last executing test programs: 8m31.740398269s ago: executing program 32 (id=621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c"], 0x128}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) 7m24.024997253s ago: executing program 33 (id=1192): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x0, 0x0, 0x0) 6m28.835884648s ago: executing program 0 (id=1762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180500006300000000000000feffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf) 6m28.719233071s ago: executing program 0 (id=1765): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x321, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0xffff}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 6m28.623538503s ago: executing program 0 (id=1768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x2c) 6m28.514422886s ago: executing program 0 (id=1769): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000003c0)={[{@gid}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@errors_continue}, {@namecase}]}, 0xfe, 0x153d, &(0x7f00000028c0)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 6m28.174359384s ago: executing program 0 (id=1770): mount(0x0, &(0x7f0000000380)='./proc\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x1f) 6m27.704005696s ago: executing program 0 (id=1773): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 6m27.164143229s ago: executing program 34 (id=1773): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 5m5.597446026s ago: executing program 6 (id=2586): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 5m5.443094109s ago: executing program 6 (id=2588): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x4000) 5m5.278700313s ago: executing program 6 (id=2590): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x52, 0x1, 0x100, 0x4, {0x2}}, 0x14}}, 0x0) 5m5.198322615s ago: executing program 6 (id=2592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m4.499580523s ago: executing program 6 (id=2603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9f"}]}], {0x14}}, 0x94}}, 0x0) 5m2.450489923s ago: executing program 6 (id=2626): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@bridge_dellink={0x34, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x2040, 0x4000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x3ffd, 0x0, 0x0, 0x5}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x8) 5m1.942453196s ago: executing program 35 (id=2626): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@bridge_dellink={0x34, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x2040, 0x4000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x3ffd, 0x0, 0x0, 0x5}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x8) 3m49.291935872s ago: executing program 2 (id=3311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e00"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110001000000000000000000000000000000000000000000000000000e000300"], 0x30}}, 0x0) 3m48.845064563s ago: executing program 2 (id=3318): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x20000008}) 3m48.60225848s ago: executing program 2 (id=3320): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000400)="98ec", &(0x7f0000000500), 0x2}, 0x20) 3m48.346263755s ago: executing program 2 (id=3324): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) 3m47.951944355s ago: executing program 2 (id=3326): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3m47.788958989s ago: executing program 2 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) 3m32.434842029s ago: executing program 36 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) 2m28.127693479s ago: executing program 8 (id=4031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv4/ping_group_range\x00', 0x40242, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, 0x0, {0xc, 0x4, 0x3, 0x5}}, 0xffca) 2m27.948472003s ago: executing program 8 (id=4034): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents64(r0, &(0x7f00000001c0)=""/178, 0xb2) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2m27.494720454s ago: executing program 8 (id=4038): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 2m27.203922512s ago: executing program 8 (id=4041): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 2m26.87486016s ago: executing program 8 (id=4046): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x2) clock_adjtime(0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x9, 0x8, 0x5, 0x0, 0xfffffffffffffff8, 0x101, 0xfffffffffffffffe, 0x103, 0x0, 0x0, 0x9, 0x90, 0xfffffffffffffffe, 0x7a31, 0x4, 0x0, 0x3, 0x2, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0x1, 0x8000000000000005}) keyctl$set_timeout(0xf, r0, 0xe9a) 2m26.412745771s ago: executing program 8 (id=4053): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) 2m25.750271777s ago: executing program 37 (id=4053): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffc000) 2m19.532590141s ago: executing program 9 (id=4114): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYBLOB="26c566eec68f", @ANYBLOB="0000000000000000280012800b0001"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 2m19.339842256s ago: executing program 9 (id=4116): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) 2m19.112826652s ago: executing program 9 (id=4118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="120000001b0000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) 2m18.812226339s ago: executing program 9 (id=4121): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00fbffffff5a505bfd46f7580dd2ea15f3b668cebede3eecc4c69407c292f1d3dfd5aac484104426ec9b25db0706b5634c5e66cff8b681d028399da8ea3af9f39f769c1849cc22e67973c13874a9cd7c6fe66db41742e33d9eee94251e1f927485b96027199d6f1b7e0a35ebc654fe6ed00fa6330c5a0ac2b08017fd80c74035c97a3f1abdcc9dc0219f42ca4e30030c93416b6036b4d8a70b1de9d788f4f1061fd9d787b6082e03cb1d32128a67113d31b990d5b19028d67f7b19017497f33e96c675a35b6187404d626c5bc935b8065d385ec6345d67eecbe37d19a9ce59024756fd60bcf98a3849c69a3c4030ddd9cd1776b83adafb99609e57a84e2ede0ff35aa85b3e4b61980e0b6d668ad2393f1b290d06007100"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 2m18.404814069s ago: executing program 9 (id=4125): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@mcast2}, 0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) 2m17.063936012s ago: executing program 9 (id=4138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x1189d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 2m16.656343222s ago: executing program 38 (id=4138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x1189d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 1m38.781329849s ago: executing program 3 (id=4448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 1m38.550602214s ago: executing program 3 (id=4450): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) ioctl$TIOCMGET(r1, 0x5415, 0x0) 1m38.377798889s ago: executing program 3 (id=4453): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@abort}, {@acl}, {@oldalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x5cb, &(0x7f00000009c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0x1c, &(0x7f0000001100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.212471357s ago: executing program 3 (id=4460): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0xc81}}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 1m36.27292247s ago: executing program 3 (id=4467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='/,0x', 0x4) 1m35.4679123s ago: executing program 3 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) 1m34.930364693s ago: executing program 39 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/enabled\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) 4.250180875s ago: executing program 7 (id=5180): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000000)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5r0b5LDsNdeN/802CRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTG+YvyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5wiN/LKvYs//8/N+Pr/P0hO2clfbyx7c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ+LE9SK/uEFExI0iXtwkCoibRUFRSBQWRUSCKCqKCSNQWEEiFMVFCREVt4iS4laRKEqJ0qKMcKKsKCduE+XF7aKCuEOAuFNUEneJyqKKqCqqibtFdXGPqCFqilriXlFb1BF1RT1xn6gv7hcNxAOioXhQNBIPicbiYdFEPCKaikdFM/GYaC4eFy3EE6KlaCVaizai7f9V/suir3hF9BP9RbIYIAaKV8UgMVgMEUPFMPGaGC5eFyPEGyJFjBSjxJtitHhLjBFvi7FinBgv3hETxEQxSUwWU8RUkSreFdPEe2K6eF/MEDPFLDFbpIk5Yq74QMwT88UC8aFYKD4Si8RisUQsFeniY5EhlolM8YlYLj4VWWKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iM7FD7BS7xG6xR+wV+8TnYr/4QhwQX4ps8dV/Mf/sP+X3AgECJEjQoCEP5IEYiIFYiIU4iIP8kB8iEIF4iIcCUAAKQkEoDIUhARKgGBQDBAQCguJQHKIQhZJQEhIhEUpDaXDgoByUg/JwO1SAClARKkIlqASVoQpUgWpQDapDdagBNaAW1ILaUBvqQl24D+6D+6EBNICG0BAaQSNoDI2hCTSBptAUmkEzaA7NoQW0gJbQElpDa2gLbaEdtIP20B46QkfoBJ2gM3SGJEiCrtAVukE36A7doQf0gJ7QE3pBb+gNL8PL8Aq8Av2hthwAA2EgDIJBMASGwlB4DYbD6/A6vAEpMBJGwZvwJrwFY+AMjIVxMB7GQ3U5ESbBZCA5FVIhFabBNJgO02EGzISZMBvSYA7MhbkwD+bDfPgQFsJH8BEshsWwFNIhHTJgGWRCJiyHs5AFK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22AafwWewE3bCbtgNe2EvfA6fwxfwBaRANmTDQTgIh+AQHIbDkAM5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+HFhG+b7S21IUXIK7TUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GygCwgC8qCsrAsLBNkgiwmi0mUKEmGsrgsHiOEkCVlSZkoE2VpWVo66WQ5WU6Wl+VlBVlBVpR3ykryLllZVpEdXDVZTVaXHV0NWVPWkrVkbVlH1pX1ZD1ZX9aXDWQD2VA2lI1kI9lYPiybyAEwBB6VVybTXI6EFnIUtJStZGvZRr4FT8p2cgy0lx1kR/m0HAdjobNs55Lks7KrnATd5PNyMrwge8ip0FO+JHvJ3rKPfFn2le1dP9lfzoABcqCcDYPkYDlEDpXzoI68MrG68g2ZIkfKUfJNuRTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+RMOUvOlmlyjpwrP5Dz5Hy5QH4oF8qP5CK5WC6RS2W6/FhmyGUyU34il8tPZZZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/EzukDvlLrlb7pF75T75udwvv5AH5JcyW34lD8q/yUPya3lYfiNz5LfyiPxOHpXfy2PyB3lc/ihPyJPylPxJnpY/yzPyrDwnz8sL8hd5UV6Sl6WXQoGSSimtApVH5VUxKp+KVdepOHW9yq9uUBF1o4pXN6kC6mZVUBVShVURlaCKqmLKKFRWkQpVcVVCRdUtqqS6VSWqUqq0KqOcKqvKqdtUeXW7qqDuUBXVnaqSuktVVlVUVVVN3a2qq3tUDVVT1VL3qtqqjqqr6qn7VH11v2qgHlAN1YOqkXpINVYPqybqEdVUPaqaqcdUc/W4aqGeUC1VK9VatVFt1ZOqnXpKtVcdVEf1tOqknlGdVReVpJ5VXdVzqpt6XnVXL6ge6kXVU72keqneqo+6pC4rr/qp/ipZDVAD1atqkBqshqihaph6TQ1Xr6sR6g2VokaqUepNNVq9pcaot9VYNU6NV++oCWqimqQmqylqqkpV76pp6j01Xb2vZqiZapaardLUHDXkt0oL/il/wG9X3X/Mf+9f5I/49d23qe3qM7VD7VS71G61R+1V+9Q+tV/tVwfUAZWtstVBdVAdUofUYXVY5agcdUQdUUfVUXVMHVPH1XF1Qp1U59VP6rT6WZ1RZ9VZdV5dUBfUxd++BkKDllpprQOdR+fVMTqfjtXX6Th9vc6vb9ARfaOO1zfpAvpmXVAX0oV1EZ2gi+pi2mjUVpMOdXFdQkf1LbqkvlUn6lK6tC6jnS6ry+nb/nT+H/XXVrfV7XQ73V631x11R91Jd9KddWedpJN0V91Vd9PddHfdXffQPXRP3VP30r10H91H99V9dT/dTyfrZD1Qv6oH6cF6iB6qh+nX9HA9XI/QI3SKTtGj9Cg9Wo/WY/QYPVaP1eP1eD1BT9CT9CQ9RU/RqTpVT9PT9HQ9Xc/QM/QsPUun6TQ9V8/V8/Q8vUAv0Av1Qr1IL9JL9BKdrtN1hs7QmTpTL9fLdZZeoVfoVXqVXqPX6HV6nd6gN+hNepPeorfoLL1db9c79A69S+/Se/QevU/v0/v1fn1AH9DZOlsf1Af1IX1IH9aHdY7O0Uf0EX1UH9XH9LEBx/VxfUKf0Kf0KX1an9Zn9Bl9Tp/TF/QFfVFf1Jf15Su3fYEMZKADHeQJ8gQxQUwQG8QGcUFckD/IH0SCSBAfxAcFgpuDgkGhoHBQJEgIigbFAhNgYAMKwqB4UCKIBrcEJYNbg8SgVFA6KBO4oGxQLrgtKB/cHlQI7ggqBncGlYK7gspBlaBqUC24O6ge3BPUCGoGtYJ7g9pBnaBuUC+4L6gf3B80CB4IGgYPBo2Ch4LGwcNBk+CRoGnwaNAseCxoHjwetAieCFoGrYLWQZug7V9a3/szhZ5y/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpBpqOZPeM9PN+2aGmWlmmdkmzcwxc80HZp6ZbxaYD81C85FZZBabJWapSTcfmwyzzGSaT8xy86nJMivMSrPKrDZrzt8ohFlvNpiNZpPZbLaYrWab2W4+MzvMTrPL7DZ7zF6zz3xu9psvzAHzpck2X5mD5m/mkPnaHDbfmBzzrTlivjNHzffmmPnBHDc/mhPmpDllfjKnzc/mjDlrzpnz5oL5xVw0l8xl46/c3F+5vKNGjXkwD8ZgDMZiLMZhHObH/BjBCMZjPBbAAlgQC2JhLIwJmIDFsBheQUhYHItjFKNYEktiIiZiaSyNDh2Ww3JYHstjBayAFbEiVsJKWBkrY1Wsinfj3XgP3oM1sSbei/diHayD9bAe1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYAltgS2yJrbE1tsW22A7bYXtsjx2xI3bCTtgZO2MSJmFX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/sh8mYjANxIA7CQTgEh+AwHIbDcTiOwBGYgik4CkfhaByNY3AMjsVxOB7fwQk4ESfhZJyCUzEVU3EaTsPpOB1n4AychbMwDdNwLs7FeTgPF+ACXIgLcREuwiW4BNMxHTMwAzMxE5fjcszCLFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsBszMaDeBAP4SE8jIcxB3PwCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsML+AtexEt4GT3GWCli7XU2zl5v89sbbIzNZ/8xLmyL2ARb1Bazxha0hf5djNbaRFvKlrZlrLNlbTl72+/iyraKrWqr2bttdXuPrfG7uL693zawD9iG9kFbz973W5z317iRfcg2to/bJvYJ29S2ss1sG9vcPm5b2CdsS9vKtrZtbCf7jO1su9gk+6ztap/7XZxhl9n1doPdaDfZ/fYLe86et0ft9/aC/cX2s/3tMPuaHW5ftyPsGzbFjvxdPN6+YyfYiXaSnWyn2Km/i2fZ2TbNzrFz7Qd2np3/uzjdfmwX2ky7yC62S+zSX+MrPWXaT+xy+6nNsivsSrvKrrZr7Fq77n/3uspusVvtNrvPfm532J12l91t99i9v8ZXzuOA/dJm26/sEfudPWS/toftMZtjv/01vnJ+x+wP9rj90Z6wJ+0p+5M9bX+2Z+zZX8//yrn/ZC/Zy9ZbQUCSFGkKKA/lpRjKR7F0HcXR9ZSfbqAI3UjxdBMVoJupIBWiwlSEEqgoFSNDSJaIQipOJShKt1BJupUSqRSVpjLkqCyVo9uoPN1OFegOqkh3UiW6iypTFapK1ehuqk73UA2qSbXoXqpNdagu1aP7qD7dTw3oAWpID1Ijeoga08PUhB6hpvQoNaPHqDk9Ti3oCWpJrag1taG29CS1o6eoPXWgjvQ0daJnqDN1oSR6lrrSc9SNnqfu9AL1oBepJ71Evag39aGXqS+9Qv2oPyXTABpIr9IgGkxDaCgNo9doOL1OI+gNSqGRNIrepNH0Fo2ht2ksjaPx9A5NoIk0iSbTFJpKqfQunU3vUvjKvd4MmkmzaDal0RyaSx/QPJpPC+hDWkgf0SJaTEtoKaXTx5RByyiTPqHl9Cll0QpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTZ7SDdtIu2k17aC/to89pP31BB+hLyqav6CD9jQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFP0E52mn+kMnaVzdJ4u0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNiwX3haWD28PK4R3hBXDO8NK4V1h5bBK+PiD1cK7w+rhPWGNsGZYK7w3rB3WCeuG9cL7wvrh/WGD8IGwYfhgWCF8KGwcPhw2CR8Jm4aPhs3Cx8Lm4eNhi/CJsGXYKmwdtgnbhk+G7cKnwvZhh7Bj+HTYKXwm7Bx2CZPCZ8Ou4XN/eDw5HBAODF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+XVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2VdOdfGtXVtXTv3lGvvOriO7mn3tHvGPeO6uC7uWdfVPee6ueddd/eC6+FedC+6l1wv19v1cS+7vu4V18/1d8ku2Q10A90gN8gNcUPcMDfMDXfD3Qg3wqW4FDfKjXKj3Wg3xo1xY91YN96NdxPcBDfJTXJT3BSX6lLdNDfNTXfT3Qw3w81ys1yaS3Nz3Vw3z81zC9wCtzBxoVvkFrklbolLd+kuw2W4TJfplrvlLstluZVupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrsdbofb5Xa5PW6P2+f2uf1uvzvgDrhsl+0OuoPukDvkDrtvXI771h1x37mj7nt3zP3gjrsf3Ql30p1yP7nT7md3xp1159x5d8H94i66S+6y8y418m5kWuS9yPTI+5EZkZmRWZHZkbTInMjcyAeReZH5kQWRDyMLIx9FFkUWR5ZElkbSIx9HMiLLIpmRTyLLI59GsiIrIisjqyKrI2si3hfdEfrivoSP+lt8SX+rT/SlfGlfxjtf9renPu0r+Dt8RX+nr+Tv8pV9FV/VP+Fb+la+tW/j2/onfTv/lG/vO/iO/mnfyT/jO/suPsk/67v653w3/7zv7l/wPfyLvqd/yffyvX0f/7Lv61/x/Xx/n+wH+IH+VT/ID/ZD/FA/zL/mh/vX/Qj/hk/xI/0o/6Yf7d/yY/zbfqwf58f7d/wEP9FP8pP9FD/Vp/p3/TT/np/u3/cz/Ew/y8/2aX6On+s/8PP8fL/Af+gX+o/8Ir/YL/FLfbr/2Gf4ZT7Tf+KX+099ll/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/zO/wO/0uv9vv8Xv9Pv+53++/8Af8lz7bf+UP+r/5Q/5rf9h/43P8t/6I/84f9d/7Y/4Hf9z/6E/4k/6U/8mf9j/7M/6sP+fP+wv+F3/RX/KX+XfWGGOMMcb+j6g/OD7gX/yf/G1dMVAIcf3OIjn/XHNzwb/vB8uEThEhxLP9ez76b6t27eTk5N9em6VEUGKxECJyNT+PuBqvEB3FMyJJdBDl/2V/g2XvC/QH9aN3ChF7tfKvYsU/17/9P6j/5NPjMyqF5+L/k/qLhUgscTUnn7gaX61f4T+oX6jdH/Sf7+tUIdr/Q06cuBpfrV9OPCWeE0n/7pWMMcYYY4wxxtjfDZZVu//R8/OV5/MEfTUnr7ga/9HzOWOMMcYYY4wxxq69F3r36fJkUlKH7rz5E5sa/z3a4A1v/rLNtf7JxBhjjDHGGPurXb3pv9adMMYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjudf/jz8ndq3PkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvW/lcAAAD//5GrMz4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) lseek(r0, 0xab07, 0x1) getdents64(r0, 0x0, 0x0) 3.833653876s ago: executing program 7 (id=5182): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) 3.511900304s ago: executing program 7 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000000cbc2ed40000188487aab5e1a", 0x12, 0x0, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="080208486f57"}, 0x14) 3.271828979s ago: executing program 7 (id=5189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.059216224s ago: executing program 7 (id=5194): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000000)) 2.922685068s ago: executing program 7 (id=5196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, &(0x7f0000000440)={0x0, 0xd, 0x4f, {0x4f, 0x5, "ffd36cce05a6320b6a61f373a6558b084da28496601108b496817525352d8ec2a7afb2d41e0d46e2eff017381c38116e5378c3519ac9809da439fdc9f18aeb80890012f651f813cfe0802e9374"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) 2.587913776s ago: executing program 4 (id=5202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) 2.526216228s ago: executing program 4 (id=5204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7fff) 2.44877787s ago: executing program 4 (id=5205): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="0400e6d88ec313000600120004000000060010"], 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x1) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.284169944s ago: executing program 5 (id=5207): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x0, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x9}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x18, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x68}}, 0x20000000) 2.259317755s ago: executing program 4 (id=5208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffe) accept$inet6(r0, 0x0, 0x0) shutdown(r0, 0x0) 2.080855249s ago: executing program 5 (id=5211): syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101100) r0 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.993556611s ago: executing program 4 (id=5212): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r0, &(0x7f0000001540)='T', 0x1) 1.989991981s ago: executing program 1 (id=5213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /n\\X_domain\n', 0x15) 1.876864754s ago: executing program 4 (id=5214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 1.861929194s ago: executing program 1 (id=5215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x5}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x3}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.854920134s ago: executing program 5 (id=5216): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) syz_fuse_handle_req(r0, &(0x7f0000004bc0)="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", 0x2000, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.681895479s ago: executing program 5 (id=5217): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xffd3) 1.651126279s ago: executing program 1 (id=5218): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) 1.577034041s ago: executing program 1 (id=5219): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r1, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.551023742s ago: executing program 5 (id=5220): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.486584723s ago: executing program 1 (id=5221): unshare(0x4040600) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, 0x0, 0x0) 57.511µs ago: executing program 5 (id=5222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) 0s ago: executing program 1 (id=5223): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./my_debugfs\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./my_debugfs/usb/devices\x00', 0x0, 0x81) lseek(r0, 0x20000000049b, 0x3) kernel console output (not intermixed with test programs): romiscuous mode [ 