last executing test programs: 4.8656936s ago: executing program 0 (id=303): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000002c0)={0x20, 0x3, 0x10, "9185c7174c970f8ad3f7539a579871cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.673355824s ago: executing program 0 (id=328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00221100000027f123b354b30ed3d7ad67"], 0x0}, 0x0) 2.104501368s ago: executing program 1 (id=336): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x714, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r1, 0x4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r1, 0x2}}, 0x18) 2.02199005s ago: executing program 1 (id=337): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.000101781s ago: executing program 3 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 1.893271564s ago: executing program 3 (id=340): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1494c2, 0x1a8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.474629053s ago: executing program 3 (id=341): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/48, 0x30) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.19201055s ago: executing program 3 (id=344): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) 1.094531993s ago: executing program 1 (id=346): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x4, 0x0) 960.269566ms ago: executing program 2 (id=348): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) 906.731868ms ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 826.56416ms ago: executing program 2 (id=350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x401d, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) close(0x3) 766.666151ms ago: executing program 2 (id=351): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) 752.653541ms ago: executing program 0 (id=352): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 600.315095ms ago: executing program 0 (id=353): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0xffffffffffffff0f) 568.538586ms ago: executing program 2 (id=354): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000300)="90", 0x1}], 0x1) 527.052287ms ago: executing program 0 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}]}}}]}, 0x3c}}, 0x0) 491.180267ms ago: executing program 1 (id=356): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) 372.338501ms ago: executing program 2 (id=357): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 350.495411ms ago: executing program 0 (id=358): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0xffffffffffffffff, 0x0, 0x12) 304.178982ms ago: executing program 1 (id=359): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 234.532764ms ago: executing program 3 (id=360): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) lseek(r0, 0x8001, 0x0) 101.167957ms ago: executing program 1 (id=361): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xae) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 3 (id=362): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) truncate(&(0x7f0000000000)='./file1\x00', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 73.728152][ T5756] cgroup: Unknown subsys name 'net' [ 73.863976][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.230175][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.100769][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.101047][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.116024][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.118100][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.124862][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.138249][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.138919][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.145834][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.160559][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.168868][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.170342][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.188744][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.196112][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.204380][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.208642][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.218767][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.227031][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.227559][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.241575][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.243087][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.248690][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.265908][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.277348][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.284811][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.694119][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 77.733900][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.829039][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 77.853134][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 77.919536][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.927602][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.934879][ T5776] bridge_slave_0: entered allmulticast mode [ 77.943032][ T5776] bridge_slave_0: entered promiscuous mode [ 77.970466][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.977876][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.985318][ T5768] bridge_slave_0: entered allmulticast mode [ 77.992400][ T5768] bridge_slave_0: entered promiscuous mode [ 78.013030][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.020311][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.027698][ T5776] bridge_slave_1: entered allmulticast mode [ 78.034395][ T5776] bridge_slave_1: entered promiscuous mode [ 78.054709][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.064060][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.071725][ T5768] bridge_slave_1: entered allmulticast mode [ 78.079618][ T5768] bridge_slave_1: entered promiscuous mode [ 78.112878][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.149349][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.215748][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.225391][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.235539][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.243219][ T5770] bridge_slave_0: entered allmulticast mode [ 78.251617][ T5770] bridge_slave_0: entered promiscuous mode [ 78.260654][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.268285][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.275626][ T5770] bridge_slave_1: entered allmulticast mode [ 78.282903][ T5770] bridge_slave_1: entered promiscuous mode [ 78.303536][ T5776] team0: Port device team_slave_0 added [ 78.312347][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.342622][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.350077][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.357637][ T5769] bridge_slave_0: entered allmulticast mode [ 78.364338][ T5769] bridge_slave_0: entered promiscuous mode [ 78.373630][ T5776] team0: Port device team_slave_1 added [ 78.402143][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.411667][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.421635][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.429070][ T5769] bridge_slave_1: entered allmulticast mode [ 78.435831][ T5769] bridge_slave_1: entered promiscuous mode [ 78.464983][ T5768] team0: Port device team_slave_0 added [ 78.473485][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.503042][ T5768] team0: Port device team_slave_1 added [ 78.519355][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.529513][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.536577][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.563485][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.585939][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.593136][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.619629][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.642978][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.675436][ T5770] team0: Port device team_slave_0 added [ 78.692357][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.701747][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.728388][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.740890][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.748142][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.775683][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.791500][ T5770] team0: Port device team_slave_1 added [ 78.841595][ T5769] team0: Port device team_slave_0 added [ 78.877442][ T5776] hsr_slave_0: entered promiscuous mode [ 78.883696][ T5776] hsr_slave_1: entered promiscuous mode [ 78.894952][ T5769] team0: Port device team_slave_1 added [ 78.911591][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.918855][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.945160][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.982240][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.989444][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.015867][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.056093][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.063603][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.090050][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.116481][ T5768] hsr_slave_0: entered promiscuous mode [ 79.123239][ T5768] hsr_slave_1: entered promiscuous mode [ 79.131188][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.139168][ T5768] Cannot create hsr debugfs directory [ 79.153181][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.160349][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.187425][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.265608][ T5770] hsr_slave_0: entered promiscuous mode [ 79.274676][ T5770] hsr_slave_1: entered promiscuous mode [ 79.281310][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.289843][ T5770] Cannot create hsr debugfs directory [ 79.327785][ T5777] Bluetooth: hci2: command tx timeout [ 79.333883][ T5779] Bluetooth: hci0: command tx timeout [ 79.333949][ T5086] Bluetooth: hci1: command tx timeout [ 79.340260][ T5773] Bluetooth: hci3: command tx timeout [ 79.373164][ T5769] hsr_slave_0: entered promiscuous mode [ 79.380919][ T5769] hsr_slave_1: entered promiscuous mode [ 79.387160][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.394735][ T5769] Cannot create hsr debugfs directory [ 