last executing test programs: 28m47.910812177s ago: executing program 32 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./sys_sec/tomoyo/domain_policy\x00', &(0x7f0000000180), 0xa00000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 28m32.878318851s ago: executing program 33 (id=426): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 27m53.307045422s ago: executing program 34 (id=631): unshare(0x2a020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, 0x4, 0x8000000}, 0x38) 25m37.46057426s ago: executing program 35 (id=1523): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 22m47.742287283s ago: executing program 36 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "17b741c05e9d86db38a68ca89c2c7e46"}]}, 0x30}}, 0x22044804) 21m1.71645524s ago: executing program 37 (id=4119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 20m18.446580405s ago: executing program 38 (id=4543): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000340)={0xfacc, 0x0, 0x2, 0xf}) 15m36.812769946s ago: executing program 39 (id=7526): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup2(r0, r0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 15m11.757162307s ago: executing program 40 (id=7722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="41000200010001", 0x7) 15m10.596931404s ago: executing program 41 (id=7727): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) close(0x3) 13m35.158691133s ago: executing program 42 (id=8528): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x4) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) 12m58.723878243s ago: executing program 43 (id=8740): mkdirat(0xffffffffffffff9c, &(0x7f000002b8c0)='tracing\x00', 0x1ff) mount(0x0, &(0x7f000002b940)='tracing\x00', &(0x7f000002b980)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000002ba80)='tracing/events/xfs/xfs_rmap_convert/trigger\x00', 0x1, 0x0) write(r0, &(0x7f000002bac0)='traceon', 0x7) 11m33.50731302s ago: executing program 44 (id=9314): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 11m18.412822468s ago: executing program 45 (id=9342): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x5, 0xa26, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x2a, 0x1, 0x0, 0x0, "126d410b4e31f2ea02e98fa6737a5d37fb83dbe226a19d4df4d4b49da0bbae1d0dcf2df35bc292b59a84ad3a2e82d71d56367200e2ef81f3273c15ea52c373c2"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 9m44.168666239s ago: executing program 8 (id=9942): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2) 9m43.938507828s ago: executing program 8 (id=9947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000600)={0x8, 0x0, [{0x4, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0xb, 0x9, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x7f}, {0xc0000000, 0x0, 0x3, 0x6b0, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x7}]}) 9m43.583061993s ago: executing program 8 (id=9949): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4058587a, 0x0) 9m42.075768114s ago: executing program 8 (id=9959): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 9m41.325654394s ago: executing program 8 (id=9965): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 9m41.109457912s ago: executing program 8 (id=9967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7000fddbdf250f000000050037000100000008000300", @ANYRES32=r2, @ANYBLOB="050035"], 0x34}}, 0x0) 9m40.498560467s ago: executing program 46 (id=9967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7000fddbdf250f000000050037000100000008000300", @ANYRES32=r2, @ANYBLOB="050035"], 0x34}}, 0x0) 9m40.076012404s ago: executing program 0 (id=9974): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9m39.751540217s ago: executing program 0 (id=9977): r0 = io_uring_setup(0x7b0a, &(0x7f00000002c0)={0x0, 0x1, 0x800}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000005c0)=[{0x4, 0x0, 0x0}], 0x1) 9m39.473888219s ago: executing program 0 (id=9980): setresuid(0xee01, 0x0, 0x0) r0 = getuid() r1 = getuid() setresuid(r1, r1, r0) 9m39.284355866s ago: executing program 0 (id=9983): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 9m39.050718256s ago: executing program 0 (id=9985): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 9m38.69331506s ago: executing program 0 (id=9988): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xee6, &(0x7f0000002d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r0, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000280)="1a5d", 0x2}], 0x1) 9m37.836376534s ago: executing program 47 (id=9988): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xee6, &(0x7f0000002d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r0, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000280)="1a5d", 0x2}], 0x1) 8m47.954817766s ago: executing program 7 (id=10355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffffffffff, 0xc9d, 0xffff59a4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m47.783299523s ago: executing program 7 (id=10349): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0) 8m47.517397154s ago: executing program 7 (id=10352): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nojournal_checksum}, {@noblock_validity}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}, {@errors_remount}, {@noinit_itable}]}, 0x6, 0x61f, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 8m46.63971094s ago: executing program 7 (id=10363): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m45.453916937s ago: executing program 7 (id=10375): r0 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8c) 8m45.321389663s ago: executing program 2 (id=10376): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000400)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x85}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 8m44.916227979s ago: executing program 2 (id=10377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40012000) 8m44.87454202s ago: executing program 7 (id=10378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000b5be26c596092e4d08000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400d0"], 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 8m44.14000272s ago: executing program 48 (id=10378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000b5be26c596092e4d08000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400d0"], 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 8m44.13688536s ago: executing program 2 (id=10382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) 8m43.917411939s ago: executing program 2 (id=10384): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$eJzs3E1oXNUeAPD/nUyapB+vee/19b3mVU2tYrCY2rTaLgSpKLhQEOtClyEfJTZtpEnBlipTkLqUgntx6daFW3VTiitBcFWXghSKdNNWEEfuzL2TyfTO5Dsh7e8HyZxz750558y55875mLkBPLIG039JPXwzInZHRKn1gMH6w707l8fu37k8FpVq9dTvSe1pd9N4JnuZ2JFFhkoRpU+S+R1NZi9eOjM6PT1xPosfnjv7weHZi5eem+rNtpw4cezokeMvjryw/EIVpJeW6+7AxzP7973+3rU3x8r59jy15nKslcEYLMpKzdNrndgm29UUTspNkW2bkBmWLD3/0+rqrrX/3dEV5Q5HV5ojpfXPHbCeqtVqtaf97kq6v1quzrtSBR4a0bvZOQA2R/5Bn45/87+ijsDDOoy7fbI+AErLfS/7i3iitjEf4HS3jG9za/GeDEbEu5U/vkj/Yp3mIQAAmn13Mu8JtvT/+usrI39euP5y+viPbA2lPyL+GRH/ioh/R8SeiPhPROyNiP9GxP9aXr8rIqod0h9siTfSb8wul26tUVELpf2/l7K1rXs/R9b/W5CB/q5arK/5aRPPZ+/JUHT3TE5NTxzpkMb3r/70Wbt9ef+vN3tM08/7glk+bpVbJujGR+dGV1DUQrevRAyUs/I3+r9JOSJprAQkEbEvIgaan1jp/Lr9TeGpZ7/a34h0Lzyuuf9bXP6aauE6WqeliiWqfhnxTL3+K9EofyxYREwWrE+eHT09cXri3EhjffJwb0z3dUrjhx+vvtVu36Ll/+bXxhpl5rXj357KWtbqpfW/PebrP/L12/ny9ycRSWO9dnb5aVz95dMHxjR51S1e/8Xn/7bknVo4H4N9ODo3d/5IxLbkjQe3j8w/N4+nj+k5nJZ/6GDr+V9Lt3aNy9+J/0dEehI/FhGPR32EmOb9QEQ8GREHO5T/xitPvd9u3xLP/7ruDomsUFr+8VhY/nrNL6j/+fX6doEkuyAU7Oo6c+Dm/YGVlj+t/2O10FC2pfj6lyy4RLTLaf5pl275a9XvHgAAAGwNpYjY2TSXtDNKpeHh+hzQnthemp6ZnTs0OXPh3Hi6L6I/ukuTU9O1+c/6fHB3ks9/9jfFR1riR7N548+7+mrx4bGZ6fFNLTmwo9bmk9JwxI1dTe0/9VvLFHOH7wkDW9UarKMBW1Sn9p924vde28DMABtq6Z//1z9a14wAG66p/bf7Wl9lBd/7ArYA438gs6TLgWsGbH1VbRkeactq/4cW+eUfsKWU4+1GeGl39ez4e1dgC9H/h0fSor/rX1Wg2lO8qzcePDh6O79gV6wsG30FaW1KIO1ZLX5wfi1eTVr5zRuyLX0Fx5zM7pbQ/n4OWT7aphWl5WWspyCtldTp5AreljSr+S1MKudnT+9d85O/mn1Xfq1Pm683pJ0WBTbyKgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+/g4AAP//l8DN3Q==") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m42.724340207s ago: executing program 2 (id=10393): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\r'], 0xd) 8m42.045507935s ago: executing program 2 (id=10398): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xffffffffffffffba, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) 8m41.544660904s ago: executing program 49 (id=10398): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2a82, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xffffffffffffffba, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) 6m44.041408395s ago: executing program 4 (id=11135): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 6m43.824623301s ago: executing program 4 (id=11138): socket$inet6(0xa, 0x802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x14, 0x4, @void, @value=r0}, 0x20) 6m43.619880405s ago: executing program 4 (id=11140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 6m43.450482929s ago: executing program 4 (id=11141): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 6m42.904540383s ago: executing program 4 (id=11145): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x508) 6m42.559766731s ago: executing program 4 (id=11148): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='/', 0x1) 6m41.883065547s ago: executing program 50 (id=11148): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='/', 0x1) 1m35.41340943s ago: executing program 6 (id=13269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a00060000000200000004000480"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m35.090939458s ago: executing program 6 (id=13272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m34.382786265s ago: executing program 6 (id=13279): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)='\f', 0x1}, {0x0, 0xffe0}], 0x2, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x45, 0x7f}}], 0x20, 0x4048811}, 0x0) 1m33.366766809s ago: executing program 6 (id=13288): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 1m32.305387495s ago: executing program 6 (id=13297): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='drop=\'', 0x6) 1m32.010591193s ago: executing program 6 (id=13300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) 1m16.821297621s ago: executing program 51 (id=13300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) 4.747199888s ago: executing program 1 (id=13945): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 4.549833232s ago: executing program 1 (id=13948): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 3.525344226s ago: executing program 5 (id=13959): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r1, 0x8, 0x0, &(0x7f0000000240)) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 3.05116259s ago: executing program 1 (id=13962): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 3.05054438s ago: executing program 5 (id=13970): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x45) 2.890538652s ago: executing program 3 (id=13964): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 2.842903955s ago: executing program 1 (id=13965): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0xb92c, &(0x7f000002e340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 2.647529109s ago: executing program 3 (id=13967): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2.373304858s ago: executing program 3 (id=13968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf250800000006000400"], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) 2.35986641s ago: executing program 5 (id=13969): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x9) 1.917416571s ago: executing program 3 (id=13972): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.917120411s ago: executing program 9 (id=13973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0xfd97}) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) 1.781011441s ago: executing program 9 (id=13974): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) fcntl$notify(r0, 0x402, 0x8000000b) getdents(r1, &(0x7f0000000500)=""/218, 0xda) 1.703312757s ago: executing program 5 (id=13975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) read(r0, &(0x7f0000000100)=""/34, 0x22) 1.608758224s ago: executing program 9 (id=13976): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 1.502885152s ago: executing program 9 (id=13978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') 1.253263109s ago: executing program 9 (id=13979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.176630755s ago: executing program 1 (id=13980): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x45) 1.062471623s ago: executing program 9 (id=13981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x8, 0x4, 0x7f}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x835}, 0x40) 746.546346ms ago: executing program 5 (id=13982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x101, 0x3, 0x3a8f5f22, 0x1, 0x8, 0x9}]}) 280.01317ms ago: executing program 5 (id=13983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 164.970808ms ago: executing program 3 (id=13984): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TCXONC(r1, 0x540a, 0x2) 80.915734ms ago: executing program 3 (id=13985): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0xd, 0x8, &(0x7f0000000000)={0x13, "f161ddc413e833d644967873e96328c3c0e4408ef998f73309465f762657972254"}}) 0s ago: executing program 1 (id=13986): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 1726.261437][T13291] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1726.499933][T13291] XFS (loop5): Ending clean mount [ 1726.638640][ T28] audit: type=1800 audit(1788200534.913:698): pid=13291 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.12886" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 1726.862451][ T7683] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1728.001456][T13366] loop5: detected capacity change from 0 to 512 [ 1729.164382][T13394] loop5: detected capacity change from 0 to 512 [ 1729.289899][T13394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1729.402348][T13394] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.492467][T13404] loop6: detected capacity change from 0 to 128 [ 1729.637168][T13404] syz.6.12919: attempt to access beyond end of device [ 1729.637168][T13404] loop6: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 1729.688944][ T7683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.734750][T13404] syz.6.12919: attempt to access beyond end of device [ 1729.734750][T13404] loop6: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 1730.224361][T13413] loop9: detected capacity change from 0 to 4096 [ 1730.335524][T13421] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1730.611277][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.641707][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.656365][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1731.425022][ T28] audit: type=1326 audit(1788200539.693:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1731.596357][ T28] audit: type=1326 audit(1788200539.733:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1731.724638][T13456] block2mtd: illegal erase size [ 1731.775076][ T28] audit: type=1326 audit(1788200539.733:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1731.953930][ T28] audit: type=1326 audit(1788200539.743:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.143813][ T28] audit: type=1326 audit(1788200539.743:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.288925][ T28] audit: type=1326 audit(1788200539.743:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.415197][ T28] audit: type=1326 