last executing test programs: 7m7.658560308s ago: executing program 0 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 k', 0x1d) 7m7.56400042s ago: executing program 0 (id=1327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) 7m5.793762855s ago: executing program 0 (id=1334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x23) 7m5.533449382s ago: executing program 0 (id=1336): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 7m5.313685118s ago: executing program 0 (id=1338): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 7m5.016691195s ago: executing program 0 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000100)={0x3}) 6m49.941334451s ago: executing program 32 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000100)={0x3}) 5m12.890807515s ago: executing program 3 (id=2097): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, &(0x7f00000000c0)={0x0, 0x1b12, 0x13090, 0x3, 0x1bc}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) 5m12.592322893s ago: executing program 3 (id=2098): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0xff, 0x7, 0x2000, 0x201, 0x1}) 5m12.380471858s ago: executing program 3 (id=2102): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r0, 0xc8cd000) 5m12.065028056s ago: executing program 3 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 5m11.856996511s ago: executing program 3 (id=2109): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x7fffffff, 0x2, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x20009, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x5, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0x1001}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) 5m11.338601515s ago: executing program 3 (id=2114): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 5m10.914325096s ago: executing program 33 (id=2114): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 2m46.830175553s ago: executing program 5 (id=3013): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xc21c2, 0x9c37611dc13d0db7) 2m46.469315732s ago: executing program 5 (id=3016): dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 2m45.191584255s ago: executing program 5 (id=3024): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nogrpid}, {@noinit_itable}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@errors_remount}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x0, 0xfff, 0x9) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 2m44.451454144s ago: executing program 5 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='10', 0x2) 2m44.061976044s ago: executing program 5 (id=3030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) sendmsg$nl_route(r0, 0x0, 0x0) 2m43.82320722s ago: executing program 5 (id=3032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 2m35.476779783s ago: executing program 1 (id=3071): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2m35.242537549s ago: executing program 1 (id=3073): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000040)="05", 0x1, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x5, r1, 0x0, &(0x7f0000000400)='{', 0x1, 0x40}) 2m34.954103606s ago: executing program 1 (id=3074): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x200000, &(0x7f00000001c0)={[{}, {@umask={'umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@codepage={'codepage', 0x3d, 'default'}}, {@file_umask={'file_umask', 0x3d, 0xe}}, {}, {@type={'type', 0x3d, "80f2c199"}}, {@part={'part', 0x3d, 0x7}}]}, 0x2, 0x370, &(0x7f00000027c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0xc2180, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 2m34.593400006s ago: executing program 1 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd0b, &(0x7f0000002000)="040000000000000000000000a10100003801000001000000000000000000000000000000000000000000000000000065") 2m34.271739074s ago: executing program 1 (id=3078): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m33.461142684s ago: executing program 1 (id=3080): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xdaff, 0x400, 0xfffffffe, 0x360}) close_range(r0, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004f40)=""/131, 0x83}], 0x1}, 0x3}], 0x1, 0x40002122, 0x0) 2m28.678838177s ago: executing program 34 (id=3032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 2m17.991654741s ago: executing program 35 (id=3080): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xdaff, 0x400, 0xfffffffe, 0x360}) close_range(r0, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004f40)=""/131, 0x83}], 0x1}, 0x3}], 0x1, 0x40002122, 0x0) 7.298027023s ago: executing program 4 (id=3716): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x7, 0x100000, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 5.044835171s ago: executing program 4 (id=3730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb"], 0x0) 4.650132481s ago: executing program 4 (id=3733): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 3.315637705s ago: executing program 6 (id=3743): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x82, 0x2, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x7, 0x1}]}}}}}}}}, 0x0) 3.054523192s ago: executing program 7 (id=3744): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e24, @remote}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 3.053923642s ago: executing program 6 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.800577498s ago: executing program 6 (id=3747): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 2.784230779s ago: executing program 7 (id=3748): syz_mount_image$nilfs2(&(0x7f0000003380), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000003300)={[{}, {@errors_continue}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xed3, &(0x7f0000002400)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS88FhYRGGIoaeiDiT+gBUQlRJMSp4kDFhVIpRWolUKsK9dT21Kq3nlBViUpVKgX1UtTEVZz31rsvnu56bM96d38/6du3b97sfN94I2dmPPs2AGOrsfZ49OhiEcLbH7/18ItPFL+6suyO9hoH1h6L2GuFEJod/SLb3qdxwaWLL5zYqC3C4bXH1A+PXGi/djaEcC4cCJ+EVvhgeeXz99956OCHr87c9MbZp17aod1vy/cDAABG0fk/rvz1nn/84b6FL87vPx6m28vT8Xkr9mfjcf+heKCcjpcbobtfdESnqWy9iRiNbL2JbL3JLM9kSb5mtp1myXpTPfJNdCzbaD8BAABgGKXz2lYoGktd/UZjaenqef8Vn85PFUvPnF45dWZAhQIAAACV/fvltZtuhRBCCCGEELs0/rs6+BqEEEMVxUbLV+cHfQUCAAAAGDf5fGHXOLe9M3W1t9bqL/+FBxsbvx62Qd3//uUfrvzvveI3DgAA1Y3q0WTar3QcneYxyOcRnMhet9nj/0a2nclN1lk2r+CwzDdYVmf+c92tyurf7Ps4KGX15/Nh7lZl9efzdO5WZfVP11xHVWX1z9RcR1Vl9e+puY6qyurfW3MdVZXVP1tzHVWV1T9Xcx1VldV/Xc11VFVW/76a66iqrP5hua22rP5WzXVUVVb/Qs11VFVW//U111FVWf031FxHVWX131hzHYNye2zTz2F/Nt55/pyf0w3LOR4AAACMu/+Y/08IIYQQQgghhBj5eHnQFyAAAACAgUufC0ifel+N0vhEj/HJHuPNHuNTPcane4wDAAAAIfz6tVO3vFmsf85/q/PhpXmj0vxLm53HKJ+PcLP5tzrv2VbzD8u8ZQAAAIyX4lufXL734XefW/ji/P7jHWe/l+P5bpoHdDJeG/go9tN9AXNZv0jn0Me78zRK1suvD1xXtr1Ht7ijAAAAMMbS+XsrFI2ljvPuVmg0lpbWz8cXQ7M4dXrl5KHYT9/P8vv55vSV5Q/UXDcAAADQv/Xz/Y3P/9P3+C6GqWLpmdMrp85c7c+1lzcbndcF5teXF53XBVrZ8sMly4/Efvr+zu/O71lbvnTieytPbPfOAwAAwJg48/zZpx5fWTn5fU888cST9pNB/2YCAAC222efvdX8wZG53179/P/6/Hfp8/8HYr8V5/b7U1wh3SeQPgdwzef1H+vOM1+23rPd67Wy9SZiTGd1z3RsJ3TMN5het1CWr9W9namSfLNZvrksXz5PwWS2fsq3L1uez0+Y1pvPlufzME5mOYos/50BAAAAyi0/9/Szy2eeP3v/6acff/LkkyefOXL42DePHTv0wDceWF67r3+58+5+AAAAYBit3/Q76EoAAAAAAAAAAAAAAAAAAABgfNXxdWKD3kcAAAAYd/96OYRwTghREle/AnPwdQghhBBiBOLvO51jYvD7KITYvbG6mn/TPAAAAMDOunTxhROd7TXOFduar7211tXmcsyb2rn7/7JwJdJqFx7svl6yd1urYdzV/e9f/uHK/94r25t/Jj3p+/dfo3sDx6vlvXv5Z4ud+W+d7DN/vv+PVst/MMt/d+gv/+q7Wf7HquW/J8u/t8/81+z/s9Xy3xvzL8b+wbv6zd/9/k/HNu3Hnj7zfz3b/ydCv/mz/W/1mTBzX8wPAOOoMegCdkg6SkjH0bOxn/Y3Hm6G/O6HzR7/N7LtTG658u7tpuOgm2M/HS/NZXmTzdY/m23vuop15oblrpKy+rfrfdxpZfU3a66jqrL6p2quo6qy+qdrrqOqsvpnaq6jqrL6+z0PHbSy+oflunJZ/bM111FVWf1zNddRVVn9m/1/fFDK6t9Xcx1VldU/X3MdVZXVX/GyWu3K6l+ouY6qyuq/vuY6qiqr/4aa66iqrP4ba65jUG6Lbdn5cDr/nI9jqd/K+tMb/CxH9doCAAAADJt/mv9PCCGEEEIIIYS4Et/5zeBr2LFYXR30FQgGaWc/zQzAbuX3/3jz/o837/948/7z/6R7+Iusn0z0GJ/sMd7sMT6Vjef/Xqd7jN+QbXc1SuM39hj/Uo/xfT3Gb+4xvthj/JYe47f2GL+txzgAAADj4abYOj8EAACA0fXizz96/Zd3P3Zx4Yvz+4+HqWvmnT8U+9Pxb+uvxX4+733SjH/z/2Hs/zS2v4vt37L13X8CAAAAOy99T4y//wMAAMDoSt9T6vwfAAAARtdCbJ3/AwAAwOi6PrbO/wEAAGCEFTMbL45tui5wZ2z7ndcPANj9vhzb22O7P7Z3xPYrsU3HAXfF9qs11QcAbJ+ffPtHx94s1uf7P5KNX4rLU3uNc1evFBSN7pn898R2b2y/1mc9+fcB9Js/2ddnnp3KP7/F/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6GisPR49uliE8PbHbz3846nX/3xl2R3tNQ6sPRax1wohNNuvS6Pr/V/EFS9dfOFEZ3s5tkU4HIpQtJeHRy60M82GEM6FA+GT0AofLK98/v47Dx388NWZm944+9RLO/gj6No/AAAAGEX/CwAA//96ziHH") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 2.542737455s ago: executing program 4 (id=3750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.435089378s ago: executing program 6 (id=3752): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 2.137482366s ago: executing program 4 (id=3754): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0/../file0\x00', 0x81801) 2.011059899s ago: executing program 7 (id=3755): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='ma', 0x2) 1.847988003s ago: executing program 2 (id=3756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x100000000cbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.801423474s ago: executing program 4 (id=3757): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1.659447038s ago: executing program 7 (id=3758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000380)) 1.56520449s ago: executing program 2 (id=3759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x100, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 1.418267093s ago: executing program 7 (id=3760): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 1.340644766s ago: executing program 6 (id=3761): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x65010100, @in6=@private1, 0x4e22, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x20000, 0x1000280000000, 0x95, 0xffffffffffff281a, 0x4, 0x5}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@remote, 0xfffffffc, 0x33}, 0xa, @in6=@empty, 0x0, 0x4, 0x3, 0x0, 0x0, 0x9, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000300)={[{@shortname_lower}, {@shortname_win95}, {@rodir}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@rodir}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x31cc}}, {@uni_xlate}, {@numtail}]}, 0x1, 0x38f, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.304569987s ago: executing program 2 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="de"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac09, 0xfac0e, 0xfac02]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c8c0) 1.15220899s ago: executing program 7 (id=3763): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 1.027253694s ago: executing program 2 (id=3764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cc5e1d7771000000c00000008000300", @ANYRES32=r2, @ANYBLOB="34005080050002000600000009000a000000000000000000110001008e0000001d00d183000000000000000008000700010000000a0006"], 0x5c}}, 0x40) 664.487093ms ago: executing program 2 (id=3765): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 309.934652ms ago: executing program 2 (id=3766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8c}]}) 0s ago: executing program 6 (id=3767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000101, 0x0, 0x7ffc}]}) kernel console output (not intermixed with test programs): 27 using dummy_hcd [ 476.412169][T13539] tap0: tun_chr_ioctl cmd 1074025677 [ 476.438642][T13539] tap0: linktype set to 769 [ 476.459185][T13541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2959'. [ 476.468991][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 476.488258][ T173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 476.503672][ T173] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 476.544816][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.591191][ T173] usb 2-1: config 0 descriptor?? [ 477.052078][ T173] hid (null): global environment stack underflow [ 477.093090][ T173] hid (null): unknown global tag 0xd [ 477.135428][ T173] steelseries 0003:1038:12B6.001A: unknown main item tag 0xe [ 477.186093][ T173] steelseries 0003:1038:12B6.001A: global environment stack underflow [ 477.257432][ T173] steelseries 0003:1038:12B6.001A: item 0 2 1 11 parsing failed [ 477.292863][ T173] steelseries: probe of 0003:1038:12B6.001A failed with error -22 [ 477.376835][ T173] usb 2-1: USB disconnect, device number 27 [ 477.696879][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 477.907490][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 477.929130][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 477.993692][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.058890][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.102808][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.145143][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.207736][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.252679][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.411414][T13580] loop5: detected capacity change from 0 to 128 [ 478.547664][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 478.592441][ T9] usbtmc 5-1:16.0: can't read capabilities [ 478.676950][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 210 seconds [ 478.687965][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 210 seconds [ 478.699092][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 210 seconds [ 478.712011][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 210 seconds [ 478.847612][ T9] usb 5-1: USB disconnect, device number 20 [ 479.123978][T13575] loop1: detected capacity change from 0 to 32768 [ 479.203935][T13575] JBD2: Ignoring recovery information on journal [ 479.321003][T13575] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 479.832578][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 480.510822][T13608] loop2: detected capacity change from 0 to 4096 [ 480.588653][T13608] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 481.202174][T13598] loop4: detected capacity change from 0 to 32768 [ 481.441604][T13598] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 481.609037][T13598] XFS (loop4): Ending clean mount [ 481.738814][T13598] XFS (loop4): User initiated shutdown received. [ 481.817556][T13598] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 481.931931][T13598] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 481.985689][T13638] loop1: detected capacity change from 0 to 1024 [ 482.170292][ T9176] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 482.871331][T13649] loop2: detected capacity change