last executing test programs: 2m9.568057314s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) 2m9.283922453s ago: executing program 3 (id=68): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a", @ANYRES64=r1], 0x28}}, 0x0) 2m8.680714535s ago: executing program 3 (id=71): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 2m8.356362399s ago: executing program 3 (id=74): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x13b6c3d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m7.687243358s ago: executing program 3 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2m5.178487748s ago: executing program 3 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 2m4.659225692s ago: executing program 32 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1m50.932562273s ago: executing program 0 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604ad0c002b8008000400070000001400030076657468305f766c616e0000000000000a000100aa"], 0x4c}}, 0x48000) 1m50.097331s ago: executing program 0 (id=180): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000040)=0x85) 1m49.798669221s ago: executing program 0 (id=171): syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) io_setup(0x7, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m49.233689399s ago: executing program 2 (id=175): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m48.922953511s ago: executing program 2 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="0210ef050a0000002dbd7000ffdbdf250800120002000200b86b6e000300"], 0x50}}, 0x4000000) 1m48.721031902s ago: executing program 0 (id=178): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x497, &(0x7f0000002940)="$eJzs3M1vVFUbAPDn3n4ALx/ty8urgqhVYtJobGlBZeFGo4kLjCa6wGVtB9IwUEOrEUKkGoMbE0Oia+PSxL/AnTEx6srErW5cGRKibEDjYsy9cy+dTjvA0GlnpL9fMp1z5p6Z8zxz7505c86FADatkexPErEjIn6OiKF6dXmDkfrd9avnp/+8en46iVrt1d+TvN21q+eny6bl87YXldE0Iv0gKTpZbv7suZNT1WrlTFEfXzj15vj82XNPvH1q6kTlROX05JEjhw9NPP3U5JMdyTPL69q+d+f2733x9UsvTR+79Mb3X2bx7ii2N+bRKSNZ4n/UchHxd/2u7tFOd9ZlOxvKSX8XA6EtfRGR7a6B/Pwfir5Y2nlD8cL7XQ0OWFfZd9OW1psXa8BdLIluRwB0R/lFn/3+LW8bNPToCVeerf8AyvK+XtzqW/ojLdoMNP2+7aSRiDi2+Ndn2S3WaR4CAKDRR9OfHh1sGHcsjT/SuCe//zX/u6tYQxmOiP9GxO6I+F9E7ImI/0fkbe+NiPvWGM/K8U96eUWjpLbGXpZk479nirWt5eO/cvQXw31FbWee/0ByfLZaOVi8J6MxsCWrT9ykj6+f/+njVtsax3/ZLeu/HAsWcVzub5qgm5lamMoHpR1w5b2Iff2r5Z/cWAlIImJvROxr76V3lYXZx77Y36rRrfO/iQ6sM9U+z9JbzPJfjKb8S0nj+uTsivXJ8a1RrRwcL4+KlX748eIrrfq//fyzozAG157xclcq9fuG/d/cZDhpXK+db7+Pi7982PI3zR0e/+lg8lq+zly+Ie9MLSycmYgYTI7m9WWPTy49t6yX7bPjf/TA6uf/7uI5Wf73R0R2ED8QEQ9GxENF7A9HxCMRceAm+X/3XOttZf6R3sHx3wFZ/jOrfv7dOP6b9n/7hb6T337Vqv/b2/+H89Jo8Uj++XcLq4WTfVw0B7iW9w4AAAD+LdL8GvgkHbtRTtOxsfo1/HviP2l1bn7h8eNzb52eqV8rPxwDaTnTNVTMh1Znq5WJZLF4xfr86GQxV1zOlx4q5o0/6duW18em56ozXc4dNrvtLc7/zG993Y4OWGfbVn10suNLTUAval5HT5dXL7zc+XVnoEe0cR1Nsp5xABvvFud/ulFxABvP/9cCm9dq5/+Fprq1ALg7+f6Hzcv5D5tU+k23IwC6yPc/bEpr+Xf961jY2hthdKfQqzslL0SUhbQn4mmvUEsi2nlWeblLTwS/sYUufzABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0yD8BAAD//5hj6g0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000) 1m48.534975341s ago: executing program 2 (id=181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1m48.321893394s ago: executing program 2 (id=183): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m47.759284561s ago: executing program 0 (id=185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40000100, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m47.535339475s ago: executing program 2 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/17, &(0x7f00000003c0)=0x11) 1m47.079559182s ago: executing program 0 (id=190): syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m46.272515615s ago: executing program 33 (id=190): syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m46.256375617s ago: executing program 2 (id=192): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000000c0)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m45.74935593s ago: executing program 34 (id=192): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000000c0)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 59.710936257s ago: executing program 1 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 59.363392823s ago: executing program 1 (id=557): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, @broadcast}, 0x6, {0x2, 0x4e23, @broadcast}, 'wg0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000001040)=""/122, 0x7a}], 0x1, 0x4000ffe, 0x0) 59.112102019s ago: executing program 1 (id=561): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000540)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000000580), 0x400000000000166, 0x1a000, 0x0) 58.786683933s ago: executing program 1 (id=566): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 56.350545865s ago: executing program 1 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0xdd) write(r0, &(0x7f0000000140)="04080076657273696f6e00020500000004080070726f66696c650007050000", 0x1f) 54.95240014s ago: executing program 1 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) 54.282116399s ago: executing program 35 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0) 4.083727147s ago: executing program 7 (id=1051): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000880)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f00000008c0)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000940)=[0x0], 0x1, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.811630285s ago: executing program 7 (id=1054): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a4031ff"], 0x55}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000028c0)=""/4096) 3.530551715s ago: executing program 7 (id=1057): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f0a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c33991f91201c2796173864", 0x3d}], 0x1}, 0x20000000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 3.268571241s ago: executing program 7 (id=1059): creat(&(0x7f00000000c0)='./file0\x00', 0x93) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000002dc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/119, 0x77) 3.135945275s ago: executing program 6 (id=1061): ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200), 0x0}) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, 0x0}) 3.002885899s ago: executing program 8 (id=1063): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x15) 2.906891599s ago: executing program 6 (id=1064): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x80000001, @loopback, 0x9}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="47ef5113a0dba1560ba3d8c58fe1d9c875a4bf18", 0x14) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.808534069s ago: executing program 6 (id=1066): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000002a80)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.634919167s ago: executing program 8 (id=1067): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x80c406, &(0x7f0000000a00)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000b00)="$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") syz_mount_image$msdos(&(0x7f0000000dc0), &(0x7f0000000e00)='.\x00', 0x19624bc, &(0x7f0000000e40)=ANY=[@ANYRESOCT=r0, @ANYBLOB="812668bd8569d0dd4bce9b531ebfb912ae088b6c55c4f1d69ab50083c9271d774ec8c86ec3935df6bfda09e0beb9d0773658cb04f96e162caef510e20249bfa53b5e03d650894cb0cec37a586061d6e3a0c540acf3da2105fee8f38f97c2bb20cfc75659072509f4c5c6138d1acb7b6516621dca5aca6bfec7", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, &(0x7f0000000f40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 2.395251782s ago: executing program 8 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x85}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="62237ec8fa96"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 2.206950272s ago: executing program 7 (id=1071): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xb, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x60, 0xd, 0x6, "d07db476d362"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.103847782s ago: executing program 8 (id=1072): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.881820095s ago: executing program 4 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) 1.576122707s ago: executing program 4 (id=1077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e0794ba217d24cb1dd5eab952f7a5004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a6dc4facc231ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148be3b2e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979009857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef09eecfc3344b8d3d524a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef568fc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b625491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd907000000000000000d9cae846bcbfa8cce7b893e578af7dc7d5e8732cac2d114b1457261bc5dfb508078d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000ff0300000000000000000000000000000000005205000000dc1c010100000000000052a93466ae595c6a8cda6d0d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd5236460000000000000000000000000000000000000000000000ff01000000000000ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f764992218c2d40624152c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f65167300000000d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0a16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29aea7779355ecba6efa1517ec40bb3fa44f99596ad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff173291dda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab784b4000043cc97f9479136a66f551c2abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246661f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a55b5d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff32c403c0ecabaa78148be8eeee2711a65629e1e8be9dc213e77d8acf6bb01677dce314a973bb2aea3cc0449edf06342d676cbfc38dc03c68f197ae08aee4e2a9031f05e6741629b50dcd4e795d6f1ea4643760e96a8d5f6fdfd68d39d6870c0e3e5fa0e2b798d28231a786a0dd12a079860000000000f02ec9a8f4af0117974bbf00bba7c708dae1f6854f6a0f13399ef22983d0d5c59e91bcb61ba59cfa9ae1ac144c448ab77784b6e79d5560f812e56c13d8b3ea87d71f35d38c80ad839b6aed72534cb8a0613fc15dc6f573d485f8479668bd8dd2b4f9789a343380f24e199e88372fdbfcb7068555ed85a5e5d53b65e1d786497278e531d96795863c8373dc371e431f87a662605ab26e82bdd7e51adbcc27e9a5f2b772aeae63a66ea985daf7b109553a8957779fe94371c38f4dadfeef505bc4b0fbf52873fca552af2b433826f4d1c5e8b17a5f7999674b095a33b005338542014c85ae9be79e962801e3703273b0500a809a2e839930677fae0a26d610eba974a9ea230a8b9eb84ab283639ad299aaa36d16a9bd4aca745f40ab694cc903e4588bf29c44d97d9c1a58f9edfbaba158a53606656f4fe93d881021b54f32344d0685ff772c9d606295fa75907b2c97b1be63dd74bd6308d1be4e50fc648c601e23c1d090b981397cfc9aae3cd044a0b1a1b1ea"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000000177fbac141416e000000144079ffeb18000860f050f00845002f2075f0039010594038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.426877363s ago: executing program 5 (id=1078): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000b00)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000013c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0xfffffffffffffff7, 0x0, 0x0}) 1.078630639s ago: executing program 6 (id=1079): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 1.078453108s ago: executing program 4 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x6, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10100000200800001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32, @ANYBLOB='\b\x00:'], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0xd0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.06267816s ago: executing program 5 (id=1081): set_mempolicy(0x3, &(0x7f0000000000)=0xaf93, 0x6) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r0, &(0x7f0000000a40)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) 990.930797ms ago: executing program 8 (id=1082): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 812.248376ms ago: executing program 6 (id=1083): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="10337048eb", 0x5, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 763.260841ms ago: executing program 4 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x80, 0xfffffb54, 0xeaa}, {0xa, 0x5, 0x7, 0x3b, 0xdcfe}]}) 664.445461ms ago: executing program 5 (id=1085): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4167, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 611.486227ms ago: executing program 6 (id=1086): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b80)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) brk(0xc00000000000) 497.284789ms ago: executing program 4 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 454.818423ms ago: executing program 5 (id=1088): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4', @ANYRESDEC=r0], 0xc) 357.566733ms ago: executing program 5 (id=1089): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x7, 0x40, 0x0, 0x30d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0xfffffffffffffffe, 0x0) 289.77214ms ago: executing program 4 (id=1090): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='tr', 0x2) 267.214412ms ago: executing program 7 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1\n', 0x2) 412.15µs ago: executing program 8 (id=1092): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000b00)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f0000000b40)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000013c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0xfffffffffffffff7, 0x0, 0x0}) 0s ago: executing program 5 (id=1093): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) kernel console output (not intermixed with test programs): port descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.784894][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.802161][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.895187][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.929593][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.942972][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.963276][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.974198][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.983711][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.992597][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.002236][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.015520][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.063172][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.088640][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.114378][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.131710][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.142591][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.163527][ T4969] loop4: detected capacity change from 0 to 512 [ 116.171230][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.205682][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.218076][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.232533][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.261931][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.281121][ T4969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.311641][ T4969] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.339616][ T4667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.352652][ T4667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.368759][ T4667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.390691][ T4667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.487130][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 116.632175][ T4978] loop0: detected capacity change from 0 to 512 [ 116.668789][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.687180][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.721558][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.785047][ T4978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e018, mo2=0002] [ 116.793144][ T4978] System zones: 1-12 [ 116.867990][ T4987] loop2: detected capacity change from 0 to 512 [ 116.907942][ T4978] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.936540][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.944458][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.970934][ T4987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.183: bg 0: block 5: invalid block bitmap [ 117.013522][ T4987] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 117.071641][ T4987] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.183: invalid indirect mapped block 3 (level 2) [ 117.089090][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.100852][ T4978] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.178: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 117.136799][ T4978] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.178: ea_inode dec ref err=-117 [ 117.193027][ T4978] EXT4-fs (loop0): 1 orphan inode deleted [ 117.203761][ T4978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.220053][ T4987] EXT4-fs (loop2): 1 orphan inode deleted [ 117.265718][ T4987] EXT4-fs (loop2): 1 truncate cleaned up [ 117.272549][ T4987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.328846][ T4994] sd 0:0:1:0: PR command failed: 1026 [ 117.350740][ T4994] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 117.368610][ T4994] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.394386][ T4278] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 117.435811][ T4278] EXT4-fs error (device loop0): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 117.495094][ T4278] EXT4-fs error (device loop0): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 117.617283][ T4277] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 117.666286][ T4980] loop4: detected capacity change from 0 to 32768 [ 117.675897][ T4277] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 118.009956][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 118.284694][ T4370] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.359962][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 118.484927][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.504858][ T4370] usb 2-1: Using ep0 maxpacket: 32 [ 118.516809][ T4370] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.535715][ T4377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.556891][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.600169][ T4370] usb 2-1: config 0 descriptor?? [ 118.677097][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.712107][ T22] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 118.751419][ T22] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 118.780188][ T22] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 118.837457][ T4370] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 