79.681839][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.703863][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.721954][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.732735][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.813385][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.824546][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.837463][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.847799][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.939769][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.960224][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.999227][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.012223][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.096542][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.113596][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.125617][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.145532][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.178058][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.189981][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.253820][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.269624][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.301907][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.309367][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.321208][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.328516][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.342840][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.350078][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.399905][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.407261][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.476799][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.523982][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.570934][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.602681][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.610464][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.632407][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.639697][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.697877][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.757591][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.764802][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.810183][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.817428][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.945950][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.034825][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.121252][ T5776] veth0_vlan: entered promiscuous mode [ 81.153913][ T5768] veth0_vlan: entered promiscuous mode [ 81.164550][ T5776] veth1_vlan: entered promiscuous mode [ 81.181350][ T5768] veth1_vlan: entered promiscuous mode [ 81.226323][ T5776] veth0_macvtap: entered promiscuous mode [ 81.242581][ T5776] veth1_macvtap: entered promiscuous mode [ 81.285230][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.305343][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.316663][ T5768] veth0_macvtap: entered promiscuous mode [ 81.344098][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.356136][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.366091][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.376333][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.393486][ T5768] veth1_macvtap: entered promiscuous mode [ 81.407938][ T5086] Bluetooth: hci0: command tx timeout [ 81.408602][ T5779] Bluetooth: hci3: command tx timeout [ 81.413356][ T5086] Bluetooth: hci2: command tx timeout [ 81.419421][ T5773] Bluetooth: hci1: command tx timeout [ 81.428741][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.511865][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.531359][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.544916][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.561864][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.590851][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.601933][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.613703][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.632101][ T5770] veth0_vlan: entered promiscuous mode [ 81.645653][ T5770] veth1_vlan: entered promiscuous mode [ 81.655519][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.668653][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.679294][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.689308][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.730696][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.754209][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.812723][ T5769] veth0_vlan: entered promiscuous mode [ 81.823590][ T5770] veth0_macvtap: entered promiscuous mode [ 81.835467][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.836102][ T5770] veth1_macvtap: entered promiscuous mode [ 81.852458][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.883355][ T5769] veth1_vlan: entered promiscuous mode [ 81.945646][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.959474][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.995190][ T5769] veth0_macvtap: entered promiscuous mode [ 82.013890][ T5769] veth1_macvtap: entered promiscuous mode [ 82.033112][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.052404][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.063495][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.071992][ T5835] syz.3.4[5835]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.079497][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.100591][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.160424][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.175782][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.187391][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.204697][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.217931][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.228257][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.236197][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.258886][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.271088][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.280047][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.289521][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.305900][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.332245][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.343952][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.359881][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.371440][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.386619][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.403695][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.474923][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.506782][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.525963][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.543076][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.552905][ T5835] loop3: detected capacity change from 0 to 40427 [ 82.567160][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.588266][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.601306][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.611673][ T5835] F2FS-fs (loop3): invalid crc value [ 82.615592][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.626579][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.640550][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.649627][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.679242][ T5835] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.858610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.866482][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.893997][ T5835] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 82.965839][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.993604][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.070066][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.094283][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.198066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.205948][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.271434][ T5776] syz-executor: attempt to access beyond end of device [ 83.271434][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.318843][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.497556][ T5773] Bluetooth: hci2: command tx timeout [ 83.503022][ T5773] Bluetooth: hci0: command tx timeout [ 83.509330][ T5779] Bluetooth: hci1: command tx timeout [ 83.509353][ T5777] Bluetooth: hci3: command tx timeout [ 83.579511][ T5854] loop2: detected capacity change from 0 to 16 [ 83.641726][ T5854] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.854415][ T5859] loop1: detected capacity change from 0 to 512 [ 83.941111][ T5859] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.10: invalid indirect mapped block 8 (level 1) [ 84.007666][ T5859] EXT4-fs (loop1): 1 truncate cleaned up [ 84.057133][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.148576][ T5862] loop3: detected capacity change from 0 to 8192 [ 84.185726][ T5862] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.237221][ T5862] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 84.246754][ T5862] REISERFS (device loop3): using ordered data mode [ 84.303174][ T5862] reiserfs: using flush barriers [ 84.341993][ T5862] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.428076][ T5862] REISERFS (device loop3): checking transaction log (loop3) [ 84.483488][ T5862] REISERFS (device loop3): Using r5 hash to sort names [ 84.514648][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.527905][ T5862] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 84.618183][ T5862] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 84.663623][ T5862] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 84.699173][ T5862] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 84.744192][ T5874] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 84.781872][ T5874] REISERFS (device loop3): Remounting filesystem read-only [ 84.797116][ T5874] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 85.057707][ T5870] loop0: detected capacity change from 0 to 32768 [ 85.075453][ T5870] ======================================================= [ 85.075453][ T5870] WARNING: The mand mount option has been deprecated and [ 85.075453][ T5870] and is ignored by this kernel. Remove the mand [ 85.075453][ T5870] option from the mount to silence this warning. [ 85.075453][ T5870] ======================================================= [ 85.341024][ T5882] loop3: detected capacity change from 0 to 1024 [ 85.372344][ T5882] EXT4-fs error (device loop3): __ext4_fill_super:5517: comm syz.3.18: inode #2: comm syz.3.18: iget: illegal inode # [ 85.423209][ T5882] EXT4-fs (loop3): get root inode failed [ 85.437905][ T5882] EXT4-fs (loop3): mount failed [ 85.568358][ T5777] Bluetooth: hci0: command tx timeout [ 85.574287][ T5086] Bluetooth: hci3: command tx timeout [ 85.576878][ T5773] Bluetooth: hci1: command tx timeout [ 85.579729][ T5086] Bluetooth: hci2: command tx timeout [ 85.670757][ T5876] loop1: detected capacity change from 0 to 32768 [ 85.761901][ T5876] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 85.907196][ T5876] XFS (loop1): Ending clean mount [ 86.195043][ T5770] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 86.498504][ T5890] loop3: detected capacity change from 0 to 40427 [ 86.521798][ T5890] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.544430][ T5890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.553419][ T5758] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.572962][ T5890] F2FS-fs (loop3): invalid crc value [ 86.587518][ T5890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.664904][ T5890] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.672283][ T5890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.752759][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.773485][ T5758] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.779101][ T5904] loop2: detected capacity change from 0 to 32768 [ 86.808948][ T5758] usb 1-1: string descriptor 0 read error: -22 [ 86.816062][ T5758] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 86.827761][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.873109][ T5758] etas_es58x 1-1:1.0: Starting (null) (null) (Serial Number (null)) [ 86.882416][ T5758] etas_es58x 1-1:1.0: could not retrieve the product info string [ 86.917028][ T28] audit: type=1800 audit(1791574604.862:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 86.962537][ T789] cfg80211: failed to load regulatory.db [ 86.970404][ T5904] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 86.970404][ T5904] [ 87.245505][ T5921] loop1: detected capacity change from 0 to 512 [ 87.322464][ T5909] etas_es58x 1-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 87.338898][ T5921] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.28: corrupted in-inode xattr: invalid ea_ino [ 87.377975][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 87.385961][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 87.393802][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 87.411748][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 87.420400][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 87.431481][ T5909] etas_es58x 1-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 87.443708][ T5921] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.28: couldn't read orphan inode 15 (err -117) [ 87.479931][ T56] usb 1-1: USB disconnect, device number 2 [ 87.503857][ T56] etas_es58x 1-1:1.0: Disconnecting (null) (null) [ 87.504442][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.584974][ T5921] syz.1.28 (pid 5921) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 87.695364][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.587014][ T5758] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.726411][ T5956] loop0: detected capacity change from 0 to 512 [ 88.759945][ T5956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.787540][ T5758] usb 4-1: Using ep0 maxpacket: 16 [ 88.800329][ T5956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.810369][ T5758] usb 4-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30 [ 88.824635][ T5956] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.34: invalid indirect mapped block 9 (level 0) [ 88.842991][ T5758] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.844118][ T5956] EXT4-fs (loop0): 1 truncate cleaned up [ 88.862564][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.896956][ T5758] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 88.926997][ T5940] loop2: detected capacity change from 0 to 32768 [ 88.953692][ T5758] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.987681][ T5940] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.989798][ T5758] usb 4-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 88.997625][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.025950][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.049602][ T5758] usb 4-1: config 0 descriptor?? [ 89.153665][ T5940] XFS (loop2): Ending clean mount [ 89.267612][ T5975] loop1: detected capacity change from 0 to 256 [ 89.330455][ T5973] loop0: detected capacity change from 0 to 8192 [ 89.422568][ T5769] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 89.452273][ T28] audit: type=1800 audit(1791574607.412:3): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="file0" dev="loop0" ino=1048620 res=0 errno=0 [ 89.552215][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.592513][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.639569][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.667476][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.688250][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.703799][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.741747][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.773483][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.804038][ T5758] wacom 0003:056A:0309.0001: unknown main item tag 0x0 [ 89.846683][ T5758] wacom 0003:056A:0309.0001: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.3-1/input0 [ 89.865824][ T5758] usb 4-1: USB disconnect, device number 2 [ 89.969495][ T5983] Bluetooth: MGMT ver 1.22 [ 90.072512][ T5981] fido_id[5981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 90.354165][ T28] audit: type=1400 audit(1791574608.312:4): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=5993 comm="syz.0.42" name="foo" offset=60 [ 90.767066][ T789] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 90.958347][ T789] usb 1-1: not running at top speed; connect to a high speed hub [ 90.981392][ T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 91.009384][ T789] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 91.022592][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.032385][ T789] usb 1-1: Product: syz [ 91.036678][ T789] usb 1-1: Manufacturer: syz [ 91.052914][ T789] usb 1-1: SerialNumber: syz [ 91.074559][ T789] oti6858 1-1:1.0: oti6858 converter detected [ 91.103859][ T789] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 91.109102][ T6011] loop1: detected capacity change from 0 to 32768 [ 91.182804][ T6011] JBD2: Ignoring recovery information on journal [ 91.283062][ T6011] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.536194][ T27] usb 1-1: USB disconnect, device number 3 [ 91.545645][ T6018] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.564113][ T27] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 91.571816][ T6019] mmap: syz.2.52 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.594859][ T27] oti6858 1-1:1.0: device disconnected [ 91.653197][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 92.068932][ T6031] loop1: detected capacity change from 0 to 4096 [ 92.131374][ T6031] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.162931][ T6031] NILFS (loop1): mounting unchecked fs [ 92.203167][ T5762] udevd[5762]: incorrect nilfs2 checksum on /dev/loop1 [ 92.221973][ T6031] NILFS (loop1): recovery complete [ 92.240957][ T6041] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.409572][ T6046] tun0: tun_chr_ioctl cmd 2147767507 [ 92.678811][ T6053] kernel read not supported for file /per_cpu/cpu0/trace (pid: 6053 comm: syz.2.69) [ 92.718847][ T28] audit: type=1800 audit(1791574610.672:5): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.69" name="trace" dev="tracefs" ino=1150 res=0 errno=0 [ 92.894781][ T6063] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.996635][ T6040] loop3: detected capacity change from 0 to 32768 [ 93.068438][ T6040] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.160474][ T6081] loop0: detected capacity change from 0 to 512 [ 93.215854][ T6081] EXT4-fs (loop0): 1 truncate cleaned up [ 93.223310][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.223771][ T6040] XFS (loop3): Ending clean mount [ 93.248358][ T28] audit: type=1800 audit(1791574611.212:6): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.78" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 93.340654][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.536994][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.646378][ T6089] bond0: no command found in slaves file - use +ifname or -ifname [ 93.921282][ T6062] loop1: detected capacity change from 0 to 40427 [ 93.947744][ T6062] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 93.954164][ T6062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 93.992555][ T6062] F2FS-fs (loop1): invalid crc value [ 94.203799][ T6062] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 94.216147][ T6062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.329227][ T6062] syz.1.73: attempt to access beyond end of device [ 94.329227][ T6062] loop1: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 94.381053][ T6106] syz.1.73: attempt to access beyond end of device [ 94.381053][ T6106] loop1: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 94.455372][ T6109] loop3: detected capacity change from 0 to 22 [ 94.474745][ T6109] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 94.503728][ T6109] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 94.558564][ T5770] syz-executor: attempt to access beyond end of device [ 94.558564][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.589082][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 94.791957][ T6114] loop0: detected capacity change from 0 to 1024 [ 95.591329][ T6148] netlink: 'syz.0.102': attribute type 39 has an invalid length. [ 95.726991][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.906958][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 95.915149][ T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 95.925078][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.939181][ T27] usb 2-1: config 0 descriptor?? [ 96.047369][ T5833] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.174956][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.194734][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.212436][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.221316][ T27] usb 2-1: media controller created [ 96.243472][ T5833] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.267482][ T5833] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.286263][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.295028][ T5833] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 96.309660][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.344060][ T5833] usb-storage 1-1:1.0: USB Mass Storage device detected [ 96.398104][ T27] az6027: usb out operation failed. (-71) [ 96.410521][ T27] az6027: usb out operation failed. (-71) [ 96.418380][ T27] stb0899_attach: Driver disabled by Kconfig [ 96.424801][ T27] az6027: no front-end attached [ 96.424801][ T27] [ 96.437692][ T27] az6027: usb out operation failed. (-71) [ 96.447217][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 96.477715][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 96.513655][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 96.540274][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 96.562149][ T27] usb 2-1: USB disconnect, device number 2 [ 96.637210][ T6167] loop2: detected capacity change from 0 to 8 [ 96.858156][ T5833] usb-storage: probe of 1-1:1.0 failed with error -5 [ 96.879302][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 96.902722][ T5833] usb 1-1: USB disconnect, device number 4 [ 97.009991][ T6175] loop2: detected capacity change from 0 to 128 [ 97.095425][ T28] audit: type=1800 audit(1791574615.052:7): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.113" name="bus" dev="loop2" ino=1048622 res=0 errno=0 [ 97.491671][ T6191] netlink: 'syz.0.121': attribute type 3 has an invalid length. [ 97.510575][ T6191] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.655766][ T6193] loop3: detected capacity change from 0 to 4096 [ 97.694722][ T6193] NILFS (loop3): invalid segment: Checksum error in segment payload [ 97.702964][ T6193] NILFS (loop3): trying rollback from an earlier position [ 97.720165][ T6197] loop0: detected capacity change from 0 to 16 [ 97.740874][ T6197] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 97.756910][ T6193] NILFS (loop3): recovery complete [ 97.807510][ T6200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.940095][ T6193] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 4096 [ 97.984473][ T6193] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=12) [ 98.040695][ T6193] Remounting filesystem read-only [ 98.045852][ T6193] NILFS (loop3): error -5 cleaning segments [ 98.097089][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.205923][ T6205] loop1: detected capacity change from 0 to 512 [ 98.263669][ T6205] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.127: invalid block [ 98.288949][ T6205] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.127: Invalid block bitmap block 0 in block_group 0 [ 98.298956][ T8] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.310175][ T6205] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 98.324862][ T6205] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.127: attempt to clear invalid blocks 983261 len 1 [ 98.325738][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.347258][ T6205] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.127: invalid indirect mapped block 2683928664 (level 0) [ 98.365778][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.375136][ T8] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.379153][ T6205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.127: Invalid inode table block 0 in block_group 0 [ 98.383452][ T8] usb 3-1: Product: syz [ 98.400516][ T8] usb 3-1: Manufacturer: syz [ 98.405512][ T8] usb 3-1: SerialNumber: syz [ 98.407542][ T6193] NILFS (loop3): error -30 cleaning segments [ 98.415048][ T8] usb 3-1: config 0 descriptor?? [ 98.431208][ T8] usb 3-1: selecting invalid altsetting 0 [ 98.437924][ T6205] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 98.474464][ T6205] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 98.485777][ T6203] loop0: detected capacity change from 0 to 32768 [ 98.502761][ T6205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.127: Invalid inode table block 0 in block_group 0 [ 98.518427][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 98.525385][ T6205] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 98.545166][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 98.552587][ T6205] EXT4-fs error (device loop1): ext4_truncate:4314: inode #13: comm syz.1.127: mark_inode_dirty error [ 98.570916][ T6205] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 98.574635][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 98.595874][ T6205] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz.1.127: Invalid inode table block 0 in block_group 0 [ 98.609439][ T6203] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.653493][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.671066][ T6205] EXT4-fs (loop1): 1 truncate cleaned up [ 98.687115][ T6203] (syz.0.126,6203,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 98.695017][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.733731][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.775020][ T5833] usb 3-1: USB disconnect, device number 2 [ 98.777831][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.812299][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 98.834650][ T5776] NILFS (loop3): discard dirty block: blocknr=5, size=1024 [ 98.855208][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 98.862117][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.908694][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.932805][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 98.957104][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 98.966924][ T5776] NILFS (loop3): discard dirty block: blocknr=6, size=1024 [ 98.984881][ T5776] NILFS (loop3): discard dirty block: blocknr=7, size=1024 [ 98.995638][ T5776] NILFS (loop3): discard dirty block: blocknr=8, size=1024 [ 99.011770][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.029464][ T5776] NILFS (loop3): discard dirty block: blocknr=9, size=1024 [ 99.051669][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 99.067144][ T5776] NILFS (loop3): discard dirty block: blocknr=11, size=1024 [ 99.084665][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.109085][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.137529][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.151643][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 99.172054][ T5776] NILFS (loop3): discard dirty block: blocknr=12, size=1024 [ 99.184196][ T5776] NILFS (loop3): discard dirty block: blocknr=13, size=1024 [ 99.199195][ T5776] NILFS (loop3): discard dirty block: blocknr=14, size=1024 [ 99.216927][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 99.545739][ T6227] warning: `syz.2.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.570836][ T6224] loop1: detected capacity change from 0 to 4096 [ 99.614562][ T6224] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 99.729134][ T6224] ntfs3: loop1: ino=19, mi_enum_attr [ 99.735324][ T6224] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 99.793005][ T6224] ntfs3: loop1: ino=19, mi_enum_attr [ 99.813925][ T6224] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 100.257045][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.462297][ T5833] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 100.480098][ T5833] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.506943][ T5833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.524853][ T5833] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 100.544125][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.566512][ T6235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.567277][ T5831] IPVS: starting estimator thread 0... [ 100.595303][ T6235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.628137][ T5833] pl2303 3-1:1.0: pl2303 converter detected [ 100.648457][ T5833] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 100.677300][ T6252] IPVS: using max 20 ests per chain, 48000 per kthread [ 100.744535][ T6239] loop0: detected capacity change from 0 to 40427 [ 100.776462][ T6239] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.794841][ T6239] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.810111][ T6239] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 100.850989][ T6239] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.983948][ T6247] loop1: detected capacity change from 0 to 32768 [ 100.990645][ T6239] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.007237][ T6239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.038593][ T6235] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 101.074133][ T6235] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 101.094978][ T6235] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 101.096640][ T28] audit: type=1800 audit(1791574619.042:8): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 101.121305][ T6235] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 101.160021][ T6235] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 101.180062][ T28] audit: type=1800 audit(1791574619.052:9): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.145" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 101.627918][ T6234] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 101.649782][ T6234] pl2303 ttyUSB0: error sending break = -32 [ 101.667990][ T5833] usb 3-1: USB disconnect, device number 3 [ 101.718848][ T5833] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 101.747667][ T5833] pl2303 3-1:1.0: device disconnected [ 101.765312][ T6262] loop1: detected capacity change from 0 to 8192 [ 101.822939][ T6262] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.846595][ T6262] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 101.857366][ T6262] REISERFS (device loop1): using ordered data mode [ 101.863950][ T6262] reiserfs: using flush barriers [ 101.871740][ T6262] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.925812][ T6262] REISERFS (device loop1): checking transaction log (loop1) [ 101.996232][ T6262] REISERFS (device loop1): Using rupasov hash to sort names [ 102.009790][ T6262] REISERFS (device loop1): using 3.5.x disk format [ 102.027574][ T6262] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.051065][ T6262] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.077774][ T6262] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.107041][ T6262] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 102.135416][ T6262] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 102.222104][ T6262] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.234438][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.236635][ T5833] IPVS: starting estimator thread 0... [ 102.255219][ T6262] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.349445][ T6275] loop0: detected capacity change from 0 to 1024 [ 102.357138][ T6273] IPVS: using max 20 ests per chain, 48000 per kthread [ 102.454016][ T5831] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 102.463482][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.494749][ T5831] usb 4-1: Product: syz [ 