from 0 to 512 [ 482.947736][T13649] EXT4-fs: inline encryption not supported [ 482.984644][T13649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 483.121477][T13649] EXT4-fs (loop2): 1 truncate cleaned up [ 483.217910][T13649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.367645][T13660] netlink: 'syz.1.3008': attribute type 10 has an invalid length. [ 483.378991][T13649] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5960: inode #12: comm syz.2.3004: bad extra_isize 62 (inode size 256) [ 483.501714][T13649] EXT4-fs (loop2): Remounting filesystem read-only [ 483.563908][T13660] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.633240][T13660] bond0: (slave team0): Enslaving as an active interface with an up link [ 483.657608][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.674409][T13661] netlink: 'syz.1.3008': attribute type 10 has an invalid length. [ 483.736464][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3008'. [ 483.829585][T13661] team0: entered allmulticast mode [ 483.873303][T13661] team_slave_0: entered allmulticast mode [ 483.901832][T13661] team_slave_1: entered allmulticast mode [ 483.933233][T13661] bond0: (slave team0): Releasing backup interface [ 484.004800][T13661] bridge0: port 4(team0) entered blocking state [ 484.034737][T13661] bridge0: port 4(team0) entered disabled state [ 484.051668][T13672] loop5: detected capacity change from 0 to 64 [ 485.806786][ T173] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 485.861114][T13702] loop5: detected capacity change from 0 to 1024 [ 485.921617][T13702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 485.985171][T13702] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.026999][ T173] usb 5-1: Using ep0 maxpacket: 32 [ 486.075113][ T173] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 486.132681][ T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.177738][ T173] usb 5-1: config 0 descriptor?? [ 486.318387][T11348] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 486.435011][ T173] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 486.493830][ T173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.559203][ T173] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 486.605333][ T173] usb 5-1: media controller created [ 486.632877][T13697] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 486.665074][ T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.810028][ T173] az6027: usb out operation failed. (-71) [ 486.847770][ T173] az6027: usb out operation failed. (-71) [ 486.869678][ T173] stb0899_attach: Driver disabled by Kconfig [ 486.901920][ T173] az6027: no front-end attached [ 486.901920][ T173] [ 486.939908][ T173] az6027: usb out operation failed. (-71) [ 486.991822][ T173] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 487.030337][ T173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 487.100087][ T173] dvb-usb: schedule remote query interval to 400 msecs. [ 487.148172][ T173] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 487.214422][ T173] usb 5-1: USB disconnect, device number 21 [ 487.492542][ T173] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 488.099646][ T173] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 488.310927][ T173] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 488.345019][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.384434][ T173] usb 5-1: Product: syz [ 488.399119][ T173] usb 5-1: Manufacturer: syz [ 488.406847][ T173] usb 5-1: SerialNumber: syz [ 488.715964][ T173] rtl8150 5-1:1.0: couldn't reset the device [ 488.746929][ T173] rtl8150: probe of 5-1:1.0 failed with error -5 [ 488.786189][ T173] usb 5-1: USB disconnect, device number 22 [ 488.813546][T13737] loop1: detected capacity change from 0 to 32768 [ 488.891164][T13737] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 488.988752][T13737] XFS (loop1): Ending clean mount [ 489.239584][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 489.742598][T13749] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 490.444872][T13753] loop1: detected capacity change from 0 to 32768 [ 490.494971][T13753] JBD2: Ignoring recovery information on journal [ 490.588455][T13753] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 490.753120][T13753] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 490.753264][T13753] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 490.823779][T13753] OCFS2: Returning error to the calling process. [ 490.856927][T13753] (syz.1.3044,13753,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 490.879353][T13753] (syz.1.3044,13753,0):ocfs2_mknod:334 ERROR: status = -117 [ 490.913350][T13753] (syz.1.3044,13753,0):ocfs2_mknod:502 ERROR: status = -117 [ 490.937482][T13753] (syz.1.3044,13753,0):ocfs2_mkdir:659 ERROR: status = -117 [ 491.091484][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 491.100070][T13762] loop4: detected capacity change from 0 to 1024 [ 491.223083][ T28] audit: type=1800 audit(1786047744.301:101): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3047" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 491.681789][T13764] loop1: detected capacity change from 0 to 256 [ 491.724035][T13764] FAT-fs (loop1): Unrecognized mount option "uid=0x000000000000ee00" or missing value [ 491.792610][T13764] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3048'. [ 491.849660][T13764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3048'. [ 492.049171][T13784] loop1: detected capacity change from 0 to 512 [ 492.072933][T13784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 492.154409][T13784] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 492.235954][T13784] EXT4-fs (loop1): 1 truncate cleaned up [ 492.272821][T13784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.381541][T13766] cgroup: fork rejected by pids controller in /syz4 [ 492.702687][ T5775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 492.823554][ T5775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 492.894911][ T5775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 492.973502][T13807] loop2: detected capacity change from 0 to 4096 [ 493.088913][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.171996][T13829] loop1: detected capacity change from 0 to 512 [ 494.239140][T13829] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 494.499151][T13809] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 494.887956][T13844] loop1: detected capacity change from 0 to 16 [ 494.941674][T13844] erofs: (device loop1): mounted with root inode @ nid 36. [ 495.028728][T13844] syz.1.3068: attempt to access beyond end of device [ 495.028728][T13844] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 495.116860][T13847] syz.1.3068: attempt to access beyond end of device [ 495.116860][T13847] loop1: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 495.560849][T13853] loop4: detected capacity change from 0 to 128 [ 495.603573][T13853] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 495.687933][T13853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 495.699801][T13840] loop2: detected capacity change from 0 to 32768 [ 495.776909][T13840] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.3066 (13840) [ 495.898003][T13840] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 495.912125][T13857] loop1: detected capacity change from 0 to 64 [ 495.958104][T13840] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 495.986025][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 496.026806][T13840] BTRFS info (device loop2): using free space tree [ 496.264027][T13840] BTRFS info (device loop2): enabling ssd optimizations [ 496.321711][T13840] BTRFS info (device loop2): auto enabling async discard [ 496.655162][T13881] loop1: detected capacity change from 0 to 1024 [ 496.732300][T13881] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 496.871050][T13881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.001879][ T5779] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 497.404920][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 497.643492][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 497.702222][T13879] loop4: detected capacity change from 0 to 32768 [ 497.849602][T13879] JBD2: Ignoring recovery information on journal [ 497.907248][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 498.008547][T13879] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 498.187569][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 498.333797][T13879] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 498.333826][T13879] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 498.416775][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 498.464900][T13879] OCFS2: Returning error to the calling process. [ 498.503658][T13879] (syz.4.3077,13879,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 498.526618][T13879] (syz.4.3077,13879,0):ocfs2_mknod:334 ERROR: status = -117 [ 498.545423][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 498.563314][T13879] (syz.4.3077,13879,0):ocfs2_mknod:502 ERROR: status = -117 [ 498.586804][T13879] (syz.4.3077,13879,0):ocfs2_mkdir:659 ERROR: status = -117 [ 498.721463][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 498.809034][ T9176] ocfs2: Unmounting device (7,4) on (node local) [ 498.881201][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 499.033216][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 499.186121][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 499.541416][T13896] loop2: detected capacity change from 0 to 32768 [ 499.557757][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 499.706822][T13896] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 499.813509][T13896] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 499.870765][T13910] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 499.904780][T13896] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 499.940295][T13910] iwpm_hello_cb: Unable to parse nlmsg [ 499.970152][T13896] XFS (loop2): Ending clean mount [ 500.177640][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3088'. [ 500.235692][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 501.169207][T13920] loop2: detected capacity change from 0 to 2048 [ 501.243130][T13920] Alternate GPT is invalid, using primary GPT. [ 501.266717][T13920] loop2: p1 p2 p3 [ 501.716046][ T9163] udevd[9163]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 501.745719][T11111] udevd[11111]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 501.760983][ T9162] udevd[9162]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 501.772280][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786947][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.111834][T13916] loop4: detected capacity change from 0 to 32768 [ 502.238943][T13916] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.407792][ T5775] EXT4-fs error: 24 callbacks suppressed [ 502.407813][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 502.472599][T13916] XFS (loop4): Ending clean mount [ 502.710667][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 502.900876][ T9176] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.924669][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 502.965915][T13940] loop2: detected capacity change from 0 to 4096 [ 503.030039][T13940] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 503.124447][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 503.338067][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 503.355206][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 503.364662][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 503.373350][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 503.382840][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 503.390392][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 503.460935][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 503.622875][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 503.784594][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 503.874032][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 503.983891][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 504.010845][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 504.194489][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 504.233257][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 504.286711][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.294764][ T9] usb 3-1: config 0 has no interface number 0 [ 504.356741][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.411073][T13941] chnl_net:caif_netlink_parms(): no params data found [ 504.427229][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.490388][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 504.543186][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.603901][ T9] usb 3-1: config 0 descriptor?? [ 504.785595][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.839312][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.875136][T13941] bridge_slave_0: entered allmulticast mode [ 504.903307][T13941] bridge_slave_0: entered promiscuous mode [ 504.963892][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.007303][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.041788][T13941] bridge_slave_1: entered allmulticast mode [ 505.084805][T13941] bridge_slave_1: entered promiscuous mode [ 505.227995][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.275685][ T9] uclogic 0003:28BD:0071.001B: pen parameters not found [ 505.311688][ T9] uclogic 0003:28BD:0071.001B: interface is invalid, ignoring [ 505.319822][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.477671][ T5783] Bluetooth: hci4: command tx timeout [ 505.508939][T13941] team0: Port device team_slave_0 added [ 505.557140][ T9] usb 3-1: USB disconnect, device number 28 [ 505.580854][T13941] team0: Port device team_slave_1 added [ 505.721217][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.746809][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.859514][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.921041][T13941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.947104][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.030868][T13941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.248015][T13941] hsr_slave_0: entered promiscuous mode [ 506.297157][T13941] hsr_slave_1: entered promiscuous mode [ 