118.856316][ T22] usb 5-1: config 129 has no interface number 0 [ 118.862693][ T22] usb 5-1: config 129 has no interface number 1 [ 118.886080][ T4996] loop5: detected capacity change from 0 to 32768 [ 118.897078][ T22] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 118.912498][ T4370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.952215][ T22] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 118.967428][ T4370] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 118.979694][ T22] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 119.002051][ T4370] usb 2-1: media controller created [ 119.060786][ T22] usb 5-1: config 129 interface 135 has no altsetting 0 [ 119.082131][ T22] usb 5-1: config 129 interface 5 has no altsetting 0 [ 119.090520][ T4370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.108123][ T22] usb 5-1: string descriptor 0 read error: -22 [ 119.114894][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 119.124079][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.152944][ T4370] az6027: usb out operation failed. (-71) [ 119.163142][ T4370] az6027: usb out operation failed. (-71) [ 119.176560][ T22] usb 5-1: MIDIStreaming interface descriptor not found [ 119.183347][ T4377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.186065][ T4370] stb0899_attach: Driver disabled by Kconfig [ 119.204163][ T4370] az6027: no front-end attached [ 119.204163][ T4370] [ 119.234991][ T4370] az6027: usb out operation failed. (-71) [ 119.240801][ T4370] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 119.321534][ T4370] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 119.387022][ T4370] dvb-usb: schedule remote query interval to 400 msecs. [ 119.394059][ T4370] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 119.430937][ T4407] usb 5-1: USB disconnect, device number 4 [ 119.501950][ T4996] XFS (loop5): Mounting V5 Filesystem [ 119.541850][ T4370] usb 2-1: USB disconnect, device number 6 [ 119.708844][ T4996] XFS (loop5): Ending clean mount [ 119.890747][ T4370] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 120.007849][ T4377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.031749][ T5030] base or size exceeds the MTRR width [ 120.132360][ T4294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.162545][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.173961][ T4294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.181988][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.191939][ T4294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.201657][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.275125][ T4377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.288423][ T4667] XFS (loop5): Unmounting Filesystem [ 120.305988][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.316290][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.325262][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.339464][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.349268][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.363221][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.383926][ T5037] loop4: detected capacity change from 0 to 1024 [ 120.391987][ T5037] EXT4-fs: Ignoring removed oldalloc option [ 120.546583][ T5037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.571496][ T5034] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.583282][ T5037] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.688090][ T5037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.196: bg 0: block 112: padding at end of block bitmap is not set [ 120.763083][ T5037] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 120.808971][ T5037] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.808971][ T5037] [ 120.881612][ T5037] EXT4-fs (loop4): Total free blocks count 0 [ 120.902242][ T5037] EXT4-fs (loop4): Free/Dirty block details [ 120.973269][ T5037] EXT4-fs (loop4): free_blocks=0 [ 120.995561][ T5037] EXT4-fs (loop4): dirty_blocks=64 [ 121.001950][ T5037] EXT4-fs (loop4): Block reservation details [ 121.052704][ T5037] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 121.210840][ T5031] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.290046][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 121.479788][ T5057] input: syz1 as /devices/virtual/input/input11 [ 122.264976][ T4294] Bluetooth: hci1: command 0x0409 tx timeout [ 122.281935][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 122.424845][ T4294] Bluetooth: hci2: command 0x0409 tx timeout [ 122.455597][ T5071] loop1: detected capacity change from 0 to 32768 [ 122.625694][ T5071] XFS (loop1): Mounting V5 Filesystem [ 122.683169][ T5071] XFS (loop1): Ending clean mount [ 122.690655][ T5102] loop5: detected capacity change from 0 to 1024 [ 122.713355][ T5102] EXT4-fs: Ignoring removed oldalloc option [ 122.772334][ T5102] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 122.821735][ T5102] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.830995][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.889957][ T5102] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.209: bg 0: block 112: padding at end of block bitmap is not set [ 122.924901][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.934384][ T5034] device bridge_slave_0 entered promiscuous mode [ 122.962014][ T5102] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 123.015943][ T4276] XFS (loop1): Unmounting Filesystem [ 123.053133][ T5102] EXT4-fs (loop5): This should not happen!! Data will be lost [ 123.053133][ T5102] [ 123.125099][ T5102] EXT4-fs (loop5): Total free blocks count 0 [ 123.140443][ T5102] EXT4-fs (loop5): Free/Dirty block details [ 123.177696][ T5102] EXT4-fs (loop5): free_blocks=0 [ 123.183433][ T5102] EXT4-fs (loop5): dirty_blocks=64 [ 123.213956][ T5102] EXT4-fs (loop5): Block reservation details [ 123.247113][ T5102] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 123.307129][ T5031] chnl_net:caif_netlink_parms(): no params data found [ 123.351470][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.364764][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.403693][ T5034] device bridge_slave_1 entered promiscuous mode [ 123.463831][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 123.795627][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.834424][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.038359][ T5034] team0: Port device team_slave_0 added [ 124.120379][ T5034] team0: Port device team_slave_1 added [ 124.242645][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.284992][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.305813][ T5031] device bridge_slave_0 entered promiscuous mode [ 124.321981][ T5140] loop1: detected capacity change from 0 to 2048 [ 124.342175][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.349634][ T4294] Bluetooth: hci1: command 0x041b tx timeout [ 124.365225][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.402094][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.415260][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.435547][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.450543][ T5031] device bridge_slave_1 entered promiscuous mode [ 124.475928][ T5140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.490209][ T4377] device hsr_slave_0 left promiscuous mode [ 124.505946][ T4294] Bluetooth: hci2: command 0x041b tx timeout [ 124.515532][ T4377] device hsr_slave_1 left promiscuous mode [ 124.525531][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.533026][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.543830][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.551417][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.565490][ T4377] device bridge_slave_1 left promiscuous mode [ 124.571839][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.620975][ T4377] device bridge_slave_0 left promiscuous mode [ 124.636915][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.738168][ T4377] device veth1_macvtap left promiscuous mode [ 124.744317][ T4377] device veth0_macvtap left promiscuous mode [ 124.764898][ T4377] device veth1_vlan left promiscuous mode [ 124.994431][ T5152] loop1: detected capacity change from 0 to 1024 [ 125.019538][ T5152] EXT4-fs: Ignoring removed oldalloc option [ 125.091358][ T5152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.137215][ T5152] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.217538][ T5152] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.223: bg 0: block 112: padding at end of block bitmap is not set [ 125.274173][ T5152] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 125.309326][ T5152] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.309326][ T5152] [ 125.324802][ T5152] EXT4-fs (loop1): Total free blocks count 0 [ 125.341261][ T5152] EXT4-fs (loop1): Free/Dirty block details [ 125.361445][ T5152] EXT4-fs (loop1): free_blocks=0 [ 125.367057][ T5142] loop4: detected capacity change from 0 to 32768 [ 125.373228][ T5152] EXT4-fs (loop1): dirty_blocks=64 [ 125.394834][ T5152] EXT4-fs (loop1): Block reservation details [ 125.419861][ T5152] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 125.482852][ T5142] XFS (loop4): Mounting V5 Filesystem [ 125.516635][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 125.595013][ T5142] XFS (loop4): Ending clean mount [ 125.802543][ T4280] XFS (loop4): Unmounting Filesystem [ 126.369126][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 126.419224][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 126.426732][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 126.478942][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.494742][ T4359] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 126.540193][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.595129][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 126.678758][ T4359] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.690406][ T4359] usb 5-1: config 0 has no interface number 0 [ 126.701795][ T4359] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.720201][ T4359] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.737998][ T4359] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.751953][ T4359] usb 5-1: config 0 interface 1 has no altsetting 0 [ 126.770234][ T4359] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 126.780783][ T4359] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 126.797828][ T4359] usb 5-1: Manufacturer: syz [ 126.813492][ T4359] usb 5-1: config 0 descriptor?? [ 126.999257][ T4377] bond0 (unregistering): Released all slaves [ 127.068364][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.075810][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.103986][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.216822][ T5031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.279314][ T5034] device hsr_slave_0 entered promiscuous mode [ 127.288700][ T5034] device hsr_slave_1 entered promiscuous mode [ 127.295979][ T5034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.303600][ T5034] Cannot create hsr debugfs directory [ 127.311870][ T5031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.384497][ T5180] loop5: detected capacity change from 0 to 128 [ 127.432941][ T5180] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 127.446717][ T4359] uclogic 0003:145F:0212.0002: pen parameters not found [ 127.464019][ T4359] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 127.477217][ T5031] team0: Port device team_slave_0 added [ 127.496592][ T5180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.535882][ T5031] team0: Port device team_slave_1 added [ 127.667004][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.674036][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.702458][ T4359] usb 5-1: USB disconnect, device number 5 [ 127.786428][ T5031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.835164][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.842288][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.920379][ T5031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.951613][ T5188] loop1: detected capacity change from 0 to 512 [ 128.147155][ T5188] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.228: inode has both inline data and extents flags [ 128.162854][ T5031] device hsr_slave_0 entered promiscuous mode [ 128.189658][ T5188] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.228: couldn't read orphan inode 15 (err -117) [ 128.208760][ T5031] device hsr_slave_1 entered promiscuous mode [ 128.234871][ T5031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.242523][ T5031] Cannot create hsr debugfs directory [ 128.254890][ T5188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.428667][ T5034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.458929][ T5034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.461700][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 128.461741][ T26] audit: type=1400 audit(1793374589.992:20): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=5202 comm="syz.4.231" name="foo" offset=76 [ 128.505594][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 128.513943][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 128.557864][ T5034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.665014][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 128.682292][ T4377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.693220][ T4377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.733711][ T5034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.835940][ T4377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.853413][ T4377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.987730][ T4377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.015149][ T4377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.102696][ T4377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.113808][ T4377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.162756][ T5031] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.181559][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.195615][ T5031] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.238207][ T5031] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 129.267600][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.283215][ T5031] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 129.301887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.310811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.344831][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.353805][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.371490][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.378728][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.389414][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.398525][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.407760][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.414979][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.423200][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.459877][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.472883][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.482337][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.493712][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.504190][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.551739][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.562461][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.582330][ T5034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.601364][ T5034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.631097][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.641259][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.651571][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.661596][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.716421][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.879931][ T5031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.944159][ T5031] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.017341][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.033389][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.089476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.100775][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.109629][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.116927][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.128108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.137333][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.146508][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.153675][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.162882][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.173622][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.205186][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.214173][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.237142][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.259709][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.366193][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.376648][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.396332][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.415738][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.431863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.453853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.499776][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.543963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.566275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.580822][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.076092][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.089668][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.128294][ T5031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.572066][ T4377] device hsr_slave_0 left promiscuous mode [ 131.582737][ T4377] device hsr_slave_1 left promiscuous mode [ 131.590504][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.598426][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.606953][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.614449][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.638291][ T4377] device bridge_slave_1 left promiscuous mode [ 131.644691][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.668361][ T4377] device bridge_slave_0 left promiscuous mode [ 131.679441][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.744467][ T4377] device veth1_macvtap left promiscuous mode [ 131.750874][ T4377] device veth0_macvtap left promiscuous mode [ 131.757635][ T4377] device veth1_vlan left promiscuous mode [ 131.763603][ T4377] device