last executing test programs: 3m6.308943089s ago: executing program 1 (id=300): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78409e88509de050000000000f2170e65e3e10327e422000000000000000000000200000000001900", 0x3f}, 0x60) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffbffffe, 0x6, 0x0, 0x1, "d92984bd1c11a077609475b78411e885097ef70000000000f2170e0000583e2500b318e95e00", 0x3f}, 0x60) 3m5.958456184s ago: executing program 1 (id=303): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 3m4.31882526s ago: executing program 1 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x8040) 3m2.145023812s ago: executing program 1 (id=323): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x11a) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m1.402870449s ago: executing program 1 (id=329): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m0.598734339s ago: executing program 1 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r0}, 0x38) 2m59.445711949s ago: executing program 32 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r0}, 0x38) 1m27.098084731s ago: executing program 0 (id=904): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x1, 0x489, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 1m26.627242713s ago: executing program 0 (id=907): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x88) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m26.193819219s ago: executing program 0 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x5b, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x30}}, 0x0) 1m25.883836522s ago: executing program 0 (id=916): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m25.61598781s ago: executing program 0 (id=920): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000005580)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) 1m23.510177508s ago: executing program 0 (id=935): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 1m8.192897719s ago: executing program 33 (id=935): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 12.295650548s ago: executing program 2 (id=1380): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 10.285747825s ago: executing program 2 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 9.908512751s ago: executing program 2 (id=1398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x34dfdbfe, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0x8f}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.534707221s ago: executing program 2 (id=1399): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) fdatasync(r0) 8.703773548s ago: executing program 2 (id=1402): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@nointegrity}, {@usrquota}, {@errors_continue}, {@gid}, {}, {}, {@noquota}, {@quota}, {@errors_continue}, {@grpquota}]}, 0x24, 0x62d1, &(0x7f000000c880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) 7.531952491s ago: executing program 4 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydo ain \\ 64\n', 0xe) 7.156674866s ago: executing program 4 (id=1408): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f00000009c0)=@canfd={{0x4, 0x1}, 0x32, 0x0, 0x0, 0x0, "a1e626f8facc08238b9b756c56cd3765933ad3164db946825a24d1dbd4cf293d3bce76815d0aa531dc2aee4c8863050750c42cd7b949efca0b90790220752309"}, 0x80c}, 0x1, 0x0, 0x0, 0x84844}, 0x0) 6.784582899s ago: executing program 4 (id=1412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='force', 0x5) 6.39673405s ago: executing program 4 (id=1413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/fs/cifs/open_files\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 6.05342007s ago: executing program 2 (id=1415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000b11963c89729c6e779213832accc3a6c1dfe6721ddc0e200035eb1af9712f63d238176755f30bf8aaf523ef8421f1656e4250f9d9beddf5e0fe61b4e917d19a84582423a8a79b8a7bd900d3fd7eb27761ba0000000000000000"], 0x1, 0x5d4, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x280a00, 0x163) file_getattr(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) 5.894758766s ago: executing program 4 (id=1416): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 3.901930208s ago: executing program 4 (id=1422): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000000b40)=""/114, 0x72}], 0x2}, 0x6}], 0x2, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.476770547s ago: executing program 5 (id=1428): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x2, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x800}) close(r0) 2.282613819s ago: executing program 5 (id=1429): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8002, 0x1000000, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x4000, 0x0, 0x4) 2.054175305s ago: executing program 3 (id=1431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xd1}]}) 1.723726425s ago: executing program 3 (id=1432): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x3f) close(r0) 1.44578092s ago: executing program 3 (id=1433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8000000008, 0xfffffffffffffffd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x4000000009, 0xffffffffffffffff}) 1.335879828s ago: executing program 3 (id=1434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f00000016c0)=""/4106, &(0x7f0000000040)=0x100a) 1.261226045s ago: executing program 5 (id=1435): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) write$P9_RSTATu(r0, 0x0, 0x6e) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, 0x0) 1.067679547s ago: executing program 5 (id=1437): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380), 0xfd, 0x2bd, &(0x7f0000000600)="$eJzs3c9qY1UYAPDvJmly1UWycCWKF3ThapjOE6RIBwezUrLwD6g4MyCTIEyh4B+MsxJcuXHpEwjC7HwJN76BDyDoylkMHLk39zZJm8YGTavO77fp13POd893bm5busiX95+f3rtdxN0Hn/8SeZ5FaxjDeJTFIFrR+DJWDL8JAOC/7FFK8Vua2yYvi4h8d2UBADu09d//hzsvCQDYsTffevv1g9Ho8I2iyOPm9Kvjcfmfffl1Pn9wNz6KSdyJ69GPxxHpxDy+mVKadYrSIF6ezo7HZeb0vZ/q6x/8GlHl70c/BtXQav6t0eF+MbeUPyvreLref1jm34h+PLtm/1ujwxtr8mPcjVdeWqr/WvTj5w/j45jE7aqIRf4X+0Xxavr2j8/eKcsr87PZ8bhXrVtI7Ut+aQAAAAAAAAAAAAAAAAAAAAAA+B+7VvfO6UXVv6ccqvvvtB+X3+xF0Ris9ueZ52fNhU71B5ql+K7pr3O9KIpUL1zkd+K5TnSu5tQAAAAAAAAAAAAAAAAAAADw73L0yaf3PphM7tyvgt+jDk5GtguabgDN2/q3v87DKmu4NPJibM7qLfZq1eGGLaLdrMkiNtZTHuLv3Y0LB0+dV/P3PyyNvLvpXE2Q//WavfI6+T94iublXhqJZiRbfw97J4vz5iH5sRlJKaVuXHD37nlTaavHr7t2qn92cVPYa+uf8O4zVTDbsFdk5xX29QuLn8t6Kju9RXflPq8Ee3WwlH7UXl6cb/U8n/1dkenWAQAAAAAAAAAAAAAAAAAAO7V40++ayQcbU1upt7OyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSLT7/f4tgVidfYHE37h9d8REBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AvwZAAD//6QxV7Q=") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={0x14, 0x10, 0x21, 0x70bd26, 0x0, {0x3}}, 0x14}}, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 846.712687ms ago: executing program 5 (id=1438): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0xb, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 744.809661ms ago: executing program 5 (id=1439): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 719.000016ms ago: executing program 6 (id=1440): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 570.576876ms ago: executing program 6 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_ACT={0x184, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x54, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x5, 0x0, 0xea, 0x1067aff1}, {0x0, 0x9, 0x1, 0x5}, {0x100, 0x9, 0x9, 0x7fff}]}]}, {0xd, 0x6, "8b71821751fd4ad9f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x64, 0x8, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x401}]}, {0x19, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 546.112263ms ago: executing program 6 (id=1442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101feffffff000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c090000200051"], 0x50}}, 0x20004800) 478.440373ms ago: executing program 6 (id=1443): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 378.048342ms ago: executing program 3 (id=1444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) 107.183343ms ago: executing program 3 (id=1445): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)="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", 0x100}], 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 51.506234ms ago: executing program 6 (id=1446): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) 0s ago: executing program 6 (id=1447): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723dd69207eb2c6e6c733d6575632d6a702c756d61736b3d30303030303030303030303030303030303030303031312c00"], 0x1, 0x5d1, &(0x7f0000001c00)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)=ANY=[@ANYBLOB="747970653d54a10fb22c71756965742c696f636861727365743d63703836342c706172743d3078303030303030303030303030303030382c6469725f756d61736b3d30303030303030303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d303030303030303030303030303030303030303130306965742c756d61736b3d30303030303030303030303030303030303030303030322c00"], 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) kernel console output (not intermixed with test programs): ap_4sectors(): unaligned read [ 189.649026][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649033][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649039][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649045][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649058][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649063][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649070][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649075][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649218][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649224][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649230][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649236][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649248][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649255][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649260][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649266][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649365][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649371][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649377][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649383][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649395][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649401][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649407][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649413][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649545][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649552][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649557][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649563][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649575][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649581][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649587][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649593][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649701][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649707][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649713][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649719][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649731][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649737][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649742][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649748][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649845][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649851][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649857][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649863][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649875][ T7773] hpfs: hpfs_map_sector(): read error [ 189.649881][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649887][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.649893][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944772][ T7773] hpfs: hpfs_map_sector(): read error [ 189.944786][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944793][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944799][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944819][ T7773] hpfs: hpfs_map_sector(): read error [ 189.944825][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944832][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.944839][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945035][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945042][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945049][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945055][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945070][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945076][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945083][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945089][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945201][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945221][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945227][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945233][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945246][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945252][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945259][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945265][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945382][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945389][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945395][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945400][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945413][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945419][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945425][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945431][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945529][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945535][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945541][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945547][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945559][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945565][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945571][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945576][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945673][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945679][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945685][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945691][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945703][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945709][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945715][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945721][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945830][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945837][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945842][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945848][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945878][ T7773] hpfs: hpfs_map_sector(): read error [ 189.945885][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945892][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.945898][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946012][ T7773] hpfs: hpfs_map_sector(): read error [ 189.946019][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946026][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946032][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946046][ T7773] hpfs: hpfs_map_sector(): read error [ 189.946052][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946058][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 189.946065][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332667][ T7773] hpfs: hpfs_map_sector(): read error [ 190.332680][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332688][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332695][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332714][ T7773] hpfs: hpfs_map_sector(): read error [ 190.332720][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332727][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332734][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332866][ T7773] hpfs: hpfs_map_sector(): read error [ 190.332873][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332880][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332886][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332908][ T7773] hpfs: hpfs_map_sector(): read error [ 