audit(1788200539.743:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.543371][ T28] audit: type=1326 audit(1788200539.753:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.701011][ T28] audit: type=1326 audit(1788200539.753:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1732.825922][ T28] audit: type=1326 audit(1788200539.753:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13448 comm="syz.6.12938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b499e159 code=0x7ffc0000 [ 1733.095837][T13464] loop6: detected capacity change from 0 to 32768 [ 1733.178401][T13464] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1733.293662][T13464] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1733.352605][T13464] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1733.365288][T13480] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.12953'. [ 1733.425460][ T5820] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1733.478065][ T5820] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1733.604239][ T5820] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 1733.660201][ T5820] gfs2: fsid=syz:syz.0: jid=0: Done [ 1733.695419][T13464] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1733.764310][T13464] init_special_inode: bogus i_mode (0) for inode loop6:2339 [ 1733.859152][T13488] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12955'. [ 1734.148861][T13464] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1734.379372][ T5406] syz-executor: attempt to access beyond end of device [ 1734.379372][ T5406] loop6: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 1734.437911][ T5406] Buffer I/O error on dev loop6, logical block 8589934885, lost async page write [ 1734.477807][ T5406] gfs2: fsid=syz:syz.0: fatal: I/O error [ 1734.477807][ T5406] block = 8589934885 [ 1734.477807][ T5406] function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 124 [ 1734.532609][T13500] netlink: 'syz.9.12960': attribute type 11 has an invalid length. [ 1734.546159][ T5406] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 1734.552243][T13500] netlink: 184116 bytes leftover after parsing attributes in process `syz.9.12960'. [ 1734.565671][ T5406] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1734.576992][T13500] ieee80211 !!: Selected rate control algorithm 'minstrel_ht' [ 1735.373829][T13523] program syz.9.12971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1735.409984][T13525] jffs2: notice: (13525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1736.303826][ T5977] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 180 seconds [ 1736.420411][T13557] netlink: 7 bytes leftover after parsing attributes in process `syz.5.12986'. [ 1736.688440][T13565] program syz.5.12990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1736.835119][T13567] loop1: detected capacity change from 0 to 1024 [ 1736.872338][T13567] EXT4-fs: Ignoring removed mblk_io_submit option [ 1736.919235][T13567] EXT4-fs: inline encryption not supported [ 1736.981044][T13567] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 1737.290090][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12997'. [ 1737.380250][T13581] loop5: detected capacity change from 0 to 16 [ 1737.423919][T13581] erofs: (device loop5): mounted with root inode @ nid 36. [ 1737.503899][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1737.503913][ T28] audit: type=1800 audit(1788200545.773:729): pid=13581 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.12998" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1737.882921][T13592] loop5: detected capacity change from 0 to 128 [ 1737.933369][T13575] loop9: detected capacity change from 0 to 40427 [ 1737.944142][T13592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1738.021484][T13592] hpfs: filesystem error: improperly stopped [ 1738.027684][T13575] F2FS-fs (loop9): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1738.069240][T13592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1738.091742][T13575] F2FS-fs (loop9): invalid crc value [ 1738.119049][T13592] hpfs: You really don't want any checks? You are crazy... [ 1738.139863][T13575] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1738.158007][T13592] hpfs: hpfs_map_sector(): read error [ 1738.163445][T13592] hpfs: code page support is disabled [ 1738.240840][T13592] hpfs: hpfs_map_4sectors(): unaligned read [ 1738.277135][T13592] hpfs: hpfs_map_4sectors(): unaligned read [ 1738.283098][T13592] hpfs: filesystem error: unable to find root dir [ 1738.340758][T13575] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1738.410175][T13592] hpfs: hpfs_map_4sectors(): unaligned read [ 1738.428927][T13592] hpfs: hpfs_map_sector(): read error [ 1739.499141][ T28] audit: type=1400 audit(1788200547.773:730): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=13616 comm="syz.1.13011" name="foo" offset=60 [ 1739.551121][T13608] loop5: detected capacity change from 0 to 32768 [ 1739.645696][ T5406] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1739.731356][T13608] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1739.774171][ T5406] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1739.853149][ T5406] gfs2: fsid=syz:syz.0: File system withdrawn [ 1739.865160][T13608] XFS (loop5): Ending clean mount [ 1739.899398][ T5406] CPU: 0 PID: 5406 Comm: syz-executor Tainted: G S syzkaller #0 [ 1739.908471][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1739.918533][ T5406] Call Trace: [ 1739.921836][ T5406] [ 1739.924778][ T5406] dump_stack_lvl+0x18c/0x250 [ 1739.929471][ T5406] ? show_regs_print_info+0x20/0x20 [ 1739.934683][ T5406] ? load_image+0x420/0x420 [ 1739.939202][ T5406] ? kobject_uevent_env+0x368/0x890 [ 1739.944418][ T5406] gfs2_withdraw+0xe16/0x1400 [ 1739.949140][ T5406] ? gfs2_lm+0x240/0x240 [ 1739.953409][ T5406] ? wake_bit_function+0x200/0x200 [ 1739.958556][ T5406] ? __lock_acquire+0x7d80/0x7d80 [ 1739.963644][ T5406] ? do_raw_spin_unlock+0x121/0x230 [ 1739.968860][ T5406] gfs2_ail1_empty+0x7d1/0x860 [ 1739.973644][ T5406] empty_ail1_list+0x17a/0x240 [ 1739.978433][ T5406] ? log_write_header+0x5c0/0x5c0 [ 1739.983479][ T5406] ? __rwlock_init+0x150/0x150 [ 1739.988294][ T5406] ? do_raw_spin_unlock+0x121/0x230 [ 1739.993627][ T5406] __gfs2_log_flush+0x1fdc/0x24d0 [ 1739.998676][ T5406] ? gfs2_log_flush+0x50/0x50 [ 1740.003375][ T5406] ? down_write+0x16e/0x200 [ 1740.008175][ T5406] ? down_read_killable+0x340/0x340 [ 1740.013391][ T5406] gfs2_log_flush+0x34/0x50 [ 1740.017923][ T5406] gfs2_kill_sb+0x5c/0x2e0 [ 1740.022355][ T5406] ? unregister_shrinker+0x249/0x300 [ 1740.027675][ T5406] deactivate_locked_super+0x97/0x100 [ 1740.033067][ T5406] cleanup_mnt+0x3d7/0x460 [ 1740.037863][ T5406] task_work_run+0x1d4/0x260 [ 1740.042493][ T5406] ? task_work_cancel+0x220/0x220 [ 1740.047533][ T5406] ? rcu_is_watching+0x15/0xb0 [ 1740.052315][ T5406] exit_to_user_mode_loop+0xe6/0x110 [ 1740.057642][ T5406] exit_to_user_mode_prepare+0xee/0x180 [ 1740.063211][ T5406] syscall_exit_to_user_mode+0x1a/0x50 [ 1740.068747][ T5406] do_syscall_64+0x61/0xb0 [ 1740.073193][ T5406] ? clear_bhb_loop+0x40/0x90 [ 1740.077879][ T5406] ? clear_bhb_loop+0x40/0x90 [ 1740.082568][ T5406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1740.088473][ T5406] RIP: 0033:0x7f39b499f397 [ 1740.092900][ T5406] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1740.112527][ T5406] RSP: 002b:00007ffc50cb9238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1740.120960][ T5406] RAX: 0000000000000000 RBX: 00007f39b4a34474 RCX: 00007f39b499f397 [ 1740.128935][ T5406] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc50cb92f0 [ 1740.136924][ T5406] RBP: 00007ffc50cb92f0 R08: 00007ffc50cba2f0 R09: 00000000ffffffff [ 1740.144913][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc50cba380 [ 1740.152903][ T5406] R13: 00007f39b4a34474 R14: 00000000001a768c R15: 00007ffc50cba3c0 [ 1740.160886][ T5406] [ 1740.671666][ T7683] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1741.299109][ T5977] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 1741.305623][ T5977] gfs2: fsid=syz:syz.0: G: s:EX n:2/200000125 f:lDpi t:UN d:UN/20000 a:0 v:0 r:2 m:20 p:1 [ 1741.701504][T13673] loop5: detected capacity change from 0 to 4096 [ 1741.757634][T13673] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1742.302493][T13684] loop1: detected capacity change from 0 to 2048 [ 1742.470679][T13684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1742.551254][T13684] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1742.576078][ T28] audit: type=1326 audit(1788200550.843:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4df9e159 code=0x7ffc0000 [ 1742.728572][T13684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.13024: bg 0: block 345: padding at end of block bitmap is not set [ 1742.791059][ T28] audit: type=1326 audit(1788200550.843:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4df9e159 code=0x7ffc0000 [ 1742.854619][T13684] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 1 with error 117 [ 1742.870946][T12402] Bluetooth: hci0: command 0x0406 tx timeout [ 1742.934552][T13684] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1742.934552][T13684] [ 1742.958416][ T28] audit: type=1326 audit(1788200550.853:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9f4df9e159 code=0x7ffc0000 [ 1743.116973][ T28] audit: type=1326 audit(1788200551.033:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f4df3f4d9 code=0x7ffc0000 [ 1743.293427][ T28] audit: type=1326 audit(1788200551.033:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4df9e159 code=0x7ffc0000 [ 1743.367239][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1743.483994][ T28] audit: type=1326 audit(1788200551.033:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13687 comm="syz.9.13025" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4df9e159 code=0x7ffc0000 [ 1744.341612][T13710] loop5: detected capacity change from 0 to 32768 [ 1744.387625][T13706] loop9: detected capacity change from 0 to 40427 [ 1744.407019][T13710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.13034 (13710) [ 1744.462072][T13706] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1744.510058][T13712] loop1: detected capacity change from 0 to 32768 [ 1744.526412][T13706] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1744.562376][T13710] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1744.588988][T13716] loop6: detected capacity change from 0 to 128 [ 1744.645158][T13710] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1744.662576][T13706] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1744.696271][T13712] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1744.753824][T13716] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1744.767986][T13710] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1744.853835][T13710] BTRFS info (device loop5): force zstd compression, level 15 [ 1744.890319][T13716] ext4 filesystem being mounted at /572/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.938878][T13710] BTRFS info (device loop5): using free space tree [ 1744.977628][T13712] XFS (loop1): Ending clean mount [ 1744.998137][T13706] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1745.067730][T13706] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1745.227430][T13710] BTRFS info (device loop5): enabling ssd optimizations [ 1745.260915][ T5406] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1745.271997][ T8139] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1745.293872][T13710] BTRFS info (device loop5): auto enabling async discard [ 1745.429078][ T1259] syz-executor: attempt to access beyond end of device [ 1745.429078][ T1259] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1745.530977][ T1259] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1745.541992][T13746] loop6: detected capacity change from 0 to 128 [ 1745.648049][T13746] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1745.733389][ T7683] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1745.767798][T13746] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1746.042840][T13750] loop1: detected capacity change from 0 to 1024 [ 1746.098522][ T5406] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1746.222837][T13750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1746.323696][T13750] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1746.501068][T13750] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.13039: Freeing blocks not in datazone - block = 0, count = 16 [ 1746.720199][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1746.888659][T13761] pimreg0: tun_chr_ioctl cmd 2147767506 [ 1746.948167][T13763] loop1: detected capacity change from 0 to 512 [ 1746.999435][T13763] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1747.056726][T13763] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1747.130243][T13763] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1747.172253][T13763] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.13045: bad orphan inode 15 [ 1747.217745][T13763] ext4_test_bit(bit=14, block=18) = 1 [ 1747.246197][T13763] is_bad_inode(inode)=0 [ 1747.272154][T13763] NEXT_ORPHAN(inode)=1023 [ 1747.301938][T13763] max_ino=32 [ 1747.325879][T13763] i_nlink=0 [ 1747.343674][T13763] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.13045: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 1747.472311][T13763] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 1747.521892][T13776] program syz.9.13050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1747.552843][T13763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1747.710560][T13763] EXT4-fs (loop1): shut down requested (0) [ 1747.893238][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.320710][T13795] loop5: detected capacity change from 0 to 8192 [ 1748.381429][T13795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1748.497508][T13795] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1748.583647][T13795] REISERFS (device loop5): using ordered data mode [ 1748.609497][T13795] reiserfs: using flush barriers [ 1748.670634][T13795] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1748.807534][T13795] REISERFS (device loop5): checking transaction log (loop5) [ 1748.835709][T13795] REISERFS (device loop5): Using r5 hash to sort names [ 1748.854776][T13806] loop9: detected capacity change from 0 to 4096 [ 1748.886412][T13795] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1748.994085][ T28] audit: type=1800 audit(1788200557.263:737): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.9.13063" name="file1" dev="loop9" ino=0 res=0 errno=0 [ 1749.152192][T13791] loop1: detected capacity change from 0 to 32768 [ 1749.226992][T13791] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1749.317683][T13791] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1749.441899][T13791] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1749.500246][T11426] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1749.541157][T11426] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1749.631331][T13819] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.13066'. [ 1749.694230][T11366] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 1749.703707][T11426] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 162ms [ 1749.743156][T11426] gfs2: fsid=syz:syz.0: jid=0: Done [ 1749.772061][T13791] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1749.794551][T13791] init_special_inode: bogus i_mode (0) for inode loop1:2339 [ 1749.905378][T11366] usb 10-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 