last executing test programs: 3m24.259284433s ago: executing program 2 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="257f3a00b7ba7feb35295a62cd27", 0x0, 0x700, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 3m23.828326716s ago: executing program 2 (id=382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3m23.202164869s ago: executing program 2 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='0', 0x1) 3m22.950632291s ago: executing program 2 (id=395): syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f0000000940)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030312c747970653d98acdea62c706172743d3078303030303030303030303030303030392c6e6c733d6d6163677265656b2c00f50b3ea66d7702ce6966ff3271a7005c09329c483eec35ad12df64c09aceff402da9861ae9af6985bd17bff300b262"], 0x1, 0x612, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000001000)='ext4\x00', &(0x7f0000001040)='./file0\x00', 0x20000406, &(0x7f0000001080)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@errors_continue}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001100)="$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") mount(&(0x7f0000001600)=@filename='mtd0\x00', &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='jffs2\x00', 0x800000, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000001b40)={0x20, 0x0, 0x0, {0x0, 0xe}}, 0x20) 3m22.573473289s ago: executing program 2 (id=401): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.030652352s ago: executing program 2 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002804100ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x4044010}, 0x2040800) 3m21.561958472s ago: executing program 32 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002804100ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x4044010}, 0x2040800) 3m0.602774009s ago: executing program 0 (id=586): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m59.504271923s ago: executing program 0 (id=603): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 2m58.438619323s ago: executing program 0 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x401070c9, 0x0) 2m58.131231006s ago: executing program 0 (id=625): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 2m57.242595687s ago: executing program 0 (id=631): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x53, 0x4) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/66, 0x42}, 0x9}], 0x1, 0x10162, 0x0) 2m56.436869585s ago: executing program 0 (id=638): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e23, 0x3, @mcast2, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x3, 0x1, @mcast1, 0x2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2m55.908649862s ago: executing program 33 (id=638): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e23, 0x3, @mcast2, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x3, 0x1, @mcast1, 0x2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2m15.928986731s ago: executing program 1 (id=1061): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 2m15.696468383s ago: executing program 1 (id=1063): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001980), 0x10) sendmsg$can_bcm(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="05000000e608"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x5, 0x10, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2, 0x0, 0x0, 0x24000040}, 0x800) 2m15.440006202s ago: executing program 1 (id=1068): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000480)=[{0xfffffffffffffffb, 0xfffffffffffffffd}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1}) 2m14.920817824s ago: executing program 1 (id=1074): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)={[{@sys_tz}, {@keep_last_dots}, {@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@namecase}, {@errors_continue}, {@discard}, {@zero_size_dir}, {@sys_tz}]}, 0x1, 0x1531, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001900)='./dev\x00', &(0x7f0000001940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001980)='./dev/mapper/control\x00', 0x2, 0x0) 2m14.436194822s ago: executing program 1 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m12.180550667s ago: executing program 1 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r1}, 0xc) 2m11.74753221s ago: executing program 34 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r1}, 0xc) 10.903807208s ago: executing program 8 (id=2160): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 10.16431187s ago: executing program 8 (id=2178): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x2, 0x0, &(0x7f0000000140)=[{0x7ff, 0x1081}, {0xffffffffffffe5ca, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000006c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000600)="03", 0x1, 0x9}) 9.713647193s ago: executing program 8 (id=2169): r0 = timerfd_create(0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 9.127565823s ago: executing program 8 (id=2175): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 6.980415731s ago: executing program 3 (id=2196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 6.766906793s ago: executing program 4 (id=2197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000002940)=[{&(0x7f0000000140)='\x00', 0x1}, {0x0}], 0x2, 0x3, 0x3) 6.309673235s ago: executing program 4 (id=2200): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x184, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x22852, r0, 0xadc6a000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 4.746678801s ago: executing program 4 (id=2204): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2c, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x3, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x12162, 0x0) 4.232901933s ago: executing program 3 (id=2208): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) 4.130958122s ago: executing program 4 (id=2209): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f0000000680)='LLL', 0x3, 0x20000000000002}) 3.868080065s ago: executing program 5 (id=2210): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x40, 0x6}) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 3.766827989s ago: executing program 3 (id=2212): unshare(0x22020600) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 3.694399026s ago: executing program 4 (id=2213): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000004140), &(0x7f0000004180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000004280)) rename(&(0x7f000000aa40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000000ab40)='./bus\x00') 3.315516791s ago: executing program 6 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c0000000600190009000000050006000900000006000400f400000006000c0008000000060016"], 0x80}}, 0x0) 2.931802237s ago: executing program 6 (id=2216): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r0, 0x1) 2.931652928s ago: executing program 3 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2000}]}, 0x5c}}, 0x0) 2.86998488s ago: executing program 5 (id=2218): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x101) mount$afs(&(0x7f0000000100)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@threads_num={'threads', 0x3d, 0xa}}, {@threads_num={'threads', 0x3d, 0x200}}, {@threads_num={'threads', 0x3d, 0xa}}], [{@obj_role}]}, 0x1, 0x16f, &(0x7f0000000240)="$eJxckr2uElEUhb8zHH7UxGjoaJxEo1ggw6CGUBF9BR8AAiMSB38YEoUQGRMrY2VlR3wHSwufwJbmNre53S14gJu5OTN7JgcoWKy9zl5n7c15E32MqsDVYTNmAAoocZtzpdBA3RSACyfD7xnq/8K3GfBHzvWlvhFsRKv121EYBgu37+K+/KFc4JdLs8dd6H51uExb94fNWDyKzwSw9dKJ1tAmbFLoJrAhj4D2cv6hHa3Wrdl8NA2mwTvf7z73nnreM7/9ehYGXvatLHuJjMHHgNnLDUsvW9ffPImaR/+iM7T7KsBQ9Ob94z5zV5IkCRYq/hW9VTlnRn/FQ2rAp1hZVTd10aTjDFCUhHT0STaHWio8Gb8PJ1sUKm/boQuPzp5yQXybdG9RH/Kbe2fmr2vJunpxPkv+FlzBgeBOcC+Yv6kX4qBTh2/CmjFU+DxaLhcds7nsV1Hzi5p/J7a3+AD46RxP/Ff4dQAAAP//Od9n+Q==") 2.75311616s ago: executing program 7 (id=2219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000600), 0x100, 0xd2) 2.516605285s ago: executing program 3 (id=2220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 2.431005584s ago: executing program 6 (id=2221): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000c80)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x0) 2.299045119s ago: executing program 7 (id=2222): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x14000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) 1.992083049s ago: executing program 5 (id=2223): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000800)=""/4, 0x4, 0x81) 1.977469258s ago: executing program 8 (id=2224): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) 1.565135126s ago: executing program 3 (id=2225): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x3, 0x0) 1.563636603s ago: executing program 6 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000080) 1.530747258s ago: executing program 5 (id=2226): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x42}], 0x1, 0x8) 1.455691874s ago: executing program 7 (id=2227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d03, &(0x7f0000000900)) 1.226645907s ago: executing program 6 (id=2228): r0 = msgget$private(0x0, 0x19b) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000700)={0x11c0a5f7e63f2df7, "434adf63220d8c538faa5ad9c07e785de171b27a93923ae7f35da3f4bc3df7eaf661f0518b3ba1fdf6e88ae4c832d0b251bfec3015da38fa7bf835dfc54d4a484f24874f1d3fd5bfd5d326059fb589c8dc3fe2095be1a21cbc0700d92d645ae8cd4e9bc7933024eff7863b6679dddbba46b2e716ce6726fcbad33daa51458bba16a04d2fe09b432e5be004cce52490a420a3afa23ef1d33dfd1d309a95279757419ca6b1d6dfd0d90706a745f07277d49b2e8a69ded3302ea4aca14eb085c46866ed4c280e1595878b7ba2a4d516a954b5122797dd64524b33dc985839d16909e5fe8af68764a606fdfa037d0e79e3658fbd53d7392a81f657c7196e8f3e856d4b6fcf98af2ccbcc2f240398bd98d38e61e4c3a12b465551cb2a735e4a97093a45c0073ab2bc0ef6f0dfa7ca5370636e8a9b9b5a664e6c15cbd1e609756311a07c8cb9fd871be8692a887a810e473026779bf3a0b16d05cbd4ee5c90c07ede32a0564d90f5e686d28bc4e30568351ce3e2e0b8c6d2ce4e5fd8e8e007bc51930cc13f8649923dc1d34d749b697fc64b68d6eb9a14f1d7b35aa7353220a7172ca5143e15f255815709f32cb7e1233faef23fb2355d7d0c45ac56d3fddc0680953f496a07ed715fbc7281e21bfe38490160d6cc8fca5e12c267ca0a56df6398c8ebfc5fee852df979f1240b32167f96c7dd9d6f840c601c1512661ba59c021577d0de02ac9b59718c1dbbd44e0779f23c8805099ded550daa084d1ac11edb7d7aef857875471127b7fb3f6ed64949409338208d7f71cd661473e65c45920a2f03965cc517019ebb0ed339bbb5d470632e03748af8c38eaaacc802f834724d520d747057ff16ae3dc094752ec81c0e38dbc0a452d1e12330ce7a302eb99f435f1f1245d232440273cc454862cda83a8c04e4ccad6f9c23ca383ccc825360b7ca0f9a8c5d3bb753c796882dce3ad2d531e008e5f74871d3f79e1310f405e4467d287b41da7ac98ea1fb3c33913a77bae23bdcf13180d554985c7646be8c6c44c304180123fb7066a1411e47ced63c04f43ce98fac022c760036770e55a5c83e16ee097944215beb31f61c180d60950e79ea13fe686c8a6e8aa031ca5c23ff8c3d5ba3765231ab03ea943584efbe973584d22f01ad1052ab6372ebd8d8c6101bb34a7837aa8307d6736c116eeada530ced949353af9c502b20b2659b53294512f6d179724423a7ef5976dcec0690f20a20e16f5834f82a5c038e8cbfe98c12b417732080ab8d839d3127be59d7f90c10a6cea9aee02c99936f8997162e6b430c4b2d807185abf6b70c3462c5460461a8e7f0863580fdec2559926b778a5ffa50b463805e32873d575aca29d7f4f96e1962610a5cf9a14c98dc01d3251399f7c84deefc1b777a1313166ca9eae1280c338f2cda049b37ed4719fbe953"}, 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 1.119853062s ago: executing program 5 (id=2229): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000000)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 826.129033ms ago: executing program 4 (id=2230): io_setup(0x8, &(0x7f0000000600)=0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x6b0f, 0x7) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 824.258242ms ago: executing program 7 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x15, 0x11, 0x2, 0x2, 0x1000, 0x11, 0xe4f, 0xfff7]}}]}]}]}, 0x44}}, 0x0) 823.455761ms ago: executing program 8 (id=2232): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 437.77116ms ago: executing program 7 (id=2233): syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403", 0x76}], 0x1}}], 0x1, 0x200880d8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 437.579984ms ago: executing program 6 (id=2234): syz_mount_image$hfsplus(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5ca, &(0x7f00000007c0)="$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") removexattr(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)=@random={'osx.', 'system.posix_acl_default\x00'}) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='.\x00', 0x820f8, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, &(0x7f0000000600)) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x200) 358.96502ms ago: executing program 5 (id=2235): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r0, 0x1) 0s ago: executing program 7 (id=2236): recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): 1287: Corrupt directory, running e2fsck is recommended [ 224.859688][ T9440] loop6: detected capacity change from 0 to 512 [ 224.883011][ T9440] EXT4-fs (loop6): Test dummy encryption mode enabled [ 224.883038][ T9440] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 224.883052][ T9440] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.892625][ T9440] EXT4-fs (loop6): 1 truncate cleaned up [ 224.897092][ T9440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.015223][ T9429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.148537][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.354359][ T9448] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 225.354359][ T9448] program syz.6.1294 not setting count and/or reply_len properly [ 226.216085][ T1552] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.365560][ T1552] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 226.366783][ T1552] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.366835][ T1552] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.366883][ T1552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.389077][ T9452] loop8: detected capacity change from 0 to 131072 [ 226.404329][ T9452] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 226.404361][ T9452] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 226.418869][ T9452] F2FS-fs (loop8): invalid crc value [ 226.518333][ T9452] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.547546][ T9452] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 226.547577][ T9452] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 226.673542][ T9474] loop4: detected capacity change from 0 to 1024 [ 226.680924][ T9474] EXT4-fs: Ignoring removed bh option [ 226.732983][ T9474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.836304][ T9474] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 226.840080][ T9465] loop6: detected capacity change from 0 to 32768 [ 226.875080][ T9465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1303 (9465) [ 226.935910][ T9465] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.935979][ T9465] BTRFS info (device loop6): using sha256 checksum algorithm [ 227.077624][ T9465] BTRFS info (device loop6): enabling ssd optimizations [ 227.077659][ T9465] BTRFS info (device loop6): turning on async discard [ 227.077716][ T9465] BTRFS info (device loop6): enabling free space tree [ 227.187876][ T1552] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110 [ 227.391614][ T9473] loop5: detected capacity change from 0 to 32768 [ 227.443937][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.470966][ T6912] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.522802][ T9473] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 228.157329][ T9505] loop4: detected capacity change from 0 to 256 [ 228.182311][ T9505] exfat: Deprecated parameter 'utf8' [ 228.182371][ T9505] exfat: Deprecated parameter 'namecase' [ 228.182480][ T9505] exfat: Deprecated parameter 'namecase' [ 228.182509][ T9505] exfat: Deprecated parameter 'utf8' [ 228.250672][ T9505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 228.251124][ T9505] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 228.573686][ T5613] ocfs2: Unmounting device (7,5) on (node local) [ 228.892972][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1316'. [ 228.893009][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1316'. [ 228.893028][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1316'. [ 228.990616][ T9346] usb 4-1: USB disconnect, device number 12 [ 229.491839][ T9543] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1328'. [ 229.704128][ T9552] loop4: detected capacity change from 0 to 256 [ 229.739778][ T9552] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 229.739810][ T9552] FAT-fs (loop4): Filesystem has been set read-only [ 229.783158][ T9556] loop6: detected capacity change from 0 to 256 [ 229.817107][ T9346] kernel read not supported for file /dummy_udc (pid: 9346 comm: kworker/0:6) [ 229.931298][ T9562] loop8: detected capacity change from 0 to 64 [ 230.115619][ T9568] loop5: detected capacity change from 0 to 128 [ 230.228855][ T9568] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.249037][ T9568] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.467738][ T9582] vivid-004: disconnect [ 230.472553][ T9580] vivid-004: reconnect [ 230.510748][ T5613] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.688078][ T9588] overlayfs: regular lower layers cannot follow data lower layers [ 231.017297][ T9600] loop6: detected capacity change from 0 to 2048 [ 231.123866][ T9600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.123992][ T9600] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.191332][ T9605] loop3: detected capacity change from 0 to 2048 [ 231.228412][ T9605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.250943][ T9600] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1352: bg 0: block 112: padding at end of block bitmap is not set [ 231.271425][ T9600] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28 [ 231.303243][ T9612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.403498][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.771718][ T9632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.452001][ T9653] loop3: detected capacity change from 0 to 512 [ 232.489512][ T9653] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 232.489536][ T9653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.558873][ T9653] EXT4-fs (loop3): 1 truncate cleaned up [ 232.564385][ T9653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.714013][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.987694][ T9668] loop6: detected capacity change from 0 to 4096 [ 233.018527][ T9668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.018556][ T9668] EXT4-fs (loop6): Test dummy encryption mode enabled [ 233.038007][ T9668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 233.038143][ T9668] System zones: 0-5 [ 233.068533][ T9668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.105219][ T9674] loop3: detected capacity change from 0 to 256 [ 233.212101][ T9678] loop5: detected capacity change from 0 to 2048 [ 233.226904][ T9674] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 233.278315][ T9680] loop8: detected capacity change from 0 to 512 [ 233.288498][ T9678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.387484][ T9683] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.1379'. [ 233.387513][ T9683] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 233.387532][ T9683] openvswitch: netlink: Message has 4 unknown bytes. [ 233.388684][ T9680] EXT4-fs (loop8): 1 truncate cleaned up [ 233.423108][ T9680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.486915][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.605339][ T9679] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1377: bg 0: block 465: padding at end of block bitmap is not set [ 233.612021][ T9685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.612232][ T9688] loop7: detected capacity change from 0 to 24 [ 233.629614][ T9688] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 233.713632][ T566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.826451][ T9688] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 234.445646][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.620312][ T9708] loop8: detected capacity change from 0 to 128 [ 234.656503][ T9708] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 234.656572][ T9708] hpfs: filesystem error: improperly stopped [ 234.656590][ T9708] hpfs: You really don't want any checks? You are crazy... [ 234.656976][ T9708] hpfs: hpfs_map_sector(): read error [ 234.656990][ T9708] hpfs: code page support is disabled [ 234.696286][ T9708] hpfs: hpfs_map_4sectors(): unaligned read [ 234.696389][ T9708] hpfs: hpfs_map_4sectors(): unaligned read [ 234.696401][ T9708] hpfs: filesystem error: unable to find root dir [ 234.868070][ T9695] loop6: detected capacity change from 0 to 32768 [ 235.046672][ T9696] loop3: detected capacity change from 0 to 40427 [ 235.106734][ T9715] loop5: detected capacity change from 0 to 64 [ 235.114087][ T9695] ialloc: diAlloc returned -17! [ 235.145824][ T9714] ialloc: diAlloc returned -17! [ 235.149336][ T9696] F2FS-fs (loop3): invalid crc value [ 235.201315][ T9705] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1387'. [ 235.782146][ T9696] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 235.812451][ T9696] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 235.812487][ T9696] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 235.812518][ T9696] F2FS-fs (loop3): Start checkpoint disabled! [ 235.863010][ T9696] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 235.872818][ T9696] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 235.937310][ T1162] kworker/u8:11: attempt to access beyond end of device [ 235.937310][ T1162] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.979151][ T1162] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 235.979191][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.979210][ T1162] Workqueue: writeback wb_workfn (flush-7:3) [ 235.979257][ T1162] Call Trace: [ 235.979268][ T1162] [ 235.979279][ T1162] dump_stack_lvl+0xe8/0x150 [ 235.979324][ T1162] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 235.979378][ T1162] f2fs_write_end_bio+0x1211/0x16e0 [ 235.979419][ T1162] ? blkg_put+0x22/0x240 [ 235.979483][ T1162] __submit_merged_bio+0x258/0x6a0 [ 235.979511][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.979545][ T1162] ? rcu_is_watching+0x16/0xb0 [ 235.979588][ T1162] __submit_merged_write_cond+0x3c9/0x4e0 [ 235.979651][ T1162] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 235.979715][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.979764][ T1162] f2fs_write_data_pages+0x2a27/0x36f0 [ 235.979798][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.979873][ T1162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 235.979924][ T1162] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 235.980005][ T1162] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 235.980058][ T1162] ? __lock_acquire+0x747/0x2de0 [ 235.980098][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.980147][ T1162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 235.980183][ T1162] do_writepages+0x338/0x560 [ 235.980227][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.980259][ T1162] ? reacquire_held_locks+0x117/0x1a0 [ 235.980296][ T1162] ? writeback_sb_inodes+0x450/0x1b00 [ 235.980345][ T1162] __writeback_single_inode+0x136/0x1220 [ 235.980392][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.980424][ T1162] ? do_raw_spin_unlock+0xf5/0x200 [ 235.980471][ T1162] writeback_sb_inodes+0x9de/0x1b00 [ 235.980513][ T1162] ? __lock_acquire+0x747/0x2de0 [ 235.980562][ T1162] ? lock_acquire+0x115/0x350 [ 235.980601][ T1162] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 235.980694][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.980732][ T1162] ? rcu_is_watching+0x16/0xb0 [ 235.980768][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.980800][ T1162] ? queue_io+0x2d3/0x470 [ 235.980846][ T1162] wb_writeback+0x41c/0xad0 [ 235.980891][ T1162] ? queue_io+0x2b1/0x470 [ 235.980940][ T1162] ? __pfx_wb_writeback+0x10/0x10 [ 235.980980][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.981042][ T1162] wb_workfn+0x431/0x10f0 [ 235.981100][ T1162] ? __pfx_wb_workfn+0x10/0x10 [ 235.981141][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981172][ T1162] ? trace_hrtimer_start+0x82/0x200 [ 235.981207][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981239][ T1162] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.981292][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981323][ T1162] ? lock_acquire+0x115/0x350 [ 235.981355][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981396][ T1162] ? rcu_is_watching+0x16/0xb0 [ 235.981432][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981466][ T1162] ? process_scheduled_works+0x97a/0x1630 [ 235.981506][ T1162] process_scheduled_works+0xc3d/0x1630 [ 235.981545][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981615][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.981662][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981694][ T1162] ? assign_work+0x3cf/0x5d0 [ 235.981745][ T1162] worker_thread+0xa47/0xfb0 [ 235.981787][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981832][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.981864][ T1162] ? __kthread_parkme+0x71/0x1f0 [ 235.981919][ T1162] kthread+0x38b/0x480 [ 235.981948][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 235.981984][ T1162] ? __pfx_kthread+0x10/0x10 [ 235.982015][ T1162] ret_from_fork+0x514/0xb70 [ 235.982047][ T1162] ? __pfx_ret_from_fork+0x10/0x10 [ 235.982074][ T1162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.982106][ T1162] ? __switch_to+0xc89/0x1420 [ 235.982150][ T1162] ? __pfx_kthread+0x10/0x10 [ 235.982179][ T1162] ret_from_fork_asm+0x1a/0x30 [ 235.982230][ T1162] [ 236.004834][ T1162] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 236.523119][ T9745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.581919][ T9746] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 237.521785][ T9749] set_capacity_and_notify: 1 callbacks suppressed [ 237.521808][ T9749] loop4: detected capacity change from 0 to 131072 [ 237.533132][ T9749] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 237.533156][ T9749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.537283][ T9749] F2FS-fs (loop4): invalid crc value [ 237.691039][ T9749] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.709827][ T9749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 237.709856][ T9749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 237.756326][ C1] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 238.022653][ T9737] loop6: detected capacity change from 0 to 32768 [ 238.039886][ T9737] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1394 (9737) [ 238.090814][ T9737] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 238.090851][ T9737] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 238.279355][ T9737] BTRFS info (device loop6): enabling ssd optimizations [ 238.279390][ T9737] BTRFS info (device loop6): turning on async discard [ 238.279412][ T9737] BTRFS info (device loop6): enabling free space tree [ 238.362687][ T31] audit: type=1800 audit(1792062954.979:388): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1394" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 238.481873][ T6912] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 238.530840][ T9777] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 239.503229][ T9825] loop5: detected capacity change from 0 to 512 [ 239.609606][ T9825] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 239.609628][ T9825] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 239.649824][ T9825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 239.651179][ T9825] System zones: 1-12 [ 239.671466][ T9825] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1418: bad orphan inode 16 [ 239.671495][ T9825] loop5: lost filesystem error report for type 5 error -117 [ 239.672578][ T9825] ext4_test_bit(bit=15, block=4) = 0 [ 239.672599][ T9825] EXT4-fs (loop5): 1 orphan inode deleted [ 239.707634][ T9834] loop6: detected capacity change from 0 to 512 [ 239.707648][ T9825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.715813][ T9834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.715863][ T9834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.931509][ T9834] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 239.997438][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.998060][ T9834] EXT4-fs (loop6): 1 truncate cleaned up [ 240.019116][ T9834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.104010][ T9839] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1422'. [ 240.515810][ T6912] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 240.541257][ T6912] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 241.204414][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1435'. [ 241.232605][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.451500][ T32] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.451548][ T32] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.711613][ T9879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.733041][ T32] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.733087][ T32] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.039597][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.053928][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.063427][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.073050][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1445'. [ 242.089106][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.091157][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.141329][ T32] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.141374][ T32] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.435692][ T32] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.435748][ T32] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.735612][ T1552] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 242.838416][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 242.877579][ T9920] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 242.891136][ T1552] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 242.898747][ T1552] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 242.898785][ T1552] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 242.898814][ T1552] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.898862][ T1552] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.924331][ T9909] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 242.924487][ T9909] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 242.951993][ T1552] pl2303 9-1:1.0: pl2303 converter detected [ 242.987505][ T1552] usb 9-1: pl2303 converter now attached to ttyUSB0 [ 242.988093][ T9920] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 242.990114][ T9922] input: syz0 as /devices/virtual/input/input20 [ 243.086142][ T9920] team0: Port device wlan0 added [ 243.108587][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.256012][ T9909] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 243.257933][ T9909] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 243.259879][ T9909] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 243.265041][ T9909] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 243.265636][ T9909] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 243.266582][ T32] bridge_slave_1: left allmulticast mode [ 243.266607][ T32] bridge_slave_1: left promiscuous mode [ 243.266828][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.351219][ T32] bridge_slave_0: left allmulticast mode [ 243.351252][ T32] bridge_slave_0: left promiscuous mode [ 243.351486][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.535569][ T9909] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 243.542269][ T9909] pl2303 ttyUSB0: error sending break = -32 [ 243.568880][ T25] usb 9-1: USB disconnect, device number 2 [ 243.616518][ T25] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 243.638140][ T25] pl2303 9-1:1.0: device disconnected [ 244.135268][ T5621] Bluetooth: hci5: command tx timeout [ 244.161881][ T9960] loop7: detected capacity change from 0 to 512 [ 244.239365][ T9960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.239487][ T9960] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.292531][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.305011][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.312555][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.319757][ T32] bond0 (unregistering): Released all slaves [ 244.370418][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1467'. [ 244.476451][ T9] usb 4-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 244.479779][ T9] usb 4-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 244.501006][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.501039][ T9] usb 4-1: Product: syz [ 244.501057][ T9] usb 4-1: Manufacturer: syz [ 244.501075][ T9] usb 4-1: SerialNumber: syz [ 244.592206][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 244.594253][ T9890] rxe_eth0 speed is unknown, defaulting to 1000 [ 244.602790][ T7611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.841689][ T9] usb 4-1: USB disconnect, device number 13 [ 245.512682][ T9991] netlink: 'syz.4.1475': attribute type 6 has an invalid length. [ 245.512711][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1475'. [ 245.557875][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.559449][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.642183][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 245.883097][ T9890] lo speed is unknown, defaulting to 1000 [ 245.953383][T10009] program syz.4.