102.503545][ T5831] usb 4-1: Manufacturer: syz [ 102.508642][ T5831] usb 4-1: SerialNumber: syz [ 102.535176][ T28] audit: type=1800 audit(1791574620.492:10): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 102.795188][ T6284] loop1: detected capacity change from 0 to 64 [ 102.946226][ T6288] nfsd: exp_rootfh path not found ainx\ [ 103.183991][ T5831] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 103.444182][ T5831] usb 4-1: USB disconnect, device number 3 [ 103.620175][ T6286] loop0: detected capacity change from 0 to 32768 [ 103.711444][ T28] audit: type=1800 audit(1791574621.672:11): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.159" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 103.715265][ T6286] ERROR: (device loop0): diWrite: ixpxd invalid [ 103.715265][ T6286] [ 103.769909][ T6286] ERROR: (device loop0): remounting filesystem as read-only [ 103.790869][ T6286] ERROR: (device loop0): txCommit: [ 103.790869][ T6286] [ 103.836177][ T6308] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 104.205712][ T6321] loop3: detected capacity change from 0 to 64 [ 104.404694][ T6298] loop2: detected capacity change from 0 to 32768 [ 104.409931][ T6328] vivid-002: disconnect [ 104.447804][ T6298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.165 (6298) [ 104.459156][ T6326] vivid-002: reconnect [ 104.567276][ T6298] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.601564][ T6298] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 104.612010][ T6298] BTRFS info (device loop2): using free space tree [ 104.758001][ T6298] BTRFS info (device loop2): enabling ssd optimizations [ 104.782587][ T6298] BTRFS info (device loop2): auto enabling async discard [ 104.857035][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.054730][ T5769] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.082079][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.127958][ T27] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 105.178021][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.218853][ T27] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 105.268928][ T27] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 105.500747][ T27] usb 1-1: USB disconnect, device number 5 [ 105.511366][ T5761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5761) [ 105.534337][ T27] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 105.561136][ T27] metro_usb 1-1:1.0: device disconnected [ 106.049955][ T6384] kAFS: bad VL server IP address [ 106.253373][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 106.434684][ T6400] loop2: detected capacity change from 0 to 2048 [ 106.475822][ T6400] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 106.509857][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.534922][ T6405] loop0: detected capacity change from 0 to 128 [ 106.578404][ T6405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 106.629959][ T6407] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 106.681198][ T6407] bond1 (unregistering): Released all slaves [ 106.738192][ T6405] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 107.011473][ T6417] process 'syz.1.200' launched './file2' with NULL argv: empty string added [ 107.174714][ T6428] loop1: detected capacity change from 0 to 1024 [ 107.310562][ T6434] loop2: detected capacity change from 0 to 8 [ 107.389061][ T6434] SQUASHFS error: Unable to read directory block [629:fe] [ 107.895820][ T6441] loop1: detected capacity change from 0 to 32768 [ 108.431637][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 108.447654][ T5777] CPU: 1 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 108.455270][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.465370][ T5777] Workqueue: hci3 hci_rx_work [ 108.470121][ T5777] Call Trace: [ 108.473428][ T5777] [ 108.476379][ T5777] dump_stack_lvl+0x18c/0x250 [ 108.481118][ T5777] ? show_regs_print_info+0x20/0x20 [ 108.486326][ T5777] ? load_image+0x420/0x420 [ 108.490939][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 108.496056][ T5777] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.501086][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 108.505770][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 108.510989][ T5777] kobject_add_internal+0x617/0xc90 [ 108.516296][ T5777] kobject_add+0x164/0x240 [ 108.520728][ T5777] ? kobject_init+0x1d0/0x1d0 [ 108.525413][ T5777] ? get_device_parent+0x366/0x390 [ 108.530539][ T5777] device_add+0x3fa/0xc40 [ 108.534877][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 108.539822][ T5777] le_conn_complete_evt+0xe9a/0x1480 [ 108.545211][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 108.551469][ T5777] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 108.557132][ T5777] ? mutex_unlock+0x10/0x10 [ 108.561642][ T5777] ? skb_pull_data+0xf0/0x1f0 [ 108.566419][ T5777] hci_le_conn_complete_evt+0x187/0x440 [ 108.571982][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 108.578059][ T5777] hci_event_packet+0x7b4/0x1280 [ 108.583005][ T5777] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.588119][ T5777] ? lock_chain_count+0x20/0x20 [ 108.592975][ T5777] ? bis_list+0x290/0x290 [ 108.597314][ T5777] ? kcov_remote_start+0x513/0x810 [ 108.602430][ T5777] ? lockdep_hardirqs_on+0x98/0x150 [ 108.607661][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 108.612867][ T5777] hci_rx_work+0x43a/0xd60 [ 108.617299][ T5777] ? process_scheduled_works+0x975/0x1600 [ 108.623028][ T5777] process_scheduled_works+0xa60/0x1600 [ 108.628598][ T5777] ? worker_attach_to_pool+0x370/0x370 [ 108.634067][ T5777] ? assign_work+0x3cc/0x5d0 [ 108.638665][ T5777] worker_thread+0xa5e/0xfe0 [ 108.643284][ T5777] kthread+0x2fa/0x390 [ 108.647381][ T5777] ? pr_cont_work+0x550/0x550 [ 108.652074][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 108.656670][ T5777] ret_from_fork+0x48/0x80 [ 108.661097][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 108.666049][ T5777] ret_from_fork_asm+0x11/0x20 [ 108.670839][ T5777] [ 108.678811][ T5777] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.695613][ T5777] Bluetooth: hci3: failed to register connection device [ 108.704786][ T5777] Bluetooth: hci3: command tx timeout [ 109.111250][ T6478] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 109.143173][ T6482] netlink: 'syz.2.225': attribute type 30 has an invalid length. [ 109.237075][ T6482] bond1: option arp_missed_max: invalid value (0) [ 109.243677][ T6482] bond1: option arp_missed_max: allowed values 1 - 255 [ 109.263977][ T6482] bond1 (unregistering): Released all slaves [ 109.358768][ T6487] dvmrp8: entered allmulticast mode [ 109.561649][ T6498] loop1: detected capacity change from 0 to 1024 [ 109.644069][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.672963][ T6498] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.709500][ T4299] Bluetooth: hci4: Frame reassembly failed (-84) [ 109.770842][ T6506] netlink: 'syz.2.235': attribute type 25 has an invalid length. [ 109.787111][ T6506] netlink: 'syz.2.235': attribute type 28 has an invalid length. [ 109.800578][ T49] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 109.832382][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 109.835876][ T6508] loop3: detected capacity change from 0 to 1024 [ 109.862340][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.862340][ T49] [ 109.877039][ T49] EXT4-fs (loop1): Total free blocks count 0 [ 109.883987][ T49] EXT4-fs (loop1): Free/Dirty block details [ 109.891874][ T49] EXT4-fs (loop1): free_blocks=0 [ 109.897293][ T49] EXT4-fs (loop1): dirty_blocks=16 [ 109.909942][ T49] EXT4-fs (loop1): Block reservation details [ 109.925790][ T49] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 109.949127][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.998173][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.058951][ T3913] hfsplus: bad catalog file entry [ 110.088893][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.096149][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.271022][ T6518] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.287317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.710821][ T6514] loop3: detected capacity change from 0 to 40427 [ 110.731564][ T6514] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 110.747185][ T6514] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 110.764923][ T6514] F2FS-fs (loop3): invalid crc value [ 110.874544][ T6514] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 110.883945][ T6514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.955121][ T6514] syz.3.239: attempt to access beyond end of device [ 110.955121][ T6514] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 110.989993][ T5776] syz-executor: attempt to access beyond end of device [ 110.989993][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.006585][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 111.446101][ T6553] loop2: detected capacity change from 0 to 1024 [ 111.490556][ T6553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.514854][ T6557] capability: warning: `syz.3.255' uses deprecated v2 capabilities in a way that may be insecure [ 111.518835][ T6553] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 111.556707][ T6553] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.588335][ T6553] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.254: inode #1: comm syz.2.254: iget: illegal inode # [ 111.593093][ T6559] loop1: detected capacity change from 0 to 16 [ 111.623408][ T6553] EXT4-fs (loop2): no journal found [ 111.636338][ T6553] EXT4-fs (loop2): can't get journal size [ 111.657302][ T6553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e118, mo2=0002] [ 111.665855][ T6553] EXT4-fs (loop2): failed to initialize system zone (-22) [ 111.687213][ T6553] EXT4-fs (loop2): mount failed [ 111.727016][ T5086] Bluetooth: hci4: command 0x1003 tx timeout [ 111.734791][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.191528][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 112.354367][ T6590] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 112.377317][ T6590] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 112.391027][ T6590] page_type: 0xffffffff() [ 112.395516][ T6590] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 112.410462][ T6590] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 112.422630][ T6590] page dumped because: unmovable page [ 112.440757][ T6590] page_owner info is not present (never set?) [ 112.733229][ T6596] program syz.1.