last executing test programs: 2m15.359763824s ago: executing program 3 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m14.44322815s ago: executing program 3 (id=525): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000014}, 0x4000054) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m13.867618839s ago: executing program 3 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0100000000000']) 2m13.306526644s ago: executing program 3 (id=532): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000e80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) 2m12.93412512s ago: executing program 3 (id=534): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2m12.062409034s ago: executing program 3 (id=538): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a2c0)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}}, 0x0) 2m6.440761684s ago: executing program 2 (id=557): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 2m0.163690225s ago: executing program 2 (id=570): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m57.042150003s ago: executing program 2 (id=582): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m56.862430778s ago: executing program 32 (id=538): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a2c0)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}}, 0x0) 1m56.619647086s ago: executing program 2 (id=584): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2512000000080001"], 0x3c}}, 0xc890) 1m56.082196083s ago: executing program 2 (id=585): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}}], 0x2, 0x0) 1m55.768603577s ago: executing program 2 (id=586): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f000000f680)='./file0\x00', 0x1010851, &(0x7f0000000200)={[{@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'accounting_read'}}]}, 0x0, 0xf62a, &(0x7f000000f6c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m40.280332925s ago: executing program 33 (id=586): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f000000f680)='./file0\x00', 0x1010851, &(0x7f0000000200)={[{@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'accounting_read'}}]}, 0x0, 0xf62a, &(0x7f000000f6c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m8.706397628s ago: executing program 1 (id=703): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x1, 0x0, 0x0) listxattr(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 1m7.498411475s ago: executing program 5 (id=706): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m7.306991994s ago: executing program 1 (id=707): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}]}, 0x2, 0xbe0, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x2000, 0x1, &(0x7f0000000040)="f9", 0x0, 0x0, 0x0}) 1m6.959503523s ago: executing program 5 (id=708): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x17a120, 0x400060, {0x4, 0x2101}, 0xfffffffe, 0x9}) 1m6.212430883s ago: executing program 5 (id=710): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0), 0x1, 0x4f3, &(0x7f0000000a00)="$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") socket$can_bcm(0x1d, 0x2, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x800077, 0x412, 0x6, 0x800000006, 0x1000, 0xf67, 0xf}) 1m5.699990616s ago: executing program 1 (id=712): unshare(0x26000400) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 1m5.165161439s ago: executing program 5 (id=713): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m2.495665149s ago: executing program 1 (id=724): syz_clone(0x1104000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) 1m1.390742048s ago: executing program 1 (id=727): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 1m0.795902659s ago: executing program 1 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1d4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x188, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 59.582298685s ago: executing program 5 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00222200000096231aeefcfb818d850dd9988a07f7940ef7000c00000016b8ef0ae9ce83"], 0x0}, 0x0) 57.118365736s ago: executing program 5 (id=733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x40040a4) 45.364137039s ago: executing program 34 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1d4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x188, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 41.783287049s ago: executing program 35 (id=733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x40040a4) 21.382116985s ago: executing program 4 (id=787): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x1004800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 20.789590983s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x0, 0x300000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) 20.168962677s ago: executing program 4 (id=790): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001c80)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsold}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3ff}}, {@jqfmt_vfsv0}, {@nomblk_io_submit}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 19.489450121s ago: executing program 4 (id=791): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x130) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000000)) 18.894827136s ago: executing program 4 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x4) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000240)={[{@acl}, {@wide_macs}, {@inodes_use_key_cache}, {@inline_data}, {@journal_flush_disabled}, {@wide_macs}, {@fsck}, {@metadata_checksum={'metadata_checksum', 0x3d, 'crc32c'}}, {@norecovery}, {@discard}, {@background_compression={'background_compression', 0x3d, 'zstd'}}], [{@smackfsroot}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'fsck'}}]}, 0x0, 0x594b, &(0x7f0000005d00)="$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") 17.168606462s ago: executing program 4 (id=793): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfe88, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 7.445721452s ago: executing program 0 (id=798): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x8, "11c0003daad0996b2fb7bc32d8fbb64400000000000000000000fb00", 0x7, 0x100000000, 0x1, 0x9e, 0x1, 0x200, 0x9, 0x6, [0x64a, 0x3, 0x1000, 0x6]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 5.572062943s ago: executing program 0 (id=799): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x4, 0x0, 0x8000}, {0x6}]}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="6fa341d8b8", 0x5}], 0x1) 5.263477073s ago: executing program 0 (id=800): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000640)={0x80, 0x8, 0x1, 0x3ffffffd, 0x40023, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000440)={0x80, 0x8, 0x0, 0xfffffffc, 0xef}) 5.01489879s ago: executing program 0 (id=801): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 1.674136383s ago: executing program 36 (id=793): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfe88, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 750.704997ms ago: executing program 0 (id=803): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=0x0], 0xd3, 0x599, &(0x7f00000005c0)="$eJzs3cFvHFcZAPDvTbzOOk3abRISQgqyBBJREZHjpA7giBLqWkKKqNXEOXDCxE5qdWNHdoqSqoIcEFz4Hzj1AhKqBFyQOMCVA9wQqsQJccWgShUgEjST2Z3djcEO6429ze8nJTs7882bNyPb0vfem/cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj46qsXJ86k3a4FAAAAMEhfv/z6xGRP/j+2W5UBAAAABuKK/n8AAAAAAAAAGHYpsvh+pLhzaCMdLL4/VL+0vPLWnfmZ2c1PG0vFmfuK+Pxf/czk2XMvTZ3/Quvzf5+/007Ea5evXBx/ZfXmrbWl9fWlxfH5leVrq4tL2y6h3/N7vVg8gPGbb761eP36+vjk6bNdh+80/rL/mWON6S++evRSK3Z+Znb2ckfMSO3/vvojjPAAAAB4uo1GFucixZWTP02HIiKL/nPhLdoOBm0sGnn+XdzE/MxscSPN5YWV2/nBuVYi3OjOiUdbOfITyMX70og4nNd1VEYPAADA9tUii09FihP3N9KzEbGvlQd/rpgYcOsCGk+gkpsYiYgjEXEqhiBnBwAAgF22P7J4PVL8qtmI58q8usj/vxIxvduVAwAAAHbESGRxPlJ8ML2RGsV4gIh4cX5mdvzS1fGvrVxf7YidS2WP+rC/H/AkGZsAAADAHlCPLA4VPf4b6fnHPvsfDx48GEi1AAAAgB00Fln8M1J89uVvF/PKRTEv/XPTXzp4YbZzhrnjW5STx56OiJPbfCe/Vs41OJfmUsoeKe3ejtwcAAAAUKinLP4cKT78Y734fqrMzdPIbtcMAAAA2DEpi+9Fii/PbaTUsy79vo71/duG/d3/wdZ/rP7K6q27a8s33ri96fED9YvfWr+9tnBt88MP1y7sGg6x1TqGAAAAsA21lMXfI8Vvm++1885yDYByBECVaL57ocpN66nnaNFu8GzRbtB+h+CZycnO7U1T1seYH69RXndf/7cNAAAAT5WUshiNFJ/5zcfLtf8PxCN90GXc7yLFhdUXyrhsNBrVXPqN4v/69eXm0kQeOxMpft5sxUYeG/vL2CNV7Jk89td5uQvdsfUy9mgRGnnsZB57P1K8sbZ57Meqcs/msWuR4ic/Gm/FHshjD5axx6rY09dWm4sDe8AAAACwB9RSFr+IFD/813j7lf/u/v+qt/3dd6r+/kcm6Psvff799v83OvbdK9sh9pftFSNbtFe8FilOPP9C636KtoLWsIKHax1U7RV/ixRr3+iOHS1jD1exZ7b9YAEAAGAPaY3///3VX7aH3Jc5cPl18/z/E73zAw4o/+9ckzC/5vrdt99caDaX1oZp47sR0bUn7ZGK2XisjfyHcA9UY2c2yl+qe3ulPv1u9PVnEAAAngp5/n81Utz54P12f3eZ/5dD5av8/8PvVPn/dG9BA8r/D3fsmy7nG6iNRNRv37xVOx5RX7/79ueXby7cWLqxtHJ26qWpiamp8+cma6Otzv1qq+9nBQAAAMMqz/8nIsVff/Dj9vv52+n/P9Bb0IDy/yMd+/JrVp1++Z4/9Xv7AAAA8FTI8/+fRYo/nHyvPY9ed/7fMf//O9V79qc+/XC0QLt1YED5/9GOfY3iulFNOggAAAAAAAAAAAAAAAAAAAAfEbWUxb8jxfv1kVRO+L+t+f8Wewsa0Pv/xzr2LcaTWf+v74cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQyqLLJYjxSePb6SX8x3fjDjY+QkAAAAMvf8EAAD//1T3HVY=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 0 (id=804): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x25, &(0x7f0000000380)='yeah\x00', 0x5) kernel console output (not intermixed with test programs): ce=3a.08 [ 126.030888][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.070385][ T5895] usb 4-1: config 0 descriptor?? [ 126.086539][ T6502] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.113469][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.143919][ T6502] syz.0.198: attempt to access beyond end of device [ 126.143919][ T6502] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 126.156336][ T5895] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 126.164171][ T6505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.351110][ T6507] loop4: detected capacity change from 0 to 256 [ 126.516246][ T6507] FAT-fs (loop4): Directory bread(block 64) failed [ 126.541018][ T6507] FAT-fs (loop4): Directory bread(block 65) failed [ 126.571070][ T6507] FAT-fs (loop4): Directory bread(block 66) failed [ 126.621043][ T6507] FAT-fs (loop4): Directory bread(block 67) failed [ 126.627744][ T6507] FAT-fs (loop4): Directory bread(block 68) failed [ 126.672145][ T6507] FAT-fs (loop4): Directory bread(block 69) failed [ 126.690414][ T6507] FAT-fs (loop4): Directory bread(block 70) failed [ 126.740994][ T6507] FAT-fs (loop4): Directory bread(block 71) failed [ 126.757382][ T5895] gspca_cpia1: usb_control_msg 01, error -71 [ 126.762837][ T6507] FAT-fs (loop4): Directory bread(block 72) failed [ 126.789901][ T5895] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 126.797573][ T6507] FAT-fs (loop4): Directory bread(block 73) failed [ 126.847206][ T5895] usb 4-1: USB disconnect, device number 3 [ 127.152316][ T6500] loop2: detected capacity change from 0 to 32768 [ 127.384675][ T6527] loop1: detected capacity change from 0 to 1024 [ 127.443036][ T6527] hfsplus: bad catalog entry type [ 127.589568][ T49] hfsplus: b-tree write err: -5, ino 4 [ 128.054674][ T6540] loop2: detected capacity change from 0 to 128 [ 128.168593][ T30] audit: type=1326 audit(1748789742.731:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.258574][ T6547] loop3: detected capacity change from 0 to 128 [ 128.333931][ T30] audit: type=1326 audit(1748789742.731:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.426961][ T30] audit: type=1326 audit(1748789742.731:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.530941][ T30] audit: type=1326 audit(1748789742.731:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.613040][ T5946] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 128.641142][ T30] audit: type=1326 audit(1748789742.731:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.673497][ T6521] loop0: detected capacity change from 0 to 32768 [ 128.730149][ T30] audit: type=1326 audit(1748789742.731:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.823865][ T6521] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.841780][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 128.851539][ T30] audit: type=1326 audit(1748789742.731:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.881366][ T30] audit: type=1326 audit(1748789742.731:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.5.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 128.911650][ T5946] usb 6-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=69.34 [ 128.923565][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.932732][ T5946] usb 6-1: Product: syz [ 128.937013][ T5946] usb 6-1: Manufacturer: syz [ 128.942760][ T5946] usb 6-1: SerialNumber: syz [ 128.950345][ T5946] usb 6-1: config 0 descriptor?? [ 128.957157][ T30] audit: type=1800 audit(1748789742.951:29): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="file1" dev="loop3" ino=1048627 res=0 errno=0 [ 128.983452][ T5946] mct_u232 6-1:0.0: MCT U232 converter detected [ 128.992256][ T5946] mct_u232 ttyUSB0: expected endpoint missing [ 129.062603][ T6567] tmpfs: Cannot change global quota limit on remount [ 129.089844][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 129.109722][ T6569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.140457][ T6535] loop4: detected capacity change from 0 to 32768 [ 129.180104][ T6535] (syz.4.213,6535,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.200453][ T6521] XFS (loop0): Ending clean mount [ 129.247564][ T6535] (syz.4.213,6535,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.263505][ T5934] usb 6-1: USB disconnect, device number 3 [ 129.274095][ T5934] mct_u232 6-1:0.0: device disconnected [ 129.415395][ T6535] JBD2: Ignoring recovery information on journal [ 129.446653][ T5828] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.510225][ T6572] xt_bpf: check failed: parse error [ 129.626784][ T6535] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.840788][ T6555] loop1: detected capacity change from 0 to 32768 [ 129.975573][ T6555] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.987810][ T6586] loop5: detected capacity change from 0 to 4096 [ 130.019743][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 130.215794][ T6594] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.378789][ T6555] XFS (loop1): Ending clean mount [ 130.438788][ T6555] XFS (loop1): Quotacheck needed: Please wait. [ 130.615696][ T6555] XFS (loop1): Quotacheck: Done. [ 130.682954][ T6605] loop4: detected capacity change from 0 to 164 [ 130.777010][ T6605] isofs: Unable to find the ".." directory for NFS. [ 130.830727][ T6607] loop0: detected capacity change from 0 to 512 [ 130.855386][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.932294][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.035595][ T6607] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.178606][ T6607] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 131.212039][ T6616] loop4: detected capacity change from 0 to 1024 [ 131.389284][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.540378][ T49] hfsplus: b-tree write err: -5, ino 4 [ 131.604648][ T6625] loop1: detected capacity change from 0 to 164 [ 131.705854][ T6625] Unsupported NM flag settings (8) [ 131.736253][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 131.772943][ T6630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.247'. [ 132.107125][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.113750][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.198783][ T6599] loop3: detected capacity change from 0 to 32768 [ 132.341757][ T6599] MetaData crosses page boundary!! [ 132.362485][ T6599] lblock = 631800, size = 28672 [ 132.377654][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.3.234 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 132.377682][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.377696][ T6599] Call Trace: [ 132.377706][ T6599] [ 132.377716][ T6599] dump_stack_lvl+0x189/0x250 [ 132.377761][ T6599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.377799][ T6599] ? __pfx__printk+0x10/0x10 [ 132.377831][ T6599] ? dtSearch+0xb2/0x21b0 [ 132.377863][ T6599] __get_metapage+0x9ea/0xde0 [ 132.377902][ T6599] dtSearch+0x591/0x21b0 [ 132.377945][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.377997][ T6599] jfs_lookup+0x155/0x380 [ 132.378030][ T6599] ? __pfx_jfs_lookup+0x10/0x10 [ 132.378087][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.378118][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.378151][ T6599] ? _raw_spin_unlock+0x28/0x50 [ 132.378175][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.378202][ T6599] ? d_alloc+0x144/0x190 [ 132.378240][ T6599] lookup_one_qstr_excl_raw+0x118/0x280 [ 132.378272][ T6599] filename_create+0x225/0x470 [ 132.378311][ T6599] ? __pfx_filename_create+0x10/0x10 [ 132.378355][ T6599] do_mknodat+0x184/0x4d0 [ 132.378390][ T6599] ? __pfx_do_mknodat+0x10/0x10 [ 132.378420][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.378446][ T6599] ? getname_flags+0x1e5/0x540 [ 132.378475][ T6599] __x64_sys_mknod+0x8c/0xa0 [ 132.378508][ T6599] do_syscall_64+0xfa/0x3b0 [ 132.378539][ T6599] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.378568][ T6599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.378590][ T6599] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.378617][ T6599] ? exc_page_fault+0x9f/0xf0 [ 132.378648][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.378671][ T6599] RIP: 0033:0x7fbd8258e969 [ 132.378691][ T6599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.378713][ T6599] RSP: 002b:00007fbd803f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 132.378737][ T6599] RAX: ffffffffffffffda RBX: 00007fbd827b5fa0 RCX: 00007fbd8258e969 [ 132.378754][ T6599] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 132.378770][ T6599] RBP: 00007fbd82610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 132.378785][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.378799][ T6599] R13: 0000000000000000 R14: 00007fbd827b5fa0 R15: 00007fffb07bff68 [ 132.378835][ T6599] [ 132.378865][ T6599] bread failed! [ 132.674828][ T6599] jfs_lookup: dtSearch returned -5 [ 133.091052][ T6653] loop2: detected capacity change from 0 to 64 [ 133.336336][ T6657] netlink: 'syz.4.261': attribute type 21 has an invalid length. [ 133.410334][ T6626] loop5: detected capacity change from 0 to 32768 [ 133.452740][ T6626] XFS: ikeep mount option is deprecated. [ 133.482649][ T6638] loop1: detected capacity change from 0 to 32768 [ 133.567349][ T6626] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.660073][ T6667] loop4: detected capacity change from 0 to 4096 [ 133.761080][ T6638] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 133.785543][ T6626] XFS (loop5): Ending clean mount [ 133.827033][ T6626] XFS (loop5): Quotacheck needed: Please wait. [ 133.964502][ T6626] XFS (loop5): Quotacheck: Done. [ 134.074598][ T6638] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 134.074598][ T6638] allowing incompatible features above 0.0: (unknown version) [ 134.074598][ T6638] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 134.199054][ T6638] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 134.273277][ T6680] loop4: detected capacity change from 0 to 256 [ 134.283327][ T6638] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 134.283327][ T6638] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 134.339647][ T5835] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.390999][ T6638] bcachefs (loop1): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 134.390999][ T6638] [ 134.421285][ T6655] loop0: detected capacity change from 0 to 32768 [ 134.436770][ T6680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 134.466940][ T6655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.260 (6655) [ 134.516959][ T6655] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.528641][ T6655] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 134.556103][ T6655] BTRFS info (device loop0): using free-space-tree [ 134.620803][ T6638] bcachefs (loop1): accounting_read... done [ 134.812726][ T6685] loop3: detected capacity change from 0 to 4096 [ 134.821041][ T6638] bcachefs (loop1): done starting filesystem [ 134.846597][ T6655] BTRFS info (device loop0): rebuilding free space tree [ 135.012672][ T6706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.188065][ T5827] bcachefs (loop1): shutting down [ 135.379812][ T6655] BTRFS info (device loop0): balance: start -d -m [ 135.409559][ T5827] bcachefs (loop1): shutdown complete [ 135.443508][ T6655] BTRFS info (device loop0): balance: canceled [ 135.731327][ T5828] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.084564][ T6723] new mount options do not match the existing superblock, will be ignored [ 136.143408][ T6723] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 136.231459][ T6703] loop4: detected capacity change from 0 to 32768 [ 136.249019][ T6703] btrfs: Deprecated parameter 'usebackuproot' [ 136.283681][ T6727] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 136.295944][ T6703] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.333512][ T6727] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 136.341803][ T6703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.271 (6703) [ 136.491013][ T6703] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.574377][ T6703] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 136.637816][ T6703] BTRFS info (device loop4): using free-space-tree [ 136.890773][ T6703] BTRFS info (device loop4): rebuilding free space tree [ 136.920340][ T6753] loop5: detected capacity change from 0 to 64 [ 137.061134][ T5834] Bluetooth: hci4: command tx timeout [ 137.267601][ T5840] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.466298][ T6731] loop3: detected capacity change from 0 to 40427 [ 137.518680][ T6729] loop0: detected capacity change from 0 to 32768 [ 137.568174][ T6729] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.283 (6729) [ 137.596387][ T6731] F2FS-fs (loop3): invalid crc value [ 137.645038][ T6729] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 137.732287][ T6729] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.781545][ T6729] BTRFS info (device loop0): disk space caching is enabled [ 137.788928][ T6729] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 137.991011][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.127741][ T6729] BTRFS info (device loop0): rebuilding free space tree [ 138.153679][ T6731] F2FS-fs (loop3): Start checkpoint disabled! [ 138.160593][ T6782] loop1: detected capacity change from 0 to 4096 [ 138.191839][ T6768] loop5: detected capacity change from 0 to 2048 [ 138.204490][ T6731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 138.206772][ T6729] BTRFS info (device loop0): disabling free space tree [ 138.212394][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 138.248104][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.288244][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 138.308983][ T6768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.321046][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 138.331704][ T6729] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.341055][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.387710][ T9] usb 3-1: config 0 descriptor?? [ 138.402620][ T6729] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.533309][ T59] kworker/u8:4: attempt to access beyond end of device [ 138.533309][ T59] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.574945][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 138.574979][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.574995][ T59] Workqueue: writeback wb_workfn (flush-7:3) [ 138.575031][ T59] Call Trace: [ 138.575040][ T59] [ 138.575050][ T59] dump_stack_lvl+0x189/0x250 [ 138.575097][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.575133][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 138.575164][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 138.575200][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.575228][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 138.575256][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 138.575288][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.575315][ T59] ? f2fs_hw_is_readonly+0x39b/0x470 [ 138.575350][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 138.575387][ T59] f2fs_write_end_io+0x495/0x810 [ 138.575417][ T59] ? blkg_put+0x22/0x240 [ 138.575468][ T59] __submit_merged_bio+0x27a/0x6a0 [ 138.575509][ T59] __submit_merged_write_cond+0x255/0x530 [ 138.575563][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 138.575646][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.575697][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 138.575785][ T59] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 138.575813][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.575841][ T59] ? look_up_lock_class+0x74/0x170 [ 138.575887][ T59] ? trace_f2fs_writepages+0x7f/0x200 [ 138.575917][ T59] ? f2fs_write_node_pages+0x478/0x6e0 [ 138.575966][ T59] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 138.576004][ T59] ? irqentry_exit+0x74/0x90 [ 138.576046][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576083][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.576115][ T59] do_writepages+0x32e/0x550 [ 138.576158][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576186][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 138.576219][ T59] ? writeback_sb_inodes+0x372/0x1000 [ 138.576268][ T59] __writeback_single_inode+0x145/0xff0 [ 138.576302][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576330][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 138.576361][ T59] writeback_sb_inodes+0x6b5/0x1000 [ 138.576416][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576463][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 138.576566][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576594][ T59] ? rcu_is_watching+0x15/0xb0 [ 138.576628][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576669][ T59] wb_writeback+0x43b/0xaf0 [ 138.576716][ T59] ? queue_io+0x3a1/0x590 [ 138.576755][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 138.576802][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.576839][ T59] wb_workfn+0x409/0xef0 [ 138.576891][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 138.576926][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.576954][ T59] ? __lock_acquire+0xab9/0xd20 [ 138.577001][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.577034][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.577068][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.577094][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 138.577125][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 138.577161][ T59] process_scheduled_works+0xae1/0x17b0 [ 138.577240][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.577287][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.577328][ T59] worker_thread+0x8a0/0xda0 [ 138.577368][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 138.577410][ T59] ? __kthread_parkme+0x7b/0x200 [ 138.577462][ T59] kthread+0x711/0x8a0 [ 138.577496][ T59] ? __pfx_worker_thread+0x10/0x10 [ 138.577529][ T59] ? __pfx_kthread+0x10/0x10 [ 138.577548][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.577582][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.577608][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 138.577635][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.577664][ T59] ? __pfx_kthread+0x10/0x10 [ 138.577690][ T59] ret_from_fork+0x3fc/0x770 [ 138.577725][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 138.577765][ T59] ? __switch_to_asm+0x39/0x70 [ 138.577790][ T59] ? __switch_to_asm+0x33/0x70 [ 138.577814][ T59] ? __pfx_kthread+0x10/0x10 [ 138.577840][ T59] ret_from_fork_asm+0x1a/0x30 [ 138.577892][ T59] [ 138.577902][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.826669][ T9] mcp2200 0003:04D8:00DF.0004: USB HID v1.ff Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 139.097056][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.110331][ T5828] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.267654][ T9] usb 3-1: USB disconnect, device number 2 [ 139.581297][ T6794] loop5: detected capacity change from 0 to 4096 [ 140.620710][ T6821] loop3: detected capacity change from 0 to 16 [ 140.658732][ T6821] erofs (device loop3): mounted with root inode @ nid 36. [ 140.684704][ T6821] erofs (device loop3): inline data across blocks @ nid 36 [ 141.302516][ T6802] loop4: detected capacity change from 0 to 32768 [ 141.351955][ T6802] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.300 (6802) [ 141.437399][ T6802] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 141.520681][ T6802] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 141.570635][ T6802] BTRFS info (device loop4): using free-space-tree [ 141.761901][ T6816] loop5: detected capacity change from 0 to 32768 [ 141.829307][ T6816] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.078724][ T6814] syz.2.307 (6814): drop_caches: 2 [ 142.095652][ T6822] loop1: detected capacity change from 0 to 32768 [ 142.208073][ T6816] XFS (loop5): Ending clean mount [ 142.248177][ T6816] XFS (loop5): Quotacheck needed: Please wait. [ 142.265727][ T5840] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 142.307960][ T6824] loop3: detected capacity change from 0 to 32768 [ 142.394639][ T6816] XFS (loop5): Quotacheck: Done. [ 142.461086][ T6824] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 142.461086][ T6824] [ 142.493842][ T6858] loop2: detected capacity change from 0 to 16 [ 142.556094][ T6858] erofs (device loop2): mounted with root inode @ nid 36. [ 142.611042][ T6824] ERROR: (device loop3): remounting filesystem as read-only [ 142.647837][ T6858] syz.2.316: attempt to access beyond end of device [ 142.647837][ T6858] loop2: rw=0, sector=13478624032, nr_sectors = 8 limit=16 [ 142.721478][ T6858] erofs (device loop2): read error -5 @ 0 of nid 36 [ 142.776898][ T6858] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 142.872005][ T5835] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.319807][ T6871] IPv6: syztnl0: Disabled Multicast RS [ 143.428852][ T6875] loop0: detected capacity change from 0 to 512 [ 143.485334][ T6875] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.591090][ T6875] EXT4-fs: inline encryption not supported [ 143.621884][ T6875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.640965][ T6875] EXT4-fs (loop0): Test dummy encryption mode enabled [ 143.681068][ T6875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.807162][ T6875] EXT4-fs (loop0): 1 truncate cleaned up [ 143.950580][ T6875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.964668][ T6888] loop5: detected capacity change from 0 to 1024 [ 144.061648][ T6888] hfsplus: bad catalog entry type [ 144.261972][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.290074][ T13] hfsplus: b-tree write err: -5, ino 4 [ 144.361660][ T6894] loop3: detected capacity change from 0 to 164 [ 144.610586][ T6901] loop5: detected capacity change from 0 to 64 [ 144.634240][ T6862] loop4: detected capacity change from 0 to 32768 [ 144.706517][ T6901] hfs: unable to locate alternate MDB [ 144.720268][ T6901] hfs: continuing without an alternate MDB [ 144.855740][ T6903] loop2: detected capacity change from 0 to 7 [ 144.890406][ T6906] warning: `syz.3.334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.914853][ T6903] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 144.958559][ T6903] loop2: partition table partially beyond EOD, truncated [ 145.026960][ T6903] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 145.038293][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 145.119283][ T5194] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 145.143467][ T5194] loop2: partition table partially beyond EOD, truncated [ 145.150771][ T5194] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 145.174913][ T6911] tunl0: entered promiscuous mode [ 145.184150][ T6911] netlink: 'syz.3.341': attribute type 4 has an invalid length. [ 145.186015][ T6881] loop1: detected capacity change from 0 to 32768 [ 145.192029][ T6911] netlink: 9 bytes leftover after parsing attributes in process `syz.3.341'. [ 145.319742][ T6881] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.521704][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 145.578230][ T6881] XFS (loop1): Ending clean mount [ 145.654234][ T6881] XFS (loop1): Quotacheck needed: Please wait. [ 145.701463][ T6937] loop4: detected capacity change from 0 to 256 [ 145.705834][ T6935] loop3: detected capacity change from 0 to 1024 [ 145.724327][ T6937] exfat: Deprecated parameter 'utf8' [ 145.746159][ T6937] exfat: Deprecated parameter 