veth0_vlan left promiscuous mode [ 132.542212][ T4377] team0 (unregistering): Port device team_slave_1 removed [ 132.588310][ T4377] team0 (unregistering): Port device team_slave_0 removed [ 132.632114][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.678097][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.920553][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.927712][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.047998][ T4377] bond0 (unregistering): Released all slaves [ 133.153010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.176922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.249185][ T5034] device veth0_vlan entered promiscuous mode [ 133.271408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.283654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.299510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.308589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.331821][ T5034] device veth1_vlan entered promiscuous mode [ 133.399169][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.410424][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.420252][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.430394][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.448574][ T5034] device veth0_macvtap entered promiscuous mode [ 133.470445][ T5034] device veth1_macvtap entered promiscuous mode [ 133.538537][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.557295][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.567739][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.578951][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.589138][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.599933][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.612049][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.635161][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.655800][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.664198][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.681133][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.691080][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.708519][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.727475][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.740661][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.750912][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.761815][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.774168][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.785528][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.797376][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.809533][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.825641][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.850723][ T5034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.872364][ T5034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.882181][ T5034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.896925][ T5034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.929912][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.942480][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.962867][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.974587][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.999275][ T5031] device veth0_vlan entered promiscuous mode [ 134.037894][ T5031] device veth1_vlan entered promiscuous mode [ 134.100433][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.125371][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.133893][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.150615][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.171569][ T5031] device veth0_macvtap entered promiscuous mode [ 134.199146][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.211435][ T5031] device veth1_macvtap entered promiscuous mode [ 134.246709][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.261598][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.283058][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.298693][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.314550][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.325835][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.336981][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.348191][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.359015][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.369850][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.381766][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.391516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.400666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.412288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.434184][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.452616][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.463780][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.479360][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.490757][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.508443][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.521119][ T5031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.532074][ T5031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.543929][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.555819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.564756][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.572728][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.583003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.595337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.612190][ T5031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.624289][ T5031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.633223][ T5031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.642641][ T5031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.814459][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.833081][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.847845][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.956812][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.015389][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.023117][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.538015][ T5300] loop7: detected capacity change from 0 to 512 [ 135.554841][ T3605] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.633222][ T5300] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 135.651896][ T5300] System zones: 0-2, 18-18, 34-35 [ 135.666486][ T5300] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 135.697891][ T5300] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.776563][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.817584][ T3605] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 135.868210][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.904009][ T3605] usb 5-1: config 0 descriptor?? [ 135.942053][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 136.133472][ T3605] usbhid 5-1:0.0: can't add hid device: -71 [ 136.142806][ T3605] usbhid: probe of 5-1:0.0 failed with error -71 [ 136.173765][ T3605] usb 5-1: USB disconnect, device number 6 [ 136.199633][ T5289] loop6: detected capacity change from 0 to 32768 [ 136.234720][ T4370] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 136.323857][ T5289] XFS (loop6): Mounting V5 Filesystem [ 136.420388][ T5326] loop7: detected capacity change from 0 to 1024 [ 136.431019][ T4370] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.451644][ T4370] usb 6-1: config 0 has no interface number 0 [ 136.492216][ T4370] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.542220][ T4370] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.586215][ T4370] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.646647][ T4370] usb 6-1: config 0 interface 1 has no altsetting 0 [ 136.661252][ T5289] XFS (loop6): Ending clean mount [ 136.667104][ T4370] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 136.705141][ T3605] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 136.717061][ T4370] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 136.749952][ T4370] usb 6-1: Manufacturer: syz [ 136.776342][ T4370] usb 6-1: config 0 descriptor?? [ 136.922343][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.935464][ T5034] XFS (loop6): Unmounting Filesystem [ 136.953990][ T3605] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 136.976470][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.022036][ T3605] usb 5-1: config 0 descriptor?? [ 137.075138][ T3605] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 137.417468][ T4370] uclogic 0003:145F:0212.0003: pen parameters not found [ 137.427408][ T4370] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 137.461506][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 137.470171][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 137.477565][ T3629] usb 5-1: control msg error: -71 [ 137.484461][ C1] usb 5-1: pegasus_irq - urb shutting down with status: -2 [ 137.497816][ T3605] usb 5-1: USB disconnect, device number 7 [ 137.635731][ T5347] loop6: detected capacity change from 0 to 512 [ 137.661624][ T4382] usb 6-1: USB disconnect, device number 2 [ 137.709288][ T5347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.725852][ T5347] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.806725][ T5347] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.249: invalid indirect mapped block 32768 (level 2) [ 137.848333][ T5352] pimreg: tun_chr_ioctl cmd 1074025677 [ 137.854035][ T5352] pimreg: linktype set to 270 [ 137.876950][ T5347] EXT4-fs (loop6): 1 orphan inode deleted [ 137.895691][ T5347] EXT4-fs (loop6): 1 truncate cleaned up [ 137.902828][ T5347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 137.959034][ T5034] EXT4-fs (loop6): unmounting filesystem. [ 138.177813][ T5362] loop7: detected capacity change from 0 to 256 [ 138.745292][ T4382] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.859908][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.883676][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.913910][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.959656][ T4382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.993049][ T4382] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.027688][ T4382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.030284][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.075973][ T4382] usb 6-1: config 0 descriptor?? [ 139.116099][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.123722][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.302332][ T4382] usbhid 6-1:0.0: can't add hid device: -71 [ 139.320326][ T4382] usbhid: probe of 6-1:0.0 failed with error -71 [ 139.362180][ T4382] usb 6-1: USB disconnect, device number 3 [ 139.689088][ T5403] loop1: detected capacity change from 0 to 8192 [ 139.701464][ T5379] loop7: detected capacity change from 0 to 32768 [ 139.834328][ T5379] XFS (loop7): Mounting V5 Filesystem [ 139.899884][ T5379] XFS (loop7): Ending clean mount [ 139.924866][ T4382] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 140.081082][ T5031] XFS (loop7): Unmounting Filesystem [ 140.138278][ T4382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.185336][ T4382] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 140.213023][ T4382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.278327][ T4382] usb 6-1: config 0 descriptor?? [ 140.342112][ T4382] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 140.622273][ T5430] use of bytesused == 0 is deprecated and will be removed in the future, [ 140.658667][ T5430] use the actual size instead. [ 140.724366][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.731798][ T3629] usb 6-1: control msg error: -71 [ 140.740376][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.758569][ C1] usb 6-1: pegasus_irq - urb shutting down with status: -2 [ 140.795461][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.802922][ T3629] usb 6-1: control msg error: -71 [ 140.815340][ C0] usb 6-1: pegasus_irq - urb shutting down with status: -2 [ 140.858065][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.867432][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.875117][ T3629] usb 6-1: control msg error: -71 [ 140.884819][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.893312][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 140.901204][ T4382] usb 6-1: USB disconnect, device number 4 [ 140.915817][ C0] usb 6-1: pegasus_irq - urb shutting down with status: -2 [ 141.082574][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.283'. [ 141.193672][ T5446] loop4: detected capacity change from 0 to 1024 [ 141.242146][ T5438] loop7: detected capacity change from 0 to 1024 [ 141.309360][ T5438] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 141.362962][ T5446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.411524][ T5446] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.532872][ T5452] loop1: detected capacity change from 0 to 4096 [ 141.550744][ T5446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.285: bg 0: block 112: padding at end of block bitmap is not set [ 141.636506][ T5446] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 141.666697][ T5446] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.666697][ T5446] [ 141.689290][ T5446] EXT4-fs (loop4): Total free blocks count 0 [ 141.702112][ T5446] EXT4-fs (loop4): Free/Dirty block details [ 141.715963][ T5446] EXT4-fs (loop4): free_blocks=0 [ 141.748867][ T5446] EXT4-fs (loop4): dirty_blocks=16 [ 141.754890][ T5463] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.774160][ T5446] EXT4-fs (loop4): Block reservation details [ 141.798987][ T5446] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 141.952374][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 142.544221][ T5483] program syz.6.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.821888][ T5462] loop7: detected capacity change from 0 to 32768 [ 142.967994][ T5462] XFS (loop7): Mounting V5 Filesystem [ 143.064811][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.130924][ T5462] XFS (loop7): Ending clean mount [ 143.148574][ T4294] Bluetooth: hci2: command 0x0411 tx timeout [ 143.255023][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 143.264415][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 143.277529][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.312428][ T22] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.336021][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.384507][ T22] usb 7-1: config 0 descriptor?? [ 143.459659][ T5031] XFS (loop7): Unmounting Filesystem [ 143.628559][ T22] usbhid 7-1:0.0: can't add hid device: -71 [ 143.655664][ T22] usbhid: probe of 7-1:0.0 failed with error -71 [ 143.673852][ T22] usb 7-1: USB disconnect, device number 2 [ 143.724359][ T5517] loop4: detected capacity change from 0 to 1024 [ 143.775686][ T5520] loop5: detected capacity change from 0 to 256 [ 143.871335][ T5517] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 143.917195][ T5517] System zones: 0-1, 3-12 [ 143.923961][ T5517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.157728][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 144.215085][ T22] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 144.367692][ T5535] loop7: detected capacity change from 0 to 8 [ 144.408055][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.437342][ T22] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 144.461358][ T5535] SQUASHFS error: Unable to read directory block [631:4a] [ 144.473415][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.506388][ T22] usb 7-1: config 0 descriptor?? [ 144.581597][ T22] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input14 [ 144.957797][ C0] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 144.965232][ T3629] usb 7-1: control msg error: -71 [ 144.970619][ C0] usb 7-1: pegasus_irq - urb shutting down with status: -2 [ 144.990146][ C0] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 144.997659][ T3629] usb 7-1: control msg error: -71 [ 145.003194][ C0] usb 7-1: pegasus_irq - urb shutting down with status: -2 [ 145.013771][ T22] usb 7-1: USB disconnect, device number 3 [ 146.159175][ T5585] loop5: detected capacity change from 0 to 512 [ 146.199199][ T5585] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.207345][ T5585] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 146.233148][ T5585] EXT4-fs warning (device loop5): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.265622][ T5585] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 146.278714][ T5585] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.325: bad orphan inode 14 [ 146.334975][ T5585] ext4_test_bit(bit=13, block=18) = 1 [ 146.385667][ T5585] is_bad_inode(inode)=0 [ 146.389914][ T5585] NEXT_ORPHAN(inode)=0 [ 146.394059][ T5585] max_ino=32 [ 146.442122][ T5585] i_nlink=1 [ 146.457025][ T5585] EXT4-fs (loop5): 1 truncate cleaned up [ 146.479236][ T5585] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.864701][ T3605] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 147.056577][ T3605] usb 6-1: not running at top speed; connect to a high speed hub [ 147.085603][ T3605] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.120100][ T3605] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.134222][ T3605] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 147.163088][ T3605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.215926][ T3605] usb 6-1: Found UVC 1.00 device (046d:0825) [ 147.223694][ T3605] usb 6-1: Failed to create links for entity 1 [ 147.274719][ T3605] usb 6-1: Failed to register entities (-22). [ 147.402344][ T4359] usb 6-1: USB disconnect, device number 5 [ 147.530304][ T5625] loop1: detected capacity change from 0 to 4096 [ 147.571193][ T5625] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 147.695970][ T5625] ntfs3: loop1: ino=19, mi_enum_attr [ 147.705923][ T5625] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 147.815867][ T5636] loop7: detected capacity change from 0 to 256 [ 147.850471][ T5636] exfat: Deprecated parameter 'namecase' [ 147.952215][ T5636] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 148.062607][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 148.516530][ T4407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.728567][ T4407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.754758][ T4407] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 148.798792][ T4407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.850747][ T4407] usb 6-1: config 0 descriptor?? [ 149.062185][ T5673] loop6: detected capacity change from 0 to 1024 [ 149.130997][ T5673] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 