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.046279][ T6602] loop3: detected capacity change from 0 to 256 [ 113.160184][ T28] audit: type=1800 audit(1791574631.122:12): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.275" name="file1" dev="loop3" ino=1048626 res=0 errno=0 [ 113.169923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.398051][ T6607] loop2: detected capacity change from 0 to 2048 [ 113.447059][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.473254][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.527827][ T6607] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.584656][ T56] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 56 comm: kworker/0:2) [ 113.606445][ T28] audit: type=1800 audit(1791574631.562:13): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.277" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 113.665481][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.677068][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 113.687868][ T5772] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.695953][ T5772] usb 2-1: config 0 has no interface number 0 [ 113.745652][ T5772] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.761229][ T5772] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.773981][ T5772] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 113.793841][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.814106][ T6626] loop9: detected capacity change from 0 to 255852544 [ 113.830145][ T5772] usb 2-1: config 0 descriptor?? [ 114.067868][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.267206][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 114.276919][ T789] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.282683][ T8] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 114.298864][ T8] usb 1-1: config 0 has no interface number 0 [ 114.305127][ T8] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 114.327136][ T8] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.343533][ T8] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.353605][ T8] usb 1-1: config 0 interface 196 has no altsetting 0 [ 114.369267][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 114.379156][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.395874][ T8] usb 1-1: Product: syz [ 114.401877][ T8] usb 1-1: Manufacturer: syz [ 114.406546][ T8] usb 1-1: SerialNumber: syz [ 114.421233][ T8] usb 1-1: config 0 descriptor?? [ 114.427328][ T6625] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 114.460457][ T5772] uclogic 0003:28BD:0094.0002: pen parameters not found [ 114.468752][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.473542][ T5772] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 114.491776][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.499796][ T5772] usb 2-1: USB disconnect, device number 3 [ 114.508245][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.524647][ T789] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 114.546946][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.560449][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 114.575438][ T789] usb 3-1: Product: syz [ 114.583210][ T6644] netlink: 56 bytes leftover after parsing attributes in process `syz.3.292'. [ 114.585571][ T789] usb 3-1: Manufacturer: syz [ 114.593892][ T6644] tipc: Failed to obtain node identity [ 114.613791][ T6644] tipc: Enabling of bearer rejected, failed to enable media [ 114.615269][ T789] usb 3-1: SerialNumber: syz [ 114.626034][ T6646] syz.3.292: attempt to access beyond end of device [ 114.626034][ T6646] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.659156][ T6646] exFAT-fs (loop3): unable to read boot sector [ 114.665482][ T6646] exFAT-fs (loop3): failed to read boot sector [ 114.673757][ T6646] exFAT-fs (loop3): failed to recognize exfat type [ 115.064287][ T8] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 115.081760][ T8] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 115.102326][ T8] usb 1-1: USB disconnect, device number 6 [ 115.168886][ T8] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 115.210645][ T6650] loop1: detected capacity change from 0 to 1024 [ 115.306606][ T6650] hfsplus: xattr searching failed [ 115.325652][ T6650] hfsplus: xattr searching failed [ 115.356137][ T789] usb 3-1: USB disconnect, device number 4 [ 115.358000][ T6650] hfsplus: xattr searching failed [ 115.362111][ C1] usb 3-1: comm data receiver aborted. [ 115.490682][ T6650] hfsplus: b-tree write err: -5, ino 3 [ 115.506629][ T6655] udevd[6655]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.603491][ T49] hfsplus: bad catalog file entry [ 116.007186][ T6673] 9p: Unknown access argument 18446744073709551615: -34 [ 116.053522][ T6671] mt6360: probe of 0-0034 failed with error -5 [ 116.071594][ T6671] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 116.377100][ T5831] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 116.546515][ T6695] loop1: detected capacity change from 0 to 1024 [ 116.560770][ T6695] EXT4-fs: Ignoring removed orlov option [ 116.574297][ T5831] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 116.592402][ T5831] usb 1-1: config 0 has no interface number 0 [ 116.613264][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.632520][ T5831] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.652302][ T5831] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 116.670620][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 116.702787][ T5831] usb 1-1: Manufacturer: syz [ 116.708163][ T5831] usb 1-1: SerialNumber: syz [ 116.720316][ T5831] usb 1-1: config 0 descriptor?? [ 116.806508][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.847207][ T5777] Bluetooth: hci3: command tx timeout [ 116.973481][ T6706] loop1: detected capacity change from 0 to 2048 [ 117.048769][ T6706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.136317][ T6712] loop3: detected capacity change from 0 to 256 [ 117.256606][ T6712] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 117.290318][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.353169][ T5831] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input11 [ 117.622033][ T5831] usb 1-1: USB disconnect, device number 7 [ 118.321113][ T6730] loop3: detected capacity change from 0 to 8192 [ 118.368530][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 118.384997][ T6730] loop3: p1 p2 p4[EZD] [ 118.436267][ T6742] Zero length message leads to an empty skb [ 118.457637][ T6730] loop3: p4 start 201326592 is beyond EOD, truncated [ 118.546765][ T789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.709893][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 118.723232][ T6210] udevd[6210]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 118.749984][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.775058][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.823191][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.843965][ T789] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.862038][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.887137][ T789] usb 1-1: config 0 descriptor?? [ 118.961204][ T28] audit: type=1400 audit(1791574636.922:14): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6755 comm="syz.3.338" [ 119.134762][ T6762] loop3: detected capacity change from 0 to 8192 [ 119.152266][ T6762] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.177087][ T6762] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 119.186418][ T6762] REISERFS (device loop3): using ordered data mode [ 119.194777][ T6762] reiserfs: using flush barriers [ 119.203140][ T6762] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.220277][ T6762] REISERFS (device loop3): checking transaction log (loop3) [ 119.247624][ T6762] REISERFS (device loop3): Using r5 hash to sort names [ 119.254965][ T6762] REISERFS (device loop3): using 3.5.x disk format [ 119.263099][ T6762] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.319583][ T789] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 119.357348][ T789] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.533256][ T6767] block2mtd: error: cannot open device #! ./sys [ 119.563587][ T5772] usb 1-1: USB disconnect, device number 8 [ 119.625582][ T6769] loop3: detected capacity change from 0 to 8 [ 120.233195][ T6777] loop1: detected capacity change from 0 to 32768 [ 120.269531][ T6777] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 120.416275][ T6210] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 120.725966][ T6802] loop2: detected capacity change from 0 to 4096 [ 120.890785][ T6810] loop1: detected capacity change from 0 to 256 [ 121.009538][ T6802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.042327][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.022174][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029155][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.169331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.450710][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461280][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.647952][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 201.654247][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.660317][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 209.815045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.886974][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 255.893259][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.902945][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.287049][ T29] INFO: task jbd2/sda1-8:5102 blocked for more than 143 seconds. [ 278.294856][ T29] Not tainted syzkaller #0 [ 278.299885][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.308632][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5102 ppid:2 flags:0x00004000 [ 278.317965][ T29] Call Trace: [ 278.321621][ T29] [ 278.324578][ T29] __schedule+0x15ae/0x4660 [ 278.329286][ T29] ? asan.module_dtor+0x20/0x20 [ 278.334209][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.342514][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 278.349602][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 278.354858][ T29] schedule+0xbd/0x170 [ 278.359947][ T29] io_schedule+0x80/0xd0 [ 278.364251][ T29] bit_wait_io+0x11/0xd0 [ 278.368655][ T29] __wait_on_bit+0x9f/0x2c0 [ 278.373459][ T29] ? bit_wait+0xd0/0xd0 [ 278.377815][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 278.383336][ T29] ? bit_wait+0xd0/0xd0 [ 278.391543][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 278.396346][ T29] ? do_raw_write_lock+0x11e/0x260 [ 278.402602][ T29] ? bit_waitqueue+0x30/0x30 [ 278.410462][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 278.415658][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 278.424304][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 278.431359][ T29] ? lock_chain_count+0x20/0x20 [ 278.436266][ T29] ? _raw_spin_unlock+0x40/0x40 [ 278.441254][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 