'namecase' [ 145.764647][ T6937] exfat: Deprecated parameter 'namecase' [ 145.770343][ T6937] exfat: Deprecated parameter 'utf8' [ 145.813498][ T6881] XFS (loop1): Quotacheck: Done. [ 145.844398][ T6935] hfsplus: request for non-existent node 16777216 in B*Tree [ 145.883201][ T6937] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 145.895856][ T6935] hfsplus: request for non-existent node 16777216 in B*Tree [ 145.971813][ T6937] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 145.973939][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.139299][ T5827] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.755102][ T6952] loop2: detected capacity change from 0 to 1024 [ 146.963618][ T6959] loop1: detected capacity change from 0 to 8 [ 147.009810][ T3526] hfsplus: b-tree write err: -5, ino 4 [ 147.068410][ T6959] SQUASHFS error: Unable to read directory block [631:55] [ 147.068937][ T6961] loop3: detected capacity change from 0 to 512 [ 147.096912][ T6931] loop0: detected capacity change from 0 to 32768 [ 147.137080][ T6961] EXT4-fs: Ignoring removed oldalloc option [ 147.233249][ T6931] JBD2: Ignoring recovery information on journal [ 147.253376][ T6961] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.358: Parent and EA inode have the same ino 15 [ 147.346218][ T6931] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.360916][ T6961] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.358: Parent and EA inode have the same ino 15 [ 147.449374][ T6961] EXT4-fs (loop3): 1 orphan inode deleted [ 147.479400][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.572077][ T6961] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.358: unexpected EA_INODE flag [ 147.698722][ T6931] syz.0.343 (6931) used greatest stack depth: 17992 bytes left [ 147.733262][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 147.788692][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.886019][ T5828] ocfs2: Unmounting device (7,0) on (node local) [ 148.217356][ T6948] loop4: detected capacity change from 0 to 32768 [ 148.250278][ T6948] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.352 (6948) [ 148.362451][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.372397][ T6948] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.430946][ T6948] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.461055][ T6948] BTRFS info (device loop4): using free-space-tree [ 148.555937][ T5934] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 148.643189][ T5934] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 148.666237][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.760694][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.799390][ T7004] program syz.5.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.822555][ T6948] BTRFS info (device loop4): rebuilding free space tree [ 148.839950][ T5934] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 148.894087][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.941913][ T5934] usb 2-1: config 0 descriptor?? [ 148.978005][ T5934] usb-storage 2-1:0.0: USB Mass Storage device detected [ 149.045766][ T5934] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 149.132344][ T7010] loop0: detected capacity change from 0 to 4096 [ 149.233626][ T5840] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.326092][ T5934] usb 2-1: USB disconnect, device number 2 [ 149.451357][ T30] audit: type=1800 audit(1748789764.021:30): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.363" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 149.462353][ T7024] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 150.116041][ T7040] capability: warning: `syz.0.386' uses 32-bit capabilities (legacy support in use) [ 150.240358][ T7036] loop1: detected capacity change from 0 to 4096 [ 150.402988][ T30] audit: type=1800 audit(1748789764.971:31): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.384" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 150.460782][ T7050] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.062038][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.229472][ T5892] usb 4-1: config index 0 descriptor too short (expected 126, got 72) [ 151.310301][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.320308][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.361471][ T5892] usb 4-1: Product: syz [ 151.365677][ T5892] usb 4-1: Manufacturer: syz [ 151.398286][ T7039] loop5: detected capacity change from 0 to 32768 [ 151.416655][ T5892] usb 4-1: SerialNumber: syz [ 151.429127][ T7073] usb usb8: usbfs: process 7073 (syz.1.400) did not claim interface 0 before use [ 151.610595][ T7039] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.659548][ T7039] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 151.664441][ T5892] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.680225][ T7051] loop4: detected capacity change from 0 to 32768 [ 151.687283][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.752215][ T7051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.390 (7051) [ 151.798888][ T7051] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.831930][ T7051] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 151.865946][ T7051] BTRFS info (device loop4): using free-space-tree [ 151.873880][ T7039] XFS (loop5): Starting recovery (logdev: internal) [ 151.995287][ T7039] XFS (loop5): Ending recovery (logdev: internal) [ 152.269266][ T7051] BTRFS info (device loop4): rebuilding free space tree [ 152.337378][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 152.484887][ T5835] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.663159][ T7051] BTRFS info (device loop4): balance: start -d -m [ 152.736859][ T7051] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 153.332149][ T7051] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 153.638690][ T7118] loop3: detected capacity change from 0 to 2048 [ 153.710496][ T7051] BTRFS info (device loop4): balance: canceled [ 153.827086][ T7118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.010980][ T7121] loop2: detected capacity change from 0 to 4096 [ 154.095300][ T7121] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 154.114633][ T9] usb 4-1: Service connection timeout for: 257 [ 154.169108][ T7128] loop1: detected capacity change from 0 to 128 [ 154.243884][ T7118] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.410: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 154.276939][ T5840] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.292999][ T7128] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.381531][ T7118] EXT4-fs (loop3): Remounting filesystem read-only [ 154.419258][ T7128] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.795805][ T7121] ntfs3(loop2): ino=19, mi_enum_attr [ 154.863719][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.947414][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.622688][ T7139] loop1: detected capacity change from 0 to 256 [ 155.821333][ T7139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 156.015721][ T7136] loop3: detected capacity change from 0 to 4096 [ 157.479980][ T7153] xt_CT: No such helper "snmp" [ 157.729103][ T7166] loop0: detected capacity change from 0 to 1024 [ 158.061267][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 158.200219][ T7176] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.425795][ T5946] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 158.700792][ T5946] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 158.713312][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 158.758400][ T5946] usb 5-1: config 0 has no interface number 0 [ 158.820503][ T5946] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 158.847977][ T7180] netlink: 66 bytes leftover after parsing attributes in process `syz.0.435'. [ 158.949984][ T5946] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 159.061056][ T5946] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 159.142427][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.263058][ T5946] usb 5-1: config 0 descriptor?? [ 159.354940][ T5946] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input5 [ 159.392933][ T7189] loop2: detected capacity change from 0 to 4096 [ 159.515469][ T7192] loop5: detected capacity change from 0 to 1024 [ 159.616537][ T5946] usb 5-1: USB disconnect, device number 2 [ 160.399482][ T7189] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.663143][ T7189] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 160.696565][ T7210] program syz.5.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.742774][ T7189] System zones: 0-5 [ 160.830331][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.214440][ T7189] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 161.485596][ T7224] mmap: syz.5.452 (7224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.691469][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.750985][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.981332][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 162.052069][ T5891] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 162.096641][ T5891] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 162.170909][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 162.170941][ T5891] usb 5-1: config 1 has no interface number 0 [ 162.219073][ T5891] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.219113][ T5891] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.219163][ T5891] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.219190][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.263059][ T5891] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 162.504195][ T5891] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 162.596209][ T7234] loop0: detected capacity change from 0 to 256 [ 162.800412][ T7234] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4cdf561e, utbl_chksum : 0xe619d30d) [ 162.983491][ T5895] usb 5-1: USB disconnect, device number 3 [ 162.986889][ T5895] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 163.500193][ T7217] loop1: detected capacity change from 0 to 32768 [ 163.611631][ T7217] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.450 (7217) [ 163.681074][ C0] sched: DL replenish lagged too much [ 163.783912][ T7217] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.891303][ T7217] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 163.961230][ T7217] BTRFS info (device loop1): using free-space-tree [ 164.007730][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 164.025415][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 164.141363][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 164.162178][ T7250] loop3: detected capacity change from 0 to 256 [ 164.251656][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 164.252022][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 164.281927][ T7250] exfat: Deprecated parameter 'namecase' [ 164.373363][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 164.373727][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 164.461336][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 164.551309][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 164.632958][ T7250] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 164.703323][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 164.703743][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 164.813652][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 164.932030][ T7217] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 165.131818][ T7217] BTRFS error (device loop1): open_ctree failed: -12 [ 165.395060][ T7273] CUSE: info not properly terminated [ 165.597656][ T30] audit: type=1326 audit(1748789780.161:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 165.814279][ T30] audit: type=1326 audit(1748789780.161:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 165.905676][ T7279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.473'. [ 165.986104][ T7279] netlink: 108 bytes leftover after parsing attributes in process `syz.1.473'. [ 166.050058][ T30] audit: type=1326 audit(1748789780.191:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 166.310305][ T30] audit: type=1326 audit(1748789780.191:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.5.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137138e969 code=0x7ffc0000 [ 166.785617][ T7290] loop1: detected capacity change from 0 to 256 [ 166.919214][ T7290] FAT-fs (loop1): Directory bread(block 64) failed [ 167.010946][ T7290] FAT-fs (loop1): Directory bread(block 65) failed [ 167.047530][ T7290] FAT-fs (loop1): Directory bread(block 66) failed [ 167.130935][ T7290] FAT-fs (loop1): Directory bread(block 67) failed [ 167.137619][ T7290] FAT-fs (loop1): Directory bread(block 68) failed [ 167.270940][ T7290] FAT-fs (loop1): Directory bread(block 69) failed [ 167.331079][ T7290] FAT-fs (loop1): Directory bread(block 70) failed [ 167.337662][ T7290] FAT-fs (loop1): Directory bread(block 71) failed [ 167.412036][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 167.451145][ T7290] FAT-fs (loop1): Directory bread(block 72) failed [ 167.457719][ T7290] FAT-fs (loop1): Directory bread(block 73) failed [ 167.521152][ T7300] openvswitch: netlink: Unknown nsh attribute 0 [ 167.527464][ T7300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.438500][ T7324] loop3: detected capacity change from 0 to 1764 [ 169.610973][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.841073][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.925051][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.992313][ T5891] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 170.090952][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.171398][ T5891] usb 6-1: config 0 descriptor?? [ 170.492707][ T7335] Bluetooth: MGMT ver 1.23 [ 170.596805][ T7331] xt_CT: No such helper "snmp" [ 170.667442][ T7309] loop4: detected capacity change from 0 to 32768 [ 170.702043][ T5891] zeroplus 0003:0C12:0030.0005: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 170.807005][ T7309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.487 (7309) [ 170.825188][ T5891] zeroplus 0003:0C12:0030.0005: no inputs found [ 170.934015][ T5891] usb 6-1: USB disconnect, device number 4 [ 171.097150][ T7309] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.187626][ T7309] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 171.286519][ T7341] loop1: detected capacity change from 0 to 64 [ 171.301294][ T7309] BTRFS info (device loop4): using free-space-tree [ 171.340183][ T7337] fido_id[7337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 171.402812][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 171.403223][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 171.511392][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 171.612657][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 171.732655][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 171.836043][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 171.910610][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 172.036858][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 172.135756][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 172.232547][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 172.361326][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 172.488681][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 172.603364][ T7309] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 172.762919][ T7309] BTRFS error (device loop4): open_ctree failed: -12 [ 173.617405][ T7381] loop0: detected capacity change from 0 to 2048 [ 173.906907][ T7381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.088585][ T7381] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.809674][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.286368][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 175.978101][ T7416] loop5: detected capacity change from 0 to 1024 [ 176.053374][ T7416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.129364][ T7416] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.169728][ T7418] devpts: Bad value for 'max' [ 176.229215][ T7416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 176.385063][ T7416] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.528: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.471142][ T7416] EXT4-fs (loop5): Remounting filesystem read-only [ 176.477706][ T7416] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 176.583052][ T7416] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 176.619594][ T7416] EXT4-fs (loop5): 1 orphan inode deleted [ 176.658976][ T7416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.744487][ T7416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.126650][ T7429] loop3: detected capacity change from 0 to 2048 [ 177.245697][ T7429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.506973][ T7431] loop1: detected capacity change from 0 to 4096 [ 178.116954][ T7442] loop1: detected capacity change from 0 to 256 [ 178.165851][ T7442] exfat: Deprecated parameter 'utf8' [ 178.204473][ T7442] exfat: Deprecated parameter 'utf8' [ 178.282117][ T7442] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 178.560970][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.803236][ T5891] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 178.817695][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.833084][ T5891] usb 3-1: config 0 descriptor?? [ 178.880955][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.066588][ T5891] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 179.085085][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.101374][ T5895] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 179.110468][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.138316][ T5895] usb 2-1: config 0 descriptor?? [ 179.267501][ T5891] [drm:udl_init] *ERROR* Selecting channel failed [ 179.361302][ T5891] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 179.368058][ T5891] [drm] Initialized udl on minor 2 [ 179.414492][ T5891] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 179.456366][ T5891] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 179.494472][ T5890] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 179.520386][ T5891] usb 3-1: USB disconnect, device number 3 [ 179.537315][ T5890] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 179.629772][ T5895] petalynx 0003:18B1:0037.0006: reserved main item tag 0xd [ 179.641365][ T5895] petalynx 0003:18B1:0037.0006: unexpected long global item [ 179.659489][ T5895] petalynx 0003:18B1:0037.0006: parse failed [ 179.669958][ T5895] petalynx 0003:18B1:0037.0006: probe with driver petalynx failed with error -22 [ 179.844018][ T5895] usb 2-1: USB disconnect, device number 3 [ 180.006506][ T7448] loop2: detected capacity change from 0 to 256 [ 180.098199][ T7448] FAT-fs (loop2): Directory bread(block 64) failed [ 180.131830][ T7448] FAT-fs (loop2): Directory bread(block 65) failed [ 180.143876][ T7448] FAT-fs (loop2): Directory bread(block 66) failed [ 180.164589][ T7448] FAT-fs (loop2): Directory bread(block 67) failed [ 180.211733][ T7448] FAT-fs (loop2): Directory bread(block 68) failed [ 180.218299][ T7448] FAT-fs (loop2): Directory bread(block 69) failed [ 180.238112][ T7448] FAT-fs (loop2): Directory bread(block 70) failed [ 180.251777][ T7448] FAT-fs (loop2): Directory bread(block 71) failed [ 180.258472][ T7448] FAT-fs (loop2): Directory bread(block 72) failed [ 180.270897][ T7448] FAT-fs (loop2): Directory bread(block 73) failed [ 180.846152][ T7450] loop2: detected capacity change from 0 to 32768 [ 180.927486][ T7450] o2cb: This node has not been configured. [ 180.933550][ T7450] o2cb: Cluster check failed. Fix errors before retrying. [ 180.940713][ T7450] (syz.2.544,7450,1):ocfs2_dlm_init:3354 ERROR: status = -22 [ 180.948822][ T7450] (syz.2.544,7450,1):ocfs2_mount_volume:1735 ERROR: status = -22 [ 180.961665][ T7450] (syz.2.544,7450,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 181.646883][ T7461] loop2: detected capacity change from 0 to 64 [ 182.569630][ T7472] loop2: detected capacity change from 0 to 64 [ 185.890980][ T5946] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.080945][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 186.094968][ T5946] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 186.114724][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.135824][ T5946] usb 1-1: Product: syz [ 186.139997][ T5946] usb 1-1: Manufacturer: syz [ 186.154341][ T5946] usb 1-1: SerialNumber: syz [ 186.167216][ T5946] usb 1-1: config 0 descriptor?? [ 186.187126][ T5946] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 186.420551][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.479922][ T5946] gspca_sn9c2028: read1 error -32 [ 186.708699][ T5946] gspca_sn9c2028: read1 error -71 [ 186.741223][ T5946] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 186.801742][ T5946] usb 1-1: USB disconnect, device number 5 [ 187.143412][ T7498] loop5: detected capacity change from 0 to 256 [ 188.520520][ T7506] loop0: detected capacity change from 0 to 2048 [ 188.578422][ T7507] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.125868][ T7481] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 189.151542][ T7481] netlink: 144 bytes leftover after parsing attributes in process `syz.2.557'. [ 189.205524][ T7481] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 189.241914][ T7481] netlink: 'syz.2.557': attribute type 2 has an invalid length. [ 189.285318][ T7481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.557'. [ 190.614458][ T7535] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 191.268040][ T7542] sp0: Synchronizing with TNC [ 191.325466][ T7544] loop1: detected capacity change from 0 to 256 [ 191.516583][ T7544] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 192.527142][ T7538] loop0: detected capacity change from 0 to 32768 [ 192.698401][ T7540] loop5: detected capacity change from 0 to 32768 [ 192.748340][ T7540] btrfs: Deprecated parameter 'usebackuproot' [ 192.810882][ T7540] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.886758][ T7540] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.578 (7540) [ 193.047041][ T7540] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.148473][ T7540] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 193.218750][ T7540] BTRFS info (device loop5): using free-space-tree [ 193.389869][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 193.518960][ T7540] BTRFS info (device loop5): rebuilding free space tree [ 193.552724][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.559177][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.603430][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.612800][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.622603][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.632973][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.643261][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.369547][ T7571] loop2: detected capacity change from 0 to 32768 [ 195.795404][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 196.751813][ T51] Bluetooth: hci6: command tx timeout [ 196.949765][ T7538] workqueue: Failed to create a rescuer kthread for wq "bcachefs_btree_read_complete": -EINTR [ 196.949865][ T7538] bcachefs (loop0): shutdown complete [ 197.121506][ T7538] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 197.189864][ T7571] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 197.216342][ T5835] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 197.640631][ T7571] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 197.640631][ T7571] allowing incompatible features above 0.0: (unknown version) [ 197.640631][ T7571] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 197.838173][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.589'. [ 198.124590][ T7571] bcachefs (loop2): recovering from clean shutdown, journal seq 13 [ 198.211009][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.218197][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.233947][ T7571] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 198.233947][ T7571] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 198.365724][ T7572] bridge_slave_0: entered allmulticast mode [ 198.461176][ T7571] bcachefs (loop2): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 198.461176][ T7571] [ 198.481354][ T7572] bridge_slave_0: entered promiscuous mode [ 198.572451][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.579630][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.647778][ T7571] syz.2.586: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.711336][ T7572] bridge_slave_1: entered allmulticast mode [ 198.719689][ T7572] bridge_slave_1: entered promiscuous mode [ 198.826596][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.2.586 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 198.826626][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.826638][ T7571] Call Trace: [ 198.826647][ T7571] [ 198.826655][ T7571] dump_stack_lvl+0x189/0x250 [ 198.826695][ T7571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.826728][ T7571] ? __pfx__printk+0x10/0x10 [ 198.826750][ T7571] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.826781][ T7571] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.826815][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.826839][ T7571] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 198.826875][ T7571] warn_alloc+0x214/0x310 [ 198.826903][ T7571] ? __pfx_warn_alloc+0x10/0x10 [ 198.826929][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.826951][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.826973][ T7571] ? __get_vm_area_node+0x28f/0x300 [ 198.827004][ T7571] ? bch2_fs_journal_start+0x480/0x1500 [ 198.827040][ T7571] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 198.827102][ T7571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.827133][ T7571] ? __kasan_kmalloc_large+0x1c/0xa0 [ 198.827168][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827192][ T7571] ? rcu_is_watching+0x15/0xb0 [ 198.827221][ T7571] ? bch2_fs_journal_start+0x480/0x1500 [ 198.827253][ T7571] ? bch2_fs_journal_start+0x480/0x1500 [ 198.827291][ T7571] __kvmalloc_node_noprof+0x3bf/0x600 [ 198.827324][ T7571] ? bch2_fs_journal_start+0x480/0x1500 [ 198.827364][ T7571] bch2_fs_journal_start+0x480/0x1500 [ 198.827415][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827438][ T7571] ? bch2_journal_log_msg+0xd9/0x120 [ 198.827462][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827490][ T7571] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 198.827524][ T7571] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 198.827550][ T7571] ? bch2_fs_resize_on_mount+0x81/0x880 [ 198.827588][ T7571] bch2_fs_recovery+0x20ca/0x3970 [ 198.827632][ T7571] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 198.827650][ T7571] ? do_syscall_64+0xfa/0x3b0 [ 198.827676][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.827714][ T7571] ? __lock_acquire+0xab9/0xd20 [ 198.827752][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827775][ T7571] ? __lock_acquire+0xab9/0xd20 [ 198.827810][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827834][ T7571] ? __lock_acquire+0xab9/0xd20 [ 198.827884][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.827911][ T7571] ? bch2_fs_start+0x9a3/0xd30 [ 198.827940][ T7571] ? up_write+0x1c4/0x420 [ 198.827978][ T7571] bch2_fs_start+0xa43/0xd30 [ 198.828009][ T7571] ? bch2_fs_start+0x575/0xd30 [ 198.828039][ T7571] ? __pfx_bch2_fs_start+0x10/0x10 [ 198.828093][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828121][ T7571] ? sget+0x267/0x620 [ 198.828160][ T7571] bch2_fs_get_tree+0xbfc/0x15f0 [ 198.828222][ T7571] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 198.828281][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828309][ T7571] ? aa_get_newest_label+0xf7/0x5d0 [ 198.828342][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828370][ T7571] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 198.828409][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828438][ T7571] ? apparmor_capable+0x137/0x1b0 [ 198.828464][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828497][ T7571] vfs_get_tree+0x92/0x2b0 [ 198.828537][ T7571] do_new_mount+0x24a/0xa40 [ 198.828586][ T7571] __se_sys_mount+0x317/0x410 [ 198.828618][ T7571] ? __pfx___se_sys_mount+0x10/0x10 [ 198.828639][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828676][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828704][ T7571] ? __x64_sys_mount+0x20/0xc0 [ 198.828730][ T7571] do_syscall_64+0xfa/0x3b0 [ 198.828762][ T7571] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.828793][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.828816][ T7571] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.828843][ T7571] ? exc_page_fault+0x9f/0xf0 [ 198.828877][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.828901][ T7571] RIP: 0033:0x7f0f2b79010a [ 198.828923][ T7571] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.828945][ T7571] RSP: 002b:00007f0f2c60be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.828970][ T7571] RAX: ffffffffffffffda RBX: 00007f0f2c60bef0 RCX: 00007f0f2b79010a [ 198.828989][ T7571] RDX: 0000200000000080 RSI: 000020000000f680 RDI: 00007f0f2c60beb0 [ 198.829007][ T7571] RBP: 0000200000000080 R08: 00007f0f2c60bef0 R09: 0000000001010851 [ 198.829025][ T7571] R10: 0000000001010851 R11: 0000000000000246 R12: 000020000000f680 [ 198.829041][ T7571] R13: 00007f0f2c60beb0 R14: 000000000000f62a R15: 0000200000000200 [ 198.829080][ T7571] [ 199.415427][ T7581] loop4: detected capacity change from 0 to 32768 [ 199.465716][ T7571] Mem-Info: [ 199.468958][ T7571] active_anon:15041 inactive_anon:0 isolated_anon:0 [ 199.468958][ T7571] active_file:1571 inactive_file:40256 isolated_file:0 [ 199.468958][ T7571] unevictable:768 dirty:409 writeback:0 [ 199.468958][ T7571] slab_reclaimable:9676 slab_unreclaimable:105306 [ 199.468958][ T7571] mapped:35352 shmem:9961 pagetables:1241 [ 199.468958][ T7571] sec_pagetables:0 bounce:0 [ 199.468958][ T7571] kernel_misc_reclaimable:0 [ 199.468958][ T7571] free:1294565 free_pcp:21700 free_cma:0 [ 199.514742][ T7571] Node 0 active_anon:60164kB inactive_anon:0kB active_file:6228kB inactive_file:160816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141368kB dirty:1592kB writeback:0kB shmem:38308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.548518][ T7571] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:44kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.581554][ T7571] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.611478][ T7571] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 199.617371][ T7571] Node 0 DMA32 free:1263588kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60116kB inactive_anon:0kB active_file:6228kB inactive_file:158996kB unevictable:1536kB writepending:1588kB present:3129332kB managed:2561192kB mlocked:0kB bounce:0kB free_pcp:66656kB local_pcp:35232kB free_cma:0kB [ 199.649822][ T7571] lowmem_reserve[]: 0 0 1 1 1 [ 199.654697][ T7571] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 199.685014][ T7571] lowmem_reserve[]: 0 0 0 0 0 [ 199.690711][ T7571] Node 1 Normal free:3899296kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:208kB unevictable:1536kB writepending:44kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:10208kB free_cma:0kB [ 199.722339][ T7571] lowmem_reserve[]: 0 0 0 0 0 [ 199.727172][ T7571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.740020][ T7571] Node 0 DMA32: 428*4kB (ME) 183*8kB (ME) 573*16kB (UME) 344*32kB (UME) 114*64kB (UME) 18*128kB (UME) 37*256kB (UM) 35*512kB (UME) 13*1024kB (UM) 9*2048kB (UME) 286*4096kB (UM) = 1263544kB [ 199.759195][ T7571] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 199.772437][ T7571] Node 1 Normal: 216*4kB (UME) 48*8kB (UME) 40*16kB (UME) 146*32kB (UME) 40*64kB (UME) 8*128kB (UM) 2*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3899296kB [ 199.791842][ T7571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.801534][ T7571] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.810965][ T7571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.820605][ T7571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.838986][ T7581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.587 (7581) [ 199.923098][ T51] Bluetooth: hci6: command tx timeout [ 199.929280][ T7571] 51612 total pagecache pages [ 199.957602][ T7571] 0 pages in swap cache [ 199.991076][ T7571] Free swap = 124996kB [ 200.001556][ T7571] Total swap = 124996kB [ 200.010908][ T7571] 2097051 pages RAM [ 200.026036][ T7571] 0 pages HighMem/MovableOnly [ 200.046458][ T7571] 424647 pages reserved [ 200.061492][ T7571] 0 pages cma reserved [ 200.123110][ T7571] bcachefs (loop2): error reallocating journal fifo (32768 open entries) [ 200.171727][ T7571] bcachefs (loop2): error in recovery: ENOMEM_journal_pin_fifoemergency read only at seq 0 [ 200.201017][ T7571] bcachefs (loop2): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 200.215679][ T7571] bcachefs (loop2): shutting down [ 200.267426][ T7571] bcachefs (loop2): shutdown complete [ 201.363448][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.464861][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.650209][ T51] Bluetooth: hci6: command tx timeout [ 202.852867][ T7610] loop5: detected capacity change from 0 to 131072 [ 202.997417][ T7610] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 203.213743][ T7610] XFS (loop5): Starting recovery (logdev: internal) [ 203.264480][ T7610] XFS (loop5): Metadata corruption detected at xfs_allocbt_verify+0xc0/0x350, xfs_cntbt block 0x4 [ 203.275462][ T7610] XFS (loop5): Unmount and run xfs_repair [ 203.281245][ T7610] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 203.288636][ T7610] 00000000: 41 42 54 43 00 00 00 01 ff ff ff ff ff ff ff ff ABTC............ [ 203.297797][ T7610] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 40 ...............@ [ 203.306773][ T7610] 00000020: b9 3a 89 37 cc d4 41 a2 86 c7 66 a1 57 0a 28 46 .:.7..A...f.W.(F [ 203.315744][ T7610] 00000030: 00 00 00 00 88 bf 4b 69 00 00 00 35 00 00 1f cb ......Ki...5.... [ 203.324636][ T7610] 00000040: 00 00 00 35 00 00 1f cb 00 00 00 00 00 00 00 00 ...5............ [ 203.333534][ T7610] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.342426][ T7610] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.353585][ T7610] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.364580][ T7610] XFS (loop5): log mount/recovery failed: error -117 [ 203.387222][ T7610] XFS (loop5): log mount failed [ 204.920984][ T51] Bluetooth: hci6: command tx timeout [ 205.633966][ T7634] loop4: detected capacity change from 0 to 24 [ 205.706118][ T7634] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 205.753977][ T7635] [U] óÑE [ 205.790947][ T7634] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 206.220422][ T7641] loop1: detected capacity change from 0 to 2048 [ 206.285325][ T7641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.641159][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.864064][ T7648] loop0: detected capacity change from 0 to 512 [ 208.082155][ T7648] Quota error (device loop0): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 208.186020][ T7648] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 208.225108][ T7654] loop1: detected capacity change from 0 to 128 [ 208.266268][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.291319][ T7648] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.613: Failed to acquire dquot type 1 [ 208.411188][ T7648] EXT4-fs (loop0): 1 truncate cleaned up [ 208.510151][ T7648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.539555][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.631489][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.642213][ T7648] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.773345][ T5946] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 208.850223][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.900657][ T7336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.972903][ T5946] usb 5-1: config 0 descriptor?? [ 209.160787][ T7572] team0: Port device team_slave_0 added [ 209.212234][ T7656] Zero length message leads to an empty skb [ 209.248306][ T7572] team0: Port device team_slave_1 added [ 209.506362][ T5946] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 209.671668][ T5946] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 209.777640][ T5946] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 209.886812][ T5946] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 209.972376][ T5946] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -71 [ 210.074611][ T7336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.110079][ T5946] usb 5-1: USB disconnect, device number 4 [ 210.281712][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.288722][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.479687][ T7662] fido_id[7662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 210.668199][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.996023][ T7336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.201644][ T7644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 211.232352][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.239334][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.556225][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.621497][ T7674] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.621'. [ 211.909133][ T7675] loop5: detected capacity change from 0 to 4096 [ 212.065574][ T7336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.533950][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.543608][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.551595][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.571234][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.603801][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.896018][ T7572] hsr_slave_0: entered promiscuous mode [ 212.938524][ T7685] loop1: detected capacity change from 0 to 2048 [ 212.982086][ T7572] hsr_slave_1: entered promiscuous mode [ 212.992453][ T7572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.055909][ T7572] Cannot create hsr debugfs directory [ 213.147755][ T7685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.542814][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 213.617180][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 214.073826][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.752727][ T5851] Bluetooth: hci4: command tx timeout [ 214.992364][ T7701] loop1: detected capacity change from 0 to 1024 [ 215.299824][ T30] audit: type=1800 audit(1748789829.861:36): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 215.323117][ T7336] bridge_slave_1: left allmulticast mode [ 215.361232][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 215.391314][ T7336] bridge_slave_1: left promiscuous mode [ 215.422954][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.552864][ T7336] bridge_slave_0: left allmulticast mode [ 215.579034][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 215.605165][ T7336] bridge_slave_0: left promiscuous mode [ 215.631299][ T43] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.661083][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.700930][ T43] usb 6-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.773052][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.779695][ T43] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 215.891065][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.012100][ T43] usb 6-1: config 0 descriptor?? [ 216.201934][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 216.208025][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 216.214800][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 216.220880][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 216.233752][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 216.467809][ T43] hkems 0003:2006:0118.0008: bogus close delimiter [ 216.532404][ T43] hkems 0003:2006:0118.0008: item 0 4 2 10 parsing failed [ 216.540243][ T43] hkems 0003:2006:0118.0008: parse failed [ 216.674700][ T43] hkems 0003:2006:0118.0008: probe with driver hkems failed with error -22 [ 216.806631][ T43] usb 6-1: USB disconnect, device number 5 [ 216.835556][ T5849] Bluetooth: hci4: command tx timeout [ 216.971119][ T7723] loop4: detected capacity change from 0 to 64 [ 217.091210][ T7723] hfs: small file entry [ 217.902319][ T7737] No buffer was provided with the request [ 218.236646][ T7740] loop0: detected capacity change from 0 to 512 [ 218.473682][ T7740] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 218.562758][ T7740] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.646: invalid indirect mapped block 2683928664 (level 1) [ 218.715078][ T7740] EXT4-fs (loop0): Remounting filesystem read-only [ 218.774875][ T7740] EXT4-fs (loop0): 1 truncate cleaned up [ 218.791154][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.825978][ T7740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.921173][ T5837] Bluetooth: hci4: command tx timeout [ 219.030889][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 219.044318][ T5895] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.078858][ T7740] EXT4-fs (loop0): shut down requested (1) [ 219.093832][ T5895] usb 6-1: config 179 has no interface number 0 [ 219.141672][ T5895] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 219.181279][ T7751] loop4: detected capacity change from 0 to 512 [ 219.259363][ T7751] EXT4-fs: Ignoring removed nobh option [ 219.287559][ T5895] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 219.327229][ T7751] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.363739][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.395736][ T5895] usb 6-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.435881][ T7751] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.649: corrupted in-inode xattr: overlapping e_value [ 219.488281][ T5895] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.537085][ T7751] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.649: couldn't read orphan inode 15 (err -117) [ 219.579430][ T5895] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.639835][ T7751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.709926][ T5895] usb 6-1: config 179 interface 65 has no altsetting 0 [ 219.787147][ T5895] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 219.860027][ T7751] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.649: Directory hole found for htree leaf block 0 [ 219.890931][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.067071][ T5895] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input6 [ 220.213645][ T5179] input input6: unable to receive magic message: -71 [ 220.268290][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.410259][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 220.457585][ T5179] input input6: unable to receive magic message: -71 [ 220.491432][ T5895] usb 6-1: USB disconnect, device number 6 [ 220.497307][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.497598][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 220.725699][ T5895] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 220.994335][ T5837] Bluetooth: hci4: command tx timeout [ 221.345643][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.439304][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.544162][ T7336] bond0 (unregistering): Released all slaves [ 222.255910][ T7756] loop0: detected capacity change from 0 to 32768 [ 222.338012][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 222.357798][ T7756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.650 (7756) [ 222.436916][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 222.491177][ T7771] netlink: 'syz.1.656': attribute type 14 has an invalid length. [ 222.513750][ T7756] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.561026][ T7771] netlink: 'syz.1.656': attribute type 11 has an invalid length. [ 222.592635][ T7756] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 222.686680][ T7756] BTRFS info (device loop0): using free-space-tree [ 222.772027][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 222.772443][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 222.851686][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 222.941344][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 223.022930][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 223.132836][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 223.220743][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 223.341633][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 223.431667][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 223.460470][ T7572] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 223.552879][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 223.553266][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 223.615883][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 223.703324][ T7572] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 223.775138][ T7756] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 223.812510][ T7756] BTRFS error (device loop0): open_ctree failed: -12 [ 223.950723][ T7572] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.165343][ T7572] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.491220][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 224.731232][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 225.959367][ T7793] loop4: detected capacity change from 0 to 32768 [ 226.016904][ T7815] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 226.075865][ T7793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.660 (7793) [ 226.262352][ T7793] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.386572][ T7793] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 226.500311][ T7793] BTRFS info (device loop4): using free-space-tree [ 226.569978][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 226.570386][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 226.662446][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 226.761340][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 226.861512][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 226.994289][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 227.071367][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 227.161355][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 227.236805][ T7793] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 227.471322][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.499462][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.531881][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.569655][ T7681] bridge_slave_0: entered allmulticast mode [ 227.604398][ T7681] bridge_slave_0: entered promiscuous mode [ 227.654010][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.701072][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.708396][ T7681] bridge_slave_1: entered allmulticast mode [ 227.714874][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 227.746037][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.778392][ T5895] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 227.800571][ T7681] bridge_slave_1: entered promiscuous mode [ 227.831825][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.878382][ T5895] usb 2-1: Product: syz [ 227.911471][ T5895] usb 2-1: Manufacturer: syz [ 227.973633][ T5895] usb 2-1: SerialNumber: syz [ 228.052062][ T5895] usb 2-1: config 0 descriptor?? [ 228.491961][ T7571] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 228.511798][ T5895] gs_usb 2-1:0.0: Configuring for 175 interfaces [ 228.518170][ T5895] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 228.607444][ T5895] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 228.629614][ T7336] hsr_slave_0: left promiscuous mode [ 228.640168][ T7793] BTRFS error (device loop4): open_ctree failed: -12 [ 228.787833][ T5895] usb 2-1: USB disconnect, device number 4 [ 228.825044][ T7336] hsr_slave_1: left promiscuous mode [ 228.901818][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.909324][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.111239][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.172083][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.220868][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.389967][ T7336] veth1_macvtap: left promiscuous mode [ 229.465090][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 229.505699][ T7336] veth0_macvtap: left promiscuous mode [ 229.530037][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.549874][ T7336] veth1_vlan: left promiscuous mode [ 229.628997][ T5890] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 229.641094][ T7336] veth0_vlan: left promiscuous mode [ 