149.198656][ T5673] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 149.304067][ T4407] wacom 0003:056A:0331.0004: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 149.499905][ T4359] usb 6-1: USB disconnect, device number 6 [ 149.859041][ T5685] fido_id[5685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 149.980587][ T5697] netlink: 'syz.4.364': attribute type 11 has an invalid length. [ 150.399349][ T5707] loop4: detected capacity change from 0 to 256 [ 150.489141][ T5707] FAT-fs (loop4): Directory bread(block 64) failed [ 150.519935][ T5707] FAT-fs (loop4): Directory bread(block 65) failed [ 150.545087][ T5707] FAT-fs (loop4): Directory bread(block 66) failed [ 150.567977][ T5707] FAT-fs (loop4): Directory bread(block 67) failed [ 150.601712][ T5707] FAT-fs (loop4): Directory bread(block 68) failed [ 150.625326][ T5707] FAT-fs (loop4): Directory bread(block 69) failed [ 150.646690][ T5707] FAT-fs (loop4): Directory bread(block 70) failed [ 150.666038][ T5707] FAT-fs (loop4): Directory bread(block 71) failed [ 150.672917][ T5707] FAT-fs (loop4): Directory bread(block 72) failed [ 150.743204][ T5707] FAT-fs (loop4): Directory bread(block 73) failed [ 151.103137][ T5727] loop5: detected capacity change from 0 to 2048 [ 151.177871][ T5727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.192380][ T5727] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.294856][ T4359] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 151.316540][ T5736] x_tables: duplicate entry at hook 3 [ 151.389450][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 151.494803][ T4359] usb 7-1: Using ep0 maxpacket: 8 [ 151.508214][ T4359] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 151.547169][ T4359] usb 7-1: config 16 has an invalid interface number: 128 but max is 0 [ 151.578219][ T4359] usb 7-1: config 16 has no interface number 0 [ 151.593028][ T4359] usb 7-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.646533][ T4359] usb 7-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.674710][ T4359] usb 7-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.710278][ T4359] usb 7-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.754267][ T4359] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.785403][ T4359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.019282][ T4359] usb 7-1: GET_CAPABILITIES returned 0 [ 152.025253][ T4359] usbtmc 7-1:16.128: can't read capabilities [ 152.188064][ T5768] loop4: detected capacity change from 0 to 512 [ 152.240390][ T4382] usb 7-1: USB disconnect, device number 4 [ 152.598790][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.396'. [ 152.613107][ T5785] loop7: detected capacity change from 0 to 512 [ 152.669961][ T5785] EXT4-fs: Ignoring removed orlov option [ 152.711663][ T5785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 152.840638][ T5790] program syz.1.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.878245][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 152.952675][ T5793] Illegal XDP return value 4294967282 on prog (id 34) dev N/A, expect packet loss! [ 152.968159][ T5794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 152.980962][ T5794] netem: invalid attributes len -19 [ 152.988903][ T5794] netem: change failed [ 153.045304][ C1] sd 0:0:1:0: [sda] tag#1247 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 153.055857][ C1] sd 0:0:1:0: [sda] tag#1247 CDB: Read(16) 88 00 00 00 00 00 00 00 c0 00 00 00 00 20 00 00 [ 153.671104][ T5826] #! ./dev [ 153.681191][ T5824] loop5: detected capacity change from 0 to 7 [ 153.729677][ T5824] Dev loop5: unable to read RDB block 7 [ 153.753751][ T5824] loop5: unable to read partition table [ 153.773645][ T5824] loop5: partition table beyond EOD, truncated [ 153.782594][ T5824] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 153.894682][ T4359] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 153.990073][ T5837] loop5: detected capacity change from 0 to 256 [ 154.126524][ T4359] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.160804][ T4359] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.197869][ T4359] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.237930][ T4359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.273564][ T4359] usb 7-1: SerialNumber: syz [ 154.307119][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 154.511365][ T4359] usb 7-1: 0:2 : does not exist [ 154.524722][ T4359] usb 7-1: unit 97 not found! [ 154.529502][ T4359] usb 7-1: unit 114 not found! [ 154.576673][ T5829] zswap: compressor not available [ 154.640549][ T4359] usb 7-1: USB disconnect, device number 5 [ 154.871244][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 154.886031][ T4549] udevd[4549]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.786804][ T5859] loop1: detected capacity change from 0 to 32768 [ 155.902466][ T5859] XFS (loop1): Mounting V5 Filesystem [ 155.982856][ T5859] XFS (loop1): Ending clean mount [ 156.011018][ T26] audit: type=1800 audit(1793374617.542:21): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.425" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 156.231697][ T4276] XFS (loop1): Unmounting Filesystem [ 156.706654][ T5927] input: syz1 as /devices/virtual/input/input18 [ 156.830822][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.4.449'. [ 157.053040][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.7.452'. [ 157.154793][ T4359] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 157.345038][ T4359] usb 6-1: Using ep0 maxpacket: 8 [ 157.353595][ T4359] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 157.382844][ T4359] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.423778][ T4359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.453912][ T4359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.487786][ T4359] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.523819][ T4359] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.543400][ T4359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.781826][ T4359] usb 6-1: GET_CAPABILITIES returned 0 [ 157.789224][ T4359] usbtmc 6-1:16.0: can't read capabilities [ 158.002474][ T131] usb 6-1: USB disconnect, device number 7 [ 158.557898][ T5999] loop7: detected capacity change from 0 to 256 [ 158.801369][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.478'. [ 159.914402][ T6053] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.952455][ T6056] loop1: detected capacity change from 0 to 256 [ 160.041827][ T6056] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 160.116997][ T6059] loop6: detected capacity change from 0 to 164 [ 160.843696][ T6057] loop7: detected capacity change from 0 to 32768 [ 160.890818][ T6081] loop5: detected capacity change from 0 to 512 [ 161.066186][ T6081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.173345][ T6081] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.293070][ T6081] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 161.525626][ T62] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 4 with error 28 [ 161.566129][ T62] EXT4-fs (loop5): This should not happen!! Data will be lost [ 161.566129][ T62] [ 161.615860][ T62] EXT4-fs (loop5): Total free blocks count 0 [ 161.621943][ T62] EXT4-fs (loop5): Free/Dirty block details [ 161.644926][ T6101] device-mapper: table: 248:0: thin: Error opening origin device (-ENODEV) [ 161.654191][ T6101] device-mapper: ioctl: error adding target to table [ 161.731081][ T62] EXT4-fs (loop5): free_blocks=65281 [ 161.780753][ T62] EXT4-fs (loop5): dirty_blocks=4 [ 161.816300][ T62] EXT4-fs (loop5): Block reservation details [ 161.833950][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.6.515'. [ 161.840319][ T62] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 161.879659][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 162.225055][ T6118] device vlan2 entered promiscuous mode [ 162.241539][ T6118] device macvlan1 entered promiscuous mode [ 162.265437][ T6118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 162.289045][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 162.396163][ T6126] loop7: detected capacity change from 0 to 2048 [ 162.479521][ T6126] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 162.497135][ T6126] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.594776][ T131] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 162.706771][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 162.786406][ T131] usb 6-1: not running at top speed; connect to a high speed hub [ 162.824270][ T131] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 162.877742][ T131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.919935][ T131] usb 6-1: Product: syz [ 162.924195][ T131] usb 6-1: Manufacturer: syz [ 162.955155][ T131] usb 6-1: SerialNumber: syz [ 162.988678][ T131] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 163.011579][ T6147] loop1: detected capacity change from 0 to 1024 [ 163.023939][ T131] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 163.043567][ T6147] EXT4-fs: inline encryption not supported [ 163.091730][ T131] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 163.133811][ T131] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 163.164380][ T6147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.183739][ T131] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 163.472764][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 163.513752][ T6161] loop4: detected capacity change from 0 to 1024 [ 164.076216][ T6177] bridge0: port 3(vlan2) entered blocking state [ 164.096115][ T6177] bridge0: port 3(vlan2) entered disabled state [ 164.322177][ T6186] capability: warning: `syz.1.539' uses deprecated v2 capabilities in a way that may be insecure [ 164.348834][ T6186] program syz.1.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.369086][ T4382] usb 6-1: USB disconnect, device number 8 [ 165.400461][ T4382] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 165.455005][ T4382] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 165.512260][ T4382] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 165.571012][ T4382] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 165.607341][ T4382] keyspan 6-1:1.0: device disconnected [ 165.837123][ T6232] usbip-vudc usbip-vudc.0: gadget not bound [ 166.070650][ T6241] loop7: detected capacity change from 0 to 2048 [ 166.178914][ T6241] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 166.190484][ T6241] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.393411][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 166.795776][ T6264] loop5: detected capacity change from 0 to 4096 [ 166.958191][ T6273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.453641][ T6259] loop4: detected capacity change from 0 to 32768 [ 167.722140][ T6258] loop1: detected capacity change from 0 to 40427 [ 167.762796][ T6258] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 167.815758][ T6258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.854046][ T6258] F2FS-fs (loop1): build fault injection attr: rate: 64, type: 0x3ffff [ 167.865911][ T6291] [ 167.891026][ T6258] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5 [ 167.942761][ T6258] F2FS-fs (loop1): invalid crc value [ 168.006130][ T6258] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.106014][ T6293] block device autoloading is deprecated and will be removed. [ 168.220135][ T6258] F2FS-fs (loop1): Start checkpoint disabled! [ 168.312218][ T6258] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.331662][ T6258] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 168.394907][ T131] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.450257][ T6258] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 168.504445][ T6258] overlayfs: upper fs does not support tmpfile. [ 168.540737][ T6312] loop6: detected capacity change from 0 to 764 [ 168.587989][ T131] usb 5-1: Using ep0 maxpacket: 16 [ 168.615814][ T131] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 168.643748][ T6312] rock: directory entry would overflow storage [ 168.660123][ T131] usb 5-1: config 1 has no interface number 0 [ 168.684691][ T6312] rock: sig=0x4654, size=5, remaining=4 [ 168.700609][ T131] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 168.731410][ T131] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 168.762296][ T131] usb 5-1: config 1 interface 105 has no altsetting 0 [ 168.773127][ T4276] syz-executor: attempt to access beyond end of device [ 168.773127][ T4276] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 168.784981][ T131] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 168.798019][ T4276] syz-executor: attempt to access beyond end of device [ 168.798019][ T4276] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 168.842292][ T131] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 168.875020][ T131] usb 5-1: Product: syz [ 168.890626][ T131] usb 5-1: Manufacturer: syz [ 168.909004][ T131] usb 5-1: SerialNumber: syz [ 168.933491][ T6305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.945087][ T6305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.149686][ T9] kworker/u4:0: attempt to access beyond end of device [ 169.149686][ T9] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 169.382000][ T6305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.400299][ T6305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.631359][ T131] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 169.658880][ T131] aqc111: probe of 5-1:1.105 failed with error -71 [ 169.739856][ T131] usb 5-1: USB disconnect, device number 8 [ 169.813647][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.978724][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.034707][ T4359] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 170.181769][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.224834][ T4359] usb 8-1: Using ep0 maxpacket: 32 [ 170.232147][ T4359] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 170.263244][ T4359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.313043][ T4359] usb 8-1: config 0 descriptor?? [ 170.332900][ T4359] gspca_main: sq930x-2.14.0 probing 041e:403c [ 170.369127][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.184877][ T4359] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 171.254929][ T4359] sq930x: probe of 8-1:0.0 failed with error -71 [ 171.272151][ T4359] usb 8-1: USB disconnect, device number 2 [ 171.559031][ T4370] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 171.757290][ T4370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.792714][ T4370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.823584][ T4370] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 171.865502][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.915110][ T4370] usb 6-1: config 0 descriptor?? [ 171.971260][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.999916][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.009235][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.017394][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.027549][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.038786][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.179355][ T6362] loop6: detected capacity change from 0 to 32768 [ 172.271849][ T6362] XFS (loop6): Mounting V5 Filesystem [ 172.339005][ T4370] cp2112 0003:10C4:EA90.0005: unbalanced collection at end of report description [ 172.395459][ T4370] cp2112 0003:10C4:EA90.0005: parse failed [ 172.424116][ T4370] cp2112: probe of 0003:10C4:EA90.0005 failed with error -22 [ 172.479701][ T6362] XFS (loop6): Ending clean mount [ 172.521371][ T26] audit: type=1800 audit(1793374634.052:22): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.600" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 172.558520][ T6372] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.579135][ T4370] usb 6-1: USB disconnect, device number 9 [ 172.635021][ T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.694042][ T5034] XFS (loop6): Unmounting Filesystem [ 172.829688][ T22] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 172.864911][ T22] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 172.898082][ T22] usb 5-1: Product: syz [ 172.939621][ T22] usb 5-1: config 0 descriptor?? [ 172.971024][ T22] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 173.021743][ T22] usb 5-1: Detected FT232H [ 173.377090][ T22] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 173.400521][ T22] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 173.438186][ T22] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 173.525162][ T22] usb 5-1: USB disconnect, device number 9 [ 173.573890][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 173.624460][ T22] ftdi_sio 5-1:0.0: device disconnected [ 173.805357][ T6406] loop5: detected capacity change from 0 to 128 [ 173.822913][ T59] device hsr_slave_0 left promiscuous mode [ 173.863757][ T6406] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 173.874385][ T59] device hsr_slave_1 left promiscuous mode [ 173.883343][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.907708][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.941999][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.951012][ T6406] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.954956][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.968150][ T59] device bridge_slave_1 left promiscuous mode [ 173.974450][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.985107][ T59] device bridge_slave_0 left promiscuous mode [ 173.992760][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.055056][ T6406] ext2 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.075318][ T59] device veth1_macvtap left promiscuous mode [ 174.083499][ T59] device veth0_macvtap left promiscuous mode [ 174.104975][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 174.116069][ T59] device veth1_vlan left promiscuous mode [ 174.122023][ T59] device veth0_vlan left promiscuous mode [ 174.333966][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 174.880166][ T6431] bonding: no command found in bonding_masters - use +ifname or -ifname [ 175.041276][ T6414] loop6: detected capacity change from 0 to 40427 [ 175.106752][ T6414] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 175.113179][ T6414] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 175.157663][ T6414] F2FS-fs (loop6): invalid crc value [ 175.206594][ T6414] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 175.232318][ T26] audit: type=1400 audit(1793374636.762:23): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6440 comm="syz.7.622" name="//o" offset=76 [ 175.466001][ T6414] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 175.483373][ T6414] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 175.571347][ T6414] syz.6.612: attempt to access beyond end of device [ 175.571347][ T6414] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 175.665180][ T6446] syz.6.612: attempt to access beyond end of device [ 175.665180][ T6446] loop6: rw=2049, sector=53256, nr_sectors = 48 limit=40427 [ 175.802855][ T5034] syz-executor: attempt to access beyond end of device [ 175.802855][ T5034] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.852602][ T6436] loop4: detected capacity change from 0 to 32768 [ 176.184848][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 176.955301][ T59] team0 (unregistering): Port device team_slave_1 removed [ 177.034665][ T59] team0 (unregistering): Port device team_slave_0 removed [ 177.149795][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.273913][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.928521][ T6493] netlink: 'syz.7.644': attribute type 11 has an invalid length. [ 178.016048][ T59] bond0 (unregistering): Released all slaves [ 178.274767][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 178.492002][ T6372] chnl_net:caif_netlink_parms(): no params data found [ 178.541587][ T22] kernel write not supported for file /sg0 (pid: 22 comm: kworker/1:0) [ 178.758520][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.827915][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.861501][ T6372] device bridge_slave_0 entered promiscuous mode [ 178.907254][ T6527] loop4: detected capacity change from 0 to 512 [ 178.914537][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.967293][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.991311][ T6527] FAT-fs (loop4): Directory bread(block 199916) failed [ 179.010134][ T6372] device bridge_slave_1 entered promiscuous mode [ 179.028432][ T6527] FAT-fs (loop4): Directory bread(block 199917) failed [ 179.094764][ T6527] FAT-fs (loop4): Directory bread(block 199918) failed [ 179.147312][ T6527] FAT-fs (loop4): Directory bread(block 199919) failed [ 179.154300][ T6527] FAT-fs (loop4): Directory bread(block 199920) failed [ 179.164383][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.195011][ T6527] FAT-fs (loop4): Directory bread(block 199921) failed [ 179.202246][ T6527] FAT-fs (loop4): Directory bread(block 199922) failed [ 179.214066][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.244880][ T6527] FAT-fs (loop4): Directory bread(block 199923) failed [ 179.319634][ T6372] team0: Port device team_slave_0 added [ 179.362006][ T6372] team0: Port device team_slave_1 added [ 179.462460][ T6541] netlink: 'syz.7.661': attribute type 34 has an invalid length. [ 179.503893][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.520370][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.604748][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.666696][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.673727][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.764661][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.891634][ T6372] device hsr_slave_0 entered promiscuous mode [ 179.906414][ T6554] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 179.906414][ T6554] The task syz.7.664 (6554) triggered the difference, watch for misbehavior. [ 179.951530][ T6372] device hsr_slave_1 entered promiscuous mode [ 180.354913][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 180.538937][ T6372] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 180.578554][ T6372] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 180.633982][ T6372] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.678524][ T6372] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 180.981971][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.042975][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.057549][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.079843][ T6372] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.108916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.140743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.161335][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.677'. [ 181.191793][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.199054][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.221786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.287367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.312040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.321850][ T6563] loop4: detected capacity change from 0 to 40427 [ 181.356641][ T6563] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 181.363678][ T6563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 181.373935][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.381201][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.436552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.457134][ T6563] F2FS-fs (loop4): invalid crc value [ 181.462755][ T6563] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 181.472606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.494426][ T6600] loop6: detected capacity change from 0 to 64 [ 181.526667][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.548966][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.569194][ T6563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.593304][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.632861][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.682766][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.728121][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.751422][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.767992][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 181.840480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.858323][ T6563] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 181.866996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.887755][ T6372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.904794][ T6563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 181.979952][ T6614] netlink: 72 bytes leftover after parsing attributes in process `syz.6.683'. [ 182.113157][ T6617] loop7: detected capacity change from 0 to 1024 [ 182.223431][ T4280] syz-executor: attempt to access beyond end of device [ 182.223431][ T4280] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.387489][ T6617] hfsplus: request for non-existent node 62977 in B*Tree [ 182.431372][ T6617] hfsplus: request for non-existent node 62977 in B*Tree [ 182.616237][ T11] hfsplus: b-tree write err: -5, ino 3 [ 182.830204][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.689'. [ 182.893526][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.955951][ T6633] device bridge_slave_1 left promiscuous mode [ 182.985356][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.096649][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.131106][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.176122][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.017682][ T6647] loop6: detected capacity change from 0 to 32768 [ 184.046371][ T6647] [ 184.046371][ T6647] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.046371][ T6647] [ 184.128048][ T6647] ERROR: (device loop6): diWrite: ixpxd invalid [ 184.128048][ T6647] [ 184.183943][ T6647] ERROR: (device loop6): txCommit: [ 184.183943][ T6647] [ 184.324968][ T5034] [ 184.324968][ T5034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.324968][ T5034] [ 184.392670][ T5034] [ 184.392670][ T5034] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.392670][ T5034] [ 184.499583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.519108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.615365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.646527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.691966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.736908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.794472][ T6372] device veth0_vlan entered promiscuous mode [ 184.873800][ T6372] device veth1_vlan entered promiscuous mode [ 185.026777][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.042450][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.059251][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.086208][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.119189][ T6372] device veth0_macvtap entered promiscuous mode [ 185.143862][ T6372] device veth1_macvtap entered promiscuous mode [ 185.233338][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.275564][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.300987][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.324544][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.374307][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.413077][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.434639][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.465007][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.496621][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.528308][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.559704][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.572768][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.593900][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.611551][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.622479][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.639733][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.650966][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.669978][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.680608][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.700910][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.713062][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.747003][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.771644][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.802754][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.888080][ T6372] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.900961][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.6.711'. [ 185.907460][ T6372] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.939143][ T6372] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.961553][ T6372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.002522][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.711'. [ 186.236255][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.282407][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.334371][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.376086][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.383998][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.412164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.501331][ T6710] loop4: detected capacity change from 0 to 32768 [ 186.560680][ T6734] loop6: detected capacity change from 0 to 128 [ 186.580020][ T6710] XFS (loop4): Mounting V5 Filesystem [ 186.732414][ T6710] XFS (loop4): Ending clean mount [ 186.874819][ T22] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 186.974682][ T4370] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.040878][ T4280] XFS (loop4): Unmounting Filesystem [ 187.074861][ T22] usb 8-1: Using ep0 maxpacket: 32 [ 187.082825][ T22] usb 8-1: config index 0 descriptor too short (expected 27632, got 27) [ 187.127960][ T22] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 187.144946][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 187.180683][ T22] usb 8-1: config 1 has no interface number 0 [ 187.187279][ T4370] usb 9-1: Using ep0 maxpacket: 16 [ 187.196656][ T4370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.224828][ T22] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.244682][ T4370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.254982][ T22] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 187.274931][ T4370] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.302702][ T22] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 187.318284][ T4370] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.340066][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.349372][ T4370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.383316][ T4370] usb 9-1: config 0 descriptor?? [ 187.394528][ T22] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 187.587048][ T22] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 187.822535][ T4370] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0006/input/input20 [ 187.932461][ T4370] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 188.020412][ T33] usb 9-1: USB disconnect, device number 2 [ 188.044198][ T6779] loop4: detected capacity change from 0 to 512 [ 188.083782][ T22] usb 8-1: USB disconnect, device number 3 [ 188.091241][ T22] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 188.156640][ T6779] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.725: iget: bad i_size value: 38620345925642 [ 188.224939][ T6779] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.725: couldn't read orphan inode 15 (err -117) [ 188.259736][ T6779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.398274][ T6777] fido_id[6777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 188.428640][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 188.780401][ T6792] loop8: detected capacity change from 0 to 1024 [ 189.085533][ T6804] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.968089][ T6833] loop8: detected capacity change from 0 to 128 [ 190.110262][ T6842] ip_tables: iptables: counters copy to user failed while replacing table [ 190.553583][ T6858] loop8: detected capacity change from 0 to 512 [ 190.635619][ T6858] EXT4-fs (loop8): Test dummy encryption mode enabled [ 190.702775][ T6858] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 191.565522][ T6858] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 191.784253][ T6372] EXT4-fs (loop8): unmounting filesystem. [ 191.959417][ T6872] loop6: detected capacity change from 0 to 32768 [ 192.059012][ T6872] JBD2: Ignoring recovery information on journal [ 192.071395][ T6874] loop4: detected capacity change from 0 to 40427 [ 192.102761][ T6874] F2FS-fs (loop4): invalid crc value [ 192.190935][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.765'. [ 192.209873][ T6898] batman_adv: batadv0: Adding interface: ipvlan2 [ 192.216695][ T6898] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.239534][ T6874] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.271218][ T6898] batman_adv: batadv0: Interface activated: ipvlan2 [ 192.302458][ T6872] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 192.408189][ T6872] (syz.6.759,6872,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 192.517229][ T6874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.750066][ T5034] ocfs2: Unmounting device (7,6) on (node local) [ 192.769840][ T4280] syz-executor: attempt to access beyond end of device [ 192.769840][ T4280] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.929010][ T6911] loop8: detected capacity change from 0 to 256 [ 193.017087][ T26] audit: type=1800 audit(1793374654.552:24): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.771" name="file2" dev="loop8" ino=1048758 res=0 errno=0 [ 193.023884][ T6911] syz.8.771: attempt to access beyond end of device [ 193.023884][ T6911] loop8: rw=0, sector=272, nr_sectors = 4 limit=256 [ 193.125528][ T6911] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 193.133877][ T6911] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 193.878718][ T6937] rnbd_client L211: map_device: Parameters missing [ 193.881823][ T6938] ip_tables: iptables: counters copy to user failed while replacing table [ 194.349751][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357214][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.381082][ T6959] loop4: detected capacity change from 0 to 256 [ 194.476887][ T6959] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 194.499772][ T6961] loop5: detected capacity change from 0 to 1024 [ 194.549676][ T6961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.645698][ T6961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.695633][ T6961] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 195.287216][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 195.809058][ T6992] loop5: detected capacity change from 0 to 256 [ 195.907673][ T6998] IPv6: addrconf: prefix option has invalid lifetime [ 196.314753][ T33] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 196.509185][ T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 196.526401][ T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.548057][ T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 51, changing to 9 [ 196.580993][ T33] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 196.599339][ T33] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.648234][ T33] usb 8-1: Product: syz [ 196.652526][ T33] usb 8-1: Manufacturer: syz [ 196.701599][ T33] usb 8-1: SerialNumber: syz [ 196.720400][ T33] usb 8-1: config 0 descriptor?? [ 196.725716][ T4370] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 196.780961][ T7020] loop5: detected capacity change from 0 to 64 [ 196.934841][ T4370] usb 9-1: Using ep0 maxpacket: 32 [ 196.942280][ T4370] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.953818][ T26] audit: type=1800 audit(1793374658.492:25): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.812" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 196.982189][ T33] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 197.015085][ T4370] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 197.048660][ T7025] loop6: detected capacity change from 0 to 256 [ 197.066297][ T4370] usb 9-1: config 0 interface 0 has no altsetting 0 [ 197.073032][ T4370] usb 9-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 197.095801][ T7025] exfat: Deprecated parameter 'utf8' [ 197.115561][ T4370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.139443][ T7025] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d) [ 197.163538][ T4370] usb 9-1: config 0 descriptor?? [ 197.183629][ T4382] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 197.213138][ T22] usb 8-1: USB disconnect, device number 4 [ 197.386683][ T4382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.412484][ T4382] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 197.454765][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.513922][ T4382] gspca_main: spca501-2.14.0 probing 0000:0000 [ 197.609904][ T4370] a4tech 0003:09DA:022B.0007: unknown main item tag 0x4 [ 197.628774][ T4370] a4tech 0003:09DA:022B.0007: invalid report_count -1789688357 [ 197.647954][ T4370] a4tech 0003:09DA:022B.0007: item 