last executing test programs: 9.618253065s ago: executing program 0 (id=266): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001780)={&(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xf0, 0x1}}, 0x18, &(0x7f0000000040)={0x0, 0xfffffcc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c0) 9.542063477s ago: executing program 0 (id=267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffff0300ffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000010000000000000008000000000000000000003c00000002000000fe80000000000000000000000000003a0600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 9.485696198s ago: executing program 0 (id=268): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x5, 0x57e, 0x330, 0x0, 0x0, "0600ff0901a101150026ff007508951f852009018102852109018102852209018102851609019102851709019102851509019102c0"}}, 0x14d) close(r0) 1.772178661s ago: executing program 1 (id=317): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) 1.659575533s ago: executing program 1 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d950300bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1.538667316s ago: executing program 3 (id=322): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)='\b\x00\f=\x00'/14, 0x5ee, 0x80, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) 1.451869888s ago: executing program 3 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r0, 0xffffffffffffffff, 0x1) 1.3786029s ago: executing program 3 (id=325): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x80, 0x3e, 0x9}, 'syz0\x00', 0x2d}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000500)={0x50, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @const={0xc, {0x100, 0x4, 0x4, 0x5}}}) 1.34812736s ago: executing program 1 (id=326): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x2000800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.301259991s ago: executing program 2 (id=327): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.141596765s ago: executing program 2 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) 1.092534806s ago: executing program 3 (id=329): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.008356388s ago: executing program 2 (id=330): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0x1}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58}, 0x10) 934.20099ms ago: executing program 0 (id=331): io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0xfffffffe, 0x2, 0x0, 0x345}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x28, 0x0, 0x0, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 891.48416ms ago: executing program 1 (id=332): openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=',1', 0x2) 818.245922ms ago: executing program 2 (id=333): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000002440)='\nr', 0x2) 798.572673ms ago: executing program 0 (id=334): r0 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 777.797673ms ago: executing program 3 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xfffffffffffffea5, 0x0, &(0x7f0000000700)="c45c000000220000072338415d6a4e00", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0xffdd) 708.956594ms ago: executing program 1 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) sendfile(r0, r0, 0x0, 0x252c000000000000) 642.889176ms ago: executing program 0 (id=337): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 435.150021ms ago: executing program 1 (id=338): syz_mount_image$ocfs2(&(0x7f0000004540), &(0x7f0000004580)='./file0\x00', 0x0, &(0x7f00000045c0)={[{@heartbeat_none}]}, 0x1, 0x451d, &(0x7f0000004600)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x20a9823, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./bus/file0\x00') 309.640384ms ago: executing program 2 (id=339): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524e"}}}}}}, 0x0) 308.523524ms ago: executing program 3 (id=340): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1) 0s ago: executing program 2 (id=341): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bfe839c16830c8a8", 0x46}], 0x2}, 0x44000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 75.169639][ T5761] cgroup: Unknown subsys name 'net' [ 75.275090][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.184724][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.385868][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.414712][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.427261][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.436341][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.447660][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.466580][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.478380][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.488740][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.490794][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.497659][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.507904][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.523860][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.536973][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.537159][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.560323][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.574755][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.575756][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.596906][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.651224][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.662523][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.677883][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.692960][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.709271][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.717980][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.166220][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.233456][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.347491][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 80.446504][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.456576][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.465863][ T5772] bridge_slave_0: entered allmulticast mode [ 80.474354][ T5772] bridge_slave_0: entered promiscuous mode [ 80.516128][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.527578][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.537432][ T5772] bridge_slave_1: entered allmulticast mode [ 80.546029][ T5772] bridge_slave_1: entered promiscuous mode [ 80.566394][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.575486][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.587125][ T5773] bridge_slave_0: entered allmulticast mode [ 80.598868][ T5773] bridge_slave_0: entered promiscuous mode [ 80.617612][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.627628][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.638707][ T5773] bridge_slave_1: entered allmulticast mode [ 80.648440][ T5773] bridge_slave_1: entered promiscuous mode [ 80.721083][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.737975][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.750757][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.779218][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.788838][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.799059][ T5787] bridge_slave_0: entered allmulticast mode [ 80.808934][ T5787] bridge_slave_0: entered promiscuous mode [ 80.837791][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.850597][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.860331][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.868206][ T5787] bridge_slave_1: entered allmulticast mode [ 80.877979][ T5787] bridge_slave_1: entered promiscuous mode [ 80.902620][ T5772] team0: Port device team_slave_0 added [ 80.921208][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.959318][ T5772] team0: Port device team_slave_1 added [ 81.030033][ T5773] team0: Port device team_slave_0 added [ 81.041476][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.082146][ T5773] team0: Port device team_slave_1 added [ 81.102761][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.132324][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.146062][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.184750][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.207931][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.216735][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.248595][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.299126][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.309864][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.346192][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.384165][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.393362][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.402001][ T5780] bridge_slave_0: entered allmulticast mode [ 81.412289][ T5780] bridge_slave_0: entered promiscuous mode [ 81.423057][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433464][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.442153][ T5780] bridge_slave_1: entered allmulticast mode [ 81.451586][ T5780] bridge_slave_1: entered promiscuous mode [ 81.460710][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.470337][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.503744][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.532177][ T5787] team0: Port device team_slave_0 added [ 81.545169][ T5787] team0: Port device team_slave_1 