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.109757][T10012] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1487'. [ 246.215443][ T5621] Bluetooth: hci5: command tx timeout [ 246.224849][T10016] loop4: detected capacity change from 0 to 16 [ 246.225906][T10016] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 246.637963][ T32] hsr_slave_0: left promiscuous mode [ 246.653492][ T32] hsr_slave_1: left promiscuous mode [ 246.654412][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.654434][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.684227][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.684257][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.720657][ T32] veth1_macvtap: left promiscuous mode [ 246.720701][ T32] veth0_macvtap: left promiscuous mode [ 246.720841][ T32] veth1_vlan: left promiscuous mode [ 246.720916][ T32] veth0_vlan: left promiscuous mode [ 246.788074][T10039] loop4: detected capacity change from 0 to 1024 [ 247.574252][ T32] team0 (unregistering): Port device team_slave_1 removed [ 247.623827][ T32] team0 (unregistering): Port device team_slave_0 removed [ 247.686527][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 247.982465][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 248.309190][ T5621] Bluetooth: hci5: command tx timeout [ 248.393947][T10083] loop8: detected capacity change from 0 to 512 [ 248.411790][T10083] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 248.534200][T10083] EXT4-fs (loop8): 1 orphan inode deleted [ 248.539662][T10083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.543807][T10083] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.559445][ T566] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 248.559554][ T566] EXT4-fs error (device loop8): ext4_release_dquot:7106: comm kworker/u8:6: Failed to release dquot type 1 [ 248.577169][T10083] EXT4-fs (loop8): shut down requested (2) [ 248.780417][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.937941][T10093] loop5: detected capacity change from 0 to 4096 [ 249.001990][T10096] loop3: detected capacity change from 0 to 256 [ 249.057767][T10100] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.408409][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.408601][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.408743][ T9890] bridge_slave_0: entered allmulticast mode [ 249.411213][ T9890] bridge_slave_0: entered promiscuous mode [ 249.417632][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.417860][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.417999][ T9890] bridge_slave_1: entered allmulticast mode [ 249.419971][ T9890] bridge_slave_1: entered promiscuous mode [ 249.591141][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.616824][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.791007][T10124] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 249.791109][T10124] syzkaller0: linktype set to 823 [ 249.851794][ T9890] team0: Port device team_slave_0 added [ 249.868477][ T9890] team0: Port device team_slave_1 added [ 249.969283][T10130] netlink: 'syz.8.1523': attribute type 10 has an invalid length. [ 249.980175][T10127] binder: 10126:10127 unknown command 1074553622 [ 249.980198][T10127] binder: 10126:10127 ioctl c0306201 200000000640 returned -22 [ 250.053009][T10130] team0: Device vxcan0 is of different type [ 250.081862][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.081883][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.081918][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.088633][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.088652][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.088693][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.292223][T10132] IPVS: persistence engine module ip_vs_pe_À not found [ 250.328954][ T9890] hsr_slave_0: entered promiscuous mode [ 250.330031][ T9890] hsr_slave_1: entered promiscuous mode [ 250.330794][ T9890] debugfs: 'hsr0' already exists in 'hsr' [ 250.330816][ T9890] Cannot create hsr debugfs directory [ 250.384770][ T5621] Bluetooth: hci5: command tx timeout [ 250.609649][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1529'. [ 250.704890][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 251.345446][ T31] audit: type=1400 audit(1792063223.998:389): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10153 comm="syz.5.1532" name="p" offset=53 [ 251.449989][T10157] loop7: detected capacity change from 0 to 64 [ 251.471774][T10146] loop8: detected capacity change from 0 to 131072 [ 251.481829][T10112] loop4: detected capacity change from 0 to 32768 [ 251.499714][T10146] F2FS-fs (loop8): Test dummy encryption mode enabled [ 251.596985][T10146] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.617420][T10146] F2FS-fs (loop8): Mounted with checkpoint version = 1b41e955 [ 251.694228][T10112] ialloc: diAlloc returned -17! [ 251.844152][T10112] ialloc: diAlloc returned -17! [ 251.942302][T10165] loop5: detected capacity change from 0 to 512 [ 251.989471][T10149] loop3: detected capacity change from 0 to 32768 [ 252.013079][T10149] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1530 (10149) [ 252.078593][T10165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.078715][T10165] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.152619][T10165] EXT4-fs (loop5): shut down requested (1) [ 252.153178][T10165] EXT4-fs (loop5): resizing filesystem from 256 to 1 blocks [ 252.153203][T10165] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 252.162347][T10149] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.162384][T10149] BTRFS info (device loop3): using crc32c checksum algorithm [ 252.419185][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.435041][T10149] BTRFS info (device loop3): setting nodatasum [ 252.435067][T10149] BTRFS info (device loop3): allowing degraded mounts [ 252.435088][T10149] BTRFS info (device loop3): enabling ssd optimizations [ 252.435109][T10149] BTRFS info (device loop3): turning on async discard [ 252.435128][T10149] BTRFS info (device loop3): enabling free space tree [ 252.613340][T10149] BTRFS critical (device loop3 state E): emergency shutdown [ 252.668825][T10193] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 252.736864][ T5612] BTRFS info (device loop3 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.019449][T10193] team0: Device vxcan0 is of different type [ 253.262212][T10202] loop7: detected capacity change from 0 to 4096 [ 253.295202][T10202] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.295237][T10202] EXT4-fs (loop7): Test dummy encryption mode enabled [ 253.316157][T10202] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 253.316292][T10202] System zones: 0-5 [ 253.344886][T10202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.468067][ T1552] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 253.634614][ T1552] usb 4-1: Using ep0 maxpacket: 32 [ 253.638264][ T1552] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 253.639344][ T1552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.644470][ T1552] usb 4-1: config 0 descriptor?? [ 253.694855][ T1552] gspca_main: sunplus-2.14.0 probing 041e:400b [ 253.866299][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 253.881221][T10216] netlink: 'syz.5.1544': attribute type 10 has an invalid length. [ 253.921334][ T7611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.094299][T10216] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 254.131654][T10216] team0: Port device wlan0 added [ 254.196181][T10215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.356693][ T9890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 254.362723][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.383454][ T9890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 254.401763][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.413966][ T9890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.430262][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.442278][ T9890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.456181][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.508756][ T1552] gspca_sunplus: reg_w_riv err -71 [ 254.508855][ T1552] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 254.521981][ T1552] usb 4-1: USB disconnect, device number 14 [ 254.945311][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.021200][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.021267][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.058344][T10235] tap0: tun_chr_ioctl cmd 1074025672 [ 255.058376][T10235] tap0: ignored: set checksum disabled [ 255.070676][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.173780][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.173891][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.223732][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.223848][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.312480][T10246] loop3: detected capacity change from 0 to 1024 [ 255.322206][T10246] EXT4-fs: quotafile must be on filesystem root [ 255.383268][T10242] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 255.556196][T10250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.560815][T10214] loop4: detected capacity change from 0 to 40427 [ 255.571843][T10214] F2FS-fs (loop4): invalid crc value [ 256.039955][T10214] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 256.166695][T10267] netlink: 'syz.7.1555': attribute type 10 has an invalid length. [ 256.185611][T10267] team0: Device vxcan0 is of different type [ 256.187660][T10214] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 256.187695][T10214] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 256.187728][T10214] F2FS-fs (loop4): Start checkpoint disabled! [ 256.371314][T10214] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 256.407291][T10214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 256.427637][T10260] loop3: detected capacity change from 0 to 32768 [ 256.442126][T10260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1553 (10260) [ 256.528550][T10260] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.528590][T10260] BTRFS info (device loop3): using crc32c checksum algorithm [ 256.747585][ T13] kworker/u8:1: attempt to access beyond end of device [ 256.747585][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.768680][T10260] BTRFS info (device loop3): enabling ssd optimizations [ 256.768714][T10260] BTRFS info (device loop3): turning on flush-on-commit [ 256.768735][T10260] BTRFS info (device loop3): enabling free space tree [ 256.768757][T10260] BTRFS info (device loop3): enabling auto defrag [ 256.768785][T10260] BTRFS info (device loop3): use lzo compression, level 1 [ 256.768810][T10260] BTRFS info (device loop3): max_inline set to 4096 [ 256.770603][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 256.770639][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.770657][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 256.770705][ T13] Call Trace: [ 256.770716][ T13] [ 256.770727][ T13] dump_stack_lvl+0xe8/0x150 [ 256.770771][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 256.770833][ T13] f2fs_write_end_bio+0x1211/0x16e0 [ 256.770874][ T13] ? blkg_put+0x22/0x240 [ 256.770936][ T13] __submit_merged_bio+0x258/0x6a0 [ 256.770964][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.770997][ T13] ? rcu_is_watching+0x16/0xb0 [ 256.771041][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 256.771098][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 256.771161][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771204][ T13] f2fs_write_data_pages+0x2a27/0x36f0 [ 256.771281][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.771332][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771363][ T13] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 256.771445][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771476][ T13] ? __lock_acquire+0x747/0x2de0 [ 256.771530][ T13] ? lock_acquire+0x115/0x350 [ 256.771568][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771614][ T13] ? unwind_next_frame+0x8f/0x2550 [ 256.771648][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 256.771687][ T13] do_writepages+0x338/0x560 [ 256.771727][ T13] ? __lock_acquire+0x747/0x2de0 [ 256.771763][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771799][ T13] ? reacquire_held_locks+0x117/0x1a0 [ 256.771836][ T13] ? writeback_sb_inodes+0x450/0x1b00 [ 256.771885][ T13] __writeback_single_inode+0x136/0x1220 [ 256.771931][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.771964][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 256.772012][ T13] writeback_sb_inodes+0x9de/0x1b00 [ 256.772052][ T13] ? __lock_acquire+0x747/0x2de0 [ 256.772101][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772144][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 256.772237][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772268][ T13] ? rcu_is_watching+0x16/0xb0 [ 256.772320][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772352][ T13] ? queue_io+0x2d3/0x470 [ 256.772397][ T13] wb_writeback+0x41c/0xad0 [ 256.772442][ T13] ? queue_io+0x2b1/0x470 [ 256.772490][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 256.772528][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.772590][ T13] wb_workfn+0x431/0x10f0 [ 256.772629][ T13] ? __lock_acquire+0x747/0x2de0 [ 256.772676][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 256.772721][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772753][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.772804][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772845][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772877][ T13] ? lock_acquire+0x115/0x350 [ 256.772909][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.772949][ T13] ? rcu_is_watching+0x16/0xb0 [ 256.772985][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.773018][ T13] ? process_scheduled_works+0x97a/0x1630 [ 256.773058][ T13] process_scheduled_works+0xc3d/0x1630 [ 256.773095][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.773165][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.773211][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.773243][ T13] ? assign_work+0x3cf/0x5d0 [ 256.773291][ T13] worker_thread+0xa47/0xfb0 [ 256.773364][ T13] kthread+0x38b/0x480 [ 256.773393][ T13] ? __pfx_worker_thread+0x10/0x10 [ 256.773434][ T13] ? __pfx_kthread+0x10/0x10 [ 256.773464][ T13] ret_from_fork+0x514/0xb70 [ 256.773496][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 256.773523][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.773555][ T13] ? __switch_to+0xc89/0x1420 [ 256.773599][ T13] ? __pfx_kthread+0x10/0x10 [ 256.773629][ T13] ret_from_fork_asm+0x1a/0x30 [ 256.773676][ T13] [ 256.922916][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.104200][ T5748] loop4: lost filesystem error report for type 5 error -108 [ 257.359862][ T5612] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.850820][T10319] loop7: detected capacity change from 0 to 1024 [ 257.866402][T10319] EXT4-fs: quotafile must be on filesystem root [ 257.877379][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1567'. [ 258.349932][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.599368][T10341] size and base must be multiples of 4 kiB [ 258.599394][T10341] CPU: 1 UID: 0 PID: 10341 Comm: syz.8.1572 Not tainted syzkaller #0 PREEMPT(full) [ 258.599425][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.599441][T10341] Call Trace: [ 258.599452][T10341] [ 258.599463][T10341] dump_stack_lvl+0xe8/0x150 [ 258.599512][T10341] mtrr_add+0xd5/0x100 [ 258.599555][T10341] mtrr_ioctl+0xc98/0x13b0 [ 258.599606][T10341] ? __pfx_mtrr_ioctl+0x10/0x10 [ 258.599669][T10341] ? __fget_files+0x2a/0x420 [ 258.599695][T10341] ? __fget_files+0x3a2/0x420 [ 258.599720][T10341] ? __fget_files+0x2a/0x420 [ 258.599752][T10341] ? __pfx_mtrr_ioctl+0x10/0x10 [ 258.599798][T10341] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 258.599838][T10341] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 258.599876][T10341] __se_sys_ioctl+0xfc/0x170 [ 258.599914][T10341] do_syscall_64+0x166/0x520 [ 258.599946][T10341] ? trace_irq_disable+0x3b/0x140 [ 258.599977][T10341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.600012][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.600039][T10341] RIP: 0033:0x7fadc119e559 [ 258.600063][T10341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.600086][T10341] RSP: 002b:00007fadc2026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.600115][T10341] RAX: ffffffffffffffda RBX: 00007fadc1425fa0 RCX: 00007fadc119e559 [ 258.600136][T10341] RDX: 0000200000000900 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 258.600154][T10341] RBP: 00007fadc12358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.600172][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.600188][T10341] R13: 00007fadc1426038 R14: 00007fadc1425fa0 R15: 00007ffe050c8b48 [ 258.600230][T10341] [ 258.897228][T10349] option changes via remount are deprecated (pid=10347 comm=syz.4.1576) [ 258.897256][T10349] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 259.244204][T10366] netlink: 'syz.5.1580': attribute type 6 has an invalid length. [ 259.244234][T10366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1580'. [ 259.274496][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.275190][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.746412][ T9890] veth0_vlan: entered promiscuous mode [ 259.771437][ T9890] veth1_vlan: entered promiscuous mode [ 259.902002][T10356] loop8: detected capacity change from 0 to 40427 [ 259.940859][T10356] F2FS-fs (loop8): invalid crc value [ 259.981809][ T9890] veth0_macvtap: entered promiscuous mode [ 260.039881][ T9890] veth1_macvtap: entered promiscuous mode [ 260.102183][T10386] loop7: detected capacity change from 0 to 512 [ 260.222482][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.268547][T10386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 260.281165][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.343043][T10390] i2c i2c-0: Failed to register i2c client si4713 at 0x63 (-16) [ 260.347582][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.349632][ T1162] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.349685][ T1162] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.349733][ T1162] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.358785][T10386] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1586: Unimplemented hash flags: 0x0001 [ 260.358818][T10386] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1586: Corrupt directory, running e2fsck is recommended [ 260.699392][T10356] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.747389][T10356] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 260.747424][T10356] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 260.747454][T10356] F2FS-fs (loop8): Start checkpoint disabled! [ 260.808394][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.808421][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.867436][T10356] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 