515.393491][T16998] veth0_macvtap: entered promiscuous mode [ 515.423820][T16998] veth1_macvtap: entered promiscuous mode [ 515.471197][ T51] Bluetooth: hci1: command tx timeout [ 515.504904][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.536242][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.548360][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.559816][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.570163][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.589835][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.608471][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.620162][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.653073][T16998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.711290][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.725441][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.758542][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.769984][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.788366][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.823402][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.834332][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.860350][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.871744][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.889278][T16998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.917301][T16998] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.951119][T16998] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.970116][T16998] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.979480][T16998] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.157938][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.186534][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.288815][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.299175][T17119] loop3: detected capacity change from 0 to 1024 [ 516.309913][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.365090][T17119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.406825][T17119] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.3.4108: path /1066/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 516.552153][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.694576][T17127] rxe_eth0 speed is unknown, defaulting to 1000 [ 516.751469][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.846703][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.024750][T17140] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.542366][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4120'. [ 517.553683][ T51] Bluetooth: hci1: command tx timeout [ 517.659608][T17153] loop9: detected capacity change from 0 to 256 [ 517.709229][T17153] exfat: Deprecated parameter 'utf8' [ 517.722216][T17153] exfat: Deprecated parameter 'utf8' [ 517.727653][T17153] exfat: Deprecated parameter 'utf8' [ 517.774506][T17153] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 517.791530][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.091582][ T5816] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 518.316734][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.334519][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 518.355762][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.368308][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.386661][ T5816] usb 4-1: Product: syz [ 518.397579][ T5816] usb 4-1: Manufacturer: syz [ 518.410548][ T5816] usb 4-1: SerialNumber: syz [ 518.470924][ T5816] usb 4-1: selecting invalid altsetting 1 [ 518.832354][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.973690][T17180] kvm: user requested TSC rate below hardware speed [ 519.302315][ T5816] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 519.351248][ T5816] usb 4-1: selecting invalid altsetting 1 [ 519.357121][ T5816] cdc_ncm 4-1:1.0: bind() failure [ 519.415687][ T5816] usb 4-1: USB disconnect, device number 28 [ 519.438633][ T63] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.592912][ T63] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.733564][ T63] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.870923][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.882301][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.887958][ T63] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.042484][T17196] loop7: detected capacity change from 0 to 1024 [ 520.120581][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 520.128717][ C1] lec:lec_tx_timeout: lec0 [ 520.134884][T17196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.136348][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 520.158662][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.266083][T17196] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 520.333143][ T63] netdevsim netdevsim9 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.365119][T17196] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 520.414823][ T63] netdevsim netdevsim9 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.430939][T17196] EXT4-fs (loop7): This should not happen!! Data will be lost [ 520.430939][T17196] [ 520.465207][T17196] EXT4-fs (loop7): Total free blocks count 0 [ 520.478964][T17196] EXT4-fs (loop7): Free/Dirty block details [ 520.491307][T17211] syz.3.4148 (17211): /proc/17209/oom_adj is deprecated, please use /proc/17209/oom_score_adj instead. [ 520.497062][T17196] EXT4-fs (loop7): free_blocks=20480 [ 520.519773][ T63] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.539194][T17196] EXT4-fs (loop7): dirty_blocks=32 [ 520.559724][T17196] EXT4-fs (loop7): Block reservation details [ 520.577581][ T63] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.590695][T17196] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 520.615443][T17207] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 22 with error 28 [ 520.677744][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.691096][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.708022][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.722355][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.732293][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 520.739707][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.885159][T17212] rxe_eth0 