last executing test programs: 2m39.47623306s ago: executing program 1 (id=235): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0xfffffffe, 0x21dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 2m39.358196254s ago: executing program 1 (id=238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="83", 0x1}], 0x1) 2m39.247725358s ago: executing program 1 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="000086dd0001110004000000a60c68e6f300000000000000000000000000000001cfce31530175a04e21000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0xfce) 2m38.911735248s ago: executing program 1 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m38.821806301s ago: executing program 1 (id=248): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 2m38.363679006s ago: executing program 1 (id=251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000180)={0x20, 0xc, 0x2, "08ba"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x2, ')V'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m38.2307797s ago: executing program 32 (id=251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000180)={0x20, 0xc, 0x2, "08ba"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x2, ')V'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m37.010432329s ago: executing program 0 (id=268): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 2m35.021197742s ago: executing program 0 (id=286): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0xef, 0xf, 0xf}, 0x10) 2m34.10886527s ago: executing program 0 (id=289): syz_emit_ethernet(0x283, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6024d0000fc020000000000000000000000000000fe8000c20000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfd"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, &(0x7f00000000c0)=0x18) 2m33.350269204s ago: executing program 0 (id=295): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@dioread_lock}]}, 0x1, 0x45b, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m32.763227943s ago: executing program 0 (id=297): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x24481, 0x50) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff7, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4e, 0xffffffff9673e35d]}}) 2m32.202269911s ago: executing program 0 (id=302): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="80", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x5bb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="a9963e68", 0x4}], 0x1}}], 0x5, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) 2m32.004036657s ago: executing program 33 (id=302): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="80", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x5bb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="a9963e68", 0x4}], 0x1}}], 0x5, 0x2400c0a2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) 1m51.339624264s ago: executing program 6 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)=@vmx={0x1, 0x0, 0x2080, {0xdddd1000, 0x41000, {0x1}, 0x0, 0x1}, {"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", "6931c72dde2ef379c5404b84989addc0f359eafe2d5346d012312f550ed139d05baa7ce68eca6f4c4d675335cb8e708f54471d324b532fd2b223af6ffcce4d181178a6d0f1ca429e4aadd6134834b1aec8fbf6a15c5e8c720be233bdaffb9257c7ed11d4fd054ebb8febf5bd28a0fa0afdca5c2d0e07a79214346027a44561a4cb45d470d8250dcd593d2a7d80b2c6c73ab6da6767b6633181f4cf7ca14a8433fc4a323d16456fe4a83fa28da89be1a2d8b14712246e1a238b6fa83d3d56f36c8294e779d8e2cdbfb0567e853503d90d7663cfd7a5ff02dce3a61c1dba952ce340e80c140df78c2c1caf3c102f99c6312c8e4369e4b396a02411d2bec285a135ba3115b5e51b64c04c72f48480e8a55990503dc2a54fa07feeec7db3c5e0b2c611031abdba66e47850c73a368bc22ef06bd169640b7e33e148f3d2886c62686cecc69379b31eba18864101a85d3f70533492dda96591b606439caeb83ed6a71231aeea90caa14b9fb886d3e8dd8a6866186eba6078baba04744dd39727b7efdd6d56fa9a7e22fa26bee49b219b5f69700fb327fa8b2cb99ee39a3da87daa1f91f4f03c9560f9c5b5afd02948107374c66b2956223281b71b35a450b33edb8dfe84f7f62b36c1de8f44bef286d70421a32f881b8c8e2401324eb715ecf5b6e1d7b0f78976162cd55ef9716fc6dd27d8bf2dd8a9e11525f661111e2c83cdb5bd63e254a5a758a55951612c9aff2adba3d11c4e24a2a92020b551ed812844f6489e08ff252168f2fdbc5d93bf44a526904b0f34a699f4b6731a977cb461709970424c6d8056ff8266eaddea58d7c5878a4cc0ae03c38d6f5a5e29df791ce3ce59da84fcbfbbd8590b7b478e2046521c979b6c1bac18e411715ed1e8dbe1b9175bc3109555492ae806076cc7839e26974643258a8846edadf5ad4a6d5397efe8787be8b58419c5cdca044bb9ae85dd2e58e88cea9199f4ec6cd197e28ed844a3ca3cb37dfd5327803c47062b62795338e58ac9e0240432de53f2c4a5e697cb38a8ece804f9f3b19cf15a6f7935969ebc7e1b8e8b5ef12c7a5d5652c8ee1110625bd40a6015bf27850a9ea0b4abd41eaf5895142967c91673c9e4c10a69d8551e47256503c8fc8576e0d00bd072b72c1d04bf02d7d6cb206acfe16379b17adad109d1341c49b49080e28fc9d48ce3fa37cb9dd190d6640a95238afcafa91b5d66bd447dd564e8def230a6d11e63f9058828ea2ac1be650b78d8f967c541e52604e3a89f87d8677ec889c2260c1e67a3e807c6957af960c85ec94ffb3f4fef008e04330ab9043b64a8c67cee4c15b1d6603cad0dc65feaab7bd30da0fa71ec5c85418a97777b5c3a3f8c24576acb6c63ad09e2aa6edd760ee285b095dac38930421652e0c37aa2272d0412d75fc681f635a8b7a010ff84206b3ad5f4ad21b241be4d720bca20bfeaf12f0c267b11fe848429c7fe60834841dea14043f168e9b0acaddc8c0b559d8bf4020da3b39040dc76c177ae818f562186a92f8821bc686e0ef4b5b68b4dedf7f6c9c853d33f8fa1b29037aaddfd5fda87e2f4aef6585a99b79aaef176372f0a63e685b796aed3f60037d993a1780d09fea782935347a7ef4d2731e94fe327580935358c270ae60bb750f2dd4520cd1df2e2213eda6d8f01142b543315d1f8e32e48a639541714768bdac4e10d7d91abbe07f05b6868f880303ac0a9cd823743b7f61b9bc141c309f320ada6448f5f6eac9e5e0d334c8583be711a7700b7085e15eaf2771879e92177863bdd690968501cda4f7f2bf7b66a6fb0916d242ac451ea6f868ea232ffe19aa7d95c9d6415ab57c3c7efb45455a14ec1dc45fbb4aac87d26a76ba56abb22953676bdb00f887cdfe7c7b3894a5b798463aa7ba77541f213e019a8bdb75b24ec2a8340157c7967544c1b9042e450f1fd879a97bf9d24e4e42582a95acb7609f14dafd859404ea2d348a78f206e04f23e269ddd5b9efd84eacfb352060a73c4f40d2908c01a049227eb98af3ea1e4b81589840e27fab14e0082abf6cbbd67c6ccb2fce50a7adb8d07b84555e370747b34d0589a46f65b84db65d80ebf616d81a91a648268338eb01cb05ee0dda768c8ec9cbf357fab0e27f76ec46a2b9af06d8b85069471607f662764e532c707797825aa91f5e1a46e111698c99b94ddcd16a61dbe57cc0ed53f25f71080008e8f8422243e51d7fa9e55377b1a32ba20b802ab316c4b2272c28d4e2ebb822e2f9afe38e8173a385337b680f1bf277a0a4191213c04ba7a2b95ad2ce8d4c6ca70f81a725e354e61d4676b97617397a14069d51bc485fb1a08de038524687411437b23b7cdd9bb2ef7cb42a5f1eb5b20614b7ab4b6d41f6db2bf842e1957d50f6f7981b9aac4b556ad11fa5bef3e6ceecd4396494c33620c86d43930f531a14e26561f617aa3731d39843f748c70db03b76775b30d63f91254005a2b5df92c556651bba8da04b466908b97e5513d86eac3b32018de7a04564cc9000a19ad9ed8bb9c0599e0b91b656943aeafce9e3a49db7e0553ea8c9e72724f2d1806f431038d5efe5167c78bda04528c364093d1c2c49883a4d0cb82e036684bf395894e7e3fa47673c5a96c032bd0d87740a6d3fb1751128574c58044a0a35490cf70eb1e3075b141b3a928e43e7d7f1cb37777f9c95192c14cbbd3b27680bf2f5e5027ecf7e2b896f80981afc5d05c292d900edecd6511592d8a8acbb673aa2a6c9474a57cdacfde5e317b94aea4d36548c1158c6a9465ab3ceada32d0156646777f80503fbe411ee3e4f300306bb95eb39e8b6cc530486c1153fdb36bdb58871b1c914a07a9a59b50ebbf9710d9ea29dfb0ff37c82b45c9d1e3c4ce6a22b2827d017b27ce7bc8a99ceda1ff089bc983b60f795c3f8268b796c5c39640f64b67f42381abbe57b2d5ab84d395cdf62b93f114b392710e0819b6ea2fbf68b46e3d952070782b8c841f63054a2dee5e60b9b700b4e96fad2ffb7a591acc8391f83c5d726dda758f77bc1669a625b3b1b9ed5a6a04c8ec471bce000b7637ba7ea2772d347706884d74b7ff9d93ce51ccb73b49910b48a4fa8de902432cf372531f8ae4afbe3d79cc9ef97168c2dd026df49bea930e7fe70dfc0ce318aca7295bd1bb390e8c85858406c4e18a4cae9a3cadc7ba0f21c1ba15da05a4dffffbde33f0dec727b0cee8e8e71546cc81f47eae803973773cf295825d5b6f6f58715795070381b4bf6fb04ae5ef8d873a72e0657ea1c1e9f0486b65c415dcfff928d341ccbeb4585d9fb35fe3e35b09e3fd1a806bd7d7d0273812340ac039a49727952822888c1d6a1ae42db7e31d6a50bf4aff99c07b1b0a342b4ba56399685c97f6ef69796656d87085744710b495be84103141c7db98bc49597ae26149b4db1975e0cac0e18b6e9227ea9883968ce57b8946b5e20bfef63c9e0bf24482817dca369cbf4dc4980f4bec1b6e53936e4657c44aca5f31b7abd68f8b5112bff2ac638156fec40bd5b23ff4984fb0b60cfdeb25a9788432b10855d7fb18a472abd20f258ec5cc3a5c1e6ed6067d34f94214a0d098386828d9edcee81db8cd6561bb8deb0307162afa50c596412a0315f621da67b90b8846acf521413a2f07ac83a8f9cfff2a938ca07f5d3fc523cffbcbf53658bc4ed9720786f4681a2fe2b7cf5aabf83ca8007f5202398c5433452af689c6e238bbe2fc8217c1f643d9b0f4f542513b676432bf731f89e0b218f2ee2cddd6782cff7b5b9835eb5d437aa00b4f8ee61c4aa910a073bbd4941ee0a02f044e6dc54b4d2ff8844a037c7721c9222b554accae6c289655774d79817ff91c17e8adae3bc9e9bd8727d29f9221650648677b66185f153a43582e0f9d9e8610674fbb2c43b76ac821a5b8aab791a34bce45f012838e8fe794b59d242aa012325bae153c190018ebc541ce2c137f49d3f3b37c63ae9a9c5cc3c381dc6804c6ca7145d439932d63e7e5345f511cc6af0adad7ac26165347350e66044203f444e1b22787f9cbde5d846b67a70d0ead0bb71112c2b84d3afc5aac7bfe315aafb240133fca046a933d0883d3b7f8fb047d2a1a831001551921609e4301b13fae3e7509d1414a643ba5fe7e2777e7806577d6d287e6b975467fe6336f05139655aeabcc88327d44dfd2332900d83fae030d581221b8be85954dc9b8ff650eb0a26d6e86c5bea664a55c9210bcce25e907f4402dcc7e6b324cfa2a8462c08ee8ec9b4867911c57808d40dffb24e49da1c4891e93fddba0a8cdfe1fab2da4afe7559d959051c66eddb92a4f34584dad6f16bc8085ef1d5b93dd4be24bf6f97903a20a9ae5b3a629c72ff1a320ce98331c5d9c157a2751d124b9d7dc6c18e567a6f3def55d598ceae945acb3422648005aa766f0b3c14d16be9718baa2d93ead8a43a64dcbb2e25af0b662d6477a641bea281414fba02bce0b80bd3759486af923ff1a734cf4ebc90cdd60cd56bf853ce1475bc11e03a14175f7c8457edb673c0a506143cb09e0a2074eb9876d28d71f42780d7e0678816e25455f2435628c2c72f42d04e1d804f17a6892cfe17af6a9e7619662b0d701260a9765cfb19a9c803edbf5201d0344aa6bada893606fbf030989f8ebd64dae6600902eb49ad0b9037d42f38d6d01c327eed7c58269aea91bd1b078c9ebda1e75da065080c682d1cf2c6833d369329e58257d9bd20a1e968c9b68a853026119be88dc6a34fc4fde36d1a26d0465355494888f81f88224c39cf94a3eac3a4d6c1078792d4068df4a72a06dd9c29ec9fe6617d682defc7106512dd3169a01481591f595122699c857cc1fb0f28559d0dabffc6e68a36bb89986bfd209f44bf91b011d54136e335a01883125290ee9a6fc6d1fd27c33ad26e875ea1607000000000000000266036b5932cff5b820bdd07cec02624de2f8ed5b8831f01e4788f1da590a9bc83013e22b365825d6a034f2226561b096e3f729821de6b5b1c7a803bcbaf1eb94dc0266825558b834c47409caf246d2c357b4720f68068b9a06af25bf48bc3ba17d82cfbc5abe3e1ffe8ea980821a3798613c94a8bad620a8609fe79ed0a520a81f34caac7e7836b110e51fb9994cc8bb6559e0ed80fa5ac1010141d6fc6187ae2c2526d4aaf296dfcefe00bb49caa3c86299b68cba885ced5fb2bb24924462b9ced5f5eb09f4386efc4da871dcc1e63933f431fb7329bcc66cadaaa1ff78d34ad4bb501f40799dc7664ed8e30547c90755957b5a5c309816ddd037bcba04388d1e0cebd473b89163d22438e9b1e43fdaf0e06886435be40ab4c1e99f886dbf99a62a62e67e874b636b3c73bbe6376b681ef0991f0c7db3e7f4a3d533975d29f514bf5e668c6d47f97dd089a6c409ab720104da86c5ce65363a3df678f037a5f7f9ba419f815c34907cdfb31739b14f0a82f87878a3bb55a0cfd58fcf8b197f0649fbd915e695cc41c663e4910a7e4db3088ff4ceb6087022885d9386b9297a7c553513e46bc3eee72e02c468c4d4270a18dbcf42a55b6b5fcaa91c7696501a238fe46a86b922bc30569150144a0fdf34c4ec6b8186729d8b715d6766fab82b1a3582d367cd1597c12ba2013f2a8efaccccf97fed188ab84a01b4bbe85c7e740a7035e0edfbc90a5bb5a6ce9dd39087168990133d0147ce2b651b3acade46f76574b83733a6f44d6a63859ca89bf6d562055fc4e8a651913faf655775d83a4bd99c79f1215032a6c1d19a9f42536ad95da33ba7d450a374ba4f0b92b88300"}}) 1m50.971208116s ago: executing program 6 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x1, 0x6, 0x3, 0x2, 0x0, 0xcb, 0xf, 0x45, 0x8, 0x1f, 0x1a, 0x8, 0xd, 0xf, 0x9}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}]}}]}, 0x178}}, 0x24008004) 1m50.782585613s ago: executing program 6 (id=607): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1m50.253295589s ago: executing program 6 (id=613): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m49.958951188s ago: executing program 6 (id=618): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x80}, 0x8) 1m49.442965265s ago: executing program 6 (id=622): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) 1m49.27121114s ago: executing program 34 (id=622): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) 1m19.259005681s ago: executing program 2 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xc044) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1m19.046361217s ago: executing program 2 (id=869): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m17.854537245s ago: executing program 2 (id=878): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) 1m16.058268692s ago: executing program 2 (id=899): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@barrier}, {@commit={'commit', 0x3d, 0x5}}, {@i_version}, {@data_err_ignore}, {@init_itable}, {@errors_remount}, {@inlinecrypt}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m15.561644757s ago: executing program 2 (id=903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m14.914533258s ago: executing program 2 (id=908): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) 1m14.763783193s ago: executing program 35 (id=908): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) 19.354563308s ago: executing program 5 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000036050211000001080211000000505050505050"], 0x54}}, 0x0) 19.310494109s ago: executing program 5 (id=1392): socket$netlink(0x10, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000240)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@fmask}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@dmask}, {@dmask={'dmask', 0x3d, 0x1}}]}, 0x1, 0x1548, &(0x7f0000003300)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2a10413, 0x0) 19.169588794s ago: executing program 4 (id=1395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) sendfile(r1, r0, 0x0, 0x578410e9) 19.002567609s ago: executing program 8 (id=1396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 19.001908889s ago: executing program 7 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4040050) 18.837510234s ago: executing program 7 (id=1398): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") unlink(&(0x7f00000001c0)='./file2\x00') unlink(&(0x7f0000000140)='./file3\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0xfefc) 18.816885274s ago: executing program 5 (id=1399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000780)={[{@journal_checksum}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@bsdgroups}]}, 0x0, 0x60b, &(0x7f0000000140)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 18.718767767s ago: executing program 8 (id=1400): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000000280)={0x2, 0x24e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000001bc0)='6', 0xfffffffffffffc7b, 0x20000045, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 18.514335174s ago: executing program 8 (id=1401): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 18.274730322s ago: executing program 4 (id=1402): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x80000000) setresuid(0x0, 0xee00, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/216) 18.259658172s ago: executing program 4 (id=1403): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x56) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f00000018c0)=@v2={0x3, 0x1, 0x11, 0x5, 0x37b, "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"}, 0x384, 0x0) 18.035707639s ago: executing program 5 (id=1405): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x3, [{r1, 0x0, 0x4000, 0x8000}, {r1, 0x0, 0x1000}, {r1, 0x0, 0x0, 0x1000000}]}) 17.956978452s ago: executing program 7 (id=1406): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001300)={[{@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@uni_xlate}, {@fat=@discard}, {@shortname_win95}, {@fat=@showexec}]}, 0x1, 0x23c, &(0x7f0000001040)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x92e02, 0x4) 17.68507697s ago: executing program 8 (id=1407): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d400", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x6, 0x6}) 17.683781041s ago: executing program 4 (id=1408): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0}, 0x4000040) 17.455029968s ago: executing program 7 (id=1409): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000040)=0x312) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f00000000c0)=0x312) bpf$MAP_CREATE(0x0, 0x0, 0x48) 17.148579017s ago: executing program 5 (id=1410): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x940650, 0x0, 0x1, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) 16.947677724s ago: executing program 3 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) 16.880886166s ago: executing program 8 (id=1413): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) 16.832414747s ago: executing program 7 (id=1414): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@bh}, {@jqfmt_vfsv1}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000000000000000001fcffff00"]) 16.822379537s ago: executing program 4 (id=1415): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000080)={[{@bsdgroups}, {@discard}, {@ikeep}, {@grpid}, {@nodiscard}, {@noalign}, {@nogrpid}, {@grpquota}, {@quota}, {@sysvgroups}]}, 0x5, 0x984b, &(0x7f0000009780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d72656c617865642c6d61703d61636f726e2c756e6869a3e37f916f636861727365743d63703935302c636865636b3d7374726963742c686964652c6d61703d6e6f726d616c2c686964652c756e686964652c6e6f726f636b2c686964652c73657373696f6e3d3078303030303030303030303030303035642c00"], 0x4, 0xa09, &(0x7f0000003280)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 16.803686708s ago: executing program 3 (id=1416): socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 16.719832391s ago: executing program 8 (id=1417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2004888, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 16.590414855s ago: executing program 3 (id=1418): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 16.337623983s ago: executing program 3 (id=1419): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3) close_range(r1, r1, 0x2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 16.168582348s ago: executing program 3 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070103000200000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="05003400e20000ef070049000c"], 0x2c}}, 0x48080) 16.037722853s ago: executing program 5 (id=1421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2000000000008, 0x4) 15.999557323s ago: executing program 3 (id=1422): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x50, 0xfb, 0x0, 0x80000001}, {0x6, 0x60, 0x6, 0x804804}]}) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) 15.727125382s ago: executing program 7 (id=1423): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d400", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x6, 0x6}) 15.625132406s ago: executing program 4 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 1.26514761s ago: executing program 36 (id=1417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2004888, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 191.804614ms ago: executing program 37 (id=1423): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d400", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x6, 0x6}) 143.407986ms ago: executing program 38 (id=1421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2000000000008, 0x4) 87.233198ms ago: executing program 39 (id=1422): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x50, 0xfb, 0x0, 0x80000001}, {0x6, 0x60, 0x6, 0x804804}]}) write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2) 0s ago: executing program 40 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) kernel console output (not intermixed with test programs): 319765][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.342829][ T26] audit: type=1800 audit(1778713568.989:18): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.675" name="file1" dev="loop4" ino=35 res=0 errno=0 [ 147.596292][ T6524] REISERFS (device loop3): Using tea hash to sort names [ 147.648443][ T6524] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 147.712456][ T2288] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.941467][ T6567] loop4: detected capacity change from 0 to 512 [ 147.988976][ T2288] usb 6-1: Using ep0 maxpacket: 32 [ 148.051961][ T6567] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.091824][ T6567] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 