detected capacity change from 0 to 32768 [ 1259.703010][ T9778] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1259.809838][ T9778] XFS (loop6): Ending clean mount [ 1259.828923][ T9778] XFS (loop6): Quotacheck needed: Please wait. [ 1260.223625][ T9778] XFS (loop6): Quotacheck: Done. [ 1260.299542][ T8741] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1260.710453][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15062'. [ 1260.881809][ T9835] loop8: detected capacity change from 0 to 32768 [ 1260.990174][ T9867] loop4: detected capacity change from 0 to 256 [ 1261.018110][ T9835] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1261.399590][ T9882] zero sized request [ 1261.659031][ T7495] ocfs2: Unmounting device (7,8) on (node local) [ 1261.786706][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15074'. [ 1261.786729][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15074'. [ 1262.502057][ T9896] loop4: detected capacity change from 0 to 32768 [ 1262.552096][ T9896] JBD2: Ignoring recovery information on journal [ 1262.557164][ T9896] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1262.557187][ T9896] JBD2: bad block at offset 32 [ 1262.583300][ T9896] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1262.644972][ T9896] (syz.4.15075,9896,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 1262.694765][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2062.tmp-b7:4' failed: Read-only file system [ 1262.698852][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 1262.771440][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2062.tmp-b7:4' failed: Read-only file system [ 1262.772635][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 1262.808487][ T5613] ocfs2: Unmounting device (7,4) on (node local) [ 1262.862672][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2062.tmp-b7:4' failed: Read-only file system [ 1262.893626][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2062.tmp-b7:4' failed: Read-only file system [ 1263.011951][ T9909] loop8: detected capacity change from 0 to 40427 [ 1263.013823][ T9909] F2FS-fs: heap/no_heap options were deprecated [ 1263.150613][ T9909] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1263.230015][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2064.tmp-b7:8' failed: Read-only file system [ 1263.234369][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 1263.281549][ T9909] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 1263.281647][ T9909] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1263.281677][ T9909] F2FS-fs (loop8): Start checkpoint disabled! [ 1263.290177][ T9930] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1263.290201][ T9930] bond1: option arp_ip_target: invalid value (0) [ 1263.310668][ T9930] bond1 (unregistering): Released all slaves [ 1263.367576][ T9909] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 1263.370655][ T9909] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1263.441955][ T8073] kworker/u8:26: attempt to access beyond end of device [ 1263.441955][ T8073] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1263.442035][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.442063][ T8073] Tainted: [L]=SOFTLOCKUP [ 1263.442071][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1263.442084][ T8073] Workqueue: writeback wb_workfn (flush-7:8) [ 1263.442123][ T8073] Call Trace: [ 1263.442131][ T8073] [ 1263.442140][ T8073] dump_stack_lvl+0xe8/0x150 [ 1263.442171][ T8073] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1263.442200][ T8073] f2fs_write_end_bio+0xda7/0x11c0 [ 1263.442244][ T8073] __submit_merged_bio+0x258/0x6a0 [ 1263.442287][ T8073] ? rcu_is_watching+0x16/0xb0 [ 1263.442322][ T8073] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1263.442347][ T8073] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1263.442394][ T8073] f2fs_write_data_pages+0x2a13/0x36e0 [ 1263.442462][ T8073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1263.442505][ T8073] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 1263.442705][ T8073] ? __lock_acquire+0x747/0x2de0 [ 1263.442754][ T8073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1263.442779][ T8073] do_writepages+0x338/0x560 [ 1263.442799][ T8073] ? __lock_acquire+0x747/0x2de0 [ 1263.442824][ T8073] ? reacquire_held_locks+0x117/0x1a0 [ 1263.442850][ T8073] ? writeback_sb_inodes+0x450/0x1af0 [ 1263.442879][ T8073] __writeback_single_inode+0x136/0x1220 [ 1263.442908][ T8073] ? do_raw_spin_unlock+0xf5/0x200 [ 1263.442934][ T8073] writeback_sb_inodes+0x9de/0x1af0 [ 1263.442957][ T8073] ? __lock_acquire+0x747/0x2de0 [ 1263.443008][ T8073] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1263.443071][ T8073] ? rcu_is_watching+0x16/0xb0 [ 1263.443100][ T8073] ? queue_io+0x2d3/0x470 [ 1263.443127][ T8073] wb_writeback+0x41c/0xad0 [ 1263.443153][ T8073] ? queue_io+0x251/0x470 [ 1263.443182][ T8073] ? __pfx_wb_writeback+0x10/0x10 [ 1263.443203][ T8073] ? do_raw_spin_lock+0x12b/0x2f0 [ 1263.443241][ T8073] wb_workfn+0x431/0x10f0 [ 1263.443296][ T8073] ? __pfx_wb_workfn+0x10/0x10 [ 1263.443333][ T8073] ? trace_hrtimer_start+0x82/0x200 [ 1263.443363][ T8073] ? do_raw_spin_lock+0x12b/0x2f0 [ 1263.443394][ T8073] ? lock_acquire+0x115/0x350 [ 1263.443429][ T8073] ? rcu_is_watching+0x16/0xb0 [ 1263.443459][ T8073] ? process_scheduled_works+0x97a/0x1630 [ 1263.443488][ T8073] process_scheduled_works+0xc3d/0x1630 [ 1263.443548][ T8073] ? __pfx_process_scheduled_works+0x10/0x10 [ 1263.443584][ T8073] ? assign_work+0x3cf/0x5d0 [ 1263.443619][ T8073] worker_thread+0xa47/0xfb0 [ 1263.443663][ T8073] ? __kthread_parkme+0x71/0x1f0 [ 1263.443694][ T8073] kthread+0x38b/0x480 [ 1263.443717][ T8073] ? __pfx_worker_thread+0x10/0x10 [ 1263.443744][ T8073] ? __pfx_kthread+0x10/0x10 [ 1263.443769][ T8073] ret_from_fork+0x514/0xb70 [ 1263.443793][ T8073] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.443813][ T8073] ? __switch_to+0xc78/0x1410 [ 1263.443844][ T8073] ? __pfx_kthread+0x10/0x10 [ 1263.443867][ T8073] ret_from_fork_asm+0x1a/0x30 [ 1263.443909][ T8073] [ 1263.484161][ T8073] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1263.640749][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-diskseq/2064.tmp-b7:8' failed: Read-only file system [ 1263.658052][T31784] udevd[31784]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 1263.855432][ T9949] batman_adv: batadv0: Adding interface: netdevsim0 [ 1263.855453][ T9949] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.855485][ T9949] batman_adv: batadv0: Interface activated: netdevsim0 [ 1264.313919][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15097'. [ 1264.398003][ T9951] loop4: detected capacity change from 0 to 32768 [ 1264.425734][ T9951] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1264.503758][ T9951] XFS (loop4): Ending clean mount [ 1264.633422][ T9982] program syz.5.15104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1264.650061][ T5613] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1265.082649][ T8073] IPVS: starting estimator thread 0... [ 1265.208232][ T9998] IPVS: using max 32 ests per chain, 76800 per kthread [ 1265.227920][T10002] program syz.7.15112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1265.283449][T10006] loop5: detected capacity change from 0 to 22 [ 1265.299112][T10006] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1265.312999][T10006] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1265.319104][T10004] tipc: New replicast peer: 255.255.255.255 [ 1265.321323][T10004] tipc: Enabled bearer , priority 20 [ 1266.623841][T10074] batman_adv: batadv0: Adding interface: vlan2 [ 1266.623861][T10074] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.623890][T10074] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1266.664200][ T2252] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1266.839480][ T2252] usb 5-1: Using ep0 maxpacket: 32 [ 1266.840682][ T2252] usb 5-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1266.841943][ T2252] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1266.841969][ T2252] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1266.841989][ T2252] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.842008][ T2252] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1266.842028][ T2252] usb 5-1: config 1 has no interface number 0 [ 1266.842069][ T2252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.844811][ T2252] usb 5-1: Device is not authorized for usage [ 1266.851566][T10083] loop6: detected capacity change from 0 to 4096 [ 1266.855978][T10083] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1266.966496][T10083] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1266.997203][T29160] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1267.167290][T29160] usb 9-1: New USB device found: idVendor=046d, idProduct=c50c, bcdDevice=0.00 [ 1267.171010][T29160] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.171044][T29160] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.171071][T29160] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1267.171105][T29160] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.172129][T10091] loop6: detected capacity change from 0 to 256 [ 1267.238637][T29160] usb 9-1: config 0 descriptor?? [ 1267.659680][T29160] logitech 0003:046D:C50C.003B: item fetching failed at offset 9/24 [ 1267.660122][T29160] logitech 0003:046D:C50C.003B: parse failed [ 1267.660179][T29160] logitech 0003:046D:C50C.003B: probe with driver logitech failed with error -22 [ 1267.870428][ T5799] usb 9-1: USB disconnect, device number 3 [ 1267.883142][T10111] program syz.6.15163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1268.010654][T10115] loop6: detected capacity change from 0 to 512 [ 1268.057377][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2074.tmp-b7:6' failed: Read-only file system [ 1268.086886][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2074.tmp-b7:6' failed: Read-only file system [ 1268.094688][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2074.tmp-b7:6' failed: Read-only file system [ 1268.118680][T10117] loop6: detected capacity change from 0 to 2048 [ 1268.134547][T10118] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1268.159162][T10118] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1268.159191][T10118] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1268.167925][T10118] Remounting filesystem read-only [ 1268.211781][ T8741] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1268.219795][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2074.tmp-b7:6' failed: Read-only file system [ 1268.220805][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:6' failed: Read-only file system [ 1268.252214][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2076.tmp-b7:6' failed: Read-only file system [ 1268.267177][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2076.tmp-b7:6' failed: Read-only file system [ 1268.279139][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2076.tmp-b7:6' failed: Read-only file system [ 1268.655038][T10124] loop6: detected capacity change from 0 to 32768 [ 1268.721766][T10124] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1268.765342][T10124] XFS (loop6): Ending clean mount [ 1268.795820][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2078.tmp-b7:6' failed: Read-only file system [ 1268.802266][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:6' failed: Read-only file system [ 1268.950284][ T8741] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1268.968395][ T33] audit: type=1400 audit(35738180.839:1261): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10143 comm="syz.8.15175" name="unknown" offset=16 [ 1269.319260][T10153] loop6: detected capacity change from 0 to 256 [ 1269.437182][ T4415] usb 5-1: USB disconnect, device number 89 [ 1269.553426][T10156] loop4: detected capacity change from 0 to 1024 [ 1269.621505][T10156] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1269.621600][T10156] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1269.621621][T10156] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.15181: Failed to acquire dquot type 0 [ 1269.621645][T10156] loop4: lost filesystem error report for type 5 error -5 [ 1269.625921][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1269.625945][ C1] EXT4-fs (loop4): initial error at time 35738181: ext4_acquire_dquot:7069 [ 1269.625969][ C1] EXT4-fs (loop4): last error at time 35738181: ext4_acquire_dquot:7069 [ 1269.693946][T10156] EXT4-fs (loop4): 1 truncate cleaned up [ 1269.695613][T10156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.728963][T10156] EXT4-fs (loop4): shut down requested (2) [ 1269.763971][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.933056][T10166] loop5: detected capacity change from 0 to 512 [ 1269.944505][T10166] EXT4-fs: Ignoring removed mblk_io_submit option [ 1269.973324][T10166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.065105][T10170] bond0: entered promiscuous mode [ 1270.077550][T10170] batadv_slave_0: entered promiscuous mode [ 1270.224362][T25432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.350066][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15188'. [ 1270.481785][T10178] loop6: detected capacity change from 0 to 256 [ 1270.482745][T10178] exfat: Deprecated parameter 'utf8' [ 1270.504891][T10178] exfat: Deprecated parameter 'namecase' [ 1270.504959][T10178] exfat: Deprecated parameter 'namecase' [ 1270.554011][T10178] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1270.587493][T10172] loop7: detected capacity change from 0 to 40427 [ 1270.644025][T10172] F2FS-fs (loop7): invalid crc value [ 1271.032572][T10172] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1271.079383][T10191] loop5: detected capacity change from 0 to 4096 [ 1271.084761][T10191] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1271.108325][T10191] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1271.124425][T10191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.142885][T10172] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 