speed is unknown, defaulting to 1000 [ 520.911490][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.921494][T17218] overlay: filesystem on ./file0 not supported as upperdir [ 521.951514][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.196667][T17222] loop3: detected capacity change from 0 to 32768 [ 522.302847][T17222] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 522.530965][T17222] XFS (loop3): Ending clean mount [ 522.537435][ T55] kernel write not supported for file /input/mice (pid: 55 comm: kworker/0:2) [ 522.828829][ T5786] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 522.840968][ T5783] Bluetooth: hci1: command tx timeout [ 522.911396][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.992152][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.047677][T17212] chnl_net:caif_netlink_parms(): no params data found [ 523.639509][T17212] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.649170][T17212] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.657670][T17212] bridge_slave_0: entered allmulticast mode [ 523.665442][T17212] bridge_slave_0: entered promiscuous mode [ 523.705712][T17212] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.715881][T17212] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.725154][T17212] bridge_slave_1: entered allmulticast mode [ 523.733302][T17212] bridge_slave_1: entered promiscuous mode [ 523.873484][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4165'. [ 523.989195][T17212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.031998][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.082448][T17212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.281980][T17212] team0: Port device team_slave_0 added [ 524.310347][T17212] team0: Port device team_slave_1 added [ 524.410408][ T63] hsr_slave_0: left promiscuous mode [ 524.448261][ T63] hsr_slave_1: left promiscuous mode [ 524.482125][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.489627][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.534306][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.549437][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.591630][ T63] bridge_slave_1: left allmulticast mode [ 524.608725][ T63] bridge_slave_1: left promiscuous mode [ 524.616513][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.675404][ T63] bridge_slave_0: left allmulticast mode [ 524.685365][ T63] bridge_slave_0: left promiscuous mode [ 524.691569][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.797716][ T63] veth1_macvtap: left promiscuous mode [ 524.811158][ T63] veth0_macvtap: left promiscuous mode [ 524.816880][ T63] veth1_vlan: left promiscuous mode [ 524.850694][ T63] veth0_vlan: left promiscuous mode [ 524.910867][ T5783] Bluetooth: hci1: command tx timeout [ 525.069180][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4175'. [ 525.078476][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.387119][T17315] loop7: detected capacity change from 0 to 4096 [ 525.423385][T17315] EXT4-fs (loop7): Test dummy encryption mode enabled [ 525.526475][T17315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.733797][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.892005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.900215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.950894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 525.959035][ C1] lec:lec_tx_timeout: lec0 [ 525.964273][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.971498][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.118850][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.335193][T17334] program syz.5.4183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.879959][ T63] team0 (unregistering): Port device team_slave_1 removed [ 527.000119][ T63] team0 (unregistering): Port device team_slave_0 removed [ 527.018224][ T5783] Bluetooth: hci1: command tx timeout [ 527.151033][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.214467][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.364535][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.972519][T17352] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4191'. [ 528.192570][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.201083][ T28] audit: type=1326 audit(1792198367.806:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.7.4194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa22939e559 code=0x0 [ 528.399512][ T63] bond0 (unregistering): Released all slaves [ 528.606704][T17212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.618909][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.644883][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.660542][T17212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.684172][T17212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.697553][T17212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.723492][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.738574][T17212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.848408][T17212] hsr_slave_0: entered promiscuous mode [ 528.869133][T17212] hsr_slave_1: entered promiscuous mode [ 528.877025][T17212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.884967][T17212] Cannot create hsr debugfs directory [ 528.991594][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.072520][ T5783] Bluetooth: hci1: command tx timeout [ 529.081626][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 529.199947][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4197'. [ 529.252322][ T1191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.273280][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.291826][ T55] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 529.308552][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.453982][T17212] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.466568][ T55] rtsx_usb: probe of 4-1:1.0 failed with error -22 [ 529.673956][ T9] usb 4-1: USB disconnect, device number 29 [ 529.722122][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.831164][T17212] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.073328][T17386] loop5: detected capacity