148.153726][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 148.153940][ T6567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 148.182762][ T6567] System zones: 1-12 [ 148.198132][ T6567] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.202015][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.214201][ T6567] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.683: invalid indirect mapped block 2 (level 2) [ 148.272745][ T2288] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 148.304340][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.322101][ T2288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.351602][ T6567] EXT4-fs (loop4): Remounting filesystem read-only [ 148.363494][ T6567] EXT4-fs (loop4): 1 truncate cleaned up [ 148.372625][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,usrquota,errors=remount-ro,max_dir_size_kb=0x0000000000000009. Quota mode: writeback. [ 148.372974][ T2288] usb 6-1: Product: syz [ 148.391137][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.419693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.439002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.448263][ T2288] usb 6-1: Manufacturer: syz [ 148.469859][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.503260][ T2288] usb 6-1: SerialNumber: syz [ 148.513702][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.547357][ T2288] usb 6-1: config 0 descriptor?? [ 148.576249][ T6334] device veth0_vlan entered promiscuous mode [ 148.656115][ T6334] device veth1_vlan entered promiscuous mode [ 148.906081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.923153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.941726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.960447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.007636][ T6334] device veth0_macvtap entered promiscuous mode [ 149.034985][ T6334] device veth1_macvtap entered promiscuous mode [ 149.042545][ T2288] airspy 6-1:0.0: Board ID: 00 [ 149.047476][ T2288] airspy 6-1:0.0: Firmware version: [ 149.086098][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.117161][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.149646][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.177434][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.210916][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.246262][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.272889][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.295731][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.343903][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.373857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.386709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.415550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.446534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.476824][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.504588][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.541090][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.577321][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.615823][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.634893][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.652857][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.664185][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.676163][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.702788][ T2288] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 149.702819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.714204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.755737][ T2288] airspy 6-1:0.0: Registered as swradio24 [ 149.786079][ T2288] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 149.788393][ T6334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.825470][ T6334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.832545][ T2288] usb 6-1: USB disconnect, device number 4 [ 149.850473][ T6334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.868694][ T6334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.126485][ T6594] loop2: detected capacity change from 0 to 32768 [ 150.182685][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.197127][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.237238][ T3066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.249372][ T6594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.691 (6594) [ 150.275036][ T3066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.284164][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.312900][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.551640][ T6594] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 150.597415][ T6594] BTRFS info (device loop2): disabling tree log [ 150.635964][ T6594] BTRFS info (device loop2): using free space tree [ 150.692424][ T6594] BTRFS info (device loop2): has skinny extents [ 150.788970][ T6643] device syzkaller1 entered promiscuous mode [ 151.144439][ T6594] BTRFS info (device loop2): enabling ssd optimizations [ 151.265778][ T6675] loop3: detected capacity change from 0 to 64 [ 151.274294][ T21] Bluetooth: hci3: command 0x0411 tx timeout [ 151.459591][ T6681] loop7: detected capacity change from 0 to 256 [ 151.694171][ T6681] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 151.756270][ T6681] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 151.848563][ T6692] device pim6reg1 entered promiscuous mode [ 152.273056][ T6700] input: syz0 as /devices/virtual/input/input14 [ 152.771099][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.7.715'. [ 152.927856][ T6739] loop5: detected capacity change from 0 to 256 [ 152.987937][ T6739] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.029121][ T6739] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2048) [ 153.029238][ T6739] FAT-fs (loop5): Filesystem has been set read-only [ 153.071059][ T6739] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2048) [ 153.258098][ T6753] loop7: detected capacity change from 0 to 512 [ 153.397293][ T6753] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,barrier,quota,,errors=continue. Quota mode: writeback. [ 153.417292][ T6753] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.882592][ T6782] loop3: detected capacity change from 0 to 256 [ 153.945014][ T6782] exfat: Deprecated parameter 'utf8' [ 153.969469][ T6782] exfat: Deprecated parameter 'utf8' [ 153.992701][ T6782] exfat: Deprecated parameter 'namecase' [ 154.052228][ T6782] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 154.087917][ T6783] loop5: detected capacity change from 0 to 4096 [ 154.625671][ T6799] loop2: detected capacity change from 0 to 4096 [ 154.634754][ T4912] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 154.676141][ T4912] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 155.132920][ T6817] device macsec0 entered promiscuous mode [ 155.171550][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 155.359810][ T6817] device veth1_macvtap left promiscuous mode [ 155.442223][ T6831] loop2: detected capacity change from 0 to 256 [ 155.444254][ T6791] loop4: detected capacity change from 0 to 32768 [ 155.483442][ T6817] device macsec0 left promiscuous mode [ 155.513764][ T6831] exfat: Deprecated parameter 'utf8' [ 155.516663][ T6820] netlink: 'syz.3.745': attribute type 12 has an invalid length. [ 155.519510][ T6831] exfat: Deprecated parameter 'utf8' [ 155.567450][ T6820] netlink: 'syz.3.745': attribute type 29 has an invalid length. [ 155.592527][ T6791] JBD2: Ignoring recovery information on journal [ 155.595754][ T6820] netlink: 148 bytes leftover after parsing attributes in process `syz.3.745'. [ 155.610616][ T6820] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 155.620058][ T6831] exfat: Deprecated parameter 'namecase' [ 155.623621][ T6820] netlink: 43 bytes leftover after parsing attributes in process `syz.3.745'. [ 155.658570][ T6835] loop7: detected capacity change from 0 to 2048 [ 155.698165][ T6831] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 155.826466][ T6835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.894561][ T6791] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 156.260582][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 156.369461][ T6856] device pim6reg1 entered promiscuous mode [ 156.727015][ T6875] loop5: detected capacity change from 0 to 256 [ 156.762822][ T5715] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 156.823563][ T6875] exfat: Deprecated parameter 'utf8' [ 156.831949][ T6875] exfat: Deprecated parameter 'utf8' [ 156.855973][ T6875] exfat: Deprecated parameter 'namecase' [ 156.901939][ T6875] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 157.224449][ T5715] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.242138][ T6893] loop5: detected capacity change from 0 to 8 [ 157.251224][ T5715] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.300250][ T5715] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.313329][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.333063][ T6893] squashfs image failed sanity check [ 157.393593][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.772'. [ 157.512576][ T6723] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 157.626908][ T6865] loop3: detected capacity change from 0 to 32768 [ 157.633880][ T5715] usb 3-1: usb_control_msg returned -32 [ 157.639672][ T5715] usbtmc 3-1:16.0: can't read capabilities [ 157.755384][ T6865] XFS (loop3): Mounting V5 Filesystem [ 157.772405][ T6723] usb 8-1: Using ep0 maxpacket: 8 [ 157.892505][ T6723] usb 8-1: config 7 has an invalid interface number: 73 but max is 0 [ 157.901404][ T6723] usb 8-1: config 7 has no interface number 0 [ 157.986316][ T6865] XFS (loop3): Ending clean mount [ 158.008024][ T6865] XFS (loop3): Quotacheck needed: Please wait. [ 158.112797][ T6723] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a8c, bcdDevice=86.97 [ 158.145811][ T6723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.177316][ T6723] usb 8-1: Product: syz [ 158.192585][ T6723] usb 8-1: Manufacturer: syz [ 158.217744][ T6723] usb 8-1: SerialNumber: syz [ 158.266083][ T6865] XFS (loop3): Quotacheck: Done. [ 158.480846][ T4194] XFS (loop3): Unmounting Filesystem [ 158.529289][ T6919] loop4: detected capacity change from 0 to 4096 [ 158.566446][ T6723] usb-storage 8-1:7.73: USB Mass Storage device detected [ 158.699178][ T6723] usb 8-1: USB disconnect, device number 2 [ 158.978579][ T6901] loop5: detected capacity change from 0 to 32768 [ 159.015237][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 159.021853][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 159.194057][ T6901] XFS (loop5): Mounting V5 Filesystem [ 159.274981][ T6901] XFS (loop5): Ending clean mount [ 159.320589][ T6943] loop4: detected capacity change from 0 to 512 [ 159.345091][ T6901] XFS (loop5): Quotacheck needed: Please wait. [ 159.394597][ T6943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.458482][ T6901] XFS (loop5): Quotacheck: Done. [ 159.474426][ T6724] usb 3-1: USB disconnect, device number 11 [ 159.517231][ T6943] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.778: corrupted xattr entries [ 159.560522][ T6943] EXT4-fs (loop4): Remounting filesystem read-only [ 159.581367][ T6943] EXT4-fs (loop4): 1 truncate cleaned up [ 159.585884][ T6953] loop7: detected capacity change from 0 to 256 [ 159.589156][ T6943] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 159.694197][ T6953] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.738177][ T4912] XFS (loop5): Unmounting Filesystem [ 159.780830][ T6953] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 159.856312][ T6953] FAT-fs (loop7): Filesystem has been set read-only [ 159.876932][ T6959] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 160.106805][ T6971] loop2: detected capacity change from 0 to 8 [ 160.248644][ T6971] squashfs image failed sanity check [ 160.268507][ T6975] loop7: detected capacity change from 0 to 256 [ 160.292219][ T6975] exfat: Deprecated parameter 'utf8' [ 160.318470][ T6975] exfat: Deprecated parameter 'utf8' [ 160.325438][ T6975] exfat: Deprecated parameter 'namecase' [ 160.376170][ T6975] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 160.402490][ T21] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 160.429863][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'. [ 160.802753][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.863971][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 161.128980][ T21] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 161.145073][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.172151][ T21] usb 4-1: Product: syz [ 161.181648][ T21] usb 4-1: Manufacturer: syz [ 161.192228][ T21] usb 4-1: SerialNumber: syz [ 161.392455][ T7016] loop4: detected capacity change from 0 to 512 [ 161.572271][ T7016] EXT4-fs (loop4): 1 truncate cleaned up [ 161.599970][ T7016] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 161.607311][ T7020] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.cÖ,iŠŽé [ 161.642968][ T21] usb 4-1: USB disconnect, device number 10 [ 161.694946][ T6985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.787415][ T26] audit: type=1800 audit(1778713583.429:19): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.788" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 161.941882][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 162.097685][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.158750][ T7032] set_capacity_and_notify: 1 callbacks suppressed [ 162.158766][ T7032] loop5: detected capacity change from 0 to 64 [ 162.315761][ T4285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.332862][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.773621][ T5715] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 162.805238][ T5715] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 162.848797][ T5715] usb 5-1: config 220 has no interface number 2 [ 162.880325][ T5715] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 162.931777][ T5715] usb 5-1: config 220 interface 0 has no altsetting 0 [ 162.952731][ T7062] loop2: detected capacity change from 0 to 512 [ 162.972596][ T5715] usb 5-1: config 220 interface 76 has no altsetting 0 [ 162.979540][ T5715] usb 5-1: config 220 interface 1 has no altsetting 0 [ 163.041428][ T7062] EXT4-fs (loop2): 1 truncate cleaned up [ 163.072850][ T7062] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 163.151034][ T7068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.172690][ T5715] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 163.192128][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.212436][ T5715] usb 5-1: Product: syz [ 163.216670][ T5715] usb 5-1: Manufacturer: syz [ 163.221303][ T5715] usb 5-1: SerialNumber: syz [ 163.263400][ T7071] Invalid argument reading file caps for ./file0 [ 163.663112][ T5715] usb 5-1: selecting invalid altsetting 0 [ 163.669773][ T5715] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 163.696364][ T5715] usb 5-1: No valid video chain found. [ 163.762263][ T5715] usb 5-1: selecting invalid altsetting 0 [ 163.774745][ T5715] usbtest: probe of 5-1:220.1 failed with error -22 [ 163.831598][ T5715] usb 5-1: USB disconnect, device number 10 [ 164.623219][ T7092] loop3: detected capacity change from 0 to 131072 [ 164.671422][ T7092] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 164.678396][ T7092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.686636][ C1] sched: RT throttling activated [ 164.694420][ T7092] F2FS-fs (loop3): invalid crc value [ 164.724801][ T7092] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.796166][ T7092] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.803622][ T7092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 164.871910][ T7092] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 165.184861][ T7133] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.764741][ T5715] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.792775][ T5576] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 165.835012][ T7155] loop3: detected capacity change from 0 to 2048 [ 166.023433][ T7155] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 166.098465][ T7155] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.172962][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.193015][ T5576] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.212547][ T5576] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.226270][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.261641][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.275773][ T5576] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.312354][ T5576] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.330868][ T5715] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.371457][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.407580][ T5715] usb 3-1: config 0 descriptor?? [ 166.584430][ T7174] Invalid argument reading file caps for ./file0 [ 166.632790][ T5576] usb 8-1: usb_control_msg returned -32 [ 166.638587][ T5576] usbtmc 8-1:16.0: can't read capabilities [ 166.886660][ T7187] netlink: 240 bytes leftover after parsing attributes in process `syz.3.840'. [ 166.924463][ T5715] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 166.969703][ T5715] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.197645][ T5715] usb 3-1: USB disconnect, device number 12 [ 167.242103][ T7192] fido_id[7192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 167.722591][ T5317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.831324][ T7224] Invalid argument reading file caps for ./file0 [ 168.037363][ T7234] netlink: 240 bytes leftover after parsing attributes in process `syz.2.855'. [ 168.085976][ T5715] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.118392][ T7232] loop4: detected capacity change from 0 to 8192 [ 168.165654][ T5317] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.188356][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.215777][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.230592][ T5317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.262707][ T7232] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 168.288552][ T7232] REISERFS (device loop4): using ordered data mode [ 168.301071][ T7239] tipc: Started in network mode [ 168.306018][ T7232] reiserfs: using flush barriers [ 168.311559][ T7232] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.328372][ T7239] tipc: Node identity ac1414aa, cluster identity 4711 [ 168.340466][ T7239] tipc: Enabled bearer , priority 10 [ 168.364131][ T7232] REISERFS (device loop4): checking transaction log (loop4) [ 168.391598][ T7232] REISERFS (device loop4): Using rupasov hash to sort names [ 168.407628][ T7232] REISERFS (device loop4): using 3.5.x disk format [ 168.418274][ T5317] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.433213][ T7232] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 168.449860][ T5317] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.461211][ T5317] usb 4-1: Manufacturer: syz [ 168.463929][ T7232] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 168.471638][ T5317] usb 4-1: config 0 descriptor?? [ 168.503595][ T5715] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 168.505066][ T7232] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 168.524360][ T5715] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 168.572505][ T7232] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 168.582568][ T7242] sctp: [Deprecated]: syz.2.860 (pid 7242) Use of int in max_burst socket option deprecated. [ 168.582568][ T7242] Use struct sctp_assoc_value instead [ 168.584496][ T5576] usb 8-1: USB disconnect, device number 3 [ 168.651820][ T7244] device syzkaller1 entered promiscuous mode [ 168.763137][ T5715] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 168.793015][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.801078][ T5715] usb 6-1: Product: syz [ 168.860355][ T5715] usb 6-1: Manufacturer: syz [ 168.870449][ T5715] usb 6-1: SerialNumber: syz [ 168.876994][ T7251] loop7: detected capacity change from 0 to 512 [ 168.886493][ T5715] usb 6-1: config 0 descriptor?? [ 168.904144][ T7220] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 168.931255][ T7220] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 