229.662869][ T5890] usb 1-1: config 127 has no interface number 0 [ 229.734445][ T5890] usb 1-1: config 127 interface 25 has no altsetting 0 [ 229.791816][ T5890] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 229.852860][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.930065][ T5890] usb 1-1: Product: syz [ 229.969710][ T5890] usb 1-1: Manufacturer: syz [ 229.996125][ T5890] usb 1-1: SerialNumber: syz [ 230.325254][ T5890] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 230.877076][ T5890] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 231.136578][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 231.202513][ T5890] usb 1-1: device firmware changed [ 231.242411][ T5890] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 231.278514][ T5890] usb 1-1: USB disconnect, device number 6 [ 231.840223][ T7864] loop1: detected capacity change from 0 to 32768 [ 231.923811][ T7864] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 232.089612][ T7864] XFS (loop1): Ending clean mount [ 232.170310][ T7864] XFS (loop1): Quotacheck needed: Please wait. [ 232.351010][ T7864] XFS (loop1): Quotacheck: Done. [ 232.989455][ T5827] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.778028][ T7336] team0 (unregistering): Port device team_slave_1 removed [ 234.036565][ T7336] team0 (unregistering): Port device team_slave_0 removed [ 235.310308][ T7894] netlink: 176 bytes leftover after parsing attributes in process `syz.5.689'. [ 237.045403][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.080631][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.988653][ T7681] team0: Port device team_slave_0 added [ 238.060745][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.136856][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 238.177878][ T7901] loop5: detected capacity change from 0 to 32768 [ 238.259896][ T7901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.692 (7901) [ 238.319009][ T7910] loop1: detected capacity change from 0 to 256 [ 238.357850][ T7910] exfat: Deprecated parameter 'utf8' [ 238.472639][ T7901] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.571704][ T7901] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 238.580547][ T7901] BTRFS info (device loop5): using free-space-tree [ 238.662160][ T7910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 238.843592][ T7913] loop0: detected capacity change from 0 to 1024 [ 239.951067][ T5835] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.031262][ T7940] ucma_write: process 282 (syz.0.699) changed security contexts after opening file descriptor, this is not allowed. [ 240.159158][ T7681] team0: Port device team_slave_1 added [ 240.795646][ T7937] netlink: 'syz.1.698': attribute type 2 has an invalid length. [ 241.196005][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.280948][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.560920][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.692386][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.745814][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.990345][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.115093][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.352700][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.359892][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.938123][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.945413][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.088973][ T7681] hsr_slave_0: entered promiscuous mode [ 243.136021][ T7965] loop1: detected capacity change from 0 to 4096 [ 243.172130][ T7681] hsr_slave_1: entered promiscuous mode [ 243.237596][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.317420][ T7965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.340882][ T7681] Cannot create hsr debugfs directory [ 243.555697][ T7965] fs-verity: sha512 using implementation "sha512-avx2" [ 243.645760][ T7965] fs-verity (loop1, inode 16): Unsupported log_blocksize: 13 [ 243.866461][ T7974] loop5: detected capacity change from 0 to 512 [ 244.009167][ T7974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.083122][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.128517][ T7974] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.160251][ T7681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 246.342458][ T7681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 246.630874][ T7681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 246.724521][ T7681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.209126][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.742423][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 247.823902][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.010995][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.028179][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.073263][ T43] usb 5-1: config 0 has no interface number 0 [ 248.139913][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.147111][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.241004][ T43] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.281145][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.308668][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.358957][ T43] usb 5-1: Product: syz [ 248.370326][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.377490][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.440891][ T43] usb 5-1: Manufacturer: syz [ 248.476488][ T43] usb 5-1: SerialNumber: syz [ 248.547458][ T43] usb 5-1: config 0 descriptor?? [ 248.896558][ T43] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 249.012669][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.130052][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 249.247577][ T43] usb 5-1: media controller created [ 249.550064][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.171098][ T43] usb 5-1: USB disconnect, device number 5 [ 250.569313][ T8031] loop0: detected capacity change from 0 to 32768 [ 250.639089][ T8031] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 250.648231][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.807655][ T8031] XFS (loop0): Ending clean mount [ 250.850322][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 250.898715][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.929102][ T30] audit: type=1800 audit(1748789865.491:37): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.726" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 251.001871][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.047916][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.087451][ T8060] loop4: detected capacity change from 0 to 1024 [ 251.112872][ T5890] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.194309][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.262336][ T8060] hfsplus: walked past end of dir [ 251.270069][ T5890] usb 6-1: config 0 descriptor?? [ 251.682172][ T5828] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 251.788921][ T5890] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 251.856715][ T5890] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 251.878296][ T5890] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 251.930423][ T5890] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 252.016912][ T5890] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 252.093022][ T5890] microsoft 0003:045E:07DA.0009: no inputs found [ 252.129407][ T5890] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 252.202734][ T5890] usb 6-1: USB disconnect, device number 7 [ 252.359483][ T8063] fido_id[8063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 252.990401][ T8062] loop4: detected capacity change from 0 to 32768 [ 253.030180][ T8062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.732 (8062) [ 253.109872][ T8062] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.143757][ T8062] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 253.175675][ T8062] BTRFS info (device loop4): using free-space-tree [ 253.807302][ T5840] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.987361][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.008912][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.214359][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 255.501117][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.551223][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.609000][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.652736][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.664244][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.677215][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.701070][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.708933][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.744523][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.797850][ T8090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.854546][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.554998][ T43] usb 5-1: USB disconnect, device number 6 [ 256.619034][ T8096] netlink: 87 bytes leftover after parsing attributes in process `syz.0.737'. [ 257.792412][ T5837] Bluetooth: hci2: command tx timeout [ 258.093665][ T8102] loop4: detected capacity change from 0 to 32768 [ 258.144361][ T8102] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.266880][ T8102] XFS (loop4): Ending clean mount [ 258.290210][ T8102] XFS (loop4): Quotacheck needed: Please wait. [ 258.380301][ T8102] XFS (loop4): Quotacheck: Done. [ 258.507634][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.754965][ T8112] loop4: detected capacity change from 0 to 512 [ 259.838983][ T8112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.863515][ T8112] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.880917][ T5837] Bluetooth: hci2: command tx timeout [ 259.919637][ T8112] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.741: invalid size [ 260.006441][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.518691][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 260.551833][ T8117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.951151][ T5837] Bluetooth: hci2: command tx timeout [ 261.960914][ T5890] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 262.165856][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.184497][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.206316][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 262.229983][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.247495][ T5890] usb 5-1: SerialNumber: syz [ 262.272532][ T5890] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 262.289423][ T5890] usb-storage 5-1:1.0: USB Mass Storage device detected [ 262.303662][ T5890] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 262.317985][ T5890] scsi host1: usb-storage 5-1:1.0 [ 262.505749][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.522649][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.672846][ T43] usb 5-1: USB disconnect, device number 7 [ 264.031178][ T5837] Bluetooth: hci2: command tx timeout [ 265.000628][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.011694][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.019750][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.041362][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.049126][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.151115][ T5849] Bluetooth: hci7: command tx timeout [ 268.488796][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 268.501462][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 268.509201][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 268.518405][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 268.542717][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 269.233144][ T5849] Bluetooth: hci7: command tx timeout [ 270.510402][ T8150] loop0: detected capacity change from 0 to 1764 [ 270.622301][ T5849] Bluetooth: hci8: command tx timeout [ 271.003669][ T8150] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 271.320949][ T5849] Bluetooth: hci7: command tx timeout [ 271.493998][ T8156] loop4: detected capacity change from 0 to 256 [ 271.902392][ T8156] FAT-fs (loop4): Directory bread(block 64) failed [ 272.041536][ T8156] FAT-fs (loop4): Directory bread(block 65) failed [ 272.048204][ T8156] FAT-fs (loop4): Directory bread(block 66) failed [ 272.258584][ T8156] FAT-fs (loop4): Directory bread(block 67) failed [ 272.431246][ T8156] FAT-fs (loop4): Directory bread(block 68) failed [ 272.437840][ T8156] FAT-fs (loop4): Directory bread(block 69) failed [ 272.627269][ T8161] loop0: detected capacity change from 0 to 1024 [ 272.642230][ T8156] FAT-fs (loop4): Directory bread(block 70) failed [ 272.671677][ T8156] FAT-fs (loop4): Directory bread(block 71) failed [ 272.678921][ T5849] Bluetooth: hci8: command tx timeout [ 272.741059][ T8156] FAT-fs (loop4): Directory bread(block 72) failed [ 272.747639][ T8156] FAT-fs (loop4): Directory bread(block 73) failed [ 273.391097][ T5849] Bluetooth: hci7: command tx timeout [ 273.546025][ T3526] hfsplus: b-tree write err: -5, ino 4 [ 274.099586][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.110244][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.122540][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.132069][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.163062][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.751382][ T5837] Bluetooth: hci8: command tx timeout [ 276.139140][ T8192] loop0: detected capacity change from 0 to 512 [ 276.237498][ T8192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.273080][ T5837] Bluetooth: hci0: command tx timeout [ 276.377157][ T8192] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.761: bad orphan inode 11 [ 276.441687][ T8192] ext4_test_bit(bit=10, block=4) = 1 [ 276.447018][ T8192] is_bad_inode(inode)=0 [ 276.469341][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 276.503610][ T8192] NEXT_ORPHAN(inode)=2080374784 [ 276.538580][ T8192] max_ino=32 [ 276.576579][ T8192] i_nlink=0 [ 276.585488][ T8192] EXT4-fs (loop0): 1 truncate cleaned up [ 276.638201][ T8192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.771015][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 276.835182][ T5837] Bluetooth: hci8: command tx timeout [ 277.311182][ T8197] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 278.019719][ T8200] loop4: detected capacity change from 0 to 32768 [ 278.064702][ T8200] (syz.4.763,8200,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.109743][ T8200] (syz.4.763,8200,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.190290][ T8200] JBD2: Ignoring recovery information on journal [ 278.319912][ T8200] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 278.351027][ T5837] Bluetooth: hci0: command tx timeout [ 279.586446][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.678491][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 279.870198][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 280.431795][ T5837] Bluetooth: hci0: command tx timeout [ 280.505610][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.542054][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.549320][ T8143] bridge_slave_0: entered allmulticast mode [ 280.691139][ T8143] bridge_slave_0: entered promiscuous mode [ 280.887907][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.915643][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.947753][ T8140] bridge_slave_0: entered allmulticast mode [ 281.008801][ T8140] bridge_slave_0: entered promiscuous mode [ 281.044480][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.081851][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.111011][ T8140] bridge_slave_1: entered allmulticast mode [ 281.159411][ T8140] bridge_slave_1: entered promiscuous mode [ 281.238877][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.290740][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.298290][ T8143] bridge_slave_1: entered allmulticast mode [ 281.343450][ T8223] loop4: detected capacity change from 0 to 64 [ 281.408445][ T8143] bridge_slave_1: entered promiscuous mode [ 282.130125][ T8233] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 282.514728][ T5837] Bluetooth: hci0: command tx timeout [ 