506.329000][T13941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.360713][T13941] Cannot create hsr debugfs directory [ 506.587049][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 506.806899][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 506.815450][ T8] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 506.868540][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.934454][ T8] usb 3-1: Product: syz [ 506.968495][ T8] usb 3-1: Manufacturer: syz [ 506.973156][ T8] usb 3-1: SerialNumber: syz [ 507.026239][ T8] usb 3-1: config 0 descriptor?? [ 507.250563][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.322927][ T8] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 029 [ 507.333531][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.435679][ T5775] EXT4-fs error: 24 callbacks suppressed [ 507.435692][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 507.558708][ T5783] Bluetooth: hci4: command tx timeout [ 507.568494][T13966] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 507.637939][ T8] usb 3-1: USB disconnect, device number 29 [ 507.760738][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 507.799314][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.831603][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.913893][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 508.049767][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.073324][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 508.100704][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.189559][T13941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 508.274853][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 508.361743][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.407482][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.488846][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 508.524903][T13941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 508.581585][T13941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 508.641596][T13941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 508.726247][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 508.790952][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 240 seconds [ 508.801923][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 240 seconds [ 508.818039][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 240 seconds [ 508.832469][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 240 seconds [ 508.853331][T13982] loop2: detected capacity change from 0 to 256 [ 509.054855][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 509.457404][T13976] loop4: detected capacity change from 0 to 32768 [ 509.469158][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 509.495624][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.544738][T13976] (syz.4.3108,13976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 509.637292][ T5783] Bluetooth: hci4: command tx timeout [ 509.692671][T13976] (syz.4.3108,13976,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 509.818935][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 509.917056][T13976] JBD2: Ignoring recovery information on journal [ 510.103961][T13976] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 510.458615][T13941] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.755831][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.763049][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.834913][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.842110][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.061709][ T9176] ocfs2: Unmounting device (7,4) on (node local) [ 511.129039][T13988] loop2: detected capacity change from 0 to 32768 [ 511.165136][T13941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.303997][T13941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.722243][ T5783] Bluetooth: hci4: command tx timeout [ 512.313327][ T5822] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 512.487503][ T5775] EXT4-fs error: 15 callbacks suppressed [ 512.487521][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 512.548325][ T5822] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 1.00 [ 512.579664][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.772984][T13941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.870925][ T5775] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 514.164286][ T5822] usb 5-1: 1:1: cannot set freq 48000 to ep 0x81 [ 514.387489][ T12] hsr_slave_0: left promiscuous mode [ 514.518150][ T12] hsr_slave_1: left promiscuous mode [ 514.576846][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.624800][ T5822] usb 5-1: USB disconnect, device number 23 [ 514.665143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.792933][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.858799][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 514.879915][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 514.899868][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 514.909273][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 514.918547][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 514.926108][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.946245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.060828][ T12] bridge_slave_1: left allmulticast mode [ 515.096599][ T12] bridge_slave_1: left promiscuous mode [ 515.102369][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.229680][ T12] bridge_slave_0: left allmulticast mode [ 515.235583][ T12] bridge_slave_0: left promiscuous mode [ 515.295407][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.493789][ T12] veth1_vlan: left promiscuous mode [ 515.501151][ T12] veth0_vlan: left promiscuous mode [ 515.750756][T14050] loop4: detected capacity change from 0 to 128 [ 515.805760][T14050] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 515.895812][T14050] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 515.937830][T14050] FAT-fs (loop4): Filesystem has been set read-only [ 515.975014][ T12] bond1 (unregistering): Released all slaves [ 515.982071][T14050] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 516.026715][T14050] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 516.051218][T14050] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 516.121128][T14045] loop2: detected capacity change from 0 to 32768 [ 516.171510][ T9176] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 516.212817][T14045] JBD2: Ignoring recovery information on journal [ 516.319540][T14045] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 516.408262][ T2950] (kworker/u4:8,2950,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 516.469471][ T2950] (kworker/u4:8,2950,0):ocfs2_read_locked_inode:554 ERROR: status = -12 [ 516.523891][ T2950] (kworker/u4:8,2950,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 516.816017][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 517.020630][ T51] Bluetooth: hci5: command tx timeout [ 517.317833][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 517.554594][ T8] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 517.583610][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.857672][ T8] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 517.912332][T14065] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 517.970973][T14065] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm cxacru: checksumming directory block 0 [ 518.028201][T14065] cxacru 5-1:1.0: loading /lib/firmware/updates/syzkaller/cxacru-fw.bin failed with error -74 [ 518.079794][T14065] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 518.138594][ T8] usb 5-1: USB disconnect, device number 24 [ 518.159175][T14065] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm cxacru: checksumming directory block 0 [ 518.203529][T14065] cxacru 5-1:1.0: loading /lib/firmware/updates/cxacru-fw.bin failed with error -74 [ 518.230611][T14065] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 518.288967][T14065] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm cxacru: checksumming directory block 0 [ 518.334655][T14065] cxacru 5-1:1.0: loading /lib/firmware/syzkaller/cxacru-fw.bin failed with error -74 [ 518.345961][T14065] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm cxacru: No space for directory leaf checksum. Please run e2fsck -D. [ 518.391102][T14065] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm cxacru: checksumming directory block 0 [ 518.423342][T14065] cxacru 5-1:1.0: loading /lib/firmware/cxacru-fw.bin failed with error -74 [ 518.457934][T14065] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -74 [ 518.485739][T14065] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 518.640829][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.810151][ T12] team0 (unregistering): Port device team_slave_0 removed [ 518.932020][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.033129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.077186][ T51] Bluetooth: hci5: command tx timeout [ 519.772880][ T12] bond0 (unregistering): Released all slaves [ 520.080192][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.196244][T13941] veth0_vlan: entered promiscuous mode [ 520.347477][T13941] veth1_vlan: entered promiscuous mode [ 520.514733][T13941] veth0_macvtap: entered promiscuous mode [ 520.622857][T13941] veth1_macvtap: entered promiscuous mode [ 520.702305][ T12] IPVS: stop unused estimator thread 0... [ 520.734114][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.795596][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.830327][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.861522][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.922689][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.934007][ T5822] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 520.962038][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.982462][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.013418][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.054569][T13941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.134988][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.147862][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 521.158689][ T51] Bluetooth: hci5: command tx timeout [ 521.173165][ T5822] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 521.192107][ T5822] usb 3-1: config 179 has no interface number 0 [ 521.206628][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.221769][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 521.246619][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.266835][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 521.291627][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.310015][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.331385][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.350416][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 521.369991][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.386382][ T5822] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 521.413127][T13941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.434102][T13941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.444314][ T5822] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 521.464539][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.475878][T13941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.533134][T14073] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.549370][T13941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.638251][T13941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.676830][T13941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.701034][T13941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.435277][ T5822] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input34 [ 522.917688][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.925638][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.977231][ T5833] usb 3-1: USB disconnect, device number 30 [ 522.983221][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 522.983259][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 523.121959][ T5833] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 523.155339][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.200921][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.237104][ T51] Bluetooth: hci5: command tx timeout [ 523.342112][T14039] chnl_net:caif_netlink_parms(): no params data found [ 523.785956][T14039] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.844079][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.889104][T14039] bridge_slave_0: entered allmulticast mode [ 523.908231][T14039] bridge_slave_0: entered promiscuous mode [ 523.954661][T14039] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.976968][ T5822] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 524.027350][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.077290][T14039] bridge_slave_1: entered allmulticast mode [ 524.119291][T14039] bridge_slave_1: entered promiscuous mode [ 524.197620][ T5822] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 524.234465][ T5822] usb 7-1: config 0 has no interface number 0 [ 524.265566][T14039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.291210][ T5822] usb 7-1: config 0 interface 41 has no altsetting 0 [ 524.344022][ T5822] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 524.386675][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.397227][T14039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.445798][ T5822] usb 7-1: Product: syz [ 524.477101][ T5822] usb 7-1: Manufacturer: syz [ 524.507988][ T5822] usb 7-1: SerialNumber: syz [ 524.549225][ T5822] usb 7-1: config 0 descriptor?? [ 524.642305][T14039] team0: Port device team_slave_0 added [ 524.702988][T14039] team0: Port device team_slave_1 added [ 524.888382][T14131] bond0: entered promiscuous mode [ 524.943212][T14131] bond_slave_0: entered promiscuous mode [ 524.978891][T14131] bond_slave_1: entered promiscuous mode [ 525.005467][T14131] bond0: left promiscuous mode [ 525.029808][T14131] bond_slave_0: left promiscuous mode [ 525.050247][T14131] bond_slave_1: left promiscuous mode [ 525.127558][T14039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.152709][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.276978][T14039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.374570][T14039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.414747][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.457655][ T5822] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 525.553304][ T5822] CoreChips: probe of 7-1:0.41 failed with error -71 [ 525.604895][T14039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.616413][ T5822] usb 7-1: USB disconnect, device number 2 [ 525.921788][T14039] hsr_slave_0: entered promiscuous mode [ 525.978011][T14039] hsr_slave_1: entered promiscuous mode [ 526.013361][T14039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.051781][T14039] Cannot create hsr debugfs directory [ 527.273060][T14039] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 527.321730][T14039] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 527.332752][T14175] loop2: detected capacity change from 0 to 16 [ 527.401282][T14175] erofs: (device loop2): mounted with root inode @ nid 36. [ 527.437744][T14039] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 527.509357][T14039] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 527.989736][T14039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.074394][T14039] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.174208][T13809] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.181479][T13809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.301790][T13809] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.309088][T13809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.647171][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 528.867102][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 528.889173][ T5833] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.931943][ T5833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 528.960198][ T5833] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 528.995766][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.049463][ T5833] usb 7-1: config 0 descriptor?? [ 529.150993][T14039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.527328][ T5833] lua 0003:1E7D:2C2E.001C: unknown global tag 0xd [ 529.586652][ T5833] lua 0003:1E7D:2C2E.001C: item 0 2 1 13 parsing failed [ 529.634574][ T5833] lua 0003:1E7D:2C2E.001C: parse failed [ 529.664112][ T5833] lua: probe of 0003:1E7D:2C2E.001C failed with error -22 [ 529.728041][ T5833] usb 7-1: USB disconnect, device number 3 [ 530.627813][T14039] veth0_vlan: entered promiscuous mode [ 530.678413][ T51] Bluetooth: hci5: command tx timeout [ 530.736227][T14039] veth1_vlan: entered promiscuous mode [ 530.894288][T14039] veth0_macvtap: entered promiscuous mode [ 530.956098][T14039] veth1_macvtap: entered promiscuous mode [ 531.139395][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.216593][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.268287][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.317650][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.346916][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.367821][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.382316][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.395620][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.412878][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.424097][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.440174][T14039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.487458][ T5833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 531.524005][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.600071][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.626025][T14241] loop2: detected capacity change from 0 to 128 [ 531.645917][T14242] loop4: detected capacity change from 0 to 256 [ 531.652377][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.694520][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.718476][T14242] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.739711][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.761314][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.804499][ T5833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.836809][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.883764][ T5833] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 531.910620][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.937699][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.987522][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.001209][ T5833] usb 7-1: SerialNumber: syz [ 532.025521][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.054098][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.118404][T14039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.244898][ T5833] usb 7-1: 0:2 : does not exist [ 532.254726][T14039] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.317827][T14039] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.344924][ T5833] usb 7-1: USB disconnect, device number 4 [ 532.373984][T14039] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.425137][ T9163] udevd[9163]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.447764][T14039] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.875942][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.924825][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.111858][T14255] loop2: detected capacity change from 0 to 128 [ 533.124969][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.176967][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.297821][T14255] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 533.367376][T14258] loop4: detected capacity change from 0 to 1024 [ 533.407483][T14255] hpfs: filesystem error: improperly stopped [ 533.413554][T14255] hpfs: You really don't want any checks? You are crazy... [ 533.524794][T14255] hpfs: hpfs_map_sector(): read error [ 533.587472][T14255] hpfs: code page support is disabled [ 533.594599][T14255] hpfs: hpfs_map_4sectors(): unaligned read [ 533.660168][T14265] hfsplus: xattr exists yet [ 533.713387][T14255] hpfs: hpfs_map_4sectors(): unaligned read [ 533.804922][T14255] hpfs: filesystem error: unable to find root dir [ 534.583839][T14283] loop2: detected capacity change from 0 to 256 [ 534.733238][T14283] FAT-fs (loop2): Directory bread(block 64) failed [ 534.795883][T14283] FAT-fs (loop2): Directory bread(block 65) failed [ 534.856448][T14283] FAT-fs (loop2): Directory bread(block 66) failed [ 534.863215][T14283] FAT-fs (loop2): Directory bread(block 67) failed [ 534.978124][T14283] FAT-fs (loop2): Directory bread(block 68) failed [ 535.032327][T14283] FAT-fs (loop2): Directory bread(block 69) failed [ 535.059807][T14283] FAT-fs (loop2): Directory bread(block 70) failed [ 535.066374][T14283] FAT-fs (loop2): Directory bread(block 71) failed [ 535.122829][T14283] FAT-fs (loop2): Directory bread(block 72) failed [ 535.148615][T14283] FAT-fs (loop2): Directory bread(block 73) failed [ 535.421891][T14283] syz.2.3179: attempt to access beyond end of device [ 535.421891][T14283] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 535.898292][T14301] loop2: detected capacity change from 0 to 512 [ 535.935959][T14301] EXT4-fs: inline encryption not supported [ 536.009484][T14301] EXT4-fs (loop2): Test dummy encryption mode enabled [ 536.016296][T14301] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 536.039558][T14292] loop7: detected capacity change from 0 to 32768 [ 536.157430][T14301] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.3185: bad orphan inode 131083 [ 536.171866][T14308] loop6: detected capacity change from 0 to 64 [ 536.186001][T14292] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 536.253780][T14301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.457912][T14301] EXT4-fs (loop2): shut down requested (1) [ 536.672934][T14039] ocfs2: Unmounting device (7,7) on (node local) [ 536.682637][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.056318][T14320] loop2: detected capacity change from 0 to 512 [ 537.164043][T14320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.282322][T14320] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.3188: bad orphan inode 15 [ 537.353586][T14320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.514706][T14320] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.3188: reserved inode found cleared - inode=17 [ 537.822320][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.014716][T14337] loop6: detected capacity change from 0 to 128 [ 538.261671][T14344] loop2: detected capacity change from 0 to 512 [ 538.858027][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 270 seconds [ 538.868970][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 270 seconds [ 538.880148][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 270 seconds [ 538.893968][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 270 seconds [ 539.093899][T14353] loop4: detected capacity change from 0 to 1024 [ 539.239201][T14353] EXT4-fs: Ignoring removed orlov option [ 539.310784][T14360] loop6: detected capacity change from 0 to 256 [ 539.398402][T14353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.540121][T14366] loop2: detected capacity change from 0 to 8 [ 539.577186][T14360] FAT-fs (loop6): Directory bread(block 64) failed [ 539.620126][T14366] squashfs image failed sanity check [ 539.646784][T14360] FAT-fs (loop6): Directory bread(block 65) failed [ 539.710054][T14360] FAT-fs (loop6): Directory bread(block 66) failed [ 539.767134][T14360] FAT-fs (loop6): Directory bread(block 67) failed [ 539.774305][T14360] FAT-fs (loop6): Directory bread(block 68) failed [ 539.862217][ T9176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.900756][T14360] FAT-fs (loop6): Directory bread(block 69) failed [ 539.952333][T14360] FAT-fs (loop6): Directory bread(block 70) failed [ 540.015237][T14360] FAT-fs (loop6): Directory bread(block 71) failed [ 540.058245][T14360] FAT-fs (loop6): Directory bread(block 72) failed [ 540.065607][T14360] FAT-fs (loop6): Directory bread(block 73) failed [ 540.522860][T14360] syz.6.3203: attempt to access beyond end of device [ 540.522860][T14360] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 541.333654][T14397] kAFS: bad VL server IP address [ 541.739783][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3219'. [ 541.811565][T14410] block2mtd: too many arguments [ 541.926924][T14412] netlink: 'syz.6.3222': attribute type 3 has an invalid length. [ 541.984132][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3222'. [ 542.093121][T14416] netlink: 'syz.4.3223': attribute type 12 has an invalid length. [ 542.117770][T14416] netlink: 'syz.4.3223': attribute type 29 has an invalid length. [ 542.146798][T14416] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3223'. [ 542.221986][T14416] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 542.268984][T14416] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3223'. [ 542.421425][T14423] loop7: detected capacity change from 0 to 512 [ 542.595474][T14423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.696143][T14423] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.064561][T14423] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 543.141509][T14423] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 543.226883][T14423] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.3226: Failed to acquire dquot type 0 [ 543.635588][T14039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 545.318384][T14478] netlink: 'syz.2.3242': attribute type 12 has an invalid length. [ 545.352038][T14478] netlink: 'syz.2.3242': attribute type 29 has an invalid length. [ 545.398091][T14478] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3242'. [ 545.457088][T14478] netlink: 'syz.2.3242': attribute type 2 has an invalid length. [ 545.500573][T14478] netlink: 'syz.2.3242': attribute type 3 has an invalid length. [ 545.538877][T14478] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3242'. [ 545.910989][T14460] loop7: detected capacity change from 0 to 40427 [ 545.921461][T14486] autofs4:pid:14486:autofs_fill_super: could not open pipe file descriptor [ 545.967114][T14059] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 546.019724][T14460] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 546.065241][T14460] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 546.125189][T14460] F2FS-fs (loop7): invalid crc value [ 546.192414][T14059] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 546.242512][T14059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.266884][T14460] F2FS-fs (loop7): Found nat_bits in checkpoint [ 546.321066][T14059] usb 7-1: config 0 descriptor?? [ 546.355535][T14059] cp210x 7-1:0.0: cp210x converter detected [ 546.514672][T14499] loop4: detected capacity change from 0 to 2048 [ 546.638479][T14460] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 546.708899][T14499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.721878][T14460] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 546.772219][T14059] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 546.839317][T14059] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 546.910882][T14059] usb 7-1: cp210x converter now attached to ttyUSB0 [ 546.959834][T14499] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 547.103370][T14059] usb 7-1: USB disconnect, device number 5 [ 547.138072][T14499] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 547.195219][T14059] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 547.234790][T14499] EXT4-fs (loop4): This should not happen!! Data will be lost [ 547.234790][T14499] [ 547.247098][T14059] cp210x 7-1:0.0: device disconnected [ 547.295868][T14499] EXT4-fs (loop4): Total free blocks count 0 [ 547.323284][T14499] EXT4-fs (loop4): Free/Dirty block details [ 547.386086][T14499] EXT4-fs (loop4): free_blocks=66060288 [ 547.412988][T14499] EXT4-fs (loop4): dirty_blocks=32 [ 547.442258][T14499] EXT4-fs (loop4): Block reservation details [ 547.469426][T14499] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 547.499131][T14510] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2 with error 28 [ 548.068739][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3251'. [ 548.184950][T14507] loop2: detected capacity change from 0 to 40427 [ 548.237171][T14507] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 548.291021][T14507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 548.356215][T14520] ip_tables: iptables: counters copy to user failed