260.872764][T10356] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 260.922612][T10386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.067960][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.067988][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.220246][T10403] loop5: detected capacity change from 0 to 1024 [ 261.234468][T10403] EXT4-fs: quotafile must be on filesystem root [ 261.295434][ T1093] kworker/u8:8: attempt to access beyond end of device [ 261.295434][ T1093] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.295519][ T1093] CPU: 1 UID: 0 PID: 1093 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 261.295549][ T1093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.295567][ T1093] Workqueue: writeback wb_workfn (flush-7:8) [ 261.295614][ T1093] Call Trace: [ 261.295624][ T1093] [ 261.295636][ T1093] dump_stack_lvl+0xe8/0x150 [ 261.295679][ T1093] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 261.295731][ T1093] f2fs_write_end_bio+0x1211/0x16e0 [ 261.295770][ T1093] ? blkg_put+0x22/0x240 [ 261.295841][ T1093] __submit_merged_bio+0x258/0x6a0 [ 261.295869][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.295906][ T1093] ? rcu_is_watching+0x16/0xb0 [ 261.295949][ T1093] __submit_merged_write_cond+0x3c9/0x4e0 [ 261.296006][ T1093] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 261.296068][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.296110][ T1093] f2fs_write_data_pages+0x2a27/0x36f0 [ 261.296143][ T1093] ? ktime_get+0x45/0x220 [ 261.296213][ T1093] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 261.296263][ T1093] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 261.296341][ T1093] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 261.296393][ T1093] ? __lock_acquire+0x747/0x2de0 [ 261.296433][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.296481][ T1093] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 261.296516][ T1093] do_writepages+0x338/0x560 [ 261.296594][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.296627][ T1093] ? reacquire_held_locks+0x117/0x1a0 [ 261.296662][ T1093] ? writeback_sb_inodes+0x450/0x1b00 [ 261.296712][ T1093] __writeback_single_inode+0x136/0x1220 [ 261.296762][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.296803][ T1093] ? do_raw_spin_unlock+0xf5/0x200 [ 261.296852][ T1093] writeback_sb_inodes+0x9de/0x1b00 [ 261.296892][ T1093] ? __lock_acquire+0x747/0x2de0 [ 261.296940][ T1093] ? lock_acquire+0x115/0x350 [ 261.296978][ T1093] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 261.297071][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297102][ T1093] ? rcu_is_watching+0x16/0xb0 [ 261.297138][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297170][ T1093] ? queue_io+0x2d3/0x470 [ 261.297215][ T1093] wb_writeback+0x41c/0xad0 [ 261.297260][ T1093] ? queue_io+0x2b1/0x470 [ 261.297308][ T1093] ? __pfx_wb_writeback+0x10/0x10 [ 261.297346][ T1093] ? do_raw_spin_lock+0x12b/0x2f0 [ 261.297408][ T1093] wb_workfn+0x431/0x10f0 [ 261.297466][ T1093] ? __pfx_wb_workfn+0x10/0x10 [ 261.297506][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297538][ T1093] ? trace_hrtimer_start+0x82/0x200 [ 261.297572][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297603][ T1093] ? do_raw_spin_lock+0x12b/0x2f0 [ 261.297655][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297687][ T1093] ? lock_acquire+0x115/0x350 [ 261.297719][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297759][ T1093] ? rcu_is_watching+0x16/0xb0 [ 261.297804][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.297838][ T1093] ? process_scheduled_works+0x97a/0x1630 [ 261.297896][ T1093] process_scheduled_works+0xc3d/0x1630 [ 261.297933][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.298003][ T1093] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.298048][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.298080][ T1093] ? assign_work+0x3cf/0x5d0 [ 261.298124][ T1093] worker_thread+0xa47/0xfb0 [ 261.298198][ T1093] kthread+0x38b/0x480 [ 261.298230][ T1093] ? __pfx_worker_thread+0x10/0x10 [ 261.298267][ T1093] ? __pfx_kthread+0x10/0x10 [ 261.298297][ T1093] ret_from_fork+0x514/0xb70 [ 261.298329][ T1093] ? __pfx_ret_from_fork+0x10/0x10 [ 261.298355][ T1093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 261.298387][ T1093] ? __switch_to+0xc89/0x1420 [ 261.298429][ T1093] ? __pfx_kthread+0x10/0x10 [ 261.298460][ T1093] ret_from_fork_asm+0x1a/0x30 [ 261.298514][ T1093] [ 261.320830][ T1093] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 261.720459][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1590'. [ 261.721854][T10413] netlink: 'syz.7.1590': attribute type 10 has an invalid length. [ 261.773017][T10413] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 261.786170][T10413] team0: Port device wlan0 added [ 261.790520][T10412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.011994][T10419] loop5: detected capacity change from 0 to 64 [ 262.065984][T10419] hfs: (loop5): extents (cnid 0x3) bitmap corrupted, forcing rdonly [ 262.066010][T10419] hfs: Run fsck.hfs to repair. [ 262.189154][T10424] netlink: 'syz.3.1593': attribute type 6 has an invalid length. [ 262.189180][T10424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1593'. [ 262.218866][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.219174][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.322481][T10426] cougar: G6 mapped to space [ 262.798390][T10449] loop5: detected capacity change from 0 to 512 [ 262.894790][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 262.960972][T10449] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1604: Unimplemented hash flags: 0x0001 [ 262.961013][T10449] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1604: Corrupt directory, running e2fsck is recommended [ 263.237424][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 263.240098][T10464] netlink: 'syz.4.1608': attribute type 10 has an invalid length. [ 263.277029][T10464] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 263.300662][T10449] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.333259][T10464] team0: Port device wlan0 added [ 263.340398][T10467] loop6: detected capacity change from 0 to 1024 [ 263.349738][T10467] EXT4-fs: quotafile must be on filesystem root [ 263.442668][T10461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.672701][ T31] audit: type=1400 audit(1792063236.358:390): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10469 comm="syz.5.1609" name="unknown" offset=16 [ 263.793360][T10451] loop8: detected capacity change from 0 to 32768 [ 264.146081][ T9346] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.310321][ T9346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 264.310380][ T9346] usb 4-1: New USB device found, idVendor=21b4, idProduct=00a1, bcdDevice= 0.40 [ 264.311765][ T9346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.311792][ T9346] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.311841][ T9346] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 264.311882][ T9346] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 264.311928][ T9346] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 264.311961][ T9346] usb 4-1: config 1 interface 1 has no altsetting 0 [ 264.402835][ T9346] usb 4-1: string descriptor 0 read error: -22 [ 264.402981][ T9346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.619631][T10498] loop6: detected capacity change from 0 to 4096 [ 264.679589][T10500] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.779940][T10503] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.119548][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1624'. [ 265.122498][T10515] netlink: 'syz.6.1624': attribute type 10 has an invalid length. [ 265.249027][T10515] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 265.283727][ T9346] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 265.295578][T10515] team0: Port device wlan0 added [ 265.330745][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.403446][T10519] loop7: detected capacity change from 0 to 512 [ 265.424791][ T9346] usb 4-1: USB disconnect, device number 15 [ 265.426087][T10519] EXT4-fs: Ignoring removed i_version option [ 265.439401][T10519] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.521841][T10519] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 265.522064][T10519] Quota error (device loop7): write_blk: dquota write failed [ 265.522084][T10519] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 265.522187][T10519] Quota error (device loop7): write_blk: dquota write failed [ 265.522301][T10519] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 265.522350][T10519] EXT4-fs error (device loop7): ext4_acquire_dquot:7070: comm syz.7.1628: Failed to acquire dquot type 1 [ 265.522378][T10519] loop7: lost filesystem error report for type 5 error -28 [ 265.524577][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 265.524599][ C0] EXT4-fs (loop7): initial error at time 1792063238: ext4_mb_generate_buddy:1317 [ 265.524625][ C0] EXT4-fs (loop7): last error at time 1792063238: ext4_acquire_dquot:7070 [ 265.580903][T10529] loop6: detected capacity change from 0 to 4096 [ 265.619784][T10519] EXT4-fs (loop7): 1 truncate cleaned up [ 265.630581][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.662139][T10529] ntfs3(loop6): ino=0, mi_enum_attr [ 265.702244][T10519] EXT4-fs error (device loop7): __ext4_remount:6873: comm syz.7.1628: Abort forced by user [ 265.711784][T10519] EXT4-fs (loop7): Remounting filesystem read-only [ 265.711807][T10519] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.762155][T10529] ntfs3(loop6): ino=0, mi_enum_attr [ 265.762189][T10529] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 265.767156][T10529] ntfs3(loop6): ino=0, mi_enum_attr [ 266.017896][ T7611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.099831][T10529] ntfs3(loop6): failed to convert "0080" to cp852 [ 266.129263][T10529] ntfs3(loop6): failed to convert name for inode 1e. [ 266.133638][T10529] ntfs3(loop6): ino=1f, mi_enum_attr [ 266.410691][T10541] loop5: detected capacity change from 0 to 4096 [ 266.557851][T10549] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.740980][T10554] loop8: detected capacity change from 0 to 1024 [ 266.759018][T10554] EXT4-fs: quotafile must be on filesystem root [ 267.128238][T10540] loop7: detected capacity change from 0 to 32768 [ 267.176737][T10540] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.389400][T10540] XFS (loop7): Ending clean mount [ 267.486857][T10573] netlink: 'syz.8.1644': attribute type 6 has an invalid length. [ 267.486883][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1644'. [ 267.488555][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.489196][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.597737][ T7611] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.838282][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1646'. [ 267.846229][T10579] netlink: 'syz.8.1646': attribute type 10 has an invalid length. [ 267.980379][T10579] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 268.002410][T10579] team0: Port device wlan0 added [ 268.028296][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.258206][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1666'. [ 268.262786][T10589] netlink: 'syz.7.1666': attribute type 10 has an invalid length. [ 268.304753][T10588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.368904][T10591] loop8: detected capacity change from 0 to 512 [ 268.374760][T10591] EXT4-fs: Ignoring removed i_version option [ 268.383072][T10591] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.438980][T10591] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 268.445796][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 268.445824][ C0] EXT4-fs (loop8): initial error at time 1792063241: ext4_mb_generate_buddy:1317 [ 268.445849][ C0] EXT4-fs (loop8): last error at time 1792063241: ext4_mb_generate_buddy:1317 [ 268.463379][T10591] Quota error (device loop8): write_blk: dquota write failed [ 268.463405][T10591] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 268.463511][T10591] Quota error (device loop8): write_blk: dquota write failed [ 268.463622][T10591] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 268.463669][T10591] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.1650: Failed to acquire dquot type 1 [ 268.463697][T10591] loop8: lost filesystem error report for type 5 error -28 [ 268.473920][T10591] EXT4-fs (loop8): 1 truncate cleaned up [ 268.486356][T10591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.633159][T10591] EXT4-fs error (device loop8): __ext4_remount:6873: comm syz.8.1650: Abort forced by user [ 268.639303][T10591] EXT4-fs (loop8): Remounting filesystem read-only [ 268.639323][T10591] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 269.424916][T10609] loop6: detected capacity change from 0 to 256 [ 269.482799][T10609] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 269.618474][T10604] loop5: detected capacity change from 0 to 131072 [ 269.622610][T10604] F2FS-fs (loop5): Test dummy encryption mode enabled [ 269.698601][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.755517][T10604] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 269.786328][T10604] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 270.079275][T10614] loop8: detected capacity change from 0 to 1024 [ 270.086590][T10614] EXT4-fs: quotafile must be on filesystem root [ 270.124327][T10616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.141185][T10606] loop7: detected capacity change from 0 to 32768 [ 270.168379][T10606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1656 (10606) [ 270.198166][T10606] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.198205][T10606] BTRFS info (device loop7): using crc32c checksum algorithm [ 270.438627][T10633] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 270.438667][T10633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.507994][T10606] BTRFS info (device loop7): enabling ssd optimizations [ 270.508028][T10606] BTRFS info (device loop7): turning on flush-on-commit [ 270.508049][T10606] BTRFS info (device loop7): enabling free space tree [ 270.508069][T10606] BTRFS info (device loop7): enabling auto defrag [ 270.508091][T10606] BTRFS info (device loop7): use lzo compression, level 1 [ 270.508116][T10606] BTRFS info (device loop7): max_inline set to 4096 [ 270.660774][T10606] BTRFS critical (device loop7 state E): emergency shutdown [ 270.874778][ T7611] BTRFS info (device loop7 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.585204][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 271.790561][T10669] loop6: detected capacity change from 0 to 64 [ 271.867444][T10669] hfs: (loop6): extents (cnid 0x3) bitmap corrupted, forcing rdonly [ 271.867470][T10669] hfs: Run fsck.hfs to repair. [ 272.245487][T10673] loop6: detected capacity change from 0 to 1024 [ 272.273723][T10673] hfsplus: failed to load extents file [ 272.544445][T10666] loop7: detected capacity change from 0 to 131072 [ 272.546152][ T9346] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 272.549860][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 272.551033][ T9] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 272.559640][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.559675][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.559702][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.559734][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.559772][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.566282][ T9] usb 4-1: config 0 descriptor?? [ 272.580332][T10667] loop5: detected capacity change from 0 to 1024 [ 272.581713][T10667] EXT4-fs: quotafile must be on filesystem root [ 272.607929][T10666] F2FS-fs (loop7): Test dummy encryption mode enabled [ 272.737206][T10666] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 272.752612][ T9346] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 272.754911][T10666] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955 [ 272.757799][ T9346] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.757834][ T9346] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.757890][ T9346] usb 9-1: config 0 interface 0 has no altsetting 0 [ 272.757956][ T9346] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.770604][ T9346] usb 9-1: config 0 descriptor?? [ 273.205139][ T9] hid-multitouch 0003:0EEF:72C4.