190.332914][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332922][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.332928][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333088][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333096][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333102][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333109][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333123][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333129][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333136][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333142][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333252][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333259][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333265][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333272][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333286][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333292][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333298][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333305][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333442][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333449][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333456][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333462][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333476][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333483][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333489][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333496][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333606][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333613][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333620][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333626][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333640][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333646][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333653][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333660][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333767][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333773][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333780][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333786][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333799][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333806][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333812][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333819][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333947][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333954][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333960][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333967][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.333981][ T7773] hpfs: hpfs_map_sector(): read error [ 190.333991][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.600781][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.600793][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601028][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601036][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601043][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601049][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601064][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601071][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601077][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601084][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601196][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601204][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601210][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601216][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601230][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601237][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601243][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601250][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601368][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601375][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601382][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601388][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601401][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601408][ T7773] hpfs: hpfs_map_4sectors(): unaligned read [ 190.601532][ T7773] hpfs: hpfs_map_sector(): read error [ 190.601562][ T7773] hpfs: hpfs_map_sector(): read error [ 192.062663][ T7785] loop4: detected capacity change from 0 to 1024 [ 192.288544][ T7787] loop0: detected capacity change from 0 to 512 [ 192.296367][ T7787] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.399031][ T7787] EXT4-fs (loop0): 1 truncate cleaned up [ 192.400353][ T7787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.509434][ T7787] EXT4-fs error (device loop0): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.0.728: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 192.510137][ T7787] EXT4-fs (loop0): Remounting filesystem read-only [ 192.510152][ T7787] EXT4-fs warning (device loop0): ext4_rename_delete:3741: inode #2: comm syz.0.728: Deleting old file: nlink 5, error=-117 [ 192.722894][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.231214][ T5619] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 193.380984][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 193.383406][ T5619] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 193.408289][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.434635][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.434658][ T5619] usb 1-1: Product: syz [ 193.434669][ T5619] usb 1-1: Manufacturer: syz [ 193.434680][ T5619] usb 1-1: SerialNumber: syz [ 193.464943][ T5619] usb 1-1: config 0 descriptor?? [ 193.497111][ T5619] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 193.754508][ T7815] loop3: detected capacity change from 0 to 4096 [ 193.757734][ T7818] loop5: detected capacity change from 0 to 256 [ 193.758484][ T7818] exfat: Deprecated parameter 'utf8' [ 193.758546][ T7818] exfat: Deprecated parameter 'namecase' [ 193.758582][ T7818] exfat: Deprecated parameter 'namecase' [ 193.758623][ T7818] exfat: Deprecated parameter 'namecase' [ 193.758631][ T7818] exfat: Bad value for 'namecase' [ 193.828337][ T7815] ntfs3(loop3): ino=3, mi_enum_attr [ 194.249135][ T7815] ntfs3(loop3): ino=1f, mi_enum_attr [ 194.249177][ T7815] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 194.281353][ T7829] program syz.2.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.297228][ T1177] IPVS: starting estimator thread 0... [ 194.305108][ T7815] ntfs3(loop3): ino=1f, mi_enum_attr [ 194.323875][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323918][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.328544][ T5619] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 194.328609][ T5619] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 194.372784][ T5619] usb 1-1: USB disconnect, device number 5 [ 194.377822][ T7830] IPVS: using max 38 ests per chain, 91200 per kthread [ 194.443825][ T7825] ntfs3(loop3): ino=9, attr_set_size_ex [ 194.576000][ T7832] loop5: detected capacity change from 0 to 1024 [ 194.627008][ T7832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.663786][ T7836] loop2: detected capacity change from 0 to 128 [ 194.682236][ T7836] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.722803][ T7832] EXT4-fs error (device loop5): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.5.748: path /68/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 194.756906][ T7832] EXT4-fs (loop5): Remounting filesystem read-only [ 194.922626][ T6637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.249904][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.600784][ T7851] loop0: detected capacity change from 0 to 128 [ 195.633114][ T7851] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.633142][ T7851] hpfs: filesystem error: improperly stopped [ 195.633152][ T7851] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.633163][ T7851] hpfs: You really don't want any checks? You are crazy... [ 195.633173][ T7851] hpfs: Code page index out of array [ 195.633179][ T7851] hpfs: code page support is disabled [ 195.635241][ T7851] hpfs: hpfs_map_4sectors(): unaligned read [ 195.635301][ T7851] hpfs: hpfs_map_4sectors(): unaligned read [ 195.635309][ T7851] hpfs: filesystem error: unable to find root dir [ 195.847898][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.010209][ T5846] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.014278][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.043480][ T5846] usb 5-1: config 0 descriptor?? [ 196.267572][ T5846] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 196.410352][ T7845] loop5: detected capacity change from 0 to 32768 [ 196.440681][ T7845] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 196.515702][ T7845] XFS (loop5): Ending clean mount [ 196.632577][ T6637] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 196.683728][ T5846] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 196.683748][ T5846] [drm] Initialized udl on minor 1 [ 196.964633][ T5846] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 197.069795][ T7874] overlayfs: overlapping lowerdir path [ 197.076563][ T5619] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.100447][ T5846] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.309516][ T5846] usb 5-1: USB disconnect, device number 6 [ 197.346894][ T7878] loop0: detected capacity change from 0 to 256 [ 197.379654][ T5619] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.380308][ T5619] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.487019][ T7878] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 197.487039][ T7878] FAT-fs (loop0): Filesystem has been set read-only [ 197.986024][ T7886] loop4: detected capacity change from 0 to 2048 [ 198.041681][ T7886] NILFS (loop4): invalid segment: Magic number mismatch [ 198.041703][ T7886] NILFS (loop4): trying rollback from an earlier position [ 198.095960][ T7884] loop2: detected capacity change from 0 to 4096 [ 198.147213][ T7886] NILFS (loop4): recovery complete [ 198.180393][ T7891] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.290082][ T7884] ntfs3(loop2): Failed to load $Extend (-22). [ 198.290101][ T7884] ntfs3(loop2): Failed to initialize $Extend. [ 198.717099][ T7886] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 199.132362][ T7910] loop2: detected capacity change from 0 to 1024 [ 199.184600][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 199.220051][ T7911] loop0: detected capacity change from 0 to 2048 [ 199.253399][ T7911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.400751][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 199.918159][ T5846] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.028043][ T7927] loop3: detected capacity change from 0 to 4096 [ 200.046931][ T7927] ntfs3(loop3): Primary boot: invalid bytes per MFT record 2 (-1). [ 200.047056][ T7927] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 200.070720][ T5846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.074013][ T5846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.102308][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.102327][ T5846] usb 1-1: Product: syz [ 200.102336][ T5846] usb 1-1: Manufacturer: syz [ 200.102346][ T5846] usb 1-1: SerialNumber: syz [ 200.135380][ T5846] hub 1-1:1.0: bad descriptor, ignoring hub [ 200.135400][ T5846] hub 1-1:1.0: probe with driver hub failed with error -5 [ 200.372236][ T7906] mmap: syz.5.778 (7906) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.751064][ T7921] loop2: detected capacity change from 0 to 32768 [ 200.778397][ T5846] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 200.785834][ T7921] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.784 (7921) [ 200.879037][ T7921] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 200.879062][ T7921] BTRFS info (device loop2): using blake2b checksum algorithm [ 201.079354][ T5846] usb 1-1: device firmware changed [ 201.097382][ T7921] BTRFS info (device loop2): enabling ssd optimizations [ 201.097402][ T7921] BTRFS info (device loop2): turning on async discard [ 201.097415][ T7921] BTRFS info (device loop2): enabling free space tree [ 201.130919][ T5846] usb 1-1: USB disconnect, device number 6 [ 201.207049][ T33] audit: type=1800 audit(1789199031.886:13): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.784" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 201.242830][ T7958] profile_transition: unconfined exec no attachment [ 201.489129][ T5846] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.547701][ T7963] loop4: detected capacity change from 0 to 1024 [ 201.644515][ T5846] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 201.647017][ T5846] usb 1-1: config 0 has no interfaces? [ 201.647043][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.689058][ T5846] usb 1-1: config 0 descriptor?? [ 201.927101][ T5846] usb 1-1: USB disconnect, device number 7 [ 202.062497][ T5625] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 202.283721][ T7971] profile_transition: unconfined exec no attachment [ 202.396267][ T7974] aa_policy_admin_capable: cap_mac_admin? 1 [ 202.396285][ T7974] aa_policy_admin_capable: policy locked? 0 [ 202.396369][ T7974] unpack_pdb: unpacking tags [ 202.396376][ T7974] unpack_pdb: done unpacking tags [ 202.396396][ T7974] unpack_pdb: unpacking tags [ 202.396403][ T7974] unpack_pdb: done unpacking tags [ 202.396966][ T33] audit: type=1400 audit(1789199033.076:14): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7972 comm="syz.2.799" [ 202.786461][ T7979] loop3: detected capacity change from 0 to 512 [ 202.827269][ T7979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 202.827362][ T7979] System zones: 1-12 [ 202.842263][ T7979] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.801: missing EA_INODE flag [ 202.842283][ T7979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 202.847467][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 202.847483][ C0] EXT4-fs (loop3): initial error at time 1789199033: ext4_xattr_inode_iget:437: inode 12 [ 202.847512][ C0] EXT4-fs (loop3): last error at time 1789199033: ext4_xattr_inode_iget:437: inode 12 [ 202.967104][ T7979] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.801: error while reading EA inode 12 err=-117 [ 202.967131][ T7979] loop3: lost filesystem error report for type 5 error -117 [ 203.010046][ T7979] EXT4-fs (loop3): 1 orphan inode deleted [ 203.011357][ T7979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.137030][ T7979] fscrypt (loop3, inode 15): Direct key flag not allowed with different contents and filenames modes [ 203.314420][ T7969] loop5: detected capacity change from 0 to 32768 [ 203.372689][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.403654][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 203.431197][ T7988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 203.470387][ T7987] ipvlan2: entered allmulticast mode [ 203.846343][ T7993] loop4: detected capacity change from 0 to 2048 [ 203.864547][ T7993] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.864573][ T7993] NILFS (loop4): mounting unchecked fs [ 203.940885][ T7993] NILFS (loop4): recovery complete [ 203.957335][ T7996] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.704513][ T8007] loop3: detected capacity change from 0 to 256 [ 204.706453][ T8007] exfat: Deprecated parameter 'namecase' [ 204.706522][ T8007] exfat: Deprecated parameter 'namecase' [ 204.757172][ T8007] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 204.977956][ T905] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 205.103394][ T8015] loop0: detected capacity change from 0 to 64 [ 205.127980][ T905] usb 5-1: Using ep0 maxpacket: 8 [ 205.128532][ T905] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 205.132968][ T905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.173101][ T905] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 205.173121][ T905] usb 5-1: Product: syz [ 205.173131][ T905] usb 5-1: Manufacturer: syz [ 205.173140][ T905] usb 5-1: SerialNumber: syz [ 205.216533][ T905] usb 5-1: config 0 descriptor?? [ 205.261752][ T905] imon_raw 5-1:0.0: IR endpoint missing [ 205.490168][ T905] usb 5-1: USB disconnect, device number 7 [ 205.742844][ T8028] loop5: detected capacity change from 0 to 256 [ 206.110837][ T8033] rnbd_client L127: Can't parse path ip: -93 [ 206.578487][ T8049] loop4: detected capacity change from 0 to 256 [ 206.599776][ T8041] loop2: detected capacity change from 0 to 4096 [ 206.650836][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 206.650872][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 206.650909][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 206.650964][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 206.748325][ T8049] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 206.865937][ T33] audit: type=1800 audit(1789199037.546:15): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.833" name="file1" dev="loop4" ino=1048650 res=0 errno=0 [ 206.902418][ T33] audit: type=1800 audit(1789199037.586:16): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.833" name="file1" dev="loop4" ino=1048650 res=0 errno=0 [ 207.302881][ T8056] loop5: detected capacity change from 0 to 4096 [ 207.325560][ T8056] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 207.415265][ T8056] ntfs3(loop5): ino=19, mi_enum_attr [ 207.415288][ T8056] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 207.416051][ T8056] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 207.939379][ T8072] veth1_macvtap: left promiscuous mode [ 207.976974][ T8072] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 208.018305][ T5846] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 208.169453][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 208.176732][ T5846] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.198952][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.198972][ T5846] usb 1-1: Product: syz [ 208.198983][ T5846] usb 1-1: Manufacturer: syz [ 208.198993][ T5846] usb 1-1: SerialNumber: syz [ 208.204963][ T5846] usb 1-1: config 0 descriptor?? [ 208.660456][ T5846] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 208.682194][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.683309][ T5846] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 208.683343][ T5846] usb 1-1: media controller created [ 208.732906][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.861115][ T5846] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 208.861131][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 209.012517][ T8094] loop3: detected capacity change from 0 to 512 [ 209.055890][ T8094] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.854: Invalid inode bitmap blk 4 in block_group 0 [ 209.055934][ T8094] loop3: lost filesystem error report for type 5 error -117 [ 209.057358][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.173024][ T5726] usb 1-1: USB disconnect, device number 8 [ 209.273610][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.333199][ T5726] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 209.620101][ T8105] netlink: 67 bytes leftover after parsing attributes in process `syz.5.858'. [ 209.620170][ T8105] IPv6: NLM_F_REPLACE set, but no existing node found! [ 209.997033][ T8111] loop5: detected capacity change from 0 to 2048 [ 210.007540][ T5619] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 210.032583][ T8111] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 210.032852][ T8111] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 210.032865][ T8111] UDF-fs: Scanning with blocksize 512 failed [ 210.111144][ T8111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.158500][ T5619] usb 5-1: Using ep0 maxpacket: 16 [ 210.161601][ T5619] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.173514][ T5619] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 210.173537][ T5619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.219432][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.219454][ T5619] usb 5-1: Product: syz [ 210.219465][ T5619] usb 5-1: Manufacturer: syz [ 210.219475][ T5619] usb 5-1: SerialNumber: syz [ 210.222234][ T8117] loop2: detected capacity change from 0 to 512 [ 210.276854][ T5619] usb 5-1: config 0 descriptor?? [ 210.302386][ T8117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 210.302475][ T8117] System zones: 1-12 [ 210.306718][ T8117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.865: missing EA_INODE flag [ 210.306739][ T8117] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.307474][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 210.307491][ C0] EXT4-fs (loop2): initial error at time 1789199040: ext4_xattr_inode_iget:437: inode 12 [ 210.307514][ C0] EXT4-fs (loop2): last error at time 1789199040: ext4_xattr_inode_iget:437: inode 12 [ 210.307792][ T5619] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.307814][ T5619] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 210.405981][ T8117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.865: error while reading EA inode 12 err=-117 [ 210.406008][ T8117] loop2: lost filesystem error report for type 5 error -117 [ 210.425222][ T8117] EXT4-fs (loop2): 1 orphan inode deleted [ 210.461661][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.599245][ T8117] fscrypt (loop2, inode 15): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 210.780752][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.012238][ T5619] em28xx 5-1:0.0: chip ID is em2710/2820 [ 211.059182][ T5726] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.207544][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 211.208274][ T5726] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 211.226655][ T5619] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 211.227007][ T5619] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 211.227036][ T5619] em28xx 5-1:0.0: No AC97 audio processor [ 211.256619][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.276024][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.276045][ T5726] usb 4-1: Product: syz [ 211.276056][ T5726] usb 4-1: Manufacturer: syz [ 211.276066][ T5726] usb 4-1: SerialNumber: syz [ 211.318892][ T5726] usb 4-1: config 0 descriptor?? [ 211.347719][ T5619] usb 5-1: USB disconnect, device number 8 [ 211.348946][ T5726] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 211.348969][ T5726] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 211.383563][ T5619] em28xx 5-1:0.0: Disconnecting em28xx [ 211.586273][ T8131] loop5: detected capacity change from 0 to 4096 [ 211.623934][ T5619] em28xx: Freeing device [ 211.655035][ T8131] ntfs3(loop5): ino=3, mi_enum_attr [ 211.967110][ T5726] em28xx 4-1:0.0: chip ID is em28178 [ 212.098971][ T8137] loop0: detected capacity change from 0 to 2048 [ 212.149579][ T8137] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 212.153074][ T8137] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 212.153092][ T8137] UDF-fs: Scanning with blocksize 512 failed [ 212.211793][ T8137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.269612][ T33] audit: type=1800 audit(1789199042.956:17): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.874" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 212.366702][ T5726] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.366728][ T5726] em28xx 4-1:0.0: board has no eeprom [ 212.459305][ T5726] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 212.459342][ T5726] em28xx 4-1:0.0: dvb set to bulk mode. [ 212.460049][ T905] em28xx 4-1:0.0: Binding DVB extension [ 212.513447][ T5726] usb 4-1: USB disconnect, device number 8 [ 212.537778][ T5726] em28xx 4-1:0.0: Disconnecting em28xx [ 212.565113][ T8141] profile_transition: unconfined exec no attachment [ 212.816560][ T905] em28xx 4-1:0.0: Registering input extension [ 212.846587][ T8144] profile_transition: unconfined exec no attachment [ 212.954061][ T8133] loop2: detected capacity change from 0 to 32768 [ 212.984204][ T8133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.872 (8133) [ 213.021673][ T8133] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.021700][ T8133] BTRFS info (device loop2): using sha256 checksum algorithm [ 213.141723][ T905] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 213.141740][ T905] Registered IR keymap rc-empty [ 213.240074][ T8133] BTRFS info (device loop2): enabling ssd optimizations [ 213.240095][ T8133] BTRFS info (device loop2): turning on async discard [ 213.240107][ T8133] BTRFS info (device loop2): enabling free space tree [ 213.302101][ T905] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 213.331712][ T8161] loop3: detected capacity change from 0 to 256 [ 213.390714][ T905] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 213.431002][ T8161] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 213.431022][ T8161] FAT-fs (loop3): Filesystem has been set read-only [ 213.540684][ T8165] profile_transition: unconfined exec no attachment [ 213.579398][ T905] em28xx 4-1:0.0: Input extension successfully initialized [ 213.582625][ T5726] em28xx 4-1:0.0: Closing input extension [ 214.225754][ T5625] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.258042][ T8176] loop0: detected capacity change from 0 to 16 [ 214.263809][ T8180] loop3: detected capacity change from 0 to 24 [ 214.264535][ T8180] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 214.365537][ T8180] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 214.421702][ T8176] erofs (device loop0): mounted with root inode @ nid 36. [ 214.867791][ T5726] em28xx: Freeing device [ 215.223037][ T8186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 215.693179][ T8199] sctp: [Deprecated]: syz.4.892 (pid 8199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.693179][ T8199] Use struct sctp_sack_info instead [ 216.038761][ T8182] loop5: detected capacity change from 0 to 32768 [ 216.081048][ T8182] (syz.5.884,8182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.095774][ T8182] (syz.5.884,8182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.113524][ T8182] (syz.5.884,8182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 216.181448][ T8182] JBD2: Ignoring recovery information on journal [ 216.293364][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 216.382544][ T8182] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 216.533701][ T8212] loop4: detected capacity change from 0 to 4096 [ 216.669914][ T8212] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 216.890481][ T8212] ntfs3(loop4): Failed to load $Extend (-22). [ 216.890501][ T8212] ntfs3(loop4): Failed to initialize $Extend. [ 217.098928][ T6637] ocfs2: Unmounting device (7,5) on (node local) [ 217.332689][ T8221] loop2: detected capacity change from 0 to 64 [ 217.371959][ T8221] MINIX-fs: mounting file system with errors, running fsck is recommended [ 217.413864][ T8221] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 217.489019][ T8207] loop3: detected capacity change from 0 to 32768 [ 217.606184][ T33] audit: type=1800 audit(1789199048.286:18): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.897" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 217.950402][ T8228] loop0: detected capacity change from 0 to 128 [ 217.989053][ T8228] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 217.990038][ T8227] loop5: detected capacity change from 0 to 1024 [ 218.034168][ T8228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.543327][ T8262] loop4: detected capacity change from 0 to 2640 [ 219.543884][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.543918][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.543939][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.543960][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.543980][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544017][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544047][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544086][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544098][ T8262] ldm_validate_partition_table(): Disk read failed. [ 219.544118][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544140][ T8262] Buffer I/O error on dev loop4, logical block 0, async page read [ 219.544173][ T8262] Dev loop4: unable to read RDB block 0 [ 219.582112][ T8262] loop4: unable to read partition table [ 219.582237][ T5726] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 219.678010][ T8262] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 219.699408][ T8263] ldm_validate_partition_table(): Disk read failed. [ 219.699465][ T8263] Dev loop4: unable to read RDB block 0 [ 219.699599][ T8263] loop4: unable to read partition table [ 219.753678][ T5726] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 219.755430][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.755458][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.791953][ T5726] usb 3-1: config 0 descriptor?? [ 220.248413][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248457][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248476][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x3 [ 220.248494][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248511][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248529][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248547][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248565][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248583][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248601][ T5726] ryos 0003:1E7D:3232.0005: unknown main item tag 0x0 [ 220.248639][ T5726] ryos 0003:1E7D:3232.0005: item fetching failed at offset 14/44 [ 220.249110][ T5726] ryos 0003:1E7D:3232.0005: parse failed [ 220.249158][ T5726] ryos 0003:1E7D:3232.0005: probe with driver ryos failed with error -22 [ 220.383249][ T8276] loop4: detected capacity change from 0 to 512 [ 220.402951][ T8276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 220.403039][ T8276] System zones: 1-12 [ 220.459720][ T5726] usb 3-1: USB disconnect, device number 10 [ 220.464135][ T8276] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.927: missing EA_INODE flag [ 220.464155][ T8276] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 220.467465][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 220.467501][ C0] EXT4-fs (loop4): initial error at time 1789199051: ext4_xattr_inode_iget:437: inode 12 [ 220.467524][ C0] EXT4-fs (loop4): last error at time 1789199051: ext4_xattr_inode_iget:437: inode 12 [ 220.539678][ T8276] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.927: error while reading EA inode 12 err=-117 [ 220.539705][ T8276] loop4: lost filesystem error report for type 5 error -117 [ 220.560377][ T8276] EXT4-fs (loop4): 1 orphan inode deleted [ 220.588706][ T8276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.776707][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.980855][ T8258] loop0: detected capacity change from 0 to 32768 [ 221.120282][ T12] JFS: metapage_get_blocks failed [ 221.120378][ T12] JFS: metapage_get_blocks failed [ 221.120422][ T12] JFS: metapage_get_blocks failed [ 221.122710][ T123] blkno = 50030, nblocks = 1 [ 221.122724][ T123] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 221.122724][ T123] [ 221.123778][ T123] ERROR: (device loop0): remounting filesystem as read-only [ 221.123804][ T123] blkno = 5002c, nblocks = 4 [ 221.123812][ T123] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 221.123812][ T123] [ 221.124211][ T8258] JFS: metapage_get_blocks failed [ 221.212351][ T8258] read_mapping_page failed! [ 221.212363][ T8258] bread failed! [ 221.212383][ T8258] jfs_lookup: dtSearch returned -5 [ 221.803598][ T8297] netlink: 144 bytes leftover after parsing attributes in process `syz.4.936'. [ 221.825076][ T8297] netlink: 144 bytes leftover after parsing attributes in process `syz.4.936'. [ 221.889920][ T8301] loop3: detected capacity change from 0 to 8 [ 221.980797][ T8301] SQUASHFS error: Failed to read block 0x260685: -5 [ 221.980815][ T8301] SQUASHFS error: Unable to read metadata cache entry [260685] [ 221.980826][ T8301] SQUASHFS error: Unable to read directory block [260685:0] [ 222.887876][ T8309] loop3: detected capacity change from 0 to 131072 [ 222.914350][ T8309] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 222.914373][ T8309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 222.941288][ T8309] F2FS-fs (loop3): invalid crc value [ 223.001161][ T8309] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.029377][ T8309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 223.029396][ T8309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 223.417558][ T5619] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.568921][ T5619] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 223.570989][ T5619] usb 6-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 223.571006][ T5619] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.571018][ T5619] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 223.571044][ T5619] usb 6-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.571061][ T5619] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.571081][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.576018][ T5619] usb 6-1: config 0 descriptor?? [ 223.691818][ T8326] loop4: detected capacity change from 0 to 512 [ 223.723781][ T8326] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.949: bg 0: block 5: invalid block bitmap [ 223.723806][ T8326] loop4: lost filesystem error report for type 5 error -117 [ 223.727460][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 223.727477][ C0] EXT4-fs (loop4): initial error at time 1789199054: ext4_validate_block_bitmap:436 [ 223.727495][ C0] EXT4-fs (loop4): last error at time 1789199054: ext4_validate_block_bitmap:436 [ 223.777859][ T8326] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 223.777888][ T8326] loop4: lost filesystem error report for type 5 error -117 [ 223.787277][ T8326] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.949: invalid indirect mapped block 3 (level 2) [ 223.787302][ T8326] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.812003][ T8326] EXT4-fs (loop4): 1 orphan inode deleted [ 223.812021][ T8326] EXT4-fs (loop4): 1 truncate cleaned up [ 223.845373][ T8326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.889438][ T8317] netlink: 'syz.5.944': attribute type 287 has an invalid length. [ 223.933460][ T5619] usb 6-1: USB disconnect, device number 3 [ 224.026095][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.505470][ T8331] loop2: detected capacity change from 0 to 2048 [ 224.549410][ T8331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.637203][ T8333] loop5: detected capacity change from 0 to 256 [ 225.059001][ T8338] profile_transition: name lookup