while replacing table [ 548.379156][T14507] F2FS-fs (loop2): invalid crc value [ 548.439008][T14507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 548.725545][T14507] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 548.735406][T14527] ip_tables: iptables: counters copy to user failed while replacing table [ 548.778703][T14507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 549.006200][T14532] syz.2.3249: attempt to access beyond end of device [ 549.006200][T14532] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 549.673024][T14549] program syz.7.3263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.734100][T14553] loop6: detected capacity change from 0 to 64 [ 550.530829][T14565] loop6: detected capacity change from 0 to 8 [ 551.220646][T14579] loop2: detected capacity change from 0 to 256 [ 551.285114][T14579] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 551.486641][ T28] audit: type=1800 audit(1786047804.561:102): pid=14579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3262" name="file1" dev="loop2" ino=1048742 res=0 errno=0 [ 552.086322][T14589] loop4: detected capacity change from 0 to 4096 [ 552.139055][T14589] EXT4-fs: inline encryption not supported [ 552.248391][T14589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.344765][T14589] EXT4-fs (loop4): Test dummy encryption mode enabled [ 552.437572][T14589] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c0a8, mo2=0003] [ 552.542729][T14589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.849997][T14607] program syz.2.3282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.994028][ T9176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.138565][T14611] netlink: 'syz.6.3284': attribute type 2 has an invalid length. [ 553.796880][ T5833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 554.013674][ T5833] usb 7-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 554.057941][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.144484][ T5833] usb-storage 7-1:1.0: USB Mass Storage device detected [ 554.219311][ T5833] usb-storage 7-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 554.257820][ T5833] scsi host1: usb-storage 7-1:1.0 [ 554.482712][ T5833] usb 7-1: USB disconnect, device number 6 [ 554.550975][T14643] loop2: detected capacity change from 0 to 256 [ 554.613669][T14643] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 555.271113][T14649] loop7: detected capacity change from 0 to 4096 [ 555.372025][T14657] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.633018][T14664] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 1882 already freed [ 555.767353][T14664] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 556.889919][T14660] loop2: detected capacity change from 0 to 40427 [ 556.946743][T14660] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 556.995705][T14660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 557.067570][T14660] F2FS-fs (loop2): invalid crc value [ 557.134118][T14660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 557.456586][T14660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 557.512386][T14660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 558.070888][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3305'. [ 558.245764][T14679] loop7: detected capacity change from 0 to 32768 [ 558.373103][T14679] JBD2: Ignoring recovery information on journal [ 558.538926][T14679] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 558.929117][T14679] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 559.116786][T14679] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 559.166922][T14679] OCFS2: File system is now read-only. [ 559.172550][T14679] (syz.7.3302,14679,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 559.253302][T14679] (syz.7.3302,14679,0):ocfs2_remove_inode:732 ERROR: status = -30 [ 559.297622][T14679] (syz.7.3302,14679,0):ocfs2_wipe_inode:854 ERROR: status = -30 [ 559.306253][T14679] (syz.7.3302,14679,0):ocfs2_delete_inode:1115 ERROR: status = -30 [ 559.687781][T14039] ocfs2: Unmounting device (7,7) on (node local) [ 560.419003][T14729] netem: change failed [ 561.818539][T14753] loop2: detected capacity change from 0 to 8192 [ 561.870901][T14753] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 561.980153][T14753] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 562.044671][T14753] REISERFS (device loop2): using ordered data mode [ 562.090316][T14753] reiserfs: using flush barriers [ 562.131905][T14753] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 562.222287][T14753] REISERFS (device loop2): checking transaction log (loop2) [ 562.651531][T14753] REISERFS (device loop2): Using tea hash to sort names [ 562.710203][T14753] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 562.974823][ T28] audit: type=1804 audit(1786048072.048:103): pid=14753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3318" name="/newroot/851/file6/file0" dev="loop2" ino=4 res=1 errno=0 [ 563.163365][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.171816][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.044221][T14809] loop6: detected capacity change from 0 to 256 [ 565.331160][ T28] audit: type=1326 audit(1786048074.408:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 565.508658][ T28] audit: type=1326 audit(1786048074.448:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 565.675389][ T28] audit: type=1326 audit(1786048074.458:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 565.835856][T14825] loop6: detected capacity change from 0 to 512 [ 565.857386][ T28] audit: type=1326 audit(1786048074.458:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 565.911599][T14825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 566.006634][T14825] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 566.056604][ T28] audit: type=1326 audit(1786048074.468:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 566.141994][T14825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102] [ 566.169293][T14831] loop7: detected capacity change from 0 to 256 [ 566.198347][T14832] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.215362][T14825] System zones: 1-12 [ 566.231032][T14825] EXT4-fs (loop6): orphan cleanup on readonly fs [ 566.276165][T14831] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 566.296829][ T28] audit: type=1326 audit(1786048074.468:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 566.327667][T14825] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3337: invalid indirect mapped block 2 (level 2) [ 566.467534][T14825] EXT4-fs (loop6): 1 truncate cleaned up [ 566.512976][T14825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 566.542377][ T28] audit: type=1326 audit(1786048074.468:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 566.727109][T14825] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 5: comm syz.6.3337: lblock 0 mapped to illegal pblock 5 (length 1) [ 566.756837][ T28] audit: type=1326 audit(1786048074.468:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 566.860177][T14825] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.3337: error -117 reading directory block [ 566.971711][ T28] audit: type=1326 audit(1786048074.468:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14813 comm="syz.7.3334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 567.025183][T14841] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #2: block 5: comm syz.6.3337: lblock 0 mapped to illegal pblock 5 (length 1) [ 567.103803][T14844] loop4: detected capacity change from 0 to 16 [ 567.118181][T14841] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.3337: error -117 reading directory block [ 567.204631][T14844] erofs: (device loop4): mounted with root inode @ nid 36. [ 567.400019][T13941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 567.693437][T14851] block2mtd: error: cannot open device /dev/loop0 [ 567.734934][T14855] loop6: detected capacity change from 0 to 256 [ 567.781752][T14855] exfat: Deprecated parameter 'utf8' [ 567.821284][T14855] exfat: Deprecated parameter 'utf8' [ 567.884820][T14855] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 568.613538][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 568.613550][ T28] audit: type=1326 audit(1786048077.688:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 568.812437][ T28] audit: type=1326 audit(1786048077.728:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 568.956236][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 300 seconds [ 568.969775][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 300 seconds [ 568.981495][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 300 seconds [ 568.992895][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 300 seconds [ 569.037739][ T28] audit: type=1326 audit(1786048077.728:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 569.144559][T14872] loop7: detected capacity change from 0 to 4096 [ 569.194584][T14872] EXT4-fs: Ignoring removed mblk_io_submit option [ 569.218158][ T28] audit: type=1326 audit(1786048077.748:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 569.399808][T14872] EXT4-fs (loop7): Test dummy encryption mode enabled [ 569.418906][ T28] audit: type=1326 audit(1786048077.748:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 569.518422][T14872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.563139][T14857] loop2: detected capacity change from 0 to 40427 [ 569.600088][ T28] audit: type=1326 audit(1786048077.748:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 569.690803][T14857] F2FS-fs (loop2): invalid crc value [ 569.778877][T14857] F2FS-fs (loop2): Found nat_bits in checkpoint [ 569.836750][ T28] audit: type=1326 audit(1786048077.748:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 569.970685][T14865] loop6: detected capacity change from 0 to 32768 [ 570.051156][T14880] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 570.082174][ T28] audit: type=1326 audit(1786048077.758:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 570.202403][T14857] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 570.237842][T14865] JBD2: Ignoring recovery information on journal [ 570.355617][ T28] audit: type=1326 audit(1786048077.758:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 570.444398][T14039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.504507][T14865] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 570.597985][ T28] audit: type=1326 audit(1786048077.758:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14867 comm="syz.7.3355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 570.788149][ T5779] syz-executor: attempt to access beyond end of device [ 570.788149][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 570.891949][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 570.916197][T14865] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 571.073372][T14865] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 571.150435][T14865] OCFS2: File system is now read-only. [ 571.155945][T14865] (syz.6.3353,14865,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 571.211605][T14898] loop7: detected capacity change from 0 to 128 [ 571.228009][T14865] (syz.6.3353,14865,0):ocfs2_remove_inode:732 ERROR: status = -30 [ 571.235950][T14865] (syz.6.3353,14865,0):ocfs2_wipe_inode:854 ERROR: status = -30 [ 571.345558][T14865] (syz.6.3353,14865,0):ocfs2_delete_inode:1115 ERROR: status = -30 [ 571.676659][T13941] ocfs2: Unmounting device (7,6) on (node local) [ 571.918765][T14905] loop4: detected capacity change from 0 to 128 [ 572.257301][T14908] loop7: detected capacity change from 0 to 512 [ 572.333696][T14908] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 572.426973][T14908] EXT4-fs (loop7): 1 truncate cleaned up [ 572.433577][T14908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.122405][T14039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.471531][T14929] sctp: [Deprecated]: syz.7.3370 (pid 14929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.471531][T14929] Use struct sctp_sack_info instead [ 575.415592][T14954] loop2: detected capacity change from 0 to 32768 [ 575.434881][T14953] loop7: detected capacity change from 0 to 32768 [ 575.511978][T14954] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 575.522988][T14953] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 575.579559][T14954] JBD2: Ignoring recovery information on journal [ 575.625976][T14953] JBD2: Ignoring recovery information on journal [ 575.747164][T14954] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 575.799796][T14953] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 576.164817][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 576.175861][T14039] ocfs2: Unmounting device (7,7) on (node local) [ 577.104730][T14984] loop7: detected capacity change from 0 to 2048 [ 577.150269][T14986] loop6: detected capacity change from 0 to 1024 [ 577.172307][T14984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.219257][T14986] EXT4-fs: Ignoring removed orlov option [ 577.329960][T14986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.674043][T13941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.855903][T14996] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.242465][T15006] loop9: detected capacity change from 0 to 255852544 [ 578.367817][T15009] loop9: detected capacity change from 255852544 to 524287871 [ 578.384762][T15010] loop4: detected capacity change from 0 to 512 [ 578.456953][ C0] I/O error, dev loop9, sector 255852416 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 578.473353][ C0] I/O error, dev loop9, sector 255852416 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.483737][ C0] buffer_io_error: 138 callbacks suppressed [ 578.483747][ C0] Buffer I/O error on dev loop9, logical block 31981552, async page read [ 578.501874][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.511086][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.545411][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.554788][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.583683][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.592933][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.603244][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.612515][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.625096][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.634336][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.643365][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.652568][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.670081][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.679344][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.693792][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.703144][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.711872][T15009] ldm_validate_partition_table(): Disk