0 4 1 9 parsing failed [ 197.666232][ T4370] a4tech 0003:09DA:022B.0007: parse failed [ 197.686604][ T4370] a4tech: probe of 0003:09DA:022B.0007 failed with error -22 [ 197.703604][ T4382] gspca_spca501: reg write: error -71 [ 197.709571][ T4382] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 197.754878][ T4382] spca501: probe of 5-1:1.0 failed with error -22 [ 197.782350][ T4382] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 197.810141][ T4382] usb 5-1: Found UVC 1.00 device (0000:0000) [ 197.839302][ T4382] uvcvideo 5-1:1.1: No supported video formats found. [ 197.849350][ T4382] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 197.873925][ T4382] usb 5-1: USB disconnect, device number 10 [ 198.393403][ T7054] loop5: detected capacity change from 0 to 256 [ 198.699548][ T7061] netlink: 'syz.4.828': attribute type 32 has an invalid length. [ 198.770869][ T7054] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8652664a, utbl_chksum : 0xe619d30d) [ 198.792913][ T7041] syz.6.821 (7041): drop_caches: 2 [ 198.886813][ T7054] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 199.488359][ T33] usb 9-1: USB disconnect, device number 3 [ 199.524522][ T7041] syz.6.821 (7041): drop_caches: 2 [ 200.298072][ T7077] loop7: detected capacity change from 0 to 40427 [ 200.361493][ T7077] F2FS-fs (loop7): invalid crc value [ 200.393990][ T7077] F2FS-fs (loop7): Found nat_bits in checkpoint [ 200.617806][ T7077] F2FS-fs (loop7): Start checkpoint disabled! [ 200.687526][ T7077] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 201.109921][ T7101] loop4: detected capacity change from 0 to 32768 [ 201.219674][ T7101] XFS (loop4): Mounting V5 Filesystem [ 201.353951][ T7101] XFS (loop4): Ending clean mount [ 201.544670][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 201.616591][ T4280] XFS (loop4): Unmounting Filesystem [ 201.718469][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.7.856'. [ 201.748135][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.7.856'. [ 201.786275][ T7152] device xfrm0 entered promiscuous mode [ 201.827272][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.7.856'. [ 201.845050][ T4382] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 202.023084][ T7165] loop6: detected capacity change from 0 to 1024 [ 202.044809][ T4382] usb 9-1: Using ep0 maxpacket: 32 [ 202.051978][ T4382] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.103302][ T4382] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.127175][ T7165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 202.130216][ T4382] usb 9-1: config 0 interface 0 has no altsetting 0 [ 202.156254][ T4382] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 202.165448][ T4382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.173504][ T4382] usb 9-1: Product: syz [ 202.184636][ T4382] usb 9-1: Manufacturer: syz [ 202.189313][ T4382] usb 9-1: SerialNumber: syz [ 202.196635][ T4382] usb 9-1: config 0 descriptor?? [ 202.203631][ T7165] System zones: 0-1, 3-12 [ 202.212317][ T7165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.404507][ T5034] EXT4-fs (loop6): unmounting filesystem. [ 202.577959][ T7185] device-mapper: table: 248:1: crypt: Device size is not multiple of sector_size feature (-EINVAL) [ 202.592826][ T7185] device-mapper: ioctl: error adding target to table [ 202.613667][ T7186] loop7: detected capacity change from 0 to 512 [ 202.617994][ T4382] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 202.698037][ T7186] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.918766][ T26] audit: type=1400 audit(1793374664.452:26): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7191 comm="syz.6.867" name="p" offset=59 [ 203.041540][ T4382] usb 9-1: USB disconnect, device number 4 [ 203.729131][ T7214] 9pnet: p9_errstr2errno: server reported unknown error [ 204.006359][ T7228] loop4: detected capacity change from 0 to 512 [ 204.025880][ T7228] EXT4-fs: Ignoring removed nobh option [ 204.046890][ T7228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.090374][ T7228] EXT4-fs (loop4): 1 truncate cleaned up [ 204.105715][ T7228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.234734][ T4382] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 204.247511][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 204.444669][ T4382] usb 6-1: Using ep0 maxpacket: 8 [ 204.452197][ T4382] usb 6-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 204.479912][ T4382] usb 6-1: config 65 interface 0 altsetting 200 has an invalid endpoint descriptor of length 4, skipping [ 204.499310][ T4382] usb 6-1: config 65 interface 0 altsetting 200 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.559544][ T4382] usb 6-1: config 65 interface 0 has no altsetting 0 [ 204.590555][ T4382] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.619707][ T4382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.643012][ T4382] usb 6-1: Product: syz [ 204.657552][ T4382] usb 6-1: Manufacturer: syz [ 204.671442][ T4382] usb 6-1: SerialNumber: syz [ 204.909031][ T4382] cdc_ether: probe of 6-1:65.0 failed with error -22 [ 204.957781][ T4382] usb 6-1: USB disconnect, device number 10 [ 205.622815][ T7280] device bridge0 entered promiscuous mode [ 205.694826][ T7280] device vlan3 entered promiscuous mode [ 205.774223][ T7280] bridge0: port 3(vlan3) entered blocking state [ 205.795602][ T7280] bridge0: port 3(vlan3) entered disabled state [ 205.861360][ T7288] loop7: detected capacity change from 0 to 1024 [ 205.896736][ T7288] EXT4-fs: Ignoring removed bh option [ 206.033175][ T7288] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 206.188881][ T7303] loop5: detected capacity change from 0 to 164 [ 206.249707][ T7303] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 206.274735][ T4407] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 206.304744][ T7303] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 206.321367][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 206.335720][ T7305] loop8: detected capacity change from 0 to 256 [ 206.403197][ T7305] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 206.464720][ T4407] usb 7-1: Using ep0 maxpacket: 16 [ 206.471977][ T4407] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 206.518979][ T4407] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 206.555312][ T4407] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 206.604487][ T4407] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 206.645869][ T4407] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.684666][ T4407] usb 7-1: config 0 has no interface number 0 [ 206.694965][ T4407] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 206.724995][ T4407] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 206.745651][ T4407] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.771039][ T4407] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.800082][ T4407] usb 7-1: config 0 interface 125 has no altsetting 2 [ 206.827692][ T4407] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 206.857042][ T4407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.899534][ T4407] usb 7-1: Product: syz [ 206.914231][ T4407] usb 7-1: Manufacturer: syz [ 206.940956][ T4407] usb 7-1: SerialNumber: syz [ 206.968593][ T4407] usb 7-1: config 0 descriptor?? [ 206.999653][ T4407] usb 7-1: selecting invalid altsetting 2 [ 207.020479][ T7323] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.029392][ T7323] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.038263][ T7323] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.047150][ T7323] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.047366][ T7324] loop8: detected capacity change from 0 to 512 [ 207.101066][ T7324] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.139249][ T7324] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 207.169061][ T7324] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 207.189285][ T7324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 207.344837][ T7324] System zones: 0-2, 18-18, 34-34 [ 207.390304][ T7324] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.915: bad orphan inode 15 [ 207.432390][ T7324] ext4_test_bit(bit=14, block=18) = 1 [ 207.451831][ T7324] is_bad_inode(inode)=0 [ 207.456165][ T7324] NEXT_ORPHAN(inode)=2264924160 [ 207.461073][ T7324] max_ino=32 [ 207.483839][ T7324] i_nlink=0 [ 207.493110][ T7324] EXT4-fs error (device loop8): ext4_do_update_inode:5312: inode #15: comm syz.8.915: corrupted inode contents [ 207.528409][ T7324] EXT4-fs error (device loop8): ext4_dirty_inode:6199: inode #15: comm syz.8.915: mark_inode_dirty error [ 207.571636][ T7324] EXT4-fs error (device loop8): ext4_do_update_inode:5312: inode #15: comm syz.8.915: corrupted inode contents [ 207.610242][ T7324] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.915: mark_inode_dirty error [ 207.641323][ T7324] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2953: inode #15: comm syz.8.915: mark inode dirty (error -117) [ 207.679955][ T7324] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 207.715566][ T7324] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 207.973635][ T6372] EXT4-fs (loop8): unmounting filesystem. [ 208.416621][ T7379] sch_tbf: burst 1811 is lower than device lo mtu (65550) ! [ 209.075928][ T4407] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 209.112998][ T4353] usb 7-1: USB disconnect, device number 6 [ 209.236621][ T7407] device geneve2 entered promiscuous mode [ 209.286815][ T4407] usb 8-1: not running at top speed; connect to a high speed hub [ 209.306960][ T4407] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.320645][ T4407] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 209.369038][ T4407] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 209.384843][ T4382] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.394393][ T4407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.427598][ T4407] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 209.449745][ T4407] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 209.491574][ T4407] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 209.512924][ T4407] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 209.522413][ T4407] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 209.537778][ T4407] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 209.577563][ T4382] usb 5-1: config 0 has an invalid interface number: 5 but max is 3 [ 209.598441][ T4382] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 209.620543][ T4382] usb 5-1: config 0 has no interface number 0 [ 209.661222][ T4382] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 209.677255][ T4382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.700050][ T4382] usb 5-1: config 0 descriptor?? [ 209.755768][ T4382] ums-realtek 5-1:0.5: USB Mass Storage device detected [ 209.918069][ T4382] usb 8-1: USB disconnect, device number 5 [ 209.947369][ T4382] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 210.015658][ T4382] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 210.070514][ T7423] loop6: detected capacity change from 0 to 1024 [ 210.079471][ T4382] keyspan 8-1:1.0: device disconnected [ 210.087340][ T7423] EXT4-fs: Ignoring removed bh option [ 210.101079][ T4359] usb 5-1: USB disconnect, device number 11 [ 210.176472][ T7423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 210.409116][ T5034] EXT4-fs (loop6): unmounting filesystem. [ 210.891864][ T7446] loop6: detected capacity change from 0 to 512 [ 210.898882][ T7444] i2c i2c-0: Failed to register i2c client usb2512b at 0x02 (-16) [ 210.935705][ T7446] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.972809][ T7446] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 211.054015][ T7446] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 211.086152][ T7446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 211.105538][ T7446] System zones: 0-2, 18-18, 34-34 [ 211.164036][ T7446] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.949: bad orphan inode 15 [ 211.188135][ T7446] ext4_test_bit(bit=14, block=18) = 1 [ 211.193655][ T7446] is_bad_inode(inode)=0 [ 211.230446][ T7446] NEXT_ORPHAN(inode)=2264924160 [ 211.235689][ T7446] max_ino=32 [ 211.238959][ T7446] i_nlink=0 [ 211.266480][ T7446] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #15: comm syz.6.949: corrupted inode contents [ 211.305597][ T7446] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #15: comm syz.6.949: mark_inode_dirty error [ 211.322833][ T7457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 211.356953][ T7446] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #15: comm syz.6.949: corrupted inode contents [ 211.393323][ T7459] input: syz0 as /devices/virtual/input/input22 [ 211.422007][ T7446] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.949: mark_inode_dirty error [ 211.436790][ T7446] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2953: inode #15: comm syz.6.949: mark inode dirty (error -117) [ 211.462576][ T7446] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 211.525151][ T7465] loop4: detected capacity change from 0 to 1024 [ 211.565483][ T7465] EXT4-fs: Ignoring removed bh option [ 211.583844][ T7465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.613761][ T7446] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 211.813438][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 211.828285][ T5034] EXT4-fs (loop6): unmounting filesystem. [ 212.061070][ T7482] device geneve2 entered promiscuous mode [ 212.683300][ T7508] loop5: detected capacity change from 0 to 1024 [ 212.926655][ T7512] loop6: detected capacity change from 0 to 4096 [ 213.023621][ T7512] NILFS (loop6): invalid segment: Checksum error in segment payload [ 213.073219][ T7512] NILFS (loop6): trying rollback from an earlier position [ 213.185320][ T7512] NILFS (loop6): recovery complete [ 213.211129][ T7529] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.313810][ T7537] MTRR 1 not used [ 213.708580][ T7553] loop4: detected capacity change from 0 to 1024 [ 214.597128][ T7556] loop5: detected capacity change from 0 to 131072 [ 214.614695][ T7556] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 214.622866][ T7556] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 214.634933][ T7556] F2FS-fs (loop5): invalid crc value [ 214.679084][ T7556] F2FS-fs (loop5): Found nat_bits in checkpoint [ 214.742908][ T7556] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 214.750330][ T7556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 215.030416][ T26] audit: type=1400 audit(1793374676.562:27): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=7582 comm="syz.7.993" name=":/o" offset=35 [ 215.596596][ T7608] loop7: detected capacity change from 0 to 8 [ 216.029791][ T7619] loop4: detected capacity change from 0 to 512 [ 216.054940][ T4382] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 216.215172][ T7619] EXT4-fs (loop4): 1 orphan inode deleted [ 216.222889][ T4768] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.240223][ T7619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.270314][ T4382] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.309061][ T4382] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.313201][ T7619] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.333421][ T4768] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:8: Failed to release dquot type 1 [ 216.350452][ T4382] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 216.388976][ T7630] loop6: detected capacity change from 0 to 2048 [ 216.397309][ T4382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.440150][ T7630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.458848][ T7619] EXT4-fs (loop4): shut down requested (2) [ 216.460513][ T4382] usb 9-1: config 0 descriptor?? [ 216.507873][ T4382] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 216.556033][ T4382] dvb-usb: bulk message failed: -22 (3/0) [ 216.615213][ T4382] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 216.652437][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 216.658052][ T4382] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 216.684698][ T4382] usb 9-1: media controller created [ 216.701821][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.717518][ T7612] dvb-usb: bulk message failed: -22 (4/0) [ 216.768578][ T4382] dvb-usb: bulk message failed: -22 (6/0) [ 216.802980][ T4382] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 216.853650][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 216.870205][ T7637] loop7: detected capacity change from 0 to 16 [ 216.892391][ T4382] dvb-usb: schedule remote query interval to 150 msecs. [ 216.918968][ T7637] erofs: (device loop7): mounted with root inode @ nid 36. [ 216.939530][ T4382] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 216.967287][ T4382] usb 9-1: USB disconnect, device number 5 [ 217.008187][ T26] audit: type=1800 audit(1793374678.542:28): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1011" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 217.066023][ T4382] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 217.131684][ T7639] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 217.367781][ T7647] loop6: detected capacity change from 0 to 512 [ 217.520611][ T7647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 217.554216][ T7647] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.867942][ T5034] EXT4-fs (loop6): unmounting filesystem. [ 218.218134][ T7685] loop7: detected capacity change from 0 to 512 [ 218.278222][ T7685] EXT4-fs: Ignoring removed nobh option [ 218.340216][ T7685] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 218.364478][ T7685] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.405546][ T7685] EXT4-fs error (device loop7): ext4_do_update_inode:5312: inode #2: comm syz.7.1028: corrupted inode contents [ 218.463762][ T7692] loop6: detected capacity change from 0 to 1024 [ 218.507173][ T7693] sctp: [Deprecated]: syz.5.1030 (pid 7693) Use of int in max_burst socket option deprecated. [ 218.507173][ T7693] Use struct sctp_assoc_value instead [ 218.534733][ T7685] EXT4-fs error (device loop7): ext4_dirty_inode:6199: inode #2: comm syz.7.1028: mark_inode_dirty error [ 218.598448][ T26] audit: type=1800 audit(1793374680.132:29): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1031" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 218.679436][ T7685] EXT4-fs error (device loop7): ext4_do_update_inode:5312: inode #2: comm syz.7.1028: corrupted inode contents [ 218.776729][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1032'. [ 218.952270][ T7705] loop6: detected capacity change from 0 to 512 [ 218.961044][ T5031] EXT4-fs (loop7): unmounting