1749.952766][T11366] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1750.030953][T11366] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1750.111164][T11366] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1750.150877][T11366] usb 10-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1750.178162][T13791] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1750.223593][T11366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.270389][T11366] usb 10-1: config 0 descriptor?? [ 1750.327685][T13816] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1750.474811][T13833] lo speed is unknown, defaulting to 1000 [ 1750.514686][ T8139] syz-executor: attempt to access beyond end of device [ 1750.514686][ T8139] loop1: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 1750.609802][ T8139] Buffer I/O error on dev loop1, logical block 8589934885, lost async page write [ 1750.654870][ T8139] gfs2: fsid=syz:syz.0: fatal: I/O error [ 1750.654870][ T8139] block = 8589934885 [ 1750.654870][ T8139] function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 124 [ 1750.747516][ T8139] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 1750.776863][ T8139] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1750.807970][T11366] wacom 0003:056A:00CC.005A: ignoring exceeding usage max [ 1750.856677][T11366] wacom 0003:056A:00CC.005A: hidraw0: USB HID v0.0c Device [HID 056a:00cc] on usb-dummy_hcd.9-1/input0 [ 1750.990811][T11366] usb 10-1: USB disconnect, device number 70 [ 1752.504523][T13859] loop9: detected capacity change from 0 to 32768 [ 1752.528209][T13859] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1752.563159][T13859] CPU: 0 PID: 13859 Comm: syz.9.13084 Tainted: G S syzkaller #0 [ 1752.572235][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1752.582314][T13859] Call Trace: [ 1752.585608][T13859] [ 1752.588573][T13859] dump_stack_lvl+0x18c/0x250 [ 1752.593282][T13859] ? show_regs_print_info+0x20/0x20 [ 1752.598489][T13859] ? load_image+0x420/0x420 [ 1752.603002][T13859] sysfs_create_dir_ns+0x26e/0x2a0 [ 1752.608124][T13859] ? __lock_acquire+0x7d80/0x7d80 [ 1752.613158][T13859] ? sysfs_warn_dup+0xa0/0xa0 [ 1752.617843][T13859] ? do_raw_spin_unlock+0x121/0x230 [ 1752.623061][T13859] kobject_add_internal+0x617/0xc90 [ 1752.628278][T13859] kobject_init_and_add+0x12c/0x1a0 [ 1752.633509][T13859] ? lockdep_softirqs_off+0x440/0x440 [ 1752.638888][T13859] ? kobject_add+0x240/0x240 [ 1752.643504][T13859] ? __init_swait_queue_head+0xa8/0x140 [ 1752.649063][T13859] gfs2_sys_fs_add+0x253/0x4b0 [ 1752.653841][T13859] ? gfs2_recover_set+0x250/0x250 [ 1752.658878][T13859] ? apply_workqueue_attrs+0x180/0x180 [ 1752.664350][T13859] gfs2_fill_super+0x1344/0x1f90 [ 1752.669305][T13859] ? gfs2_reconfigure+0xb20/0xb20 [ 1752.674341][T13859] ? setup_bdev_super+0x56b/0x660 [ 1752.679373][T13859] get_tree_bdev+0x3e5/0x520 [ 1752.683995][T13859] ? kfree+0x31/0x1a0 [ 1752.687990][T13859] ? gfs2_reconfigure+0xb20/0xb20 [ 1752.693022][T13859] ? setup_bdev_super+0x660/0x660 [ 1752.698058][T13859] gfs2_get_tree+0x51/0x1e0 [ 1752.702586][T13859] vfs_get_tree+0x8c/0x280 [ 1752.707043][T13859] do_new_mount+0x24a/0xa40 [ 1752.711574][T13859] __se_sys_mount+0x2e7/0x3d0 [ 1752.716264][T13859] ? __x64_sys_mount+0xc0/0xc0 [ 1752.721052][T13859] ? __x64_sys_mount+0x20/0xc0 [ 1752.725839][T13859] do_syscall_64+0x55/0xb0 [ 1752.730274][T13859] ? clear_bhb_loop+0x40/0x90 [ 1752.734973][T13859] ? clear_bhb_loop+0x40/0x90 [ 1752.739744][T13859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1752.745647][T13859] RIP: 0033:0x7f9f4df9f3ca [ 1752.750071][T13859] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.769692][T13859] RSP: 002b:00007f9f4ed98e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1752.778204][T13859] RAX: ffffffffffffffda RBX: 00007f9f4ed98ee0 RCX: 00007f9f4df9f3ca [ 1752.786187][T13859] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f9f4ed98ea0 [ 1752.794164][T13859] RBP: 00002000000124c0 R08: 00007f9f4ed98ee0 R09: 0000000000000000 [ 1752.802145][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1752.810122][T13859] R13: 00007f9f4ed98ea0 R14: 0000000000012588 R15: 0000200000000000 [ 1752.818126][T13859] [ 1753.186981][T13859] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1753.238696][T13859] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1753.909804][T13877] loop6: detected capacity change from 0 to 40427 [ 1753.943795][T13877] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 1754.021766][T13877] F2FS-fs (loop6): Image doesn't support compression [ 1754.075090][T13892] scsi_strcpy_devinfo: vendor string 'QT?]+,r' is too long [ 1754.089113][T13877] F2FS-fs (loop6): heap/no_heap options were deprecated [ 1754.146759][T13877] F2FS-fs (loop6): invalid crc value [ 1754.187278][T13877] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1754.404050][T13877] F2FS-fs (loop6): Start checkpoint disabled! [ 1754.445402][T13877] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1754.781845][ T3695] kworker/u4:3: attempt to access beyond end of device [ 1754.781845][ T3695] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1754.813816][ T3695] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1754.831990][ T3695] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1754.919837][T13903] loop5: detected capacity change from 0 to 32768 [ 1755.497425][T13916] loop9: detected capacity change from 0 to 16 [ 1755.547162][T13916] erofs: (device loop9): mounted with root inode @ nid 36. [ 1755.592055][T13916] syz.9.13111: attempt to access beyond end of device [ 1755.592055][T13916] loop9: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 1755.675228][T13916] syz.9.13111: attempt to access beyond end of device [ 1755.675228][T13916] loop9: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1755.790860][T13921] loop6: detected capacity change from 0 to 512 [ 1755.891596][ T8139] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1755.988432][ T8139] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1756.035099][ T8139] gfs2: fsid=syz:syz.0: File system withdrawn [ 1756.094097][ T8139] CPU: 0 PID: 8139 Comm: syz-executor Tainted: G S syzkaller #0 [ 1756.103178][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1756.113271][ T8139] Call Trace: [ 1756.116574][ T8139] [ 1756.119509][ T8139] dump_stack_lvl+0x18c/0x250 [ 1756.124206][ T8139] ? show_regs_print_info+0x20/0x20 [ 1756.129420][ T8139] ? load_image+0x420/0x420 [ 1756.133930][ T8139] ? kobject_uevent_env+0x368/0x890 [ 1756.139148][ T8139] gfs2_withdraw+0xe16/0x1400 [ 1756.143845][ T8139] ? gfs2_lm+0x240/0x240 [ 1756.148113][ T8139] ? wake_bit_function+0x200/0x200 [ 1756.153231][ T8139] ? __lock_acquire+0x7d80/0x7d80 [ 1756.158273][ T8139] ? do_raw_spin_unlock+0x121/0x230 [ 1756.163498][ T8139] gfs2_ail1_empty+0x7d1/0x860 [ 1756.168287][ T8139] empty_ail1_list+0x17a/0x240 [ 1756.173080][ T8139] ? log_write_header+0x5c0/0x5c0 [ 1756.178115][ T8139] ? __rwlock_init+0x150/0x150 [ 1756.182893][ T8139] ? do_raw_spin_unlock+0x121/0x230 [ 1756.188105][ T8139] __gfs2_log_flush+0x1fdc/0x24d0 [ 1756.193157][ T8139] ? gfs2_log_flush+0x50/0x50 [ 1756.197838][ T8139] ? down_write+0x16e/0x200 [ 1756.202352][ T8139] ? down_read_killable+0x340/0x340 [ 1756.207563][ T8139] gfs2_log_flush+0x34/0x50 [ 1756.212068][ T8139] gfs2_kill_sb+0x5c/0x2e0 [ 1756.216493][ T8139] ? unregister_shrinker+0x249/0x300 [ 1756.221788][ T8139] deactivate_locked_super+0x97/0x100 [ 1756.227184][ T8139] cleanup_mnt+0x3d7/0x460 [ 1756.231643][ T8139] task_work_run+0x1d4/0x260 [ 1756.236249][ T8139] ? task_work_cancel+0x220/0x220 [ 1756.241303][ T8139] ? rcu_is_watching+0x15/0xb0 [ 1756.246095][ T8139] exit_to_user_mode_loop+0xe6/0x110 [ 1756.251410][ T8139] exit_to_user_mode_prepare+0xee/0x180 [ 1756.256971][ T8139] syscall_exit_to_user_mode+0x1a/0x50 [ 1756.262459][ T8139] do_syscall_64+0x61/0xb0 [ 1756.266892][ T8139] ? clear_bhb_loop+0x40/0x90 [ 1756.271577][ T8139] ? clear_bhb_loop+0x40/0x90 [ 1756.276259][ T8139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1756.282157][ T8139] RIP: 0033:0x7fcde4d9f397 [ 1756.286583][ T8139] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1756.306208][ T8139] RSP: 002b:00007ffc6a7bf8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1756.314635][ T8139] RAX: 0000000000000000 RBX: 00007fcde4e34474 RCX: 00007fcde4d9f397 [ 1756.322609][ T8139] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6a7bf9a0 [ 1756.330583][ T8139] RBP: 00007ffc6a7bf9a0 R08: 00007ffc6a7c09a0 R09: 00000000ffffffff [ 1756.338558][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6a7c0a30 [ 1756.346534][ T8139] R13: 00007fcde4e34474 R14: 00000000001ab575 R15: 00007ffc6a7c0a70 [ 1756.354519][ T8139] [ 1756.652948][T13926] loop5: detected capacity change from 0 to 32768 [ 1756.778003][T13926] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1756.821503][T13926] CPU: 0 PID: 13926 Comm: syz.5.13106 Tainted: G S syzkaller #0 [ 1756.830584][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1756.840648][T13926] Call Trace: [ 1756.843935][T13926] [ 1756.846897][T13926] dump_stack_lvl+0x18c/0x250 [ 1756.851601][T13926] ? show_regs_print_info+0x20/0x20 [ 1756.856848][T13926] ? load_image+0x420/0x420 [ 1756.861414][T13926] sysfs_create_dir_ns+0x26e/0x2a0 [ 1756.866635][T13926] ? __lock_acquire+0x7d80/0x7d80 [ 1756.871766][T13926] ? sysfs_warn_dup+0xa0/0xa0 [ 1756.876457][T13926] ? do_raw_spin_unlock+0x121/0x230 [ 1756.881679][T13926] kobject_add_internal+0x617/0xc90 [ 1756.886909][T13926] kobject_init_and_add+0x12c/0x1a0 [ 1756.892125][T13926] ? lockdep_softirqs_off+0x440/0x440 [ 1756.897521][T13926] ? kobject_add+0x240/0x240 [ 1756.902152][T13926] ? __init_swait_queue_head+0xa8/0x140 [ 1756.907735][T13926] gfs2_sys_fs_add+0x253/0x4b0 [ 1756.912610][T13926] ? gfs2_recover_set+0x250/0x250 [ 1756.917674][T13926] ? apply_workqueue_attrs+0x180/0x180 [ 1756.923234][T13926] gfs2_fill_super+0x1344/0x1f90 [ 1756.928208][T13926] ? gfs2_reconfigure+0xb20/0xb20 [ 1756.933273][T13926] ? setup_bdev_super+0x56b/0x660 [ 1756.938345][T13926] get_tree_bdev+0x3e5/0x520 [ 1756.942947][T13926] ? kfree+0x31/0x1a0 [ 1756.946970][T13926] ? gfs2_reconfigure+0xb20/0xb20 [ 1756.952010][T13926] ? setup_bdev_super+0x660/0x660 [ 1756.957047][T13926] gfs2_get_tree+0x51/0x1e0 [ 1756.961562][T13926] vfs_get_tree+0x8c/0x280 [ 1756.965991][T13926] do_new_mount+0x24a/0xa40 [ 1756.970506][T13926] __se_sys_mount+0x2e7/0x3d0 [ 1756.975199][T13926] ? __x64_sys_mount+0xc0/0xc0 [ 1756.979974][T13926] ? __x64_sys_mount+0x20/0xc0 [ 1756.984750][T13926] do_syscall_64+0x55/0xb0 [ 1756.989205][T13926] ? clear_bhb_loop+0x40/0x90 [ 1756.993889][T13926] ? clear_bhb_loop+0x40/0x90 [ 1756.998574][T13926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1757.004568][T13926] RIP: 0033:0x7f5971b9f3ca [ 1757.008990][T13926] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.028693][T13926] RSP: 002b:00007f5972b3ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1757.037214][T13926] RAX: ffffffffffffffda RBX: 00007f5972b3eee0 RCX: 00007f5971b9f3ca [ 1757.045733][T13926] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f5972b3eea0 [ 1757.053728][T13926] RBP: 00002000000124c0 R08: 00007f5972b3eee0 R09: 0000000000000000 [ 1757.061717][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1757.069694][T13926] R13: 00007f5972b3eea0 R14: 0000000000012588 R15: 0000200000000000 [ 1757.077766][T13926] [ 1757.307237][ T5977] gfs2: fsid=syz:syz.0: Error -5 syncing glock [ 1757.317031][ T5977] gfs2: fsid=syz:syz.0: G: s:EX n:2/200000125 f:lDpi t:UN d:UN/20000 a:0 v:0 r:2 m:20 p:1 [ 1757.336898][T13926] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1757.352575][T13926] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1758.140780][T13953] loop5: detected capacity change from 0 to 256 [ 1758.147736][T13952] rnbd_client L127: Can't parse path i: -93 [ 1758.544764][T13947] loop1: detected capacity change from 0 to 32768 [ 1758.653711][T13947] JBD2: Ignoring recovery information on journal [ 1758.766480][T13947] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1758.979600][T13971] loop9: detected capacity change from 0 to 256 [ 1759.002084][ T8139] ocfs2: Unmounting device (7,1) on (node local) [ 1759.107752][T13971] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1759.301581][T13961] loop5: detected capacity change from 0 to 32768 [ 1759.380073][T13961] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.13128 (13961) [ 1759.479652][T13961] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1759.491338][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13135'. [ 1759.553880][T13961] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1759.637358][T13961] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1759.707081][T13961] BTRFS info (device loop5): use zstd compression, level 3 [ 1759.760687][T13961] BTRFS info (device loop5): using free space tree [ 1759.885034][T13961] BTRFS info (device loop5): enabling ssd optimizations [ 1759.950922][T13961] BTRFS info (device loop5): auto enabling async discard [ 1760.022711][ T28] audit: type=1800 audit(1788200568.293:738): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.13128" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1760.048195][T14003] loop6: detected capacity change from 0 to 1024 [ 1760.144518][ T7683] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1760.196617][T14003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1760.331518][T14003] EXT4-fs (loop6): shut down requested (2) [ 1760.486252][ T5406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.212323][T14037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13153'. [ 1763.328806][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13157'. [ 1763.796917][T14055] loop9: detected capacity change from 0 to 64 [ 1764.167494][T14064] loop5: detected capacity change from 0 to 512 [ 1764.964289][T11366] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1765.136779][T14088] ieee802154 phy0 wpan0: encryption failed: -22 [ 1765.163731][T11366] usb 10-1: Using ep0 maxpacket: 8 [ 1765.180398][T11366] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1765.207322][T11366] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1765.267719][T11366] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1765.309484][T11366] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1765.359567][T11366] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1765.418373][T11366] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1765.467971][T14092] loop1: detected capacity change from 0 to 2048 [ 1765.485984][T11366] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1765.510219][T14092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1765.531773][T11366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.657744][T14084] loop5: detected capacity change from 0 to 40427 [ 1765.712528][T14084] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1765.790779][T14084] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1765.804482][T11366] usb 10-1: GET_CAPABILITIES returned 0 [ 1765.838814][T11366] usbtmc 10-1:16.0: can't read capabilities [ 1765.892154][T14084] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1765.990637][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1766.033760][T14077] usbtmc 10-1:16.0: Unable to send data, error -71 [ 1766.113254][T11366] usb 10-1: USB disconnect, device number 71 [ 1766.235544][T14084] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1766.276405][T14084] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1766.365005][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 210 seconds [ 1766.417316][ T28] audit: type=1804 audit(1788200574.693:739): pid=14084 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.5.13176" name="/newroot/515/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 