read failed. [ 578.721394][T15010] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 578.754705][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.764590][T14059] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 578.779654][T15009] Dev loop9: unable to read RDB block 0 [ 578.786972][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3409'. [ 578.808581][T15010] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 578.832803][T15009] loop9: unable to read partition table [ 578.854760][T15009] loop_reread_partitions: partition scan of loop9 (žXHuJ[dw|i4F-ڣrwǘ3UȞJ?"e) failed (rc=-5) [ 578.907650][T15010] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 578.989606][T15010] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 578.998173][T14059] usb 7-1: Using ep0 maxpacket: 8 [ 579.044398][T14059] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 579.075359][T15010] System zones: 0-2, 18-18, 34-35 [ 579.085329][T14059] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 579.131454][T15010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.187841][T14059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.242616][T14059] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 579.338094][T14059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 579.417676][T15010] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 579.442500][T14059] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.530434][T14059] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.600884][T14059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.743988][ T9176] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.898733][T14059] usb 7-1: GET_CAPABILITIES returned 0 [ 579.963629][T14059] usbtmc 7-1:16.0: can't read capabilities [ 580.225220][ T173] usb 7-1: USB disconnect, device number 7 [ 580.413921][T15037] autofs4:pid:15037:autofs_fill_super: pipe file descriptor does not contain proper ops [ 580.606219][T15039] loop2: detected capacity change from 0 to 2048 [ 580.684527][T15039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 581.389865][T15055] gadgetfs: bound to dummy_udc driver [ 581.543373][T15057] loop7: detected capacity change from 0 to 4096 [ 581.643275][T15059] input: syz0 as /devices/virtual/input/input35 [ 581.653931][T15057] __ntfs_error: 47 callbacks suppressed [ 581.653946][T15057] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 581.779637][T15057] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 581.879683][T15057] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 581.933235][T15057] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 582.023196][T15057] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 582.114210][T15057] ntfs: volume version 3.1. [ 582.191204][T15057] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 582.256884][T15057] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 582.331475][T15057] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 582.397086][T15057] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 582.437990][T15057] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 583.350512][T15072] loop6: detected capacity change from 0 to 32768 [ 583.421504][T15072] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 583.644376][T15072] (syz.6.3431,15072,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 583.721249][T14065] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 583.737249][T15072] (syz.6.3431,15072,0):ocfs2_rename:1299 ERROR: status = -2 [ 583.768476][T15072] (syz.6.3431,15072,0):ocfs2_rename:1690 ERROR: status = -2 [ 583.872300][T15074] loop7: detected capacity change from 0 to 32768 [ 584.011452][T13941] ocfs2: Unmounting device (7,6) on (node local) [ 584.146959][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 584.334538][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 585.326069][ T5833] hid-generic 0005:16C0:05DF.001D: item fetching failed at offset 0/2 [ 585.390714][ T5833] hid-generic: probe of 0005:16C0:05DF.001D failed with error -22 [ 585.903357][T15126] loop4: detected capacity change from 0 to 256 [ 585.989438][T15126] FAT-fs (loop4): Directory bread(block 64) failed [ 586.043911][T15126] FAT-fs (loop4): Directory bread(block 65) failed [ 586.071102][T15126] FAT-fs (loop4): Directory bread(block 66) failed [ 586.110295][T15126] FAT-fs (loop4): Directory bread(block 67) failed [ 586.160011][T15126] FAT-fs (loop4): Directory bread(block 68) failed [ 586.188936][T15126] FAT-fs (loop4): Directory bread(block 69) failed [ 586.222472][T15126] FAT-fs (loop4): Directory bread(block 70) failed [ 586.252242][T15126] FAT-fs (loop4): Directory bread(block 71) failed [ 586.300433][T15126] FAT-fs (loop4): Directory bread(block 72) failed [ 586.343193][T15126] FAT-fs (loop4): Directory bread(block 73) failed [ 586.715680][T15136] loop7: detected capacity change from 0 to 1024 [ 587.065604][T15125] loop2: detected capacity change from 0 to 32768 [ 587.204829][T15125] JBD2: Ignoring recovery information on journal [ 587.375804][T15125] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 587.882621][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 589.371485][T15193] program syz.6.3481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.132149][T15211] loop4: detected capacity change from 0 to 256 [ 590.152536][T15214] loop2: detected capacity change from 0 to 512 [ 590.203793][T15211] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.305054][T15214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.411468][T15214] ext4 filesystem being mounted at /895/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.502995][T15220] loop6: detected capacity change from 0 to 512 [ 590.653647][T15220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.820851][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 590.820862][ T28] audit: type=1800 audit(1786048099.898:181): pid=15220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3492" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 590.877579][T15220] fs-verity: sha512 using implementation "sha512-avx2" [ 590.885254][T15220] EXT4-fs warning (device loop6): ext4_begin_enable_verity:135: inode #13: comm syz.6.3492: verity is only allowed on extent-based files [ 591.035035][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.131307][T13941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.397069][T14086] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 591.520794][T15206] loop7: detected capacity change from 0 to 40427 [ 591.600893][T15206] F2FS-fs (loop7): invalid crc value [ 591.607009][T14086] usb 5-1: Using ep0 maxpacket: 32 [ 591.645545][T14086] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 591.674949][T15206] F2FS-fs (loop7): Found nat_bits in checkpoint [ 591.688779][T14086] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 591.755184][T14086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 591.868768][T14086] usb 5-1: config 1 has no interface number 0 [ 591.886425][T14086] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.938794][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 591.973794][T14086] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 591.997994][T15206] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 592.005881][T15240] loop2: detected capacity change from 0 to 512 [ 592.048053][T15240] EXT4-fs: inline encryption not supported [ 592.104291][T14086] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 592.176611][T15240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.194259][T14086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.220077][T15240] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.265784][T14086] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 592.370972][T15240] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 592.419187][T14039] syz-executor: attempt to access beyond end of device [ 592.419187][T14039] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 592.454725][T15240] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 592.506052][T15240] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3499: Failed to acquire dquot type 1 [ 592.522828][T14086] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 592.541410][T14039] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 592.603910][T15240] EXT4-fs (loop2): Remounting filesystem read-only [ 592.642314][T15240] EXT4-fs (loop2): 1 truncate cleaned up [ 592.680915][T15240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.883303][T15249] program syz.6.3503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.980320][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.026221][T14086] usb 5-1: USB disconnect, device number 26 [ 593.087471][T14086] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 594.126200][T15274] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3502'. [ 594.137388][T15273] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 594.146868][ T8] IPVS: starting estimator thread 0... [ 594.256926][T15275] IPVS: using max 26 ests per chain, 62400 per kthread [ 595.006238][T15285] loop7: detected capacity change from 0 to 8192 [ 595.041141][T15285] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 595.122208][T15285] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 595.166613][T14086] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 595.197256][T15285] REISERFS (device loop7): using ordered data mode [ 595.203823][T15285] reiserfs: using flush barriers [ 595.282234][T15285] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 595.401244][T15285] REISERFS (device loop7): checking transaction log (loop7) [ 595.409815][T14086] usb 5-1: Using ep0 maxpacket: 8 [ 595.426195][ T2950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.467360][T14086] usb 5-1: unable to get BOS descriptor or descriptor too short [ 595.514991][T14086] usb 5-1: no configurations [ 595.530074][ T2950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.546721][T14086] usb 5-1: can't read configurations, error -22 [ 595.691049][T15285] REISERFS (device loop7): Using tea hash to sort names [ 595.737712][T15285] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 595.878470][T15279] loop6: detected capacity change from 0 to 40427 [ 595.935710][T15279] F2FS-fs (loop6): invalid crc value [ 596.011740][ T2950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.070499][T15279] F2FS-fs (loop6): Found nat_bits in checkpoint [ 596.093496][ T2950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.435412][T15279] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 596.626118][ T2950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.724363][ T2950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.164920][ T2950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.240493][ T2950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.727697][T15299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.739773][T15299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.756896][T15299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.777188][T15299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.784788][T15299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 597.792948][T15299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.336945][ T2950] tipc: Disabling bearer [ 598.357207][ T2950] tipc: Left network mode [ 598.999930][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 330 seconds [ 599.011140][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 330 seconds [ 599.022541][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 330 seconds [ 599.034007][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 330 seconds [ 599.543845][T15305] loop6: detected capacity change from 0 to 32768 [ 599.589290][T15322] loop7: detected capacity change from 0 to 512 [ 599.668636][T15322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.691369][T15305] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 599.749771][T15305] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 599.783147][T15322] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.872201][T15305] XFS (loop6): Ending clean mount [ 599.883469][T15299] Bluetooth: hci0: command tx timeout [ 599.989532][T15305] XFS (loop6): Quotacheck needed: Please wait. [ 600.276014][T15305] XFS (loop6): Quotacheck: Done. [ 600.318072][T14039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.501751][T15305] XFS (loop6): User initiated shutdown received. [ 600.562417][T15305] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 600.673974][T15305] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 600.860173][T13941] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 601.485489][T15350] ipvlan0: entered promiscuous mode [ 601.562040][T15350] ipvlan0: left promiscuous mode [ 601.625105][T15297] chnl_net:caif_netlink_parms(): no params data found [ 601.899812][T15353] loop6: detected capacity change from 0 to 4096 [ 601.966591][T15299] Bluetooth: hci0: command tx timeout [ 601.974039][T15353] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 602.093537][T15345] loop7: detected capacity change from 0 to 32768 [ 602.175015][T15353] ntfs: volume version 3.1. [ 602.212324][T15345] [ 602.212324][T15345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 602.212324][T15345] [ 602.386420][T15353] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 602.497982][ T2923] ERROR: (device loop7): diWrite: ixpxd invalid [ 602.497982][ T2923] [ 602.536110][T15353] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 602.586764][ T2923] ERROR: (device loop7): txCommit: [ 602.586764][ T2923] [ 602.656635][ T2923] jfs_write_inode: jfs_commit_inode failed! [ 602.725846][T14039] [ 602.725846][T14039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 602.725846][T14039] [ 602.797099][T14039] [ 602.797099][T14039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 602.797099][T14039] [ 603.481212][ T28] audit: type=1326 