1271.142914][T10172] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1271.142940][T10172] F2FS-fs (loop7): Start checkpoint disabled! [ 1271.188541][ T33] audit: type=1800 audit(35738183.069:1262): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15194" name="file1" dev="loop5" ino=15 res=0 errno=-22 [ 1271.415330][T25432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.611914][T10172] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 1271.629894][T10172] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1271.809680][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15198'. [ 1271.868979][ T8072] kworker/u8:25: attempt to access beyond end of device [ 1271.868979][ T8072] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1271.869179][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.869209][ T8072] Tainted: [L]=SOFTLOCKUP [ 1271.869217][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1271.869230][ T8072] Workqueue: writeback wb_workfn (flush-7:7) [ 1271.869271][ T8072] Call Trace: [ 1271.869280][ T8072] [ 1271.869289][ T8072] dump_stack_lvl+0xe8/0x150 [ 1271.869321][ T8072] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1271.869352][ T8072] f2fs_write_end_bio+0xda7/0x11c0 [ 1271.869397][ T8072] __submit_merged_bio+0x258/0x6a0 [ 1271.869420][ T8072] ? rcu_is_watching+0x16/0xb0 [ 1271.869455][ T8072] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1271.869482][ T8072] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1271.869531][ T8072] f2fs_write_data_pages+0x2a13/0x36e0 [ 1271.869599][ T8072] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1271.869644][ T8072] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 1271.869735][ T8072] ? __lock_acquire+0x747/0x2de0 [ 1271.869786][ T8072] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1271.869815][ T8072] do_writepages+0x338/0x560 [ 1271.869840][ T8072] ? __lock_acquire+0x747/0x2de0 [ 1271.869867][ T8072] ? reacquire_held_locks+0x117/0x1a0 [ 1271.869894][ T8072] ? writeback_sb_inodes+0x450/0x1af0 [ 1271.869925][ T8072] __writeback_single_inode+0x136/0x1220 [ 1271.869953][ T8072] ? do_raw_spin_unlock+0xf5/0x200 [ 1271.869979][ T8072] writeback_sb_inodes+0x9de/0x1af0 [ 1271.870002][ T8072] ? __lock_acquire+0x747/0x2de0 [ 1271.870051][ T8072] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1271.870127][ T8072] ? rcu_is_watching+0x16/0xb0 [ 1271.870159][ T8072] ? queue_io+0x2d3/0x470 [ 1271.870187][ T8072] wb_writeback+0x41c/0xad0 [ 1271.870214][ T8072] ? queue_io+0x251/0x470 [ 1271.870244][ T8072] ? __pfx_wb_writeback+0x10/0x10 [ 1271.870266][ T8072] ? do_raw_spin_lock+0x12b/0x2f0 [ 1271.870304][ T8072] wb_workfn+0x431/0x10f0 [ 1271.870355][ T8072] ? __pfx_wb_workfn+0x10/0x10 [ 1271.870390][ T8072] ? trace_hrtimer_start+0x82/0x200 [ 1271.870421][ T8072] ? do_raw_spin_lock+0x12b/0x2f0 [ 1271.870453][ T8072] ? lock_acquire+0x115/0x350 [ 1271.870487][ T8072] ? rcu_is_watching+0x16/0xb0 [ 1271.870518][ T8072] ? process_scheduled_works+0x97a/0x1630 [ 1271.870549][ T8072] process_scheduled_works+0xc3d/0x1630 [ 1271.870612][ T8072] ? __pfx_process_scheduled_works+0x10/0x10 [ 1271.870648][ T8072] ? assign_work+0x3cf/0x5d0 [ 1271.870684][ T8072] worker_thread+0xa47/0xfb0 [ 1271.870741][ T8072] kthread+0x38b/0x480 [ 1271.870764][ T8072] ? __pfx_worker_thread+0x10/0x10 [ 1271.870791][ T8072] ? __pfx_kthread+0x10/0x10 [ 1271.870815][ T8072] ret_from_fork+0x514/0xb70 [ 1271.870840][ T8072] ? __pfx_ret_from_fork+0x10/0x10 [ 1271.870861][ T8072] ? __switch_to+0xc78/0x1410 [ 1271.870893][ T8072] ? __pfx_kthread+0x10/0x10 [ 1271.870916][ T8072] ret_from_fork_asm+0x1a/0x30 [ 1271.870964][ T8072] [ 1271.877845][ T8072] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1272.159273][T10196] loop6: detected capacity change from 0 to 32768 [ 1272.215353][T10196] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1272.228722][T10209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.15200: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 1272.228762][T10209] loop4: lost filesystem error report for type 5 error -117 [ 1272.233851][T10209] EXT4-fs (loop4): 1 orphan inode deleted [ 1272.260289][T10209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1272.402738][T10196] XFS (loop6): Ending clean mount [ 1272.493965][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.809349][ T8741] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1273.109517][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2091.tmp-b7:6' failed: Read-only file system [ 1273.232950][T10229] set_capacity_and_notify: 1 callbacks suppressed [ 1273.232970][T10229] loop5: detected capacity change from 0 to 512 [ 1273.361435][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2096.tmp-b7:5' failed: Read-only file system [ 1273.376337][T10229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.380983][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1273.541053][T10238] xt_hashlimit: size too large, truncated to 1048576 [ 1273.605261][T10241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1273.921966][T25432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.029191][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2096.tmp-b7:5' failed: Read-only file system [ 1274.067873][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2096.tmp-b7:5' failed: Read-only file system [ 1274.140290][T10250] loop7: detected capacity change from 0 to 128 [ 1274.153969][T10250] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1274.218470][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2098.tmp-b7:7' failed: Read-only file system [ 1274.277466][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2098.tmp-b7:7' failed: Read-only file system [ 1274.343891][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2098.tmp-b7:7' failed: Read-only file system [ 1274.384227][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2098.tmp-b7:7' failed: Read-only file system [ 1274.417768][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15215'. [ 1274.629984][T10266] netlink: 144 bytes leftover after parsing attributes in process `syz.7.15219'. [ 1274.690567][T10270] loop6: detected capacity change from 0 to 512 [ 1274.699022][T10270] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1274.707915][T10270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1274.708045][T10270] System zones: 1-12 [ 1274.708295][T10270] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.15221: bad orphan inode 131072 [ 1274.708320][T10270] loop6: lost filesystem error report for type 5 error -117 [ 1274.720380][T10270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.808362][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2100.tmp-b7:6' failed: Read-only file system [ 1274.815573][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1274.854974][ T8741] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.935365][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2100.tmp-b7:6' failed: Read-only file system [ 1274.944947][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1275.004010][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2100.tmp-b7:6' failed: Read-only file system [ 1275.044941][T10275] loop4: detected capacity change from 0 to 1024 [ 1275.052020][T10275] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 1275.057021][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2100.tmp-b7:6' failed: Read-only file system [ 1275.069751][T10280] loop6: detected capacity change from 0 to 16 [ 1275.084571][T10280] erofs (device loop6): mounted with root inode @ nid 36. [ 1275.184778][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2102.tmp-b7:4' failed: Read-only file system [ 1275.196723][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1275.231312][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2103.tmp-b7:6' failed: Read-only file system [ 1275.243076][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-uuid/fcd48663-7311-483d-ab26-e63db9076faf.tmp-b7:6' failed: Read-only file system [ 1275.313821][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2102.tmp-b7:4' failed: Read-only file system [ 1275.361052][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2103.tmp-b7:6' failed: Read-only file system [ 1275.372000][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-uuid/fcd48663-7311-483d-ab26-e63db9076faf.tmp-b7:6' failed: Read-only file system [ 1275.374519][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2102.tmp-b7:4' failed: Read-only file system [ 1275.441971][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2102.tmp-b7:4' failed: Read-only file system [ 1275.452394][T32367] udevd[32367]: symlink '../../loop6' '/dev/disk/by-diskseq/2103.tmp-b7:6' failed: Read-only file system [ 1275.491290][T31784] udevd[31784]: symlink '../../loop6' '/dev/disk/by-diskseq/2103.tmp-b7:6' failed: Read-only file system [ 1275.552086][T10289] loop7: detected capacity change from 0 to 512 [ 1275.553019][T10289] EXT4-fs: Ignoring removed nobh option [ 1275.637671][T10289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.653129][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2106.tmp-b7:7' failed: Read-only file system [ 1275.656495][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1275.734329][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2106.tmp-b7:7' failed: Read-only file system [ 1275.740031][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1275.812724][ T7304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.916459][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2106.tmp-b7:7' failed: Read-only file system [ 1275.960599][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2106.tmp-b7:7' failed: Read-only file system [ 1276.037172][T10302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1277.027716][T10312] loop7: detected capacity change from 0 to 40427 [ 1277.028751][T10312] F2FS-fs: heap/no_heap options were deprecated [ 1277.251625][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2108.tmp-b7:7' failed: Read-only file system [ 1277.256519][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 1277.308646][T10312] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1277.481884][T10333] loop4: detected capacity change from 0 to 1024 [ 1277.505627][T10312] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 1277.505656][T10312] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1277.505681][T10312] F2FS-fs (loop7): Start checkpoint disabled! [ 1277.532209][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-diskseq/2108.tmp-b7:7' failed: Read-only file system [ 1277.541613][T31784] udevd[31784]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 1277.582763][T10333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.610113][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2109.tmp-b7:4' failed: Read-only file system [ 1277.611496][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1277.614547][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system [ 1277.682624][T10312] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 1277.700330][T10312] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1277.766831][ T4426] kworker/u8:4: attempt to access beyond end of device [ 1277.766831][ T4426] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1277.766908][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.766936][ T4426] Tainted: [L]=SOFTLOCKUP [ 1277.766944][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1277.766956][ T4426] Workqueue: writeback wb_workfn (flush-7:7) [ 1277.766996][ T4426] Call Trace: [ 1277.767005][ T4426] [ 1277.767014][ T4426] dump_stack_lvl+0xe8/0x150 [ 1277.767044][ T4426] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1277.767074][ T4426] f2fs_write_end_bio+0xda7/0x11c0 [ 1277.767121][ T4426] __submit_merged_bio+0x258/0x6a0 [ 1277.767143][ T4426] ? rcu_is_watching+0x16/0xb0 [ 1277.767178][ T4426] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1277.767205][ T4426] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1277.767253][ T4426] f2fs_write_data_pages+0x2a13/0x36e0 [ 1277.767315][ T4426] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.767355][ T4426] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 1277.767464][ T4426] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1277.767492][ T4426] do_writepages+0x338/0x560 [ 1277.767523][ T4426] ? reacquire_held_locks+0x117/0x1a0 [ 1277.767552][ T4426] ? writeback_sb_inodes+0x450/0x1af0 [ 1277.767581][ T4426] __writeback_single_inode+0x136/0x1220 [ 1277.767608][ T4426] ? do_raw_spin_unlock+0xf5/0x200 [ 1277.767633][ T4426] writeback_sb_inodes+0x9de/0x1af0 [ 1277.767655][ T4426] ? __lock_acquire+0x747/0x2de0 [ 1277.767705][ T4426] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1277.767770][ T4426] ? rcu_is_watching+0x16/0xb0 [ 1277.767800][ T4426] ? queue_io+0x2d3/0x470 [ 1277.767833][ T4426] wb_writeback+0x41c/0xad0 [ 1277.767859][ T4426] ? queue_io+0x251/0x470 [ 1277.767888][ T4426] ? __pfx_wb_writeback+0x10/0x10 [ 1277.767924][ T4426] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.767961][ T4426] wb_workfn+0x431/0x10f0 [ 1277.767993][ T4426] ? __lock_acquire+0x747/0x2de0 [ 1277.768031][ T4426] ? __pfx_wb_workfn+0x10/0x10 [ 1277.768069][ T4426] ? do_raw_spin_lock+0x12b/0x2f0 [ 1277.768102][ T4426] ? lock_acquire+0x115/0x350 [ 1277.768136][ T4426] ? rcu_is_watching+0x16/0xb0 [ 1277.768166][ T4426] ? process_scheduled_works+0x97a/0x1630 [ 1277.768195][ T4426] process_scheduled_works+0xc3d/0x1630 [ 1277.768259][ T4426] ? __pfx_process_scheduled_works+0x10/0x10 [ 1277.768296][ T4426] ? assign_work+0x3cf/0x5d0 [ 1277.768327][ T4426] worker_thread+0xa47/0xfb0 [ 1277.768372][ T4426] ? __kthread_parkme+0x71/0x1f0 [ 1277.768403][ T4426] kthread+0x38b/0x480 [ 1277.768426][ T4426] ? __pfx_worker_thread+0x10/0x10 [ 1277.768452][ T4426] ? __pfx_kthread+0x10/0x10 [ 1277.768477][ T4426] ret_from_fork+0x514/0xb70 [ 1277.768501][ T4426] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.768520][ T4426] ? __switch_to+0xc78/0x1410 [ 1277.768550][ T4426] ? __pfx_kthread+0x10/0x10 [ 1277.768575][ T4426] ret_from_fork_asm+0x1a/0x30 [ 1277.768621][ T4426] [ 1277.775646][ T4426] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1277.781342][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-diskseq/2109.tmp-b7:4' failed: Read-only file system [ 1277.793080][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1277.802432][T31784] udevd[31784]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:4' failed: Read-only file system [ 1278.125514][T10344] loop5: detected capacity change from 0 to 164 [ 1278.263887][T32367] udevd[32367]: symlink '../../loop7' '/dev/disk/by-diskseq/2108.tmp-b7:7' failed: Read-only file system [ 1278.304042][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1278.318678][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2110.tmp-b7:5' failed: Read-only file system [ 1278.321021][T32367] udevd[32367]: symlink '../../loop7' '/dev/disk/by-diskseq/2108.tmp-b7:7' failed: Read-only file system [ 1278.326474][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system [ 1278.344673][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system [ 1278.408676][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2109.tmp-b7:4' failed: Read-only file system [ 1278.450779][T32367] udevd[32367]: symlink '../../loop4' '/dev/disk/by-diskseq/2109.tmp-b7:4' failed: Read-only file system [ 1278.470699][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2110.tmp-b7:5' failed: Read-only file system [ 1278.488459][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system [ 1278.494730][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system [ 1278.537233][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15249'. [ 1278.589524][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2110.tmp-b7:5' failed: Read-only file system [ 1278.631682][T31784] udevd[31784]: symlink '../../loop5' '/dev/disk/by-diskseq/2110.tmp-b7:5' failed: Read-only file system [ 1278.681586][T10355] kAFS: bad VL server IP address [ 1278.871575][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15255'. [ 1278.871605][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15255'. [ 1279.423152][T10377] sd 0:0:1:0: PR command failed: 1026 [ 1279.423261][T10377] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1279.423332][T10377] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1279.830447][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15266'. [ 1279.870127][T10386] ipvlan2: entered allmulticast mode [ 1279.870151][T10386] syz_tun: entered allmulticast mode [ 1280.658770][T10393] ipvlan0: entered promiscuous mode [ 1280.659548][T10393] ipvlan0: left promiscuous mode [ 1291.497811][T21981] Bluetooth: hci5: command 0x0406 tx timeout [ 1299.654723][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.654784][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.740427][T21981] Bluetooth: hci0: command 0x0401 tx timeout [ 1361.090930][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.090989][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1388.765740][T21981] Bluetooth: hci2: command 0x0405 tx timeout [ 1422.537201][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.537257][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1437.246352][ T34] INFO: tas ** replaying previous printk message ** [ 1437.246352][ T34] INFO: task jbd2/sda1-8:4936 blocked in I/O wait for more than 143 seconds. [ 1437.246380][ T34] Tainted: G L syzkaller #0 [ 1437.246391][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.246401][ T34] task:jbd2/sda1-8 state:D stack:25288 pid:4936 tgid:4936 ppid:2 task_flags:0x240040 flags:0x00080000 [ 1437.246467][ T34] Call Trace: [ 1437.246475][ T34] [ 1437.246489][ T34] __schedule+0x1b47/0x5b40 [ 1437.246541][ T34] ? percpu_ref_put_many+0x21/0x240 [ 1437.246664][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 1437.246699][ T34] ? __pfx___schedule+0x10/0x10 [ 1437.246735][ T34] ? schedule+0x90/0x2b0 [ 1437.246763][ T34] schedule+0x164/0x2b0 [ 1437.246790][ T34] io_schedule+0x7f/0xd0 [ 1437.246817][ T34] bit_wait_io+0x13/0x110 [ 1437.246846][ T34] __wait_on_bit+0xac/0x300 [ 1437.246871][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.246901][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1437.246928][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.246954][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1437.246982][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1437.247018][ T34] ? __wait_on_buffer+0xe/0x80 [ 1437.247053][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 1437.247158][ T34] ? trace_hrtimer_start+0x82/0x200 [ 1437.247220][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1437.247260][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1437.247305][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1437.247333][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1437.247357][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 1437.247387][ T34] kjournald2+0x3bc/0x740 [ 1437.247425][ T34] ? __pfx_kjournald2+0x10/0x10 [ 1437.247446][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1437.247477][ T34] ? __kthread_parkme+0x71/0x1f0 [ 1437.247508][ T34] ? __kthread_parkme+0x199/0x1f0 [ 1437.247533][ T34] kthread+0x38b/0x480 [ 1437.247557][ T34] ? __pfx_kjournald2+0x10/0x10 [ 1437.247579][ T34] ? __pfx_kthread+0x10/0x10 [ 1437.247603][ T34] ret_from_fork+0x514/0xb70 [ 1437.247627][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1437.247645][ T34] ? __switch_to+0xc78/0x1410 [ 1437.247676][ T34] ? __pfx_kthread+0x10/0x10 [ 1437.247701][ T34] ret_from_fork_asm+0x1a/0x30 [ 1437.247748][ T34] [ 1437.247794][ T34] INFO: task syz-executor:5596 blocked in I/O wait for more than 143 seconds. [ 1437.247813][ T34] Tainted: G L syzkaller #0 [ 1437.247824][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.247834][ T34] task:syz-executor state:D stack:21736 pid:5596 tgid:5596 ppid:5595 task_flags:0x440100 flags:0x00080000 [ 1437.247890][ T34] Call Trace: [ 1437.247897][ T34] [ 1437.247910][ T34] __schedule+0x1b47/0x5b40 [ 1437.247963][ T34] ? __pfx___schedule+0x10/0x10 [ 1437.247996][ T34] ? schedule+0x90/0x2b0 [ 1437.248024][ T34] schedule+0x164/0x2b0 [ 1437.248051][ T34] io_schedule+0x7f/0xd0 [ 1437.248078][ T34] bit_wait_io+0x13/0x110 [ 1437.248106][ T34] __wait_on_bit+0xac/0x300 [ 1437.248132][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.248162][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1437.248192][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.248217][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1437.248248][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1437.248287][ T34] do_get_write_access+0x658/0x10c0 [ 1437.248332][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1437.248364][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1437.248400][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1437.248427][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1437.248450][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 