added [ 81.584907][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.597632][ T5786] Bluetooth: hci0: command tx timeout [ 81.635534][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.662682][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.671128][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.707289][ T5786] Bluetooth: hci2: command tx timeout [ 81.707306][ T51] Bluetooth: hci1: command tx timeout [ 81.710607][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.763129][ T5772] hsr_slave_0: entered promiscuous mode [ 81.772751][ T5772] hsr_slave_1: entered promiscuous mode [ 81.784610][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.794034][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.830931][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.846645][ T5786] Bluetooth: hci3: command tx timeout [ 81.858917][ T5773] hsr_slave_0: entered promiscuous mode [ 81.870610][ T5773] hsr_slave_1: entered promiscuous mode [ 81.878318][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.889811][ T5773] Cannot create hsr debugfs directory [ 81.939416][ T5780] team0: Port device team_slave_0 added [ 81.982902][ T5780] team0: Port device team_slave_1 added [ 82.027298][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.038456][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.074660][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.131617][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.140906][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.177684][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.252997][ T5787] hsr_slave_0: entered promiscuous mode [ 82.262915][ T5787] hsr_slave_1: entered promiscuous mode [ 82.270477][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.281475][ T5787] Cannot create hsr debugfs directory [ 82.455578][ T5780] hsr_slave_0: entered promiscuous mode [ 82.467713][ T5780] hsr_slave_1: entered promiscuous mode [ 82.475510][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.484252][ T5780] Cannot create hsr debugfs directory [ 82.708408][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.732946][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.745690][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.786356][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.860068][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.880170][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.907348][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.922324][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.007984][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.048350][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.063542][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.081678][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.227790][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.240898][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.268420][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.282261][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.323731][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.418436][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.454530][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.464990][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.491892][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.512973][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.521334][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.575399][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.631404][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.641293][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.671142][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.680587][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.687460][ T5786] Bluetooth: hci0: command tx timeout [ 83.757325][ T5786] Bluetooth: hci1: command tx timeout [ 83.757450][ T51] Bluetooth: hci2: command tx timeout [ 83.787381][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.821872][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.891932][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.916670][ T51] Bluetooth: hci3: command tx timeout [ 83.950005][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.984493][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.044875][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.054479][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.073435][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.085345][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.114370][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.124332][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.197935][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.207019][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.409163][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.429040][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.604144][ T5772] veth0_vlan: entered promiscuous mode [ 84.638425][ T5772] veth1_vlan: entered promiscuous mode [ 84.713509][ T5773] veth0_vlan: entered promiscuous mode [ 84.767349][ T5773] veth1_vlan: entered promiscuous mode [ 84.811679][ T5772] veth0_macvtap: entered promiscuous mode [ 84.830068][ T5772] veth1_macvtap: entered promiscuous mode [ 84.891039][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.943285][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.977982][ T5773] veth0_macvtap: entered promiscuous mode [ 85.001414][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.024957][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.044707][ T5773] veth1_macvtap: entered promiscuous mode [ 85.074796][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.088430][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.101277][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.112834][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.152783][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.168985][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.184786][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.231019][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.245801][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.261615][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.275872][ T5787] veth0_vlan: entered promiscuous mode [ 85.307682][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.320488][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.334033][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.346336][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.371379][ T5787] veth1_vlan: entered promiscuous mode [ 85.505526][ T5780] veth0_vlan: entered promiscuous mode [ 85.620779][ T5787] veth0_macvtap: entered promiscuous mode [ 85.669322][ T5787] veth1_macvtap: entered promiscuous mode [ 85.671704][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.690702][ T5780] veth1_vlan: entered promiscuous mode [ 85.712378][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.766911][ T51] Bluetooth: hci0: command tx timeout [ 85.781118][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.800533][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.819876][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.836072][ T51] Bluetooth: hci2: command tx timeout [ 85.838115][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.861483][ T51] Bluetooth: hci1: command tx timeout [ 85.877653][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.913387][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.933836][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.950114][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.965547][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.981715][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.998165][ T51] Bluetooth: hci3: command tx timeout [ 86.017811][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.028690][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.042347][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.063209][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.074375][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.076407][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.158258][ T5780] veth0_macvtap: entered promiscuous mode [ 86.183481][ T5780] veth1_macvtap: entered promiscuous mode [ 86.200506][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.211876][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.301170][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.337764][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.338090][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.367689][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.381280][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.398922][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.414829][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.428585][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.445003][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.508878][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.528126][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.541592][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.560127][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.573749][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.591691][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.611633][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.642155][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655491][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671273][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.684628][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.716957][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.731774][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.821521][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.856586][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.138844][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.171254][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.202922][ T5848] syz.0.5[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.281258][ T5848] loop0: detected capacity change from 0 to 128 [ 87.314257][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.354547][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.492826][ T5848] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.553097][ T5848] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.721354][ T5848] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 87.838981][ T51] Bluetooth: hci0: command tx timeout [ 87.919087][ T51] Bluetooth: hci1: command tx timeout [ 87.926013][ T5786] Bluetooth: hci2: command tx timeout [ 87.947701][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.039834][ T5866] loop2: detected capacity change from 0 to 16 [ 88.076240][ T51] Bluetooth: hci3: command tx timeout [ 88.093456][ T5866] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.289614][ T5866] overlayfs: failed to get redirect (-117) [ 88.315472][ T5871] loop0: detected capacity change from 0 to 512 [ 88.450074][ T5871] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 88.542640][ T5871] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.11: corrupted in-inode xattr: e_value size too large [ 88.642776][ T5871] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.11: couldn't read orphan inode 15 (err -117) [ 88.693233][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.841273][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.901228][ T5884] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 89.181741][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.213553][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 89.309099][ T5878] loop1: detected capacity change from 0 to 32768 [ 89.439120][ T5898] WARNING! power/level is deprecated; use power/control instead [ 89.439595][ T5878] (syz.1.18,5878,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.536973][ T5878] (syz.1.18,5878,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.692867][ T5878] JBD2: Ignoring recovery information on journal [ 89.819657][ T5878] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 90.111393][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 90.179653][ T5920] loop2: detected capacity change from 0 to 2048 [ 90.262261][ T5920] loop2: p1 < > p3 [ 90.293276][ T5920] loop2: p3 size 134217728 extends beyond EOD, truncated [ 90.519492][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 90.756538][ T5938] loop2: detected capacity change from 0 to 64 [ 91.087885][ T5949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.197934][ T5951] capability: warning: `syz.1.51' uses deprecated v2 capabilities in a way that may be insecure [ 91.222084][ T5953] i2c i2c-0: delete_device: Can't parse I2C address [ 91.384301][ T5960] netlink: 'syz.1.55': attribute type 2 has an invalid length. [ 91.426966][ T5959] loop3: detected capacity change from 0 to 2048 [ 91.499931][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.556706][ T5946] loop0: detected capacity change from 0 to 32768 [ 91.618564][ T5946] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 91.814223][ T5946] XFS (loop0): Ending clean mount [ 91.849262][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.003887][ T789] cfg80211: failed to load regulatory.db [ 92.036902][ T5772] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 92.265449][ T5981] loop2: detected capacity change from 0 to 1764 [ 92.473411][ T5983] Zero length message leads to an empty skb [ 92.574974][ T5989] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5989] [ 92.696613][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 92.779825][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 92.788363][ T5998] loop2: detected capacity change from 0 to 1024 [ 92.912947][ T5998] hfsplus: invalid length 32517 has been corrected to 255 [ 93.006633][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 93.088615][ T28] audit: type=1800 audit(1791448145.008:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 93.143344][ T5998] hfsplus: b-tree write err: -5, ino 20 [ 93.271651][ T1329] hfsplus: b-tree write err: -5, ino 20 [ 93.863318][ T6033] loop1: detected capacity change from 0 to 4096 [ 93.959981][ T6033] ntfs: volume version 3.1. [ 93.984144][ T6037] loop0: detected capacity change from 0 to 128 [ 94.088227][ T6037] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.376828][ T1032] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 94.860995][ T6053] page:ffffea0005000100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140004 [ 94.900698][ T6053] ksm flags: 0x57ff00000000800(slab|node=1|zone=2|lastcpupid=0x7ff) [ 94.924355][ T6053] page_type: 0xffffffff() [ 94.935750][ T6053] raw: 057ff00000000800 ffff888018841640 ffffea000507cdc0 dead000000000003 [ 94.952984][ T6053] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 94.965173][ T6053] page dumped because: unmovable page [ 94.980120][ T6053] page_owner tracks the page as allocated [ 95.001148][ T6053] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12000(__GFP_NOWARN|__GFP_NORETRY), pid 0, tgid 0 (swapper/0), ts 1898622405, free_ts 0 [ 95.063438][ T6053] post_alloc_hook+0x1c1/0x200 [ 95.073794][ T6053] get_page_from_freelist+0x2181/0x22a0 [ 95.085764][ T6053] __alloc_pages+0x1f0/0x460 [ 95.094403][ T6053] alloc_page_interleave+0x24/0x1e0 [ 95.104746][ T6053] alloc_slab_page+0x5d/0x180 [ 95.120457][ T6053] new_slab+0x87/0x2d0 [ 95.137397][ T6053] ___slab_alloc+0xc5c/0x12f0 [ 95.142728][ T6053] __kmem_cache_alloc_node+0x11f/0x250 [ 95.157959][ T6060] loop1: detected capacity change from 0 to 512 [ 95.169563][ T6053] kmalloc_trace+0x2a/0xe0 [ 95.177685][ T6053] acpi_ut_mutex_initialize+0x2ba/0x870 [ 95.185141][ T6053] acpi_initialize_subsystem+0x9d/0x170 [ 95.218371][ T6053] acpi_early_init+0xf5/0x540 [ 95.224321][ T6053] start_kernel+0x3aa/0x4e0 [ 95.246132][ T6053] x86_64_start_reservations+0x2a/0x30 [ 95.260470][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.275549][ T6060] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.289567][ T6053] copy_bootdata+0x0/0xd0 [ 95.325518][ T6053] secondary_startup_64_no_verify+0x179/0x17b [ 95.374411][ T6053] page_owner free stack trace missing [ 95.509813][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.811232][ T6075] loop2: detected capacity change from 0 to 16 [ 95.838864][ T6075] ======================================================= [ 95.838864][ T6075] WARNING: The mand mount option has been deprecated and [ 95.838864][ T6075] and is ignored by this kernel. Remove the mand [ 95.838864][ T6075] option from the mount to silence this warning. [ 95.838864][ T6075] ======================================================= [ 95.942280][ T6075] erofs: Unknown parameter '0ՓU_M{HAAAv ' [ 95.953110][ T6077] overlayfs: upper fs does not support tmpfile. [ 96.111194][ T51] Bluetooth: hci0: Zero size dump init pkt [ 96.213136][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 96.252860][ T6088] sd 0:0:1:0: PR command failed: 1026 [ 96.261051][ T6088] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 96.269078][ T6088] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 96.617938][ T6098] loop3: detected capacity change from 0 to 512 [ 96.656197][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 96.687255][ T6098] EXT4-fs (loop3): Test dummy encryption mode enabled [ 96.710628][ T6073] loop0: detected capacity change from 0 to 32768 [ 96.726650][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.847494][ T6073] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.071231][ T6073] XFS (loop0): Ending clean mount [ 97.110042][ T6073] XFS (loop0): Quotacheck needed: Please wait. [ 97.290656][ T6073] XFS (loop0): Quotacheck: Done. [ 97.347424][ T6098] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 97.529218][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.545589][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.226218][ T6155] capability: warning: `syz.3.130' uses 32-bit capabilities (legacy support in use) [ 98.272707][ T6155] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.419145][ T5774] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 98.449335][ T5774] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.555521][ T6162] Bluetooth: MGMT ver 1.22 [ 98.576601][ T6162] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 98.976574][ T6148] loop0: detected capacity change from 0 to 32768 [ 99.219404][ T6148] find_entry called with index = 0 [ 99.255011][ T6148] read_mapping_page failed! [ 99.274077][ T6148] ERROR: (device loop0): txCommit: [ 99.274077][ T6148] [ 99.481789][ T6183] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 99.663029][ T6185] bond0: entered promiscuous mode [ 99.670827][ T6187] loop1: detected capacity change from 0 to 64 [ 99.711653][ T6185] bond_slave_0: entered promiscuous mode [ 99.756681][ T6185] bond_slave_1: entered promiscuous mode [ 99.800630][ T6185] bond0: left promiscuous mode [ 99.805759][ T6185] bond_slave_0: left promiscuous mode [ 99.811563][ T6185] bond_slave_1: left promiscuous mode [ 99.843790][ T6189] team0: No ports can be present during mode change [ 100.345236][ T6206] loop3: detected capacity change from 0 to 1024 [ 100.496956][ T6206] hfsplus: walked past end of dir [ 100.555342][ T6191] loop0: detected capacity change from 0 to 32768 [ 100.577199][ T3487] hfsplus: bad catalog file entry [ 100.615245][ T6209] loop1: detected capacity change from 0 to 256 [ 100.617466][ T6191] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.774043][ T6191] XFS (loop0): Ending clean mount [ 100.820089][ T6209] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 101.007259][ T28] audit: type=1800 audit(1791448152.918:3): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.155" name="file2" dev="loop1" ino=1048624 res=0 errno=0 [ 101.042054][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.066489][ T6209] exFAT-fs (loop1): error, broken FAT chain. [ 101.093778][ T6209] exFAT-fs (loop1): Filesystem has been set read-only [ 101.138815][ T6209] exFAT-fs (loop1): error, failed to bmap (inode : ffff888077f787e0 iblock : 24, err : -5) [ 101.201973][ T6209] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 101.700068][ T6237] loop2: detected capacity change from 0 to 4096 [ 101.880988][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.244685][ T6234] loop3: detected capacity change from 0 to 40427 [ 102.303359][ T6234] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 102.321358][ T6234] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.387315][ T6234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.591906][ T6234] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.613883][ T6234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.673308][ T6238] loop0: detected capacity change from 0 to 40427 [ 102.719623][ T6238] F2FS-fs (loop0): invalid crc value [ 102.743726][ T6238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.803951][ T6244] loop1: detected capacity change from 0 to 32768 [ 102.862849][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.969279][ T6238] F2FS-fs (loop0): Start checkpoint disabled! [ 103.065704][ T6238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 103.316003][ T42] kworker/u4:2: attempt to access beyond end of device [ 103.316003][ T42] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 103.338279][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.353657][ T42] kworker/u4:2: attempt to access beyond end of device [ 103.353657][ T42] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 103.383225][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.992121][ T6258] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 103.995563][ T6254] loop2: detected capacity change from 0 to 32768 [ 104.146316][ T6261] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long [ 104.170093][ T6254] JBD2: Ignoring recovery information on journal [ 104.202834][ T6265] Bluetooth: MGMT ver 1.22 [ 104.383613][ T6267] netlink: 'syz.0.173': attribute type 6 has an invalid length. [ 104.408887][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 104.415686][ T6254] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.459300][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.468716][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.526860][ T6254] syz.2.167 (6254) used greatest stack depth: 18808 bytes left [ 105.585915][ C0] sched: RT throttling activated [ 105.756159][ T6274] loop3: detected capacity change from 0 to 131072 [ 105.855371][ T6274] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 105.866022][ T6274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.882509][ T6274] F2FS-fs (loop3): invalid crc value [ 105.932660][ T6274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.013794][ T6274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.022047][ T6274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 106.306522][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 106.751989][ T6280] loop0: detected capacity change from 0 to 131072 [ 106.769839][ T6280] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 106.781303][ T6280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 106.914150][ T6280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.985541][ T6280] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 106.993686][ T6280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.694803][ T6289] loop2: detected capacity change from 0 to 32768 [ 107.806736][ T6289] find_entry called with index = 0 [ 107.812509][ T6289] read_mapping_page failed! [ 107.826202][ T6289] ERROR: (device loop2): txCommit: [ 107.826202][ T6289] [ 108.435586][ T6298] loop2: detected capacity change from 0 to 2048 [ 108.535714][ T6298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.558955][ T6294] loop1: detected capacity change from 0 to 32768 [ 108.693745][ T6294] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 108.693745][ T6294] [ 108.769056][ T6294] ERROR: (device loop1): remounting filesystem as read-only [ 108.890917][ T6308] loop0: detected capacity change from 0 to 136 [ 108.918893][ T6308] Attempt to read inode for relocated directory [ 108.986709][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.236071][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 109.268940][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.299609][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 109.349569][ T5814] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 109.370003][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.405985][ T5814] usb 4-1: Product: syz [ 109.410269][ T5814] usb 4-1: Manufacturer: syz [ 109.440181][ T5814] usb 4-1: SerialNumber: syz [ 109.711924][ T5814] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 109.759854][ T5814] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 109.789223][ T6310] loop1: detected capacity change from 0 to 40427 [ 109.811779][ T6310] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 109.822096][ T6310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 109.853367][ T6310] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 109.884196][ T6310] F2FS-fs (loop1): invalid crc value [ 109.907311][ T6310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.043974][ T6310] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 110.060484][ T6310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.096212][ T5814] usb 4-1: 2:1 : can't get Cluster Descriptor [ 110.141699][ T6310] F2FS-fs (loop1): access invalid blkaddr:2816 [ 110.169293][ T6310] CPU: 0 PID: 6310 Comm: syz.1.188 Not tainted syzkaller #0 [ 110.177402][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.188134][ T6310] Call Trace: [ 110.191905][ T6310] [ 110.194897][ T6310] dump_stack_lvl+0x18c/0x250 [ 110.199653][ T6310] ? show_regs_print_info+0x20/0x20 [ 110.205009][ T6310] ? mark_lock+0x94/0x320 [ 110.209661][ T6310] ? __lock_acquire+0x135d/0x7eb0 [ 110.214865][ T6310] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 110.220700][ T6310] f2fs_map_blocks+0xc20/0x4080 [ 110.225634][ T6310] ? f2fs_get_block_locked+0xe0/0xe0 [ 110.231226][ T6310] ? xa_load+0x64/0x2e0 [ 110.235745][ T6310] ? xa_load+0x64/0x2e0 [ 110.240073][ T6310] ? xa_load+0x2b7/0x2e0 [ 110.245505][ T6310] ? xa_load+0x64/0x2e0 [ 110.249913][ T6310] ? page_index+0xe6/0x480 [ 110.254763][ T6310] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 110.260491][ T6310] ? detach_page_private+0x4d0/0x4d0 [ 110.267817][ T6310] ? __mod_lruvec_page_state+0xa5/0x410 [ 110.273719][ T6310] ? f2fs_readahead+0x167/0x2f0 [ 110.278817][ T6310] ? f2fs_dirty_data_folio+0x830/0x830 [ 110.284729][ T6310] read_pages+0x18b/0x860 [ 110.290112][ T6310] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.295669][ T6310] ? page_cache_ra_unbounded+0x740/0x740 [ 110.302003][ T6310] ? folio_add_lru+0x323/0xce0 [ 110.307114][ T6310] ? folio_add_lru+0x512/0xce0 [ 110.313002][ T6310] ? filemap_add_folio+0x190/0x3d0 [ 110.319354][ T6310] page_cache_ra_unbounded+0x661/0x740 [ 110.325803][ T6310] f2fs_readdir+0x498/0x970 [ 110.331144][ T6310] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 110.338873][ T6310] ? mutex_lock_nested+0x20/0x20 [ 110.344944][ T6310] ? iterate_dir+0xcb/0x590 [ 110.349877][ T6310] ? down_read_killable+0x1d0/0x340 [ 110.356037][ T6310] ? fsnotify_perm+0x271/0x5e0 [ 110.357266][ T5814] usb 4-1: USB disconnect, device number 2 [ 110.361123][ T6310] iterate_dir+0x1bd/0x590 [ 110.373917][ T6310] __se_sys_getdents64+0xf6/0x270 [ 110.379711][ T6310] ? __x64_sys_getdents64+0x80/0x80 [ 110.385423][ T6310] ? filldir+0x620/0x620 [ 110.389823][ T6310] ? lockdep_hardirqs_on+0x98/0x150 [ 110.395253][ T6310] do_syscall_64+0x55/0xb0 [ 110.399740][ T6310] ? clear_bhb_loop+0x40/0x90 [ 110.405095][ T6310] ? clear_bhb_loop+0x40/0x90 [ 110.411074][ T6310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.417373][ T6310] RIP: 0033:0x7f2df5d9e199 [ 110.421949][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.442484][ T6310] RSP: 002b:00007f2df6bab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 110.451395][ T6310] RAX: ffffffffffffffda RBX: 00007f2df6025fa0 RCX: 00007f2df5d9e199 [ 110.459545][ T6310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 110.467644][ T6310] RBP: 00007f2df5e35888 R08: 0000000000000000 R09: 0000000000000000 [ 110.475919][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.484183][ T6310] R13: 