282.639077][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.738449][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.008702][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.064985][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.318151][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.391326][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.398907][ T8091] bridge_slave_0: entered allmulticast mode [ 283.508609][ T8091] bridge_slave_0: entered promiscuous mode [ 283.534430][ T8249] loop4: detected capacity change from 0 to 16 [ 283.654013][ T8249] erofs (device loop4): mounted with root inode @ nid 36. [ 284.064421][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.097821][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.162600][ T8091] bridge_slave_1: entered allmulticast mode [ 284.197570][ T8091] bridge_slave_1: entered promiscuous mode [ 284.271922][ T8251] pimreg: entered allmulticast mode [ 284.281844][ T8252] pimreg: left allmulticast mode [ 284.534600][ T8140] team0: Port device team_slave_0 added [ 284.693100][ T8143] team0: Port device team_slave_0 added [ 284.711048][ T8259] loop4: detected capacity change from 0 to 8 [ 284.754121][ T8259] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 284.823016][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop4 [ 285.198120][ T8140] team0: Port device team_slave_1 added [ 285.535105][ T8143] team0: Port device team_slave_1 added [ 285.563240][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 285.607379][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.658178][ T8270] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 285.703856][ T8269] loop4: detected capacity change from 0 to 2048 [ 285.834012][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.862969][ T8269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.926410][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.027375][ T30] audit: type=1800 audit(1748789900.591:38): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.780" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 286.111787][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.284502][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.475354][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.629186][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.656793][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.756381][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.828318][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.865332][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.991477][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.065643][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.117598][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.245684][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.692641][ T8091] team0: Port device team_slave_0 added [ 287.952558][ T8091] team0: Port device team_slave_1 added [ 288.319590][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.383505][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.541169][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.564400][ T8292] loop0: detected capacity change from 0 to 256 [ 288.580066][ T8293] loop4: detected capacity change from 0 to 1024 [ 288.678475][ T8292] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 288.795569][ T8140] hsr_slave_0: entered promiscuous mode [ 288.855857][ T8140] hsr_slave_1: entered promiscuous mode [ 288.917729][ T8140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.990985][ T8140] Cannot create hsr debugfs directory [ 289.435186][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.495900][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.655451][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.737050][ T8299] loop4: detected capacity change from 0 to 1024 [ 289.792315][ T8299] EXT4-fs: Ignoring removed orlov option [ 289.798073][ T8299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.929287][ T8299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.972928][ T8143] hsr_slave_0: entered promiscuous mode [ 290.002212][ T8143] hsr_slave_1: entered promiscuous mode [ 290.037587][ T8143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.111760][ T8143] Cannot create hsr debugfs directory [ 290.246231][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.303321][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.326571][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.349691][ T8169] bridge_slave_0: entered allmulticast mode [ 290.373958][ T8169] bridge_slave_0: entered promiscuous mode [ 290.411557][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.469755][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.488372][ T8169] bridge_slave_1: entered allmulticast mode [ 290.572317][ T8169] bridge_slave_1: entered promiscuous mode [ 291.305138][ T8305] loop4: detected capacity change from 0 to 32768 [ 291.422369][ T8305] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 291.451932][ T8305] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=data_checksum=none,compression=lz4,background_compression=zstd,wide_macs,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names [ 291.451932][ T8305] allowing incompatible features above 0.0: (unknown version) [ 291.451932][ T8305] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 291.494473][ T8305] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 291.502730][ T8305] bcachefs (loop4): Version upgrade required: [ 291.502730][ T8305] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 291.502730][ T8305] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 291.502730][ T8305] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 291.645863][ T8305] bcachefs (loop4): btree node read error at btree dirents level 0/0 [ 291.645893][ T8305] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 1027 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 291.645914][ T8305] loop4 node offset 24/1027: btree node data missing: expected 1027 sectors, found 24 [ 291.645930][ T8305] flagging btree dirents lost data [ 291.645943][ T8305] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 291.645959][ T8305] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 291.645975][ T8305] ret fsck_errors_not_fixed [ 291.709222][ T8305] bcachefs (loop4): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 291.764335][ T8305] bcachefs (loop4): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 291.781578][ T8305] bcachefs (loop4): btree node read error at btree lru level 0/0 [ 291.781602][ T8305] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 291.781622][ T8305] loop4 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686480762142719:U32_MAX [ 291.781639][ T8305] flagging btree lru lost data [ 291.781652][ T8305] ret btree_node_read_validate_error [ 291.826660][ T8305] bcachefs (loop4): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 291.850504][ T8305] bcachefs (loop4): scan_for_btree_nodes... [ 292.011023][ T8297] loop0: detected capacity change from 0 to 40427 [ 292.027427][ T8305] bcachefs (loop4): btree node scan found 7 nodes after overwrites [ 292.035905][ T8305] done [ 292.038678][ T8305] bcachefs (loop4): check_topology... [ 292.038902][ T8305] bcachefs (loop4): btree root dirents unreadable, must recover from scan [ 292.053672][ T8305] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - SPOS_MAX [ 292.064564][ T8305] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 292.114599][ T8305] done [ 292.117391][ T8305] bcachefs (loop4): accounting_read... done [ 292.133474][ T8305] bcachefs (loop4): alloc_read... done [ 292.139345][ T8305] bcachefs (loop4): snapshots_read... done [ 292.145704][ T8305] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 292.155812][ T8305] bcachefs (loop4): done starting filesystem [ 292.250713][ T8091] hsr_slave_0: entered promiscuous mode [ 292.277727][ T8297] F2FS-fs (loop0): build fault injection type: 0x7 [ 292.301671][ T8091] hsr_slave_1: entered promiscuous mode [ 292.362461][ T8297] F2FS-fs (loop0): invalid crc value [ 292.372531][ T8091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.443402][ T8091] Cannot create hsr debugfs directory [ 292.596439][ T5840] bcachefs (loop4): shutting down [ 292.900168][ T5840] bcachefs (loop4): shutdown complete [ 293.004145][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.042253][ T8297] F2FS-fs (loop0): Start checkpoint disabled! [ 293.076126][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.744112][ T8169] team0: Port device team_slave_0 added [ 294.161940][ T8169] team0: Port device team_slave_1 added [ 295.169423][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.198384][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.300954][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.337520][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.356257][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.460693][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.010954][ T5946] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 296.075916][ T8169] hsr_slave_0: entered promiscuous mode [ 296.139077][ T8169] hsr_slave_1: entered promiscuous mode [ 296.171648][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.200830][ T8169] Cannot create hsr debugfs directory [ 296.216976][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 296.248607][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.305848][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.347530][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.412777][ T5946] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.450504][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.508742][ T5946] usb 1-1: config 0 descriptor?? [ 296.988589][ T5946] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 297.051670][ T5946] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 297.087487][ T8143] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 297.153832][ T5946] microsoft 0003:045E:07DA.000A: no inputs found [ 297.160215][ T5946] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 297.224895][ T8143] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 297.301236][ T5946] usb 1-1: USB disconnect, device number 7 [ 297.472082][ T8143] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 297.570216][ T8339] fido_id[8339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 297.647039][ T8143] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 298.446926][ T8140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 298.815043][ T8140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 298.876749][ T8140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 298.965973][ T8140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 299.394787][ T8344] loop0: detected capacity change from 0 to 32768 [ 299.426280][ T8344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.797 (8344) [ 299.568707][ T8344] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.679203][ T8344] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 299.746333][ T8344] BTRFS info (device loop0): using free-space-tree [ 302.270702][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.289354][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.444658][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.498068][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.592723][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.600062][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.668452][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.782079][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.789257][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.873446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.880642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.165506][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.172717][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.608138][ T8091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.121668][ T8091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.262194][ T8091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.700932][ T8091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.083952][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.568332][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.786110][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.883374][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.890533][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.117703][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.182055][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.189208][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.849536][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 309.178803][ T8426] loop0: detected capacity change from 0 to 512 [ 309.304478][ T8426] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 309.497219][ T8426] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 309.807503][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.820012][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.847930][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.856240][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.864979][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.033783][ T31] INFO: task kworker/0:8:7140 blocked for more than 143 seconds. [ 310.055600][ T31] Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 SYZFAIL: failed to recv rpc [ 310.091426][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.125092][ T31] task:kworker/0:8 state:D stack:30440 pid:7140 tgid:7140 ppid:2 task_flags:0x208040 flags:0x00004000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.210874][ T31] Call Trace: [ 310.214272][ T31] [ 310.217226][ T31] __schedule+0x16f5/0x4d00 [ 310.230183][ T31] ? psi_task_change+0xe5/0x250 [ 310.320967][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.328512][ T31] ? schedule+0x165/0x360 [ 310.370834][ T31] ? __pfx___schedule+0x10/0x10 [ 310.375741][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.462119][ T31] ? schedule+0x91/0x360 [ 310.466421][ T31] schedule+0x165/0x360 [ 310.470689][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.521250][ T31] kthread+0x2bc/0x8a0 [ 310.525378][ T31] ? __pfx_worker_thread+0x10/0x10 [ 310.530512][ T31] ? __pfx_kthread+0x10/0x10 [ 310.551142][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.556808][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.621383][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.621421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.621454][ T31] ? __pfx_kthread+0x10/0x10 [ 310.621481][ T31] ret_from_fork+0x3fc/0x770 [ 310.621517][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.621556][ T31] ? __switch_to_asm+0x39/0x70 [ 310.621584][ T31] ? __switch_to_asm+0x33/0x70 [ 310.621610][ T31] ? __pfx_kthread+0x10/0x10 [ 310.621636][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.621685][ T31] [ 310.621739][ T31] [ 310.621739][ T31] Showing all locks held in the system: [ 310.621752][ T31] 1 lock held by kworker/R-rcu_g/4: [ 310.621769][ T31] #0: ffffffff8dfe3c08 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 310.621853][ T31] 2 locks held by kworker/0:0/9: [ 310.621870][ T31] 1 lock held by khungtaskd/31: [ 310.621886][ T31] #0: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 310.621956][ T31] 2 locks held by kworker/u8:2/36: [ 310.621971][ T31] #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.622049][ T31] #1: ffffc90000ac7bc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.622129][ T31] 2 locks held by kworker/u8:3/49: [ 310.622144][ T31] #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.622223][ T31] #1: ffffc90000ba7bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.622303][ T31] 3 locks held by kworker/u8:4/59: [ 310.622325][ T31] #0: ffff88802ecb7148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.622403][ T31] #1: ffffc9000210fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.622481][ T31] #2: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 310.622571][ T31] 2 locks held by kworker/0:3/1209: [ 310.622603][ T31] 2 locks held by getty/5584: [ 310.622619][ T31] #0: ffff88803494a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 310.622688][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 310.622765][ T31] 1 lock held by syz-executor/5828: [ 310.622781][ T31] #0: ffffffff8e142bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 310.622866][ T31] 2 locks held by