1437.248485][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1437.248529][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1437.248563][ T34] ext4_dirty_inode+0xd0/0x110 [ 1437.248590][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1437.248616][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1437.248643][ T34] file_update_time_flags+0x399/0x440 [ 1437.248676][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 1437.248720][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1437.248745][ T34] ? __lock_acquire+0x747/0x2de0 [ 1437.248779][ T34] do_page_mkwrite+0x147/0x310 [ 1437.248824][ T34] do_wp_page+0x1a85/0x4b60 [ 1437.248872][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 1437.248899][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 1437.248922][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1437.248953][ T34] handle_mm_fault+0x15d7/0x3750 [ 1437.248984][ T34] ? handle_mm_fault+0xf1/0x3750 [ 1437.249014][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 1437.249032][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 1437.249053][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 1437.249103][ T34] do_user_addr_fault+0xb35/0x1480 [ 1437.249138][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 1437.249162][ T34] exc_page_fault+0x6a/0xc0 [ 1437.249190][ T34] asm_exc_page_fault+0x26/0x30 [ 1437.249211][ T34] RIP: 0033:0x7f964927c6e2 [ 1437.249229][ T34] RSP: 002b:00007ffd1eb03d60 EFLAGS: 00010202 [ 1437.249247][ T34] RAX: 00007f964724c000 RBX: 000055556141c770 RCX: 0000000000000003 [ 1437.249262][ T34] RDX: 000000000000055f RSI: 0000555561415bd8 RDI: 0000000000000008 [ 1437.249277][ T34] RBP: 00007ffd1eb04260 R08: 0000555561415d08 R09: 00000000000000a0 [ 1437.249291][ T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd1eb040a0 [ 1437.249305][ T34] R13: 00007ffd1eb03e90 R14: 585858582e7a7973 R15: 00007ffd1eb03de0 [ 1437.249338][ T34] [ 1437.249419][ T34] INFO: task syz.4.15271:10394 blocked in I/O wait for more than 143 seconds. [ 1437.249438][ T34] Tainted: G L syzkaller #0 [ 1437.249449][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.249458][ T34] task:syz.4.15271 state:D stack:26936 pid:10394 tgid:10394 ppid:5613 task_flags:0x440040 flags:0x00080002 [ 1437.249528][ T34] Call Trace: [ 1437.249535][ T34] [ 1437.249548][ T34] __schedule+0x1b47/0x5b40 [ 1437.249597][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 1437.249621][ T34] ? __pfx___schedule+0x10/0x10 [ 1437.249656][ T34] ? schedule+0x90/0x2b0 [ 1437.249683][ T34] schedule+0x164/0x2b0 [ 1437.249711][ T34] io_schedule+0x7f/0xd0 [ 1437.249737][ T34] bit_wait_io+0x13/0x110 [ 1437.249765][ T34] __wait_on_bit+0xac/0x300 [ 1437.249792][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.249823][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1437.249852][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.249878][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1437.249908][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1437.249948][ T34] do_get_write_access+0x658/0x10c0 [ 1437.249992][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1437.250024][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1437.250058][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1437.250095][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1437.250131][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1437.250165][ T34] ext4_dirty_inode+0xd0/0x110 [ 1437.250192][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1437.250218][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1437.250238][ T34] ? mnt_get_write_access+0x216/0x280 [ 1437.250269][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 1437.250294][ T34] touch_atime+0x568/0x670 [ 1437.250320][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 1437.250349][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 1437.250379][ T34] mmap_region+0xf0b/0x2c60 [ 1437.250414][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 1437.250450][ T34] ? lock_acquire+0x115/0x350 [ 1437.250477][ T34] ? __page_table_check_zero+0x6c/0x430 [ 1437.250515][ T34] ? __pfx_mmap_region+0x10/0x10 [ 1437.250544][ T34] ? __page_table_check_zero+0x6c/0x430 [ 1437.250575][ T34] ? __page_table_check_zero+0x6c/0x430 [ 1437.250603][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 1437.250629][ T34] ? __page_table_check_zero+0x6c/0x430 [ 1437.250683][ T34] ? lock_acquire+0x115/0x350 [ 1437.250777][ T34] ? mt_find+0x186/0x630 [ 1437.250810][ T34] ? mt_find+0x5ff/0x630 [ 1437.250840][ T34] ? mt_find+0x186/0x630 [ 1437.250869][ T34] ? __pfx_mt_find+0x10/0x10 [ 1437.250904][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1437.250932][ T34] ? security_mmap_addr+0x71/0x240 [ 1437.251032][ T34] ? shmem_mapping+0xd/0x50 [ 1437.251054][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 1437.251080][ T34] do_mmap+0xe0a/0x1300 [ 1437.251120][ T34] ? __pfx_do_mmap+0x10/0x10 [ 1437.251161][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 1437.251185][ T34] ? down_write_killable+0x179/0x230 [ 1437.251218][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 1437.251247][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 1437.251311][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 1437.251338][ T34] ? lock_acquire+0x115/0x350 [ 1437.251366][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1437.251394][ T34] ? __fget_files+0x2a/0x420 [ 1437.251423][ T34] ? __fget_files+0x3a2/0x420 [ 1437.251446][ T34] ? __fget_files+0x2a/0x420 [ 1437.251474][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 1437.251509][ T34] do_syscall_64+0x166/0x520 [ 1437.251536][ T34] ? trace_irq_disable+0x3b/0x140 [ 1437.251561][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.251582][ T34] ? clear_bhb_loop+0x70/0xc0 [ 1437.251608][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.251628][ T34] RIP: 0033:0x7f043219dec2 [ 1437.251645][ T34] RSP: 002b:00007ffe9f0303b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1437.251666][ T34] RAX: ffffffffffffffda RBX: 0000001b33264000 RCX: 00007f043219dec2 [ 1437.251682][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b33264000 [ 1437.251695][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 1437.251707][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000c22 [ 1437.251720][ T34] R13: 00000000000927c0 R14: 0000000000138bf7 R15: 00007ffe9f030690 [ 1437.251753][ T34] [ 1437.251762][ T34] INFO: task syz.5.15270:10395 blocked in I/O wait for more than 143 seconds. [ 1437.251781][ T34] Tainted: G L syzkaller #0 [ 1437.251792][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.251802][ T34] task:syz.5.15270 state:D stack:26936 pid:10395 tgid:10395 ppid:25432 task_flags:0x440040 flags:0x00080002 [ 1437.251864][ T34] Call Trace: [ 1437.251871][ T34] [ 1437.251884][ T34] __schedule+0x1b47/0x5b40 [ 1437.251931][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 1437.251954][ T34] ? __pfx___schedule+0x10/0x10 [ 