filesystem. [ 219.354882][ T4407] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.554867][ T4407] usb 5-1: Using ep0 maxpacket: 32 [ 219.562358][ T4407] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 219.602809][ T4407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.627254][ T4407] usb 5-1: config 0 descriptor?? [ 219.842181][ T4407] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 219.872112][ T4407] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.902756][ T4407] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 219.939250][ T4407] usb 5-1: media controller created [ 219.996923][ T4407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.011523][ T7702] loop5: detected capacity change from 0 to 32768 [ 220.088807][ T4407] az6027: usb out operation failed. (-71) [ 220.110080][ T4407] az6027: usb out operation failed. (-71) [ 220.116227][ T4407] stb0899_attach: Driver disabled by Kconfig [ 220.122348][ T4407] az6027: no front-end attached [ 220.122348][ T4407] [ 220.132987][ T4407] az6027: usb out operation failed. (-71) [ 220.140208][ T4407] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 220.150403][ T4407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 220.168638][ T7713] loop8: detected capacity change from 0 to 32768 [ 220.174666][ T4407] dvb-usb: schedule remote query interval to 400 msecs. [ 220.182131][ T4407] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 220.193319][ T4407] usb 5-1: USB disconnect, device number 12 [ 220.241396][ T7713] (syz.8.1038,7713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.245449][ T7702] XFS (loop5): Mounting V5 Filesystem [ 220.266524][ T7713] (syz.8.1038,7713,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.377633][ T4407] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 220.432497][ T7713] JBD2: Ignoring recovery information on journal [ 220.476806][ T7702] XFS (loop5): Ending clean mount [ 220.498866][ T7702] XFS (loop5): User initiated shutdown received. [ 220.515302][ T7702] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 220.534663][ T7749] loop6: detected capacity change from 0 to 4096 [ 220.592261][ T7702] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 220.611561][ T7713] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 220.670369][ T7749] ntfs3: loop6: Failed to load $Extend. [ 220.961147][ T4667] XFS (loop5): Unmounting Filesystem [ 221.077388][ T5034] ntfs3: loop6: ino=5, mi_enum_attr [ 221.115464][ T5034] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 221.160201][ T5034] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 221.466140][ T6372] ocfs2: Unmounting device (7,8) on (node local) [ 222.560815][ T7809] loop8: detected capacity change from 0 to 128 [ 222.704809][ T4353] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 222.894875][ T4353] usb 7-1: Using ep0 maxpacket: 8 [ 222.902268][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.943904][ T4353] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.967739][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.994916][ T4353] usb 7-1: config 0 descriptor?? [ 223.186828][ T7828] loop5: detected capacity change from 0 to 512 [ 223.239337][ T4353] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.266100][ T7828] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1074: iget: bad i_size value: 38620345925642 [ 223.310924][ T7828] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1074: couldn't read orphan inode 15 (err -117) [ 223.331085][ T7828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 223.352881][ T7828] EXT4-fs (loop5): shut down requested (1) [ 223.391765][ T22] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 223.412648][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 223.462146][ T4353] usb 7-1: USB disconnect, device number 7 [ 223.591285][ T22] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 223.606469][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.640306][ T22] usb 8-1: config 0 descriptor?? [ 223.668619][ T22] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 223.774544][ T7842] loop5: detected capacity change from 0 to 2048 [ 223.785966][ T7842] EXT4-fs: Ignoring removed i_version option [ 223.859404][ T22] gp8psk: usb in 128 operation failed. [ 223.880428][ T7842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 223.902585][ T7842] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.070138][ T22] gp8psk: FW Version = 180.125.208 (0xb47dd0) Build 2098/211/118 [ 224.090489][ T4667] EXT4-fs (loop5): unmounting filesystem. [ 224.289951][ T22] gp8psk: usb in 149 operation failed. [ 224.300671][ T22] gp8psk: failed to get FPGA version [ 224.318543][ T22] gp8psk: usb in 138 operation failed. [ 224.334364][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 224.362721][ T22] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 224.404332][ T22] usb 8-1: USB disconnect, device number 6 [ 242.506026][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 242.514729][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 255.788696][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.795191][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.344871][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 317.237668][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.244066][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.905077][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 378.669595][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.676076][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.154849][ T27] INFO: task kworker/u4:0:9 blocked for more than 143 seconds. [ 383.162509][ T27] Not tainted syzkaller #0 [ 383.172236][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.181074][ T27] task:kworker/u4:0 state:D stack:21984 pid:9 ppid:2 flags:0x00004000 [ 383.191044][ T27] Workqueue: writeback wb_workfn (flush-8:0) [ 383.200679][ T27] Call Trace: [ 383.204075][ T27] [ 383.207753][ T27] __schedule+0x1089/0x4140 [ 383.212552][ T27] ? release_firmware_map_entry+0x187/0x187 [ 383.218644][ T27] ? blk_check_plugged+0x250/0x250 [ 383.223928][ T27] ? blk_check_plugged+0x250/0x250 [ 383.229537][ T27] ? kthread_data+0x4b/0xc0 [ 383.234213][ T27] ? wq_worker_sleeping+0x60/0x280 [ 383.239862][ T27] schedule+0xb9/0x180 [ 383.244010][ T27] io_schedule+0x7c/0xd0 [ 383.248716][ T27] bit_wait_io+0xf/0x100 [ 383.253203][ T27] __wait_on_bit+0x9b/0x2c0 [ 383.258377][ T27] ? bit_wait+0x100/0x100 [ 383.262776][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 383.268401][ T27] ? bit_wait+0x100/0x100 [ 383.272785][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 383.277851][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 383.282978][ T27] ? bit_waitqueue+0x30/0x30 [ 383.288327][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 383.293598][ T27] do_get_write_access+0x605/0xf20 [ 383.298972][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 383.305279][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 383.311621][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 383.317957][ T27] ? __might_sleep+0xd0/0xd0 [ 383.322685][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.327866][ T27] ? ext4_mb_new_blocks+0x29ef/0x44d0 [ 383.333399][ T27] ext4_reserve_inode_write+0x201/0x290 [ 383.339106][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 383.344706][ T27] ext4_dirty_inode+0xbf/0x100 [ 383.349538][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 383.355512][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 383.360599][ T27] ext4_new_meta_blocks+0x2c0/0x3d0 [ 383.365937][ T27] ? ext4_should_retry_alloc+0x2c0/0x2c0 [ 383.371806][ T27] ? slab_free_freelist_hook+0x133/0x1b0 [ 383.377702][ T27] ? ext4_inode_to_goal_block+0x313/0x450 [ 383.383494][ T27] ext4_ext_insert_extent+0x101d/0x47d0 [ 383.389874][ T27] ? rcu_is_watching+0x11/0xa0 [ 383.394981][ T27] ? ext4_ext_search_right+0x376/0x800 [ 383.400558][ T27] ? ext4_ext_next_allocated_block+0x250/0x250 [ 383.406891][ T27] ? ext4_ext_find_goal+0xed/0x1d0 [ 383.412107][ T27] ext4_ext_map_blocks+0x1993/0x6680 [ 383.417642][ T27] ? ext4_ext_release+0x10/0x10 [ 383.422576][ T27] ? rwsem_write_trylock+0x135/0x1c0 [ 383.428024][ T27] ? ext4_es_lookup_extent+0x638/0xb00 [ 383.433595][ T27] ext4_map_blocks+0x9d7/0x1a90 [ 383.439399][ T27] ? slab_pre_alloc_hook+0x59/0x300 [ 383.444762][ T27] ? ext4_issue_zeroout+0x250/0x250 [ 383.450021][ T27] ? rcu_is_watching+0x11/0xa0 [ 383.455040][ T27] ? ext4_inode_journal_mode+0x372/0x460 [ 383.460733][ T27] ext4_writepages+0x1462/0x2fe0 [ 383.465854][ T27] ? ext4_read_folio+0x370/0x370 [ 383.470875][ T27] ? __lock_acquire+0x142d/0x7ea0 [ 383.476014][ T27] ? verify_lock_unused+0x140/0x140 [ 383.481318][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.486518][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 383.492143][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 383.497630][ T27] ? ext4_read_folio+0x370/0x370 [ 383.502667][ T27] do_writepages+0x3c6/0x640 [ 383.507507][ T27] ? __writepage+0x130/0x130 [ 383.512165][ T27] ? writeback_sb_inodes+0x6d1/0x17f0 [ 383.518254][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.523370][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 383.528527][ T27] __writeback_single_inode+0x153/0x1170 [ 383.534251][ T27] writeback_sb_inodes+0xad5/0x17f0 [ 383.540433][ T27] ? queue_io+0x570/0x570 [ 383.548794][ T27] ? __rwlock_init+0x140/0x140 [ 383.553662][ T27] __writeback_inodes_wb+0x12a/0x3f0 [ 383.559124][ T27] wb_writeback+0x484/0xd40 [ 383.563752][ T27] ? percpu_ref_tryget+0x250/0x250 [ 383.569079][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.575215][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.580331][ T27] wb_workfn+0xb68/0xee0 [ 383.584724][ T27] ? inode_wait_for_writeback+0x220/0x220 [ 383.590528][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.597598][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.602696][ T27] ? read_lock_is_recursive+0x10/0x10 [ 383.608350][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.614310][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 383.619649][ T27] ? process_one_work+0x7b4/0x1160 [ 383.625014][ T27] process_one_work+0x8ab/0x1160 [ 383.634232][ T27] ? worker_detach_from_pool+0x240/0x240 [ 383.640235][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 383.646305][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 383.651932][ T27] ? wq_worker_running+0x97/0x190 [ 383.659169][ T27] worker_thread+0xaf5/0x12a0 [ 383.663921][ T27] kthread+0x29d/0x330 [ 383.668146][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 383.673248][ T27] ? kthread_blkcg+0xd0/0xd0 [ 383.678205][ T27] ret_from_fork+0x1f/0x30 [ 383.682749][ T27] [ 383.686445][ T27] INFO: task jbd2/sda1-8:3607 blocked for more than 143 seconds. [ 383.695130][ T27] Not tainted syzkaller #0 [ 383.700116][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.710155][ T27] task:jbd2/sda1-8 state:D stack:25872 pid:3607 ppid:2 flags:0x00004000 [ 383.719711][ T27] Call Trace: [ 383.723057][ T27] [ 383.726374][ T27] __schedule+0x1089/0x4140 [ 383.730959][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.736472][ T27] ? release_firmware_map_entry+0x187/0x187 [ 383.742442][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 383.748788][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 383.754131][ T27] schedule+0xb9/0x180 [ 383.758592][ T27] io_schedule+0x7c/0xd0 [ 383.762910][ T27] bit_wait_io+0xf/0x100 [ 383.767626][ T27] __wait_on_bit+0x9b/0x2c0 [ 383.772186][ T27] ? bit_wait+0x100/0x100 [ 383.777640][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 383.783160][ T27] ? bit_wait+0x100/0x100 [ 383.792727][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 383.798283][ T27] ? do_raw_write_lock+0x11a/0x260 [ 383.803464][ T27] ? bit_waitqueue+0x30/0x30 [ 383.808691][ T27] ? do_raw_read_unlock+0x39/0x70 [ 383.813762][ T27] jbd2_journal_commit_transaction+0x2f0f/0x5f30 [ 383.820440][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 383.827531][ T27] ? lock_chain_count+0x20/0x20 [ 383.832459][ T27] ? _raw_spin_unlock+0x40/0x40 [ 383.837642][ T27] ? rcu_is_watching+0x11/0xa0 [ 383.842477][ T27] ? __timer_delete_sync+0x239/0x2e0 [ 383.848176][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.853278][ T27] ? timer_delete_sync+0x20/0x20 [ 383.858572][ T27] ? do_raw_read_unlock+0x70/0x70 [ 383.863649][ T27] ? prepare_to_wait+0x1a6/0x1f0 [ 383.868990][ T27] kjournald2+0x40b/0x800 [ 383.873469][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 383.879663][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 383.885906][ T27] ? wake_bit_function+0x200/0x200 [ 383.891083][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.897398][ T27] ? __kthread_parkme+0x71/0x1c0 [ 383.902959][ T27] ? __kthread_parkme+0x15b/0x1c0 [ 383.908344][ T27] kthread+0x29d/0x330 [ 383.912645][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 383.918176][ T27] ? kthread_blkcg+0xd0/0xd0 [ 383.922810][ T27] ret_from_fork+0x1f/0x30 [ 383.927400][ T27] [ 383.930531][ T27] INFO: task syz-executor:4264 blocked for more than 144 seconds. [ 383.938447][ T27] Not tainted syzkaller #0 [ 383.943409][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.952485][ T27] task:syz-executor state:D stack:22736 pid:4264 ppid:4263 flags:0x00004002 [ 383.962568][ T27] Call Trace: [ 383.966166][ T27] [ 383.969146][ T27] __schedule+0x1089/0x4140 [ 383.973793][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.979101][ T27] ? release_firmware_map_entry+0x187/0x187 [ 383.985272][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 383.991223][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 383.996532][ T27] schedule+0xb9/0x180 [ 384.001097][ T27] io_schedule+0x7c/0xd0 [ 384.005552][ T27] bit_wait_io+0xf/0x100 [ 384.009856][ T27] __wait_on_bit+0x9b/0x2c0 [ 384.014412][ T27] ? bit_wait+0x100/0x100 [ 384.018863][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 384.024372][ T27] ? bit_wait+0x100/0x100 [ 384.029172][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 384.033979][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 384.039115][ T27] ? bit_waitqueue+0x30/0x30 [ 384.043790][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 384.049300][ T27] do_get_write_access+0x605/0xf20 [ 384.054478][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 384.060605][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 384.066946][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 384.073164][ T27] ? rcu_is_watching+0x11/0xa0 [ 384.078057][ T27] ext4_reserve_inode_write+0x201/0x290 [ 384.083663][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 384.089348][ T27] ext4_dirty_inode+0xbf/0x100 [ 384.094158][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 384.100069][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 384.106272][ T27] __file_update_time+0x21d/0x240 [ 384.111419][ T27] file_update_time+0x2f3/0x370 [ 384.116851][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 384.122198][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 384.127365][ T27] ? ext4_change_inode_journal_flag+0x890/0x890 [ 384.133740][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 384.139602][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 384.144721][ T27] do_page_mkwrite+0x16b/0x5c0 [ 384.149552][ T27] wp_page_shared+0x167/0x370 [ 384.154279][ T27] handle_mm_fault+0x1b1b/0x3d40 [ 384.159397][ T27] ? mt_find+0x157/0x830 [ 384.163748][ T27] ? numa_migrate_prep+0x250/0x250 [ 384.168975][ T27] ? lock_chain_count+0x20/0x20 [ 384.173884][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 384.180121][ T27] do_user_addr_fault+0x5a9/0xbb0 [ 384.185332][ T27] exc_page_fault+0x60/0x100 [ 384.189984][ T27] asm_exc_page_fault+0x22/0x30 [ 384.194991][ T27] RIP: 0033:0x7fa00fa7dad6 [ 384.199471][ T27] RSP: 002b:00007ffd32481780 EFLAGS: 00010202 [ 384.207503][ T27] RAX: 00007fa00d930000 RBX: 000055556fa2fcf0 RCX: 0000000000000006 [ 384.216918][ T27] RDX: 000000000000089f RSI: 000055556fa3a660 RDI: 0000000000000040 [ 384.225025][ T27] RBP: 00007ffd32481c80 R08: 000055556fa3a678 R09: 000000000000008f [ 384.233043][ T27] R10: 0000000000100000 R11: 0000000000000001 R12: 00007ffd32481ac0 [ 384.241206][ T27] R13: 00007ffd324818b0 R14: 585858582e7a7973 R15: 00007ffd32481800 [ 384.252201][ T27] [ 384.255439][ T27] INFO: task syz.4.1090:7881 blocked for more than 144 seconds. [ 384.263127][ T27] Not tainted syzkaller #0 [ 384.268733][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.277637][ T27] task:syz.4.1090 state:D stack:27600 pid:7881 ppid:4280 flags:0x00004004 [ 384.287116][ T27] Call Trace: [ 384.290440][ T27] [ 384.293591][ T27] __schedule+0x1089/0x4140 [ 384.298265][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 384.303344][ T27] ? release_firmware_map_entry+0x187/0x187 [ 384.309976][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 384.316008][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 384.321278][ T27] schedule+0xb9/0x180 [ 384.326482][ T27] io_schedule+0x7c/0xd0 [ 384.330809][ T27] bit_wait_io+0xf/0x100 [ 384.335172][ T27] __wait_on_bit+0x9b/0x2c0 [ 384.339720][ T27] ? bit_wait+0x100/0x100 [ 384.344080][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 384.349773][ T27] ? bit_wait+0x100/0x100 [ 384.354156][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 384.359992][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 384.365179][ T27] ? bit_waitqueue+0x30/0x30 [ 384.369855][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 384.375164][ T27] do_get_write_access+0x605/0xf20 [ 384.380351][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 384.386491][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 384.392707][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 384.399631][ T27] ? rcu_is_watching+0x11/0xa0 [ 384.404468][ T27] ext4_reserve_inode_write+0x201/0x290 [ 384.410971][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 384.417302][ T27] ext4_dirty_inode+0xbf/0x100 [ 384.422123][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 384.429654][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 384.435512][ T27] __file_update_time+0x21d/0x240 [ 384.440609][ T27] file_update_time+0x2f3/0x370 [ 384.445588][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 384.450925][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 384.456112][ T27] ? pte_alloc_one+0x287/0x310 [ 384.461054][ T27] ? ext4_change_inode_journal_flag+0x890/0x890 [ 384.468368][ T27] do_page_mkwrite+0x16b/0x5c0 [ 384.473208][ T27] handle_mm_fault+0x199c/0x3d40 [ 384.478314][ T27] ? mt_find+0x157/0x830 [ 384.482633][ T27] ? numa_migrate_prep+0x250/0x250 [ 384.487873][ T27] ? lock_chain_count+0x20/0x20 [ 