1767.529096][T14118] loop9: detected capacity change from 0 to 40427 [ 1767.546587][T14123] tun0: tun_chr_ioctl cmd 1074812117 [ 1767.583910][T14118] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1767.633254][T14118] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1767.707096][T14118] F2FS-fs (loop9): invalid crc value [ 1768.094560][T14118] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 1768.125694][T14118] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1768.328234][ T1259] syz-executor: attempt to access beyond end of device [ 1768.328234][ T1259] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1768.380562][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13201'. [ 1768.400137][ T1259] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1768.431597][ T1259] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1768.457059][ T1259] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1768.493696][ T1259] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1768.513570][T11426] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1768.724732][T11426] usb 6-1: Using ep0 maxpacket: 8 [ 1768.779474][T11426] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1768.810303][T11426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.873231][T11426] usb 6-1: Product: syz [ 1768.891827][T11426] usb 6-1: Manufacturer: syz [ 1768.917399][T11426] usb 6-1: SerialNumber: syz [ 1768.946516][T11426] usb 6-1: config 0 descriptor?? [ 1768.973302][T11426] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1769.284550][T14158] binder: 14157:14158 ioctl 4018620d 0 returned -22 [ 1769.513745][T11366] usb 10-1: new low-speed USB device number 72 using dummy_hcd [ 1769.714933][T11366] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1769.733364][T11366] usb 10-1: config 0 has no interface number 0 [ 1769.763964][T11366] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1769.784485][T11426] gspca_sonixj: reg_r err -71 [ 1769.801085][T11426] sonixj: probe of 6-1:0.0 failed with error -71 [ 1769.817401][T11366] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1769.838363][T11426] usb 6-1: USB disconnect, device number 44 [ 1769.850135][T14165] loop6: detected capacity change from 0 to 512 [ 1769.871263][T11366] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1769.916530][T11366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.949590][T14165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1769.976726][T11366] usb 10-1: config 0 descriptor?? [ 1769.982816][T14156] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1770.023312][T14165] ext4 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1770.040736][T11366] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1770.130085][ T5406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.226924][T11366] usb 10-1: USB disconnect, device number 72 [ 1770.242881][T14170] loop6: detected capacity change from 0 to 512 [ 1770.708334][T14180] gretap0: entered promiscuous mode [ 1771.254238][T11366] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1771.453679][T11366] usb 7-1: Using ep0 maxpacket: 16 [ 1771.488989][T11366] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.529275][T11366] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1771.567240][T11366] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1771.598823][T11366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.643375][T11366] usb 7-1: Product: syz [ 1771.665999][T11366] usb 7-1: Manufacturer: syz [ 1771.683642][T11366] usb 7-1: SerialNumber: syz [ 1771.927900][T11366] usb 7-1: 0:2 : does not exist [ 1771.981388][T11366] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1772.052367][T11366] usb 7-1: USB disconnect, device number 31 [ 1772.400975][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13236'. [ 1772.489166][T14222] syz.5.13237 uses obsolete (PF_INET,SOCK_PACKET) [ 1772.513588][T11426] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1772.705088][T11426] usb 10-1: Using ep0 maxpacket: 16 [ 1772.745620][T14229] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 1772.796470][T11426] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1772.830967][T11426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.876169][T11426] usb 10-1: Product: syz [ 1772.908923][T11426] usb 10-1: Manufacturer: syz [ 1772.950978][T11426] usb 10-1: SerialNumber: syz [ 1773.196911][T11426] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1773.284739][T11426] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1773.357620][T11426] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1773.419762][T11426] usb 10-1: media controller created [ 1773.430968][T14243] loop6: detected capacity change from 0 to 8192 [ 1773.503323][T11426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1773.652251][T11426] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1773.851278][T11426] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5 [ 1773.937094][T11426] usb 10-1: USB disconnect, device number 73 [ 1774.307194][T14261] loop6: detected capacity change from 0 to 256 [ 1774.747421][T14275] block2mtd: too many arguments [ 1774.984709][T14278] program syz.6.13263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1775.229806][T14285] loop6: detected capacity change from 0 to 128 [ 1775.296189][T14285] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1775.422155][T14285] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1775.615348][T12541] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1775.642191][T14276] syz.5.13262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1777.007609][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13282'. [ 1778.193214][T14329] loop5: detected capacity change from 0 to 40427 [ 1778.247076][T14329] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 1778.301297][T14329] F2FS-fs (loop5): Image doesn't support compression [ 1778.348705][T14329] F2FS-fs (loop5): heap/no_heap options were deprecated [ 1778.414032][T14329] F2FS-fs (loop5): invalid crc value [ 1778.450465][T14329] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1778.545536][T14346] loop1: detected capacity change from 0 to 4096 [ 1778.666225][T14346] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1778.718673][T14329] F2FS-fs (loop5): Start checkpoint disabled! [ 1778.737152][T14346] ntfs3: loop1: Failed to load $Bitmap (-2). [ 1778.767677][T14329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1778.889823][T14329] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 1778.913703][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13298'. [ 1779.358035][ T1007] kworker/u4:6: attempt to access beyond end of device [ 1779.358035][ T1007] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1779.443176][ T1007] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1779.477886][T11366] kernel write not supported for file /1077/clear_refs (pid: 11366 comm: kworker/0:9) [ 1779.511792][ T1007] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1779.544296][ T1007] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1780.130320][T14381] batman_adv: batadv0: Adding interface: gretap1 [ 1780.193789][T14381] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.306072][T14381] batman_adv: batadv0: Interface activated: gretap1 [ 1780.357609][T14382] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1780.534992][T14384] nbd8: detected capacity change from 0 to 127 [ 1780.564976][ T2972] block nbd8: Receive control failed (result -32) [ 1780.594422][T14387] loop9: detected capacity change from 0 to 7 [ 1780.601665][T13552] block nbd8: Dead connection, failed to find a fallback [ 1780.612166][T13552] block nbd8: shutting down sockets [ 1780.617875][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.627674][T13552] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1780.635570][T13552] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1780.643336][T13552] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1780.655606][T13552] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1780.664047][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.673157][T13552] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1780.681324][T13552] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1780.689474][T13552] Buffer I/O error on dev nbd8, logical block 2, async page read [ 1780.703810][T13552] Buffer I/O error on dev nbd8, logical block 3, async page read [ 1780.712489][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.721685][T13552] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1780.729865][T13552] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1780.748614][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.768386][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.778410][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.791125][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.801455][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.810882][ T5785] ldm_validate_partition_table(): Disk read failed. [ 1780.836173][T14387] Dev loop9: unable to read RDB block 7 [ 1780.860112][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.873205][T13552] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1780.884107][ T5785] Dev nbd8: unable to read RDB block 0 [ 1780.922565][ T5785] nbd8: unable to read partition table [ 1780.976116][ T5785] ldm_validate_partition_table(): Disk read failed. [ 1781.020640][ T5785] Dev nbd8: unable to read RDB block 0 [ 1781.050220][ T5785] nbd8: unable to read partition table [ 1781.095268][T14387] loop9: unable to read partition table [ 1781.101134][T14387] loop9: partition table beyond EOD, truncated [ 1781.155148][T14387] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 1781.439245][T14399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13319'. [ 1781.468975][T14399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13319'. [ 1781.573892][ T5820] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1781.689508][T14403] loop1: detected capacity change from 0 to 256 [ 1781.747796][T14403] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 1781.783647][ T5820] usb 10-1: Using ep0 maxpacket: 32 [ 1781.824384][ T5820] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1781.883724][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.938280][ T5820] usb 10-1: config 0 descriptor?? [ 1782.005626][ T5820] as10x_usb: device has been detected [ 1782.052497][ T5820] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1782.151190][ T5820] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1782.230996][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1782.339887][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1782.420402][ T5820] usb 10-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 1782.497370][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1782.576711][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1782.661368][ T5820] usb 10-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 1782.702104][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1782.783620][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1782.870984][ T5820] usb 10-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 1782.892606][T14425] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(4) [ 1782.943170][ T5820] invalid firmware file [ 1783.005419][ T5820] as10x_usb: firmware: as102_data1_st.hex loaded with success [ 1783.423139][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1783.522855][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1783.582298][ T5820] usb 10-1: loading /lib/firmware/updates/syzkaller/as102_data2_st.hex failed with error -74 [ 1783.655313][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1783.739407][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1783.799515][T14430] loop1: detected capacity change from 0 to 32768 [ 1783.812419][ T5820] usb 10-1: loading /lib/firmware/updates/as102_data2_st.hex failed with error -74 [ 1783.840178][T14430] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.13334 (14430) [ 1783.907294][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1783.997418][T14430] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1784.027010][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1784.097465][T14430] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1784.122671][T14444] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 1784.143635][ T5820] usb 10-1: loading /lib/firmware/syzkaller/as102_data2_st.hex failed with error -74 [ 1784.170827][T14430] BTRFS info (device loop1): using free space tree [ 1784.209184][ T5820] invalid firmware file [ 1784.213426][ T5820] as10x_usb: firmware: as102_data2_st.hex loaded with success [ 1784.304121][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1784.420882][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1784.463604][T14430] BTRFS info (device loop1): enabling ssd optimizations [ 1784.511423][ T5820] usb 10-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 1784.543705][T14430] BTRFS info (device loop1): auto enabling async discard [ 1784.601753][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1784.746368][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1784.843422][ T5820] usb 10-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 1784.908635][ T8139] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1784.922556][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1785.045066][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1785.173357][ T5820] usb 10-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 1785.210672][ T5785] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop1 scanned by udevd (5785) [ 1785.251234][ T5820] invalid firmware file [ 1785.281130][ T5820] as10x_usb: firmware: as102_data1_st.hex loaded with success [ 1785.554230][T14491] : renamed from vlan0 (while UP) [ 1785.815367][T14496] loop5: detected capacity change from 0 to 512 [ 1785.878081][T14496] EXT4-fs (loop5): 1 truncate cleaned up [ 1785.953801][T14496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1785.972398][ T5820] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1786.087079][T14496] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.13355: bg 0: block 465: padding at end of block bitmap is not set [ 1786.142494][ T5820] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm kworker/0:4: checksumming directory block 0 [ 1786.210698][ T5820] usb 10-1: loading /lib/firmware/updates/syzkaller/as102_data2_st.hex failed with error -74 [ 1786.242018][T14496] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1786.287304][ T5820] usb 10-1: loading /lib/firmware/updates/as102_data2_st.hex failed with error -74 [ 1786.317998][T14496] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1786.317998][T14496] [ 1786.363814][ T5820] usb 10-1: loading /lib/firmware/syzkaller/as102_data2_st.hex failed with error -74 [ 1786.392288][T14496] EXT4-fs (loop5): Total free blocks count 0 [ 1786.408289][ T5820] invalid firmware file [ 1786.434588][T14496] EXT4-fs (loop5): Free/Dirty block details [ 1786.451545][ T5820] as10x_usb: firmware: as102_data2_st.hex loaded with success [ 1786.469855][T14496] EXT4-fs (loop5): free_blocks=0 [ 1786.490366][ T5820] Registered device nBox DVB-T Dongle [ 1786.492801][T14496] EXT4-fs (loop5): dirty_blocks=5 [ 1786.521847][ T5820] usb 10-1: USB disconnect, device number 74 [ 1786.577338][T14496] EXT4-fs (loop5): Block reservation details [ 1786.592860][ T5820] Unregistered device nBox DVB-T Dongle [ 1786.616518][T14496] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 1786.631774][ T5820] as10x_usb: device has been disconnected [ 1786.771842][ T1127] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28 [ 1787.033753][ T5820] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1787.062187][T14512] loop5: detected capacity change from 0 to 1024 [ 1787.233537][ T5820] usb 10-1: Using ep0 maxpacket: 8 [ 1787.254415][ T5820] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.305415][ T5820] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1787.363654][ T5820] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1787.382171][T14508] loop1: detected capacity change from 0 to 32768 [ 1787.404364][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.488659][ T5820] hub 10-1:1.0: bad descriptor, ignoring hub [ 1787.506688][T14508] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1787.541741][ T5820] hub: probe of 10-1:1.0 failed with error -5 [ 1787.680396][T14508] XFS (loop1): Ending clean mount [ 1787.848259][ T8139] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1788.034031][ T5820] usb 10-1: reset high-speed USB device number 75 using dummy_hcd [ 1788.211805][T14531] loop5: detected capacity change from 0 to 512 [ 1788.306643][T14531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1788.487997][ T7683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1788.517186][T14537] loop1: detected capacity change from 0 to 2048 [ 1788.646358][T14537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1788.710338][T14537] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1788.798103][T14537] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.13368: path /523/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 1788.853201][ T28] audit: type=1400 audit(1788200597.103:740): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=14542 comm="syz.5.13370" [ 1789.003386][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13371'. [ 1789.031825][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.072429][T14545] tipc: Resetting bearer [ 1789.104362][T11366] usb 10-1: USB disconnect, device number 75 [ 1789.153145][T14545] infiniband syz1: set down [ 1789.204024][T11426] syz1: rxe_query_port: returned err = -19 [ 1789.210296][T14545] tipc: Disabling bearer [ 1789.248745][ T3695] smc: removing ib device syz1 [ 1789.263231][T14549] loop1: detected capacity change from 0 to 512 [ 1789.338501][T14549] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.13372: iget: bad extended attribute block 134217728 [ 1789.442420][T14549] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.13372: couldn't read orphan inode 15 (err -117) [ 1789.558194][T14549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1789.677865][ T28] audit: type=1800 audit(1788200597.953:741): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.13372" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1789.710644][T14549] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13372: invalid indirect mapped block 234881024 (level 0) [ 1789.832402][T14549] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13372: invalid indirect mapped block 768 (level 1) [ 1790.079649][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.361883][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13374'. [ 1790.683313][T14558] netem: incorrect gi model size [ 1790.723955][T14558] netem: change failed [ 1791.171396][T14566] program syz.1.13380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.445322][T14572] program syz.9.13382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.969082][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.982024][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.992176][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1792.713223][T14581] loop1: detected capacity change from 0 to 32768 [ 1792.733143][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13388'. [ 1792.797876][T14581] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1792.958978][T14581] XFS (loop1): Ending clean mount [ 1793.009550][T14581] XFS (loop1): Quotacheck needed: Please wait. [ 1793.173854][T14581] XFS (loop1): Quotacheck: Done. [ 1793.353269][ T8139] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1793.834161][T14598] loop9: detected capacity change from 0 to 32768 [ 1793.888441][T14598] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.13391 (14598) [ 1793.991032][T14598] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1794.047245][T14598] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1794.056751][T14611] loop5: detected capacity change from 0 to 512 [ 1794.107821][T14598] BTRFS info (device loop9): using free space tree [ 1794.129809][T14611] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.13397: bg 0: block 5: invalid block bitmap [ 1794.192237][T14611] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1794.253868][T14611] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.13397: invalid indirect mapped block 3 (level 2) [ 1794.350079][T14611] EXT4-fs (loop5): 1 orphan inode deleted [ 1794.358623][T14598] BTRFS info (device loop9): enabling ssd optimizations [ 1794.388875][T14611] EXT4-fs (loop5): 1 truncate cleaned up [ 1794.408314][T14598] BTRFS info (device loop9): auto enabling async discard [ 1794.437423][T14611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1794.666902][ T7683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.717301][ T1259] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1794.962026][ T5785] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop9 scanned by udevd (5785) [ 1795.280931][T12402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1795.291187][T12402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1795.299699][T12402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1795.308937][T12402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1795.316581][T12402] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1795.324571][T12402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1795.442230][T14641] lo speed is unknown, defaulting to 1000 [ 1796.163853][T11366] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1796.338831][T14641] chnl_net:caif_netlink_parms(): no params data found [ 1796.384886][T11366] usb 10-1: Using ep0 maxpacket: 8 [ 1796.424521][T11366] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1796.459863][T11366] usb 10-1: config 179 has no interface number 0 [ 1796.467021][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 240 seconds [ 1796.507377][T11366] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1796.556986][T11366] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1796.630017][T11366] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1796.684011][T11366] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1796.696222][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.724353][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.743535][T11366] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1796.774398][T14641] bridge_slave_0: entered allmulticast mode [ 1796.807828][T14641] bridge_slave_0: entered promiscuous mode [ 1796.817440][T11366] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1796.858793][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.873509][T11366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.904452][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.950563][T14650] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1796.984483][T14641] bridge_slave_1: entered allmulticast mode [ 1796.991595][T14641] bridge_slave_1: entered promiscuous mode [ 1797.299673][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.332044][T11366] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input132 [ 1797.403795][T12402] Bluetooth: hci4: command tx timeout [ 1797.421928][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.527487][T14672] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1797.565969][T11366] usb 10-1: USB disconnect, device number 76 [ 1797.572068][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1797.572105][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1797.715817][T11366] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1797.739340][T14641] team0: Port device team_slave_0 added [ 1797.777809][T14641] team0: Port device team_slave_1 added [ 1797.915604][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1797.962350][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.004939][T14678] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1798.067308][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.139569][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.199518][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.393555][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.430874][T14684] loop5: detected capacity change from 0 to 2048 [ 1798.514540][T14684] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1798.610022][T14684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1798.727310][T14641] hsr_slave_0: entered promiscuous mode [ 1798.847814][T14641] hsr_slave_1: entered promiscuous mode [ 1798.898490][T14641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1798.944177][T14641] Cannot create hsr debugfs directory [ 1799.485222][T12402] Bluetooth: hci4: command tx timeout [ 1800.681788][ T2953] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.482493][ T2953] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.567040][T12402] Bluetooth: hci4: command tx timeout [ 1801.635165][ T2953] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.821044][ T2953] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.892050][T14742] loop1: detected capacity change from 0 to 32768 [ 1801.995132][T14641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1802.024233][T14742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.13441 (14742) [ 1802.136363][T14641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1802.160943][T14742] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1802.235568][T14641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1802.247317][T14749] loop9: detected capacity change from 0 to 32768 [ 1802.258289][T14742] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1802.325085][T14641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1802.339696][T14742] BTRFS info (device loop1): turning off barriers [ 1802.380884][T14742] BTRFS info (device loop1): setting nodatasum [ 1802.391245][T14749] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1802.469440][T14742] BTRFS info (device loop1): metadata ratio 2 [ 1802.538021][T14742] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1802.606928][ T2953] tipc: Left network mode [ 1802.628875][T14742] BTRFS info (device loop1): turning on flush-on-commit [ 1802.699618][T14742] BTRFS info (device loop1): setting datacow [ 1802.766352][T14742] BTRFS info (device loop1): enabling disk space caching [ 1802.833588][T14742] BTRFS info (device loop1): force clearing of disk cache [ 1802.847005][ T1259] ocfs2: Unmounting device (7,9) on (node local) [ 1802.891649][T14742] BTRFS info (device loop1): disk space caching is enabled [ 1803.167362][T14742] BTRFS info (device loop1): enabling ssd optimizations [ 1803.267591][T14742] BTRFS info (device loop1): rebuilding free space tree [ 1803.370538][T14794] loop9: detected capacity change from 0 to 1024 [ 1803.390197][T14742] BTRFS info (device loop1): disabling free space tree [ 1803.448275][T14742] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1803.486092][T14794] hfsplus: bad catalog entry type [ 1803.520517][T14742] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1803.608634][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.645070][ T2972] Bluetooth: hci4: command tx timeout [ 1803.654635][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1803.706582][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1803.712168][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1803.885533][ T8139] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1804.151965][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.249073][T14809] loop9: detected capacity change from 0 to 1024 [ 1804.308706][T14809] hfsplus: invalid btree flag [ 1804.359327][T14809] hfsplus: failed to load catalog file [ 1804.365446][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.372598][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.481179][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.488431][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.175313][T14641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1805.470953][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.801653][ T2953] hsr_slave_0: left promiscuous mode [ 1805.900247][ T2953] hsr_slave_1: left promiscuous mode [ 1805.963383][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1805.988565][T14846] loop7: detected capacity change from 0 to 7 [ 1806.020776][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.033064][ C0] blk_print_req_error: 87 callbacks suppressed [ 1806.033076][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.048500][ C0] buffer_io_error: 138 callbacks suppressed [ 1806.048510][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.091436][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.100664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.127881][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.163887][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.173180][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.184437][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.193687][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.208751][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.221435][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.230668][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.244434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.253683][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.263512][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.272697][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.281519][T14846] ldm_validate_partition_table(): Disk read failed. [ 1806.327269][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.336572][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.346297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.355501][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.365438][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1806.374798][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1806.383557][T14846] Dev loop7: unable to read RDB block 0 [ 1806.391923][ T2953] bridge_slave_1: left allmulticast mode [ 1806.414099][T14846] loop7: unable to read partition table [ 1806.427723][ T2953] bridge_slave_1: left promiscuous mode [ 1806.454206][T14846] loop7: partition table beyond EOD, truncated [ 1806.462968][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.491656][T14846] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1806.537493][ T2953] bridge_slave_0: left allmulticast mode [ 1806.552941][ T2953] bridge_slave_0: left promiscuous mode [ 1806.587820][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.816438][T14859] loop1: detected capacity change from 0 to 512 [ 1806.922854][T14859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1807.069481][T14859] ext4 filesystem being mounted at /551/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1807.116351][T14870] loop5: detected capacity change from 0 to 512 [ 1807.508731][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1808.161322][ T2953] veth1_macvtap: left promiscuous mode [ 1808.223948][ T2953] veth0_macvtap: left promiscuous mode [ 1808.229588][ T2953] veth1_vlan: left promiscuous mode [ 1808.277554][ T2953] veth0_vlan: left promiscuous mode [ 1808.489608][T14899] loop1: detected capacity change from 0 to 512 [ 1808.588434][T14899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1808.681172][T14899] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1808.770338][ T2953] bond1 (unregistering): Released all slaves [ 1808.918482][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.396915][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 1809.449151][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 1809.490129][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.545453][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.581623][T14921] netlink: 'syz.1.13485': attribute type 29 has an invalid length. [ 1809.690180][ T2953] bond0 (unregistering): Released all slaves [ 1809.802229][T14853] bridge0: port 3(wlan0) entered blocking state [ 1809.815522][T14853] bridge0: port 3(wlan0) entered disabled state [ 1809.827312][T14853] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1809.839269][T14921] netlink: 'syz.1.13485': attribute type 29 has an invalid length. [ 1809.876475][T14922] netlink: 'syz.1.13485': attribute type 29 has an invalid length. [ 1809.928021][T14641] veth0_vlan: entered promiscuous mode [ 1809.973870][T14923] netlink: 'syz.1.13485': attribute type 29 has an invalid length. [ 1810.054378][T14641] veth1_vlan: entered promiscuous mode [ 1810.211393][T14641] veth0_macvtap: entered promiscuous mode [ 1810.317069][T14641] veth1_macvtap: entered promiscuous mode [ 1810.466307][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.578540][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.631914][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.692637][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.721272][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.745053][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.768275][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.799374][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.823624][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.860062][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.883567][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.916873][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.941824][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1810.976926][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.998120][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.110467][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.205767][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.224351][T14957] loop5: detected capacity change from 0 to 1024 [ 1811.295291][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.346856][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.387745][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.413554][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.438046][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.462443][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.492823][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.517605][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.548290][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.569217][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.597297][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.628015][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.657112][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.762073][T14641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.855001][T14641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.915637][T14641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.957569][T14641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.057584][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13496'. [ 1812.080963][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13496'. [ 1812.344580][T14641] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1812.483989][T28376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.502877][T14641] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 1812.541600][T28376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.692234][T14992] loop1: detected capacity change from 0 to 256 [ 1812.722858][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.738706][T14993] CUSE: unknown device info "" [ 1812.785033][T14993] CUSE: zero length info key specified [ 1812.812367][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.905185][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13505'. [ 1812.980007][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13505'. [ 1813.041404][T14996] netlink: 'syz.5.13505': attribute type 6 has an invalid length. [ 1813.688154][T15019] loop1: detected capacity change from 0 to 256 [ 1813.837290][T15024] sctp: [Deprecated]: syz.9.13514 (pid 15024) Use of int in maxseg socket option. [ 1813.837290][T15024] Use struct sctp_assoc_value instead [ 1814.394878][T15038] CIFS: bad ip= option (1270.0.1) [ 1814.452226][T15040] CIFS: Attempting to mount (null) [ 1814.522005][T15005] loop3: detected capacity change from 0 to 32768 [ 1814.630126][ T28] audit: type=1800 audit(1788200622.903:742): pid=15005 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.13398" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1815.203777][T15040] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1815.283706][T15040] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1815.658348][ T28] audit: type=1326 audit(1788200623.923:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15066 comm="syz.1.13529" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcde4d9e159 code=0x0 [ 1815.830146][T15075] loop9: detected capacity change from 0 to 128 [ 1815.890158][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1815.966112][T15075] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1816.022106][T15075] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1816.096950][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1816.147621][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1816.200739][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1816.246590][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1816.304136][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1816.381398][T15075] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1816.431469][T15075] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1816.470266][T15086] jffs2: notice: (15086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1817.033009][T15104] loop1: detected capacity change from 0 to 1024 [ 1817.089643][T15104] EXT4-fs: Ignoring removed oldalloc option [ 1817.159950][T15104] EXT4-fs: Ignoring removed oldalloc option [ 1817.229250][T15104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1817.327187][T15104] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1817.485401][T15104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1817.671090][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.762239][T15123] loop9: detected capacity change from 0 to 512 [ 1817.794034][T11426] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1817.801805][T11366] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1817.857150][T15123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1817.930111][T15123] ext4 filesystem being mounted at /1169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1818.027717][T11426] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.043789][T11366] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1818.055683][T15123] EXT4-fs (loop9): shut down requested (2) [ 1818.069878][T11366] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1818.097913][T11426] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1818.143489][T11366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.171799][T11426] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1818.214329][T11366] usb 4-1: config 0 descriptor?? [ 1818.228043][ T1259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.253712][T11426] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1818.369700][T11426] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1818.430166][T11426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.480188][T11426] usb 6-1: Product: syz [ 1818.520534][T11426] usb 6-1: Manufacturer: syz [ 1818.561009][T11426] usb 6-1: SerialNumber: syz [ 1818.602624][T15116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1818.653821][T15116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1818.696874][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x1 [ 1818.725012][T11426] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1818.769241][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x5 [ 1818.799804][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 87 [ 1818.833740][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x6 [ 1818.872107][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 1818.890721][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1818.930641][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1818.943618][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1818.979039][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1818.988081][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1819.020204][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1819.028085][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 85 [ 1819.051641][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1819.070561][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 1819.113007][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1819.135480][T11426] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1819.149673][T11366] hid-led 0003:0FC5:B080.005B: unknown main item tag 0x0 [ 1819.179734][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 1819.219646][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1819.260558][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 1819.308899][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 1819.351622][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 86 [ 1819.391550][T11426] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1819.404914][T11366] hid-led: probe of 0003:0FC5:B080.005B failed with error -71 [ 1819.462738][T11426] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1819.477488][T11366] usb 4-1: USB disconnect, device number 35 [ 1819.554370][T11426] usb 6-1: USB disconnect, device number 45 [ 1819.616083][T11426] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1819.715512][T11426] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1819.789052][T11426] keyspan 6-1:1.0: device disconnected [ 1820.069673][T15173] loop1: detected capacity change from 0 to 4096 [ 1820.212327][T15173] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1820.821571][T15172] loop9: detected capacity change from 0 to 32768 [ 1820.841034][T15174] loop5: detected capacity change from 0 to 32768 [ 1820.894970][T15188] loop1: detected capacity change from 0 to 8 [ 1820.935862][T15172] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1820.991963][T15174] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1821.178274][T15172] XFS (loop9): Ending clean mount [ 1821.210529][T15174] XFS (loop5): Ending clean mount [ 1821.449768][ T1259] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1821.558175][ T7683] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1821.703070][T15215] macvlan0: entered promiscuous mode [ 1821.764859][T15215] netlink: 'syz.1.13568': attribute type 1 has an invalid length. [ 1821.842695][T15215] netlink: 'syz.1.13568': attribute type 2 has an invalid length. [ 1822.215348][T15226] loop9: detected capacity change from 0 to 256 [ 1822.285149][T15226] exfat: Deprecated parameter 'namecase' [ 1822.290999][T15226] exfat: Deprecated parameter 'namecase' [ 1822.408168][T15226] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1822.844090][T15239] loop9: detected capacity change from 0 to 128 [ 1822.943162][T15243] netlink: 'syz.1.13575': attribute type 4 has an invalid length. [ 1822.964557][T15239] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1823.076019][T15239] ext4 filesystem being mounted at /1176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1823.224290][T15239] syz.9.13574 (pid 15239) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1823.402841][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13580'. [ 1823.477914][ T1259] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1824.556581][ T28] audit: type=1400 audit(1788200888.826:744): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=15294 comm="syz.9.13595" name="unknown" offset=16 [ 1825.676348][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13609'. [ 1825.749737][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13609'. [ 1825.815639][T15341] netlink: 'syz.3.13609': attribute type 15 has an invalid length. [ 1825.940595][T15345] ip6gre1: entered allmulticast mode [ 1825.977910][T28376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1826.304010][ T3411] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1826.518219][ T3411] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1826.542927][T15360] sock: sock_set_timeout: `syz.9.13617' (pid 15360) tries to set negative timeout [ 1826.570348][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 270 seconds [ 1826.586217][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.632016][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.697396][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1826.767084][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.796601][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.851156][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1826.911951][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1826.954307][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1826.999744][T15351] loop3: detected capacity change from 0 to 32768 [ 1827.013808][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1827.048874][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.114108][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.199763][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1827.275979][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.333917][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.446965][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1827.496984][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.571499][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.666574][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1827.733948][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1827.819557][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1827.927448][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1828.008041][ T3411] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1828.083959][ T3411] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1828.180248][ T3411] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1828.277876][ T3411] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1828.339226][ T3411] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1828.404527][ T3411] usb 6-1: Product: syz [ 1828.430540][ T3411] usb 6-1: Manufacturer: syz [ 1828.462600][ T3411] usb 6-1: SerialNumber: syz [ 1828.557657][ T3411] usb 6-1: config 0 descriptor?? [ 1828.618122][ T3411] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1829.724515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1829.871945][T15432] kvm: kvm [15431]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 1830.206790][ T3411] usb 6-1: USB disconnect, device number 46 [ 1830.237814][T15417] loop3: detected capacity change from 0 to 40427 [ 1830.269614][ T3411] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1830.338653][T15417] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1830.417103][T15444] loop1: detected capacity change from 0 to 256 [ 1830.428474][T15417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1830.524248][T15444] exfat: Deprecated parameter 'utf8' [ 1830.529626][T15444] exfat: Deprecated parameter 'utf8' [ 1830.536433][T15417] F2FS-fs (loop3): Image doesn't support compression [ 1830.543362][T15417] F2FS-fs (loop3): Image doesn't support compression [ 1830.670279][T15444] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1830.728861][T15417] F2FS-fs (loop3): invalid crc value [ 1831.253773][T15417] F2FS-fs (loop3): Start checkpoint disabled! [ 1831.343298][T15417] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1831.398643][T15470] loop1: detected capacity change from 0 to 512 [ 1831.408798][T15417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1831.477278][T15470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1831.570792][T15470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1831.723972][T14861] kworker/u4:8: attempt to access beyond end of device [ 1831.723972][T14861] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1831.743805][T15470] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.13649: bad orphan inode 3855 [ 1831.837078][T15470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1831.851377][T14861] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1831.953942][T15470] EXT4-fs (loop1): shut down requested (1) [ 1832.129873][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.341601][T15486] loop1: detected capacity change from 0 to 512 [ 1832.429311][T15486] EXT4-fs: Ignoring removed mblk_io_submit option [ 1832.519771][T15486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1832.653845][T15486] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1832.719239][T15486] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1832.786606][T15486] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.13653: Failed to acquire dquot type 0 [ 1832.882916][T15486] EXT4-fs (loop1): Remounting filesystem read-only [ 1832.924623][T15486] EXT4-fs (loop1): 1 orphan inode deleted [ 1832.931181][T15486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1833.034055][T15486] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1833.108514][T15503] tun0: tun_chr_ioctl cmd 1074812118 [ 1833.236623][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.481861][ T28] audit: type=1400 audit(1788200897.746:745): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=15511 comm="syz.9.13661" name="unknown" offset=82 [ 1833.522776][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13660'. [ 1833.600321][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13660'. [ 1833.903731][T15525] loop1: detected capacity change from 0 to 512 [ 1833.967196][T15525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1834.121836][T15525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.223775][T15525] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1834.432296][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.689617][T15546] loop3: detected capacity change from 0 to 64 [ 1835.777723][T15549] loop9: detected capacity change from 0 to 40427 [ 1835.859423][T15549] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1835.941101][T15549] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1835.977444][T15583] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1836.055388][T15549] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1836.383465][T15549] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1836.455679][T15549] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1836.541669][T15603] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1836.620714][T14861] rtrs_client L2018: : CM error (CM event: address error, err: -19) [ 1836.695026][T15603] rtrs_client L2618: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 1836.970196][ T28] audit: type=1800 audit(1788200901.236:746): pid=15611 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.13692" name="attr_allow_any_host" dev="configfs" ino=162389 res=0 errno=0 [ 1837.403590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1837.497735][T15630] loop5: detected capacity change from 0 to 128 [ 1837.603748][T15630] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1837.705605][T15630] hpfs: filesystem error: improperly stopped [ 1837.711657][T15630] hpfs: You really don't want any checks? You are crazy... [ 1837.835065][T15630] hpfs: hpfs_map_sector(): read error [ 1837.841045][T15630] hpfs: code page support is disabled [ 1837.914034][T15630] hpfs: hpfs_map_4sectors(): unaligned read [ 1837.948888][T15630] hpfs: hpfs_map_4sectors(): unaligned read [ 1838.000486][T15630] hpfs: filesystem error: unable to find root dir [ 1838.057499][T15637] loop3: detected capacity change from 0 to 8192 [ 1838.196754][T15637] loop3: p1 p2 p4[EZD] [ 1838.284380][T15637] loop3: p4 start 201326592 is beyond EOD, truncated [ 1838.348242][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13705'. [ 1839.711220][T15685] loop1: detected capacity change from 0 to 8192 [ 1839.910157][T15673] loop9: detected capacity change from 0 to 32768 [ 1840.661110][T15705] loop5: detected capacity change from 0 to 128 [ 1840.714556][T15705] EXT4-fs: Ignoring removed orlov option [ 1840.768798][T15705] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1840.863889][T15705] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1840.967922][T15705] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.170236][T15694] loop1: detected capacity change from 0 to 32768 [ 1841.271646][T15716] loop9: detected capacity change from 0 to 512 [ 1841.331492][T15694] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1841.340873][T15716] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1841.375234][ T7683] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1841.412159][T15694] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1841.463342][T15716] EXT4-fs (loop9): 1 truncate cleaned up [ 1841.509897][T15716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1841.645216][T15694] XFS (loop1): Ending clean mount [ 1841.722961][T15694] XFS (loop1): Quotacheck needed: Please wait. [ 1841.852070][T15694] XFS (loop1): Quotacheck: Done. [ 1841.858962][ T1259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.124826][T15742] rt1711h 0-0004: check vid/pid fail [ 1842.130300][T15742] rt1711h: probe of 0-0004 failed with error -5 [ 1842.251571][ T8139] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1842.263841][T15742] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04 [ 1842.821064][T15758] loop9: detected capacity change from 0 to 256 [ 1842.870382][T15758] exfat: Deprecated parameter 'utf8' [ 1842.969879][T15758] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1844.234111][T15766] loop1: detected capacity change from 0 to 40427 [ 1844.297388][T15766] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 1844.358527][T15796] input: syz1 as /devices/virtual/input/input134 [ 1844.373802][T15766] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 1844.458470][T15766] F2FS-fs (loop1): invalid crc value [ 1844.545925][T15766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1844.708217][T15766] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 1844.832695][T15766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1844.934491][T15766] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 1845.017507][T15766] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030 [ 1845.203900][ T8139] syz-executor: attempt to access beyond end of device [ 1845.203900][ T8139] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1845.284978][ T8139] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1845.733133][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13759'. [ 1846.556337][T15845] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 1846.762731][T14861] rtrs_client L1782: : Resolving route failed, err: -19 [ 1846.961654][T15845] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 1847.238166][T15866] loop3: detected capacity change from 0 to 256 [ 1847.302356][T15866] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1847.721446][T15878] loop1: detected capacity change from 0 to 512 [ 1847.796042][T15878] EXT4-fs: Ignoring removed nobh option [ 1847.847586][T15878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1848.017726][T15878] EXT4-fs (loop1): 1 truncate cleaned up [ 1848.064531][T15878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.227789][T15892] loop5: detected capacity change from 0 to 4096 [ 1848.376602][ T8139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.396522][T15892] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1848.560814][T15892] ntfs3: loop5: failed to convert "256c" to koi8-ru [ 1849.636639][ T28] audit: type=1326 audit(1788200913.906:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1849.661175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1849.873506][ T28] audit: type=1326 audit(1788200913.946:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1849.897761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1850.125089][ T28] audit: type=1326 audit(1788200913.946:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1850.353568][ T28] audit: type=1326 audit(1788200913.946:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1850.377824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1850.647539][ T28] audit: type=1326 audit(1788200913.946:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1850.813929][T15952] program syz.9.13803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1850.849705][ T28] audit: type=1326 audit(1788200913.946:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1851.084602][ T28] audit: type=1326 audit(1788200913.946:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1851.109046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.220548][T15966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1851.339837][ T28] audit: type=1326 audit(1788200913.946:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1851.364091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.619773][ T28] audit: type=1326 audit(1788200913.946:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1851.644250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1851.796389][ T28] audit: type=1326 audit(1788200913.956:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=15923 comm="syz.5.13793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5971b9e159 code=0x7ffc0000 [ 1852.123541][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1853.410911][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.427903][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1853.450650][T16035] loop1: detected capacity change from 0 to 256 [ 1853.518081][T16035] exfat: Deprecated parameter 'utf8' [ 1853.562471][T16035] exfat: Deprecated parameter 'namecase' [ 1853.633323][T16035] exfat: Deprecated parameter 'namecase' [ 1853.693776][T16035] exfat: Deprecated parameter 'utf8' [ 1853.769830][T16035] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 1854.657546][T16068] netlink: 277 bytes leftover after parsing attributes in process `syz.3.13841'. [ 1855.306551][T16090] loop9: detected capacity change from 0 to 512 [ 1855.613264][T16098] loop5: detected capacity change from 0 to 256 [ 1855.701594][T16098] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 1855.770072][T16098] FAT-fs (loop5): Filesystem has been set read-only [ 1856.034283][ T5820] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1856.149801][T16109] netlink: 'syz.1.13857': attribute type 2 has an invalid length. [ 1856.199120][T16109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13857'. [ 1856.284526][ T5820] usb 10-1: Using ep0 maxpacket: 32 [ 1856.318776][ T5820] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1856.349052][ T5820] usb 10-1: config 0 has no interface number 0 [ 1856.414420][ T5820] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1856.494145][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.547504][ T5820] usb 10-1: Product: syz [ 1856.589964][ T5820] usb 10-1: Manufacturer: syz [ 1856.604779][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 300 seconds [ 1856.633943][ T5820] usb 10-1: SerialNumber: syz [ 1856.688653][ T5820] usb 10-1: config 0 descriptor?? [ 1856.698886][T16118] loop3: detected capacity change from 0 to 1024 [ 1856.718221][T16098] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 1856.734806][ T5820] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1856.803752][T16098] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 1856.955474][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.064069][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.423730][ T3411] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1857.502342][ T5820] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1857.581309][ T5820] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1857.660307][ T3411] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1857.693039][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1857.731444][ T3411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.754211][ T5820] usb 10-1: USB disconnect, device number 77 [ 1857.796040][ T3411] usb 6-1: Product: syz [ 1857.801584][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1857.833781][ T3411] usb 6-1: Manufacturer: syz [ 1857.853356][ T3411] usb 6-1: SerialNumber: syz [ 1857.888488][ T3411] usb 6-1: config 0 descriptor?? [ 1857.895089][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1857.950172][ T3411] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1857.982320][ T5820] quatech2 10-1:0.51: device disconnected [ 1858.577296][T16150] netlink: 7 bytes leftover after parsing attributes in process `syz.9.13868'. [ 1858.632097][T16138] loop3: detected capacity change from 0 to 32768 [ 1858.702063][T16138] XFS: attr2 mount option is deprecated. [ 1858.744585][ T3411] gspca_sunplus: reg_w_riv err -71 [ 1858.779421][ T3411] sunplus: probe of 6-1:0.0 failed with error -71 [ 1858.837938][ T3411] usb 6-1: USB disconnect, device number 47 [ 1858.921241][T16138] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1859.064245][T16138] XFS (loop3): Ending clean mount [ 1859.096525][T16138] XFS (loop3): Quotacheck needed: Please wait. [ 1859.150789][T16138] XFS (loop3): Quotacheck: Done. [ 1859.471971][T14641] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1860.218734][T16174] loop9: detected capacity change from 0 to 32768 [ 1860.319965][T16174] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 1860.362903][T16174] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1860.529835][T16174] XFS (loop9): Ending clean mount [ 1860.584366][T16174] XFS (loop9): Quotacheck needed: Please wait. [ 1860.619848][T16174] XFS (loop9): Quotacheck: Done. [ 1860.792509][ T1259] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1860.839609][T16216] loop3: detected capacity change from 0 to 512 [ 1860.891447][T16216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1860.991373][T16216] EXT4-fs (loop3): 1 truncate cleaned up [ 1861.032246][T16216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1861.296953][T14641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1861.876152][T16242] loop9: detected capacity change from 0 to 512 [ 1861.951112][T16242] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.13888: bad orphan inode 15 [ 1862.034225][T16242] ext4_test_bit(bit=14, block=5) = 0 [ 1862.080068][T16242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1862.179932][T16242] EXT4-fs (loop9): shut down requested (2) [ 1862.283222][ T1259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.426752][T16259] netlink: 'syz.3.13895': attribute type 11 has an invalid length. [ 1862.449025][T16260] loop5: detected capacity change from 0 to 7 [ 1862.470106][T16260] Dev loop5: unable to read RDB block 7 [ 1862.478481][T16259] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.13895'. [ 1862.488715][T16260] loop5: unable to read partition table [ 1862.500015][T16260] loop5: partition table beyond EOD, truncated [ 1862.507978][T16259] ieee80211 !!: Selected rate control algorithm 'minstrel_ht' [ 1862.521981][T16260] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1862.536652][ T64] loop: Write error at byte offset 8, length 3584. [ 1862.559516][ C0] blk_print_req_error: 9 callbacks suppressed [ 1862.559528][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1862.575060][ C0] buffer_io_error: 9 callbacks suppressed [ 1862.575070][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1862.606275][T16259] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1862.868544][T16267] loop5: detected capacity change from 0 to 2048 [ 1862.960571][T16269] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1862.995196][T16267] NILFS error (device loop5): nilfs_readdir: zero-length directory entry [ 1863.073993][T16267] Remounting filesystem read-only [ 1863.443791][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1863.734528][T16291] netlink: 'syz.1.13909': attribute type 11 has an invalid length. [ 1863.808036][T16291] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.13909'. [ 1863.908523][T16291] ieee80211 !!: Selected rate control algorithm 'minstrel_ht' [ 1863.968270][T16296] loop3: detected capacity change from 0 to 128 [ 1864.005145][T16291] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1864.086194][T16296] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1864.260794][T16296] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1864.429970][T16296] fscrypt (loop3, inode 12): Unsupported encryption flags (0x08) [ 1864.724349][T14641] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1864.766022][T16302] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1864.825038][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 1864.830819][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 1864.966141][T16306] netlink: 'syz.9.13916': attribute type 9 has an invalid length. [ 1865.011105][T16306] netlink: 371 bytes leftover after parsing attributes in process `syz.9.13916'. [ 1865.528155][T16335] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.537282][T16335] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.546276][T16335] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.555299][T16335] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1865.679280][T16336] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.993263][T16355] i2c i2c-0: delete_device: Extra parameters [ 1866.935879][T16396] loop5: detected capacity change from 0 to 512 [ 1866.974435][T16396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1867.012196][T16396] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1867.087062][T16396] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.13954: bad orphan inode 131083 [ 1867.151522][T16396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1867.206215][T16383] loop9: detected capacity change from 0 to 32768 [ 1867.233801][T16396] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.13954: Logical block already allocated [ 1867.300704][T16406] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.13954: Logical block already allocated [ 1867.445614][ T7683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1867.609490][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 1867.609509][ T28] audit: type=1400 audit(1788200931.876:858): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=16413 comm="syz.3.13960" name="foo" offset=60 [ 1868.486548][T16433] netlink: 'syz.3.13967': attribute type 25 has an invalid length. [ 1868.513720][T16433] netlink: 'syz.3.13967': attribute type 28 has an invalid length. [ 1868.691809][T16437] loop3: detected capacity change from 0 to 512 [ 1868.699032][T16438] netlink: 'syz.9.13977': attribute type 29 has an invalid length. [ 1868.727843][T16438] netlink: 'syz.9.13977': attribute type 29 has an invalid length. [ 1868.752262][T16438] netlink: 'syz.9.13977': attribute type 29 has an invalid length. [ 1868.766735][T16437] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.13968: bad orphan inode 13 [ 1868.803898][T16443] netlink: 'syz.9.13977': attribute type 29 has an invalid length. [ 1868.832299][T16437] ext4_test_bit(bit=12, block=4) = 1 [ 1868.838081][T16437] is_bad_inode(inode)=0 [ 1868.849669][T16437] NEXT_ORPHAN(inode)=0 [ 1868.883765][T16437] max_ino=32 [ 1868.897360][T16437] i_nlink=1 [ 1868.906848][T16437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1869.058865][T14641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1869.572920][T16458] jffs2: notice: (16458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1869.601921][T16430] loop1: detected capacity change from 0 to 65536 [ 1869.627686][T16430] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1869.680949][T16430] XFS (loop1): Ending clean mount [ 1869.809196][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13979'. [ 1869.837809][ T8139] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1870.012130][T16471] bridge_slave_0: left allmulticast mode [ 1870.035837][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.029564][T16471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1871.195096][T16501] openvswitch: netlink: Message has 161 unknown bytes. [ 1871.219241][T16501] openvswitch: netlink: Actions may not be safe on all matching packets [ 1871.228912][ T4242] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1871.320254][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13990'. [ 1871.412823][T16511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1871.429045][ T4242] usb 4-1: Using ep0 maxpacket: 8 [ 1871.447791][ T4242] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.464044][ T4242] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1871.494606][ T4242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1871.534789][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.570460][T16517] loop5: detected capacity change from 0 to 1024 [ 1873.967732][ T5820] usb 4-1: USB disconnect, device number 36 [ 1879.643659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1886.684074][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 330 seconds [ 1914.848778][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.861199][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1916.764091][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 360 seconds [ 1935.323606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1946.844181][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 390 seconds [ 1976.288232][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.298225][ T1294] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1976.929725][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 420 seconds [ 1988.603415][T16566] Bluetooth: hci4: command 0x0406 tx timeout [ 2007.007790][T13552] block nbd6: Possible stuck request ffff888021ce8000: control (read@0,4096B). Runtime 450 seconds [ 2024.923621][ T29] INFO: task udevd:5791 blocked for more than 143 seconds. [ 2024.930917][ T29] Tainted: G S syzkaller #0 [ 2024.941064][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2024.949836][ T29] task:udevd state:D stack:23208 pid:5791 ppid:5140 flags:0x00004006 [ 2024.962592][ T29] Call Trace: [ 2024.965997][ T29] [ 2024.968963][ T29] __schedule+0x15ae/0x4660 [ 2024.973948][ T29] ? _raw_spin_unlock+0x40/0x40 [ 2024.978952][ T29] ? asan.module_dtor+0x20/0x20 [ 2024.983985][ T29] ? rcu_is_watching+0x15/0xb0 [ 2024.988823][ T29] ? __rwlock_init+0x150/0x150 [ 2024.993689][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 2024.998785][ T29] ? lock_chain_count+0x20/0x20 [ 2025.003833][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2025.008910][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2025.014725][ T29] schedule+0xbd/0x170 [ 2025.018949][ T29] io_schedule+0x80/0xd0 [ 2025.023255][ T29] folio_wait_bit_common+0x881/0xfa0 [ 2025.029562][ T29] ? folio_wait_bit+0x30/0x30 [ 2025.034571][ T29] ? _compound_head+0x120/0x120 [ 2025.039505][ T29] ? filemap_add_folio+0x190/0x3d0 [ 2025.045256][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 2025.050608][ T29] ? blkdev_writepage+0x30/0x30 [ 2025.055966][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 2025.061142][ T29] ? blkdev_writepage+0x30/0x30 [ 2025.067227][ T29] read_part_sector+0xd2/0x350 [ 2025.072049][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2025.077789][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2025.083135][ T29] ? put_partition+0x360/0x360 [ 2025.088077][ T29] ? alloc_pages+0x4e1/0x740 [ 2025.092711][ T29] bdev_disk_changed+0x755/0x1450 [ 2025.098063][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2025.103632][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 2025.108977][ T29] ? iput+0x33f/0x900 [ 2025.112998][ T29] blkdev_get_whole+0x30d/0x390 [ 2025.118525][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 2025.125663][ T29] blkdev_open+0x14e/0x360 [ 2025.130169][ T29] do_dentry_open+0x880/0x14b0 [ 2025.135718][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2025.140390][ T29] path_openat+0x284f/0x3270 [ 2025.145469][ T29] ? stack_trace_save+0xaa/0x100 [ 2025.150488][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2025.155712][ T29] ? __x64_sys_openat+0x139/0x160 [ 2025.160816][ T29] ? do_filp_open+0x430/0x430 [ 2025.166053][ T29] ? rcu_is_watching+0x15/0xb0 [ 2025.170895][ T29] do_filp_open+0x1f2/0x430 [ 2025.177110][ T29] ? vfs_tmpfile+0x620/0x620 [ 2025.181778][ T29] ? lock_release+0xb5/0x8c0 [ 2025.186846][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2025.191767][ T29] ? alloc_fd+0x590/0x640 [ 2025.196528][ T29] do_sys_openat2+0x134/0x1d0 [ 2025.201278][ T29] ? do_sys_open+0xe0/0xe0 [ 2025.206191][ T29] ? lock_chain_count+0x20/0x20 [ 2025.211113][ T29] __x64_sys_openat+0x139/0x160 [ 2025.216522][ T29] do_syscall_64+0x55/0xb0 [ 2025.220997][ T29] ? clear_bhb_loop+0x40/0x90 [ 2025.226091][ T29] ? clear_bhb_loop+0x40/0x90 [ 2025.230834][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2025.237926][ T29] RIP: 0033:0x7f78e04a7407 [ 2025.242416][ T29] RSP: 002b:00007ffc8282e170 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2025.251385][ T29] RAX: ffffffffffffffda RBX: 00007f78e0b5a880 RCX: 00007f78e04a7407 [ 2025.259937][ T29] RDX: 00000000000a0800 RSI: 000055dcd459b290 RDI: ffffffffffffff9c [ 2025.268233][ T29] RBP: 000055dcd4579910 R08: 0000000000000000 R09: 0000000000000000 [ 2025.276580][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dcd458ce20 [ 2025.284939][ T29] R13: 000055dcd4591410 R14: 0000000000000000 R15: 000055dcd458ce20 [ 2025.293010][ T29] [ 2025.296623][ T29] INFO: lockdep is turned off. [ 2025.301431][ T29] NMI backtrace for cpu 1 [ 2025.305831][ T29] CPU: 1 PID: 29 Comm: khungtaskd Tainted: G S syzkaller #0 [ 2025.314530][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2025.324616][ T29] Call Trace: [ 2025.327915][ T29] [ 2025.330877][ T29] dump_stack_lvl+0x18c/0x250 [ 2025.335593][ T29] ? __wake_up_klogd+0xd9/0x100 [ 2025.340506][ T29] ? show_regs_print_info+0x20/0x20 [ 2025.345733][ T29] ? load_image+0x420/0x420 [ 2025.350264][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2025.355231][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2025.361419][ T29] ? load_image+0x420/0x420 [ 2025.365954][ T29] ? print_tainted+0x55/0x170 [ 2025.370660][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2025.376759][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2025.382773][ T29] watchdog+0xf59/0xfa0 [ 2025.386965][ T29] ? watchdog+0x1e1/0xfa0 [ 2025.391330][ T29] kthread+0x2fa/0x390 [ 2025.395428][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2025.400487][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2025.405111][ T29] ret_from_fork+0x48/0x80 [ 2025.409567][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2025.414198][ T29] ret_from_fork_asm+0x11/0x20 [ 2025.419020][ T29] [ 2025.422309][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2025.427627][ C0] NMI backtrace for cpu 0 [ 2025.427640][ C0] CPU: 0 PID: 1127 Comm: kworker/u4:7 Tainted: G S syzkaller #0 [ 2025.427659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2025.427671][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2025.427697][ C0] RIP: 0010:lock_acquire+0x5/0x420 [ 2025.427720][ C0] Code: 00 0f 1f 40 00 f3 0f 1e fa 65 8b 05 ed 32 9b 7e a9 00 ff ff 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 [ 2025.427736][ C0] RSP: 0018:ffffc90004937908 EFLAGS: 00000046 [ 2025.427750][ C0] RAX: 1ffff1100470cdda RBX: ffffffff974b7e98 RCX: 0000000000000000 [ 2025.427763][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff974b7eb0 [ 2025.427774][ C0] RBP: ffffc900049379b0 R08: 0000000000000001 R09: 0000000000000000 [ 2025.427785][ C0] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: dffffc0000000000 [ 2025.427798][ C0] R13: 0000000000000200 R14: 0000000000000806 R15: 1ffff92000926f24 [ 2025.427810][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2025.427825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2025.427837][ C0] CR2: 00005654af8fd168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2025.427853][ C0] Call Trace: [ 2025.427859][ C0] [ 2025.427867][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 2025.427886][ C0] ? debug_object_assert_init+0x9c/0x300 [ 2025.427910][ C0] ? _raw_spin_lock+0x40/0x40 [ 2025.427933][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 2025.427956][ C0] debug_object_assert_init+0x9c/0x300 [ 2025.427984][ C0] __mod_timer+0x55/0xd60 [ 2025.428000][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 2025.428025][ C0] queue_delayed_work_on+0x131/0x200 [ 2025.428046][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 2025.428068][ C0] ? process_scheduled_works+0x975/0x1600 [ 2025.428092][ C0] process_scheduled_works+0xa60/0x1600 [ 2025.428128][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2025.428153][ C0] ? assign_work+0x3cc/0x5d0 [ 2025.428176][ C0] worker_thread+0xa5e/0xfe0 [ 2025.428211][ C0] kthread+0x2fa/0x390 [ 2025.428226][ C0] ? pr_cont_work+0x550/0x550 [ 2025.428248][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2025.428265][ C0] ret_from_fork+0x48/0x80 [ 2025.428286][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2025.428303][ C0] ret_from_fork_asm+0x11/0x20 [ 2025.428336][ C0] [ 2025.463637][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2025.674419][ T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S syzkaller #0 [ 2025.683114][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2025.693204][ T29] Call Trace: [ 2025.696516][ T29] [ 2025.699510][ T29] dump_stack_lvl+0x18c/0x250 [ 2025.704246][ T29] ? show_regs_print_info+0x20/0x20 [ 2025.709482][ T29] ? load_image+0x420/0x420 [ 2025.714015][ T29] panic+0x2ca/0x720 [ 2025.717941][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2025.722472][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2025.728043][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2025.733625][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2025.739810][ T29] watchdog+0xf98/0xfa0 [ 2025.744007][ T29] ? watchdog+0x1e1/0xfa0 [ 2025.748391][ T29] kthread+0x2fa/0x390 [ 2025.752488][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2025.757549][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2025.762158][ T29] ret_from_fork+0x48/0x80 [ 2025.766599][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2025.771222][ T29] ret_from_fork_asm+0x11/0x20 [ 2025.776021][ T29] [ 2025.779614][ T29] Kernel Offset: disabled [ 2025.783947][ T29] Rebooting in 86400 seconds..