1437.251989][ T34] ? schedule+0x90/0x2b0 [ 1437.252016][ T34] schedule+0x164/0x2b0 [ 1437.252042][ T34] io_schedule+0x7f/0xd0 [ 1437.252069][ T34] bit_wait_io+0x13/0x110 [ 1437.252098][ T34] __wait_on_bit+0xac/0x300 [ 1437.252124][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.252154][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1437.252182][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1437.252209][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1437.252238][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1437.252278][ T34] do_get_write_access+0x658/0x10c0 [ 1437.252323][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1437.252354][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1437.252388][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1437.252426][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1437.252461][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1437.252500][ T34] ext4_dirty_inode+0xd0/0x110 [ 1437.252528][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1437.252554][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1437.252573][ T34] ? mnt_get_write_access+0x216/0x280 [ 1437.252603][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 1437.252628][ T34] touch_atime+0x568/0x670 [ 1437.252653][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 1437.252683][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 1437.252713][ T34] mmap_region+0xf0b/0x2c60 [ 1437.252747][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 1437.252792][ T34] ? __pfx_mmap_region+0x10/0x10 [ 1437.252821][ T34] ? lock_acquire+0x115/0x350 [ 1437.252848][ T34] ? __lock_acquire+0x747/0x2de0 [ 1437.252890][ T34] ? perf_cgroup_switch+0xe6/0x920 [ 1437.252925][ T34] ? lock_acquire+0x115/0x350 [ 1437.252961][ T34] ? finish_task_switch+0x40e/0xc60 [ 1437.253046][ T34] ? mt_find+0x186/0x630 [ 1437.253078][ T34] ? mt_find+0x5ff/0x630 [ 1437.253109][ T34] ? mt_find+0x186/0x630 [ 1437.253136][ T34] ? __pfx_mt_find+0x10/0x10 [ 1437.253170][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1437.253197][ T34] ? security_mmap_addr+0x71/0x240 [ 1437.253228][ T34] ? shmem_mapping+0xd/0x50 [ 1437.253250][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 1437.253274][ T34] do_mmap+0xe0a/0x1300 [ 1437.253315][ T34] ? __pfx_do_mmap+0x10/0x10 [ 1437.253354][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 1437.253377][ T34] ? down_write_killable+0x179/0x230 [ 1437.253409][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 1437.253439][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 1437.253473][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 1437.253506][ T34] ? lock_acquire+0x115/0x350 [ 1437.253535][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1437.253563][ T34] ? __fget_files+0x2a/0x420 [ 1437.253591][ T34] ? __fget_files+0x3a2/0x420 [ 1437.253614][ T34] ? __fget_files+0x2a/0x420 [ 1437.253642][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 1437.253669][ T34] do_syscall_64+0x166/0x520 [ 1437.253695][ T34] ? trace_irq_disable+0x3b/0x140 [ 1437.253719][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.253739][ T34] ? clear_bhb_loop+0x70/0xc0 [ 1437.253765][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.253785][ T34] RIP: 0033:0x7f83f4d9dec2 [ 1437.253801][ T34] RSP: 002b:00007fff2de8d628 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1437.253821][ T34] RAX: ffffffffffffffda RBX: 0000001b31c64000 RCX: 00007f83f4d9dec2 [ 1437.253836][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31c64000 [ 1437.253849][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 1437.253863][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000519 [ 1437.253876][ T34] R13: 00000000000927c0 R14: 0000000000138a28 R15: 00007fff2de8d900 [ 1437.253908][ T34] [ 1437.253925][ T34] [ 1437.253925][ T34] Showing all locks held in the system: [ 1437.253936][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 1437.253951][ T34] #0: ffffffff8ed5c520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1437.254043][ T34] locks held by getty/5366: 2, on CPU#0: [ 1437.254057][ T34] #0: ffff88802882c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1437.254115][ T34] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1437.254167][ T34] locks held by syz-executor/5596: 3, on CPU#1: [ 1437.254181][ T34] #0: ffff8880753c3308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1437.254228][ T34] #1: ffff888033bf6558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 1437.254282][ T34] #2: ffff888033bf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1437.254342][ T34] locks held by kworker/u8:4/4426: 4, on CPU#1: [ 1437.254356][ T34] #0: ffff888020e85148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.254412][ T34] #1: ffffc9000d72fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.254469][ T34] #2: ffff888033bf60e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 1437.254533][ T34] #3: ffff888033bf4c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 1437.254597][ T34] locks held by syz.4.15271/10394: 3, on CPU#1: [ 1437.254611][ T34] #0: ffff88801b091bc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1437.254663][ T34] #1: ffff888033bf6460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 1437.254716][ T34] #2: ffff888033bf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1437.254768][ T34] locks held by syz.5.15270/10395: 3, on CPU#1: [ 1437.254783][ T34] #0: ffff888028e6b440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1437.254833][ T34] #1: ffff888033bf6460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 1437.254888][ T34] #2: ffff888033bf2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1437.254940][ T34] [ 1437.254946][ T34] ============================================= [ 1437.254946][ T34] [ 1437.254956][ T34] NMI backtrace for cpu 0 [ 1437.254973][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.254998][ T34] Tainted: [L]=SOFTLOCKUP [ 1437.255006][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1437.255017][ T34] Call Trace: [ 1437.255025][ T34] [ 1437.255034][ T34] dump_stack_lvl+0xe8/0x150 [ 1437.255062][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 1437.255122][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1437.255155][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1437.255204][ T34] sys_info+0x135/0x170 [ 1437.255223][ T34] watchdog+0x1058/0x10d0 [ 1437.255255][ T34] ? watchdog+0x209/0x10d0 [ 1437.255287][ T34] kthread+0x38b/0x480 [ 1437.255312][ T34] ? __pfx_watchdog+0x10/0x10 [ 1437.255334][ T34] ? __pfx_kthread+0x10/0x10 [ 1437.255358][ T34] ret_from_fork+0x514/0xb70 [ 1437.255380][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1437.255401][ T34] ? __switch_to+0xc78/0x1410 [ 1437.255427][ T34] ? __pfx_kthread+0x10/0x10 [ 1437.255450][ T34] ret_from_fork_asm+0x1a/0x30 [ 1437.255503][ T34] [ 1437.255613][ T34] Sending NMI from CPU 0 to CPUs 1: [ 1437.255649][ C1] NMI backtrace for cpu 1 [ 1437.255666][ C1] CPU: 1 UID: 0 PID: 7495 