kworker/R-wg-cr/5866: [ 310.622883][ T31] 2 locks held by kworker/R-wg-cr/5869: [ 310.622900][ T31] 1 lock held by kworker/R-wg-cr/5878: [ 310.622917][ T31] #0: ffffffff8dfe3c08 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x88b/0xdd0 [ 310.622997][ T31] 4 locks held by kworker/R-wg-cr/5879: [ 310.623014][ T31] 1 lock held by kworker/R-wg-cr/5882: [ 310.623032][ T31] 2 locks held by kworker/R-wg-cr/5883: [ 310.623049][ T31] 3 locks held by kworker/1:3/5890: [ 310.623065][ T31] #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.623141][ T31] #1: ffffc900040a7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.623217][ T31] #2: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 310.623297][ T31] 3 locks held by kworker/1:4/5891: [ 310.623318][ T31] #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.623395][ T31] #1: ffffc900040e7bc0 ((work_completion)(&(&devlink->rwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.623473][ T31] #2: ffffffff8e142bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 310.623555][ T31] 6 locks held by kworker/0:4/5892: [ 310.623571][ T31] 4 locks held by kworker/1:6/5895: [ 310.623588][ T31] 2 locks held by kworker/0:5/5932: [ 310.623604][ T31] 2 locks held by kworker/0:6/5934: [ 310.623622][ T31] 3 locks held by kworker/u8:8/7110: [ 310.623638][ T31] #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.623715][ T31] #1: ffffc9000513fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.623792][ T31] #2: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 310.623864][ T31] 4 locks held by kworker/u8:9/7336: [ 310.623880][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 310.623957][ T31] #1: ffffc9001ec27bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 310.624033][ T31] #2: ffffffff8f4fe650 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 310.624116][ T31] #3: ffff88804cb294e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 310.624194][ T31] 1 lock held by syz-executor/8091: [ 310.624211][ T31] #0: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 310.624285][ T31] 1 lock held by syz-executor/8140: [ 310.624301][ T31] #0: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 310.624381][ T31] 1 lock held by syz-executor/8143: [ 310.624396][ T31] #0: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 310.624471][ T31] 8 locks held by syz-executor/8169: [ 310.624488][ T31] 1 lock held by syz.4.793/8416: [ 310.624504][ T31] 1 lock held by syz-executor/8429: [ 310.624519][ T31] #0: ffffffff8f50b248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 310.624595][ T31] 1 lock held by dhcpcd/8432: [ 310.624610][ T31] #0: ffff888048ec0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.624686][ T31] 1 lock held by dhcpcd/8433: [ 310.624701][ T31] #0: ffff88807fc3a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.624774][ T31] 1 lock held by dhcpcd/8434: [ 310.624790][ T31] #0: ffff888056ce4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.624863][ T31] 1 lock held by dhcpcd/8435: [ 310.624879][ T31] #0: ffff88804b3c2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.624953][ T31] 1 lock held by dhcpcd/8436: [ 310.624968][ T31] #0: ffff88804b3c4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.625043][ T31] 1 lock held by dhcpcd/8437: [ 310.625059][ T31] #0: ffff88804b3c0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 310.625132][ T31] [ 310.625140][ T31] ============================================= [ 310.625140][ T31] [ 310.625152][ T31] NMI backtrace for cpu 1 [ 310.625166][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 310.625195][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.625209][ T31] Call Trace: [ 310.625218][ T31] [ 310.625228][ T31] dump_stack_lvl+0x189/0x250 [ 310.625265][ T31] ? __wake_up_klogd+0xd9/0x110 [ 310.625288][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.625326][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.625364][ T31] ? __pfx__printk+0x10/0x10 [ 310.625407][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 310.625436][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 310.625458][ T31] ? _printk+0xcf/0x120 [ 310.625489][ T31] ? __pfx__printk+0x10/0x10 [ 310.625518][ T31] ? debug_show_all_locks+0x2e/0x180 [ 310.625539][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.625573][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 310.625604][ T31] watchdog+0xfee/0x1030 [ 310.625638][ T31] ? watchdog+0x1de/0x1030 [ 310.625675][ T31] kthread+0x711/0x8a0 [ 310.625702][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.625728][ T31] ? __pfx_kthread+0x10/0x10 [ 310.625747][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.625780][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.625807][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.625834][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.625863][ T31] ? __pfx_kthread+0x10/0x10 [ 310.625886][ T31] ret_from_fork+0x3fc/0x770 [ 310.625919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.625955][ T31] ? __switch_to_asm+0x39/0x70 [ 310.625979][ T31] ? __switch_to_asm+0x33/0x70 [ 310.626003][ T31] ? __pfx_kthread+0x10/0x10 [ 310.626027][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.626072][ T31] [ 310.626085][ T31] Sending NMI from CPU 1 to CPUs 0: [ 310.626111][ C0] NMI backtrace for cpu 0 [ 310.626125][ C0] CPU: 0 UID: 0 PID: 5879 Comm: kworker/R-wg-cr Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 310.626153][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.626168][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 310.626206][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 310.626233][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 310.626252][ C0] RSP: 0018:ffffc90000007408 EFLAGS: 00000086 [ 310.626271][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: e456d4d802f77200 [ 310.626286][ C0] RDX: 0000000000000000 RSI: ffffffff8be26f20 RDI: ffffffff8be26ee0 [ 310.626303][ C0] RBP: ffffffff81727e15 R08: 0000000000000000 R09: 0000000000000000 [ 310.626318][ C0] R10: dffffc0000000000 R11: ffffffff81acd580 R12: 0000000000000002 [ 310.626334][ C0] R13: ffffffff8e13d080 R14: 0000000000000000 R15: 0000000000000000 [ 310.626351][ C0] FS: 0000000000000000(0000) GS:ffff888125c5f000(0000) knlGS:0000000000000000 [ 310.626370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.626385][ C0] CR2: 0000001b3000dff8 CR3: 000000007a71d000 CR4: 0000000000350ef0 [ 310.626403][ C0] Call Trace: [ 310.626411][ C0] [ 310.626419][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 310.626446][ C0] rcu_is_watching+0x15/0xb0 [ 310.626478][ C0] lock_acquire+0x5f/0x360 [ 310.626506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.626535][ C0] ? unwind_next_frame+0xa5/0x2390 [ 310.626570][ C0] ? __kasan_slab_free+0x62/0x70 [ 310.626604][ C0] ? unwind_next_frame+0xa5/0x2390 [ 310.626633][ C0] unwind_next_frame+0xc2/0x2390 [ 310.626661][ C0] ? unwind_next_frame+0xa5/0x2390 [ 310.626695][ C0] ? unwind_next_frame+0xa5/0x2390 [ 310.626725][ C0] ? kasan_save_free_info+0x46/0x50 [ 310.626755][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.626791][ C0] arch_stack_walk+0x11c/0x150 [ 310.626828][ C0] ? __kasan_slab_free+0x62/0x70 [ 310.626863][ C0] stack_trace_save+0x9c/0xe0 [ 310.626898][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 310.626932][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.626965][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.626991][ C0] ? __lock_acquire+0xab9/0xd20 [ 310.627018][ C0] kasan_save_track+0x3e/0x80 [ 310.627047][ C0] ? kasan_save_track+0x3e/0x80 [ 310.627076][ C0] ? kasan_save_free_info+0x46/0x50 [ 310.627100][ C0] ? __kasan_slab_free+0x62/0x70 [ 310.627167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627196][ C0] kasan_save_free_info+0x46/0x50 [ 310.627221][ C0] __kasan_slab_free+0x62/0x70 [ 310.627252][ C0] ? dummy_timer+0x801/0x4550 [ 310.627273][ C0] kfree+0x18e/0x440 [ 310.627307][ C0] dummy_timer+0x801/0x4550 [ 310.627337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627401][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.627440][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627466][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.627505][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627536][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 310.627566][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 310.627588][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 310.627608][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 310.627639][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627679][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 310.627707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627768][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 310.627803][ C0] handle_softirqs+0x286/0x870 [ 310.627836][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 310.627870][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 310.627902][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.627928][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 310.627954][ C0] __irq_exit_rcu+0xca/0x1f0 [ 310.627983][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 310.628016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.628046][ C0] irq_exit_rcu+0x9/0x30 [ 310.628072][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 310.628099][ C0] [ 310.628107][ C0] [ 310.628116][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.628139][ C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90 [ 310.628165][ C0] Code: cc e8 b1 9e d1 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 66 90 e8 f4 22 d4 09 e8 af dd 34 00 fb 5b <41> 5e 41 5f e9 af 57 7d ff cc f3 0f 1e fa 49 be 00 00 00 00 00 fc [ 310.628184][ C0] RSP: 0018:ffffc9000439eca8 EFLAGS: 00000286 [ 310.628202][ C0] RAX: e456d4d802f77200 RBX: ffff88807e472580 RCX: e456d4d802f77200 [ 310.628219][ C0] RDX: 0000000000000006 RSI: ffffffff8d9705da RDI: ffffffff8be26f40 [ 310.628235][ C0] RBP: ffffc9000439eed0 R08: ffffffff8fa0bcf7 R09: 1ffffffff1f4179e [ 310.628252][ C0] R10: dffffc0000000000 R11: fffffbfff1f4179f R12: ffff88807e471e00 [ 310.628269][ C0] R13: dffffc0000000000 R14: ffff88807e471e00 R15: ffff8880b863b900 [ 310.628301][ C0] __schedule+0x1948/0x4d00 [ 310.628334][ C0] ? __skb_flow_dissect+0x408/0x68b0 [ 310.628359][ C0] ? __rcu_read_unlock+0x84/0xe0 [ 310.628383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.628409][ C0] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 310.628430][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 310.628462][ C0] ? __pfx___schedule+0x10/0x10 [ 310.628487][ C0] ? irqentry_exit+0x74/0x90 [ 310.628513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.628539][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.628573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.628612][ C0] preempt_schedule_irq+0xb5/0x150 [ 310.628639][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 310.628673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.628700][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 310.628733][ C0] irqentry_exit+0x6f/0x90 [ 310.628759][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.628783][ C0] RIP: 0010:kasan_check_range+0x1d4/0x2c0 [ 310.628821][ C0] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 19 93 ec fe cc 45 84 ff 75 63 41 f7 [ 310.628839][ C0] RSP: 0018:ffffc9000439f058 EFLAGS: 00000246 [ 310.628857][ C0] RAX: ffffffff84c3a801 RBX: 0000000000000000 RCX: ffffffff84c3a895 [ 310.628873][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000439f3f0 [ 310.628888][ C0] RBP: 0000000000000000 R08: ffffffff8fa0bcf7 R09: 1ffffffff1f4179e [ 310.628904][ C0] R10: dffffc0000000000 R11: fffffbfff1f4179f R12: ffffffff84c3a895 [ 310.628921][ C0] R13: 0000000000000000 R14: ffffc9000439f3f0 R15: ffffc9000439f180 [ 310.628939][ C0] ? poly1305_update+0x145/0x1b0 [ 310.628967][ C0] ? poly1305_update+0xb1/0x1b0 [ 310.628989][ C0] ? poly1305_update+0x145/0x1b0 [ 310.629018][ C0] ? poly1305_update+0x145/0x1b0 [ 310.629043][ C0] __asan_memcpy+0x29/0x70 [ 310.629072][ C0] poly1305_update+0x145/0x1b0 [ 310.629100][ C0] chacha20poly1305_crypt_sg_inplace+0x7c3/0xe00 [ 310.629127][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629153][ C0] ? rcu_is_watching+0x15/0xb0 [ 310.629187][ C0] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 310.629242][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629275][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629307][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 310.629340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629366][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 310.629412][ C0] chacha20poly1305_encrypt_sg_inplace+0x3e/0x60 [ 310.629441][ C0] wg_packet_encrypt_worker+0x959/0x1720 [ 310.629498][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 310.629534][ C0] ? __pfx___calc_delta+0x10/0x10 [ 310.629624][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629650][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.629678][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629709][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 310.629738][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 310.629767][ C0] ? process_scheduled_works+0xa39/0x17b0 [ 310.629797][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 310.629826][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 310.629857][ C0] process_scheduled_works+0xae1/0x17b0 [ 310.629908][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 310.629946][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.629972][ C0] ? assign_work+0x381/0x410 [ 310.630004][ C0] rescuer_thread+0x53c/0xdd0 [ 310.630041][ C0] ? rescuer_thread+0xbb/0xdd0 [ 310.630089][ C0] kthread+0x711/0x8a0 [ 310.630111][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 310.630144][ C0] ? __pfx_kthread+0x10/0x10 [ 310.630163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.630192][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.630217][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.630243][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.630270][ C0] ? __pfx_kthread+0x10/0x10 [ 310.630291][ C0] ret_from_fork+0x3fc/0x770 [ 310.630320][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 310.630352][ C0] ? __switch_to_asm+0x39/0x70 [ 310.630375][ C0] ? __switch_to_asm+0x33/0x70 [ 310.630398][ C0] ? __pfx_kthread+0x10/0x10 [ 310.630420][ C0] ret_from_fork_asm+0x1a/0x30 [ 310.630456][ C0] [ 310.952928][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 310.952954][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 310.952985][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.953002][ T31] Call Trace: [ 310.953012][ T31] [ 310.953023][ T31] dump_stack_lvl+0x99/0x250 [ 310.953070][ T31] ? __asan_memcpy+0x40/0x70 [ 310.953103][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.953144][ T31] ? __pfx__printk+0x10/0x10 [ 310.953181][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953217][ T31] panic+0x2db/0x790 [ 310.953255][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953291][ T31] ? __pfx_panic+0x10/0x10 [ 310.953327][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953356][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 310.953399][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953429][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 310.953464][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 310.953494][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953529][ T31] watchdog+0x102d/0x1030 [ 310.953567][ T31] ? watchdog+0x1de/0x1030 [ 310.953606][ T31] kthread+0x711/0x8a0 [ 310.953634][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.953662][ T31] ? __pfx_kthread+0x10/0x10 [ 310.953682][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.953745][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 310.953774][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.953804][ T31] ? __pfx_kthread+0x10/0x10 [ 310.953829][ T31] ret_from_fork+0x3fc/0x770 [ 310.953863][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 310.953901][ T31] ? __switch_to_asm+0x39/0x70 [ 310.953927][ T31] ? __switch_to_asm+0x33/0x70 [ 310.953952][ T31] ? __pfx_kthread+0x10/0x10 [ 310.953978][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.954024][ T31] [ 310.954329][ T31] Kernel Offset: disabled