168.963418][ T7251] EXT4-fs (loop7): Ignoring removed orlov option [ 168.969898][ T7251] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 168.989238][ T5715] usb 6-1: ucan: probing device on interface #0 [ 168.995967][ T5715] usb 6-1: ucan: invalid EP count (1) [ 169.017830][ T5317] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 169.037018][ T5715] usb 6-1: ucan: probe failed; try to update the device firmware [ 169.046341][ T5317] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 169.065753][ T7251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 169.090233][ T7251] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.863: corrupted in-inode xattr [ 169.103920][ T7251] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.863: couldn't read orphan inode 15 (err -117) [ 169.120801][ T7251] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 169.123448][ T5317] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 169.144063][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.380414][ T5317] tipc: Node number set to 2886997162 [ 169.493986][ T7272] loop7: detected capacity change from 0 to 1024 [ 169.549878][ T4279] usb 4-1: USB disconnect, device number 11 [ 169.598437][ T7272] EXT4-fs (loop7): Test dummy encryption mode enabled [ 169.609274][ T7275] loop4: detected capacity change from 0 to 2048 [ 169.647436][ T7272] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,test_dummy_encryption,nolazytime,,errors=continue. Quota mode: writeback. [ 169.695790][ T7275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.980851][ T7272] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 170.054878][ T7272] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 170.092091][ T7278] loop2: detected capacity change from 0 to 32768 [ 170.389257][ T7278] XFS (loop2): Mounting V5 Filesystem [ 170.397584][ T7304] loop7: detected capacity change from 0 to 128 [ 170.415074][ T7307] futex_wake_op: syz.3.874 tries to shift op by -1; fix this program [ 170.470359][ T7304] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.500735][ T7304] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.553218][ T7278] XFS (loop2): Ending clean mount [ 170.873685][ T4192] XFS (loop2): Unmounting Filesystem [ 170.882045][ T4279] usb 6-1: USB disconnect, device number 5 [ 171.101006][ T7321] loop3: detected capacity change from 0 to 2048 [ 171.147897][ T7325] tipc: Started in network mode [ 171.153726][ T7325] tipc: Node identity ac1414aa, cluster identity 4711 [ 171.178533][ T7325] tipc: Enabled bearer , priority 10 [ 171.216979][ T7321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.445541][ T4279] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.485468][ T7329] loop4: detected capacity change from 0 to 512 [ 171.734062][ T7329] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.887: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 2(4), depth 0(0) [ 171.773176][ T7329] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.887: Bad quota inode: 3, type: 0 [ 171.832852][ T4279] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.847091][ T7329] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 171.893206][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.924043][ T7329] EXT4-fs (loop4): mount failed [ 171.929151][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.940395][ T4279] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.042764][ T4279] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.060661][ T4279] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.069282][ T4279] usb 6-1: Manufacturer: syz [ 172.092710][ T7354] futex_wake_op: syz.7.895 tries to shift op by -1; fix this program [ 172.098337][ T4279] usb 6-1: config 0 descriptor?? [ 172.303690][ T7360] loop4: detected capacity change from 0 to 512 [ 172.315697][ T5311] tipc: Node number set to 2886997162 [ 172.368108][ T7360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.409923][ T7360] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.897: bad orphan inode 131083 [ 172.428601][ T7360] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodelalloc,noblock_validity,,errors=continue. Quota mode: none. [ 172.492406][ T7360] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.897: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 172.604205][ T4279] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 172.623104][ T4279] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 172.663841][ T7367] loop2: detected capacity change from 0 to 1024 [ 172.725601][ T4279] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 172.734988][ T7367] EXT4-fs (loop2): inline encryption not supported [ 172.803301][ T7367] EXT4-fs (loop2): Ignoring removed bh option [ 172.859614][ T7367] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,i_version,data_err=ignore,init_itable,errors=remount-ro,inlinecrypt,bh,inode_readahead_blks=0x0000000001000000,. Quota mode: none. [ 173.051984][ T2288] usb 6-1: USB disconnect, device number 6 [ 173.103761][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 173.158232][ T4192] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /183/bus/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 173.201429][ T4192] EXT4-fs (loop2): Remounting filesystem read-only [ 173.223081][ T4192] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /183/bus/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 173.257227][ T4192] EXT4-fs (loop2): Remounting filesystem read-only [ 173.412432][ T6723] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 173.593242][ T3066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.735893][ T3066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.772669][ T6723] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.791770][ T6723] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.828613][ T6723] usb 8-1: config 220 has no interface number 2 [ 173.857563][ T6723] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.877359][ T6723] usb 8-1: config 220 interface 0 has no altsetting 0 [ 173.884507][ T6723] usb 8-1: config 220 interface 76 has no altsetting 0 [ 173.891622][ T6723] usb 8-1: config 220 interface 1 has no altsetting 0 [ 173.929286][ T7401] batman_adv: batadv0: Adding interface: ip6gretap1 [ 173.942566][ T7401] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.992528][ T7401] batman_adv: batadv0: Interface activated: ip6gretap1 [ 174.039219][ T3066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.062659][ T6723] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 174.079366][ T6723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.092725][ T6723] usb 8-1: Product: syz [ 174.096953][ T6723] usb 8-1: Manufacturer: syz [ 174.102622][ T6723] usb 8-1: SerialNumber: syz [ 174.219608][ T3066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.512749][ T6723] usb 8-1: selecting invalid altsetting 0 [ 174.521719][ T6723] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 174.545474][ T6723] usb 8-1: No valid video chain found. [ 174.604276][ T3066] tipc: Disabling bearer [ 174.611140][ T3066] tipc: Left network mode [ 174.627097][ T6723] usb 8-1: selecting invalid altsetting 0 [ 174.637766][ T6723] usbtest: probe of 8-1:220.1 failed with error -22 [ 174.693987][ T6723] usb 8-1: USB disconnect, device number 4 [ 174.794387][ T7426] netlink: 80 bytes leftover after parsing attributes in process `syz.4.918'. [ 175.166841][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 175.209280][ T7443] loop5: detected capacity change from 0 to 2048 [ 175.296057][ T7454] loop4: detected capacity change from 0 to 512 [ 175.378841][ T7454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.466612][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.476736][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.486382][ T7403] device bridge_slave_0 entered promiscuous mode [ 175.494229][ T7443] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.498748][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.512164][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.521681][ T7403] device bridge_slave_1 entered promiscuous mode [ 175.529646][ T7454] EXT4-fs (loop4): 1 truncate cleaned up [ 175.536366][ T7454] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 175.600018][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.615522][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.700816][ T7403] team0: Port device team_slave_0 added [ 175.711701][ T7403] team0: Port device team_slave_1 added [ 175.889201][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.908726][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.991080][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.026168][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.033931][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.063116][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.152527][ T6723] Bluetooth: hci0: command 0x0409 tx timeout [ 176.160064][ T4234] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.212051][ T7403] device hsr_slave_0 entered promiscuous mode [ 176.239253][ T7403] device hsr_slave_1 entered promiscuous mode [ 176.253480][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.279044][ T7403] Cannot create hsr debugfs directory [ 176.285208][ T5576] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.422584][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 176.542685][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.578152][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.595017][ T3066] device hsr_slave_0 left promiscuous mode [ 176.601814][ T3066] device hsr_slave_1 left promiscuous mode [ 176.608967][ T4234] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.618777][ T3066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.633775][ T3066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.638381][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.655594][ T3066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.672130][ T3066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.676170][ T4234] usb 4-1: config 0 descriptor?? [ 176.711464][ T3066] device bridge_slave_1 left promiscuous mode [ 176.718653][ T3066] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.732980][ T5576] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.743123][ T5576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.761992][ T5576] usb 6-1: config 0 descriptor?? [ 176.769127][ T3066] device bridge_slave_0 left promiscuous mode [ 176.776189][ T3066] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.794030][ T3066] device veth1_macvtap left promiscuous mode [ 176.800461][ T3066] device veth0_macvtap left promiscuous mode [ 176.813112][ T3066] device veth1_vlan left promiscuous mode [ 176.819310][ T3066] device veth0_vlan left promiscuous mode [ 176.942071][ T7493] loop7: detected capacity change from 0 to 40427 [ 176.972213][ T7493] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 176.990083][ T7493] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 177.001187][ T7493] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x6 [ 177.025744][ T7493] F2FS-fs (loop7): invalid crc value [ 177.046544][ T7493] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.087723][ T5576] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 177.124108][ T5576] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 177.134996][ T7497] loop4: detected capacity change from 0 to 128 [ 177.159885][ T5576] [drm:udl_init] *ERROR* Selecting channel failed [ 177.190032][ T4234] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 177.196417][ T5576] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 177.219629][ T5576] [drm] Initialized udl on minor 2 [ 177.249211][ T26] audit: type=1800 audit(1778713598.889:20): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.936" name="file1" dev="loop4" ino=1048656 res=0 errno=0 [ 177.261743][ T7493] F2FS-fs (loop7): Start checkpoint disabled! [ 177.291099][ T26] audit: type=1800 audit(1778713598.919:21): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.936" name="file1" dev="loop4" ino=1048656 res=0 errno=0 [ 177.315096][ T5576] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 177.358261][ T5576] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 177.401720][ T7493] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 177.413687][ T5311] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 177.419237][ T7493] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 177.443860][ T6723] usb 4-1: USB disconnect, device number 12 [ 177.453185][ T5576] usb 6-1: USB disconnect, device number 7 [ 177.476756][ T5311] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 177.496364][ T5311] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 177.536529][ T1174] attempt to access beyond end of device [ 177.536529][ T1174] loop7: rw=2049, want=45104, limit=40427 [ 177.617739][ T3066] team0 (unregistering): Port device team_slave_1 removed [ 177.728964][ T3066] team0 (unregistering): Port device team_slave_0 removed [ 177.839266][ T3066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.918941][ T3066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.127355][ T7515] loop5: detected capacity change from 0 to 512 [ 178.144814][ T7500] loop4: detected capacity change from 0 to 32768 [ 178.156540][ T7517] loop3: detected capacity change from 0 to 1024 [ 178.203313][ T7517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.231128][ T7500] (syz.4.937,7500,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.253415][ T7517] EXT4-fs (loop3): shut down requested (1) [ 178.259784][ T7500] (syz.4.937,7500,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.326649][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 178.327223][ T3066] bond0 (unregistering): Released all slaves [ 178.345211][ T7515] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 178.377554][ T7500] JBD2: Ignoring recovery information on journal [ 178.427952][ T7515] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.557592][ T7500] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.709512][ T7530] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 178.755233][ T7532] loop3: detected capacity change from 0 to 512 [ 178.813730][ T7403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 178.830252][ T7532] EXT4-fs (loop3): Ignoring removed bh option [ 178.867804][ T7532] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 178.875924][ T7403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 178.885671][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 178.955635][ T7403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 178.992784][ T7532] EXT4-fs (loop3): 1 truncate cleaned up [ 179.049817][ T7532] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 179.101833][ T7403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 179.315029][ T7544] loop4: detected capacity change from 0 to 2048 [ 179.388477][ T7544] EXT4-fs (loop4): Ignoring removed oldalloc option [ 179.550293][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.557840][ T7544] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 179.594020][ T7544] System zones: 0-7 [ 179.598583][ T7544] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nodioread_nolock,barrier=0x0000000000000007,oldalloc,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 179.741626][ T7544] EXT4-fs (loop4): shut down requested (1) [ 179.764559][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.794540][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.818030][ T7559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.844852][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.889937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.900494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.915639][ T7566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 179.943266][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.950475][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.991213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.137857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.176368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.223065][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.230277][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.283656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.317187][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.356820][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.392740][ T6724] Bluetooth: hci0: command 0x040f tx timeout [ 180.394534][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.430267][ T7573] loop4: detected capacity change from 0 to 4096 [ 180.483265][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.525269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.547045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.579439][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.636531][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.704449][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.725260][ T7521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.996570][ T7602] loop4: detected capacity change from 0 to 256 [ 181.076999][ T7602] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.159165][ T7602] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 181.208682][ T7602] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 181.484004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.491788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.569076][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.721092][ T7628] loop5: detected capacity change from 0 to 512 [ 181.818909][ T7628] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 181.960167][ T7628] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.971: corrupted in-inode xattr [ 182.103980][ T7628] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.971: couldn't read orphan inode 15 (err -117) [ 182.183214][ T7628] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 182.472844][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 182.520475][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.554454][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.645548][ T7403] device veth0_vlan entered promiscuous mode [ 182.732185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.762255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.829327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.863647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.940670][ T7403] device veth1_vlan entered promiscuous mode [ 183.083444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.132778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.180953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.201235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.249734][ T7403] device veth0_macvtap entered promiscuous mode [ 183.289627][ T7403] device veth1_macvtap entered promiscuous mode [ 183.360127][ T5578] kernel write not supported for file /media6 (pid: 5578 comm: kworker/0:20) [ 183.385124][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.416966][ T4237] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.486587][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.540442][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.572374][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.615022][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.647539][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.671370][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.709320][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.740819][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.792582][ T4237] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.802427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.816227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.848154][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.868389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.894681][ T4237] usb 5-1: config 0 descriptor?? [ 183.910014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.924106][ T7714] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.944027][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.944681][ T4237] cp210x 5-1:0.0: cp210x converter detected [ 