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.255693][ C1] Tainted: [L]=SOFTLOCKUP [ 1437.255700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1437.255712][ C1] RIP: 0010:lock_release+0xa1/0x3c0 [ 1437.255738][ C1] Code: 41 83 bf a4 0b 00 00 00 0f 85 01 02 00 00 49 81 3e a0 f9 58 94 0f 84 f4 01 00 00 9c 5b fa 48 c7 c7 04 77 43 8e e8 3f 37 48 0a <65> ff 05 c0 3b f3 11 c7 44 24 24 01 00 00 00 83 3d 09 3f d6 0e 00 [ 1437.255765][ C1] RSP: 0018:ffffc90000a388c8 EFLAGS: 00000006 [ 1437.255782][ C1] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 0000000000000100 [ 1437.255795][ C1] RDX: 0000000000000100 RSI: ffffffff8e437704 RDI: ffffffff8c6de080 [ 1437.255809][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000000 [ 1437.255821][ C1] R10: ffffc90000a38a18 R11: ffffffff81b3a2e0 R12: 0000000000000d26 [ 1437.255835][ C1] R13: ffffffff81d9a2d6 R14: ffffffff8ed5c520 R15: ffff88801eaf1f40 [ 1437.255850][ C1] FS: 0000555564891500(0000) GS:ffff888124dac000(0000) knlGS:0000000000000000 [ 1437.255867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1437.255881][ C1] CR2: 00007ffe860c2f52 CR3: 0000000059658000 CR4: 00000000003526f0 [ 1437.255898][ C1] Call Trace: [ 1437.255905][ C1] [ 1437.255917][ C1] is_bpf_text_address+0x28d/0x2b0 [ 1437.255936][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1437.255956][ C1] kernel_text_address+0xa5/0xe0 [ 1437.255980][ C1] __kernel_text_address+0xd/0x30 [ 1437.256011][ C1] unwind_get_return_address+0x4d/0x90 [ 1437.256034][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1437.256059][ C1] arch_stack_walk+0xfb/0x150 [ 1437.256086][ C1] stack_trace_save+0xa9/0x100 [ 1437.256109][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1437.256135][ C1] ? __lock_acquire+0x747/0x2de0 [ 1437.256160][ C1] kasan_save_track+0x3e/0x80 [ 1437.256198][ C1] ? kasan_save_track+0x3e/0x80 [ 1437.256221][ C1] ? kasan_save_free_info+0x40/0x50 [ 1437.256240][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1437.256264][ C1] ? slab_free_after_rcu_debug+0x12a/0x220 [ 1437.256296][ C1] ? rcu_core+0x926/0x1260 [ 1437.256321][ C1] ? handle_softirqs+0x223/0x840 [ 1437.256345][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1437.256368][ C1] ? irq_exit_rcu+0x9/0x30 [ 1437.256392][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1437.256415][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1437.256436][ C1] ? generic_permission+0xc8/0x660 [ 1437.256456][ C1] ? inode_permission+0x242/0x600 [ 1437.256475][ C1] ? link_path_walk+0xc34/0x1910 [ 1437.256496][ C1] ? __filename_parentat+0x287/0x6f0 [ 1437.256518][ C1] ? filename_unlinkat+0x104/0x610 [ 1437.256535][ C1] ? __se_sys_unlink+0x2e/0x140 [ 1437.256552][ C1] ? do_syscall_64+0x166/0x520 [ 1437.256576][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.256616][ C1] kasan_save_free_info+0x40/0x50 [ 1437.256636][ C1] __kasan_slab_free+0x5c/0x80 [ 1437.256662][ C1] slab_free_after_rcu_debug+0x12a/0x220 [ 1437.256689][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1437.256718][ C1] ? rcu_core+0x8a8/0x1260 [ 1437.256742][ C1] rcu_core+0x926/0x1260 [ 1437.256775][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1437.256801][ C1] ? lapic_next_event+0x11/0x20 [ 1437.256821][ C1] ? clockevents_program_event+0x491/0x630 [ 1437.256846][ C1] handle_softirqs+0x223/0x840 [ 1437.256872][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1437.256900][ C1] __irq_exit_rcu+0xcb/0x220 [ 1437.256925][ C1] irq_exit_rcu+0x9/0x30 [ 1437.256951][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1437.256975][ C1] [ 1437.256982][ C1] [ 1437.256995][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1437.257015][ C1] RIP: 0010:generic_permission+0xc8/0x660 [ 1437.257037][ C1] Code: 89 df e8 db f5 e8 ff 41 be c8 07 00 00 48 89 5c 24 20 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 ae f5 e8 ff 49 8b 36 4d 8d 75 18 4c 89 f0 48 c1 [ 1437.257053][ C1] RSP: 0018:ffffc900049dfa28 EFLAGS: 00000246 [ 1437.257069][ C1] RAX: 1ffff11008da8cf9 RBX: ffff88806823dcd8 RCX: dffffc0000000000 [ 1437.257084][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 1437.257096][ C1] RBP: 00000000ffffbe3f R08: ffff8880684b1a60 R09: ffff888056aa3860 [ 1437.257110][ C1] R10: ffff8880684b1a60 R11: ffff888056aa3860 R12: 00000000000041c0 [ 1437.257125][ C1] R13: ffff88806823dcb0 R14: ffff888046d467c8 R15: 0000000000000001 [ 1437.257147][ C1] ? generic_permission+0x7d/0x660 [ 1437.257172][ C1] inode_permission+0x242/0x600 [ 1437.257195][ C1] link_path_walk+0xc34/0x1910 [ 1437.257227][ C1] __filename_parentat+0x287/0x6f0 [ 1437.257253][ C1] ? __pfx___filename_parentat+0x10/0x10 [ 1437.257289][ C1] ? lock_acquire+0x115/0x350 [ 1437.257316][ C1] filename_unlinkat+0x104/0x610 [ 1437.257338][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 1437.257359][ C1] ? do_getname+0x151/0x250 [ 1437.257380][ C1] __se_sys_unlink+0x2e/0x140 [ 1437.257400][ C1] do_syscall_64+0x166/0x520 [ 1437.257424][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.257443][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1437.257465][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.257484][ C1] RIP: 0033:0x7f38ac39d247 [ 1437.257499][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1437.257514][ C1] RSP: 002b:00007ffef9102cf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1437.257533][ C1] RAX: ffffffffffffffda RBX: 00000000000ac4a8 RCX: 00007f38ac39d247 [ 1437.257547][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffef9102db0 [ 1437.257560][ C1] RBP: 00007ffef9102db0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.257572][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffef9103e40 [ 1437.257585][ C1] R13: 00007f38ac4344bb R14: 00005555648914e8 R15: 0000000000000005 [ 1437.257607][ C1] [ 1437.260260][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 1439.516829][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1439.527600][ T34] Tainted: [L]=SOFTLOCKUP [ 1439.531922][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1439.541987][ T34] Call Trace: [ 1439.545270][ T34] [ 1439.548204][ T34] vpanic+0x26f/0x710 [ 1439.552211][ T34] panic+0xc5/0xd0 [ 1439.555963][ T34] ? __pfx_panic+0x10/0x10 [ 1439.560396][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 1439.565877][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 1439.571274][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1439.577442][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1439.583610][ T34] watchdog+0x10cc/0x10d0 [ 1439.587962][ T34] ? watchdog+0x209/0x10d0 [ 1439.592399][ T34] kthread+0x38b/0x480 [ 1439.596483][ T34] ? __pfx_watchdog+0x10/0x10 [ 1439.601173][ T34] ? __pfx_kthread+0x10/0x10 [ 1439.605775][ T34] ret_from_fork+0x514/0xb70 [ 1439.610380][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1439.615500][ T34] ? __switch_to+0xc78/0x1410 [ 1439.620206][ T34] ? __pfx_kthread+0x10/0x10 [ 1439.624817][ T34] ret_from_fork_asm+0x1a/0x30 [ 1439.629622][ T34] [ 1439.632908][ T34] Kernel Offset: disabled [ 1439.637226][ T34] Rebooting in 86400 seconds..