00007f2df6026038 R14: 00007f2df6025fa0 R15: 00007fff604d4418 [ 110.492280][ T6310] [ 110.502497][ T6310] F2FS-fs (loop1): access invalid blkaddr:2816 [ 110.509342][ T6310] CPU: 0 PID: 6310 Comm: syz.1.188 Not tainted syzkaller #0 [ 110.516693][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.527419][ T6310] Call Trace: [ 110.530990][ T6310] [ 110.533962][ T6310] dump_stack_lvl+0x18c/0x250 [ 110.540018][ T6310] ? show_regs_print_info+0x20/0x20 [ 110.545684][ T6310] ? mark_lock+0x94/0x320 [ 110.550699][ T6310] ? __lock_acquire+0x135d/0x7eb0 [ 110.555979][ T6310] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 110.561603][ T6310] f2fs_map_blocks+0xc20/0x4080 [ 110.566572][ T6310] ? f2fs_get_block_locked+0xe0/0xe0 [ 110.571906][ T6310] ? xa_load+0x64/0x2e0 [ 110.576481][ T6310] ? xa_load+0x64/0x2e0 [ 110.580984][ T6310] ? xa_load+0x2b7/0x2e0 [ 110.585308][ T6310] ? xa_load+0x64/0x2e0 [ 110.589494][ T6310] ? page_index+0xe6/0x480 [ 110.594236][ T6310] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 110.599597][ T6310] ? detach_page_private+0x4d0/0x4d0 [ 110.606256][ T6310] ? __mod_lruvec_page_state+0xa5/0x410 [ 110.612134][ T6310] ? f2fs_readahead+0x167/0x2f0 [ 110.617825][ T6310] ? f2fs_dirty_data_folio+0x830/0x830 [ 110.623667][ T6310] read_pages+0x18b/0x860 [ 110.628843][ T6310] ? __lock_acquire+0x7eb0/0x7eb0 [ 110.634640][ T6310] ? page_cache_ra_unbounded+0x740/0x740 [ 110.641001][ T6310] ? folio_add_lru+0x323/0xce0 [ 110.646984][ T6310] ? folio_add_lru+0x512/0xce0 [ 110.652216][ T6310] ? filemap_add_folio+0x190/0x3d0 [ 110.659157][ T6310] page_cache_ra_unbounded+0x661/0x740 [ 110.665305][ T6310] f2fs_readdir+0x498/0x970 [ 110.670728][ T6310] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 110.676059][ T6310] ? mutex_lock_nested+0x20/0x20 [ 110.682230][ T6310] ? iterate_dir+0xcb/0x590 [ 110.687951][ T6310] ? down_read_killable+0x1d0/0x340 [ 110.694044][ T6310] ? fsnotify_perm+0x271/0x5e0 [ 110.701396][ T6310] iterate_dir+0x1bd/0x590 [ 110.706670][ T6310] __se_sys_getdents64+0xf6/0x270 [ 110.712852][ T6310] ? __x64_sys_getdents64+0x80/0x80 [ 110.718822][ T6310] ? filldir+0x620/0x620 [ 110.724440][ T6310] ? lockdep_hardirqs_on+0x98/0x150 [ 110.730431][ T6310] do_syscall_64+0x55/0xb0 [ 110.736389][ T6310] ? clear_bhb_loop+0x40/0x90 [ 110.741901][ T6310] ? clear_bhb_loop+0x40/0x90 [ 110.747752][ T6310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.755828][ T6310] RIP: 0033:0x7f2df5d9e199 [ 110.761181][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.785903][ T6310] RSP: 002b:00007f2df6bab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 110.796813][ T6310] RAX: ffffffffffffffda RBX: 00007f2df6025fa0 RCX: 00007f2df5d9e199 [ 110.807998][ T6310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 110.819141][ T6310] RBP: 00007f2df5e35888 R08: 0000000000000000 R09: 0000000000000000 [ 110.830655][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.841608][ T6310] R13: 00007f2df6026038 R14: 00007f2df6025fa0 R15: 00007fff604d4418 [ 110.850989][ T6310] [ 110.861841][ T6310] syz.1.188: attempt to access beyond end of device [ 110.861841][ T6310] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 110.983715][ T5780] syz-executor: attempt to access beyond end of device [ 110.983715][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.023071][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 111.048479][ T6341] loop0: detected capacity change from 0 to 4096 [ 111.123591][ T6341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.774979][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.192220][ T6372] futex_wake_op: syz.0.212 tries to shift op by 32; fix this program [ 112.203650][ T6373] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 112.239694][ T6373] netlink: 76 bytes leftover after parsing attributes in process `syz.1.213'. [ 112.454912][ T6379] ptp ptp0: new virtual clock ptp1 [ 112.474996][ T6379] ptp ptp0: guarantee physical clock free running [ 112.496369][ T6381] ptp ptp0: delete virtual clock ptp1 [ 112.530885][ T6381] ptp ptp0: only physical clock in use now [ 112.601586][ T6364] loop3: detected capacity change from 0 to 40427 [ 112.661650][ T6364] F2FS-fs (loop3): invalid crc value [ 112.702873][ T6364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.790330][ T6388] loop1: detected capacity change from 0 to 4096 [ 112.849192][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.869079][ T6364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.984678][ T6364] F2FS-fs (loop3): access invalid blkaddr:3 [ 113.017958][ T6364] CPU: 1 PID: 6364 Comm: syz.3.209 Not tainted syzkaller #0 [ 113.026753][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.036877][ T6364] Call Trace: [ 113.040177][ T6364] [ 113.043555][ T6364] dump_stack_lvl+0x18c/0x250 [ 113.048650][ T6364] ? show_regs_print_info+0x20/0x20 [ 113.054343][ T6364] ? __lock_acquire+0x1431/0x7eb0 [ 113.059538][ T6364] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 113.065710][ T6364] f2fs_map_blocks+0xc20/0x4080 [ 113.071364][ T6364] ? verify_lock_unused+0x140/0x140 [ 113.076670][ T6364] ? f2fs_get_block_locked+0xe0/0xe0 [ 113.082007][ T6364] ? __might_sleep+0xe0/0xe0 [ 113.086651][ T6364] ? read_lock_is_recursive+0x20/0x20 [ 113.092074][ T6364] ? f2fs_precache_extents+0x19f/0x260 [ 113.098118][ T6364] ? down_write+0x16e/0x200 [ 113.102739][ T6364] ? down_read_killable+0x340/0x340 [ 113.108034][ T6364] ? up_write+0x1be/0x410 [ 113.112793][ T6364] ? max_file_blocks+0xb0/0x1b0 [ 113.117801][ T6364] f2fs_precache_extents+0x194/0x260 [ 113.123544][ T6364] ? f2fs_pin_file_control+0x1a0/0x1a0 [ 113.130380][ T6364] ? finish_task_switch+0x262/0x8f0 [ 113.135800][ T6364] ? finish_task_switch+0x262/0x8f0 [ 113.141213][ T6364] f2fs_fiemap+0x13b/0x15b0 [ 113.145875][ T6364] ? f2fs_overwrite_io+0x200/0x200 [ 113.151233][ T6364] ? __might_fault+0xaa/0x120 [ 113.157396][ T6364] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.163053][ T6364] ? __might_fault+0xaa/0x120 [ 113.169785][ T6364] ? __might_fault+0xc6/0x120 [ 113.175734][ T6364] ? __might_fault+0xaa/0x120 [ 113.182923][ T6364] do_vfs_ioctl+0x14fe/0x1cc0 [ 113.189616][ T6364] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 113.195931][ T6364] ? futex_wait_queue+0x27/0x1b0 [ 113.202076][ T6364] ? futex_unqueue+0xcb/0xf0 [ 113.210145][ T6364] ? tomoyo_domain+0xd6/0x120 [ 113.216732][ T6364] ? tomoyo_profile+0x11/0x50 [ 113.223141][ T6364] ? tomoyo_init_request_info+0x1dd/0x330 [ 113.229658][ T6364] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 113.236247][ T6364] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 113.242090][ T6364] ? __fget_files+0x28/0x460 [ 113.248166][ T6364] ? bpf_lsm_file_ioctl+0x9/0x10 [ 113.254723][ T6364] ? security_file_ioctl+0x80/0xa0 [ 113.261480][ T6364] __se_sys_ioctl+0x83/0x170 [ 113.267586][ T6364] do_syscall_64+0x55/0xb0 [ 113.273369][ T6364] ? clear_bhb_loop+0x40/0x90 [ 113.279264][ T6364] ? clear_bhb_loop+0x40/0x90 [ 113.284885][ T6364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.292563][ T6364] RIP: 0033:0x7fa6e8b9e199 [ 113.297666][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.318020][ T6364] RSP: 002b:00007fa6e9b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.327806][ T6364] RAX: ffffffffffffffda RBX: 00007fa6e8e25fa0 RCX: 00007fa6e8b9e199 [ 113.338075][ T6364] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004 [ 113.349078][ T6364] RBP: 00007fa6e8c35888 R08: 0000000000000000 R09: 0000000000000000 [ 113.358711][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.369449][ T6364] R13: 00007fa6e8e26038 R14: 00007fa6e8e25fa0 R15: 00007fff867aeda8 [ 113.379879][ T6364] [ 113.474639][ T6376] loop2: detected capacity change from 0 to 32768 [ 113.624738][ T5773] syz-executor: attempt to access beyond end of device [ 113.624738][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.686529][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 113.739465][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.984372][ T6396] loop1: detected capacity change from 0 to 512 [ 114.020100][ T6396] EXT4-fs: Ignoring removed nobh option [ 114.133514][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.189143][ T6396] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.302249][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.325750][ T6405] loop2: detected capacity change from 0 to 256 [ 115.133672][ T6415] loop3: detected capacity change from 0 to 1024 [ 115.222094][ T6415] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 115.503754][ T6408] loop1: detected capacity change from 0 to 40427 [ 115.556232][ T6408] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 115.562925][ T6408] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 115.583119][ T6408] F2FS-fs (loop1): invalid crc value [ 115.828966][ T6408] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 115.856162][ T6408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.969405][ T6424] hfsplus: filesystem is marked journaled, leaving read-only. [ 116.025529][ T28] audit: type=1800 audit(1791448167.928:4): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 116.123043][ T5780] syz-executor: attempt to access beyond end of device [ 116.123043][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.185230][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.379286][ T6419] loop0: detected capacity change from 0 to 32768 [ 116.387437][ T6417] loop2: detected capacity change from 0 to 40427 [ 116.414493][ T6417] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 