ix on error [ 225.974490][ T8360] syz_tun: entered promiscuous mode [ 225.995286][ T8360] macvtap1: entered promiscuous mode [ 225.995472][ T8360] macvtap1: entered allmulticast mode [ 225.995483][ T8360] syz_tun: entered allmulticast mode [ 226.024237][ T8360] syz_tun: left allmulticast mode [ 226.024394][ T8360] syz_tun: left promiscuous mode [ 226.348431][ T1013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.349535][ T1013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.349561][ T1013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.349586][ T1013] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.462710][ T8372] nfsd: exp_rootfh path not found ./export_dir [ 226.699998][ T8380] loop4: detected capacity change from 0 to 256 [ 226.700707][ T8380] exfat: Deprecated parameter 'namecase' [ 226.746841][ T8380] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 227.000690][ T8386] loop3: detected capacity change from 0 to 2048 [ 227.042734][ T8386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.138241][ T5619] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 228.185579][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 228.217914][ T8407] ipvlan2: entered allmulticast mode [ 228.217933][ T8407] syz_tun: entered allmulticast mode [ 228.290674][ T5619] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 228.294035][ T5619] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 228.294060][ T5619] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 228.294078][ T5619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.294097][ T5619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 228.294123][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.320792][ T8396] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.320895][ T8396] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.594205][ T54] Bluetooth: hci5: urb ffff888029983400 submission failed (90) [ 228.625651][ T5619] usb 4-1: USB disconnect, device number 9 [ 228.647882][ T8418] loop2: detected capacity change from 0 to 16 [ 228.675700][ T8418] erofs (device loop2): mounted with root inode @ nid 36. [ 229.153936][ T8428] loop4: detected capacity change from 0 to 256 [ 230.055060][ T8441] loop4: detected capacity change from 0 to 4096 [ 230.075504][ T8441] ntfs3(loop4): ino=3, mi_enum_attr [ 230.631752][ T146] IPVS: starting estimator thread 0... [ 230.738867][ T8454] IPVS: using max 39 ests per chain, 93600 per kthread [ 231.522878][ T8469] loop4: detected capacity change from 0 to 256 [ 232.731835][ T8474] loop4: detected capacity change from 0 to 32768 [ 232.800139][ T8474] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 232.855925][ T8491] bonding: no command found in bonding_masters - use +ifname or -ifname [ 232.913086][ T8474] XFS (loop4): Ending clean mount [ 233.161272][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.975570][ T8497] loop3: detected capacity change from 0 to 32768 [ 234.101890][ T8497] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1022 (8497) [ 234.170765][ T8497] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.170793][ T8497] BTRFS info (device loop3): using sha256 checksum algorithm [ 234.325685][ T8518] profile_transition: unconfined exec no attachment [ 234.377975][ T8497] BTRFS info (device loop3): enabling ssd optimizations [ 234.377996][ T8497] BTRFS info (device loop3): turning on async discard [ 234.378008][ T8497] BTRFS info (device loop3): enabling free space tree [ 234.717973][ T5726] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.747263][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.878254][ T5726] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 234.886812][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.886831][ T5726] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 234.928101][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.928122][ T5726] usb 3-1: Product: syz [ 234.928133][ T5726] usb 3-1: Manufacturer: syz [ 234.928143][ T5726] usb 3-1: SerialNumber: syz [ 235.054616][ T8529] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 235.212702][ T5846] usb 3-1: USB disconnect, device number 11 [ 235.794110][ T8541] loop4: detected capacity change from 0 to 256 [ 235.841280][ T8541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8948a13b, utbl_chksum : 0xe619d30d) [ 235.961188][ T8543] loop3: detected capacity change from 0 to 1024 [ 235.962035][ T8543] EXT4-fs: Ignoring removed orlov option [ 236.026149][ T8543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.230856][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.452489][ T8557] loop3: detected capacity change from 0 to 512 [ 236.507169][ T8557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.507247][ T8557] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.651606][ T8557] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 3: comm syz.3.1041: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 236.712946][ T8563] profile_transition: unconfined exec no attachment [ 236.923573][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.406439][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.423527][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.433388][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.445260][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.446702][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.568494][ T8584] profile_transition: unconfined exec no attachment [ 237.741740][ T8589] profile_transition: unconfined exec no attachment [ 237.784139][ T8592] loop2: detected capacity change from 0 to 256 [ 237.807823][ T5726] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.924192][ T8593] profile_transition: unconfined exec no attachment [ 237.957482][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 237.959529][ T5726] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.960700][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 237.960738][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.019844][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.019865][ T5726] usb 6-1: Product: syz [ 238.019876][ T5726] usb 6-1: Manufacturer: syz [ 238.019893][ T5726] usb 6-1: SerialNumber: syz [ 238.086908][ T5726] usb 6-1: config 0 descriptor?? [ 238.105184][ T5726] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.105213][ T5726] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 238.218339][ T8597] profile_transition: unconfined exec no attachment [ 238.238473][ T8595] loop3: detected capacity change from 0 to 128 [ 238.284112][ T8595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 238.284205][ T8595] System zones: 1-3, 19-19, 35-36 [ 238.316778][ T8595] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.335010][ T8595] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.409616][ T8601] loop2: detected capacity change from 0 to 512 [ 238.521326][ T8602] profile_transition: unconfined exec no attachment [ 238.601788][ T5616] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.755718][ T8605] profile_transition: unconfined exec no attachment [ 238.854611][ T5726] em28xx 6-1:0.0: unknown em28xx chip ID (255) [ 238.954526][ T8609] profile_transition: unconfined exec no attachment [ 239.055898][ T5726] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 239.058154][ T5726] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 239.058170][ T5726] em28xx 6-1:0.0: No AC97 audio processor [ 239.098048][ T5726] usb 6-1: USB disconnect, device number 4 [ 239.104991][ T5726] em28xx 6-1:0.0: Disconnecting em28xx [ 239.128099][ T5726] em28xx: Freeing device [ 239.182603][ T8614] profile_transition: unconfined exec no attachment [ 239.597900][ T54] Bluetooth: hci5: command tx timeout [ 239.682484][ T5619] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.773717][ T8624] profile_transition: unconfined exec no attachment [ 239.848837][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 239.849311][ T5619] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 239.850188][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.852858][ T5619] usb 4-1: config 0 descriptor?? [ 240.063877][ T8628] profile_transition: unconfined exec no attachment [ 240.098732][ T5619] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 240.101214][ T8610] loop2: detected capacity change from 0 to 32768 [ 240.220209][ T5619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.226664][ T5619] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 240.226698][ T5619] usb 4-1: media controller created [ 240.274288][ T8610] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 240.338415][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.439133][ T8640] profile_transition: unconfined exec no attachment [ 240.441999][ T5619] az6027: usb out operation failed. (-71) [ 240.444156][ T8610] XFS (loop2): Ending clean mount [ 240.444640][ T5619] az6027: usb out operation failed. (-71) [ 240.444651][ T5619] stb0899_attach: Driver disabled by Kconfig [ 240.444659][ T5619] az6027: no front-end attached [ 240.444659][ T5619] [ 240.466091][ T5619] az6027: usb out operation failed. (-71) [ 240.466105][ T5619] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 240.514302][ T5619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 240.540309][ T5619] dvb-usb: schedule remote query interval to 400 msecs. [ 240.540328][ T5619] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 240.587673][ T5619] usb 4-1: USB disconnect, device number 10 [ 240.824921][ T5625] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 241.102978][ T5619] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 241.291688][ T8649] loop3: detected capacity change from 0 to 1024 [ 241.346512][ T8649] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 241.346585][ T8649] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 241.346600][ T8649] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1075: Failed to acquire dquot type 0 [ 241.346617][ T8649] loop3: lost filesystem error report for type 5 error -5 [ 241.347467][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 241.347483][ C0] EXT4-fs (loop3): initial error at time 1789199072: ext4_acquire_dquot:7069 [ 241.347505][ C0] EXT4-fs (loop3): last error at time 1789199072: ext4_acquire_dquot:7069 [ 241.444903][ T8646] bonding: unable to delete non-existent b [ 241.502079][ T8649] EXT4-fs (loop3): 1 truncate cleaned up [ 241.542909][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.640953][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.641026][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.641120][ T8578] bridge_slave_0: entered allmulticast mode [ 241.644998][ T8649] EXT4-fs (loop3): shut down requested (2) [ 241.678105][ T54] Bluetooth: hci5: command tx timeout [ 241.685589][ T8578] bridge_slave_0: entered promiscuous mode [ 241.710946][ T8653] loop5: detected capacity change from 0 to 4096 [ 241.712924][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.713002][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.713130][ T8578] bridge_slave_1: entered allmulticast mode [ 241.750897][ T8578] bridge_slave_1: entered promiscuous mode [ 241.787329][ T8653] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 241.875552][ T8653] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 241.894862][ T8653] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 242.020530][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.076657][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.118324][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.370757][ T8578] team0: Port device team_slave_0 added [ 242.386583][ T8578] team0: Port device team_slave_1 added [ 242.516049][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.516064][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.516085][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.575066][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.575080][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.575101][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.999654][ T8578] hsr_slave_0: entered promiscuous mode [ 243.003452][ T8578] hsr_slave_1: entered promiscuous mode [ 243.020838][ T8578] debugfs: 'hsr0' already exists in 'hsr' [ 243.020855][ T8578] Cannot create hsr debugfs directory [ 243.758227][ T54] Bluetooth: hci5: command tx timeout [ 244.443027][ T8685] loop5: detected capacity change from 0 to 32768 [ 244.525407][ T146] JFS: metapage_get_blocks failed [ 244.525504][ T146] JFS: metapage_get_blocks failed [ 244.525547][ T146] JFS: metapage_get_blocks failed [ 244.526753][ T123] blkno = 50030, nblocks = 1 [ 244.526763][ T123] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 244.526763][ T123] [ 244.545410][ T123] ERROR: (device loop5): remounting filesystem as read-only [ 244.545443][ T123] blkno = 5002c, nblocks = 4 [ 244.545451][ T123] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 244.545451][ T123] [ 244.664047][ T8578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.713926][ T8578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.738693][ T8578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.766414][ T6637] JFS: metapage_get_blocks failed [ 244.766573][ T6637] JFS: metapage_get_blocks failed [ 244.845472][ T8578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.846350][ T8578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.866151][ T8688] loop2: detected capacity change from 0 to 32768 [ 244.905543][ T8578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.925402][ T8578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.955668][ T8701] loop4: detected capacity change from 0 to 256 [ 244.956876][ T8578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.982709][ T8688] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.084387][ T8688] XFS (loop2): Ending clean mount [ 245.321408][ T5625] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.373278][ T8717] profile_transition: unconfined exec no attachment [ 245.617897][ T8695] loop3: detected capacity change from 0 to 32768 [ 245.682647][ T8695] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.711339][ T8578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.797269][ T8695] XFS (loop3): Ending clean mount [ 245.839439][ T54] Bluetooth: hci5: command tx timeout [ 245.903247][ T8578] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.945905][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.945987][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.035161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.035243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.368040][ T5616] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.482945][ T8734] profile_transition: unconfined exec no attachment [ 246.716649][ T8741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.750438][ T8743] profile_transition: unconfined exec no attachment [ 247.000765][ T8745] profile_transition: unconfined exec no attachment [ 247.254825][ T8754] profile_transition: unconfined exec no attachment [ 247.484733][ T8757] profile_transition: unconfined exec no attachment [ 247.617248][ T8759] tipc: Started in network mode [ 247.617276][ T8759] tipc: Node identity ac14140f, cluster identity 4711 [ 247.618748][ T8759] tipc: New replicast peer: 255.255.255.255 [ 247.619208][ T8759] tipc: Enabled bearer , priority 10 [ 247.700790][ T8764] profile_transition: unconfined exec no attachment [ 247.901078][ T8766] profile_transition: unconfined exec no attachment [ 248.096287][ T8771] profile_transition: unconfined exec no attachment [ 248.262109][ T8772] profile_transition: unconfined exec no attachment [ 248.501803][ T8752] loop2: detected capacity change from 0 to 32768 [ 248.576859][ T8750] loop4: detected capacity change from 0 to 32768 [ 248.598595][ T8752] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 248.598595][ T8752] [ 248.599788][ T8752] ERROR: (device loop2): remounting filesystem as read-only [ 248.599802][ T8752] ialloc: diAlloc returned -5! [ 248.672178][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.672894][ T8750] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 248.741553][ T5619] tipc: Node number set to 2886997007 [ 248.788345][ T8750] XFS (loop4): Ending clean mount [ 248.997292][ T8750] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.405942][ T8768] loop3: detected capacity change from 0 to 32768 [ 249.492450][ T8768] JBD2: Ignoring recovery information on journal [ 249.541508][ T8794] loop2: detected capacity change from 0 to 512 [ 249.736465][ T8768] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 250.440838][ T8578] veth0_vlan: entered promiscuous mode [ 250.462296][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 250.466214][ T8807] loop2: detected capacity change from 0 to 256 [ 250.500120][ T8807] exfat: Deprecated parameter 'utf8' [ 250.500197][ T8807] exfat: Deprecated parameter 'namecase' [ 250.500237][ T8807] exfat: Deprecated parameter 'namecase' [ 250.536610][ T8578] veth1_vlan: entered promiscuous mode [ 250.566114][ T8807] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 250.665108][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 250.741154][ T8578] veth0_macvtap: entered promiscuous mode [ 250.780320][ T8578] veth1_macvtap: entered promiscuous mode [ 250.903834][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.965810][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.011233][ T8812] cgroup: fork rejected by pids controller in /syz5 [ 251.078512][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.078546][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.078571][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.078595][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.551058][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.551074][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.665035][ T8820] program syz.3.1123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.989041][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.989057][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.356804][ T8829] input: syz0 as /devices/virtual/input/input23 [ 252.581578][ T8815] loop2: detected capacity change from 0 to 32768 [ 252.640820][ T8815] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 252.640820][ T8815] [ 252.676725][ T8815] ERROR: (device loop2): remounting filesystem as read-only [ 252.676757][ T8815] ialloc: diAlloc returned -5! [ 252.705556][ T8815] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 252.705556][ T8815] [ 252.775451][ T146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.775479][ T146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.045266][ T8831] profile_transition: 7 callbacks suppressed [ 253.045284][ T8831] profile_transition: unconfined exec no attachment [ 253.121137][ T146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.121170][ T146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.639897][ T146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.639926][ T146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.777387][ T8843] program syz.4.1137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.848671][ T146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.848701][ T146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.945667][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.957202][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.966875][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.975128][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.977390][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.095068][ T8846] profile_transition: unconfined exec no attachment [ 254.299846][ T8853] profile_transition: unconfined exec no attachment [ 254.645902][ T8861] profile_transition: unconfined exec no attachment [ 254.887137][ T8864] profile_transition: unconfined exec no attachment [ 254.983091][ T8867] profile_transition: unconfined exec no attachment [ 255.179432][ T8868] profile_transition: unconfined exec no attachment [ 255.241390][ T8869] profile_transition: unconfined exec no attachment [ 255.276714][ T146] bridge_slave_1: left allmulticast mode [ 255.276735][ T146] bridge_slave_1: left promiscuous mode [ 255.276932][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.348427][ T146] bridge_slave_0: left allmulticast mode [ 255.348600][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.484387][ T8872] profile_transition: unconfined exec no attachment [ 255.724857][ T8877] profile_transition: unconfined exec no attachment [ 255.761837][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761892][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.079363][ T5626] Bluetooth: hci4: command tx timeout [ 256.334640][ T8860] loop6: detected capacity change from 0 to 32768 [ 256.494363][ T8860] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.560704][ T905] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 256.625418][ T8860] XFS (loop6): Ending clean mount [ 256.707659][ T905] usb 5-1: Using ep0 maxpacket: 8 [ 256.713699][ T905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.728464][ T905] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 256.728855][ T905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.728872][ T905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.728891][ T905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.728908][ T905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.728945][ T905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.828838][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.880555][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.906761][ T146] bond0 (unregistering): Released all slaves [ 257.010124][ T8578] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 257.123956][ T905] usb 5-1: GET_CAPABILITIES returned 0 [ 257.123993][ T905] usbtmc 5-1:16.0: can't read capabilities [ 257.571518][ T10] usb 5-1: USB disconnect, device number 9 [ 258.018341][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 258.157603][ T5626] Bluetooth: hci4: command tx timeout [ 258.442574][ T8919] profile_transition: 8 callbacks suppressed [ 258.442590][ T8919] profile_transition: unconfined exec no attachment [ 258.585301][ T8912] loop3: detected capacity change from 0 to 32768 [ 258.733868][ T8912] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 258.761255][ T146] hsr_slave_0: left promiscuous mode [ 258.777148][ T8930] profile_transition: unconfined exec no attachment [ 258.782744][ T146] hsr_slave_1: left promiscuous mode [ 258.827711][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.827731][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.861732][ T8912] XFS (loop3): Ending clean mount [ 258.906798][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.906816][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.039726][ T146] veth0_macvtap: left promiscuous mode [ 259.039850][ T146] veth1_vlan: left promiscuous mode [ 259.039899][ T146] veth0_vlan: left promiscuous mode [ 259.125672][ T5616] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 259.297009][ T8937] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1161'. [ 259.311411][ T8939] profile_transition: unconfined exec no attachment [ 259.760608][ T8949] profile_transition: unconfined exec no attachment [ 260.109463][ T8954] kAFS: bad VL server IP address [ 260.109599][ T8955] program syz.6.1168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.236103][ T8960] profile_transition: unconfined exec no attachment [ 260.242595][ T5626] Bluetooth: hci4: command tx timeout [ 260.513394][ T8964] profile_transition: unconfined exec no attachment [ 260.635507][ T8968] profile_transition: unconfined exec no attachment [ 260.730753][ T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 260.882184][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 260.887042][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.887068][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.887096][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.949620][ T9] usb 4-1: config 0 descriptor?? [ 260.953628][ T8972] profile_transition: unconfined exec no attachment [ 260.992414][ T8973] loop2: detected capacity change from 0 to 512 [ 261.098017][ T8973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.098098][ T8973] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.336036][ T8979] profile_transition: unconfined exec no attachment [ 261.399022][ T146] team0 (unregistering): Port device team_slave_1 removed [ 261.523262][ T146] team0 (unregistering): Port device team_slave_0 removed [ 261.580306][ T9] aquacomputer_d5next 0003:0C70:F0B6.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 261.666500][ T8984] profile_transition: unconfined exec no attachment [ 261.856316][ T9] usb 4-1: USB disconnect, device number 11 [ 261.979581][ T8984] fido_id[8984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 262.023263][ T8987] loop6: detected capacity change from 0 to 2048 [ 262.074588][ T8987] NILFS (loop6): invalid segment: Magic number mismatch [ 262.074610][ T8987] NILFS (loop6): trying rollback from an earlier position [ 262.164484][ T8987] NILFS (loop6): recovery complete [ 262.181336][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.183329][ T8989] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.286842][ T8987] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 262.318354][ T5626] Bluetooth: hci4: command tx timeout [ 262.874617][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.573075][ T9011] profile_transition: 2 callbacks suppressed [ 263.573118][ T9011] profile_transition: unconfined exec no attachment [ 263.612771][ T146] IPVS: stop unused estimator thread 0... [ 263.810338][ T9020] profile_transition: unconfined exec no attachment [ 263.876181][ T8991] loop4: detected capacity change from 0 to 32768 [ 264.014806][ T9021] profile_transition: unconfined exec no attachment [ 264.175219][ T8991] blkno = 8ed2c, nblocks = 1 [ 264.175237][ T8991] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 264.175237][ T8991] [ 264.175467][ T8991] ERROR: (device loop4): remounting filesystem as read-only [ 264.175478][ T8991] ialloc: diAlloc returned -17! [ 264.322298][ T9029] profile_transition: unconfined exec no attachment [ 264.333758][ T9025] loop6: detected capacity change from 0 to 1024 [ 264.358735][ T9025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.376925][ T9025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.393697][ T9032] profile_transition: unconfined exec no attachment [ 264.404642][ T9025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 264.404724][ T9025] System zones: 0-1, 3-36 [ 264.449052][ T9025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.888207][ T9038] profile_transition: unconfined exec no attachment [ 264.986483][ T8578] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.220649][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.220722][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.220843][ T8844] bridge_slave_0: entered allmulticast mode [ 265.253119][ T8844] bridge_slave_0: entered promiscuous mode [ 265.276117][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.276188][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.276282][ T8844] bridge_slave_1: entered allmulticast mode [ 265.310398][ T8844] bridge_slave_1: entered promiscuous mode [ 265.346824][ T9047] profile_transition: unconfined exec no attachment [ 265.510477][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.552585][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.633980][ T9052] profile_transition: unconfined exec no attachment [ 265.740805][ T8844] team0: Port device team_slave_0 added [ 265.772435][ T8844] team0: Port device team_slave_1 added [ 265.898991][ T9060] profile_transition: unconfined exec no attachment [ 265.943579][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.943593][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.943611][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.066592][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1201'. [ 266.068307][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.068319][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.068338][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.288307][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 266.415723][ T8844] hsr_slave_0: entered promiscuous mode [ 266.424424][ T8844] hsr_slave_1: entered promiscuous mode [ 266.435713][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 266.461745][ T9068] loop4: detected capacity change from 0 to 8 [ 266.499456][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 266.499494][ T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 266.500201][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 266.500224][ T9] usb 3-1: can't read configurations, error -71 [ 266.543959][ T9068] squashfs image failed sanity check Ý$Æšg¢ºJu—ôpcÚË]ᔺX" ^æNÖOý©a*Ââ¦/�H ýlˆ´Ì2„<â6x7Ê1X=ÁSšln¯à¯&*i'¨¥‚‚·¦‘{8cÁö@p²Uèð„ÜN’)Æ='¨Š(À@�B‚R«8G¿^OõF)‹éòrmÏÑ„)ôÆbð’‹eš��Üš?�Ô\Ó½¼í =ǯÐ.™96ýä°–Rèí�t†~·®V]Rœ¡íؤ0�2 PÙç[ 266.749372][ T9072] profile_transition: unconfined exec no attachment [ 267.483940][ T9087] ipvlan2: entered promiscuous mode [ 268.237078][ T9107] loop6: detected capacity change from 0 to 4096 [ 268.324288][ T9110] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.634812][ T9114] profile_transition: 5 callbacks suppressed [ 268.634828][ T9114] profile_transition: unconfined exec no attachment [ 268.901643][ T9122] profile_transition: unconfined exec no attachment [ 269.316156][ T9131] profile_transition: unconfined exec no attachment [ 269.390786][ T9133] profile_transition: unconfined exec no attachment [ 269.610292][ T9136] profile_transition: unconfined exec no attachment [ 269.656169][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 269.946505][ T9144] loop4: detected capacity change from 0 to 128 [ 270.006753][ T9144] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 270.006793][ T9144] hpfs: filesystem error: improperly stopped [ 270.006804][ T9144] hpfs: You really don't want any checks? You are crazy... [ 270.042359][ T9144] hpfs: hpfs_map_sector(): read error [ 270.042373][ T9144] hpfs: code page support is disabled [ 270.046124][ T9144] hpfs: hpfs_map_4sectors(): unaligned read [ 270.046184][ T9144] hpfs: hpfs_map_4sectors(): unaligned read [ 270.046192][ T9144] hpfs: filesystem error: unable to find root dir [ 270.100473][ T9147] profile_transition: unconfined exec no attachment [ 270.124609][ T9144] hpfs: hpfs_map_4sectors(): unaligned read [ 270.482242][ T9155] profile_transition: unconfined exec no attachment [ 270.928185][ T9168] profile_transition: unconfined exec no attachment [ 271.371461][ T9175] profile_transition: unconfined exec no attachment [ 271.515525][ T8844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.560483][ T8844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.564346][ T8844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.636326][ T8844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.656079][ T8844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.688401][ T8844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.693801][ T8844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.739410][ T9180] profile_transition: unconfined exec no attachment [ 271.743383][ T8844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.491080][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.565746][ T9161] loop2: detected capacity change from 0 to 32768 [ 272.621752][ T9161] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 272.625826][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.768515][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.768591][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.809186][ T9161] XFS (loop2): Ending clean mount [ 272.903453][ T9161] XFS (loop2): Quotacheck needed: Please wait. [ 273.436588][ T9161] XFS (loop2): Quotacheck: Done. [ 273.506564][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.506642][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.783053][ T9223] profile_transition: 5 callbacks suppressed [ 273.783071][ T9223] profile_transition: unconfined exec no attachment [ 273.857644][ T5617] jfs_flush_journal: synclist not empty [ 273.857663][ T5617] metapage: ffff88805c7a99b0: 00001000 00000000 00003b90 00000000 [ 273.857680][ T5617] metapage: ffff88805c7a99c0: 251f0220 ffff8880 251f0220 ffff8880 [ 273.857695][ T5617] metapage: ffff88805c7a99d0: 00000004 00000000 00000000 00000000 [ 273.857710][ T5617] metapage: ffff88805c7a99e0: 73e28000 ffff8880 00050030 00000000 [ 273.857724][ T5617] metapage: ffff88805c7a99f0: 00000000 dead4ead ffffffff 00000000 [ 273.857739][ T5617] metapage: ffff88805c7a9a00: ffffffff ffffffff 9ab6ea40 ffffffff [ 273.857753][ T5617] metapage: ffff88805c7a9a10: 9446ed78 ffffffff 00000000 00000000 [ 273.857768][ T5617] metapage: ffff88805c7a9a20: 8c4e05a0 ffffffff 00000300 00000000 [ 273.857783][ T5617] metapage: ffff88805c7a9a30: 5c7a9a30 ffff8880 5c7a9a30 ffff8880 [ 273.857797][ T5617] metapage: ffff88805c7a9a40: 01cf8a00 ffffea00 79e0a000 ffff8880 [ 273.857811][ T5617] metapage: ffff88805c7a9a50: 00001000 0000410c 00000000 00000000 [ 273.857824][ T5617] metapage: ffff88805c7a9a60: 251f0000 ffff8880 [ 273.857837][ T5617] page: ffffea0001cf8a00: 00fff6000000402c ffffea0000a237c8 [ 273.857850][ T5617] page: ffffea0001cf8a10: ffff8880563b4938 0000000000000000 [ 273.857862][ T5617] page: ffffea0001cf8a20: 0000000000050030 ffff88805c7a99b0 [ 273.857875][ T5617] page: ffffea0001cf8a30: 00000001ffffffff ffff88801d334a00 [ 273.863077][ T9227] profile_transition: unconfined exec no attachment [ 274.042989][ T5617] read_mapping_page failed! [ 274.043002][ T5617] diWriteSpecial: failed to read aggregate inode extent! [ 274.072241][ T5617] read_mapping_page failed! [ 274.072252][ T5617] diWriteSpecial: failed to read aggregate inode extent! [ 274.152251][ T5625] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 274.279639][ T9231] profile_transition: unconfined exec no attachment [ 274.355656][ T9232] profile_transition: unconfined exec no attachment [ 274.660791][ T9238] profile_transition: unconfined exec no attachment [ 274.712973][ T9240] profile_transition: unconfined exec no attachment [ 274.787932][ T5619] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 274.912922][ T9243] profile_transition: unconfined exec no attachment [ 274.941014][ T5619] usb 