change from 0 to 164 [ 530.137684][T17212] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.272277][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.549767][T17212] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.711349][ T5889] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 530.915205][ T5889] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 530.939104][ T5889] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 530.970199][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 530.979584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 530.979615][ C1] lec:lec_tx_timeout: lec0 [ 530.987801][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 531.002209][T17409] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4209'. [ 531.031134][T17212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.049939][T17212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.051690][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.084632][T17212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.109258][T17396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.122750][ T5889] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 531.151252][T17212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.331227][T17417] loop3: detected capacity change from 0 to 764 [ 531.486256][T17212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.544546][ T5889] usb 6-1: USB disconnect, device number 14 [ 531.564534][T17212] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.653383][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.660716][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.684045][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.691312][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.448277][T17212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.615169][T17212] veth0_vlan: entered promiscuous mode [ 532.689060][T17212] veth1_vlan: entered promiscuous mode [ 532.738709][T17449] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 532.806955][T17212] veth0_macvtap: entered promiscuous mode [ 532.848917][T17212] veth1_macvtap: entered promiscuous mode [ 532.920213][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.947951][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.987501][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.037424][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.063815][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.090925][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.110626][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.121540][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.136334][T17212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.184512][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.221217][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.240880][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.271693][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.292868][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.330932][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.357078][T17212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.383782][T17212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.442421][T17212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.515341][T17212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.556900][T17212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.580942][T17212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.589706][T17212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.828717][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.870240][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.969303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.990453][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.115511][T17212] block device autoloading is deprecated and will be removed. [ 534.321429][T17485] loop3: detected capacity change from 0 to 512 [ 534.385333][T17485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.459653][T17485] ext4 filesystem being mounted at /1099/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.639256][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.338846][T17519] loop3: detected capacity change from 0 to 2048 [ 535.437723][T17523] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 535.534878][ T28] audit: type=1800 audit(1792198375.146:202): pid=17519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4239" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 535.638212][T17523] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 535.669515][T17523] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 535.693667][T17523] Remounting filesystem read-only [ 535.698955][ T63] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 535.717037][ T63] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 535.733699][ T63] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 535.758099][ T63] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 535.776383][ T63] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 535.785886][ T63] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 535.808509][ T63] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 535.816406][ T63] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 535.824564][ T63] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 535.832276][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.842481][ T63] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 535.849737][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.860535][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.869604][ T63] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 535.897967][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.914514][ T63] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 535.931454][ T63] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 535.940077][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.956824][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.966499][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 535.986335][ T63] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 535.993889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 