278.447168][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 278.452485][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.457571][ T29] ? timer_delete_sync+0x20/0x20 [ 278.462532][ T29] ? do_raw_read_unlock+0x80/0x80 [ 278.467691][ T29] ? prepare_to_wait+0x1aa/0x200 [ 278.472659][ T29] kjournald2+0x40f/0x810 [ 278.477238][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 278.482736][ T29] ? wake_bit_function+0x200/0x200 [ 278.487927][ T29] ? _raw_spin_unlock+0x40/0x40 [ 278.492813][ T29] ? __kthread_parkme+0x71/0x1c0 [ 278.502441][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 278.507555][ T29] kthread+0x2fa/0x390 [ 278.511649][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 278.521314][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.527709][ T29] ret_from_fork+0x48/0x80 [ 278.532190][ T29] ? kthread_blkcg+0xd0/0xd0 [ 278.536772][ T29] ret_from_fork_asm+0x11/0x20 [ 278.541719][ T29] [ 278.544783][ T29] INFO: task syz.2.357:6799 blocked for more than 143 seconds. [ 278.552379][ T29] Not tainted syzkaller #0 [ 278.557368][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.566072][ T29] task:syz.2.357 state:D stack:27048 pid:6799 ppid:5769 flags:0x00004004 [ 278.575350][ T29] Call Trace: [ 278.578678][ T29] [ 278.581631][ T29] __schedule+0x15ae/0x4660 [ 278.586167][ T29] ? mark_lock+0x94/0x320 [ 278.590582][ T29] ? asan.module_dtor+0x20/0x20 [ 278.595454][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.600666][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 278.606579][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 278.612038][ T29] schedule+0xbd/0x170 [ 278.616215][ T29] io_schedule+0x80/0xd0 [ 278.620553][ T29] bit_wait_io+0x11/0xd0 [ 278.624814][ T29] __wait_on_bit+0x9f/0x2c0 [ 278.630092][ T29] ? bit_wait+0xd0/0xd0 [ 278.634262][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 278.639779][ T29] ? bit_wait+0xd0/0xd0 [ 278.643942][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 278.648944][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 278.653989][ T29] ? bit_waitqueue+0x30/0x30 [ 278.658649][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 278.663888][ T29] do_get_write_access+0x5c9/0xe00 [ 278.669061][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 278.675056][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 278.681282][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 278.687517][ T29] ? __might_sleep+0xe0/0xe0 [ 278.692131][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 278.697761][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 278.703330][ T29] ext4_dirty_inode+0xcb/0x110 [ 278.708155][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 278.713991][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 278.719238][ T29] file_update_time+0x187/0x1a0 [ 278.724136][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 278.729227][ T29] ? filemap_fault+0x103c/0x1540 [ 278.734608][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 278.740419][ T29] ? pte_alloc_one+0x3b6/0x540 [ 278.745181][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 278.751559][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.756600][ T29] do_page_mkwrite+0x153/0x3f0 [ 278.761433][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 278.766411][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 278.771503][ T29] ? numa_migrate_prep+0x350/0x350 [ 278.776945][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 278.782305][ T29] do_user_addr_fault+0x736/0x12d0 [ 278.787504][ T29] exc_page_fault+0x64/0x100 [ 278.792152][ T29] asm_exc_page_fault+0x26/0x30 [ 278.797074][ T29] RIP: 0033:0x7f7d7d072889 [ 278.801524][ T29] RSP: 002b:00007ffd34f7aeb0 EFLAGS: 00010202 [ 278.807645][ T29] RAX: 0000001b2d824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 278.815647][ T29] RDX: 0000001b2d823ffc RSI: 00000000005ffde8 RDI: 00007f7d7df55700 [ 278.823676][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f7d7d412000 [ 278.832102][ T29] R10: 00007f7d7df55700 R11: 0000000000000000 R12: 0000000000000000 [ 278.840595][ T29] R13: 000000000002c486 R14: ffffffff81322060 R15: 00007f7d7df55720 [ 278.849109][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 278.855233][ T29] [ 278.858327][ T29] INFO: task syz.0.358:6800 blocked for more than 143 seconds. [ 278.865906][ T29] Not tainted syzkaller #0 [ 278.870878][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.879589][ T29] task:syz.0.358 state:D stack:27048 pid:6800 ppid:5768 flags:0x00004004 [ 278.888873][ T29] Call Trace: [ 278.892183][ T29] [ 278.895113][ T29] __schedule+0x15ae/0x4660 [ 278.899693][ T29] ? mark_lock+0x94/0x320 [ 278.904044][ T29] ? asan.module_dtor+0x20/0x20 [ 278.908981][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 278.914045][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 278.920015][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 278.925232][ T29] schedule+0xbd/0x170 [ 278.929428][ T29] io_schedule+0x80/0xd0 [ 278.933895][ T29] bit_wait_io+0x11/0xd0 [ 278.938781][ T29] __wait_on_bit+0x9f/0x2c0 [ 278.943309][ T29] ? bit_wait+0xd0/0xd0 [ 278.947658][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 278.953126][ T29] ? bit_wait+0xd0/0xd0 [ 278.957370][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 278.962140][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 278.967240][ T29] ? bit_waitqueue+0x30/0x30 [ 278.971869][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 278.977152][ T29] do_get_write_access+0x5c9/0xe00 [ 278.982331][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 278.988408][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 278.994591][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.001087][ T29] ? __might_sleep+0xe0/0xe0 [ 279.005788][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 279.011519][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 279.017099][ T29] ext4_dirty_inode+0xcb/0x110 [ 279.021878][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 279.027730][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 279.032810][ T29] file_update_time+0x187/0x1a0 [ 279.038110][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 279.043158][ T29] ? filemap_fault+0x103c/0x1540 [ 279.048408][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 279.054152][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 279.060441][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.065508][ T29] ? __pte_offset_map+0x20d/0x280 [ 279.070695][ T29] do_page_mkwrite+0x153/0x3f0 [ 279.075480][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 279.080514][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 279.085644][ T29] ? numa_migrate_prep+0x350/0x350 [ 279.091051][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 279.096371][ T29] do_user_addr_fault+0x736/0x12d0 [ 279.101602][ T29] exc_page_fault+0x64/0x100 [ 279.106238][ T29] asm_exc_page_fault+0x26/0x30 [ 279.111181][ T29] RIP: 0033:0x7f5dae872829 [ 279.115686][ T29] RSP: 002b:00007fff31ae1220 EFLAGS: 00010202 [ 279.121876][ T29] RAX: 0000001b2d623000 RBX: ffffffff81c7e205 RCX: 0000001b2d622ff8 [ 279.129908][ T29] RDX: 0000001b2d02421c RSI: 0000000000000008 RDI: 00007f5daf755720 [ 279.137980][ T29] RBP: 00000000000001ee R08: 00007f5daec10000 R09: 00007f5daec12000 [ 279.146238][ T29] R10: 0000000081c7e209 R11: 0000000000000001 R12: 00007f5daec26038 [ 279.154367][ T29] R13: 0000000000000cdc R14: ffffffff81c7e91f R15: 00007f5daf755720 [ 279.162506][ T29] ? anon_vma_interval_tree_verify+0x1f/0x150 [ 279.168722][ T29] ? anon_vma_interval_tree_remove+0x915/0xa00 [ 279.174908][ T29] [ 279.177977][ T29] INFO: task syz.1.361:6809 blocked for more than 144 seconds. [ 279.185649][ T29] Not tainted syzkaller #0 [ 279.190648][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.199403][ T29] task:syz.1.361 state:D stack:27048 pid:6809 ppid:5770 flags:0x00004004 [ 279.208703][ T29] Call Trace: [ 279.211992][ T29] [ 279.214976][ T29] __schedule+0x15ae/0x4660 [ 279.219661][ T29] ? mark_lock+0x94/0x320 [ 279.224005][ T29] ? asan.module_dtor+0x20/0x20 [ 279.228949][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.234044][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 279.240004][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 279.245540][ T29] schedule+0xbd/0x170 [ 279.249913][ T29] io_schedule+0x80/0xd0 [ 279.254165][ T29] bit_wait_io+0x11/0xd0 [ 279.258599][ T29] __wait_on_bit+0x9f/0x2c0 [ 279.263197][ T29] ? bit_wait+0xd0/0xd0 [ 279.267611][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 279.273099][ T29] ? bit_wait+0xd0/0xd0 [ 279.277320][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 279.282123][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 279.287208][ T29] ? bit_waitqueue+0x30/0x30 [ 279.291816][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 279.297103][ T29] do_get_write_access+0x5c9/0xe00 [ 279.302245][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 279.308401][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 279.314605][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.320809][ T29] ? __might_sleep+0xe0/0xe0 [ 279.325417][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 279.331212][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 279.336701][ T29] ext4_dirty_inode+0xcb/0x110 [ 279.341557][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 279.348011][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 279.353082][ T29] file_update_time+0x187/0x1a0 [ 279.358015][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 279.363071][ T29] ? filemap_fault+0x103c/0x1540 [ 279.368104][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 279.373854][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 279.380375][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.385427][ T29] ? __pte_offset_map+0x20d/0x280 [ 279.390503][ T29] do_page_mkwrite+0x153/0x3f0 [ 279.395286][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 279.400329][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 279.405314][ T29] ? numa_migrate_prep+0x350/0x350 [ 279.410599][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 279.415928][ T29] do_user_addr_fault+0x736/0x12d0 [ 279.421117][ T29] exc_page_fault+0x64/0x100 [ 279.425726][ T29] ? clear_bhb_loop+0x40/0x90 [ 279.430489][ T29] asm_exc_page_fault+0x26/0x30 [ 279.435366][ T29] RIP: 0033:0x7f7f41672fb2 [ 279.439838][ T29] RSP: 002b:00007ffc283fd3d0 EFLAGS: 00010202 [ 279.445936][ T29] RAX: 0000000000005008 RBX: 00007f7f42555720 RCX: 0000000000000000 [ 279.454336][ T29] RDX: 0000001b2d71f000 RSI: 0000000000000008 RDI: 00007f7f42555720 [ 279.462391][ T29] RBP: 0000000000000489 R08: 00007f7f41a10000 R09: 00007f7f41a26038 [ 279.470443][ T29] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff83f08a37 [ 279.478501][ T29] R13: 00007f7f41a26038 R14: 0000000000000155 R15: ffffffffffffb000 [ 279.486513][ T29] ? tomoyo_check_path_acl+0x137/0x1c0 [ 279.492294][ T29] [ 279.495340][ T29] INFO: task syz.3.362:6811 blocked for more than 144 seconds. [ 279.503015][ T29] Not tainted syzkaller #0 [ 279.508030][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.516752][ T29] task:syz.3.362 state:D stack:27560 pid:6811 ppid:5776 flags:0x00004004 [ 279.526044][ T29] Call Trace: [ 279.529361][ T29] [ 279.532308][ T29] __schedule+0x15ae/0x4660 [ 279.536818][ T29] ? mark_lock+0x94/0x320 [ 279.541217][ T29] ? asan.module_dtor+0x20/0x20 [ 279.546084][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.551522][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 279.557492][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 279.562710][ T29] schedule+0xbd/0x170 [ 279.566801][ T29] io_schedule+0x80/0xd0 [ 279.571191][ T29] bit_wait_io+0x11/0xd0 [ 279.575532][ T29] __wait_on_bit+0x9f/0x2c0 [ 279.580166][ T29] ? bit_wait+0xd0/0xd0 [ 279.584348][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 279.589901][ T29] ? bit_wait+0xd0/0xd0 [ 279.594079][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 279.599086][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 279.604141][ T29] ? bit_waitqueue+0x30/0x30 [ 279.608816][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 279.614064][ T29] do_get_write_access+0x5c9/0xe00 [ 279.619281][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 279.625287][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 279.631586][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 279.637828][ T29] ? __might_sleep+0xe0/0xe0 [ 279.642441][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 279.648229][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 279.653957][ T29] ext4_dirty_inode+0xcb/0x110 [ 279.658833][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 279.664733][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 279.669828][ T29] file_update_time+0x187/0x1a0 [ 279.674694][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 279.679783][ T29] ? filemap_fault+0x103c/0x1540 [ 279.684772][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 279.690554][ T29] ? pte_alloc_one+0x3b6/0x540 [ 279.695338][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 279.701684][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 279.706726][ T29] do_page_mkwrite+0x153/0x3f0 [ 279.711700][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 279.716684][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 279.721691][ T29] ? numa_migrate_prep+0x350/0x350 [ 279.726913][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 279.732243][ T29] do_user_addr_fault+0x736/0x12d0 [ 279.737438][ T29] exc_page_fault+0x64/0x100 [ 279.742046][ T29] ? clear_bhb_loop+0x40/0x90 [ 279.746749][ T29] asm_exc_page_fault+0x26/0x30 [ 279.751665][ T29] RIP: 0033:0x7f6540c6bb23 [ 279.756470][ T29] RSP: 002b:00007fff5e84d670 EFLAGS: 00010246 [ 279.762702][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d364000 [ 279.770774][ T29] RDX: 0000001b2d324000 RSI: 0000000000600000 RDI: 00007f6540fe2708 [ 279.778835][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.786890][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 279.794879][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff5e84d900 [ 279.802965][ T29] [ 279.806100][ T29] [ 279.806100][ T29] Showing all locks held in the system: [ 279.813972][ T29] 1 lock held by khungtaskd/29: [ 279.819085][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 279.829099][ T29] 4 locks held by kworker/u4:10/4299: [ 279.834523][ T29] #0: ffff88801f253138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 279.845833][ T29] #1: ffffc9000e997d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 279.858592][ T29] #2: ffff88814e7d40e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 279.869357][ T29] #3: ffff88814e7d6c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 279.879899][ T29] 2 locks held by getty/5526: [ 279.884598][ T29] #0: ffff88803271a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.894455][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 279.904664][ T29] 3 locks held by syz-executor/5756: [ 279.910197][ T29] #0: ffff88807abbc420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 279.920259][ T29] #1: ffff88814e7d4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 279.930178][ T29] #2: ffff88814e7d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 279.939923][ T29] 3 locks held by syz.2.357/6799: [ 279.944953][ T29] #0: ffff88807fb96a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 279.954939][ T29] #1: ffff88814e7d4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 279.965001][ T29] #2: ffff88814e7d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 279.974799][ T29] 3 locks held by syz.0.358/6800: [ 279.979874][ T29] #0: ffff8880786e1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 279.989869][ T29] #1: ffff88814e7d4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 279.999692][ T29] #2: ffff88814e7d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 280.009439][ T29] 3 locks held by syz.1.361/6809: [ 280.014494][ T29] #0: ffff88807fb90b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 280.024554][ T29] #1: ffff88814e7d4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 280.034418][ T29] #2: ffff88814e7d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 280.044321][ T29] 3 locks held by syz.3.362/6811: [ 280.049561][ T29] #0: ffff88807ee6a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 280.059775][ T29] #1: ffff88814e7d4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 280.069995][ T29] #2: ffff88814e7d8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 280.079773][ T29] [ 280.082136][ T29] ============================================= [ 280.082136][ T29] [ 280.090624][ T29] NMI backtrace for cpu 0 [ 280.094981][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 280.102171][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.112396][ T29] Call Trace: [ 280.115668][ T29] [ 280.118724][ T29] dump_stack_lvl+0x18c/0x250 [ 280.123391][ T29] ? __wake_up_klogd+0xd9/0x100 [ 280.128255][ T29] ? show_regs_print_info+0x20/0x20 [ 280.133525][ T29] ? load_image+0x420/0x420 [ 280.138025][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 280.142958][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 280.149121][ T29] ? load_image+0x420/0x420 [ 280.153638][ T29] ? wq_watchdog_touch+0xef/0x170 [ 280.158742][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 280.164816][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 280.170811][ T29] watchdog+0xf59/0xfa0 [ 280.174964][ T29] ? watchdog+0x1e1/0xfa0 [ 280.179294][ T29] kthread+0x2fa/0x390 [ 280.183353][ T29] ? hungtask_pm_notify+0x50/0x50 [ 280.188370][ T29] ? kthread_blkcg+0xd0/0xd0 [ 280.192951][ T29] ret_from_fork+0x48/0x80 [ 280.197716][ T29] ? kthread_blkcg+0xd0/0xd0 [ 280.202311][ T29] ret_from_fork_asm+0x11/0x20 [ 280.207086][ T29] [ 280.210118][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.216628][ T29] Sending NMI from CPU 0 to CPUs 1: [ 280.221973][ C1] NMI backtrace for cpu 1 [ 280.221984][ C1] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 280.221999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.222007][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 280.222029][ C1] RIP: 0010:__schedule+0x1479/0x4660 [ 280.222048][ C1] Code: 06 00 00 41 c7 07 ff ff ff ff 4d 8d bc 24 84 15 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 4d 05 00 00 41 83 3f 00 <74> 6e 48 8b 44 24 78 42 80 3c 28 00 48 8b 5c 24 18 74 0a 48 8b 7c [ 280.222060][ C1] RSP: 0018:ffffc90000b9f880 EFLAGS: 00000046 [ 280.222071][ C1] RAX: 0000000000000000 RBX: ffff88801ca6c140 RCX: ffff88807e061300 [ 280.222081][ C1] RDX: ffff88801b28df48 RSI: ffff88801ca6bc00 RDI: ffff88801b28df48 [ 280.222093][ C1] RBP: ffffc90000b9fa90 R08: ffff88801b28ef77 R09: 1ffff11003651dee [ 280.222103][ C1] R10: dffffc0000000000 R11: ffffed1003651def R12: ffff88801ca6bc00 [ 280.222114][ C1] R13: dffffc0000000000 R14: ffff88801b28da00 R15: ffff88801ca6d184 [ 280.222124][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 280.222136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.222147][ C1] CR2: 000055f674db1168 CR3: 000000000dd32000 CR4: 00000000003506e0 [ 280.222160][ C1] Call Trace: [ 280.222166][ C1] [ 280.222172][ C1] ? trace_pelt_se_tp+0x39/0x100 [ 280.222204][ C1] ? asan.module_dtor+0x20/0x20 [ 280.222224][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 280.222245][ C1] ? preempt_schedule+0xc0/0xd0 [ 280.222261][ C1] preempt_schedule_common+0x82/0xc0 [ 280.222279][ C1] preempt_schedule+0xc0/0xd0 [ 280.222294][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 280.222309][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 280.222326][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 280.222342][ C1] ? lock_chain_count+0x20/0x20 [ 280.222359][ C1] preempt_schedule_thunk+0x1a/0x30 [ 280.222382][ C1] _raw_spin_unlock_irq+0x40/0x50 [ 280.222402][ C1] process_scheduled_works+0x8b1/0x1600 [ 280.222434][ C1] ? worker_attach_to_pool+0x370/0x370 [ 280.222461][ C1] ? assign_work+0x3cc/0x5d0 [ 280.222481][ C1] worker_thread+0xa5e/0xfe0 [ 280.222510][ C1] kthread+0x2fa/0x390 [ 280.222524][ C1] ? pr_cont_work+0x550/0x550 [ 280.222542][ C1] ? kthread_blkcg+0xd0/0xd0 [ 280.222556][ C1] ret_from_fork+0x48/0x80 [ 280.222573][ C1] ? kthread_blkcg+0xd0/0xd0 [ 280.222587][ C1] ret_from_fork_asm+0x11/0x20 [ 280.222612][ C1] [ 280.226541][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 280.473078][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 280.480280][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.490336][ T29] Call Trace: [ 280.493614][ T29] [ 280.496540][ T29] dump_stack_lvl+0x18c/0x250 [ 280.501227][ T29] ? show_regs_print_info+0x20/0x20 [ 280.506421][ T29] ? load_image+0x420/0x420 [ 280.510936][ T29] panic+0x2ca/0x720 [ 280.514840][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 280.519339][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 280.524888][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 280.530265][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 280.536451][ T29] watchdog+0xf98/0xfa0 [ 280.540621][ T29] ? watchdog+0x1e1/0xfa0 [ 280.544959][ T29] kthread+0x2fa/0x390 [ 280.549028][ T29] ? hungtask_pm_notify+0x50/0x50 [ 280.554053][ T29] ? kthread_blkcg+0xd0/0xd0 [ 280.558640][ T29] ret_from_fork+0x48/0x80 [ 280.563062][ T29] ? kthread_blkcg+0xd0/0xd0 [ 280.567651][ T29] ret_from_fork_asm+0x11/0x20 [ 280.572422][ T29] [ 280.575687][ T29] Kernel Offset: disabled [ 280.580013][ T29] Rebooting in 86400 seconds..