384.492776][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 384.498202][ T27] do_user_addr_fault+0x5a9/0xbb0 [ 384.503302][ T27] exc_page_fault+0x60/0x100 [ 384.509119][ T27] ? clear_bhb_loop+0x60/0xb0 [ 384.514474][ T27] asm_exc_page_fault+0x22/0x30 [ 384.519576][ T27] RIP: 0033:0x7f194bc6cea3 [ 384.524037][ T27] RSP: 002b:00007ffd7f19e650 EFLAGS: 00010246 [ 384.530456][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ff64000 [ 384.538637][ T27] RDX: 0000001b2ff24000 RSI: 0000000000400000 RDI: 00007f194bfe7708 [ 384.546727][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.554855][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 384.562881][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd7f19e8e0 [ 384.570996][ T27] [ 384.574105][ T27] INFO: task syz.7.1091:7882 blocked for more than 144 seconds. [ 384.582060][ T27] Not tainted syzkaller #0 [ 384.591798][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.601492][ T27] task:syz.7.1091 state:D stack:26256 pid:7882 ppid:5031 flags:0x00004004 [ 384.614307][ T27] Call Trace: [ 384.618402][ T27] [ 384.621408][ T27] __schedule+0x1089/0x4140 [ 384.626376][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 384.631483][ T27] ? release_firmware_map_entry+0x187/0x187 [ 384.637542][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 384.643601][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 384.649125][ T27] schedule+0xb9/0x180 [ 384.653281][ T27] io_schedule+0x7c/0xd0 [ 384.657703][ T27] bit_wait_io+0xf/0x100 [ 384.662168][ T27] __wait_on_bit+0x9b/0x2c0 [ 384.666965][ T27] ? bit_wait+0x100/0x100 [ 384.671507][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 384.677358][ T27] ? bit_wait+0x100/0x100 [ 384.681765][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 384.686877][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 384.691982][ T27] ? bit_waitqueue+0x30/0x30 [ 384.696738][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 384.702170][ T27] do_get_write_access+0x605/0xf20 [ 384.707844][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 384.713903][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 384.720808][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 384.727203][ T27] ? rcu_is_watching+0x11/0xa0 [ 384.732198][ T27] ext4_reserve_inode_write+0x201/0x290 [ 384.737882][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 384.743558][ T27] ext4_dirty_inode+0xbf/0x100 [ 384.749128][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 384.755068][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 384.760303][ T27] __file_update_time+0x21d/0x240 [ 384.765521][ T27] file_update_time+0x2f3/0x370 [ 384.770440][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 384.776010][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 384.781133][ T27] ? pte_alloc_one+0x287/0x310 [ 384.786102][ T27] ? ext4_change_inode_journal_flag+0x890/0x890 [ 384.792528][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 384.797916][ T27] ? put_page+0x270/0x270 [ 384.802384][ T27] do_page_mkwrite+0x16b/0x5c0 [ 384.807324][ T27] handle_mm_fault+0x199c/0x3d40 [ 384.812426][ T27] ? mt_find+0x157/0x830 [ 384.817030][ T27] ? numa_migrate_prep+0x250/0x250 [ 384.822650][ T27] ? lock_chain_count+0x20/0x20 [ 384.827769][ T27] ? ktime_get+0x247/0x270 [ 384.832625][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 384.838036][ T27] do_user_addr_fault+0x5a9/0xbb0 [ 384.843283][ T27] exc_page_fault+0x60/0x100 [ 384.848066][ T27] asm_exc_page_fault+0x22/0x30 [ 384.853527][ T27] RIP: 0033:0x7fc84e673c09 [ 384.858088][ T27] RSP: 002b:00007ffe3393c710 EFLAGS: 00010202 [ 384.864209][ T27] RAX: 0000001b2ee24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 384.872412][ T27] RDX: 0000001b2ee23ffc RSI: 00000000003ffde8 RDI: 00007fc84f555700 [ 384.880499][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc84ea12000 [ 384.888729][ T27] R10: 00007fc84f555700 R11: 0000000000000000 R12: 0000000000000000 [ 384.896817][ T27] R13: 00000000000012b7 R14: ffffffff812f91e0 R15: 00007fc84f555720 [ 384.905874][ T27] ? fpregs_activate+0xb0/0x230 [ 384.910886][ T27] [ 384.913974][ T27] INFO: task syz.5.1093:7887 blocked for more than 145 seconds. [ 384.921792][ T27] Not tainted syzkaller #0 [ 384.927463][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.936290][ T27] task:syz.5.1093 state:D stack:27600 pid:7887 ppid:4667 flags:0x00004004 [ 384.945632][ T27] Call Trace: [ 384.948960][ T27] [ 384.951908][ T27] __schedule+0x1089/0x4140 [ 384.957449][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 384.962541][ T27] ? release_firmware_map_entry+0x187/0x187 [ 384.968580][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 384.974615][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 384.979888][ T27] schedule+0xb9/0x180 [ 384.984019][ T27] io_schedule+0x7c/0xd0 [ 384.988593][ T27] bit_wait_io+0xf/0x100 [ 384.992976][ T27] __wait_on_bit+0x9b/0x2c0 [ 384.997594][ T27] ? bit_wait+0x100/0x100 [ 385.001998][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 385.007590][ T27] ? bit_wait+0x100/0x100 [ 385.011971][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 385.016885][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 385.021962][ T27] ? bit_waitqueue+0x30/0x30 [ 385.027541][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 385.032799][ T27] do_get_write_access+0x605/0xf20 [ 385.038176][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 385.044231][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 385.050535][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 385.057010][ T27] ? rcu_is_watching+0x11/0xa0 [ 385.061838][ T27] ext4_reserve_inode_write+0x201/0x290 [ 385.067595][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 385.073144][ T27] ext4_dirty_inode+0xbf/0x100 [ 385.078029][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 385.083894][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 385.089080][ T27] __file_update_time+0x21d/0x240 [ 385.094179][ T27] file_update_time+0x2f3/0x370 [ 385.099245][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 385.104656][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 385.109782][ T27] ? pte_alloc_one+0x287/0x310 [ 385.114692][ T27] ? ext4_change_inode_journal_flag+0x890/0x890 [ 385.120986][ T27] do_page_mkwrite+0x16b/0x5c0 [ 385.126647][ T27] handle_mm_fault+0x199c/0x3d40 [ 385.132065][ T27] ? mt_find+0x157/0x830 [ 385.136489][ T27] ? numa_migrate_prep+0x250/0x250 [ 385.141682][ T27] ? lock_chain_count+0x20/0x20 [ 385.147337][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 385.152707][ T27] do_user_addr_fault+0x5a9/0xbb0 [ 385.158275][ T27] exc_page_fault+0x60/0x100 [ 385.162955][ T27] ? clear_bhb_loop+0x60/0xb0 [ 385.167996][ T27] asm_exc_page_fault+0x22/0x30 [ 385.172917][ T27] RIP: 0033:0x7f5f6ba6cea3 [ 385.177628][ T27] RSP: 002b:00007ffe265fa990 EFLAGS: 00010246 [ 385.184117][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fe64000 [ 385.192405][ T27] RDX: 0000001b2fe24000 RSI: 0000000000600000 RDI: 00007f5f6bde7708 [ 385.200549][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.208668][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 385.216748][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe265fac20 [ 385.225169][ T27] [ 385.228268][ T27] INFO: task syz.8.1092:7888 blocked for more than 145 seconds. [ 385.237515][ T27] Not tainted syzkaller #0 [ 385.242511][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.252365][ T27] task:syz.8.1092 state:D stack:27600 pid:7888 ppid:6372 flags:0x00004004 [ 385.262002][ T27] Call Trace: [ 385.266225][ T27] [ 385.269210][ T27] __schedule+0x1089/0x4140 [ 385.273804][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 385.278985][ T27] ? release_firmware_map_entry+0x187/0x187 [ 385.285027][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 385.290976][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 385.296286][ T27] schedule+0xb9/0x180 [ 385.300448][ T27] io_schedule+0x7c/0xd0 [ 385.305104][ T27] bit_wait_io+0xf/0x100 [ 385.309527][ T27] __wait_on_bit+0x9b/0x2c0 [ 385.314086][ T27] ? bit_wait+0x100/0x100 [ 385.318544][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 385.324064][ T27] ? bit_wait+0x100/0x100 [ 385.328538][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 385.334106][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 385.339294][ T27] ? bit_waitqueue+0x30/0x30 [ 385.343945][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 385.349876][ T27] do_get_write_access+0x605/0xf20 [ 385.355162][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 385.361320][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 385.367760][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 385.374016][ T27] ? rcu_is_watching+0x11/0xa0 [ 385.378999][ T27] ext4_reserve_inode_write+0x201/0x290 [ 385.384772][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 385.390304][ T27] ext4_dirty_inode+0xbf/0x100 [ 385.395191][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 385.401060][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 385.406233][ T27] __file_update_time+0x21d/0x240 [ 385.411312][ T27] file_update_time+0x2f3/0x370 [ 385.416612][ T27] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 385.421965][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 385.427633][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 385.432733][ T27] ? pte_alloc_one+0x287/0x310 [ 385.438507][ T27] ? ext4_change_inode_journal_flag+0x890/0x890 [ 385.445115][ T27] do_page_mkwrite+0x16b/0x5c0 [ 385.449953][ T27] handle_mm_fault+0x199c/0x3d40 [ 385.456701][ T27] ? mt_find+0x157/0x830 [ 385.461004][ T27] ? numa_migrate_prep+0x250/0x250 [ 385.468597][ T27] ? lock_chain_count+0x20/0x20 [ 385.473499][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 385.479097][ T27] do_user_addr_fault+0x5a9/0xbb0 [ 385.484456][ T27] exc_page_fault+0x60/0x100 [ 385.490277][ T27] ? clear_bhb_loop+0x60/0xb0 [ 385.495132][ T27] asm_exc_page_fault+0x22/0x30 [ 385.500169][ T27] RIP: 0033:0x7f68e266cea3 [ 385.504737][ T27] RSP: 002b:00007ffeed402940 EFLAGS: 00010246 [ 385.510975][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b31c64000 [ 385.519095][ T27] RDX: 0000001b31c24000 RSI: 0000000000600000 RDI: 00007f68e29e7708 [ 385.527389][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.535485][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 385.544157][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeed402bd0 [ 385.552408][ T27] [ 385.555646][ T27] [ 385.555646][ T27] Showing all locks held in the system: [ 385.563413][ T27] 6 locks held by kworker/u4:0/9: [ 385.568646][ T27] #0: ffff888019659138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 385.579865][ T27] #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 385.591872][ T27] #2: ffff8880312a40e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 385.602181][ T27] #3: ffff8880312a6c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x246/0x2fe0 [ 385.612900][ T27] #4: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.622913][ T27] #5: ffff8880725520a0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 385.633864][ T27] 1 lock held by rcu_tasks_kthre/12: [ 385.644907][ T27] #0: ffffffff8db2e3f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 385.655759][ T27] 1 lock held by rcu_tasks_trace/13: [ 385.661119][ T27] #0: ffffffff8db2ec30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 385.672363][ T27] 1 lock held by khungtaskd/27: [ 385.677541][ T27] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 385.687831][ T27] 2 locks held by klogd/3633: [ 385.692677][ T27] #0: ffff8880b8c3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 385.702792][ T27] #1: ffffffff8dc18f00 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 385.714793][ T27] 2 locks held by getty/4031: [ 385.719828][ T27] #0: ffff88814c907098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 385.729814][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x430/0x1400 [ 385.740296][ T27] 3 locks held by syz-executor/4264: [ 385.746114][ T27] #0: ffff8880321a9f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 385.756339][ T27] #1: ffff8880312a4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 385.766272][ T27] #2: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.776401][ T27] 2 locks held by kworker/0:5/4359: [ 385.781683][ T27] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 385.792281][ T27] #1: ffffc90004487d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 385.804473][ T27] 3 locks held by syz.4.1090/7881: [ 385.809777][ T27] #0: ffff88807d0526d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 385.819902][ T27] #1: ffff8880312a4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 385.829979][ T27] #2: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.840052][ T27] 3 locks held by syz.7.1091/7882: [ 385.845829][ T27] #0: ffff88801846d3d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 385.856910][ T27] #1: ffff8880312a4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 385.867361][ T27] #2: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.877450][ T27] 3 locks held by syz.5.1093/7887: [ 385.882621][ T27] #0: ffff88807d051058 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 385.892939][ T27] #1: ffff8880312a4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 385.903064][ T27] #2: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.913253][ T27] 3 locks held by syz.8.1092/7888: [ 385.918684][ T27] #0: ffff88807d055b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 385.928928][ T27] #1: ffff8880312a4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 385.939753][ T27] #2: ffff88814d5a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 385.950398][ T27] [ 385.952815][ T27] ============================================= [ 385.952815][ T27] [ 385.961598][ T27] NMI backtrace for cpu 1 [ 385.965995][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 385.973229][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 385.983330][ T27] Call Trace: [ 385.986636][ T27] [ 385.989598][ T27] dump_stack_lvl+0x188/0x24e [ 385.994435][ T27] ? irq_work_queue+0xb8/0x140 [ 385.999320][ T27] ? show_regs_print_info+0x12/0x12 [ 386.004589][ T27] ? load_image+0x410/0x410 [ 386.009133][ T27] ? vprintk_emit+0x59f/0x6a0 [ 386.013847][ T27] ? printk_sprint+0x460/0x460 [ 386.018648][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 386.023627][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 386.029821][ T27] ? _printk+0xda/0x130 [ 386.034012][ T27] ? load_image+0x410/0x410 [ 386.038570][ T27] ? load_image+0x410/0x410 [ 386.043106][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 386.049415][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 386.055583][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 386.061605][ T27] watchdog+0xf0e/0xf50 [ 386.065864][ T27] ? watchdog+0x1ed/0xf50 [ 386.070233][ T27] kthread+0x29d/0x330 [ 386.074326][ T27] ? hungtask_pm_notify+0x40/0x40 [ 386.079386][ T27] ? kthread_blkcg+0xd0/0xd0 [ 386.084006][ T27] ret_from_fork+0x1f/0x30 [ 386.088468][ T27] [ 386.092227][ T27] Sending NMI from CPU 1 to CPUs 0: [ 386.097706][ C0] NMI backtrace for cpu 0 [ 386.097716][ C0] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 386.097733][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.097743][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 386.097864][ C0] RIP: 0010:mark_lock+0xd6/0x320 [ 386.097892][ C0] Code: eb 24 48 c7 c0 40 91 c6 97 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d 23 ba 61 16 00 74 36 45 31 ff 49 83 c7 60 <4c> 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 34 f5 6e 00 [ 386.097938][ C0] RSP: 0018:ffffc900015a79a0 EFLAGS: 00000086 [ 386.097962][ C0] RAX: 0000000000008f00 RBX: ffff88801f68bc00 RCX: ffffffff8164d6e4 [ 386.098002][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91b62250 [ 386.098013][ C0] RBP: 0000000000000002 R08: ffffffff91b62257 R09: 1ffffffff236c44a [ 386.098024][ C0] R10: dffffc0000000000 R11: fffffbfff236c44b R12: 0000000000000004 [ 386.098036][ C0] R13: dffffc0000000000 R14: ffff88801f68c6e0 R15: ffffffff914d3060 [ 386.098049][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 386.098064][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.098075][ C0] CR2: 000055dbf3674660 CR3: 000000000d88e000 CR4: 00000000003506f0 [ 386.098090][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.098099][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.098110][ C0] Call Trace: [ 386.098115][ C0] [ 386.098124][ C0] lockdep_hardirqs_on_prepare+0x237/0x7c0 [ 386.098152][ C0] ? lock_chain_count+0x20/0x20 [ 386.098175][ C0] ? kasan_quarantine_put+0x39/0x210 [ 386.098197][ C0] trace_hardirqs_on+0x34/0x40 [ 386.098260][ C0] kasan_quarantine_put+0xd4/0x210 [ 386.098287][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 386.098311][ C0] ? nsim_dev_trap_report_work+0x71f/0xa80 [ 386.098334][ C0] kmem_cache_free+0xf7/0x2a0 [ 386.098354][ C0] nsim_dev_trap_report_work+0x71f/0xa80 [ 386.098382][ C0] ? process_one_work+0x7b4/0x1160 [ 386.098402][ C0] process_one_work+0x8ab/0x1160 [ 386.098427][ C0] ? worker_detach_from_pool+0x240/0x240 [ 386.098449][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.098471][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.098492][ C0] ? wq_worker_running+0x97/0x190 [ 386.098509][ C0] worker_thread+0xaf5/0x12a0 [ 386.098539][ C0] kthread+0x29d/0x330 [ 386.098553][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 386.098571][ C0] ? kthread_blkcg+0xd0/0xd0 [ 386.098587][ C0] ret_from_fork+0x1f/0x30 [ 386.098616][ C0] [ 386.361025][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 386.367965][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 386.375206][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.385301][ T27] Call Trace: [ 386.388624][ T27] [ 386.391611][ T27] dump_stack_lvl+0x188/0x24e [ 386.396350][ T27] ? memcpy+0x3c/0x60 [ 386.400394][ T27] ? show_regs_print_info+0x12/0x12 [ 386.405648][ T27] ? load_image+0x410/0x410 [ 386.410207][ T27] panic+0x2d3/0x710 [ 386.414137][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 386.419816][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 386.424350][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 386.429938][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 386.436134][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 386.442324][ T27] watchdog+0xf4d/0xf50 [ 386.446602][ T27] ? watchdog+0x1ed/0xf50 [ 386.450967][ T27] kthread+0x29d/0x330 [ 386.455086][ T27] ? hungtask_pm_notify+0x40/0x40 [ 386.460156][ T27] ? kthread_blkcg+0xd0/0xd0 [ 386.464776][ T27] ret_from_fork+0x1f/0x30 [ 386.469237][ T27] [ 386.472448][ T27] Kernel Offset: disabled [ 386.476791][ T27] Rebooting in 86400 seconds..