535.993921][ C1] lec:lec_tx_timeout: lec0 [ 536.002346][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.021090][ T63] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 536.028598][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.046408][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.058425][ T63] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.078717][ T5786] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 536.100788][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 536.108528][ T5786] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 536.118354][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.151469][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.167489][T17522] loop5: detected capacity change from 0 to 32768 [ 536.181134][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 536.212537][T17522] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 536.258662][T17522] JBD2: Ignoring recovery information on journal [ 536.499736][T17522] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 536.654314][T17544] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4243'. [ 536.910629][T17548] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.972837][ T28] audit: type=1400 audit(1792198376.576:203): apparmor="STATUS" operation="profile_load" profile="unconfined" name=2F3A22 pid=17553 comm="syz.1.4246" [ 537.230453][ T9076] ocfs2: Unmounting device (7,5) on (node local) [ 537.967146][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'. [ 538.524418][T17605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 538.765871][T17615] i2c i2c-0: new_device: Missing parameters [ 539.053508][T17627] loop5: detected capacity change from 0 to 512 [ 539.157614][T17627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.4268: bg 0: block 5: invalid block bitmap [ 539.215639][T17627] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 539.251140][T17627] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.4268: invalid indirect mapped block 3 (level 2) [ 539.297655][T17627] EXT4-fs (loop5): 1 orphan inode deleted [ 539.340600][T17627] EXT4-fs (loop5): 1 truncate cleaned up [ 539.347706][T17627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.564960][ T9076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.472352][T17676] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string [ 540.506345][T17676] cpuid cpu0: uevent: failed to send synthetic uevent: -22 [ 541.010767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 541.018830][ C1] lec:lec_tx_timeout: lec0 [ 541.024136][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.155357][ T28] audit: type=1400 audit(1792198380.766:204): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=17694 comm="syz.5.4287" name="foo" offset=35 [ 542.817487][ T9] wiimote 0005:057E:0330.0016: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 542.836103][T17754] loop5: detected capacity change from 0 to 512 [ 542.883392][ T9] wiimote 0005:057E:0330.0016: New device registered [ 542.902070][T17754] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 542.914483][ T5783] Bluetooth: hci1: command tx timeout [ 543.089253][T17752] wiimote 0005:057E:0330.0016: Device removed [ 543.166959][T17757] fido_id[17757]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 543.560165][ T28] audit: type=1400 audit(1792198383.166:205): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=17776 comm="syz.3.4312" [ 543.951128][ T5862] wiimote 0005:057E:0330.0016: detected device: Nintendo Wii Remote Plus (Gen 2) [ 544.082865][ T5862] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0016/input/input24 [ 544.207989][ T5862] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0016/input/input25 [ 544.228694][T17801] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 544.237590][ T5862] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0016/input/input23 [ 544.846993][T17820] block device autoloading is deprecated and will be removed. [ 544.880976][T17820] syz.3.4326: attempt to access beyond end of device [ 544.880976][T17820] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 544.961562][T17819] loop1: detected capacity change from 0 to 8192 [ 545.010913][T17819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 545.068731][T17819] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 545.080311][T17819] REISERFS (device loop1): using ordered data mode [ 545.087650][T17819] reiserfs: using flush barriers [ 545.095614][T17819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 545.114046][T17819] REISERFS (device loop1): checking transaction log (loop1) [ 545.272521][T17819] REISERFS (device loop1): Using tea hash to sort names [ 545.300655][T17819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 545.510208][T17834] loop3: detected capacity change from 0 to 512 [ 545.555100][T17834] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 545.613945][T17834] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 545.935657][T17836] zswap: compressor not available [ 545.967897][ T4749] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 546.030904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 546.038977][ C1] lec:lec_tx_timeout: lec0 [ 546.043781][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.144208][T17865] loop1: detected capacity change from 0 to 32768 [ 547.175287][T17865] (syz.1.4339,17865,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 547.211955][T17865] (syz.1.4339,17865,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 547.268885][T17865] JBD2: Ignoring recovery information on journal [ 547.334510][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4346'. [ 547.418306][T17865] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 547.874443][T17908] loop7: detected capacity change from 0 to 2048 [ 547.883194][T17865] (syz.1.4339,17865,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 548.012812][T17908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.096105][ T28] audit: type=1800 audit(1792198387.706:206): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4350" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 548.124810][T17908] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 