audit(1786048112.558:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15376 comm="syz.4.3536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2bdd9e0d9 code=0x0 [ 603.737415][ T5833] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 603.745231][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.783726][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.811322][T15297] bridge_slave_0: entered allmulticast mode [ 603.841479][T15297] bridge_slave_0: entered promiscuous mode [ 603.863608][T15385] loop7: detected capacity change from 0 to 4096 [ 603.970216][ T5833] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 604.005516][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.038095][T15299] Bluetooth: hci0: command tx timeout [ 604.092631][ T5833] usb 7-1: config 0 descriptor?? [ 604.149484][ T5833] cp210x 7-1:0.0: cp210x converter detected [ 604.169017][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.210593][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.265842][T15297] bridge_slave_1: entered allmulticast mode [ 604.325488][T15297] bridge_slave_1: entered promiscuous mode [ 604.607873][ T5833] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 604.684529][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.707855][ T5833] usb 7-1: cp210x converter now attached to ttyUSB0 [ 604.825866][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.884482][ T5833] usb 7-1: USB disconnect, device number 8 [ 604.984037][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 605.132132][ T5833] cp210x 7-1:0.0: device disconnected [ 605.315106][T15297] team0: Port device team_slave_0 added [ 605.389819][ T2950] hsr_slave_0: left promiscuous mode [ 605.545402][ T2950] hsr_slave_1: left promiscuous mode [ 605.657837][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.665306][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.733397][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.782553][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.825892][ T2950] bridge_slave_1: left allmulticast mode [ 605.852712][ T2950] bridge_slave_1: left promiscuous mode [ 605.882954][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.927869][ T2950] bridge_slave_0: left allmulticast mode [ 605.954234][ T2950] bridge_slave_0: left promiscuous mode [ 605.983253][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.117064][T15299] Bluetooth: hci0: command tx timeout [ 606.144148][ T2950] veth1_macvtap: left promiscuous mode [ 606.158982][ T2950] veth0_macvtap: left promiscuous mode [ 606.184837][ T2950] veth1_vlan: left promiscuous mode [ 606.209478][ T2950] veth0_vlan: left promiscuous mode [ 607.611098][T15419] loop7: detected capacity change from 0 to 32768 [ 607.635181][T15419] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop7 scanned by syz.7.3544 (15419) [ 607.727686][T15419] BTRFS info (device loop7): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 607.772762][T15419] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 607.804139][T15419] BTRFS info (device loop7): using free space tree [ 607.965618][T15419] BTRFS info (device loop7): enabling ssd optimizations [ 607.984517][T15419] BTRFS info (device loop7): auto enabling async discard [ 608.493615][T14039] BTRFS info (device loop7): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 609.775359][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 609.880255][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 609.982355][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.082692][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.897459][ T2950] bond0 (unregistering): Released all slaves [ 611.061038][T15297] team0: Port device team_slave_1 added [ 611.104704][T15399] hsr0: entered promiscuous mode [ 611.116907][T15399] macsec1: entered allmulticast mode [ 611.122238][T15399] hsr0: entered allmulticast mode [ 611.137132][T15399] hsr_slave_0: entered allmulticast mode [ 611.142898][T15399] hsr_slave_1: entered allmulticast mode [ 611.159152][T15399] hsr0: left allmulticast mode [ 611.164026][T15399] hsr_slave_0: left allmulticast mode [ 611.175186][T15399] hsr_slave_1: left allmulticast mode [ 611.338266][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.345252][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.577499][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.644008][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.704267][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.791214][T15455] loop7: detected capacity change from 0 to 512 [ 611.881512][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.286271][T15297] hsr_slave_0: entered promiscuous mode [ 612.340962][T15465] loop7: detected capacity change from 0 to 256 [ 612.387062][T15297] hsr_slave_1: entered promiscuous mode [ 612.430210][T15465] exfat: Deprecated parameter 'namecase' [ 612.435912][T15465] exfat: Deprecated parameter 'namecase' [ 612.669193][T15465] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 612.810566][T15470] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 615.643966][T15297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 615.703105][T15297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 615.809226][T15297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 615.874312][T15297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 615.883752][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3575'. [ 615.901735][T15519] loop6: detected capacity change from 0 to 8192 [ 616.023489][T15501] loop4: detected capacity change from 0 to 32768 [ 616.268779][T15501] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 616.493842][T15297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.536911][T15501] XFS (loop4): Ending clean mount [ 616.699644][T15297] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.830546][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.837728][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.984864][T13809] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.992047][T13809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.104647][ T9176] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 618.054386][T15297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.342842][T15297] veth0_vlan: entered promiscuous mode [ 618.496238][T15297] veth1_vlan: entered promiscuous mode [ 618.722711][T15297] veth0_macvtap: entered promiscuous mode [ 618.802687][T15297] veth1_macvtap: entered promiscuous mode [ 618.946963][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.026745][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.091921][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.149796][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.220392][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.281968][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.329082][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.399030][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.409199][ T5833] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 619.456745][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.510125][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.583057][T15297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.666260][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 619.690852][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.708062][ T5833] usb 7-1: not running at top speed; connect to a high speed hub [ 619.765451][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.786876][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.821607][ T5833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.856550][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.907573][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.926599][ T5833] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 619.975164][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.997093][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.023195][ T5833] usb 7-1: Product: syz [ 620.050086][ T5833] usb 7-1: Manufacturer: syz [ 620.056950][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.090234][ T5833] usb 7-1: SerialNumber: syz [ 620.126240][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.186303][T15574] loop7: detected capacity change from 0 to 40427 [ 620.204708][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.234842][T15297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.252221][T15574] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 620.299319][T15574] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 620.321378][T15297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.372154][T15574] F2FS-fs (loop7): invalid crc value [ 620.380248][ T5833] usb 7-1: 3:0: failed to get current value for ch 1 (-71) [ 620.425907][T15297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.462551][ T5833] usb 7-1: 3:0: failed to get current value for ch 2 (-71) [ 620.475639][T15574] F2FS-fs (loop7): Found nat_bits in checkpoint [ 620.505968][T15297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.567590][ T5833] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 620.595176][T15297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.653866][T15297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.717239][ T5833] usb 7-1: USB disconnect, device number 9 [ 620.733613][T15297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.814293][ T9163] udevd[9163]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.935872][T15574] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 620.978986][T15574] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 621.431083][ T28] audit: type=1804 audit(1786048130.498:183): pid=15574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3587" name="/newroot/118/file0/file1" dev="loop7" ino=455 res=1 errno=0 [ 621.537359][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.545218][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.765320][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.814087][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.823154][ T2923] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 621.917942][ T2923] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 624.176634][ T173] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 624.397552][ T173] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.469797][ T173] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 624.534395][ T173] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 624.585282][ T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.607751][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.614090][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.652169][T15657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.699142][ T173] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 625.080856][ T173] usb 5-1: USB disconnect, device number 29 [ 625.146184][T15653] loop6: detected capacity change from 0 to 40427 [ 625.197043][T15653] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 625.243979][T15653] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 625.305835][T15653] F2FS-fs (loop6): invalid crc value [ 625.342526][T15653] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 625.435829][T15653] F2FS-fs (loop6): Found nat_bits in checkpoint [ 625.610379][T15685] loop2: detected capacity change from 0 to 256 [ 625.788813][T15653] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 625.852609][T15653] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 626.345898][T13941] syz-executor: attempt to access beyond end of device [ 626.345898][T13941] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 626.458345][T15699] can0: slcan on ttyS3. [ 626.466054][T13941] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 626.674288][T15702] console message test [ 626.679014][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 626.816806][T15698] can0 (unregistered): slcan off ttyS3. [ 627.644813][T15726] loop7: detected capacity change from 0 to 7 [ 627.732154][T15726] Dev loop7: unable to read RDB block 7 [ 627.776700][T15726] loop7: unable to read partition table [ 627.804019][T15726] loop7: partition table beyond EOD, truncated [ 627.846683][T15726] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 627.951265][ T5141] Dev loop7: unable to read RDB block 7 [ 627.996624][ T5141] loop7: unable to read partition table [ 628.037043][ T5141] loop7: partition table beyond EOD, truncated [ 628.495972][T15745] block2mtd: too many arguments [ 628.582845][ T28] audit: type=1326 audit(1786048137.658:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 628.756819][ T28] audit: type=1326 audit(1786048137.698:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 628.931553][ T28] audit: type=1326 audit(1786048137.698:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.060465][ T28] audit: type=1326 audit(1786048137.698:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.120233][T10510] block nbd0: Possible stuck request ffff888022458000: control (read@0,1024B). Runtime 360 seconds [ 629.131298][T10510] block nbd0: Possible stuck request ffff888022458200: control (read@1024,1024B). Runtime 360 seconds [ 629.142728][T10510] block nbd0: Possible stuck request ffff888022458400: control (read@2048,1024B). Runtime 360 seconds [ 629.156256][T10510] block nbd0: Possible stuck request ffff888022458600: control (read@3072,1024B). Runtime 360 seconds [ 629.282158][ T28] audit: type=1326 audit(1786048137.698:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.428056][ T28] audit: type=1326 audit(1786048137.698:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.588513][T15763] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 629.604132][ T28] audit: type=1326 audit(1786048137.698:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.770496][ T28] audit: type=1326 audit(1786048137.698:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 629.894179][T15737] loop2: detected capacity change from 0 to 40427 [ 629.959879][ T28] audit: type=1326 audit(1786048137.698:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 630.021887][T15299] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 630.030349][T15737] F2FS-fs (loop2): invalid crc value [ 630.115230][T15737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 630.186711][ T28] audit: type=1326 audit(1786048137.698:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15746 