183.990116][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.072317][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.094123][ T7714] overlayfs: failed to look up (tracing) for ino (-66) [ 184.122434][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.153391][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.202659][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.238435][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.259469][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.291855][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.312262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.321794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.351982][ T7403] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.377312][ T7729] loop7: detected capacity change from 0 to 256 [ 184.383854][ T7403] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.391058][ T4237] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 184.412838][ T7403] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.421704][ T7403] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.463301][ T7729] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.536712][ T7729] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 184.632247][ T7729] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.673540][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.688145][ T4237] usb 5-1: cp210x converter now attached to ttyUSB0 [ 184.714281][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.781185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.914310][ T7521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.922190][ T7521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.970089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.001524][ T7747] loop3: detected capacity change from 0 to 128 [ 185.004985][ T5715] usb 5-1: USB disconnect, device number 11 [ 185.027708][ T5715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 185.051316][ T5715] cp210x 5-1:0.0: device disconnected [ 185.161710][ T7747] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.251848][ T7747] hpfs: filesystem error: improperly stopped [ 185.287811][ T7747] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.337039][ T7747] hpfs: You really don't want any checks? You are crazy... [ 185.356445][ T7751] loop7: detected capacity change from 0 to 4096 [ 185.374434][ T7747] hpfs: hpfs_map_sector(): read error [ 185.392979][ T7747] hpfs: code page support is disabled [ 185.399261][ T7747] hpfs: hpfs_map_4sectors(): unaligned read [ 185.445695][ T7747] hpfs: hpfs_map_4sectors(): unaligned read [ 185.460864][ T7760] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 185.473882][ T7751] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 185.495489][ T7747] hpfs: filesystem error: unable to find root dir [ 185.572179][ T7747] hpfs: hpfs_map_4sectors(): unaligned read [ 185.638310][ T7751] ntfs: volume version 3.1. [ 185.647207][ T7747] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 185.963860][ T1174] ntfs: (device loop7): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 186.030415][ T1174] ntfs: (device loop7): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 186.212352][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 186.870579][ T7758] loop5: detected capacity change from 0 to 40427 [ 186.889498][ T7814] loop8: detected capacity change from 0 to 1024 [ 186.903221][ T7806] binder: 7804:7806 ioctl c0306201 200000001a80 returned -14 [ 186.944975][ T7758] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 186.971461][ T7758] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 187.108144][ T7758] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.179303][ T7825] loop4: detected capacity change from 0 to 128 [ 187.320942][ T7758] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 187.378663][ T7758] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.382497][ T7830] loop7: detected capacity change from 0 to 1024 [ 187.440919][ T7825] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.495936][ T7825] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.573076][ T7830] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.599367][ T7830] EXT4-fs (loop7): shut down requested (1) [ 188.009304][ T5578] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 188.285895][ T5578] usb 9-1: Using ep0 maxpacket: 8 [ 188.445047][ T5578] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.458472][ T5578] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.479916][ T5578] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.525163][ T5578] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.575108][ T5578] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.618826][ T5578] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.667402][ T7892] loop5: detected capacity change from 0 to 512 [ 188.758461][ T7892] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.793190][ T7892] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.923408][ T5578] usb 9-1: GET_CAPABILITIES returned 0 [ 188.935773][ T5578] usbtmc 9-1:16.0: can't read capabilities [ 189.057713][ T7908] loop4: detected capacity change from 0 to 1024 [ 189.142988][ T7908] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.192404][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.233294][ T7915] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1048'. [ 189.250134][ T7908] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,test_dummy_encryption,nolazytime,,errors=continue. Quota mode: writeback. [ 189.267460][ T5578] usb 9-1: USB disconnect, device number 2 [ 189.392579][ T7927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.490428][ T7920] loop5: detected capacity change from 0 to 4096 [ 189.551485][ T7924] loop3: detected capacity change from 0 to 4096 [ 189.559624][ T7908] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 189.666712][ T7924] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 189.703088][ T7924] ntfs3: loop3: Failed to load $Extend. [ 189.833033][ T4912] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 189.861088][ T4912] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 189.891353][ T26] audit: type=1800 audit(1778713867.527:22): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1051" name="file1" dev="loop3" ino=35 res=0 errno=0 [ 190.319988][ T7956] device syzkaller1 entered promiscuous mode [ 190.348163][ T7954] loop5: detected capacity change from 0 to 2048 [ 190.565160][ T7954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.610852][ T7953] loop8: detected capacity change from 0 to 8192 [ 190.677518][ T7953] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 190.692814][ T7953] REISERFS (device loop8): using ordered data mode [ 190.705771][ T7953] reiserfs: using flush barriers [ 190.758569][ T7953] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.789910][ T7953] REISERFS (device loop8): checking transaction log (loop8) [ 190.928209][ T7963] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.1064: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 2(4), depth 0(0) [ 191.057232][ T7963] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.1064: Bad quota inode: 3, type: 0 [ 191.125775][ T26] audit: type=1800 audit(1778713868.767:23): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1061" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 191.138109][ T7963] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 191.182575][ T7953] REISERFS (device loop8): Using tea hash to sort names [ 191.193417][ T7953] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 191.240924][ T7963] EXT4-fs (loop3): mount failed [ 191.615485][ T7989] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 191.674369][ T7992] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.723725][ T7989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.008698][ T7993] hfsplus: xattr searching failed [ 192.035192][ T7998] hfsplus: xattr searching failed [ 192.063778][ T7996] syz.4.1078 (7996) used greatest stack depth: 19696 bytes left [ 192.080284][ T7966] set_capacity_and_notify: 3 callbacks suppressed [ 192.080301][ T7966] loop7: detected capacity change from 0 to 32768 [ 192.130898][ T9] hfsplus: bad catalog file entry [ 192.135338][ T7966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1065 (7966) [ 192.160634][ T7966] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 192.170855][ T7966] BTRFS info (device loop7): disabling tree log [ 192.179872][ T7966] BTRFS info (device loop7): using free space tree [ 192.187077][ T7966] BTRFS info (device loop7): has skinny extents [ 192.206800][ T9] hfsplus: b-tree write err: -5, ino 3 [ 192.442517][ T7966] BTRFS info (device loop7): enabling ssd optimizations [ 192.681065][ T8035] loop5: detected capacity change from 0 to 1024 [ 192.688554][ T5578] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.042013][ T8048] loop6: detected capacity change from 0 to 7 [ 193.101581][ T4182] Dev loop6: unable to read RDB block 7 [ 193.107296][ T4182] loop6: unable to read partition table [ 193.133774][ T4182] loop6: partition table beyond EOD, truncated [ 193.143151][ T5578] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.175183][ T8048] Dev loop6: unable to read RDB block 7 [ 193.180845][ T8048] loop6: unable to read partition table [ 193.207645][ T8048] loop6: partition table beyond EOD, truncated [ 193.229095][ T8048] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.257616][ T5578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.269523][ T5578] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.483513][ T5578] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 193.532614][ T5578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.574755][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1084'. [ 193.593961][ T5578] usb 5-1: Product: syz [ 193.598283][ T5578] usb 5-1: Manufacturer: syz [ 193.620596][ T5578] usb 5-1: SerialNumber: syz [ 193.667799][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1084'. [ 193.686186][ T5578] usb 5-1: selecting invalid altsetting 1 [ 193.715557][ T5578] usb 5-1: unit 6 not found! [ 193.870274][ T8072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.903083][ T5578] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 193.913231][ T5578] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 193.927549][ T8067] loop3: detected capacity change from 0 to 8192 [ 193.984332][ T5578] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 194.016713][ T8067] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 194.072367][ T6714] Bluetooth: hci0: command 0x0411 tx timeout [ 194.080927][ T8067] REISERFS (device loop3): using ordered data mode [ 194.088066][ T8067] reiserfs: using flush barriers [ 194.100211][ T8067] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.117304][ T8067] REISERFS (device loop3): checking transaction log (loop3) [ 194.135306][ T8067] REISERFS (device loop3): Using r5 hash to sort names [ 194.255418][ T8067] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 194.304941][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.325692][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332046][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.338894][ T8130] loop8: detected capacity change from 0 to 4096 [ 195.357518][ T8130] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.438543][ T5578] usb 5-1: USB disconnect, device number 12 [ 195.553361][ T8130] ntfs: volume version 3.1. [ 195.740726][ T4988] ntfs: (device loop8): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 195.769908][ T8150] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.819278][ T4988] ntfs: (device loop8): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 195.847349][ T8154] loop4: detected capacity change from 0 to 164 [ 196.430321][ T8177] loop8: detected capacity change from 0 to 256 [ 196.493511][ T8177] exfat: Deprecated parameter 'utf8' [ 196.502140][ T8177] exfat: Deprecated parameter 'utf8' [ 196.508596][ T8177] exfat: Deprecated parameter 'utf8' [ 196.587842][ T8177] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 196.658572][ T5715] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.122989][ T5715] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.145268][ T5715] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.180534][ T5715] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.193447][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.222644][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 197.282516][ T6717] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 197.402935][ T5715] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.412040][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.442755][ T5715] usb 6-1: Product: syz [ 197.452035][ T5715] usb 6-1: Manufacturer: syz [ 197.491106][ T8216] loop8: detected capacity change from 0 to 128 [ 197.514179][ T5715] cdc_wdm 6-1:1.0: skipping garbage [ 197.520089][ T5715] cdc_wdm 6-1:1.0: skipping garbage [ 197.542032][ T5715] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 197.542473][ T6717] usb 8-1: Using ep0 maxpacket: 16 [ 197.556838][ T5715] cdc_wdm 6-1:1.0: Unknown control protocol [ 197.612876][ T8216] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 197.630970][ T8216] FAT-fs (loop8): Filesystem has been set read-only [ 197.646839][ T8216] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 197.712746][ T6717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.741212][ T6717] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 197.787364][ T6717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.850295][ T6717] usb 8-1: config 0 descriptor?? [ 197.887882][ T8228] loop3: detected capacity change from 0 to 16 [ 197.992801][ T6717] rc_core: IR keymap rc-xbox-dvd not found [ 198.001254][ T6717] Registered IR keymap rc-empty [ 198.019462][ T6717] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 198.041606][ T6717] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 198.070389][ T6717] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.100027][ T6717] input: failed to attach handler kbd to device input16, error: -5 [ 198.116484][ T8197] udc-core: couldn't find an available UDC or it's busy [ 198.129263][ T3548] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.148074][ T8197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.170337][ T3548] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.238221][ T4182] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.250091][ T8197] udc-core: couldn't find an available UDC or it's busy [ 198.261484][ T8197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.283985][ T3548] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.309209][ T6721] usb 8-1: USB disconnect, device number 5 [ 198.309717][ T3548] xbox_remote 8-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 198.556501][ T6717] usb 6-1: USB disconnect, device number 8 [ 199.029405][ T8256] loop4: detected capacity change from 0 to 8192 [ 199.110187][ T8256] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 199.130146][ T8256] REISERFS (device loop4): using ordered data mode [ 199.144949][ T8256] reiserfs: using flush barriers [ 199.189903][ T8256] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.213440][ T8256] REISERFS (device loop4): checking transaction log (loop4) [ 199.228976][ T8256] REISERFS (device loop4): Using r5 hash to sort names [ 199.246706][ T8256] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 199.319258][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 200.095901][ T8268] loop5: detected capacity change from 0 to 131072 [ 200.217523][ T8268] F2FS-fs (loop5): invalid crc value [ 200.252768][ T8268] F2FS-fs (loop5): Found nat_bits in checkpoint [ 200.258115][ T8287] device syzkaller1 entered promiscuous mode [ 200.304155][ T8268] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 200.325835][ T8268] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 200.442201][ T8278] loop3: detected capacity change from 0 to 32768 [ 200.565880][ T8278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1147 (8278) [ 200.682402][ T8278] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 200.729343][ T8278] BTRFS info (device loop3): disabling tree log [ 200.731893][ T8261] loop7: detected capacity change from 0 to 32768 [ 200.762088][ T8278] BTRFS info (device loop3): using free space tree [ 200.813456][ T8278] BTRFS info (device loop3): has skinny extents [ 200.934999][ T8261] XFS (loop7): Mounting V5 Filesystem [ 201.052516][ T6714] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.232389][ T6717] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 201.261415][ T8261] XFS (loop7): Ending clean mount [ 201.290139][ T8261] XFS (loop7): Quotacheck needed: Please wait. [ 201.297026][ T6714] usb 5-1: Using ep0 maxpacket: 32 [ 201.348752][ T8278] BTRFS info (device loop3): enabling ssd optimizations [ 201.422610][ T6714] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.441009][ T6714] usb 5-1: config 0 has no interface number 0 [ 201.470301][ T8261] XFS (loop7): Quotacheck: Done. [ 201.602655][ T6714] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.613851][ T6717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.650213][ T26] audit: type=1804 audit(1778713879.287:24): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1140" name="/newroot/102/file1/file1" dev="loop7" ino=9286 res=1 errno=0 [ 201.652735][ T6714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.681277][ T6717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.712090][ T6717] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.733698][ T6714] usb 5-1: Product: syz [ 201.738076][ T6714] usb 5-1: Manufacturer: syz [ 201.743177][ T6717] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.756862][ T6714] usb 5-1: SerialNumber: syz [ 201.762710][ T6717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.778898][ T6714] usb 5-1: config 0 descriptor?? [ 201.789672][ T6717] usb 9-1: config 0 descriptor?? [ 201.798501][ T6334] XFS (loop7): Unmounting Filesystem [ 201.834667][ T8349] tipc: Started in network mode [ 201.839715][ T8349] tipc: Node identity bbbbbb, cluster identity 4711 [ 201.856105][ T6714] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 201.858480][ T8349] tipc: Enabled bearer , priority 10 [ 202.089618][ T6714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 202.121284][ T6714] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.324867][ T6717] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 202.376071][ T6717] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 202.631383][ T6714] usb 5-1: USB disconnect, device number 13 [ 202.642398][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 202.644658][ T5314] usb 9-1: USB disconnect, device number 3 [ 202.683908][ T6714] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 202.734918][ T6714] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 202.769053][ T6714] quatech2 5-1:0.51: device disconnected [ 202.782117][ T8364] loop3: detected capacity change from 0 to 256 [ 202.860289][ T8364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 202.872857][ T5576] tipc: Node number set to 3149642496 [ 203.492415][ T6714] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 203.508613][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 203.755586][ T8395] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.942660][ T5576] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.012616][ T6714] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 204.012650][ T6714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.012673][ T6714] usb 6-1: Product: syz [ 204.012689][ T6714] usb 6-1: Manufacturer: syz [ 204.012705][ T6714] usb 6-1: SerialNumber: syz [ 204.014681][ T6714] usb 6-1: config 0 descriptor?? [ 204.055040][ T6714] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 204.212654][ T5576] usb 5-1: Using ep0 maxpacket: 32 [ 204.314879][ T6714] sonixb 6-1:0.0: Error reading register 00: -71 [ 204.359763][ T6714] usb 6-1: USB disconnect, device number 9 [ 204.382388][ T5576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.421523][ T5576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.446103][ T5576] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 204.480616][ T5576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.530316][ T5576] usb 5-1: config 0 descriptor?? [ 205.081892][ T5576] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 205.169849][ T8435] loop8: detected capacity change from 0 to 32768 [ 205.236459][ T8435] (syz.8.1198,8435,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.282665][ T8435] (syz.8.1198,8435,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.343090][ T8435] JBD2: Ignoring recovery information on journal [ 205.398006][ T5576] usb 5-1: USB disconnect, device number 14 [ 205.534012][ T8435] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 205.752884][ T8453] loop5: detected capacity change from 0 to 32768 [ 205.772499][ T7403] ocfs2: Unmounting device (7,8) on (node local) [ 206.023257][ T8453] XFS (loop5): Mounting V5 Filesystem [ 206.207633][ T8453] XFS (loop5): Ending clean mount [ 206.227938][ T8453] XFS (loop5): Quotacheck needed: Please wait. [ 206.317043][ T5576] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 206.339896][ T8453] XFS (loop5): Quotacheck: Done. [ 206.402692][ T5311] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 206.434162][ T26] audit: type=1804 audit(1778713884.077:25): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1193" name="/newroot/193/file1/file1" dev="loop5" ino=9286 res=1 errno=0 [ 206.512062][ T4912] XFS (loop5): Unmounting Filesystem [ 206.608254][ T5576] usb 9-1: Using ep0 maxpacket: 16 [ 206.683135][ T5311] usb 8-1: Using ep0 maxpacket: 32 [ 206.692331][ T5318] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.773169][ T5576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.820931][ T5576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.850076][ T5576] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.863881][ T5311] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 206.885119][ T5311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.924438][ T5311] usb 8-1: config 0 descriptor?? [ 206.930723][ T5576] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.947159][ T8504] loop4: detected capacity change from 0 to 512 [ 206.954946][ T5576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.966126][ T5576] usb 9-1: config 0 descriptor?? [ 206.991344][ T8504] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.022677][ T5318] usb 4-1: Using ep0 maxpacket: 8 [ 207.046837][ T8504] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 207.067641][ T8504] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.108190][ T8504] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.1212: Allocating blocks 41-42 which overlap fs metadata [ 207.149560][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.156738][ T8504] Quota error (device loop4): write_blk: dquota write failed [ 207.171120][ T8504] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 207.171538][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 207.193678][ T8504] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1212: Failed to acquire dquot type 0 [ 207.211526][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.218929][ T8504] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 207.222844][ T5311] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 207.252990][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.264440][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.265878][ T8504] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1212: corrupted inode contents [ 207.278548][ T5311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.296524][ T5318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.307313][ T5318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 207.318648][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.318697][ T5318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 207.333474][ T8504] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.1212: mark_inode_dirty error [ 207.336045][ T5311] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 207.354584][ T5318] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.363998][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.372633][ T5311] usb 8-1: media controller created [ 207.376051][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.393227][ T5318] usb 4-1: config 0 descriptor?? [ 207.396104][ T8504] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1212: corrupted inode contents [ 207.404827][ T5311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.434871][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.441842][ T8504] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.1212: mark_inode_dirty error [ 207.474142][ T4201] Bluetooth: hci5: urb ffff888021463d00 submission failed (90) [ 207.480566][ T5576] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.000E/input/input17 [ 207.497577][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.505085][ T8504] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1212: corrupted inode contents [ 207.536042][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.542788][ T8504] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 207.551869][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.558683][ T8504] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1212: corrupted inode contents [ 207.571481][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.578803][ T8504] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.1212: mark_inode_dirty error [ 207.590682][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.598941][ T8504] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 207.607987][ T5576] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 207.622744][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.630445][ T8504] EXT4-fs (loop4): 1 truncate cleaned up [ 207.647680][ T8504] EXT4-fs (loop4): pa ffff88805f954000: logic 1, phys. 41, len 23 [ 207.655696][ T8504] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 207.677683][ T8504] EXT4-fs (loop4): Remounting filesystem read-only [ 207.702760][ T8504] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 207.762043][ T6717] usb 4-1: USB disconnect, device number 13 [ 207.814059][ T6714] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.896875][ T5715] usb 9-1: USB disconnect, device number 4 [ 208.073897][ T6714] usb 6-1: Using ep0 maxpacket: 32 [ 208.092552][ T8524] loop4: detected capacity change from 0 to 64 [ 208.198587][ T6714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.201510][ T8524] attempt to access beyond end of device [ 208.201510][ T8524] loop4: rw=0, want=1026, limit=64 [ 208.210002][ T6714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.231062][ T8524] Buffer I/O error on dev loop4, logical block 512, async page read [ 208.231222][ T8524] attempt to access beyond end of device [ 208.231222][ T8524] loop4: rw=0, want=113154, limit=64 [ 208.261301][ T5311] az6027: usb out operation failed. (-71) [ 208.268228][ T5311] stb0899_attach: Driver disabled by Kconfig [ 208.271492][ T6714] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 208.276034][ T5311] az6027: no front-end attached [ 208.276034][ T5311] [ 208.290966][ T8524] Buffer I/O error on dev loop4, logical block 56576, async page read [ 208.294676][ T6714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.312711][ T5311] az6027: usb out operation failed. (-71) [ 208.318541][ T5311] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 208.338952][ T6714] usb 6-1: config 0 descriptor?? [ 208.354546][ T5311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input18 [ 208.403832][ T5311] dvb-usb: schedule remote query interval to 400 msecs. [ 208.410854][ T5311] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 208.472025][ T5311] usb 8-1: USB disconnect, device number 6 [ 208.627204][ T5311] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 208.766506][ T8543] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.838087][ T6714] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 208.946309][ T8543] overlayfs: failed to look up (tracing) for ino (-66) [ 209.102345][ T5715] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 209.227525][ T8563] netlink: 'syz.4.1227': attribute type 2 has an invalid length. [ 209.268028][ T6717] usb 6-1: USB disconnect, device number 10 [ 209.269514][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 209.368584][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 209.495690][ T5715] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 209.512987][ T5715] usb 4-1: config 0 has no interface number 0 [ 209.533352][ T5715] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 209.566130][ T5715] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 209.764426][ T5715] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 209.773699][ T5314] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.791000][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.809851][ T5715] usb 4-1: Product: syz [ 209.821950][ T5715] usb 4-1: Manufacturer: syz [ 209.840247][ T5715] usb 4-1: SerialNumber: syz [ 209.860618][ T5715] usb 4-1: config 0 descriptor?? [ 210.022725][ T5314] usb 5-1: Using ep0 maxpacket: 16 [ 210.153505][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.188193][ T5715] radio-si470x 4-1:0.35: this is not a si470x device. [ 210.218519][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.260948][ T5314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.318101][ T5314] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.342594][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.372186][ T5314] usb 5-1: config 0 descriptor?? [ 210.413215][ T5715] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 210.521339][ T8613] loop8: detected capacity change from 0 to 2048 [ 210.575343][ T8616] loop5: detected capacity change from 0 to 128 [ 210.598520][ T8613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.627982][ T5715] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 210.643989][ T8616] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.720762][ T8616] FAT-fs (loop5): bread failed, FSINFO block (sector = 148) [ 210.772182][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1242'. [ 210.861388][ T5715] usb 4-1: USB disconnect, device number 14 [ 210.876943][ T5314] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input19 [ 210.923490][ T5715] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 211.056214][ T5314] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 211.098648][ T8624] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 211.184602][ T5715] usb 5-1: USB disconnect, device number 15 [ 211.366182][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 211.430687][ T8605] loop7: detected capacity change from 0 to 32768 [ 211.589444][ T26] audit: type=1800 audit(1778713889.227:26): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1240" name="file1" dev="loop8" ino=1415 res=0 errno=0 [ 211.612443][ T5311] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.646713][ T8605] XFS (loop7): Mounting V5 Filesystem [ 211.668855][ T8638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 211.705747][ T8605] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 211.726335][ T8605] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30 [ 211.782526][ T8605] XFS (loop7): Ending clean mount [ 211.999234][ T8605] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 212.033026][ T5311] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.047659][ T8605] XFS (loop7): Unmount and run xfs_repair [ 212.062635][ T5311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.086422][ T8605] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 212.122049][ T5311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.123560][ T8605] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 212.166479][ T5311] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.221274][ T8605] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.295656][ T8605] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 212.333637][ T8605] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 212.353050][ T5311] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.362238][ T5311] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.380676][ T5311] usb 6-1: Product: syz [ 212.385109][ T8605] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.422376][ T5311] usb 6-1: Manufacturer: syz [ 212.462230][ T8605] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 212.513843][ T5311] cdc_wdm 6-1:1.0: skipping garbage [ 212.519173][ T5311] cdc_wdm 6-1:1.0: skipping garbage [ 212.530256][ T8605] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 212.546908][ T5311] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 212.559963][ T8605] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 212.572615][ T5311] cdc_wdm 6-1:1.0: Unknown control protocol [ 212.609650][ T8666] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 212.651181][ T8666] XFS (loop7): Unmount and run xfs_repair [ 212.672593][ T8666] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 212.680153][ T8666] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 212.702615][ T8666] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.711534][ T8666] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 212.728021][ T5314] usb 6-1: USB disconnect, device number 11 [ 212.773162][ T8666] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 212.782854][ T8666] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 212.791837][ T8666] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 212.801676][ T5311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.832615][ T8666] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 212.849145][ T8666] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 212.923324][ T6334] XFS (loop7): Unmounting Filesystem [ 212.952251][ T8660] loop8: detected capacity change from 0 to 32768 [ 213.145024][ T8660] XFS (loop8): Mounting V5 Filesystem [ 213.274699][ T5311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.312324][ T5311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.341019][ T5311] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 213.354126][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1255'. [ 213.357342][ T5311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.389803][ T5311] usb 4-1: config 0 descriptor?? [ 213.403414][ T8660] XFS (loop8): Ending clean mount [ 213.613830][ T7403] XFS (loop8): Unmounting Filesystem [ 213.904597][ T5311] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 213.926606][ T5311] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 213.951755][ T5311] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 213.987303][ T5311] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 214.015346][ T5311] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 214.036230][ T5311] cm6533_jd 0003:0D8C:0022.0011: No inputs registered, leaving [ 214.252479][ T6717] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 214.512463][ T6717] usb 6-1: Using ep0 maxpacket: 16 [ 214.632968][ T6717] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.661711][ T6717] usb 6-1: config 0 has no interface number 0 [ 214.842704][ T6717] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 214.862409][ T6717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.922436][ T6717] usb 6-1: Product: syz [ 214.952537][ T6717] usb 6-1: Manufacturer: syz [ 214.968778][ T8736] loop8: detected capacity change from 0 to 8192 [ 214.985634][ T6717] usb 6-1: SerialNumber: syz [ 214.999036][ T8728] loop7: detected capacity change from 0 to 131072 [ 215.010774][ T5311] cm6533_jd 0003:0D8C:0022.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 215.025588][ T5311] usb 4-1: USB disconnect, device number 15 [ 215.052060][ T6717] usb 6-1: config 0 descriptor?? [ 215.071864][ T8728] F2FS-fs (loop7): invalid crc value [ 215.097216][ T8736] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 215.110924][ T8728] F2FS-fs (loop7): Found nat_bits in checkpoint [ 215.134527][ T6717] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 215.140985][ T8736] REISERFS (device loop8): using ordered data mode [ 215.176383][ T8728] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 215.190298][ T8736] reiserfs: using flush barriers [ 215.203505][ T8728] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 215.232660][ T8736] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.314555][ T8736] REISERFS (device loop8): checking transaction log (loop8) [ 215.392470][ T8736] REISERFS (device loop8): Using r5 hash to sort names [ 215.404303][ T8748] fido_id[8748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 215.433487][ T8736] REISERFS (device loop8): using 3.5.x disk format [ 215.471142][ T8736] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 215.820383][ T8740] loop3: detected capacity change from 0 to 32768 [ 215.980969][ T8759] loop4: detected capacity change from 0 to 2048 [ 216.047547][ T8759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.232566][ T6717] gspca_spca1528: reg_w err -71 [ 216.237697][ T6717] spca1528: probe of 6-1:0.1 failed with error -71 [ 216.276903][ T6717] usb 6-1: USB disconnect, device number 12 [ 216.380632][ T8766] capability: warning: `syz.4.1274' uses 32-bit capabilities (legacy support in use) [ 216.460264][ T8766] program syz.4.