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 273.223010][ T9346] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 273.223043][ T9346] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 273.332663][ T31] audit: type=1400 audit(1792063253.017:391): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=10683 comm="syz.6.1684" name="p" offset=33 [ 273.401249][ T9] usb 4-1: USB disconnect, device number 16 [ 273.429616][ T9346] hid-multitouch 0003:0EEF:72C4.0007: hiddev1,hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 273.674392][ T9346] usb 9-1: USB disconnect, device number 3 [ 273.867544][T10690] fido_id[10690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 274.153618][T10699] loop3: detected capacity change from 0 to 164 [ 274.258363][T10701] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.530909][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 274.694470][T10711] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 274.728728][T10711] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 275.073531][T10713] loop5: detected capacity change from 0 to 32768 [ 275.124895][T10713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1699 (10713) [ 275.164588][T10713] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.164628][T10713] BTRFS info (device loop5): using crc32c checksum algorithm [ 275.342446][T10713] BTRFS info (device loop5): setting nodatasum [ 275.342477][T10713] BTRFS info (device loop5): allowing degraded mounts [ 275.342497][T10713] BTRFS info (device loop5): enabling ssd optimizations [ 275.342519][T10713] BTRFS info (device loop5): turning on async discard [ 275.342539][T10713] BTRFS info (device loop5): enabling free space tree [ 275.411586][T10713] BTRFS critical (device loop5 state E): emergency shutdown [ 275.522720][T10747] Set syz1 is full, maxelem 2 reached [ 275.542504][T10752] block nbd1: server does not support multiple connections per device. [ 275.557561][T10752] block nbd1: shutting down sockets [ 275.627611][ T5613] BTRFS info (device loop5 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.967870][ T9346] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 276.140431][ T9346] usb 4-1: Using ep0 maxpacket: 32 [ 276.143915][ T9346] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.148218][ T9346] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 276.148247][ T9346] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.148272][ T9346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.148297][ T9346] usb 4-1: config 1 has no interface number 0 [ 276.148350][ T9346] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.148381][ T9346] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.148428][ T9346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.246216][ T9346] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 276.342260][T10769] openvswitch: netlink: IPv4 tunnel dst address is zero [ 276.342315][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.469412][ T9346] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 276.590802][T10776] loop8: detected capacity change from 0 to 1024 [ 276.764828][T10780] loop7: detected capacity change from 0 to 128 [ 276.867372][ T31] audit: type=1800 audit(1792063256.557:392): pid=10780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1685" name="bus" dev="loop7" ino=1048789 res=0 errno=0 [ 276.938341][ T9346] usb 4-1: USB disconnect, device number 17 [ 276.938680][T10780] Invalid ELF header magic: != ELF [ 276.991944][ T9346] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 277.217560][T10764] loop6: detected capacity change from 0 to 32768 [ 277.282968][T10764] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 277.813914][ T9890] ocfs2: Unmounting device (7,6) on (node local) [ 277.814041][T10789] loop7: detected capacity change from 0 to 32768 [ 277.847845][T10789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1725 (10789) [ 277.884039][T10789] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.884078][T10789] BTRFS info (device loop7): using crc32c checksum algorithm [ 278.048125][T10789] BTRFS info (device loop7): setting nodatasum [ 278.048155][T10789] BTRFS info (device loop7): allowing degraded mounts [ 278.048176][T10789] BTRFS info (device loop7): enabling ssd optimizations [ 278.048197][T10789] BTRFS info (device loop7): turning on async discard [ 278.048222][T10789] BTRFS info (device loop7): enabling free space tree [ 278.111438][T10789] BTRFS critical (device loop7 state E): emergency shutdown [ 278.281443][ T7611] BTRFS info (device loop7 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.945469][ T1552] hid-generic 0005:16C0:05DF.0008: unknown main item tag 0x0 [ 278.968133][ T1552] hid-generic 0005:16C0:05DF.0008: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 280.379035][T10856] loop6: detected capacity change from 0 to 131072 [ 280.382973][T10856] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 280.383003][T10856] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 280.401207][T10856] F2FS-fs (loop6): invalid crc value [ 280.510782][T10856] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 280.526305][T10856] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 280.526337][T10856] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 280.841007][T10873] loop8: detected capacity change from 0 to 4096 [ 280.943400][T10879] overlayfs: workdir and upperdir must reside under the same mount [ 280.950377][T10875] loop4: detected capacity change from 0 to 2048 [ 280.962181][T10880] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.056565][T10875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.056702][T10875] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.174964][T10875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1754: bg 0: block 112: padding at end of block bitmap is not set [ 281.180352][T10875] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -28 [ 281.338130][ T1552] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.420924][T10892] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1753'. [ 281.438462][ T59] IPVS: starting estimator thread 0... [ 281.455015][T10852] loop3: detected capacity change from 0 to 32768 [ 281.477045][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.494679][ T1552] usb 6-1: Using ep0 maxpacket: 8 [ 281.509875][ T1552] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 281.520033][ T1552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.542948][ T1552] pvrusb2: Hardware description: Terratec Grabster AV400 [ 281.542969][ T1552] pvrusb2: ********** [ 281.542978][ T1552] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 281.542993][ T1552] pvrusb2: Important functionality might not be entirely working. [ 281.543005][ T1552] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 281.543019][ T1552] pvrusb2: ********** [ 281.545985][T10893] IPVS: using max 24 ests per chain, 57600 per kthread [ 281.621279][T10852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 281.761441][ T2358] pvrusb2: Invalid write control endpoint [ 281.998507][T10885] pvrusb2: Invalid write control endpoint [ 281.999655][ T1552] usb 6-1: USB disconnect, device number 12 [ 282.042534][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 282.067293][ T2358] pvrusb2: Invalid write control endpoint [ 282.067311][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 282.067329][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 282.067339][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 282.067352][ T2358] pvrusb2: Device being rendered inoperable [ 282.069592][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 282.069643][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 282.070566][ T2358] pvrusb2: Attached sub-driver cx25840 [ 282.070579][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 282.070592][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 282.494779][ T5748] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 282.647201][ T5748] usb 7-1: unable to get BOS descriptor or descriptor too short [ 282.647742][ T5748] usb 7-1: not running at top speed; connect to a high speed hub [ 282.647780][ T5748] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 282.649425][ T5748] usb 7-1: config index 0 descriptor too short (expected 61365, got 181) [ 282.649456][ T5748] usb 7-1: config 1 has an invalid interface number: 1 but max is 0 [ 282.649480][ T5748] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.649503][ T5748] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 282.651911][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 282.651940][ T5748] usb 7-1: Product: syz [ 282.651958][ T5748] usb 7-1: Manufacturer: syz [ 282.798175][ T5748] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 282.798252][ T5748] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 282.971223][ T5748] usb 7-1: USB disconnect, device number 5 [ 283.208833][T10922] loop5: detected capacity change from 0 to 4096 [ 283.267997][T10922] ntfs3(loop5): ino=0, mi_enum_attr [ 283.311918][T10922] ntfs3(loop5): ino=0, mi_enum_attr [ 283.311952][T10922] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 283.333153][T10922] ntfs3(loop5): ino=0, mi_enum_attr [ 283.420405][T10928] program syz.3.1771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.474107][T10922] ntfs3(loop5): failed to convert "0080" to cp852 [ 283.482936][T10922] ntfs3(loop5): failed to convert name for inode 1e. [ 283.484192][T10922] ntfs3(loop5): ino=1f, mi_enum_attr [ 283.659628][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659650][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659665][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659680][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659695][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659712][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.659726][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 283.660857][T10932] ALSA: mixer_oss: invalid OSS volume '' [ 284.021448][T10949] kAFS: bad VL server IP address [ 284.169458][T10958] netlink: Only one type of NAT may be specified [ 284.169508][T10958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.354189][T10964] loop6: detected capacity change from 0 to 128 [ 284.604476][T10970] loop7: detected capacity change from 0 to 4096 [ 284.623569][T10970] ntfs3(loop7): ino=0, mi_enum_attr [ 284.663905][T10970] ntfs3(loop7): ino=0, mi_enum_attr [ 284.663957][T10970] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 284.693580][T10973] loop5: detected capacity change from 0 to 4096 [ 284.719889][T10970] ntfs3(loop7): ino=0, mi_enum_attr [ 284.897207][T10973] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 284.990377][T10970] ntfs3(loop7): failed to convert "0080" to cp852 [ 285.000895][T10970] ntfs3(loop7): failed to convert name for inode 1e. [ 285.002904][T10970] ntfs3(loop7): ino=1f, mi_enum_attr [ 285.424700][T10993] db_root: cannot be changed because it's in use [ 285.607495][T11002] loop7: detected capacity change from 0 to 8 [ 285.660047][T11003] random: crng reseeded on system resumption [ 285.817411][T11002] SQUASHFS error: Failed to read block 0x8f: -5 [ 285.820777][ T31] audit: type=1800 audit(1792063265.507:393): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1806" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 286.035518][ T5748] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.041164][T11017] loop7: detected capacity change from 0 to 2048 [ 286.112632][T11017] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 286.122632][T11017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.190514][ T5748] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 286.191748][ T5748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 286.191799][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.301367][T11025] program syz.4.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.450705][ T5748] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 286.498717][ T5748] wwan wwan0: port wwan0qmi0 attached [ 287.020415][T11027] loop6: detected capacity change from 0 to 40427 [ 287.022620][T11027] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 287.022645][T11027] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 287.202233][T11027] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.223235][T11027] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 287.223266][T11027] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 287.322334][T11029] loop4: detected capacity change from 0 to 32768 [ 287.409462][T11029] JBD2: Ignoring recovery information on journal [ 287.567175][T11029] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.819920][ T5614] ocfs2: Unmounting device (7,4) on (node local) [ 287.930664][ T5621] Bluetooth: hci5: link tx timeout [ 287.930688][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938117][ T5621] Bluetooth: hci5: link tx timeout [ 287.938136][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938260][ T5621] Bluetooth: hci5: link tx timeout [ 287.938274][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938389][ T5621] Bluetooth: hci5: link tx timeout [ 287.938402][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938536][ T5621] Bluetooth: hci5: link tx timeout [ 287.938550][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938664][ T5621] Bluetooth: hci5: link tx timeout [ 287.938678][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938790][ T5621] Bluetooth: hci5: link tx timeout [ 287.938804][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.938924][ T5621] Bluetooth: hci5: link tx timeout [ 287.938937][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.939050][ T5621] Bluetooth: hci5: link tx timeout [ 287.939063][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.939181][ T5621] Bluetooth: hci5: link tx timeout [ 287.939195][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.939306][ T5621] Bluetooth: hci5: link tx timeout [ 287.939320][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.939434][ T5621] Bluetooth: hci5: link tx timeout [ 287.939447][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.941093][ T5621] Bluetooth: hci5: link tx timeout [ 287.941109][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.941223][ T5621] Bluetooth: hci5: link tx timeout [ 287.941237][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.941353][ T5621] Bluetooth: hci5: link tx timeout [ 287.941367][ T5621] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.811266][T11058] loop4: detected capacity change from 0 to 32768 [ 288.879768][ T5748] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, fe:4b:1b:47:7d:97 [ 288.910569][ T5748] usb 4-1: USB disconnect, device number 18 [ 288.910943][T11058] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 288.946095][ T5748] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 289.080524][ T5748] wwan wwan0: port wwan0qmi0 disconnected [ 289.269930][T11063] loop7: detected capacity change from 0 to 40427 [ 289.295300][T11063] F2FS-fs (loop7): invalid crc value [ 289.510100][T11078] loop6: detected capacity change from 0 to 256 [ 289.521101][T11063] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 289.522301][T11078] exfat: Deprecated parameter 'utf8' [ 289.548898][T11063] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 289.548932][T11063] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 289.548961][T11063] F2FS-fs (loop7): Start checkpoint disabled! [ 289.578009][T11078] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 289.712596][T11063] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 289.724007][T11063] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 289.842963][T11063] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=81000000, run fsck to fix. [ 289.891256][ T5614] ocfs2: Unmounting device (7,4) on (node local) [ 289.974915][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 290.030413][T11085] loop3: detected capacity change from 0 to 8192 [ 290.060738][T11085] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.239026][ T1107] kworker/u8:9: attempt to access beyond end of device [ 290.239026][ T1107] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.239108][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.239140][ T1107] Tainted: [L]=SOFTLOCKUP [ 290.239150][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.239165][ T1107] Workqueue: writeback wb_workfn (flush-7:7) [ 290.239207][ T1107] Call Trace: [ 290.239217][ T1107] [ 290.239228][ T1107] dump_stack_lvl+0xe8/0x150 [ 290.239269][ T1107] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 290.239323][ T1107] f2fs_write_end_bio+0x1211/0x16e0 [ 290.239360][ T1107] ? blkg_put+0x22/0x240 [ 290.239417][ T1107] __submit_merged_bio+0x258/0x6a0 [ 290.239442][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.239471][ T1107] ? rcu_is_watching+0x16/0xb0 [ 290.239508][ T1107] __submit_merged_write_cond+0x3c9/0x4e0 [ 290.239557][ T1107] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 290.239612][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.239652][ T1107] f2fs_write_data_pages+0x2a27/0x36f0 [ 290.239721][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.239769][ T1107] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 290.239849][ T1107] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 290.239898][ T1107] ? __lock_acquire+0x747/0x2de0 [ 290.239935][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.239974][ T1107] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 290.240014][ T1107] ? f2fs_update_inode+0x1394/0x25c0 [ 290.240053][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.240088][ T1107] do_writepages+0x338/0x560 [ 290.240129][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.240160][ T1107] ? reacquire_held_locks+0x117/0x1a0 [ 290.240195][ T1107] ? writeback_sb_inodes+0x450/0x1b00 [ 290.240243][ T1107] __writeback_single_inode+0x136/0x1220 [ 290.240284][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.240313][ T1107] ? do_raw_spin_unlock+0xf5/0x200 [ 290.240357][ T1107] writeback_sb_inodes+0x9de/0x1b00 [ 290.240394][ T1107] ? __lock_acquire+0x747/0x2de0 [ 290.240439][ T1107] ? lock_acquire+0x115/0x350 [ 290.240476][ T1107] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 290.240562][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.240595][ T1107] ? rcu_is_watching+0x16/0xb0 [ 290.240626][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.240653][ T1107] ? queue_io+0x2d3/0x470 [ 290.240694][ T1107] wb_writeback+0x41c/0xad0 [ 290.240734][ T1107] ? queue_io+0x2b1/0x470 [ 290.240778][ T1107] ? __pfx_wb_writeback+0x10/0x10 [ 290.240814][ T1107] ? do_raw_spin_lock+0x12b/0x2f0 [ 290.240878][ T1107] wb_workfn+0x431/0x10f0 [ 290.240934][ T1107] ? __pfx_wb_workfn+0x10/0x10 [ 290.240971][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241001][ T1107] ? trace_hrtimer_start+0x82/0x200 [ 290.241033][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241065][ T1107] ? do_raw_spin_lock+0x12b/0x2f0 [ 290.241116][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241145][ T1107] ? lock_acquire+0x115/0x350 [ 290.241177][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241217][ T1107] ? rcu_is_watching+0x16/0xb0 [ 290.241253][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241287][ T1107] ? process_scheduled_works+0x97a/0x1630 [ 290.241326][ T1107] process_scheduled_works+0xc3d/0x1630 [ 290.241364][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241435][ T1107] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.241481][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241512][ T1107] ? assign_work+0x3cf/0x5d0 [ 290.241557][ T1107] worker_thread+0xa47/0xfb0 [ 290.241599][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241643][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241675][ T1107] ? __kthread_parkme+0x71/0x1f0 [ 290.241730][ T1107] kthread+0x38b/0x480 [ 290.241758][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 290.241795][ T1107] ? __pfx_kthread+0x10/0x10 [ 290.241825][ T1107] ret_from_fork+0x514/0xb70 [ 290.241862][ T1107] ? __pfx_ret_from_fork+0x10/0x10 [ 290.241889][ T1107] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.241920][ T1107] ? __switch_to+0xc89/0x1420 [ 290.241965][ T1107] ? __pfx_kthread+0x10/0x10 [ 290.241995][ T1107] ret_from_fork_asm+0x1a/0x30 [ 290.242042][ T1107] [ 290.298789][ T1107] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 291.304825][ T5748] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 291.456827][ T5748] usb 6-1: Using ep0 maxpacket: 16 [ 291.457559][ T5748] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 291.458754][ T5748] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 291.460828][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.460857][ T5748] usb 6-1: Product: syz [ 291.460875][ T5748] usb 6-1: Manufacturer: syz [ 291.460894][ T5748] usb 6-1: SerialNumber: syz [ 291.525034][ T5748] usb 6-1: config 0 descriptor?? [ 291.560313][ T5748] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 291.563279][ T5748] usb 6-1: Detected FT232R [ 291.741622][ T5748] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 291.945378][T11118] loop8: detected capacity change from 0 to 32768 [ 292.031461][T11118] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 292.100237][ T5748] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 292.119670][ T5748] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 292.159440][ T5748] usb 6-1: USB disconnect, device number 13 [ 292.190344][ T5748] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 292.208816][ T5748] ftdi_sio 6-1:0.0: device disconnected [ 292.631921][T11135] loop7: detected capacity change from 0 to 512 [ 292.660041][T11135] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 292.660064][T11135] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 292.708685][T11135] EXT4-fs (loop7): 1 truncate cleaned up [ 292.714304][T11135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.716336][ T8866] ocfs2: Unmounting device (7,8) on (node local) [ 292.953909][ T7611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.117921][T11143] loop8: detected capacity change from 0 to 512 [ 293.140675][T11143] EXT4-fs (loop8): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 293.140710][T11143] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.140728][T11143] EXT4-fs (loop8): The Hurd can't support 64-bit file systems [ 293.302428][ T31] audit: type=1107 audit(1792063272.987:394): pid=11148 uid=0 auid=4 ses=1 subj=unconfined msg='' [ 293.415354][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.952258][ T31] audit: type=1326 audit(1792063273.637:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.5.1873" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeb179e559 code=0x0 [ 294.221774][T11195] tun0: tun_chr_ioctl cmd 1074025677 [ 294.221920][T11195] tun0: linktype set to 778 [ 294.499590][T11207] macvlan0: entered promiscuous mode [ 294.501795][T11207] netlink: 'syz.7.1885': attribute type 1 has an invalid length. [ 294.501816][T11207] netlink: 'syz.7.1885': attribute type 2 has an invalid length. [ 294.914895][T11209] loop4: detected capacity change from 0 to 32768 [ 294.929140][T11209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1887 (11209) [ 294.960690][T11209] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.960731][T11209] BTRFS info (device loop4): using crc32c checksum algorithm [ 295.017988][T11228] loop7: detected capacity change from 0 to 164 [ 295.196944][T11209] BTRFS info (device loop4): enabling ssd optimizations [ 295.196977][T11209] BTRFS info (device loop4): turning on flush-on-commit [ 295.196999][T11209] BTRFS info (device loop4): enabling free space tree [ 295.197019][T11209] BTRFS info (device loop4): enabling auto defrag [ 295.197040][T11209] BTRFS info (device loop4): use lzo compression, level 1 [ 295.197065][T11209] BTRFS info (device loop4): max_inline set to 4096 [ 295.409955][T11244] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1898'. [ 295.467936][T11245] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.1898'. [ 295.738910][T11244] eql: entered promiscuous mode [ 295.788262][T11245] 0ªX¹¦Dö»: renamed from eql [ 295.821543][T11245] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 295.821586][T11245] 0ªX¹¦Dö»: left promiscuous mode [ 295.821604][T11245] 0ªX¹¦Dö»: entered allmulticast mode [ 295.988669][ T5614] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.256445][T11259] loop8: detected capacity change from 0 to 512 [ 296.267403][T11259] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 296.267422][T11259] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 296.283146][T11259] EXT4-fs (loop8): 1 truncate cleaned up [ 296.285490][T11259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.392001][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1904'. [ 296.561839][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.168977][T11273] loop7: detected capacity change from 0 to 32768 [ 297.213265][T11273] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 297.436379][ T7611] ocfs2: Unmounting device (7,7) on (node local) [ 297.742271][T11296] phram: not enough arguments [ 297.752416][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 298.138504][T11305] smpboot: CPU 1 is now offline [ 298.687200][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1930'. [ 298.724241][T11302] loop7: detected capacity change from 0 to 32768 [ 298.794266][T11302] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 299.452323][ T7611] ocfs2: Unmounting device (7,7) on (node local) [ 299.718008][T11341] loop3: detected capacity change from 0 to 1024 [ 299.900828][T11345] random: crng reseeded on system resumption [ 299.926810][T11341] hfsplus: xattr search failed [ 299.928796][T11348] loop8: detected capacity change from 0 to 128 [ 299.981925][T11348] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.001103][T11348] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.063408][T11346] hfsplus: xattr search failed [ 300.079265][T11348] fscrypt (loop8, inode 12): Mutually exclusive encryption flags (0x1e) [ 300.199073][ T8866] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.408527][ T31] audit: type=1326 audit(1792063280.097:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.409027][ T31] audit: type=1326 audit(1792063280.097:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.409771][ T31] audit: type=1326 audit(1792063280.097:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.414133][ T31] audit: type=1326 audit(1792063280.097:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.549921][ T31] audit: type=1326 audit(1792063280.237:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.549971][ T31] audit: type=1326 audit(1792063280.237:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.550010][ T31] audit: type=1326 audit(1792063280.237:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.8.1943" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc119e559 code=0x7ffc0000 [ 300.845796][T11361] loop3: detected capacity change from 0 to 128 [ 301.388677][T11373] loop8: detected capacity change from 0 to 136 [ 302.051735][T11387] random: crng reseeded on system resumption [ 302.140746][T11384] bond1 (unregistering): Released all slaves [ 302.598620][T11374] loop3: detected capacity change from 0 to 32768 [ 302.701042][T11374] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 303.059968][T11410] program syz.4.1966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.183577][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 303.284676][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 303.434847][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 303.435674][ T9] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 303.439624][ T9] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.439651][ T9] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.439671][ T9] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.439693][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 303.439726][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.516527][ T9] usb 9-1: config 0 descriptor?? [ 304.091363][ T9] hid-multitouch 0003:0EEF:72C4.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 304.115847][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 304.278432][ T9] usb 9-1: USB disconnect, device number 4 [ 304.326182][T11429] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 304.358030][T11431] loop7: detected capacity change from 0 to 128 [ 304.384630][T11431] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.404165][T11431] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.609982][T11426] fido_id[11426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 304.792030][ T32] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 305.236861][T11442] CUSE: info not properly terminated [ 305.354052][T11429] rtrs_client L2646: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 305.520342][ T31] audit: type=1326 audit(1792063285.207:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.520451][ T31] audit: type=1326 audit(1792063285.207:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.522648][ T31] audit: type=1326 audit(1792063285.207:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.522692][ T31] audit: type=1326 audit(1792063285.207:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.553774][ T31] audit: type=1326 audit(1792063285.207:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.553821][ T31] audit: type=1326 audit(1792063285.217:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.553860][ T31] audit: type=1326 audit(1792063285.217:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.719032][ T31] audit: type=1326 audit(1792063285.377:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.719080][ T31] audit: type=1326 audit(1792063285.377:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 305.938834][T11434] loop4: detected capacity change from 0 to 32768 [ 305.944086][T11434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1977 (11434) [ 306.002345][T11434] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.002374][T11434] BTRFS info (device loop4): using crc32c checksum algorithm [ 306.157089][T11434] BTRFS info (device loop4): setting nodatasum [ 306.157113][T11434] BTRFS info (device loop4): setting nodatacow [ 306.157127][T11434] BTRFS info (device loop4): disabling tree log [ 306.157142][T11434] BTRFS info (device loop4): turning on async discard [ 306.157156][T11434] BTRFS info (device loop4): enabling free space tree [ 306.157172][T11434] BTRFS info (device loop4): max_inline set to 0 [ 306.817349][T11484] loop6: detected capacity change from 0 to 128 [ 306.961504][T11484] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 306.961551][T11484] hpfs: filesystem error: improperly stopped [ 306.961565][T11484] hpfs: You really don't want any checks? You are crazy... [ 306.961993][T11484] hpfs: hpfs_map_sector(): read error [ 306.962003][T11484] hpfs: code page support is disabled [ 306.962081][T11484] hpfs: hpfs_map_4sectors(): unaligned read [ 306.962134][T11484] hpfs: hpfs_map_4sectors(): unaligned read [ 306.962143][T11484] hpfs: filesystem error: unable to find root dir [ 308.025430][ T5756] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 308.079842][ T31] audit: type=1400 audit(1792063287.767:412): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=11508 comm="syz.8.1997" name="foo" offset=71 [ 308.134189][ T5614] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.186293][ T5756] usb 7-1: Using ep0 maxpacket: 16 [ 308.186949][ T5756] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 308.188171][ T5756] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.188196][ T5756] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.188220][ T5756] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.188242][ T5756] usb 7-1: config 0 interface 0 has no altsetting 0 [ 308.188270][ T5756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.275880][ T5756] usb 7-1: config 0 descriptor?? [ 308.913679][T11522] loop8: detected capacity change from 0 to 1 [ 308.936822][T11522] Dev loop8: unable to read RDB block 1 [ 308.936849][T11522] loop8: unable to read partition table [ 308.937017][T11522] loop8: partition table beyond EOD, truncated [ 308.937045][T11522] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 308.981346][ T5756] hid-multitouch 0003:0EEF:72C4.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 309.059541][ T5756] usb 7-1: USB disconnect, device number 6 [ 309.506330][T11527] Bluetooth: hci0: load_link_keys: too big key_count value 25711 [ 309.570294][T11523] fido_id[11523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 309.612305][T11532] loop7: detected capacity change from 0 to 1024 [ 310.161371][T11545] program syz.8.2010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.440331][T11550] cougar: G6 mapped to space [ 310.738425][T11559] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 310.738519][T11559] syzkaller0: linktype set to 769 [ 310.943838][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 310.943856][ T31] audit: type=1400 audit(1792063290.627:414): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=11564 comm="syz.8.2020" name="//o" offset=35 [ 311.598889][T11555] loop3: detected capacity change from 0 to 32768 [ 311.720502][T11555] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.202746][T11599] scsi_dev_info_list_add_str: bad dev info string '‰' '' '' [ 312.921517][T11614] phram: illegal device length [ 312.954019][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 313.179907][T11621] loop8: detected capacity change from 0 to 128 [ 313.203158][T11621] FAT-fs (loop8): bogus number of reserved sectors [ 313.203176][T11621] FAT-fs (loop8): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 313.203191][T11621] FAT-fs (loop8): Can't find a valid FAT filesystem [ 313.413084][T11625] loop4: detected capacity change from 0 to 512 [ 313.477337][T11625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.486745][T11625] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.988056][T11633] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 313.988082][T11633] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 313.988109][T11633] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 313.988127][T11633] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 313.988138][T11633] page dumped because: unmovable page [ 313.988163][T11633] page_owner info is not present (never set?) [ 314.171641][T11640] loop6: detected capacity change from 0 to 2048 [ 314.226374][T11640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.247932][T11640] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.421473][T11646] loop5: detected capacity change from 0 to 2048 [ 314.468821][T11646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.602410][T11651] loop8: detected capacity change from 0 to 1024 [ 314.640985][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.742317][T11651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.085641][ T8866] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.181545][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.181596][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.301333][ T1093] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 315.340775][ T1093] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 315.340804][ T1093] EXT4-fs (loop6): This should not happen!! Data will be lost [ 315.340804][ T1093] [ 315.464101][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.913177][T11649] loop3: detected capacity change from 0 to 32768 [ 316.028990][T11649] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 316.898528][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 317.292227][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2076'. [ 317.686660][T11713] loop3: detected capacity change from 0 to 16 [ 317.811993][T11713] erofs (device loop3): invalid ishare xattr prefix id 0 [ 317.856847][T11712] loop8: detected capacity change from 0 to 4096 [ 317.939237][T11712] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 318.051136][T11712] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 318.073695][T11712] ntfs3(loop8): mft corrupted [ 318.073771][T11712] ntfs3(loop8): Failed to load $Extend (-22). [ 318.073785][T11712] ntfs3(loop8): Failed to initialize $Extend. [ 318.298318][T11725] netlink: 'syz.3.2084': attribute type 3 has an invalid length. [ 318.298342][T11725] netlink: 'syz.3.2084': attribute type 3 has an invalid length. [ 318.347532][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2084'. [ 318.910308][T11736] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 318.912677][T11736] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 319.532891][T11749] loop3: detected capacity change from 0 to 64 [ 319.760235][T11753] loop4: detected capacity change from 0 to 1024 [ 319.842938][T11753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.843029][T11753] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.093921][T11727] loop5: detected capacity change from 0 to 32768 [ 320.162560][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 320.242722][T11727] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 321.132493][ T5613] ocfs2: Unmounting device (7,5) on (node local) [ 321.568369][T11792] jffs2: notice: (11792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 321.621826][T11792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 322.623060][T11814] tipc: Started in network mode [ 322.623089][T11814] tipc: Node identity ac1414aa, cluster identity 4711 [ 322.623954][T11814] tipc: New replicast peer: 172.20.20.187 [ 322.669696][T11814] tipc: Enabled bearer , priority 10 [ 323.273706][T11824] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.273816][T11824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.273826][T11824] IPv6: NLM_F_CREATE should be set when creating new route [ 323.304343][T11824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.446087][T11826] Format for deleting device is "id" (uint). [ 323.689725][T11816] loop5: detected capacity change from 0 to 32768 [ 323.746218][T11816] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 324.076133][ T5756] tipc: Node number set to 2886997162 [ 324.332922][ T5613] ocfs2: Unmounting device (7,5) on (node local) [ 324.573187][T11841] loop4: detected capacity change from 0 to 2048 [ 324.600499][T11841] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 324.719392][T11841] syz.4.2135: attempt to access beyond end of device [ 324.719392][T11841] loop4: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 324.748982][T11844] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.779038][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.035231][T11849] loop6: detected capacity change from 0 to 7 [ 325.501246][T11849] Dev loop6: unable to read RDB block 7 [ 325.501277][T11849] loop6: unable to read partition table [ 325.501457][T11849] loop6: partition table beyond EOD, truncated [ 325.501486][T11849] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 326.739636][T11889] openvswitch: netlink: Unknown key attributes 1 [ 327.412611][T11902] loop7: detected capacity change from 0 to 512 [ 327.624247][T11906] loop6: detected capacity change from 0 to 2048 [ 327.672067][ T9] hid-generic 0005:16C0:05DF.000B: unknown main item tag 0x0 [ 327.696112][T11906] loop6: p2 < > p3 < > [ 327.930875][ T9] hid-generic 0005:16C0:05DF.000B: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 329.416202][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 329.565587][T11937] rxe_eth0 speed is unknown, defaulting to 1000 [ 330.204315][T11965] loop5: detected capacity change from 0 to 512 [ 330.217604][T11965] EXT4-fs: Ignoring removed i_version option [ 330.235620][T11965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.245298][T11964] loop4: detected capacity change from 0 to 512 [ 330.273566][T11964] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 330.273585][T11964] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.333074][T11965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.333174][T11965] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.363253][T11964] EXT4-fs (loop4): 1 truncate cleaned up [ 330.381759][T11964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.625655][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.850261][T11978] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 330.902500][T11937] lo speed is unknown, defaulting to 1000 [ 331.284215][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.458737][T11989] [ 331.577891][ T31] audit: type=1326 audit(1792063311.267:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.5.2198" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 331.577946][ T31] audit: type=1326 audit(1792063311.267:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.5.2198" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 331.662543][ T31] audit: type=1326 audit(1792063311.347:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.5.2198" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 331.707043][ T31] audit: type=1326 audit(1792063311.397:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.5.2198" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 331.707093][ T31] audit: type=1326 audit(1792063311.397:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz.5.2198" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb179e559 code=0x7ffc0000 [ 331.863304][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863323][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863334][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863344][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863355][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863367][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.863377][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 331.864211][T11993] ALSA: mixer_oss: invalid OSS volume '' [ 332.043790][T11995] loop4: detected capacity change from 0 to 8 [ 332.138282][T11995] SQUASHFS error: Failed to read block 0x8f: -5 [ 332.138614][ T31] audit: type=1800 audit(1792063311.827:420): pid=11995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2200" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 332.266195][T11995] SQUASHFS error: Failed to read block 0x285: -5 [ 332.266215][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.266227][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.266267][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.266317][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.266328][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.266366][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.266517][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.266528][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.266566][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.266611][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.266622][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.266659][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.266703][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.266714][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.266751][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.270783][T11994] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.270798][T11994] SQUASHFS error: read_indexes: reading block [283:0] [ 332.271008][T11994] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.271021][T11994] SQUASHFS error: read_indexes: reading block [283:0] [ 332.271296][T11994] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.271308][T11994] SQUASHFS error: read_indexes: reading block [283:0] [ 332.277397][T11999] loop6: detected capacity change from 0 to 512 [ 332.463705][T11999] EXT4-fs (loop6): Test dummy encryption mode enabled [ 332.463723][T11999] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 332.463734][T11999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 332.508186][T12000] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.508204][T12000] SQUASHFS error: read_indexes: reading block [283:0] [ 332.508501][T12000] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.508513][T12000] SQUASHFS error: read_indexes: reading block [283:0] [ 332.508642][T12000] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.509308][T11999] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2202: bad orphan inode 131083 [ 332.509331][T11999] loop6: lost filesystem error report for type 5 error -117 [ 332.512820][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.512836][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.512875][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.512921][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.512932][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.512969][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.513016][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.513027][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.513070][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.513115][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.513126][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.513163][T11995] SQUASHFS error: Failed to read block 0x0: -5 [ 332.653053][T12000] SQUASHFS error: read_indexes: reading block [283:0] [ 332.653254][T12000] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.653268][T12000] SQUASHFS error: read_indexes: reading block [283:0] [ 332.716887][T11999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.745600][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.745619][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.745868][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.745881][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746030][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746042][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746187][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746199][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746335][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746376][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746518][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746529][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746665][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746677][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746817][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746829][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.746974][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.746986][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.911376][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.911401][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.911575][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.911589][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.911752][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.911766][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.911922][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.911936][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.912095][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.912109][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 332.912284][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 332.912299][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 333.037751][T11995] SQUASHFS error: Unable to read metadata cache entry [283] [ 333.037773][T11995] SQUASHFS error: read_indexes: reading block [283:0] [ 333.369702][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.626779][T12006] loop7: detected capacity change from 0 to 2048 [ 333.750384][T12006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.777473][T12006] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.966367][T12016] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.2205: bg 0: block 345: padding at end of block bitmap is not set [ 334.034417][T12016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 120 with error 117 [ 334.034450][T12016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 334.034450][T12016] [ 334.567732][ T1093] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 334.567764][ T1093] EXT4-fs (loop7): This should not happen!! Data will be lost [ 334.567764][ T1093] [ 334.567778][ T1093] EXT4-fs (loop7): Total free blocks count 0 [ 334.567790][ T1093] EXT4-fs (loop7): Free/Dirty block details [ 334.567817][ T1093] EXT4-fs (loop7): free_blocks=0 [ 334.567833][ T1093] EXT4-fs (loop7): dirty_blocks=16 [ 334.567846][ T1093] EXT4-fs (loop7): Block reservation details [ 335.472876][T12042] loop5: detected capacity change from 0 to 1 [ 335.787531][T12039] kAFS: unable to lookup cell 'syz0' [ 335.851106][T12028] loop4: detected capacity change from 0 to 32768 [ 335.907906][T12046] tap0: tun_chr_ioctl cmd 1074025677 [ 335.908088][T12046] tap0: linktype set to 805 [ 336.181150][T12028] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 336.351916][ T31] audit: type=1326 audit(1792063316.037:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12054 comm="syz.8.2224" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadc119e559 code=0x0 [ 337.028482][ T9346] libceph: connect (1)[c::]:6789 error -101 [ 337.028836][ T9346] libceph: mon0 (1)[c::]:6789 connect error [ 337.090636][ T9346] libceph: connect (1)[c::]:6789 error -101 [ 337.090773][ T9346] libceph: mon0 (1)[c::]:6789 connect error [ 337.115061][T12071] ceph: No mds server is up or the cluster is laggy [ 337.385834][ T5614] ocfs2: Unmounting device (7,4) on (node local) [ 337.756166][T12081] loop6: detected capacity change from 0 to 1024 [ 344.244555][ C0] sched: DL replenish lagged too much [ 362.279664][ T1107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 409.487969][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.499826][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.445104][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.456852][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.134566][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 455.141529][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6487/1:b..l P12085/1:b..l P12079/1:b..l [ 455.151895][ C0] rcu: (detected by 0, t=10502 jiffies, g=63897, q=767 ncpus=1) [ 455.159602][ C0] task:syz.8.2232 state:R running task stack:25720 pid:12079 tgid:12077 ppid:8866 task_flags:0x40044c flags:0x00080002 [ 455.173115][ C0] Call Trace: [ 455.176393][ C0] [ 455.179358][ C0] __schedule+0x17db/0x58f0 [ 455.183884][ C0] ? irqentry_exit+0x218/0x920 [ 455.188704][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 455.193944][ C0] ? irqentry_exit+0x218/0x920 [ 455.199223][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.204902][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.210053][ C0] ? __pfx___schedule+0x10/0x10 [ 455.214955][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 455.220333][ C0] preempt_schedule_common+0x7f/0xd0 [ 455.225623][ C0] preempt_schedule_thunk+0x16/0x40 [ 455.230873][ C0] _raw_spin_unlock+0x41/0x50 [ 455.235551][ C0] __zap_vma_range+0x40e1/0x4f80 [ 455.240582][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.246268][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 455.251598][ C0] ? mas_find+0x6d6/0xcb0 [ 455.255942][ C0] unmap_vmas+0x390/0x550 [ 455.260370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.266047][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 455.270901][ C0] ? mas_next_slot+0xc91/0xd70 [ 455.275686][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.281345][ C0] exit_mmap+0x293/0x9f0 [ 455.285592][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 455.290410][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 455.295743][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.301411][ C0] ? kmem_cache_free+0x182/0x650 [ 455.306391][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.312054][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 455.317215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.322843][ C0] ? __khugepaged_exit+0x33e/0x440 [ 455.328138][ C0] __mmput+0x118/0x420 [ 455.332232][ C0] exit_mm+0x18e/0x240 [ 455.336313][ C0] do_exit+0x6cd/0x2360 [ 455.340480][ C0] ? mlock_drain_local+0x79/0x490 [ 455.345564][ C0] ? __pfx_do_exit+0x10/0x10 [ 455.350175][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 455.355265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.360918][ C0] do_group_exit+0x22d/0x2f0 [ 455.365503][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.370692][ C0] get_signal+0x121b/0x12c0 [ 455.375244][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 455.380800][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.386991][ C0] ? vm_mmap_pgoff+0x353/0x4e0 [ 455.391779][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 455.397169][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.402814][ C0] ? rcu_is_watching+0x16/0xb0 [ 455.407688][ C0] do_syscall_64+0x328/0x520 [ 455.412293][ C0] ? trace_irq_disable+0x3b/0x140 [ 455.417348][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.423448][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.429344][ C0] RIP: 0033:0x7fadc119e559 [ 455.433754][ C0] RSP: 002b:00007fadc2026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 455.442161][ C0] RAX: 0000200000000000 RBX: 00007fadc1425fa0 RCX: 00007fadc119e559 [ 455.450244][ C0] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 455.458227][ C0] RBP: 00007fadc12358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 455.466208][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 455.474265][ C0] R13: 00007fadc1426038 R14: 00007fadc1425fa0 R15: 00007ffe050c8b48 [ 455.482254][ C0] [ 455.485288][ C0] task:syz.3.2225 state:R running task stack:24840 pid:12085 tgid:12060 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 455.498839][ C0] Call Trace: [ 455.502141][ C0] [ 455.505089][ C0] __schedule+0x17db/0x58f0 [ 455.509609][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 