comm="syz.7.3632" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a279e0d9 code=0x7ffc0000 [ 630.472535][T15737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 630.903628][T15297] syz-executor: attempt to access beyond end of device [ 630.903628][T15297] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 631.004053][T15297] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 631.232918][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3652'. [ 632.286787][T14248] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 632.487063][T14248] usb 7-1: Using ep0 maxpacket: 16 [ 632.508286][T14248] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.559744][T14248] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.612223][T14248] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.652829][T14248] usb 7-1: config 0 interface 0 has no altsetting 0 [ 632.683214][T14248] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 632.716502][T14248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.755777][T14248] usb 7-1: config 0 descriptor?? [ 633.217974][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.255790][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.282716][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x2 [ 633.306794][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.315463][T15813] loop4: detected capacity change from 0 to 32768 [ 633.335539][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.358302][T15813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3661 (15813) [ 633.400334][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.441397][T14248] glorious 0003:258A:0033.001E: unknown main item tag 0x0 [ 633.492102][T15813] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.506082][T14248] glorious 0003:258A:0033.001E: item fetching failed at offset 10/40 [ 633.545143][T14248] glorious: probe of 0003:258A:0033.001E failed with error -22 [ 633.564892][T15813] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 633.609853][T15813] BTRFS info (device loop4): using free space tree [ 633.630631][T14248] usb 7-1: USB disconnect, device number 10 [ 633.816409][T15813] BTRFS info (device loop4): enabling ssd optimizations [ 633.843424][T15813] BTRFS info (device loop4): auto enabling async discard [ 634.036932][T15299] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 634.048614][T15299] Bluetooth: hci4: Injecting HCI hardware error event [ 634.059712][ T51] Bluetooth: hci4: hardware error 0x00 [ 634.534833][ T9176] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 634.817137][ T9163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (9163) [ 636.117660][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 636.306727][T15848] loop6: detected capacity change from 0 to 32768 [ 636.424126][T15848] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 636.462501][T15869] : renamed from vlan0 (while UP) [ 636.501354][T15848] JBD2: Ignoring recovery information on journal [ 636.646774][T15848] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 636.949970][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 636.949983][ T28] audit: type=1800 audit(1786048146.028:202): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3669" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 636.976763][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.173440][T13941] ocfs2: Unmounting device (7,6) on (node local) [ 637.897123][T15603] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 638.012610][T15901] loop6: detected capacity change from 0 to 1764 [ 638.112830][T15603] usb 5-1: Using ep0 maxpacket: 32 [ 638.136780][T15901] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 638.155684][T15603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.218900][T15603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.256086][T15603] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.313876][T15603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.345859][T15603] usb 5-1: config 0 descriptor?? [ 638.384080][T15603] hub 5-1:0.0: USB hub found [ 638.620789][T15603] hub 5-1:0.0: 10 ports detected [ 638.660237][T15603] hub 5-1:0.0: insufficient power available to use all downstream ports [ 638.721217][T15912] netlink: 4596 bytes leftover after parsing attributes in process `syz.6.3692'. [ 638.830146][T15603] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 638.867999][T15603] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 638.915758][T15603] usbhid 5-1:0.0: can't add hid device: -71 [ 638.944197][T15603] usbhid: probe of 5-1:0.0 failed with error -71 [ 639.018623][T15603] usb 5-1: USB disconnect, device number 30 [ 639.465432][T15922] loop7: detected capacity change from 0 to 512 [ 639.541654][T15922] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 639.768635][T15922] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.3697: corrupted xattr entries [ 639.890216][T15922] EXT4-fs (loop7): 1 truncate cleaned up [ 639.938003][T15922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.182241][T15922] EXT4-fs (loop7): shut down requested (1) [ 640.409980][T14039] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.808480][T15943] loop7: detected capacity change from 0 to 512 [ 641.680165][T15960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.688377][T15960] IPv6: NLM_F_CREATE should be set when creating new route [ 641.695872][T15960] IPv6: NLM_F_CREATE should be set when creating new route [ 641.703142][T15960] IPv6: NLM_F_CREATE should be set when creating new route [ 641.924542][T15960] netlink: 'syz.2.3708': attribute type 20 has an invalid length. [ 642.242947][T15936] loop4: detected capacity change from 0 to 32768 [ 642.521247][T15936] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 642.796666][T15936] XFS (loop4): Ending clean mount [ 643.167997][T15987] tap0: tun_chr_ioctl cmd 1074025677 [ 643.173559][T15987] tap0: linktype set to 777 [ 643.447973][ T9176] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 643.719641][T15999] loop7: detected capacity change from 0 to 256 [ 643.812982][T15997] kvm: kvm [15996]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2 [ 644.203012][T16009] Bluetooth: MGMT ver 1.22 [ 645.732155][T16015] loop6: detected capacity change from 0 to 32768 [ 645.797144][T16015] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 646.037978][T16038] loop2: detected capacity change from 0 to 128 [ 646.111724][T16038] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 646.136362][ T9163] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 646.229029][T16038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.576605][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 646.796824][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 646.835587][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 646.895998][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 646.976544][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.061385][ T9] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 647.142917][ T9] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 647.235519][T16057] sch_fq: defrate 0 ignored. [ 647.549424][ T9] usb 5-1: USB disconnect, device number 31 [ 647.596948][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 647.640838][ T9] spcp8x5 5-1:1.0: device disconnected [ 648.229421][T16074] loop7: detected capacity change from 0 to 4096 [ 648.375466][T16082] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 648.928526][T16092] i2c i2c-0: new_device: Missing parameters [ 649.547337][T16104] loop6: detected capacity change from 0 to 256 [ 649.704883][T16104] FAT-fs (loop6): Directory bread(block 64) failed [ 649.759378][T16104] FAT-fs (loop6): Directory bread(block 65) failed [ 649.766042][T16104] FAT-fs (loop6): Directory bread(block 66) failed [ 649.875836][T16104] FAT-fs (loop6): Directory bread(block 67) failed [ 649.929913][T16104] FAT-fs (loop6): Directory bread(block 68) failed [ 649.998889][T16104] FAT-fs (loop6): Directory bread(block 69) failed [ 650.050338][T16104] FAT-fs (loop6): Directory bread(block 70) failed [ 650.119381][T16104] FAT-fs (loop6): Directory bread(block 71) failed [ 650.126056][T16104] FAT-fs (loop6): Directory bread(block 72) failed [ 650.217960][T16104] FAT-fs (loop6): Directory bread(block 73) failed [ 650.704957][T16096] loop4: detected capacity change from 0 to 32768 [ 650.837417][ T29] INFO: task syz.5.3032:13720 blocked for more than 143 seconds. [ 650.882174][ T29] Not tainted syzkaller #0 [ 650.908778][T16096] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 650.926545][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 651.009152][ T29] task:syz.5.3032 state:D stack:25576 pid:13720 ppid:11348 flags:0x00004004 [ 651.061621][ T29] Call Trace: [ 651.081239][ T29] [ 651.101484][ T29] __schedule+0x15ae/0x4660 [ 651.119993][ T29] ? asan.module_dtor+0x20/0x20 [ 651.142770][ T29] ? __mutex_lock+0x66e/0xc80 [ 651.168998][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 651.204604][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 651.232544][ T29] schedule+0xbd/0x170 [ 651.252259][ T29] schedule_preempt_disabled+0x13/0x20 [ 651.273391][ T29] __mutex_lock+0x673/0xc80 [ 651.290808][ T29] ? __mutex_lock+0x4d2/0xc80 [ 651.313132][ T29] ? sync_bdevs+0x1a4/0x320 [ 651.333619][ T29] ? mutex_lock_nested+0x20/0x20 [ 651.352312][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 651.368750][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 651.381526][ T29] ? iput+0x33f/0x900 [ 651.385641][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 651.393519][ T29] sync_bdevs+0x1a4/0x320 [ 651.400290][ T29] ksys_sync+0xc6/0x170 [ 651.404644][ T29] ? sync_filesystem+0x220/0x220 [ 651.412361][ T29] ? __get_user_nocheck_1+0xa/0x20 [ 651.422902][ T29] ? syscall_user_dispatch+0x49/0x90 [ 651.432818][ T29] __ia32_sys_sync+0xe/0x20 [ 651.438720][ T29] do_syscall_64+0x55/0xb0 [ 651.443313][ T29] ? clear_bhb_loop+0x40/0x90 [ 651.452159][ T29] ? clear_bhb_loop+0x40/0x90 [ 651.458144][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.464170][ T29] RIP: 0033:0x7f78b279e0d9 [ 651.474221][ T29] RSP: 002b:00007f78b36d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 651.484607][ T29] RAX: ffffffffffffffda RBX: 00007f78b2a25fa0 RCX: 00007f78b279e0d9 [ 651.498065][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.506200][ T29] RBP: 00007f78b2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 651.519150][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.532769][ T29] R13: 00007f78b2a26038 R14: 00007f78b2a25fa0 R15: 00007fffa3372d38 [ 651.544875][ T29] [ 651.603270][ T29] [ 651.603270][ T29] Showing all locks held in the system: [ 651.666680][ T29] 2 locks held by kworker/u4:1/12: [ 651.683339][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 651.709736][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 651.740655][ T29] 1 lock held by khungtaskd/29: [ 651.756248][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 651.777219][ T29] 2 locks held by getty/5534: [ 651.783633][ T29] #0: ffff888031eba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 651.802001][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 651.813892][ T29] 2 locks held by syz-executor/9176: [ 651.822821][ T29] #0: ffff888024a0e0e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 651.834859][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 651.850299][ T29] 1 lock held by udevd/9409: [ 651.854969][ T29] #0: ffff8880223f84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 651.868081][ T29] 1 lock held by syz.5.3032/13720: [ 651.876363][ T29] #0: ffff8880223f84c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a4/0x320 [ 651.896284][ T29] 2 locks held by kworker/0:8/15603: [ 651.901934][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 651.917718][ T29] #1: ffffc90004acfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 651.933623][ T9176] ocfs2: Unmounting device (7,4) on (node local) [ 651.942672][ T29] [ 651.945071][ T29] ============================================= [ 651.945071][ T29] [ 651.993340][ T29] NMI backtrace for cpu 0 [ 651.997715][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 652.004919][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.014978][ T29] Call Trace: [ 652.018261][ T29] [ 652.021196][ T29] dump_stack_lvl+0x18c/0x250 [ 652.025886][ T29] ? __wake_up_klogd+0xd9/0x100 [ 652.030749][ T29] ? show_regs_print_info+0x20/0x20 [ 652.035955][ T29] ? load_image+0x420/0x420 [ 652.040478][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 652.045432][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 652.051598][ T29] ? load_image+0x420/0x420 [ 652.056113][ T29] ? wq_watchdog_touch+0xef/0x170 [ 652.061150][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 652.067242][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 652.073241][ T29] watchdog+0xf59/0xfa0 [ 652.077429][ T29] ? watchdog+0x1e1/0xfa0 [ 652.081807][ T29] kthread+0x2fa/0x390 [ 652.085907][ T29] ? hungtask_pm_notify+0x50/0x50 [ 652.090961][ T29] ? kthread_blkcg+0xd0/0xd0 [ 652.095588][ T29] ret_from_fork+0x48/0x80 [ 652.100028][ T29] ? kthread_blkcg+0xd0/0xd0 [ 652.104647][ T29] ret_from_fork_asm+0x11/0x20 [ 652.109498][ T29] [ 652.263801][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 652.270783][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 652.277987][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.288056][ T29] Call Trace: [ 652.291337][ T29] [ 652.294282][ T29] dump_stack_lvl+0x18c/0x250 [ 652.298973][ T29] ? show_regs_print_info+0x20/0x20 [ 652.304178][ T29] ? load_image+0x420/0x420 [ 652.308697][ T29] panic+0x2ca/0x720 [ 652.312609][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 652.317121][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 652.322683][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 652.328076][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 652.334246][ T29] watchdog+0xf98/0xfa0 [ 652.338414][ T29] ? watchdog+0x1e1/0xfa0 [ 652.342763][ T29] kthread+0x2fa/0x390 [ 652.346844][ T29] ? hungtask_pm_notify+0x50/0x50 [ 652.351883][ T29] ? kthread_blkcg+0xd0/0xd0 [ 652.356483][ T29] ret_from_fork+0x48/0x80 [ 652.360906][ T29] ? kthread_blkcg+0xd0/0xd0 [ 652.365498][ T29] ret_from_fork_asm+0x11/0x20 [ 652.370281][ T29] [ 652.373364][ T29] Kernel Offset: disabled [ 652.377720][ T29] Rebooting in 86400 seconds..