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.872402][ T4237] Bluetooth: hci2: command 0x0406 tx timeout [ 217.078696][ T8785] loop5: detected capacity change from 0 to 4096 [ 217.181471][ T8797] loop8: detected capacity change from 0 to 1024 [ 217.247068][ T26] audit: type=1804 audit(1778713894.887:27): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1282" name="/newroot/206/bus/file0" dev="loop5" ino=33 res=1 errno=0 [ 217.344497][ T4912] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 217.344948][ T8801] loop4: detected capacity change from 0 to 128 [ 217.377232][ T26] audit: type=1804 audit(1778713894.887:28): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1282" name="/newroot/206/bus/file0" dev="loop5" ino=33 res=1 errno=0 [ 217.407756][ T4912] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 217.415234][ T6717] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 217.435771][ T26] audit: type=1804 audit(1778713894.887:29): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1282" name="/newroot/206/bus/file0" dev="loop5" ino=33 res=1 errno=0 [ 217.593573][ T8801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.622977][ T8778] loop3: detected capacity change from 0 to 32768 [ 217.629754][ T8801] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.692418][ T6717] usb 8-1: Using ep0 maxpacket: 32 [ 217.808214][ T8778] XFS (loop3): Mounting V5 Filesystem [ 217.814181][ T6717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.882730][ T6717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.966177][ T6717] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 217.975786][ T6717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.994742][ T6717] usb 8-1: config 0 descriptor?? [ 218.010116][ T8778] XFS (loop3): Ending clean mount [ 218.139262][ T8778] XFS (loop3): Quotacheck needed: Please wait. [ 218.246943][ T8820] loop5: detected capacity change from 0 to 4096 [ 218.372755][ T8820] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 218.398382][ T8820] ntfs3: loop5: Failed to load $Extend. [ 218.410685][ T8778] XFS (loop3): Quotacheck: Done. [ 218.467695][ T6717] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 218.542102][ T26] audit: type=1800 audit(1778713896.177:30): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1293" name="file1" dev="loop5" ino=35 res=0 errno=0 [ 218.726422][ T4194] XFS (loop3): Unmounting Filesystem [ 218.757068][ T6721] usb 8-1: USB disconnect, device number 7 [ 218.804679][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 218.888426][ T8837] netlink: 'syz.4.1303': attribute type 11 has an invalid length. [ 218.904925][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 218.972579][ T6717] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 219.242525][ T6717] usb 9-1: Using ep0 maxpacket: 32 [ 219.261359][ T8848] loop5: detected capacity change from 0 to 128 [ 219.353004][ T8848] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 219.362799][ T6717] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 219.397385][ T6717] usb 9-1: config 0 has no interface number 0 [ 219.422677][ T8848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.424408][ T6717] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 219.475724][ T6717] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 219.682805][ T6717] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 219.699090][ T6717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.717570][ T6717] usb 9-1: Product: syz [ 219.742415][ T6717] usb 9-1: Manufacturer: syz [ 219.756390][ T6717] usb 9-1: SerialNumber: syz [ 219.800175][ T6717] usb 9-1: config 0 descriptor?? [ 219.979929][ T8859] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 219.989987][ T8859] ntfs3: loop7: Failed to load $Extend. [ 220.025706][ T8842] XFS (loop4): Mounting V5 Filesystem [ 220.059100][ T26] audit: type=1800 audit(1778713897.697:31): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1311" name="file1" dev="loop7" ino=35 res=0 errno=0 [ 220.087518][ T6717] radio-si470x 9-1:0.35: this is not a si470x device. [ 220.149245][ T5314] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 220.198992][ T8842] XFS (loop4): Ending clean mount [ 220.292655][ T6717] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 220.333883][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1317'. [ 220.475974][ T4193] XFS (loop4): Unmounting Filesystem [ 220.505117][ T6717] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 220.532725][ T5314] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 220.556142][ T5314] usb 4-1: config 0 has no interface number 0 [ 220.572870][ T5314] usb 4-1: config 0 interface 113 altsetting 2 has an invalid endpoint with address 0x14, skipping [ 220.607474][ T5314] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.628133][ T5314] usb 4-1: config 0 interface 113 has no altsetting 0 [ 220.742676][ T5311] usb 9-1: USB disconnect, device number 5 [ 220.771922][ T5311] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 220.842824][ T5314] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 220.858692][ T8891] device syzkaller1 entered promiscuous mode [ 220.865698][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.875597][ T5314] usb 4-1: Product: syz [ 220.882659][ T5314] usb 4-1: Manufacturer: syz [ 220.887588][ T5314] usb 4-1: SerialNumber: syz [ 220.895026][ T5314] usb 4-1: config 0 descriptor?? [ 220.944310][ T5314] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 221.096732][ T8895] set_capacity_and_notify: 3 callbacks suppressed [ 221.096749][ T8895] loop5: detected capacity change from 0 to 512 [ 221.175087][ T5311] usb 4-1: USB disconnect, device number 16 [ 221.249134][ T8895] EXT4-fs (loop5): Ignoring removed bh option [ 221.288732][ T8895] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 221.393000][ T8895] EXT4-fs (loop5): 1 truncate cleaned up [ 221.398822][ T8895] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 221.456905][ T8897] loop7: detected capacity change from 0 to 32768 [ 221.477255][ T8895] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1325: bg 0: block 465: padding at end of block bitmap is not set [ 221.527419][ T8897] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 221.528961][ T8895] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 221.539194][ T8897] JBD2: Ignoring recovery information on journal [ 221.647693][ T8895] EXT4-fs (loop5): This should not happen!! Data will be lost [ 221.647693][ T8895] [ 221.658255][ T8897] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 221.687887][ T8895] EXT4-fs (loop5): Total free blocks count 0 [ 221.724628][ T8895] EXT4-fs (loop5): Free/Dirty block details [ 221.754051][ T8895] EXT4-fs (loop5): free_blocks=0 [ 221.767887][ T8895] EXT4-fs (loop5): dirty_blocks=66 [ 221.786311][ T8915] loop3: detected capacity change from 0 to 512 [ 221.814074][ T8895] EXT4-fs (loop5): Block reservation details [ 221.835168][ T8895] EXT4-fs (loop5): i_reserved_data_blocks=66 [ 221.849815][ T8908] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 221.880992][ T8915] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 221.898477][ T6334] ocfs2: Unmounting device (7,7) on (node local) [ 221.992715][ T6717] Bluetooth: hci1: command 0x0406 tx timeout [ 222.007069][ T8915] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1331: corrupted in-inode xattr [ 222.067748][ T8908] EXT4-fs (loop5): This should not happen!! Data will be lost [ 222.067748][ T8908] [ 222.113119][ T8915] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1331: couldn't read orphan inode 15 (err -117) [ 222.170962][ T8915] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 222.430320][ T8930] binder: 8929:8930 ioctl c0306201 200000000040 returned -14 [ 222.843151][ T8947] netlink: 'syz.4.1343': attribute type 10 has an invalid length. [ 222.949323][ T8950] loop3: detected capacity change from 0 to 512 [ 222.982903][ T8947] team0: Port device wlan1 added [ 223.020320][ T8950] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1344: invalid block [ 223.090228][ T8954] device syzkaller1 entered promiscuous mode [ 223.155946][ T8950] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1344: invalid indirect mapped block 10 (level 1) [ 223.243814][ T8959] mmap: syz.7.1348 (8959) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 223.277812][ T8950] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1344: invalid indirect mapped block 8 (level 1) [ 223.325736][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.330486][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1350'. [ 223.355249][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.369514][ T8950] EXT4-fs (loop3): 1 truncate cleaned up [ 223.378043][ T8950] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 223.385746][ T8965] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.439983][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.472961][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.523053][ T8970] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1351'. [ 223.619794][ T8950] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1344: Unrecognised inode hash code 4 [ 223.705277][ T8950] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1344: Corrupt directory, running e2fsck is recommended [ 223.971652][ T8967] loop4: detected capacity change from 0 to 32768 [ 224.015237][ T8978] loop8: detected capacity change from 0 to 8192 [ 224.189274][ T8967] XFS (loop4): Mounting V5 Filesystem [ 224.214419][ T8969] loop7: detected capacity change from 0 to 32768 [ 224.390697][ T8967] XFS (loop4): Ending clean mount [ 224.402234][ T8967] XFS (loop4): Quotacheck needed: Please wait. [ 224.667773][ T8967] XFS (loop4): Quotacheck: Done. [ 224.789441][ T8996] loop3: detected capacity change from 0 to 4096 [ 224.881662][ T4193] XFS (loop4): Unmounting Filesystem [ 225.061032][ T4194] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 225.073669][ T6717] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 225.083920][ T4194] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 225.164464][ T5311] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 225.291718][ T8992] loop5: detected capacity change from 0 to 32768 [ 225.320408][ T6717] usb 8-1: Using ep0 maxpacket: 8 [ 225.440692][ T8992] XFS (loop5): Mounting V5 Filesystem [ 225.443047][ T6717] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 225.447547][ T5311] usb 9-1: Using ep0 maxpacket: 32 [ 225.454494][ T6714] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 225.484595][ T6717] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 225.503531][ T6717] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 225.538239][ T8992] XFS (loop5): Ending clean mount [ 225.569677][ T6717] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 225.606535][ T5311] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 225.623020][ T5311] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 225.632428][ T6717] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 225.634431][ T5311] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 225.655670][ T5311] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 225.668038][ T6717] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.668973][ T5311] usb 9-1: config 0 interface 0 has no altsetting 0 [ 225.720540][ T6717] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.736803][ T6717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.747283][ T6714] usb 4-1: Using ep0 maxpacket: 8 [ 225.872727][ T6714] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 225.881162][ T6714] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.892859][ T5311] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 225.902456][ T6714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.912189][ T5311] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 225.913010][ T6714] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.930957][ T5311] usb 9-1: Product: syz [ 225.931106][ T6714] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.949974][ T6714] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.957142][ T5311] usb 9-1: Manufacturer: syz [ 225.960323][ T6714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.970131][ T5311] usb 9-1: SerialNumber: syz [ 225.990039][ T5311] usb 9-1: config 0 descriptor?? [ 225.995503][ T4912] XFS (loop5): Unmounting Filesystem [ 226.048778][ T5311] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 226.059784][ T5311] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 226.064634][ T6717] usb 8-1: usb_control_msg returned -32 [ 226.081117][ T6717] usbtmc 8-1:16.0: can't read capabilities [ 226.242537][ T6714] usb 4-1: usb_control_msg returned -32 [ 226.248375][ T6714] usbtmc 4-1:16.0: can't read capabilities [ 226.308397][ T9002] ldusb 9-1:0.0: Write buffer overflow, 64804 bytes dropped [ 226.334998][ T6714] usb 9-1: USB disconnect, device number 6 [ 226.348305][ T6714] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 226.582191][ T9030] loop5: detected capacity change from 0 to 32768 [ 226.937233][ T9039] loop4: detected capacity change from 0 to 256 [ 226.969200][ T9039] exfat: Deprecated parameter 'utf8' [ 227.004629][ T9039] exfat: Deprecated parameter 'utf8' [ 227.052514][ T9039] exfat: Deprecated parameter 'utf8' [ 227.085640][ T9039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 227.342602][ T5715] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 227.722484][ T5715] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.738172][ T5715] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.748734][ T5715] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.759701][ T4279] usb 8-1: USB disconnect, device number 8 [ 227.764617][ T5715] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.849283][ T9050] loop7: detected capacity change from 0 to 2048 [ 227.902552][ T5715] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.926880][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.945864][ T9050] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.968198][ T5715] usb 9-1: Product: syz [ 227.992679][ T5715] usb 9-1: Manufacturer: syz [ 228.074551][ T5715] cdc_wdm 9-1:1.0: skipping garbage [ 228.075547][ T9048] loop5: detected capacity change from 0 to 40427 [ 228.088434][ T5715] cdc_wdm 9-1:1.0: skipping garbage [ 228.114574][ T9048] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 228.117674][ T5715] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 228.150174][ T5715] cdc_wdm 9-1:1.0: Unknown control protocol [ 228.161476][ T9048] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 228.198165][ T9048] F2FS-fs (loop5): invalid crc value [ 228.240444][ T9048] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 228.299400][ T9048] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 228.328812][ T5311] usb 4-1: USB disconnect, device number 17 [ 228.358539][ T6714] usb 9-1: USB disconnect, device number 7 [ 228.505978][ T9048] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 228.549276][ T9048] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 229.095965][ T9057] loop4: detected capacity change from 0 to 32768 [ 229.192709][ T9082] device syzkaller1 entered promiscuous mode [ 229.211976][ T9057] XFS (loop4): Mounting V5 Filesystem [ 229.316737][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'. [ 229.362828][ T9095] loop5: detected capacity change from 0 to 256 [ 229.400090][ T9057] XFS (loop4): Ending clean mount [ 229.423345][ T9095] exfat: Deprecated parameter 'utf8' [ 229.428977][ T9095] exfat: Deprecated parameter 'utf8' [ 229.513605][ T4193] XFS (loop4): Unmounting Filesystem [ 229.522702][ T9075] loop3: detected capacity change from 0 to 32768 [ 229.583802][ T9095] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 229.606713][ T9075] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1387 (9075) [ 229.700192][ T9075] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 229.762527][ T9075] BTRFS info (device loop3): metadata ratio 2 [ 229.796742][ T9075] BTRFS info (device loop3): force zlib compression, level 3 [ 229.807776][ T9075] BTRFS info (device loop3): enabling auto defrag [ 229.814738][ T9075] BTRFS info (device loop3): max_inline at 0 [ 229.821072][ T9075] BTRFS info (device loop3): using free space tree [ 229.828202][ T9075] BTRFS info (device loop3): has skinny extents [ 229.970141][ T9114] loop7: detected capacity change from 0 to 2048 [ 230.051657][ T9114] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.143612][ T9128] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.191546][ T7025] udevd[7025]: incorrect nilfs2 checksum on /dev/loop7 [ 230.262213][ T9127] loop5: detected capacity change from 0 to 1024 [ 230.341337][ T9133] loop8: detected capacity change from 0 to 128 [ 230.381960][ T9075] BTRFS error (device loop3): target device is invalid! [ 230.402916][ T9127] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 230.421849][ T9127] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 230.508562][ T9145] EXT4-fs (loop4): Ignoring removed orlov option [ 230.528080][ T9127] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1399'. [ 230.613976][ T9133] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.672639][ T9133] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.734674][ T9145] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 230.781110][ T9145] EXT4-fs error (device loop4): __ext4_new_inode:1292: comm syz.4.1403: failed to insert inode 12: doubly allocated? [ 231.637579][ T9165] set_capacity_and_notify: 2 callbacks suppressed [ 231.637597][ T9165] loop5: detected capacity change from 0 to 512 [ 231.858205][ T9179] loop7: detected capacity change from 0 to 512 [ 231.875427][ T9165] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.906193][ T9184] netlink: 'syz.3.1416': attribute type 6 has an invalid length. [ 231.920694][ T9165] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.941363][ T9179] EXT4-fs (loop7): Ignoring removed bh option [ 232.000384][ T9179] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 232.013230][ T9165] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1410: corrupted inode contents [ 232.082189][ T9179] EXT4-fs (loop7): 1 truncate cleaned up [ 232.146148][ T9179] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 232.162611][ T9165] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.1410: mark_inode_dirty error [ 232.249674][ T9165] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.1410: corrupted inode contents [ 232.289449][ T9179] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1414: bg 0: block 465: padding at end of block bitmap is not set [ 232.330974][ T9165] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.1410: mark_inode_dirty error [ 232.398684][ T9179] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 232.426255][ T9182] loop4: detected capacity change from 0 to 32768 [ 232.441414][ T9165] EXT4-fs error (device loop5): ext4_lookup:1855: inode #19: comm syz.5.1410: 'file0' linked to parent dir [ 232.446151][ T9179] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.446151][ T9179] [ 232.511292][ T9179] EXT4-fs (loop7): Total free blocks count 0 [ 232.521533][ T9179] EXT4-fs (loop7): Free/Dirty block details [ 232.529313][ T9182] XFS: ikeep mount option is deprecated. [ 232.589117][ T9179] EXT4-fs (loop7): free_blocks=0 [ 232.631728][ T9179] EXT4-fs (loop7): dirty_blocks=66 [ 232.681025][ T9182] XFS (loop4): Mounting V5 Filesystem [ 232.762521][ T9179] EXT4-fs (loop7): Block reservation details [ 232.768577][ T9179] EXT4-fs (loop7): i_reserved_data_blocks=66 [ 232.795471][ T9182] XFS (loop4): Ending clean mount [ 232.797203][ T9190] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 232.807586][ T9182] XFS (loop4): Quotacheck needed: Please wait. [ 232.853991][ T9190] EXT4-fs (loop7): This should not happen!! Data will be lost [ 232.853991][ T9190] [ 232.884664][ T9182] XFS (loop4): Quotacheck: Done. [ 249.672716][ T5576] Bluetooth: hci5: command 0x0409 tx timeout [ 250.952684][ T5576] Bluetooth: hci7: command 0x0409 tx timeout [ 251.032621][ T5576] Bluetooth: hci8: command 0x0409 tx timeout [ 251.112618][ T5576] Bluetooth: hci9: command 0x0409 tx timeout [ 251.752961][ T5576] Bluetooth: hci5: command 0x041b tx timeout [ 253.032754][ T5576] Bluetooth: hci7: command 0x041b tx timeout [ 253.112653][ T5576] Bluetooth: hci8: command 0x041b tx timeout [ 253.193000][ T5576] Bluetooth: hci9: command 0x041b tx timeout [ 253.832797][ T5318] Bluetooth: hci5: command 0x040f tx timeout [ 255.114236][ T5318] Bluetooth: hci7: command 0x040f tx timeout [ 255.192620][ T5318] Bluetooth: hci8: command 0x040f tx timeout [ 255.272623][ T5318] Bluetooth: hci9: command 0x040f tx timeout [ 255.755302][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761657][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.912736][ T5318] Bluetooth: hci5: command 0x0419 tx timeout [ 257.192747][ T5318] Bluetooth: hci7: command 0x0419 tx timeout [ 257.272644][ T5318] Bluetooth: hci8: command 0x0419 tx timeout [ 257.352608][ T5318] Bluetooth: hci9: command 0x0419 tx timeout [ 273.192579][ T5576] Bluetooth: hci3: command 0x0406 tx timeout [ 310.152596][ T5576] Bluetooth: hci10: command 0x0409 tx timeout [ 311.512571][ T5318] Bluetooth: hci12: command 0x0409 tx timeout [ 311.519794][ T5318] Bluetooth: hci13: command 0x0409 tx timeout [ 311.592840][ T5318] Bluetooth: hci14: command 0x0409 tx timeout [ 312.232641][ T5318] Bluetooth: hci10: command 0x041b tx timeout [ 313.592706][ T5318] Bluetooth: hci13: command 0x041b tx timeout [ 313.599948][ T5318] Bluetooth: hci12: command 0x041b tx timeout [ 313.672810][ T5318] Bluetooth: hci14: command 0x041b tx timeout [ 314.312626][ T5318] Bluetooth: hci10: command 0x040f tx timeout [ 315.672566][ T5318] Bluetooth: hci12: command 0x040f tx timeout [ 315.679645][ T5318] Bluetooth: hci13: command 0x040f tx timeout [ 315.752733][ T5318] Bluetooth: hci14: command 0x040f tx timeout [ 316.392678][ T5318] Bluetooth: hci10: command 0x0419 tx timeout [ 317.195190][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201576][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.752653][ T5318] Bluetooth: hci13: command 0x0419 tx timeout [ 317.765260][ T5318] Bluetooth: hci12: command 0x0419 tx timeout [ 317.832898][ T5318] Bluetooth: hci14: command 0x0419 tx timeout [ 355.112568][ T5715] Bluetooth: hci0: command 0x0406 tx timeout [ 370.312567][ T5576] Bluetooth: hci15: command 0x0409 tx timeout [ 370.472604][ T5576] Bluetooth: hci5: command 0x0406 tx timeout [ 371.272641][ T5576] Bluetooth: hci16: command 0x0409 tx timeout [ 371.992661][ T5576] Bluetooth: hci19: command 0x0409 tx timeout [ 371.999430][ T5576] Bluetooth: hci17: command 0x0409 tx timeout [ 372.392743][ T5576] Bluetooth: hci15: command 0x041b tx timeout [ 373.352641][ T5576] Bluetooth: hci16: command 0x041b tx timeout [ 374.072718][ T5576] Bluetooth: hci17: command 0x041b tx timeout [ 374.080114][ T5576] Bluetooth: hci19: command 0x041b tx timeout [ 374.472668][ T5576] Bluetooth: hci15: command 0x040f tx timeout [ 375.432648][ T5715] Bluetooth: hci16: command 0x040f tx timeout [ 375.592613][ T5715] Bluetooth: hci7: command 0x0406 tx timeout [ 375.598734][ T5715] Bluetooth: hci8: command 0x0406 tx timeout [ 375.612530][ T5715] Bluetooth: hci9: command 0x0406 