116.446359][ T6417] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.512244][ T6417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.690946][ T6417] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.736036][ T6417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.281793][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 117.451407][ T6448] loop3: detected capacity change from 0 to 512 [ 117.494743][ T6448] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 117.507105][ T6448] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.239: corrupted in-inode xattr: e_value size too large [ 117.539039][ T6448] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.239: couldn't read orphan inode 15 (err -117) [ 117.588526][ T6448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.658543][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.832462][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 118.078350][ T6446] loop0: detected capacity change from 0 to 32768 [ 118.970879][ T6483] loop2: detected capacity change from 0 to 1024 [ 119.093088][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.195246][ T6495] loop1: detected capacity change from 0 to 2048 [ 119.237114][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.273694][ T6495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.316274][ T6495] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.425701][ T6495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.258: bg 0: block 345: padding at end of block bitmap is not set [ 119.458725][ T6495] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 119.478443][ T6495] EXT4-fs (loop1): This should not happen!! Data will be lost [ 119.478443][ T6495] [ 119.494355][ T6495] EXT4-fs (loop1): Total free blocks count 0 [ 119.501702][ T6495] EXT4-fs (loop1): Free/Dirty block details [ 119.516770][ T6495] EXT4-fs (loop1): free_blocks=0 [ 119.526080][ T6495] EXT4-fs (loop1): dirty_blocks=16 [ 119.536137][ T6495] EXT4-fs (loop1): Block reservation details [ 119.543565][ T6495] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 119.667796][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.682122][ T28] audit: type=1326 audit(1791448171.608:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.2.262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38d599e199 code=0x0 [ 119.849331][ T6513] loop0: detected capacity change from 0 to 2048 [ 119.881784][ T6513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.934857][ T28] audit: type=1800 audit(1791448171.858:6): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.265" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 120.257325][ T5815] wiimote 0005:057E:0330.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 120.280766][ T5815] wiimote 0005:057E:0330.0002: New device registered [ 120.313510][ T6519] wiimote 0005:057E:0330.0002: Device removed [ 120.345719][ T6520] fido_id[6520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.715334][ T6531] loop3: detected capacity change from 0 to 512 [ 120.737209][ T6531] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 120.751332][ T6531] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.c, last update device: loop14 [ 121.114414][ T6536] loop3: detected capacity change from 0 to 40427 [ 121.126172][ T6536] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 121.133997][ T6536] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 121.154631][ T6536] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 121.169880][ T6536] F2FS-fs (loop3): invalid crc value [ 121.184695][ T6536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.263148][ T6536] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 121.270570][ T6536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.339794][ T6536] F2FS-fs (loop3): access invalid blkaddr:2816 [ 121.354094][ T6536] CPU: 0 PID: 6536 Comm: syz.3.275 Not tainted syzkaller #0 [ 121.361839][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.372029][ T6536] Call Trace: [ 121.375381][ T6536] [ 121.378370][ T6536] dump_stack_lvl+0x18c/0x250 [ 121.383102][ T6536] ? show_regs_print_info+0x20/0x20 [ 121.388604][ T6536] ? mark_lock+0x94/0x320 [ 121.393610][ T6536] ? __lock_acquire+0x135d/0x7eb0 [ 121.398806][ T6536] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 121.404510][ T6536] f2fs_map_blocks+0xc20/0x4080 [ 121.409688][ T6536] ? f2fs_get_block_locked+0xe0/0xe0 [ 121.415018][ T6536] ? xa_load+0x64/0x2e0 [ 121.419231][ T6536] ? xa_load+0x64/0x2e0 [ 121.423459][ T6536] ? xa_load+0x2b7/0x2e0 [ 121.428148][ T6536] ? xa_load+0x64/0x2e0 [ 121.432397][ T6536] ? page_index+0xe6/0x480 [ 121.437106][ T6536] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 121.443310][ T6536] ? detach_page_private+0x4d0/0x4d0 [ 121.448859][ T6536] ? __mod_lruvec_page_state+0xa5/0x410 [ 121.455741][ T6536] ? f2fs_readahead+0x167/0x2f0 [ 121.461358][ T6536] ? f2fs_dirty_data_folio+0x830/0x830 [ 121.466893][ T6536] read_pages+0x18b/0x860 [ 121.471608][ T6536] ? __lock_acquire+0x7eb0/0x7eb0 [ 121.476849][ T6536] ? page_cache_ra_unbounded+0x740/0x740 [ 121.483708][ T6536] ? folio_add_lru+0x323/0xce0 [ 121.488946][ T6536] ? folio_add_lru+0x512/0xce0 [ 121.494310][ T6536] ? filemap_add_folio+0x190/0x3d0 [ 121.500155][ T6536] page_cache_ra_unbounded+0x661/0x740 [ 121.507140][ T6536] f2fs_readdir+0x498/0x970 [ 121.512166][ T6536] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 121.518519][ T6536] ? mutex_lock_nested+0x20/0x20 [ 121.523963][ T6536] ? iterate_dir+0xcb/0x590 [ 121.529326][ T6536] ? down_read_killable+0x1d0/0x340 [ 121.535204][ T6536] ? fsnotify_perm+0x271/0x5e0 [ 121.540299][ T6536] iterate_dir+0x1bd/0x590 [ 121.544885][ T6536] __se_sys_getdents64+0xf6/0x270 [ 121.551019][ T6536] ? __x64_sys_getdents64+0x80/0x80 [ 121.556998][ T6536] ? filldir+0x620/0x620 [ 121.561588][ T6536] ? lockdep_hardirqs_on+0x98/0x150 [ 121.567566][ T6536] do_syscall_64+0x55/0xb0 [ 121.572675][ T6536] ? clear_bhb_loop+0x40/0x90 [ 121.578269][ T6536] ? clear_bhb_loop+0x40/0x90 [ 121.584277][ T6536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.590618][ T6536] RIP: 0033:0x7fa6e8b9e199 [ 121.597195][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.619576][ T6536] RSP: 002b:00007fa6e9b2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 121.628143][ T6536] RAX: ffffffffffffffda RBX: 00007fa6e8e25fa0 RCX: 00007fa6e8b9e199 [ 121.636737][ T6536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 121.645734][ T6536] RBP: 00007fa6e8c35888 R08: 0000000000000000 R09: 0000000000000000 [ 121.655274][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.663919][ T6536] R13: 00007fa6e8e26038 R14: 00007fa6e8e25fa0 R15: 00007fff867aeda8 [ 121.674765][ T6536] [ 121.681308][ T6536] F2FS-fs (loop3): access invalid blkaddr:2816 [ 121.696860][ T6536] CPU: 1 PID: 6536 Comm: syz.3.275 Not tainted syzkaller #0 [ 121.706245][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.719230][ T6536] Call Trace: [ 121.723733][ T6536] [ 121.728743][ T6536] dump_stack_lvl+0x18c/0x250 [ 121.731008][ T8] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 121.733805][ T6536] ? show_regs_print_info+0x20/0x20 [ 121.733843][ T6536] ? mark_lock+0x94/0x320 [ 121.733869][ T6536] ? __lock_acquire+0x135d/0x7eb0 [ 121.733912][ T6536] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 121.733947][ T6536] f2fs_map_blocks+0xc20/0x4080 [ 121.734010][ T6536] ? f2fs_get_block_locked+0xe0/0xe0 [ 121.734041][ T6536] ? xa_load+0x64/0x2e0 [ 121.734083][ T6536] ? xa_load+0x64/0x2e0 [ 121.734112][ T6536] ? xa_load+0x2b7/0x2e0 [ 121.734137][ T6536] ? xa_load+0x64/0x2e0 [ 121.734166][ T6536] ? page_index+0xe6/0x480 [ 121.734198][ T6536] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 121.734246][ T6536] ? detach_page_private+0x4d0/0x4d0 [ 121.734270][ T6536] ? __mod_lruvec_page_state+0xa5/0x410 [ 121.734314][ T6536] ? f2fs_readahead+0x167/0x2f0 [ 121.734346][ T6536] ? f2fs_dirty_data_folio+0x830/0x830 [ 121.734374][ T6536] read_pages+0x18b/0x860 [ 121.734395][ T6536] ? __lock_acquire+0x7eb0/0x7eb0 [ 121.734431][ T6536] ? page_cache_ra_unbounded+0x740/0x740 [ 121.734456][ T6536] ? folio_add_lru+0x323/0xce0 [ 121.734479][ T6536] ? folio_add_lru+0x512/0xce0 [ 121.734503][ T6536] ? filemap_add_folio+0x190/0x3d0 [ 121.734525][ T6536] page_cache_ra_unbounded+0x661/0x740 [ 121.734555][ T6536] f2fs_readdir+0x498/0x970 [ 121.734592][ T6536] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 121.734616][ T6536] ? mutex_lock_nested+0x20/0x20 [ 121.734646][ T6536] ? iterate_dir+0xcb/0x590 [ 121.734671][ T6536] ? down_read_killable+0x1d0/0x340 [ 121.734693][ T6536] ? fsnotify_perm+0x271/0x5e0 [ 121.734807][ T6536] iterate_dir+0x1bd/0x590 [ 121.926421][ T6536] __se_sys_getdents64+0xf6/0x270 [ 121.931572][ T6536] ? __x64_sys_getdents64+0x80/0x80 [ 121.937316][ T6536] ? filldir+0x620/0x620 [ 121.941796][ T6536] ? lockdep_hardirqs_on+0x98/0x150 [ 121.947128][ T6536] do_syscall_64+0x55/0xb0 [ 121.951666][ T6536] ? clear_bhb_loop+0x40/0x90 [ 121.956554][ T6536] ? clear_bhb_loop+0x40/0x90 [ 121.961286][ T6536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.967238][ T6536] RIP: 0033:0x7fa6e8b9e199 [ 121.972506][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.992506][ T6536] RSP: 002b:00007fa6e9b2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 122.001463][ T6536] RAX: ffffffffffffffda RBX: 00007fa6e8e25fa0 RCX: 00007fa6e8b9e199 [ 122.009943][ T6536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 122.019082][ T6536] RBP: 00007fa6e8c35888 R08: 0000000000000000 R09: 0000000000000000 [ 122.028522][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.038639][ T6536] R13: 00007fa6e8e26038 R14: 00007fa6e8e25fa0 R15: 00007fff867aeda8 [ 122.047035][ T6536] [ 122.095842][ T8] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input7 [ 122.133271][ T6536] syz.3.275: attempt to access beyond end of device [ 122.133271][ T6536] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 122.174902][ T8] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input8 [ 122.194136][ T8] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input6 [ 122.337295][ T5773] syz-executor: attempt to access beyond end of device [ 122.337295][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.368536][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.555285][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 122.582541][ T6550] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 122.822537][ T6559] xt_hashlimit: size too large, truncated to 1048576 [ 122.842399][ T6559] xt_hashlimit: max too large, truncated to 1048576 [ 122.886990][ T6560] loop1: detected capacity change from 0 to 4096 [ 122.979201][ T6560] ntfs3: loop1: Failed to load $Extend (-22). [ 122.990932][ T6560] ntfs3: loop1: Failed to initialize $Extend. [ 123.077185][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.257622][ T6563] FAULT_INJECTION: forcing a failure. [ 123.257622][ T6563] name failslab, interval 1, probability 0, space 0, times 1 [ 123.277192][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 123.286446][ T6563] CPU: 0 PID: 6563 Comm: syz.1.286 Not tainted syzkaller #0 [ 123.290688][ T5840] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.294501][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.305343][ T5840] usb 4-1: config 0 has no interface number 0 [ 123.316424][ T6563] Call Trace: [ 123.316449][ T6563] [ 123.316464][ T6563] dump_stack_lvl+0x18c/0x250 [ 123.316498][ T6563] ? show_regs_print_info+0x20/0x20 [ 123.316515][ T6563] ? load_image+0x420/0x420 [ 123.316545][ T6563] ? __might_sleep+0xe0/0xe0 [ 123.316571][ T6563] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.323483][ T5840] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.326707][ T6563] should_fail_ex+0x394/0x4c0 [ 123.326761][ T6563] should_failslab+0x9/0x20 [ 123.326788][ T6563] slab_pre_alloc_hook+0x59/0x300 [ 123.326807][ T6563] ? madvise_collapse+0x151/0xd80 [ 123.326835][ T6563] __kmem_cache_alloc_node+0x53/0x250 [ 123.330087][ T5840] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.334572][ T6563] ? madvise_collapse+0x151/0xd80 [ 123.334617][ T6563] kmalloc_trace+0x2a/0xe0 [ 123.334647][ T6563] madvise_collapse+0x151/0xd80 [ 123.334678][ T6563] ? generic_get_unmapped_area+0x540/0x540 [ 123.340858][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.345709][ T6563] do_madvise+0x92f/0x3790 [ 123.345775][ T6563] ? madvise_set_anon_name+0x440/0x440 [ 123.358979][ T5840] usb 4-1: config 0 descriptor?? [ 123.369466][ T6563] ? schedule+0xc7/0x170 [ 123.369506][ T6563] ? futex_wait_queue+0x27/0x1b0 [ 123.369527][ T6563] ? futex_wait_queue+0x138/0x1b0 [ 123.369546][ T6563] ? futex_unqueue+0xcb/0xf0 [ 123.369565][ T6563] ? futex_wait+0x4a7/0x5c0 [ 123.369585][ T6563] ? futex_setup_timer+0xc0/0xc0 [ 123.369605][ T6563] ? futex_wait_setup+0x270/0x270 [ 123.369650][ T6563] ? file_end_write+0x159/0x250 [ 123.369678][ T6563] ? vfs_write+0x5de/0x9a0 [ 123.369701][ T6563] ? do_futex+0x2ff/0x3e0 [ 123.511061][ T6563] ? __ia32_sys_get_robust_list+0x110/0x110 [ 123.517396][ T6563] ? lock_chain_count+0x20/0x20 [ 123.522944][ T6563] __x64_sys_madvise+0xa6/0xc0 [ 123.529280][ T6563] do_syscall_64+0x55/0xb0 [ 123.534233][ T6563] ? clear_bhb_loop+0x40/0x90 [ 123.539335][ T6563] ? clear_bhb_loop+0x40/0x90 [ 123.545945][ T6563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.553799][ T6563] RIP: 0033:0x7f2df5d9e199 [ 123.559468][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.582189][ T6563] RSP: 002b:00007f2df6bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 123.592577][ T6563] RAX: ffffffffffffffda RBX: 00007f2df6025fa0 RCX: 00007f2df5d9e199 [ 123.601427][ T6563] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 123.610055][ T6563] RBP: 00007f2df5e35888 R08: 0000000000000000 R09: 0000000000000000 [ 123.619024][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.627942][ T6563] R13: 00007f2df6026038 R14: 00007f2df6025fa0 R15: 00007fff604d4418 [ 123.636149][ T6563] [ 123.726120][ T5840] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 123.857104][ T6565] FAULT_INJECTION: forcing a failure. [ 123.857104][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 123.872833][ T6565] CPU: 1 PID: 6565 Comm: syz.1.287 Not tainted syzkaller #0 [ 123.880545][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.891000][ T6565] Call Trace: [ 123.894410][ T6565] [ 123.897441][ T6565] dump_stack_lvl+0x18c/0x250 [ 123.903398][ T6565] ? show_regs_print_info+0x20/0x20 [ 123.908796][ T6565] ? load_image+0x420/0x420 [ 123.913429][ T6565] ? __might_sleep+0xe0/0xe0 [ 123.918157][ T6565] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.923633][ T6565] should_fail_ex+0x394/0x4c0 [ 123.928446][ T6565] should_failslab+0x9/0x20 [ 123.933292][ T6565] slab_pre_alloc_hook+0x59/0x300 [ 123.939103][ T6565] ? aa_path_link+0xf80/0xf80 [ 123.944635][ T6565] kmem_cache_alloc_node+0x5e/0x310 [ 123.950162][ T6565] ? __alloc_skb+0x103/0x2c0 [ 123.955365][ T6565] __alloc_skb+0x103/0x2c0 [ 123.959859][ T6565] vhci_write+0xc2/0x460 [ 123.965056][ T6565] vfs_write+0x474/0x9a0 [ 123.969562][ T6565] ? file_end_write+0x250/0x250 [ 123.974694][ T6565] ? __fget_files+0x3fc/0x460 [ 123.979815][ T6565] ? __fdget_pos+0x1d8/0x330 [ 123.984497][ T6565] ? ksys_write+0x74/0x260 [ 123.989248][ T6565] ksys_write+0x151/0x260 [ 123.993946][ T6565] ? __ia32_sys_read+0x90/0x90 [ 123.998967][ T6565] ? lockdep_hardirqs_on+0x98/0x150 [ 124.005147][ T6565] do_syscall_64+0x55/0xb0 [ 124.009892][ T6565] ? clear_bhb_loop+0x40/0x90 [ 124.015098][ T6565] ? clear_bhb_loop+0x40/0x90 [ 124.020586][ T6565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.027347][ T6565] RIP: 0033:0x7f2df5d5e9ce [ 124.031904][ T6565] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.052003][ T6565] RSP: 002b:00007f2df6baafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.060996][ T6565] RAX: ffffffffffffffda RBX: 00007f2df6bab6c0 RCX: 00007f2df5d5e9ce [ 124.070243][ T6565] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 00000000000000ca [ 124.079481][ T6565] RBP: 00007f2df5e35888 R08: 0000000000000000 R09: 0000000000000000 [ 124.087865][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.096422][ T6565] R13: 00007f2df6026038 R14: 00007f2df6025fa0 R15: 00007fff604d4418 [ 124.105281][ T6565] [ 125.010809][ T6570] mmap: syz.1.289 (6570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.209318][ T5789] usb 4-1: USB disconnect, device number 3 [ 125.416163][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.596113][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 125.606454][ T5815] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 125.615159][ T5815] usb 2-1: config 0 has no interface number 0 [ 125.629032][ T5815] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 125.639329][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.648750][ T5815] usb 2-1: Product: syz [ 125.655065][ T5815] usb 2-1: Manufacturer: syz [ 125.661896][ T5815] usb 2-1: SerialNumber: syz [ 125.673839][ T5815] usb 2-1: config 0 descriptor?? [ 125.682590][ T5815] smsc95xx v2.0.0 [ 126.095011][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 126.110442][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.312220][ T6586] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.383934][ T6588] loop2: detected capacity change from 0 to 512 [ 126.427422][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.448118][ T6588] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.490649][ T6588] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.297: corrupted inode contents [ 126.511022][ T6588] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #2: comm syz.2.297: mark_inode_dirty error [ 126.525660][ T6588] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.297: corrupted inode contents [ 126.527389][ T5815] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.551627][ T5815] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 126.554818][ T6588] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.297: mark_inode_dirty error [ 126.567605][ T5815] usb 2-1: USB disconnect, device number 2 [ 126.592772][ T6592] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.297: corrupted inode contents [ 126.650202][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.705136][ T6594] loop3: detected capacity change from 0 to 256 [ 126.943368][ T6600] x86/PAT: syz.3.300:6600 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 127.013495][ T6604] loop3: detected capacity change from 0 to 16 [ 127.033209][ T6604] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.483790][ T6625] loop1: detected capacity change from 0 to 512 [ 127.513202][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 127.531628][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.547648][ T6625] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.636064][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.749380][ T6626] team0: Port device team_slave_0 removed [ 127.815734][ T6632] gadgetfs: bound to dummy_udc driver [ 127.970494][ T6635] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.064032][ T6639] overlayfs: upper fs does not support file handles, falling back to index=off. [ 128.085589][ T6643] ipvlan2: entered promiscuous mode [ 128.107953][ T6643] team0: Device ipvlan2 failed to register rx_handler [ 128.416515][ T6653] input: syz0 as /devices/virtual/input/input9 [ 129.070633][ T6680] loop1: detected capacity change from 0 to 512 [ 129.110946][ T6680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.127135][ T6680] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.172816][ T28] audit: type=1800 audit(1791448181.098:7): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.336" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 129.249433][ T6684] loop0: detected capacity change from 0 to 4096 [ 129.270214][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.504238][ T6692] netlink: 64 bytes leftover after parsing attributes in process `syz.2.339'. [ 129.535220][ T6684] EXT4-fs: Ignoring removed orlov option [ 129.576202][ T6684] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.600346][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.775825][ T6698] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 129.791173][ T6684] ------------[ cut here ]------------ [ 129.797502][ T6684] WARNING: CPU: 1 PID: 6684 at fs/ext4/ext4_jbd2.c:73 ext4_journal_check_start+0x1eb/0x250 [ 129.808705][ T6684] Modules linked in: [ 129.813403][ T6684] CPU: 1 PID: 6684 Comm: syz.0.337 Not tainted syzkaller #0 [ 129.822647][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.834011][ T6684] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 129.840789][ T6684] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 42 7f 59 ff 41 bf fb ff ff ff eb e5 e8 35 7f 59 ff <0f> 0b eb d6 e8 2c 7f 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 129.861914][ T6684] RSP: 0018:ffffc9000332f658 EFLAGS: 00010287 [ 129.868168][ T6684] RAX: ffffffff822e117b RBX: ffff888060afa000 RCX: 0000000000080000 [ 129.876374][ T6684] RDX: ffffc9000bde1000 RSI: 000000000001fd21 RDI: 000000000001fd22 [ 129.884395][ T6684] RBP: 0000000000000bfe R08: ffff888060afc417 R09: 1ffff1100c15f882 [ 129.892517][ T6684] R10: dffffc0000000000 R11: ffffed100c15f883 R12: dffffc0000000000 [ 129.900622][ T6684] R13: 1ffff1100c15f4c6 R14: ffff888060afa630 R15: 0000000000000001 [ 129.908864][ T6684] FS: 00007f8b385956c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 129.918378][ T6684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.925733][ T6684] CR2: 00007f8b359f6d58 CR3: 000000002f49d000 CR4: 00000000003506e0 [ 129.935380][ T6684] Call Trace: [ 129.938917][ T6684] [ 129.941894][ T6684] __ext4_journal_start_sb+0x147/0x560 [ 129.947575][ T6684] __ext4_new_inode+0x13c7/0x3aa0 [ 129.952885][ T6684] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 129.958849][ T6684] ? dquot_initialize+0x20/0x20 [ 129.963767][ T6684] ext4_mkdir+0x40b/0xc90 [ 129.968371][ T6684] ? ext4_symlink+0x940/0x940 [ 129.973175][ T6684] ? inode_permission+0xf3/0x480 [ 129.978708][ T6684] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 129.983789][ T6684] ? security_inode_mkdir+0xb7/0x100 [ 129.989252][ T6684] vfs_mkdir+0x2a5/0x470 [ 129.993571][ T6684] cachefiles_get_directory+0x231/0xa70 [ 129.999650][ T6684] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 130.006304][ T6684] ? vfs_statfs+0x195/0x2c0 [ 130.010881][ T6684] cachefiles_add_cache+0xa88/0xd50 [ 130.016196][ T6684] ? init_once+0x20/0x20 [ 130.020501][ T6684] ? __asan_memcpy+0x40/0x70 [ 130.025152][ T6684] ? kstrdup+0x65/0x80 [ 130.029990][ T6684] ? cachefiles_daemon_bind+0x272/0x3a0 [ 130.035714][ T6684] cachefiles_daemon_write+0x5f9/0x6b0 [ 130.041501][ T6684] ? cachefiles_daemon_read+0x450/0x450 [ 130.047256][ T6684] vfs_write+0x299/0x9a0 [ 130.051641][ T6684] ? file_end_write+0x250/0x250 [ 130.056608][ T6684] ? __fget_files+0x28/0x460 [ 130.061397][ T6684] ? __fget_files+0x3fc/0x460 [ 130.066280][ T6684] ? __fdget_pos+0x1d8/0x330 [ 130.071111][ T6684] ? ksys_write+0x74/0x260 [ 130.075857][ T6684] ksys_write+0x151/0x260 [ 130.080467][ T6684] ? __ia32_sys_read+0x90/0x90 [ 130.085581][ T6684] ? lockdep_hardirqs_on+0x98/0x150 [ 130.091005][ T6684] do_syscall_64+0x55/0xb0 [ 130.095600][ T6684] ? clear_bhb_loop+0x40/0x90 [ 130.100394][ T6684] ? clear_bhb_loop+0x40/0x90 [ 130.105560][ T6684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.112021][ T6684] RIP: 0033:0x7f8b3779e199 [ 130.116946][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.138224][ T6684] RSP: 002b:00007f8b38595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.147065][ T6684] RAX: ffffffffffffffda RBX: 00007f8b37a25fa0 RCX: 00007f8b3779e199 [ 130.148942][ T6693] loop1: detected capacity change from 0 to 32768 [ 130.156368][ T6684] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 130.156447][ T6684] RBP: 00007f8b37835888 R08: 0000000000000000 R09: 0000000000000000 [ 130.156460][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.156472][ T6684] R13: 00007f8b37a26038 R14: 00007f8b37a25fa0 R15: 00007ffd332dd6a8 [ 130.156503][ T6684] [ 130.156573][ T6684] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.156584][ T6684] CPU: 1 PID: 6684 Comm: syz.0.337 Not tainted syzkaller #0 [ 130.156678][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.156689][ T6684] Call Trace: [ 130.156701][ T6684] [ 130.156709][ T6684] dump_stack_lvl+0x18c/0x250 [ 130.156738][ T6684] ? show_regs_print_info+0x20/0x20 [ 130.156755][ T6684] ? load_image+0x420/0x420 [ 130.156792][ T6684] panic+0x2ca/0x720 [ 130.156816][ T6684] ? bpf_jit_dump+0xd0/0xd0 [ 130.156853][ T6684] __warn+0x2e0/0x470 [ 130.156872][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.156900][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.156923][ T6684] report_bug+0x2be/0x4f0 [ 130.156942][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.156970][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.156999][ T6684] ? ext4_journal_check_start+0x1ed/0x250 [ 130.157025][ T6684] handle_bug+0xcf/0x120 [ 130.157043][ T6684] exc_invalid_op+0x1a/0x50 [ 130.157061][ T6684] asm_exc_invalid_op+0x1a/0x20 [ 130.157080][ T6684] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 130.157111][ T6684] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 42 7f 59 ff 41 bf fb ff ff ff eb e5 e8 35 7f 59 ff <0f> 0b eb d6 e8 2c 7f 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 130.157126][ T6684] RSP: 0018:ffffc9000332f658 EFLAGS: 00010287 [ 130.157145][ T6684] RAX: ffffffff822e117b RBX: ffff888060afa000 RCX: 0000000000080000 [ 130.157159][ T6684] RDX: ffffc9000bde1000 RSI: 000000000001fd21 RDI: 000000000001fd22 [ 130.157173][ T6684] RBP: 0000000000000bfe R08: ffff888060afc417 R09: 1ffff1100c15f882 [ 130.157187][ T6684] R10: dffffc0000000000 R11: ffffed100c15f883 R12: dffffc0000000000 [ 130.157202][ T6684] R13: 1ffff1100c15f4c6 R14: ffff888060afa630 R15: 0000000000000001 [ 130.157223][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.157258][ T6684] ? ext4_journal_check_start+0x1eb/0x250 [ 130.157289][ T6684] __ext4_journal_start_sb+0x147/0x560 [ 130.157349][ T6684] __ext4_new_inode+0x13c7/0x3aa0 [ 130.157395][ T6684] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 130.157422][ T6684] ? dquot_initialize+0x20/0x20 [ 130.157458][ T6684] ext4_mkdir+0x40b/0xc90 [ 130.157497][ T6684] ? ext4_symlink+0x940/0x940 [ 130.157526][ T6684] ? inode_permission+0xf3/0x480 [ 130.157544][ T6684] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 130.157563][ T6684] ? security_inode_mkdir+0xb7/0x100 [ 130.157605][ T6684] vfs_mkdir+0x2a5/0x470 [ 130.157632][ T6684] cachefiles_get_directory+0x231/0xa70 [ 130.157666][ T6684] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 130.157693][ T6684] ? vfs_statfs+0x195/0x2c0 [ 130.157720][ T6684] cachefiles_add_cache+0xa88/0xd50 [ 130.157752][ T6684] ? init_once+0x20/0x20 [ 130.157790][ T6684] ? __asan_memcpy+0x40/0x70 [ 130.157817][ T6684] ? kstrdup+0x65/0x80 [ 130.157843][ T6684] ? cachefiles_daemon_bind+0x272/0x3a0 [ 130.157872][ T6684] cachefiles_daemon_write+0x5f9/0x6b0 [ 130.157898][ T6684] ? cachefiles_daemon_read+0x450/0x450 [ 130.157925][ T6684] vfs_write+0x299/0x9a0 [ 130.157956][ T6684] ? file_end_write+0x250/0x250 [ 130.157984][ T6684] ? __fget_files+0x28/0x460 [ 130.158009][ T6684] ? __fget_files+0x3fc/0x460 [ 130.158043][ T6684] ? __fdget_pos+0x1d8/0x330 [ 130.158066][ T6684] ? ksys_write+0x74/0x260 [ 130.158094][ T6684] ksys_write+0x151/0x260 [ 130.158122][ T6684] ? __ia32_sys_read+0x90/0x90 [ 130.158152][ T6684] ? lockdep_hardirqs_on+0x98/0x150 [ 130.158178][ T6684] do_syscall_64+0x55/0xb0 [ 130.158195][ T6684] ? clear_bhb_loop+0x40/0x90 [ 130.158212][ T6684] ? clear_bhb_loop+0x40/0x90 [ 130.158233][ T6684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.158261][ T6684] RIP: 0033:0x7f8b3779e199 [ 130.158279][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.158294][ T6684] RSP: 002b:00007f8b38595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.158322][ T6684] RAX: ffffffffffffffda RBX: 00007f8b37a25fa0 RCX: 00007f8b3779e199 [ 130.158336][ T6684] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 130.158348][ T6684] RBP: 00007f8b37835888 R08: 0000000000000000 R09: 0000000000000000 [ 130.158361][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.158373][ T6684] R13: 00007f8b37a26038 R14: 00007f8b37a25fa0 R15: 00007ffd332dd6a8 [ 130.158402][ T6684] [ 130.163572][ T6684] Kernel Offset: disabled