7-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 274.942242][ T5619] usb 7-1: config 0 has no interfaces? [ 274.942269][ T5619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.988693][ T5619] usb 7-1: config 0 descriptor?? [ 275.030450][ T9244] profile_transition: unconfined exec no attachment [ 275.234484][ T9249] profile_transition: unconfined exec no attachment [ 275.247248][ T9235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.247712][ T9235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.291769][ T5619] usb 7-1: USB disconnect, device number 2 [ 275.386356][ T9252] profile_transition: unconfined exec no attachment [ 275.769704][ T5619] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 275.920592][ T5619] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 275.922901][ T5619] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.922935][ T5619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.964136][ T5619] hub 7-1:1.0: bad descriptor, ignoring hub [ 275.964158][ T5619] hub 7-1:1.0: probe with driver hub failed with error -5 [ 276.012395][ T5619] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 276.318824][ T5619] usb 7-1: USB disconnect, device number 3 [ 276.383128][ T5619] idmouse 7-1:1.0: disconnected [ 276.591643][ T9274] loop3: detected capacity change from 0 to 8192 [ 276.737340][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.823524][ T9284] loop4: detected capacity change from 0 to 256 [ 276.864591][ T9284] exFAT-fs (loop4): error, no upcase table entry. Please run fsck [ 276.864609][ T9284] exFAT-fs (loop4): Filesystem has been set read-only [ 276.864840][ T9284] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 277.514879][ T9295] loop2: detected capacity change from 0 to 512 [ 277.568520][ T9295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 277.607263][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 277.607288][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 277.641828][ T9295] EXT4-fs (loop2): 1 orphan inode deleted [ 277.666328][ T9295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 277.723895][ T9298] loop6: detected capacity change from 0 to 2048 [ 277.763585][ T9298] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 277.766301][ T9298] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 277.766319][ T9298] UDF-fs: Scanning with blocksize 512 failed [ 277.887731][ T9298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.909428][ T9295] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 277.909552][ T9295] ext4 filesystem being remounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.502494][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.792414][ T8844] veth0_vlan: entered promiscuous mode [ 278.860702][ T8844] veth1_vlan: entered promiscuous mode [ 279.047998][ T8844] veth0_macvtap: entered promiscuous mode [ 279.073161][ T8844] veth1_macvtap: entered promiscuous mode [ 279.110272][ T9328] profile_transition: 20 callbacks suppressed [ 279.110290][ T9328] profile_transition: unconfined exec no attachment [ 279.191486][ T9327] i2c i2c-0: new_device: Can't parse I2C address [ 279.229216][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.281341][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.418727][ T1177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.421200][ T1013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.421235][ T1013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.421261][ T1013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.648315][ T9336] profile_transition: unconfined exec no attachment [ 279.997018][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.997037][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.026154][ T9335] loop3: detected capacity change from 0 to 4096 [ 280.048093][ T9341] profile_transition: unconfined exec no attachment [ 280.226388][ T9335] ntfs3(loop3): Failed to load $Extend (-22). [ 280.226408][ T9335] ntfs3(loop3): Failed to initialize $Extend. [ 280.414952][ T9335] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 280.414977][ T9335] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 280.443254][ T9344] profile_transition: unconfined exec no attachment [ 280.464698][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.464715][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.680368][ T9319] loop2: detected capacity change from 0 to 32768 [ 280.704125][ T9319] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1271 (9319) [ 280.778400][ T9319] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 280.778427][ T9319] BTRFS info (device loop2): using blake2b checksum algorithm [ 280.964656][ T9354] profile_transition: unconfined exec no attachment [ 281.080202][ T9364] loop4: detected capacity change from 0 to 128 [ 281.126018][ T9319] BTRFS info (device loop2): enabling ssd optimizations [ 281.126052][ T9319] BTRFS info (device loop2): turning on async discard [ 281.126064][ T9319] BTRFS info (device loop2): enabling free space tree [ 281.126078][ T9319] BTRFS info (device loop2): use zstd compression, level 3 [ 281.189371][ T9364] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.196736][ T9364] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.395971][ T9371] profile_transition: unconfined exec no attachment [ 281.522499][ T5625] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 281.619769][ T9377] profile_transition: unconfined exec no attachment [ 281.723726][ T5618] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.048280][ T9387] profile_transition: unconfined exec no attachment [ 282.552466][ T9394] profile_transition: unconfined exec no attachment [ 283.021735][ T9403] profile_transition: unconfined exec no attachment [ 284.438316][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1299'. [ 285.105205][ T9446] loop3: detected capacity change from 0 to 512 [ 285.143995][ T9446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1307: bg 0: block 5: invalid block bitmap [ 285.144024][ T9446] loop3: lost filesystem error report for type 5 error -117 [ 285.147994][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 285.148013][ C0] EXT4-fs (loop3): initial error at time 1789199115: ext4_validate_block_bitmap:436 [ 285.148031][ C0] EXT4-fs (loop3): last error at time 1789199115: ext4_validate_block_bitmap:436 [ 285.208627][ T9446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 285.208650][ T9446] loop3: lost filesystem error report for type 5 error -117 [ 285.210200][ T9446] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1307: invalid indirect mapped block 3 (level 2) [ 285.210228][ T9446] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 285.211161][ T9446] EXT4-fs (loop3): 1 orphan inode deleted [ 285.211177][ T9446] EXT4-fs (loop3): 1 truncate cleaned up [ 285.253756][ T9446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.555737][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.162058][ T9481] loop5: detected capacity change from 0 to 1024 [ 287.181075][ T9481] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 287.236951][ T9483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1323'. [ 287.330657][ T9481] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.1322: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.330688][ T9481] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.330861][ T9481] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 287.330890][ T9481] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.1322: lblock 0 mapped to illegal pblock 48 (length 1) [ 287.330912][ T9481] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.331067][ T9481] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 287.331081][ T9481] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1322: Failed to acquire dquot type 0 [ 287.331096][ T9481] loop5: lost filesystem error report for type 5 error -117 [ 287.331439][ T9481] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 287.331455][ T9481] loop5: lost filesystem error report for type 5 error -117 [ 287.333372][ T9481] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.1322: mark_inode_dirty error [ 287.333393][ T9481] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.336714][ T9481] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 287.336785][ T9481] EXT4-fs (loop5): 1 orphan inode deleted [ 287.432333][ T1177] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.432362][ T1177] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.553826][ T1177] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 287.553937][ T1177] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 287.553955][ T1177] loop5: lost filesystem error report for type 5 error -117 [ 287.591316][ T9481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.735380][ T9481] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.1322: Invalid inode table block 1 in block_group 0 [ 287.815352][ T9490] loop4: detected capacity change from 0 to 512 [ 287.836950][ T9481] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 287.857294][ T9481] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #2: comm syz.5.1322: mark_inode_dirty error [ 287.890893][ T9490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.957069][ T9490] profile_transition: name lookup ix on error [ 288.045987][ T8844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.065118][ T8844] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 288.065144][ T8844] loop5: lost filesystem error report for type 5 error -117 [ 288.161764][ T8844] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 288.161935][ T8844] loop5: lost filesystem error report for type 5 error -117 [ 288.166410][ T8844] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 288.166434][ T8844] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 288.222026][ T8844] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 288.222052][ T8844] loop5: lost filesystem error report for type 5 error -117 [ 288.402784][ T9503] loop6: detected capacity change from 0 to 256 [ 288.773317][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.933560][ T9513] loop5: detected capacity change from 0 to 512 [ 288.954459][ T9513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 289.000889][ T9513] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1335: bad orphan inode 131083 [ 289.000915][ T9513] loop5: lost filesystem error report for type 5 error -117 [ 289.030370][ T9513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.286728][ T8844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.562445][ T9527] loop4: detected capacity change from 0 to 1764 [ 289.940583][ T9539] loop6: detected capacity change from 0 to 256 [ 290.324413][ T9548] netlink: 'syz.5.1351': attribute type 3 has an invalid length. [ 290.408755][ T9554] loop6: detected capacity change from 0 to 164 [ 290.987254][ T9570] loop4: detected capacity change from 0 to 512 [ 291.532408][ T9586] loop4: detected capacity change from 0 to 512 [ 291.533224][ T9586] EXT4-fs: Ignoring removed bh option [ 291.609096][ T9586] EXT4-fs (loop4): 1 truncate cleaned up [ 291.616486][ T9586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.710420][ T9589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.901575][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.269477][ T9602] loop2: detected capacity change from 0 to 512 [ 292.369547][ T9602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.369639][ T9602] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.459691][ T9602] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 292.599813][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.865525][ T9619] loop3: detected capacity change from 0 to 256 [ 292.866195][ T9619] exfat: Deprecated parameter 'utf8' [ 292.866210][ T9619] exfat: Deprecated parameter 'utf8' [ 292.866259][ T9619] exfat: Deprecated parameter 'utf8' [ 292.953073][ T9619] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 293.420407][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'. [ 293.420425][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1386'. [ 293.466437][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 293.524556][ T5619] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 293.677966][ T5619] usb 5-1: Using ep0 maxpacket: 8 [ 293.682337][ T5619] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.692973][ T5619] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.692995][ T5619] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.693012][ T5619] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.693029][ T5619] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.693058][ T5619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.992115][ T9641] loop5: detected capacity change from 0 to 4096 [ 294.027893][ T9641] ntfs3(loop5): Failed to load $MFT (-22). [ 294.761336][ T9639] loop3: detected capacity change from 0 to 32768 [ 294.832707][ T9639] JBD2: Ignoring recovery information on journal [ 294.952648][ T9639] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.434422][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 295.467104][ T9663] loop5: detected capacity change from 0 to 128 [ 295.477518][ T9661] loop2: detected capacity change from 0 to 1024 [ 295.485375][ T9663] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 295.485410][ T9663] hpfs: filesystem error: improperly stopped [ 295.485420][ T9663] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 295.485429][ T9663] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 295.485447][ T9663] hpfs: You really don't want any checks? You are crazy... [ 295.486006][ T9661] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 295.566146][ T9663] hpfs: hpfs_map_sector(): read error [ 295.566159][ T9663] hpfs: code page support is disabled [ 295.566551][ T9663] hpfs: hpfs_map_4sectors(): unaligned read [ 295.566600][ T9663] hpfs: hpfs_map_4sectors(): unaligned read [ 295.566608][ T9663] hpfs: filesystem error: unable to find root dir [ 295.616247][ T9661] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.1399: lblock 2 mapped to illegal pblock 2 (length 1) [ 295.616276][ T9661] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 295.617427][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 295.617442][ C0] EXT4-fs (loop2): initial error at time 1789199126: ext4_map_blocks:790: inode 3: block 2 [ 295.617469][ C0] EXT4-fs (loop2): last error at time 1789199126: ext4_map_blocks:790: inode 3: block 2 [ 295.679726][ T9661] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 295.679770][ T9661] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.1399: lblock 0 mapped to illegal pblock 48 (length 1) [ 295.679795][ T9661] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 295.684431][ T9661] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 295.684450][ T9661] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1399: Failed to acquire dquot type 0 [ 295.684468][ T9661] loop2: lost filesystem error report for type 5 error -117 [ 295.712258][ T9661] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 295.712280][ T9661] loop2: lost filesystem error report for type 5 error -117 [ 295.772539][ T9661] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.1399: mark_inode_dirty error [ 295.772567][ T9661] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.803132][ T9661] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 295.803223][ T9661] EXT4-fs (loop2): 1 orphan inode deleted [ 295.804570][ T9661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.851211][ T1177] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 295.851239][ T1177] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 295.935105][ T1177] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 295.935144][ T1177] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 295.994097][ T9661] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.1399: Invalid inode table block 1 in block_group 0 [ 295.994642][ T9661] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 295.994886][ T9661] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.1399: mark_inode_dirty error [ 296.193369][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.215294][ T5625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 296.215319][ T5625] loop2: lost filesystem error report for type 5 error -117 [ 296.232381][ T5625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 296.232400][ T5625] loop2: lost filesystem error report for type 5 error -117 [ 296.243330][ T5625] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 296.243351][ T5625] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 296.276372][ T5625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 296.276399][ T5625] loop2: lost filesystem error report for type 5 error -117 [ 296.475058][ T5619] usb 5-1: USB disconnect, device number 10 [ 296.571780][ T9650] loop6: detected capacity change from 0 to 32768 [ 296.651071][ T9650] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 296.754286][ T9650] XFS (loop6): Ending clean mount [ 296.962965][ T9681] loop3: detected capacity change from 0 to 4096 [ 297.028519][ T8578] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 297.061951][ T9681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.395825][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.116349][ T9667] loop5: detected capacity change from 0 to 40427 [ 298.167761][ T9667] F2FS-fs (loop5): build fault injection rate: 14 [ 298.167780][ T9667] F2FS-fs (loop5): build fault injection type: 0x30e4 [ 298.174589][ T9667] F2FS-fs (loop5): invalid crc value [ 298.176594][ T9669] loop2: detected capacity change from 0 to 32768 [ 298.271416][ T9667] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 298.362216][ T9669] read_mapping_page failed! [ 298.362236][ T9669] ERROR: (device loop2): txCommit: [ 298.362236][ T9669] [ 298.611647][ T9704] read_mapping_page failed! [ 298.611661][ T9704] ERROR: (device loop2): txCommit: [ 298.611661][ T9704] [ 298.703247][ T9703] read_mapping_page failed! [ 298.703278][ T9703] ERROR: (device loop2): txCommit: [ 298.703278][ T9703] [ 298.732119][ T9667] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.863598][ T9708] loop3: detected capacity change from 0 to 512 [ 298.951924][ T9667] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 299.005888][ T9708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.005958][ T9708] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.166163][ T9667] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0 [ 299.223838][ T9667] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0 [ 299.277183][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.390766][ T8844] syz-executor: attempt to access beyond end of device [ 299.390766][ T8844] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.435940][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 299.435966][ T8844] Tainted: [L]=SOFTLOCKUP [ 299.435972][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.435995][ T8844] Call Trace: [ 299.436001][ T8844] [ 299.436007][ T8844] dump_stack_lvl+0xe8/0x150 [ 299.436034][ T8844] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 299.436054][ T8844] f2fs_write_end_bio+0x1211/0x16e0 [ 299.436076][ T8844] ? blkg_put+0x22/0x240 [ 299.436102][ T8844] __submit_merged_bio+0x258/0x6a0 [ 299.436118][ T8844] ? rcu_is_watching+0x16/0xb0 [ 299.436141][ T8844] __submit_merged_write_cond+0x3c9/0x4e0 [ 299.436164][ T8844] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 299.436196][ T8844] f2fs_write_data_pages+0x2a1d/0x36f0 [ 299.436215][ T8844] ? __lock_acquire+0x747/0x2de0 [ 299.436255][ T8844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.436276][ T8844] ? is_bpf_text_address+0x26/0x2b0 [ 299.436304][ T8844] ? arch_stack_walk+0xfb/0x150 [ 299.436341][ T8844] ? add_lock_to_list+0xc7/0x100 [ 299.436362][ T8844] ? lockdep_unlock+0x5c/0xd0 [ 299.436376][ T8844] ? __lock_acquire+0x1511/0x2de0 [ 299.436421][ T8844] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.436448][ T8844] ? do_raw_spin_unlock+0xf5/0x200 [ 299.436469][ T8844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.436488][ T8844] do_writepages+0x338/0x560 [ 299.436512][ T8844] ? do_raw_spin_unlock+0xf5/0x200 [ 299.436536][ T8844] filemap_fdatawrite+0x1e9/0x2f0 [ 299.436556][ T8844] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 299.436602][ T8844] ? do_raw_spin_unlock+0xf5/0x200 [ 299.436626][ T8844] f2fs_sync_dirty_inodes+0x30e/0x830 [ 299.436655][ T8844] f2fs_write_checkpoint+0xa38/0x2710 [ 299.436674][ T8844] ? __lock_acquire+0x747/0x2de0 [ 299.436709][ T8844] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 299.436763][ T8844] kill_f2fs_super+0x2dd/0x700 [ 299.436788][ T8844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 299.436814][ T8844] ? call_rcu+0x64d/0x8b0 [ 299.436832][ T8844] ? lockdep_hardirqs_on+0x7b/0x110 [ 299.436855][ T8844] deactivate_locked_super+0xbc/0x110 [ 299.436872][ T8844] cleanup_mnt+0x3d3/0x460 [ 299.436892][ T8844] task_work_run+0x1d9/0x260 [ 299.436911][ T8844] ? __pfx_task_work_run+0x10/0x10 [ 299.436933][ T8844] exit_to_user_mode_loop+0x204/0x770 [ 299.436949][ T8844] ? rcu_is_watching+0x16/0xb0 [ 299.436970][ T8844] do_syscall_64+0x328/0x520 [ 299.436983][ T8844] ? trace_irq_disable+0x3b/0x140 [ 299.436998][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.437012][ T8844] ? clear_bhb_loop+0x70/0xc0 [ 299.437028][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.437042][ T8844] RIP: 0033:0x7fd213f9f397 [ 299.437055][ T8844] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 299.437067][ T8844] RSP: 002b:00007ffd1a986328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 299.437081][ T8844] RAX: 0000000000000000 RBX: 00007fd21403448b RCX: 00007fd213f9f397 [ 299.437091][ T8844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1a9863e0 [ 299.437099][ T8844] RBP: 00007ffd1a9863e0 R08: 00007ffd1a9873e0 R09: 00000000ffffffff [ 299.437109][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1a987470 [ 299.437117][ T8844] R13: 00007fd21403448b R14: 00000000000490d9 R15: 00007ffd1a9874b0 [ 299.437139][ T8844] [ 299.437145][ T8844] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 299.996091][ T9695] loop6: detected capacity change from 0 to 40427 [ 300.014497][ T9695] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 300.014517][ T9695] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 300.036223][ T9695] F2FS-fs (loop6): invalid crc value [ 300.459589][ T9695] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 300.573397][ T9695] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 300.573421][ T9695] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 300.692917][ T9714] loop4: detected capacity change from 0 to 32768 [ 300.790221][ T8578] syz-executor: attempt to access beyond end of device [ 300.790221][ T8578] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.849398][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 300.849427][ T8578] Tainted: [L]=SOFTLOCKUP [ 300.849433][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.849443][ T8578] Call Trace: [ 300.849450][ T8578] [ 300.849458][ T8578] dump_stack_lvl+0xe8/0x150 [ 300.849488][ T8578] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 300.849511][ T8578] f2fs_write_end_bio+0x1211/0x16e0 [ 300.849538][ T8578] ? blkg_put+0x22/0x240 [ 300.849568][ T8578] __submit_merged_bio+0x258/0x6a0 [ 300.849585][ T8578] ? rcu_is_watching+0x16/0xb0 [ 300.849610][ T8578] __submit_merged_write_cond+0x3c9/0x4e0 [ 300.849635][ T8578] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 300.849671][ T8578] f2fs_write_data_pages+0x2a1d/0x36f0 [ 300.849718][ T8578] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 300.849750][ T8578] ? lock_acquire+0x115/0x350 [ 300.849789][ T8578] ? __bfs+0x153/0x290 [ 300.849805][ T8578] ? __pfx_hlock_conflict+0x10/0x10 [ 300.849839][ T8578] ? lockdep_unlock+0x5c/0xd0 [ 300.849854][ T8578] ? __lock_acquire+0x1511/0x2de0 [ 300.849891][ T8578] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 300.849913][ T8578] do_writepages+0x338/0x560 [ 300.849940][ T8578] ? do_raw_spin_unlock+0xf5/0x200 [ 300.849967][ T8578] filemap_fdatawrite+0x1e9/0x2f0 [ 300.849990][ T8578] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 300.850044][ T8578] ? do_raw_spin_unlock+0xf5/0x200 [ 300.850077][ T8578] f2fs_sync_dirty_inodes+0x30e/0x830 [ 300.850112][ T8578] f2fs_write_checkpoint+0xa38/0x2710 [ 300.850133][ T8578] ? __lock_acquire+0x747/0x2de0 [ 300.850175][ T8578] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 300.850239][ T8578] kill_f2fs_super+0x2dd/0x700 [ 300.850268][ T8578] ? __pfx_kill_f2fs_super+0x10/0x10 [ 300.850312][ T8578] ? call_rcu+0x64d/0x8b0 [ 300.850332][ T8578] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.850359][ T8578] deactivate_locked_super+0xbc/0x110 [ 300.850378][ T8578] cleanup_mnt+0x3d3/0x460 [ 300.850402][ T8578] task_work_run+0x1d9/0x260 [ 300.850423][ T8578] ? __pfx_task_work_run+0x10/0x10 [ 300.850450][ T8578] exit_to_user_mode_loop+0x204/0x770 [ 300.850468][ T8578] ? rcu_is_watching+0x16/0xb0 [ 300.850492][ T8578] do_syscall_64+0x328/0x520 [ 300.850508][ T8578] ? trace_irq_disable+0x3b/0x140 [ 300.850525][ T8578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.850540][ T8578] ? clear_bhb_loop+0x70/0xc0 [ 300.850560][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.850575][ T8578] RIP: 0033:0x7fdab979f397 [ 300.850589][ T8578] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 300.850602][ T8578] RSP: 002b:00007ffccb1aa838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 300.850618][ T8578] RAX: 0000000000000000 RBX: 00007fdab983448b RCX: 00007fdab979f397 [ 300.850629][ T8578] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccb1aa8f0 [ 300.850638][ T8578] RBP: 00007ffccb1aa8f0 R08: 00007ffccb1ab8f0 R09: 00000000ffffffff [ 300.850648][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccb1ab980 [ 300.850658][ T8578] R13: 00007fdab983448b R14: 0000000000049664 R15: 00007ffccb1ab9c0 [ 300.850682][ T8578] [ 300.982964][ T8578] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 301.475601][ T9728] loop5: detected capacity change from 0 to 128 [ 301.531197][ T9728] EXT4-fs (loop5): Test dummy encryption mode enabled [ 301.550215][ T9728] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.606614][ T9728] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.742398][ T8844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.065302][ T9735] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 302.090641][ T9735] batman_adv: batadv0: Adding interface: macsec1 [ 302.090657][ T9735] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.090681][ T9735] batman_adv: batadv0: Interface activated: macsec1 [ 302.963151][ T9741] loop6: detected capacity change from 0 to 32768 [ 303.023470][ T9741] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 303.712256][ T8578] ocfs2: Unmounting device (7,6) on (node local) [ 303.887309][ T9763] loop5: detected capacity change from 0 to 256 [ 304.082869][ T9765] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.082887][ T9765] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.457545][ T5619] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 304.608028][ T5619] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 304.615953][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.615972][ T5619] usb 6-1: Product: syz [ 304.615982][ T5619] usb 6-1: Manufacturer: syz [ 304.615991][ T5619] usb 6-1: SerialNumber: syz [ 307.245168][ T9] usb 6-1: USB disconnect, device number 5 [ 317.204397][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204447][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.097738][ T5617] jfs_flush_journal: synclist not empty [ 326.097764][ T5617] metapage: ffff88805c7a99b0: 00001000 00000000 00003b90 00000000 [ 326.097786][ T5617] metapage: ffff88805c7a99c0: 251f0220 ffff8880 251f0220 ffff8880 [ 326.097801][ T5617] metapage: ffff88805c7a99d0: 00000004 00000000 00000000 00000000 [ 326.097816][ T5617] metapage: ffff88805c7a99e0: 73e28000 ffff8880 00050030 00000000 [ 326.097830][ T5617] metapage: ffff88805c7a99f0: 00000000 dead4ead ffffffff 00000000 [ 326.097846][ T5617] metapage: ffff88805c7a9a00: ffffffff ffffffff 9ab6ea40 ffffffff [ 326.097860][ T5617] metapage: ffff88805c7a9a10: 9446ed78 ffffffff 00000000 00000000 [ 326.097875][ T5617] metapage: ffff88805c7a9a20: 8c4e05a0 ffffffff 00000300 00000000 [ 326.097890][ T5617] metapage: ffff88805c7a9a30: 5c7a9a30 ffff8880 5c7a9a30 ffff8880 [ 326.097907][ T5617] metapage: ffff88805c7a9a40: 01cf8a00 ffffea00 79e0a000 ffff8880 [ 326.097921][ T5617] metapage: ffff88805c7a9a50: 00001000 0000410c 00000000 00000000 [ 326.097933][ T5617] metapage: ffff88805c7a9a60: 251f0000 ffff8880 [ 326.097947][ T5617] page: ffffea0001cf8a00: 00fff6000000402c ffffea00014524c8 [ 326.097959][ T5617] page: ffffea0001cf8a10: ffff8880563b4938 0000000000000000 [ 326.097971][ T5617] page: ffffea0001cf8a20: 0000000000050030 ffff88805c7a99b0 [ 326.097984][ T5617] page: ffffea0001cf8a30: 00000001ffffffff ffff88801d334a00 [ 326.983592][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.058505][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.103335][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.156091][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.304089][ T9795] profile_transition: 2 callbacks suppressed [ 327.304123][ T9795] profile_transition: unconfined exec no attachment [ 327.352094][ T1177] bridge_slave_1: left allmulticast mode [ 327.352117][ T1177] bridge_slave_1: left promiscuous mode [ 327.352297][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.354070][ T1177] bridge_slave_0: left allmulticast mode [ 327.354086][ T1177] bridge_slave_0: left promiscuous mode [ 327.354240][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.472428][ T9796] profile_transition: unconfined exec no attachment [ 327.590433][ T9799] profile_transition: unconfined exec no attachment [ 327.708222][ T9801] profile_transition: unconfined exec no attachment [ 327.776799][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.801748][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.802840][ T1177] bond0 (unregistering): Released all slaves [ 327.882252][ T1177] tipc: Disabling bearer [ 327.882460][ T1177] tipc: Left network mode [ 327.922445][ T9804] profile_transition: unconfined exec no attachment [ 328.118599][ T9806] profile_transition: unconfined exec no attachment [ 328.246614][ T9807] profile_transition: unconfined exec no attachment [ 328.391194][ T9808] profile_transition: unconfined exec no attachment [ 328.412768][ T1177] hsr_slave_0: left promiscuous mode [ 328.413266][ T1177] hsr_slave_1: left promiscuous mode [ 328.413856][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.413870][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.416014][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.416028][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.491088][ T1177] veth1_macvtap: left promiscuous mode [ 328.491120][ T1177] veth0_macvtap: left promiscuous mode [ 328.491197][ T1177] veth1_vlan: left promiscuous mode [ 328.491245][ T1177] veth0_vlan: left promiscuous mode [ 328.810948][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 328.831499][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 328.968567][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 328.998835][ T9809] profile_transition: unconfined exec no attachment [ 329.097226][ T9810] profile_transition: unconfined exec no attachment [ 329.584529][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 330.015514][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 330.432617][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 339.991381][ T9863] profile_transition: 26 callbacks suppressed [ 339.991397][ T9863] profile_transition: unconfined exec no attachment [ 340.050604][ T9866] profile_transition: unconfined exec no attachment [ 340.106075][ T9868] profile_transition: unconfined exec no attachment [ 340.183166][ T9871] profile_transition: unconfined exec no attachment [ 340.255811][ T9873] profile_transition: unconfined exec no attachment [ 340.300264][ T9874] profile_transition: unconfined exec no attachment [ 340.345856][ T9875] profile_transition: unconfined exec no attachment [ 340.956279][ T9877] profile_transition: unconfined exec no attachment [ 341.014022][ T9880] profile_transition: unconfined exec no attachment [ 341.072770][ T9882] profile_transition: unconfined exec no attachment [ 375.601500][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 378.650607][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650652][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.722224][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 440.081023][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081069][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.397721][ T34] INFO: task kworker/u8:5:86 blocked in I/O wait for more than 143 seconds. [ 464.397746][ T34] Tainted: G L syzkaller #0 [ 464.397755][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.397763][ T34] task:kworker/u8:5 state:D stack:21544 pid:86 tgid:86 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 464.397832][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 464.397878][ T34] Call Trace: [ 464.397886][ T34] [ 464.397896][ T34] __schedule+0x17dd/0x5940 [ 464.397921][ T34] ? blk_mq_flush_plug_list+0x415/0x540 [ 464.397953][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 464.397980][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 464.398001][ T34] ? __pfx___schedule+0x10/0x10 [ 464.398028][ T34] ? schedule+0x90/0x2b0 [ 464.398052][ T34] schedule+0x164/0x2b0 [ 464.398075][ T34] io_schedule+0x7f/0xd0 [ 464.398089][ T34] rq_qos_wait+0x266/0x360 [ 464.398107][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 464.398130][ T34] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 464.398150][ T34] ? __pfx_rq_qos_wait+0x10/0x10 [ 464.398166][ T34] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 464.398183][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 464.398213][ T34] wbt_wait+0x326/0x550 [ 464.398234][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 464.398254][ T34] ? __pfx_dd_bio_merge+0x10/0x10 [ 464.398273][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 464.398292][ T34] __rq_qos_throttle+0x6b/0xb0 [ 464.398325][ T34] blk_mq_submit_bio+0x1512/0x2a70 [ 464.398351][ T34] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 464.398378][ T34] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 464.398399][ T34] ? blk_cgroup_bio_start+0x5d7/0x670 [ 464.398418][ T34] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 464.398436][ T34] ? __submit_bio+0x7e/0x340 [ 464.398451][ T34] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 464.398478][ T34] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 464.398501][ T34] ? submit_bio_noacct+0x104a/0x1b80 [ 464.398525][ T34] ? blkcg_set_ioprio+0x16b/0x2a0 [ 464.398549][ T34] ext4_bio_write_folio+0x101a/0x18c0 [ 464.398575][ T34] mpage_process_page_bufs+0x6bd/0x8a0 [ 464.398602][ T34] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 464.398627][ T34] ? process_scheduled_works+0xc3d/0x1630 [ 464.398663][ T34] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 464.398699][ T34] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 464.398716][ T34] ? ext4_init_io_end+0x29/0x130 [ 464.398730][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 464.398747][ T34] ? ext4_init_io_end+0x29/0x130 [ 464.398769][ T34] ext4_do_writepages+0xb8a/0x4770 [ 464.398800][ T34] ? kfree+0x1c5/0x650 [ 464.398814][ T34] ? ieee80211_inform_bss+0xbda/0x10d0 [ 464.398843][ T34] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 464.398860][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 464.398874][ T34] ? __lock_acquire+0x747/0x2de0 [ 464.398896][ T34] ? trace_cfg80211_return_bss+0x7c/0x1f0 [ 464.398916][ T34] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 464.398942][ T34] ? lock_acquire+0x115/0x350 [ 464.398972][ T34] ext4_writepages+0x1fe/0x4e0 [ 464.398993][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 464.399022][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 464.399045][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 464.399064][ T34] do_writepages+0x338/0x560 [ 464.399082][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 464.399106][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 464.399124][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 464.400674][ T34] __writeback_single_inode+0x136/0x1220 [ 464.400693][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 464.400718][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 464.400751][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 464.400789][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 464.400821][ T34] __writeback_inodes_wb+0x114/0x240 [ 464.400842][ T34] wb_writeback+0x42f/0xad0 [ 464.400858][ T34] ? queue_io+0x2d1/0x470 [ 464.400876][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 464.400903][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 464.400937][ T34] wb_workfn+0xc92/0x10f0 [ 464.400969][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 464.400994][ T34] ? update_protect_slice+0x128/0x210 [ 464.401019][ T34] ? lock_acquire+0x115/0x350 [ 464.401041][ T34] ? rcu_is_watching+0x16/0xb0 [ 464.401062][ T34] ? process_scheduled_works+0x97a/0x1630 [ 464.401084][ T34] process_scheduled_works+0xc3d/0x1630 [ 464.401127][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.401152][ T34] ? assign_work+0x3cf/0x5d0 [ 464.401177][ T34] worker_thread+0xa47/0xfb0 [ 464.401216][ T34] kthread+0x38b/0x480 [ 464.401232][ T34] ? __pfx_worker_thread+0x10/0x10 [ 464.401252][ T34] ? __pfx_kthread+0x10/0x10 [ 464.401268][ T34] ret_from_fork+0x514/0xb70 [ 464.401284][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 464.401298][ T34] ? __switch_to+0xc89/0x1420 [ 464.401320][ T34] ? __pfx_kthread+0x10/0x10 [ 464.401337][ T34] ret_from_fork_asm+0x1a/0x30 [ 464.401371][ T34] [ 464.401424][ T34] INFO: task jbd2/sda1-8:4948 blocked in I/O wait for more than 143 seconds. [ 464.401437][ T34] Tainted: G L syzkaller #0 [ 464.401445][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.401451][ T34] task:jbd2/sda1-8 state:D stack:26280 pid:4948 tgid:4948 ppid:2 task_flags:0x240040 flags:0x00080000 [ 464.401494][ T34] Call Trace: [ 464.401498][ T34] [ 464.401507][ T34] __schedule+0x17dd/0x5940 [ 464.401539][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 464.401557][ T34] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 464.401584][ T34] ? __pfx___schedule+0x10/0x10 [ 464.401621][ T34] ? schedule+0x90/0x2b0 [ 464.401657][ T34] schedule+0x164/0x2b0 [ 464.401684][ T34] io_schedule+0x7f/0xd0 [ 464.401699][ T34] bit_wait_io+0x13/0x110 [ 464.401715][ T34] __wait_on_bit+0xac/0x300 [ 464.401730][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.401747][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 464.401763][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.401778][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 464.401795][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 464.401819][ T34] ? __wait_on_buffer+0xe/0x80 [ 464.401842][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 464.401864][ T34] ? trace_hrtimer_start+0x82/0x200 [ 464.401904][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 464.401931][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 464.401970][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.401994][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 464.402017][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 464.402037][ T34] kjournald2+0x3bc/0x740 [ 464.402062][ T34] ? __pfx_kjournald2+0x10/0x10 [ 464.402077][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 464.402099][ T34] ? __kthread_parkme+0x71/0x1f0 [ 464.402123][ T34] ? __kthread_parkme+0x199/0x1f0 [ 464.402150][ T34] kthread+0x38b/0x480 [ 464.402166][ T34] ? __pfx_kjournald2+0x10/0x10 [ 464.402179][ T34] ? __pfx_kthread+0x10/0x10 [ 464.402196][ T34] ret_from_fork+0x514/0xb70 [ 464.402212][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 464.402226][ T34] ? __switch_to+0xc89/0x1420 [ 464.402247][ T34] ? __pfx_kthread+0x10/0x10 [ 464.402264][ T34] ret_from_fork_asm+0x1a/0x30 [ 464.402297][ T34] [ 464.402309][ T34] INFO: task syz-executor:5604 blocked in I/O wait for more than 143 seconds. [ 464.402321][ T34] Tainted: G L syzkaller #0 [ 464.402329][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.402335][ T34] task:syz-executor state:D stack:21440 pid:5604 tgid:5604 ppid:5603 task_flags:0x440100 flags:0x00080000 [ 464.402373][ T34] Call Trace: [ 464.402377][ T34] [ 464.402386][ T34] __schedule+0x17dd/0x5940 [ 464.402418][ T34] ? lock_acquire+0x115/0x350 [ 464.402442][ T34] ? __pfx___schedule+0x10/0x10 [ 464.402472][ T34] ? schedule+0x90/0x2b0 [ 464.402497][ T34] schedule+0x164/0x2b0 [ 464.402521][ T34] io_schedule+0x7f/0xd0 [ 464.402536][ T34] bit_wait_io+0x13/0x110 [ 464.402552][ T34] __wait_on_bit+0xac/0x300 [ 464.402567][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.402584][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 464.402601][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.402622][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 464.402639][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 464.402667][ T34] do_get_write_access+0x658/0x10c0 [ 464.402697][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 464.402717][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 464.402741][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 464.402758][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 464.402774][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 464.402797][ T34] ext4_reserve_inode_write+0x294/0x360 [ 464.402821][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 464.402851][ T34] ext4_dirty_inode+0xd0/0x110 [ 464.402869][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 464.402886][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 464.402911][ T34] file_update_time_flags+0x399/0x440 [ 464.402933][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 464.402952][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 464.402980][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 464.402997][ T34] ? __lock_acquire+0x747/0x2de0 [ 464.403039][ T34] do_page_mkwrite+0x147/0x310 [ 464.403062][ T34] do_wp_page+0x1a97/0x4b70 [ 464.403090][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 464.403103][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 464.403128][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 464.403158][ T34] handle_mm_fault+0x15d7/0x3750 [ 464.403182][ T34] ? handle_mm_fault+0xf1/0x3750 [ 464.403205][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 464.403219][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 464.403235][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 464.403272][ T34] do_user_addr_fault+0xb35/0x1480 [ 464.403297][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 464.403314][ T34] exc_page_fault+0x6a/0xc0 [ 464.403331][ T34] asm_exc_page_fault+0x26/0x30 [ 464.403347][ T34] RIP: 0033:0x7f99d347c6e2 [ 464.403361][ T34] RSP: 002b:00007ffc6e3fd2b0 EFLAGS: 00010202 [ 464.403375][ T34] RAX: 00007f99d156c000 RBX: 0000555565f4a6f0 RCX: 0000000000000002 [ 464.403386][ T34] RDX: 0000000000003ee4 RSI: 0000555565f4d978 RDI: 0000000000000004 [ 464.403396][ T34] RBP: 00007ffc6e3fd7b0 R08: 0000555565f4d9e0 R09: 00000000000000a4 [ 464.403407][ T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc6e3fd5f0 [ 464.403417][ T34] R13: 00007ffc6e3fd3e0 R14: 585858582e7a7973 R15: 00007ffc6e3fd330 [ 464.403448][ T34] [ 464.403478][ T34] INFO: task syz.6.1447:9784 blocked in I/O wait for more than 143 seconds. [ 464.403491][ T34] Tainted: G L syzkaller #0 [ 464.403500][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.403506][ T34] task:syz.6.1447 state:D stack:26088 pid:9784 tgid:9784 ppid:8578 task_flags:0x440040 flags:0x00080002 [ 464.403550][ T34] Call Trace: [ 464.403555][ T34] [ 464.403564][ T34] __schedule+0x17dd/0x5940 [ 464.403598][ T34] ? __lock_acquire+0x747/0x2de0 [ 464.403630][ T34] ? __pfx___schedule+0x10/0x10 [ 464.403663][ T34] ? schedule+0x90/0x2b0 [ 464.403690][ T34] schedule+0x164/0x2b0 [ 464.403715][ T34] io_schedule+0x7f/0xd0 [ 464.403731][ T34] bit_wait_io+0x13/0x110 [ 464.403749][ T34] __wait_on_bit+0xac/0x300 [ 464.403764][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.403783][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 464.403801][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 464.403816][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 464.403835][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 464.403865][ T34] do_get_write_access+0x658/0x10c0 [ 464.403897][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 464.403919][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 464.403943][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 464.403962][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 464.403980][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 464.404004][ T34] ext4_reserve_inode_write+0x294/0x360 [ 464.404030][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 464.404061][ T34] ext4_dirty_inode+0xd0/0x110 [ 464.404080][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 464.404098][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 464.404127][ T34] file_update_time_flags+0x399/0x440 [ 464.404151][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 464.404196][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 464.404225][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 464.404245][ T34] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 464.404270][ T34] do_page_mkwrite+0x147/0x310 [ 464.404293][ T34] do_pte_missing+0x757/0x34b0 [ 464.404318][ T34] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 464.404344][ T34] ? __pmd_alloc+0x40a/0x5c0 [ 464.404362][ T34] handle_mm_fault+0x1a53/0x3750 [ 464.404387][ T34] ? handle_mm_fault+0xf1/0x3750 [ 464.404412][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 464.404427][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 464.404463][ T34] do_user_addr_fault+0xb35/0x1480 [ 464.404488][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 464.404507][ T34] exc_page_fault+0x6a/0xc0 [ 464.404524][ T34] asm_exc_page_fault+0x26/0x30 [ 464.404539][ T34] RIP: 0033:0x7fdab966baa3 [ 464.404552][ T34] RSP: 002b:00007ffccb1ab730 EFLAGS: 00010246 [ 464.404566][ T34] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33f64000 [ 464.404577][ T34] RDX: 0000001b33f24000 RSI: 0000000000400000 RDI: 00007fdab99e0708 [ 464.404588][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.404598][ T34] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 464.404607][ T34] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffccb1ab9c0 [ 464.404637][ T34] [ 464.404654][ T34] [ 464.404654][ T34] Showing all locks held in the system: [ 464.404663][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 464.404675][ T34] #0: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.404719][ T34] locks held by kworker/u8:5/86: 4, on CPU#0: [ 464.404730][ T34] #0: ffff88801c2fa140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.404776][ T34] #1: ffffc9000251fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.404821][ T34] #2: ffff88807fc680e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 464.404864][ T34] #3: ffff88807fc76c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 464.404910][ T34] locks held by kworker/0:2/905: 2, last CPU#0: [ 464.404921][ T34] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.404966][ T34] #1: ffffc90004647c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 464.405025][ T34] locks held by getty/5374: 2, on CPU#1: [ 464.405036][ T34] #0: ffff8880352a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.405077][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 464.405115][ T34] locks held by syz-executor/5604: 3, on CPU#0: [ 464.405126][ T34] #0: ffff888073c0aa88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 464.405164][ T34] #1: ffff88807fc68558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 464.405205][ T34] #2: ffff8880357ee938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 464.405250][ T34] locks held by syz.6.1447/9784: 3, on CPU#0: [ 464.405261][ T34] #0: ffff8880740d0bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 464.405311][ T34] #1: ffff88807fc68558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 464.405362][ T34] #2: ffff8880357ee938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 464.405398][ T34] locks held by syz.2.1415/9793: 3, on CPU#0: [ 464.405407][ T34] #0: ffff888029b403b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 464.405445][ T34] #1: ffff88807fc68460 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 464.405481][ T34] #2: ffff8880357ee938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 464.405515][ T34] locks held by syz.4.1422/9794: 3, on CPU#0: [ 464.405525][ T34] #0: ffff8880346a36b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 464.405562][ T34] #1: ffff88807fc68460 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 464.405597][ T34] #2: ffff8880357ee938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 464.405637][ T34] [ 464.405641][ T34] ============================================= [ 464.405641][ T34] [ 464.405649][ T34] NMI backtrace for cpu 0 [ 464.405667][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 464.405691][ T34] Tainted: [L]=SOFTLOCKUP [ 464.405698][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.405708][ T34] Call Trace: [ 464.405715][ T34] [ 464.405723][ T34] dump_stack_lvl+0xe8/0x150 [ 464.405749][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 464.405775][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.405804][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 464.405833][ T34] sys_info+0x135/0x170 [ 464.405854][ T34] watchdog+0x1058/0x10d0 [ 464.405883][ T34] ? watchdog+0x209/0x10d0 [ 464.405910][ T34] kthread+0x38b/0x480 [ 464.405930][ T34] ? __pfx_watchdog+0x10/0x10 [ 464.405948][ T34] ? __pfx_kthread+0x10/0x10 [ 464.405969][ T34] ret_from_fork+0x514/0xb70 [ 464.405990][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 464.406008][ T34] ? __switch_to+0xc89/0x1420 [ 464.406035][ T34] ? __pfx_kthread+0x10/0x10 [ 464.406057][ T34] ret_from_fork_asm+0x1a/0x30 [ 464.406100][ T34] [ 464.406113][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 466.112927][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 466.123596][ T34] Tainted: [L]=SOFTLOCKUP [ 466.127930][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.137979][ T34] Call Trace: [ 466.141257][ T34] [ 466.144231][ T34] vpanic+0x56d/0xa70 [ 466.148229][ T34] ? __pfx_vpanic+0x10/0x10 [ 466.152742][ T34] ? console_srcu_read_unlock+0x3a/0x60 [ 466.158318][ T34] panic+0xc5/0xd0 [ 466.162057][ T34] ? __pfx_panic+0x10/0x10 [ 466.166479][ T34] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 466.171602][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 466.177760][ T34] watchdog+0x10cc/0x10d0 [ 466.182098][ T34] ? watchdog+0x209/0x10d0 [ 466.186517][ T34] kthread+0x38b/0x480 [ 466.190595][ T34] ? __pfx_watchdog+0x10/0x10 [ 466.195264][ T34] ? __pfx_kthread+0x10/0x10 [ 466.199854][ T34] ret_from_fork+0x514/0xb70 [ 466.204444][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 466.209556][ T34] ? __switch_to+0xc89/0x1420 [ 466.214232][ T34] ? __pfx_kthread+0x10/0x10 [ 466.218841][ T34] ret_from_fork_asm+0x1a/0x30 [ 466.223630][ T34] [ 466.226738][ T34] Kernel Offset: disabled [ 466.231059][ T34] Rebooting in 86400 seconds..