tx timeout [ 376.152678][ T5715] Bluetooth: hci19: command 0x040f tx timeout [ 376.159924][ T5715] Bluetooth: hci17: command 0x040f tx timeout [ 376.552609][ T5715] Bluetooth: hci15: command 0x0419 tx timeout [ 377.512617][ T5715] Bluetooth: hci16: command 0x0419 tx timeout [ 378.232708][ T5715] Bluetooth: hci17: command 0x0419 tx timeout [ 378.239053][ T5715] Bluetooth: hci19: command 0x0419 tx timeout [ 378.635186][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641668][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.312621][ T27] INFO: task kworker/u4:1:144 blocked for more than 143 seconds. [ 386.320410][ T27] Not tainted syzkaller #0 [ 386.340804][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.349822][ T27] task:kworker/u4:1 state:D stack:21336 pid: 144 ppid: 2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 386.367001][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 386.398410][ T27] Call Trace: [ 386.401767][ T27] [ 386.446829][ T27] __schedule+0x11ef/0x43c0 [ 386.451524][ T27] ? mark_lock+0x94/0x320 [ 386.472279][ T27] ? release_firmware_map_entry+0x190/0x190 [ 386.478257][ T27] ? verify_lock_unused+0x140/0x140 [ 386.484710][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 386.490839][ T27] ? kthread_data+0x4b/0xc0 [ 386.502308][ T27] schedule+0x11b/0x1e0 [ 386.506523][ T27] schedule_timeout+0xbd/0x2d0 [ 386.511305][ T27] ? console_conditional_schedule+0x40/0x40 [ 386.526139][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 386.536612][ T27] ? lock_chain_count+0x20/0x20 [ 386.541508][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 386.549692][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 386.559450][ T27] do_wait_for_common+0x2a2/0x450 [ 386.567238][ T27] ? console_conditional_schedule+0x40/0x40 [ 386.577388][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 386.588893][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.598363][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.606783][ T27] wait_for_completion+0x48/0x60 [ 386.612000][ T27] __synchronize_srcu+0x2bb/0x350 [ 386.621409][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 386.629952][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 386.641973][ T27] ? __rwlock_init+0x140/0x140 [ 386.650185][ T27] ? synchronize_srcu+0x192/0x1b0 [ 386.659392][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 386.668543][ T27] process_one_work+0x85f/0x1010 [ 386.677853][ T27] ? worker_detach_from_pool+0x240/0x240 [ 386.687106][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 386.697966][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.706117][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.711726][ T27] ? wq_worker_running+0x97/0x170 [ 386.725876][ T27] worker_thread+0xaa6/0x1290 [ 386.730741][ T27] kthread+0x436/0x520 [ 386.737923][ T27] ? rcu_lock_release+0x20/0x20 [ 386.748877][ T27] ? kthread_blkcg+0xd0/0xd0 [ 386.756438][ T27] ret_from_fork+0x1f/0x30 [ 386.760911][ T27] [ 386.768177][ T27] INFO: task kworker/u4:5:3066 blocked for more than 143 seconds. [ 386.779240][ T27] Not tainted syzkaller #0 [ 386.788166][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.807479][ T27] task:kworker/u4:5 state:D stack:22096 pid: 3066 ppid: 2 flags:0x00004000 [ 386.820624][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 386.831746][ T27] Call Trace: [ 386.838266][ T27] [ 386.841234][ T27] __schedule+0x11ef/0x43c0 [ 386.849750][ T27] ? release_firmware_map_entry+0x190/0x190 [ 386.860617][ T27] ? verify_lock_unused+0x140/0x140 [ 386.869892][ T27] ? kthread_data+0x4b/0xc0 [ 386.879027][ T27] schedule+0x11b/0x1e0 [ 386.887201][ T27] schedule_timeout+0xbd/0x2d0 [ 386.892105][ T27] ? console_conditional_schedule+0x40/0x40 [ 386.901040][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 386.911100][ T27] ? lock_chain_count+0x20/0x20 [ 386.920358][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 386.929658][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 386.938095][ T27] do_wait_for_common+0x2a2/0x450 [ 386.947138][ T27] ? console_conditional_schedule+0x40/0x40 [ 386.964595][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 386.971268][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.977736][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.983682][ T27] wait_for_completion+0x48/0x60 [ 386.988647][ T27] __synchronize_srcu+0x2bb/0x350 [ 386.994233][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 387.000039][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 387.006028][ T27] ? __rwlock_init+0x140/0x140 [ 387.010820][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 387.016946][ T27] ? synchronize_srcu+0x192/0x1b0 [ 387.022003][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 387.029776][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 387.036799][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 387.041859][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 387.047895][ T27] process_one_work+0x85f/0x1010 [ 387.053469][ T27] ? worker_detach_from_pool+0x240/0x240 [ 387.059155][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 387.064808][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 387.069874][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 387.078151][ T27] ? wq_worker_running+0x97/0x170 [ 387.084362][ T27] worker_thread+0xaa6/0x1290 [ 387.089082][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.094954][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.101038][ T27] kthread+0x436/0x520 [ 387.105579][ T27] ? rcu_lock_release+0x20/0x20 [ 387.110465][ T27] ? kthread_blkcg+0xd0/0xd0 [ 387.115817][ T27] ret_from_fork+0x1f/0x30 [ 387.120294][ T27] [ 387.123700][ T27] INFO: task syz-executor:4193 blocked for more than 144 seconds. [ 387.131538][ T27] Not tainted syzkaller #0 [ 387.138550][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.147599][ T27] task:syz-executor state:D stack:21840 pid: 4193 ppid: 1 flags:0x00004004 [ 387.157339][ T27] Call Trace: [ 387.160655][ T27] [ 387.163997][ T27] __schedule+0x11ef/0x43c0 [ 387.168541][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 387.175447][ T27] ? lock_chain_count+0x20/0x20 [ 387.180357][ T27] ? __rwlock_init+0x140/0x140 [ 387.187871][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 387.194408][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.199736][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.206081][ T27] ? release_firmware_map_entry+0x190/0x190 [ 387.212010][ T27] ? __might_sleep+0xf0/0xf0 [ 387.217212][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 387.222590][ T27] schedule+0x11b/0x1e0 [ 387.226779][ T27] synchronize_rcu_expedited+0x680/0x750 [ 387.233015][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 387.238646][ T27] ? init_wait_entry+0xd0/0xd0 [ 387.245344][ T27] ? mark_lock+0x94/0x320 [ 387.249818][ T27] ? lock_chain_count+0x20/0x20 [ 387.256065][ T27] ? namespace_unlock+0x1d7/0x430 [ 387.261130][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 387.266508][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.271828][ T27] ? slab_free_freelist_hook+0xea/0x170 [ 387.278048][ T27] ? shrink_dentry_list+0x671/0x680 [ 387.283518][ T27] ? up_write+0x1bb/0x420 [ 387.287880][ T27] namespace_unlock+0x23f/0x430 [ 387.295475][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 387.300596][ T27] ? umount_tree+0xe20/0xe20 [ 387.305571][ T27] ? umount_mnt+0x2c0/0x2c0 [ 387.310106][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 387.316040][ T27] path_umount+0xf64/0xfd0 [ 387.320509][ T27] ? __x64_sys_umount+0x12d/0x170 [ 387.325940][ T27] ? namespace_unlock+0x430/0x430 [ 387.331016][ T27] ? user_path_at_empty+0x13e/0x190 [ 387.336869][ T27] __x64_sys_umount+0x12d/0x170 [ 387.341752][ T27] ? path_umount+0xfd0/0xfd0 [ 387.346743][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.352080][ T27] do_syscall_64+0x4c/0xa0 [ 387.358570][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.363531][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.368279][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.374783][ T27] RIP: 0033:0x7f0a42e99097 [ 387.379865][ T27] RSP: 002b:00007ffc3685baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 387.388779][ T27] RAX: ffffffffffffffda RBX: 00007f0a42f2d1ca RCX: 00007f0a42e99097 [ 387.397308][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3685bbb0 [ 387.407762][ T27] RBP: 00007ffc3685bbb0 R08: 00007ffc3685cbb0 R09: 00000000ffffffff [ 387.416942][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3685cc40 [ 387.425214][ T27] R13: 00007f0a42f2d1ca R14: 0000000000038e05 R15: 00007ffc3685cc80 [ 387.433834][ T27] [ 387.437067][ T27] INFO: task syz-executor:4912 blocked for more than 144 seconds. [ 387.445311][ T27] Not tainted syzkaller #0 [ 387.450270][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.465049][ T27] task:syz-executor state:D stack:21968 pid: 4912 ppid: 1 flags:0x00004004 [ 387.475181][ T27] Call Trace: [ 387.478494][ T27] [ 387.481447][ T27] __schedule+0x11ef/0x43c0 [ 387.486424][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 387.492911][ T27] ? lock_chain_count+0x20/0x20 [ 387.497808][ T27] ? __rwlock_init+0x140/0x140 [ 387.503270][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 387.509214][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.517519][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.523779][ T27] ? release_firmware_map_entry+0x190/0x190 [ 387.529714][ T27] ? __might_sleep+0xf0/0xf0 [ 387.535111][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 387.540185][ T27] schedule+0x11b/0x1e0 [ 387.544728][ T27] synchronize_rcu_expedited+0x680/0x750 [ 387.550425][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 387.556002][ T27] ? init_wait_entry+0xd0/0xd0 [ 387.560794][ T27] ? mark_lock+0x94/0x320 [ 387.565615][ T27] ? lock_chain_count+0x20/0x20 [ 387.570664][ T27] ? namespace_unlock+0x1d7/0x430 [ 387.577847][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 387.584094][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.589343][ T27] ? slab_free_freelist_hook+0xea/0x170 [ 387.595541][ T27] ? shrink_dentry_list+0x671/0x680 [ 387.600765][ T27] ? up_write+0x1bb/0x420 [ 387.605492][ T27] namespace_unlock+0x23f/0x430 [ 387.610373][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 387.615956][ T27] ? umount_tree+0xe20/0xe20 [ 387.620691][ T27] ? umount_mnt+0x2c0/0x2c0 [ 387.627998][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 387.633779][ T27] path_umount+0xf64/0xfd0 [ 387.638249][ T27] ? __x64_sys_umount+0x12d/0x170 [ 387.643796][ T27] ? namespace_unlock+0x430/0x430 [ 387.648863][ T27] ? user_path_at_empty+0x13e/0x190 [ 387.654652][ T27] __x64_sys_umount+0x12d/0x170 [ 387.659620][ T27] ? path_umount+0xfd0/0xfd0 [ 387.664616][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.669852][ T27] do_syscall_64+0x4c/0xa0 [ 387.675204][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.679919][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.686579][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.693002][ T27] RIP: 0033:0x7f11b326a097 [ 387.697446][ T27] RSP: 002b:00007fffeafedce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 387.706291][ T27] RAX: ffffffffffffffda RBX: 00007f11b32fe1ca RCX: 00007f11b326a097 [ 387.714732][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffeafedda0 [ 387.723004][ T27] RBP: 00007fffeafedda0 R08: 00007fffeafeeda0 R09: 00000000ffffffff [ 387.731003][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffeafeee30 [ 387.741977][ T27] R13: 00007f11b32fe1ca R14: 0000000000038c42 R15: 00007fffeafeee70 [ 387.751022][ T27] [ 387.754729][ T27] INFO: task kworker/0:12:5313 blocked for more than 144 seconds. [ 387.764199][ T27] Not tainted syzkaller #0 [ 387.769259][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.778655][ T27] task:kworker/0:12 state:D stack:23952 pid: 5313 ppid: 2 flags:0x00004000 [ 387.788338][ T27] Workqueue: events pwq_unbound_release_workfn [ 387.796462][ T27] Call Trace: [ 387.799773][ T27] [ 387.803045][ T27] __schedule+0x11ef/0x43c0 [ 387.807613][ T27] ? release_firmware_map_entry+0x190/0x190 [ 387.814080][ T27] ? try_to_wake_up+0x6cf/0x1050 [ 387.819051][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 387.824474][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 387.829698][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.835805][ T27] schedule+0x11b/0x1e0 [ 387.840005][ T27] synchronize_rcu_expedited+0x680/0x750 [ 387.848262][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 387.854397][ T27] ? init_wait_entry+0xd0/0xd0 [ 387.859228][ T27] ? mark_lock+0x94/0x320 [ 387.863969][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 387.869983][ T27] ? lock_chain_count+0x20/0x20 [ 387.875436][ T27] ? cpu_online+0x30/0x30 [ 387.879805][ T27] synchronize_rcu+0x119/0x1e0 [ 387.884906][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 387.889877][ T27] ? rcu_force_quiescent_state+0x230/0x230 [ 387.896255][ T27] lockdep_unregister_key+0x47c/0x520 [ 387.901660][ T27] ? lockdep_reset_lock+0x300/0x300 [ 387.908742][ T27] ? read_lock_is_recursive+0x10/0x10 [ 387.914826][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.920858][ T27] ? _raw_spin_unlock+0x40/0x40 [ 387.926091][ T27] pwq_unbound_release_workfn+0x262/0x2b0 [ 387.931941][ T27] process_one_work+0x85f/0x1010 [ 387.937482][ T27] ? worker_detach_from_pool+0x240/0x240 [ 387.943464][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 387.948778][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 387.956568][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 387.962507][ T27] ? wq_worker_running+0x97/0x170 [ 387.967920][ T27] worker_thread+0xaa6/0x1290 [ 387.973305][ T27] kthread+0x436/0x520 [ 387.977495][ T27] ? rcu_lock_release+0x20/0x20 [ 387.982739][ T27] ? kthread_blkcg+0xd0/0xd0 [ 387.987358][ T27] ret_from_fork+0x1f/0x30 [ 387.991815][ T27] [ 387.995618][ T27] INFO: task syz-executor:6334 blocked for more than 145 seconds. [ 388.003794][ T27] Not tainted syzkaller #0 [ 388.008747][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.019458][ T27] task:syz-executor state:D stack:21936 pid: 6334 ppid: 1 flags:0x00004004 [ 388.029815][ T27] Call Trace: [ 388.033822][ T27] [ 388.036902][ T27] __schedule+0x11ef/0x43c0 [ 388.041532][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.048299][ T27] ? lock_chain_count+0x20/0x20 [ 388.053721][ T27] ? __rwlock_init+0x140/0x140 [ 388.058527][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 388.066910][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 388.072166][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.079076][ T27] ? release_firmware_map_entry+0x190/0x190 [ 388.085297][ T27] ? __might_sleep+0xf0/0xf0 [ 388.089912][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 388.095583][ T27] schedule+0x11b/0x1e0 [ 388.099782][ T27] synchronize_rcu_expedited+0x680/0x750 [ 388.106131][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 388.111117][ T27] ? init_wait_entry+0xd0/0xd0 [ 388.116559][ T27] ? mark_lock+0x94/0x320 [ 388.121011][ T27] ? lock_chain_count+0x20/0x20 [ 388.127670][ T27] ? namespace_unlock+0x1d7/0x430 [ 388.133439][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 388.138639][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 388.144205][ T27] ? slab_free_freelist_hook+0xea/0x170 [ 388.150521][ T27] ? shrink_dentry_list+0x671/0x680 [ 388.156329][ T27] ? up_write+0x1bb/0x420 [ 388.160776][ T27] namespace_unlock+0x23f/0x430 [ 388.166100][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 388.171248][ T27] ? umount_tree+0xe20/0xe20 [ 388.178558][ T27] ? umount_mnt+0x2c0/0x2c0 [ 388.184082][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 388.189356][ T27] path_umount+0xf64/0xfd0 [ 388.194624][ T27] ? __x64_sys_umount+0x12d/0x170 [ 388.199694][ T27] ? namespace_unlock+0x430/0x430 [ 388.205096][ T27] ? user_path_at_empty+0x13e/0x190 [ 388.210341][ T27] __x64_sys_umount+0x12d/0x170 [ 388.215781][ T27] ? path_umount+0xfd0/0xfd0 [ 388.220405][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 388.226349][ T27] do_syscall_64+0x4c/0xa0 [ 388.230799][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.237990][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.243027][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.248959][ T27] RIP: 0033:0x7f79a91f8097 [ 388.254051][ T27] RSP: 002b:00007ffce2654378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 388.262749][ T27] RAX: ffffffffffffffda RBX: 00007f79a928c1ca RCX: 00007f79a91f8097 [ 388.270942][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce2654430 [ 388.279492][ T27] RBP: 00007ffce2654430 R08: 00007ffce2655430 R09: 00000000ffffffff [ 388.289979][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce26554c0 [ 388.298479][ T27] R13: 00007f79a928c1ca R14: 0000000000038d32 R15: 00007ffce2655500 [ 388.306803][ T27] [ 388.309867][ T27] INFO: task dhcpcd:9195 blocked for more than 145 seconds. [ 388.318404][ T27] Not tainted syzkaller #0 [ 388.323670][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.332912][ T27] task:dhcpcd state:D stack:28368 pid: 9195 ppid: 3856 flags:0x00004002 [ 388.344262][ T27] Call Trace: [ 388.347580][ T27] [ 388.350552][ T27] __schedule+0x11ef/0x43c0 [ 388.356339][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.362612][ T27] ? lock_chain_count+0x20/0x20 [ 388.367491][ T27] ? __rwlock_init+0x140/0x140 [ 388.372831][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 388.378845][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 388.384696][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.390634][ T27] ? release_firmware_map_entry+0x190/0x190 [ 388.399236][ T27] ? queue_work_on+0x196/0x1f0 [ 388.404335][ T27] ? __might_sleep+0xf0/0xf0 [ 388.408961][ T27] ? wq_worker_last_func+0x40/0x40 [ 388.414655][ T27] schedule+0x11b/0x1e0 [ 388.418842][ T27] synchronize_rcu_expedited+0x5c1/0x750 [ 388.424848][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 388.429821][ T27] ? rcu_exp_sel_wait_wake+0x1b30/0x1b30 [ 388.436016][ T27] ? verify_lock_unused+0x140/0x140 [ 388.441339][ T27] ? verify_lock_unused+0x140/0x140 [ 388.446874][ T27] ? verify_lock_unused+0x140/0x140 [ 388.452102][ T27] ? verify_lock_unused+0x140/0x140 [ 388.459490][ T27] ? mark_lock+0x94/0x320 [ 388.464187][ T27] ? aa_label_sk_perm+0x3d0/0x530 [ 388.469405][ T27] ? init_wait_entry+0xd0/0xd0 [ 388.474852][ T27] synchronize_rcu+0x119/0x1e0 [ 388.479745][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 388.485112][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 388.490691][ T27] ? __might_sleep+0xf0/0xf0 [ 388.495822][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 388.500883][ T27] ? rcu_lock_release+0x5/0x20 [ 388.508134][ T27] __unregister_prot_hook+0x3f7/0x570 [ 388.514840][ T27] packet_do_bind+0x50a/0xda0 [ 388.519586][ T27] __sys_bind+0x2e9/0x3e0 [ 388.524939][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 388.530467][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 388.536244][ T27] __x64_sys_bind+0x76/0x80 [ 388.540900][ T27] do_syscall_64+0x4c/0xa0 [ 388.545708][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.550418][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.555809][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.561737][ T27] RIP: 0033:0x7ff5844b32d7 [ 388.567872][ T27] RSP: 002b:00007fff34b98b18 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 388.576785][ T27] RAX: ffffffffffffffda RBX: 00005619fa39a790 RCX: 00007ff5844b32d7 [ 388.585295][ T27] RDX: 0000000000000014 RSI: 00007fff34b98b30 RDI: 0000000000000003 [ 388.594054][ T27] RBP: 00005619caf5f4b0 R08: 00007ff584582ac0 R09: 0000000000000000 [ 388.602160][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 388.610726][ T27] R13: 00005619fa396f00 R14: 0000000000000000 R15: 00005619caf74ac0 [ 388.621434][ T27] [ 388.624752][ T27] INFO: task dhcpcd:9198 blocked for more than 145 seconds. [ 388.632051][ T27] Not tainted syzkaller #0 [ 388.637779][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.646703][ T27] task:dhcpcd state:D stack:28144 pid: 9198 ppid: 3856 flags:0x00004002 [ 388.656412][ T27] Call Trace: [ 388.659714][ T27] [ 388.662970][ T27] __schedule+0x11ef/0x43c0 [ 388.667531][ T27] ? rcu_lock_acquire+0x30/0x30 [ 388.674388][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 