455.515105][ C0] ? mod_memcg_lruvec_state+0x23a/0x270 [ 455.520723][ C0] ? __pfx___schedule+0x10/0x10 [ 455.525706][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.531369][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 455.536573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.542232][ C0] ? irqentry_exit+0x218/0x920 [ 455.547136][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 455.552651][ C0] preempt_schedule_common+0x7f/0xd0 [ 455.557978][ C0] preempt_schedule_thunk+0x16/0x40 [ 455.563206][ C0] _raw_spin_unlock_irqrestore+0x76/0x80 [ 455.568843][ C0] folios_put_refs+0x8b0/0xb30 [ 455.573629][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.579300][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 455.584589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.590218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.595840][ C0] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 455.602165][ C0] shmem_undo_range+0x4e6/0x15d0 [ 455.607113][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.612840][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 455.618218][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 455.623361][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.628986][ C0] ? rcu_is_watching+0x16/0xb0 [ 455.633763][ C0] ? unmap_mapping_range+0xe7/0x190 [ 455.638956][ C0] ? __pfx_unmap_mapping_range+0x10/0x10 [ 455.644582][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.650246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.655966][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 455.661111][ C0] shmem_fallocate+0x50d/0xf10 [ 455.665905][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 455.670916][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.676564][ C0] ? lock_acquire+0x115/0x350 [ 455.681258][ C0] ? __pfx_shmem_fallocate+0x10/0x10 [ 455.686575][ C0] ? lock_acquire+0x115/0x350 [ 455.691299][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.696955][ C0] vfs_fallocate+0x65a/0x7e0 [ 455.701613][ C0] ? __pfx_vfs_fallocate+0x10/0x10 [ 455.706780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.712435][ C0] madvise_vma_behavior+0x2add/0x41d0 [ 455.717839][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.723486][ C0] ? __lock_acquire+0x747/0x2de0 [ 455.728470][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 455.734293][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.739925][ C0] ? __lock_acquire+0x747/0x2de0 [ 455.744871][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.750518][ C0] ? lock_acquire+0x115/0x350 [ 455.755322][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.760955][ C0] ? lock_acquire+0x115/0x350 [ 455.765653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.771475][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 455.776745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.782398][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 455.787702][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 455.793018][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.798645][ C0] ? kernel_text_address+0xa5/0xe0 [ 455.803786][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.809421][ C0] ? __kernel_text_address+0xd/0x30 [ 455.814676][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.820340][ C0] ? unwind_get_return_address+0x4d/0x90 [ 455.826010][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 455.832174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.837817][ C0] ? arch_stack_walk+0xfb/0x150 [ 455.842701][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.848364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.854002][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.859637][ C0] ? mas_prev_slot+0xb76/0xbf0 [ 455.864410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.870029][ C0] ? find_vma_prev+0x123/0x1b0 [ 455.874799][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 455.879938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.885560][ C0] ? file_ioctl+0x253/0x7d0 [ 455.890056][ C0] madvise_walk_vmas+0x576/0xb00 [ 455.895032][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 455.900492][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.906151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.911863][ C0] ? blk_start_plug+0x6e/0x1b0 [ 455.916634][ C0] madvise_do_behavior+0x385/0x540 [ 455.921748][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 455.927377][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.933015][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.938667][ C0] ? down_read+0x2be/0x330 [ 455.943096][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.948753][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.954395][ C0] do_madvise+0x327/0x3a0 [ 455.958731][ C0] ? __pfx_do_madvise+0x10/0x10 [ 455.963644][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.969292][ C0] ? rcu_is_watching+0x16/0xb0 [ 455.974085][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.979711][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 455.984563][ C0] __x64_sys_madvise+0xa6/0xc0 [ 455.989319][ C0] do_syscall_64+0x166/0x520 [ 455.993897][ C0] ? trace_irq_disable+0x3b/0x140 [ 455.998911][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.005082][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.011003][ C0] RIP: 0033:0x7f63d159e559 [ 456.015414][ C0] RSP: 002b:00007f63d2396028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 456.023841][ C0] RAX: ffffffffffffffda RBX: 00007f63d1826090 RCX: 00007f63d159e559 [ 456.031803][ C0] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 456.039847][ C0] RBP: 00007f63d16358b0 R08: 0000000000000000 R09: 0000000000000000 [ 456.047906][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.056161][ C0] R13: 00007f63d1826128 R14: 00007f63d1826090 R15: 00007ffd7fcf79b8 [ 456.064160][ C0] [ 456.067171][ C0] task:udevd state:R running task stack:23400 pid:6487 tgid:6487 ppid:4979 task_flags:0x400140 flags:0x00080000 [ 456.080685][ C0] Call Trace: [ 456.084033][ C0] [ 456.086951][ C0] __schedule+0x17db/0x58f0 [ 456.091453][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.097126][ C0] ? __lock_acquire+0x747/0x2de0 [ 456.102227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.107939][ C0] ? __lock_acquire+0x747/0x2de0 [ 456.112890][ C0] ? __pfx___schedule+0x10/0x10 [ 456.117749][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.123410][ C0] ? __lock_acquire+0x747/0x2de0 [ 456.128376][ C0] preempt_schedule_irq+0x4b/0x90 [ 456.133411][ C0] irqentry_exit+0x14f/0x920 [ 456.137995][ C0] ? trace_irq_disable+0x3b/0x140 [ 456.143021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.148998][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 456.154285][ C0] Code: b9 f2 12 00 00 00 00 eb b5 e8 5b 1a 45 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 c3 74 f2 12 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8b a5 6c ff cc 48 8d 3d e8 15 da [ 456.173886][ C0] RSP: 0018:ffffc90010077588 EFLAGS: 00000286 [ 456.179950][ C0] RAX: a79f1b3069669d00 RBX: 0000000000000206 RCX: 0000000000000046 [ 456.188027][ C0] RDX: ffffc90010077601 RSI: ffffffff8e6f1b50 RDI: ffffffff8c6ddb80 [ 456.195995][ C0] RBP: ffff8880321769c0 R08: ffffc90010077bf0 R09: ffffc900100776b8 [ 456.203975][ C0] R10: dffffc0000000000 R11: fffff5200200eed9 R12: 0000000000000002 [ 456.211942][ C0] R13: 0000000000000002 R14: ffffffff8fd5c8e0 R15: ffff888032175dc0 [ 456.219931][ C0] ? unwind_next_frame+0x8f/0x2550 [ 456.225067][ C0] unwind_next_frame+0x1baa/0x2550 [ 456.230463][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.236220][ C0] ? unwind_next_frame+0x8f/0x2550 [ 456.241335][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.247580][ C0] arch_stack_walk+0x11b/0x150 [ 456.252366][ C0] ? tomoyo_path_number_perm+0x246/0x5f0 [ 456.258063][ C0] stack_trace_save+0xa9/0x100 [ 456.262847][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 456.268246][ C0] ? __lock_acquire+0x747/0x2de0 [ 456.273185][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.278915][ C0] save_stack+0x122/0x230 [ 456.283304][ C0] ? __pfx_save_stack+0x10/0x10 [ 456.288181][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.293828][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 456.299281][ C0] ? __slab_free+0x274/0x2c0 [ 456.303865][ C0] ? qlist_free_all+0x99/0x100 [ 456.308639][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 456.314289][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 456.319201][ C0] ? __kmalloc_noprof+0x36b/0x720 [ 456.324333][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.330106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.335755][ C0] ? page_ext_put+0x97/0xc0 [ 456.340277][ C0] __reset_page_owner+0x71/0x1f0 [ 456.345225][ C0] __free_frozen_pages+0xc93/0xd90 [ 456.350344][ C0] __slab_free+0x274/0x2c0 [ 456.354757][ C0] ? lock_acquire+0x115/0x350 [ 456.359442][ C0] ? qlist_free_all+0x8e/0x100 [ 456.364203][ C0] qlist_free_all+0x99/0x100 [ 456.368796][ C0] kasan_quarantine_reduce+0x148/0x160 [ 456.374264][ C0] __kasan_kmalloc+0x22/0xb0 [ 456.378857][ C0] __kmalloc_noprof+0x36b/0x720 [ 456.383704][ C0] ? rcu_is_watching+0x16/0xb0 [ 456.388468][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 456.393482][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.399359][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 456.405095][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 456.410652][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 456.416288][ C0] tomoyo_path_number_perm+0x246/0x5f0 [ 456.421750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.427553][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.433528][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 456.438557][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.444291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.449922][ C0] ? hook_file_ioctl+0x1f2/0x600 [ 456.454896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.460523][ C0] ? blkdev_ioctl+0x336/0x740 [ 456.465205][ C0] ? __pfx_blkdev_ioctl+0x10/0x10 [ 456.470247][ C0] security_file_ioctl+0xc3/0x2a0 [ 456.475275][ C0] __se_sys_ioctl+0x47/0x170 [ 456.479868][ C0] do_syscall_64+0x166/0x520 [ 456.484470][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.490542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.496495][ C0] RIP: 0033:0x7fd5c211d378 [ 456.500907][ C0] RSP: 002b:00007ffc1bff43a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.509400][ C0] RAX: ffffffffffffffda RBX: 0000563f8f11ff80 RCX: 00007fd5c211d378 [ 456.517366][ C0] RDX: 00007ffc1bff43e0 RSI: 0000000080280215 RDI: 0000000000000009 [ 456.525345][ C0] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 456.533395][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 456.541834][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 456.549842][ C0] [ 456.552854][ C0] rcu: rcu_preempt kthread starved for 1531 jiffies! g63897 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 456.563898][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 456.574138][ C0] rcu: RCU grace-period kthread stack dump: [ 456.580126][ C0] task:rcu_preempt state:R running task stack:27392 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 456.593841][ C0] Call Trace: [ 456.597110][ C0] [ 456.600058][ C0] __schedule+0x17db/0x58f0 [ 456.604563][ C0] ? __lock_acquire+0x747/0x2de0 [ 456.609521][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 456.614657][ C0] ? __pfx___schedule+0x10/0x10 [ 456.619545][ C0] ? lock_acquire+0x115/0x350 [ 456.624250][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.629907][ C0] ? schedule+0x90/0x2b0 [ 456.634280][ C0] schedule+0x164/0x2b0 [ 456.638459][ C0] schedule_timeout+0x152/0x2c0 [ 456.643349][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 456.648731][ C0] ? __pfx_process_timeout+0x10/0x10 [ 456.654043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.659745][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.665677][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.671356][ C0] ? prepare_to_swait_event+0x322/0x350 [ 456.676932][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 456.681821][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.687463][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.693100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.698741][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 456.705013][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 456.710297][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 456.715503][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.721316][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 456.725912][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 456.731153][ C0] ? __kthread_parkme+0x71/0x1f0 [ 456.736137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.741903][ C0] ? __kthread_parkme+0x199/0x1f0 [ 456.746988][ C0] kthread+0x38b/0x480 [ 456.751067][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 456.756352][ C0] ? __pfx_kthread+0x10/0x10 [ 456.760945][ C0] ret_from_fork+0x514/0xb70 [ 456.765530][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 456.770649][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.776278][ C0] ? __switch_to+0xc89/0x1420 [ 456.780980][ C0] ? __pfx_kthread+0x10/0x10 [ 456.785600][ C0] ret_from_fork_asm+0x1a/0x30 [ 456.790393][ C0] [ 456.793407][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 456.799714][ C0] CPU: 0 UID: 0 PID: 3223 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 456.810990][ C0] Tainted: [L]=SOFTLOCKUP [ 456.815298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 456.825340][ C0] Workqueue: bat_events batadv_tt_purge [ 456.830934][ C0] RIP: 0010:memset+0xf/0x30 [ 456.835437][ C0] Code: 44 88 1f e9 6e 63 27 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 42 63 27 f5 90 90 90 90 90 90 90 90 90 90 90 90 [ 456.855031][ C0] RSP: 0018:ffffc900000078d8 EFLAGS: 00000202 [ 456.861089][ C0] RAX: 0000000000000000 RBX: ffff88816da453c0 RCX: 0000000000000004 [ 456.869068][ C0] RDX: 0000000000000020 RSI: 0000000000000000 RDI: ffffc90000007a3c [ 456.877026][ C0] RBP: ffffc90000007ac0 R08: ffffc90000007a3f R09: ffffc90000007a20 [ 456.885003][ C0] R10: dffffc0000000000 R11: fffff52000000f48 R12: 1ffff92000000f40 [ 456.892982][ C0] R13: ffffc90000007a20 R14: ffffc90000007b80 R15: dffffc0000000000 [ 456.900958][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 456.909913][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.916485][ C0] CR2: 00007fe26b467596 CR3: 000000005c24f000 CR4: 0000000000350ef0 [ 456.924538][ C0] Call Trace: [ 456.927941][ C0] [ 456.930813][ C0] ipt_do_table+0xca/0x15d0 [ 456.935351][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 456.941531][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 456.947302][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 456.952185][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 456.957215][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.962841][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 456.968227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 456.973863][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 456.979323][ C0] ? ip_sabotage_in+0x57/0x270 [ 456.984086][ C0] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 456.989713][ C0] nf_hook_slow+0xc5/0x220 [ 456.994141][ C0] NF_HOOK+0x21f/0x3c0 [ 456.998312][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 457.003431][ C0] ? NF_HOOK+0x9e/0x3c0 [ 457.007608][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 457.012225][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 457.017363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.023011][ C0] ? ip_rcv_core+0x88d/0xd50 [ 457.027659][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 457.032154][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 457.036647][ C0] process_backlog+0xa6b/0x18b0 [ 457.041504][ C0] ? process_backlog+0x3de/0x18b0 [ 457.046589][ C0] __napi_poll+0xaa/0x330 [ 457.050952][ C0] net_rx_action+0x61d/0xf50 [ 457.055586][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 457.060849][ C0] handle_softirqs+0x226/0x860 [ 457.065813][ C0] ? do_softirq+0x77/0xd0 [ 457.070171][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 457.075665][ C0] do_softirq+0x77/0xd0 [ 457.079827][ C0] [ 457.082740][ C0] [ 457.085651][ C0] __local_bh_enable_ip+0x100/0x140 [ 457.090845][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 457.096146][ C0] ? process_scheduled_works+0x97a/0x1630 [ 457.101906][ C0] batadv_tt_purge+0x35/0xa10 [ 457.106611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.112336][ C0] ? rcu_is_watching+0x16/0xb0 [ 457.117104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.122733][ C0] ? process_scheduled_works+0x97a/0x1630 [ 457.128458][ C0] process_scheduled_works+0xc3d/0x1630 [ 457.134037][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.140024][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 457.145058][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.150777][ C0] ? assign_work+0x3af/0x5d0 [ 457.155365][ C0] rescuer_thread+0x7c5/0x10e0 [ 457.160147][ C0] ? rescuer_thread+0xb8/0x10e0 [ 457.165071][ C0] kthread+0x38b/0x480 [ 457.169142][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 457.174408][ C0] ? __pfx_kthread+0x10/0x10 [ 457.179016][ C0] ret_from_fork+0x514/0xb70 [ 457.183611][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 457.188796][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 457.194434][ C0] ? __switch_to+0xc89/0x1420 [ 457.199135][ C0] ? __pfx_kthread+0x10/0x10 [ 457.203895][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.208670][ C0]