388.679986][ T27] ? release_firmware_map_entry+0x190/0x190 [ 388.686987][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 388.692047][ T27] ? __mutex_trylock_common+0x86/0x260 [ 388.698083][ T27] ? rcu_lock_release+0x20/0x20 [ 388.703179][ T27] schedule+0x11b/0x1e0 [ 388.707460][ T27] schedule_preempt_disabled+0xf/0x20 [ 388.713406][ T27] __mutex_lock_common+0xcfc/0x2400 [ 388.718650][ T27] ? synchronize_rcu_expedited+0x3a5/0x750 [ 388.726859][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 388.732122][ T27] ? __rwlock_init+0x140/0x140 [ 388.737629][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 388.743124][ T27] mutex_lock_nested+0x17/0x20 [ 388.747919][ T27] synchronize_rcu_expedited+0x3a5/0x750 [ 388.754138][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 388.759226][ T27] ? verify_lock_unused+0x140/0x140 [ 388.764797][ T27] ? verify_lock_unused+0x140/0x140 [ 388.770022][ T27] ? verify_lock_unused+0x140/0x140 [ 388.775816][ T27] ? verify_lock_unused+0x140/0x140 [ 388.781042][ T27] ? mark_lock+0x94/0x320 [ 388.787220][ T27] ? aa_label_sk_perm+0x3d0/0x530 [ 388.792783][ T27] synchronize_rcu+0x119/0x1e0 [ 388.797580][ T27] ? kvfree_call_rcu+0x7d0/0x7d0 [ 388.802891][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 388.808481][ T27] ? __might_sleep+0xf0/0xf0 [ 388.813625][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 388.818684][ T27] ? rcu_lock_release+0x5/0x20 [ 388.823995][ T27] __unregister_prot_hook+0x3f7/0x570 [ 388.829401][ T27] packet_do_bind+0x50a/0xda0 [ 388.836816][ T27] __sys_bind+0x2e9/0x3e0 [ 388.841199][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 388.847546][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 388.853057][ T27] __x64_sys_bind+0x76/0x80 [ 388.857594][ T27] do_syscall_64+0x4c/0xa0 [ 388.862030][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.867150][ T27] ? clear_bhb_loop+0x30/0x80 [ 388.871857][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 388.897771][ T27] RIP: 0033:0x7ff5844b32d7 [ 388.908698][ T27] RSP: 002b:00007fff34b98b18 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 388.918255][ T27] RAX: ffffffffffffffda RBX: 00005619fa39a790 RCX: 00007ff5844b32d7 [ 388.933108][ T27] RDX: 0000000000000014 RSI: 00007fff34b98b30 RDI: 0000000000000003 [ 388.941242][ T27] RBP: 00005619caf5f4b0 R08: 00007ff584582ac0 R09: 0000000000000000 [ 388.958375][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 388.971043][ T27] R13: 00005619fa396d30 R14: 0000000000000000 R15: 00005619caf74ac0 [ 388.986149][ T27] [ 388.989363][ T27] INFO: task syz.3.1422:9204 blocked for more than 146 seconds. [ 388.998852][ T27] Not tainted syzkaller #0 [ 389.010377][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.020765][ T27] task:syz.3.1422 state:D stack:27472 pid: 9204 ppid: 4194 flags:0x00004004 [ 389.040735][ T27] Call Trace: [ 389.044395][ T27] [ 389.048777][ T27] __schedule+0x11ef/0x43c0 [ 389.058756][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 389.068443][ T27] ? lock_chain_count+0x20/0x20 [ 389.078837][ T27] ? __rwlock_init+0x140/0x140 [ 389.085098][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 389.091214][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 389.104244][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.110209][ T27] ? release_firmware_map_entry+0x190/0x190 [ 389.122157][ T27] ? __might_sleep+0xf0/0xf0 [ 389.127704][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 389.133345][ T27] schedule+0x11b/0x1e0 [ 389.137537][ T27] synchronize_rcu_expedited+0x680/0x750 [ 389.143570][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 389.148616][ T27] ? mark_lock+0x94/0x320 [ 389.153512][ T27] ? init_wait_entry+0xd0/0xd0 [ 389.158307][ T27] ? __lock_acquire+0x12e8/0x7d10 [ 389.163683][ T27] ? __might_sleep+0xf0/0xf0 [ 389.168318][ T27] dev_deactivate_many+0x605/0xc10 [ 389.176064][ T27] ? 0xffffffffa0018000 [ 389.180283][ T27] ? is_bpf_text_address+0x254/0x270 [ 389.185926][ T27] __dev_close_many+0x164/0x2b0 [ 389.190807][ T27] ? dev_close_many+0x400/0x400 [ 389.196366][ T27] ? mark_lock+0x94/0x320 [ 389.200731][ T27] dev_close_many+0x21f/0x400 [ 389.205830][ T27] ? __dev_open+0x430/0x430 [ 389.210372][ T27] unregister_netdevice_many+0x481/0x19f0 [ 389.216672][ T27] ? rcu_lock_release+0x20/0x20 [ 389.221567][ T27] ? alloc_netdev_mqs+0xc40/0xc40 [ 389.228382][ T27] ? __mutex_lock_common+0x465/0x2400 [ 389.234392][ T27] ? memset+0x1e/0x40 [ 389.238513][ T27] unregister_netdevice_queue+0x324/0x370 [ 389.244674][ T27] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 389.251298][ T27] ? list_netdevice+0x450/0x450 [ 389.256734][ T27] ppp_release+0xec/0x1f0 [ 389.261099][ T27] ? ppp_open+0x70/0x70 [ 389.265656][ T27] __fput+0x234/0x930 [ 389.269765][ T27] task_work_run+0x125/0x1a0 [ 389.274925][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 389.280337][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 389.288509][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 389.295019][ T27] do_syscall_64+0x58/0xa0 [ 389.299478][ T27] ? clear_bhb_loop+0x30/0x80 [ 389.304527][ T27] ? clear_bhb_loop+0x30/0x80 [ 389.309230][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.315669][ T27] RIP: 0033:0x7f4f2d942e59 [ 389.320110][ T27] RSP: 002b:00007ffd11f38c88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 389.329185][ T27] RAX: 0000000000000000 RBX: 00007ffd11f38d70 RCX: 00007f4f2d942e59 [ 389.339016][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 389.347291][ T27] RBP: 0000000000038ce0 R08: 0000000000000001 R09: 0000000000000000 [ 389.355894][ T27] R10: 0000001b31c20000 R11: 0000000000000246 R12: 00007ffd11f38db0 [ 389.364367][ T27] R13: 00007f4f2dbbbfac R14: 0000000000038d3f R15: 00007f4f2dbbbfa0 [ 389.372855][ T27] [ 389.375953][ T27] INFO: task dhcpcd:9209 blocked for more than 146 seconds. [ 389.384359][ T27] Not tainted syzkaller #0 [ 389.389417][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.400820][ T27] task:dhcpcd state:D stack:28016 pid: 9209 ppid: 3856 flags:0x00004002 [ 389.410348][ T27] Call Trace: [ 389.414117][ T27] [ 389.417081][ T27] __schedule+0x11ef/0x43c0 [ 389.421617][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 389.428073][ T27] ? lock_chain_count+0x20/0x20 [ 389.433497][ T27] ? __rwlock_init+0x140/0x140 [ 389.438463][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 389.446176][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 389.451507][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.458232][ T27] ? release_firmware_map_entry+0x190/0x190 [ 389.464397][ T27] ? __might_sleep+0xf0/0xf0 [ 389.469034][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 389.474629][ T27] schedule+0x11b/0x1e0 [ 389.478913][ T27] synchronize_rcu_expedited+0x680/0x750 [ 389.484888][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 389.489849][ T27] ? mark_lock+0x94/0x320 [ 389.494776][ T27] ? init_wait_entry+0xd0/0xd0 [ 389.499685][ T27] ? __unregister_prot_hook+0x3f2/0x570 [ 389.507645][ T27] ? __might_sleep+0xf0/0xf0 [ 389.512764][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 389.517820][ T27] ? rcu_lock_release+0x5/0x20 [ 389.522928][ T27] __unregister_prot_hook+0x3f7/0x570 [ 389.528339][ T27] packet_do_bind+0x50a/0xda0 [ 389.533583][ T27] __sys_bind+0x2e9/0x3e0 [ 389.538068][ T27] ? __ia32_sys_socketpair+0xb0/0xb0 [ 389.543692][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 389.548665][ T27] __x64_sys_bind+0x76/0x80 [ 389.555230][ T27] do_syscall_64+0x4c/0xa0 [ 389.559765][ T27] ? clear_bhb_loop+0x30/0x80 [ 389.564757][ T27] ? clear_bhb_loop+0x30/0x80 [ 389.569462][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.575910][ T27] RIP: 0033:0x7ff5844b32d7 [ 389.580348][ T27] RSP: 002b:00007fff34b98b18 EFLAGS: 00000213 ORIG_RAX: 0000000000000031 [ 389.589121][ T27] RAX: ffffffffffffffda RBX: 00005619fa39a790 RCX: 00007ff5844b32d7 [ 389.597811][ T27] RDX: 0000000000000014 RSI: 00007fff34b98b30 RDI: 0000000000000003 [ 389.606268][ T27] RBP: 00005619caf5f4b0 R08: 00007ff584582ac0 R09: 0000000000000000 [ 389.616902][ T27] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000 [ 389.625463][ T27] R13: 00005619fa3970d0 R14: 0000000000000000 R15: 00005619caf74ac0 [ 389.633941][ T27] [ 389.637022][ T27] [ 389.637022][ T27] Showing all locks held in the system: [ 389.645427][ T27] 1 lock held by khungtaskd/27: [ 389.650383][ T27] #0: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 389.660305][ T27] 2 locks held by kworker/u4:1/144: [ 389.667229][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.678935][ T27] #1: ffffc900016dfd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.689829][ T27] 2 locks held by kworker/u4:5/3066: [ 389.695775][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.707183][ T27] #1: ffffc9000c9efd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.717907][ T27] 2 locks held by getty/3951: [ 389.724932][ T27] #0: ffff88802ccac098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 389.735927][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 389.747021][ T27] 3 locks held by kworker/1:5/4234: [ 389.752849][ T27] 2 locks held by kworker/0:12/5313: [ 389.758249][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.768985][ T27] #1: ffffc90003ddfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.783550][ T27] 3 locks held by kworker/0:17/5318: [ 389.788863][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.799940][ T27] #1: ffffc90003e4fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.810654][ T27] #2: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 389.821615][ T27] 3 locks held by kworker/0:20/5578: [ 389.827139][ T27] #0: ffff888016c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.841575][ T27] #1: ffffc900034dfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.852614][ T27] #2: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xa80 [ 389.862482][ T27] 5 locks held by kworker/u4:9/7521: [ 389.867782][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 389.879410][ T27] #1: ffffc90003427d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 389.891366][ T27] #2: ffff88802bab8688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 389.903655][ T27] #3: ffff8880234a4d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10e0 [ 389.914998][ T27] #4: ffff88802bab9810 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x571/0x10e0 [ 389.925540][ T27] 2 locks held by dhcpcd/9195: [ 389.930331][ T27] #0: ffff88807617c120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 389.940820][ T27] #1: ffffffff8c3235a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 389.954410][ T27] 2 locks held by dhcpcd/9198: [ 389.959224][ T27] #0: ffff888063340120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 389.969426][ T27] #1: ffffffff8c3235a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 389.980931][ T27] 1 lock held by syz.3.1422/9204: [ 389.986243][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x86/0x1f0 [ 389.995689][ T27] 1 lock held by dhcpcd/9209: [ 390.000429][ T27] #0: ffff88805c44e120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.010481][ T27] 1 lock held by dhcpcd/9210: [ 390.017121][ T27] #0: ffff88807a930120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.027103][ T27] 1 lock held by dhcpcd/9211: [ 390.031800][ T27] #0: ffff88807b880120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.042048][ T27] 1 lock held by dhcpcd/9212: [ 390.047172][ T27] #0: ffff88807d704120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.057384][ T27] 1 lock held by syz-executor/9214: [ 390.065009][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.075806][ T27] 1 lock held by syz-executor/9222: [ 390.081032][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.090821][ T27] 1 lock held by syz-executor/9224: [ 390.096502][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.106206][ T27] 1 lock held by syz-executor/9226: [ 390.111417][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.121524][ T27] 1 lock held by syz-executor/9227: [ 390.128434][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.138355][ T27] 1 lock held by dhcpcd/9230: [ 390.143391][ T27] #0: ffff88807e3f0120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.153740][ T27] 1 lock held by dhcpcd/9231: [ 390.158440][ T27] #0: ffff888061ae4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.168540][ T27] 1 lock held by dhcpcd/9232: [ 390.175900][ T27] #0: ffff888077ea6120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.186231][ T27] 1 lock held by dhcpcd/9233: [ 390.190944][ T27] #0: ffff888024ce4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.201617][ T27] 1 lock held by dhcpcd/9234: [ 390.206536][ T27] #0: ffff88801a3a6120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.216784][ T27] 1 lock held by dhcpcd/9235: [ 390.221491][ T27] #0: ffff88807c5d4120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.231558][ T27] 1 lock held by dhcpcd/9236: [ 390.238262][ T27] #0: ffff888075ae2120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.248707][ T27] 1 lock held by dhcpcd/9237: [ 390.253863][ T27] #0: ffff8880189de120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.263814][ T27] 1 lock held by dhcpcd/9238: [ 390.268527][ T27] #0: ffff8880648fa120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.278789][ T27] 1 lock held by dhcpcd/9239: [ 390.285805][ T27] #0: ffff88805c2c0120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.296003][ T27] 1 lock held by dhcpcd/9240: [ 390.300698][ T27] #0: ffff888061538120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.310738][ T27] 1 lock held by dhcpcd/9241: [ 390.315992][ T27] #0: ffff88801f660120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.326161][ T27] 1 lock held by dhcpcd/9242: [ 390.330866][ T27] #0: ffff888020bdc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.341322][ T27] 1 lock held by dhcpcd/9243: [ 390.347757][ T27] #0: ffff888079af0120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.357987][ T27] 1 lock held by dhcpcd/9244: [ 390.362997][ T27] #0: ffff888077a2a120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.373179][ T27] 1 lock held by dhcpcd/9245: [ 390.377925][ T27] #0: ffff88802ad16120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 390.387992][ T27] 1 lock held by syz-executor/9247: [ 390.395784][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.405801][ T27] 1 lock held by syz-executor/9255: [ 390.411052][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.421059][ T27] 1 lock held by syz-executor/9256: [ 390.426573][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.436483][ T27] 1 lock held by syz-executor/9259: [ 390.441875][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.451749][ T27] 1 lock held by syz-executor/9261: [ 390.458842][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.468670][ T27] 1 lock held by syz-executor/9264: [ 390.474600][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.484368][ T27] 1 lock held by syz-executor/9269: [ 390.489586][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.499586][ T27] 1 lock held by syz-executor/9274: [ 390.507176][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.517113][ T27] 1 lock held by syz-executor/9276: [ 390.522664][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.532674][ T27] 1 lock held by syz-executor/9278: [ 390.537892][ T27] #0: ffffffff8d43d3c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ee/0xf30 [ 390.547918][ T27] [ 390.550267][ T27] ============================================= [ 390.550267][ T27] [ 390.559302][ T27] NMI backtrace for cpu 0 [ 390.563642][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 390.570941][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.581027][ T27] Call Trace: [ 390.584350][ T27] [ 390.587306][ T27] dump_stack_lvl+0x188/0x250 [ 390.592049][ T27] ? show_regs_print_info+0x20/0x20 [ 390.597297][ T27] ? load_image+0x400/0x400 [ 390.601836][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 390.607248][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 390.612385][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 390.617347][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 390.623521][ T27] ? _printk+0xda/0x130 [ 390.627693][ T27] ? load_image+0x400/0x400 [ 390.632224][ T27] ? load_image+0x400/0x400 [ 390.636756][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 390.642869][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 390.648891][ T27] watchdog+0xe0f/0xe50 [ 390.653125][ T27] kthread+0x436/0x520 [ 390.657214][ T27] ? hungtask_pm_notify+0x40/0x40 [ 390.662254][ T27] ? kthread_blkcg+0xd0/0xd0 [ 390.666860][ T27] ret_from_fork+0x1f/0x30 [ 390.671310][ T27] [ 390.675033][ T27] Sending NMI from CPU 0 to CPUs 1: [ 390.680276][ C1] NMI backtrace for cpu 1 [ 390.680286][ C1] CPU: 1 PID: 4234 Comm: kworker/1:5 Not tainted syzkaller #0 [ 390.680302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.680311][ C1] Workqueue: events p9_poll_workfn [ 390.680331][ C1] RIP: 0010:check_preemption_disabled+0x37/0x110 [ 390.680351][ C1] Code: 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 79 3b 45 76 65 8b 0d e2 95 45 76 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 <48> 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 [ 390.680363][ C1] RSP: 0018:ffffc9000318f988 EFLAGS: 00000002 [ 390.680375][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 06d63e1031205100 [ 390.680386][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3aa0 RDI: ffffffff8a79fe00 [ 390.680396][ C1] RBP: ffffc9000318fac8 R08: dffffc0000000000 R09: 1ffffffff203aa42 [ 390.680407][ C1] R10: dffffc0000000000 R11: fffffbfff203aa43 R12: ffff88802345f160 [ 390.680417][ C1] R13: 1ffff92000631f44 R14: 0000000000000046 R15: dffffc0000000000 [ 390.680428][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 390.680441][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.680451][ C1] CR2: 00005639ff05aa80 CR3: 000000002af27000 CR4: 00000000003506e0 [ 390.680466][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.680475][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.680484][ C1] Call Trace: [ 390.680489][ C1] [ 390.680495][ C1] lock_acquire+0x1ae/0x400 [ 390.680515][ C1] ? read_lock_is_recursive+0x10/0x10 [ 390.680531][ C1] ? mark_lock+0x94/0x320 [ 390.680544][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 390.680558][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 390.680574][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 390.680587][ C1] ? dma_buf_poll+0x7a4/0x9a0 [ 390.680601][ C1] ? _raw_spin_lock+0x40/0x40 [ 390.680616][ C1] dma_buf_poll+0x7a4/0x9a0 [ 390.680630][ C1] ? dma_buf_llseek+0xf0/0xf0 [ 390.680643][ C1] p9_poll_workfn+0x35b/0x5a0 [ 390.680658][ C1] process_one_work+0x85f/0x1010 [ 390.680678][ C1] ? worker_detach_from_pool+0x240/0x240 [ 390.680692][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 390.680708][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 390.680721][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 390.680734][ C1] ? wq_worker_running+0x97/0x170 [ 390.680748][ C1] worker_thread+0xaa6/0x1290 [ 390.680770][ C1] kthread+0x436/0x520 [ 390.680782][ C1] ? rcu_lock_release+0x20/0x20 [ 390.680795][ C1] ? kthread_blkcg+0xd0/0xd0 [ 390.680809][ C1] ret_from_fork+0x1f/0x30 [ 390.680828][ C1] [ 390.685574][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 390.944616][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 390.951833][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.962004][ T27] Call Trace: [ 390.965301][ T27] [ 390.968246][ T27] dump_stack_lvl+0x188/0x250 [ 390.972947][ T27] ? show_regs_print_info+0x20/0x20 [ 390.978176][ T27] ? load_image+0x400/0x400 [ 390.982723][ T27] panic+0x2e5/0x810 [ 390.986659][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 390.992330][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 390.996861][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 391.002436][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 391.008621][ T27] watchdog+0xe4e/0xe50 [ 391.012805][ T27] kthread+0x436/0x520 [ 391.016886][ T27] ? hungtask_pm_notify+0x40/0x40 [ 391.022012][ T27] ? kthread_blkcg+0xd0/0xd0 [ 391.026623][ T27] ret_from_fork+0x1f/0x30 [ 391.031074][ T27] [ 391.034480][ T27] Kernel Offset: disabled [ 391.038816][ T27] Rebooting in 86400 seconds..