548.142323][T17908] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 548.155511][T17908] EXT4-fs (loop7): This should not happen!! Data will be lost [ 548.155511][T17908] [ 548.166028][T17908] EXT4-fs (loop7): Total free blocks count 0 [ 548.172414][T17908] EXT4-fs (loop7): Free/Dirty block details [ 548.178575][T17908] EXT4-fs (loop7): free_blocks=2415919104 [ 548.185284][T17908] EXT4-fs (loop7): dirty_blocks=64 [ 548.200877][T17908] EXT4-fs (loop7): Block reservation details [ 548.206962][T17908] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 548.212902][T17212] ocfs2: Unmounting device (7,1) on (node local) [ 548.240336][T17908] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 550.100276][T17968] loop7: detected capacity change from 0 to 4096 [ 550.130360][T17968] EXT4-fs: Ignoring removed orlov option [ 550.196373][T17968] EXT4-fs (loop7): Test dummy encryption mode enabled [ 550.238069][T17968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.394017][T17968] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 550.407892][T17968] CacheFiles: File cache on CacheFiles registered [ 550.462052][T17967] CacheFiles: File cache on CacheFiles unregistering [ 550.468790][T17967] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 550.622971][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.871002][T17984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.060869][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 551.068955][ C1] lec:lec_tx_timeout: lec0 [ 551.074180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 551.496431][T18015] jffs2: notice: (18015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 551.606766][T18019] input: syz0 as /devices/virtual/input/input26 [ 551.824354][T18026] loop4: detected capacity change from 0 to 7 [ 551.846684][T18026] Dev loop4: unable to read RDB block 7 [ 551.860157][T18026] loop4: unable to read partition table [ 551.871106][T18026] loop4: partition table beyond EOD, truncated [ 551.898782][T18026] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾-ý?‹ºÐ ¥ëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 552.203110][T18033] loop1: detected capacity change from 0 to 1024 [ 552.314297][T18033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 552.354608][T18033] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.425068][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4391'. [ 552.442486][T18051] ipvlan2: entered allmulticast mode [ 552.447973][T18051] syz_tun: entered allmulticast mode [ 552.483295][T18033] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 6) [ 552.554082][T18033] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 552.577186][T18033] EXT4-fs (loop1): This should not happen!! Data will be lost [ 552.577186][T18033] [ 552.620913][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 552.704168][ T970] IPVS: starting estimator thread 0... [ 552.709915][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 552.769096][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 552.819910][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 552.841349][T18060] IPVS: using max 17 ests per chain, 40800 per kthread [ 552.851685][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 552.885508][T18054] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: comm syz.1.4385: lblock 0 mapped to illegal pblock 0 (length 4) [ 553.031996][ T4749] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 553.077309][ T4749] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 553.108463][ T4749] EXT4-fs (loop1): This should not happen!! Data will be lost [ 553.108463][ T4749] [ 553.158132][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 553.177229][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4398'. [ 554.041227][T18109] bond0: entered promiscuous mode [ 554.050566][T18109] bond_slave_0: entered promiscuous mode [ 554.056645][T18109] bond_slave_1: entered promiscuous mode [ 554.103086][T18108] bond0: left promiscuous mode [ 554.130570][T18108] bond_slave_0: left promiscuous mode [ 554.154076][T18108] bond_slave_1: left promiscuous mode [ 554.442003][ T1191] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 554.624038][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4419'. [ 554.650867][ T1191] usb 6-1: Using ep0 maxpacket: 16 [ 554.676460][ T1191] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 554.699436][ T1191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.730043][ T1191] usb 6-1: Product: syz [ 554.758259][ T1191] usb 6-1: Manufacturer: syz [ 554.773664][ T1191] usb 6-1: SerialNumber: syz [ 555.038720][ T1191] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 555.070038][T18149] loop1: detected capacity change from 0 to 128 [ 555.091586][ T1191] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 555.114418][T18149] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 555.131047][ T1191] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 555.146842][ T1191] usb 6-1: media controller created [ 555.179571][ T28] audit: type=1800 audit(1792198394.786:207): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4423" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 555.278504][ T1191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.489274][ T1191] zl10353_read_register: readreg error (reg=127, ret==-71) [ 555.622426][ T1191] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5 [ 555.656936][ T1191] usb 6-1: USB disconnect, device number 15 [ 556.080580][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 556.088701][ C1] lec:lec_tx_timeout: lec0 [ 556.094076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.335734][T18184] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 556.357056][T18184] iwpm_hello_cb: Unable to parse nlmsg [ 556.417309][T18189] loop1: detected capacity change from 0 to 256 [ 556.561354][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4437'. [ 556.691786][ T28] audit: type=1800 audit(1792198396.296:208): pid=18189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4436" name="file2" dev="loop1" ino=1048850 res=0 errno=0 [ 556.726633][T18189] syz.1.4436: attempt to access beyond end of device [ 556.726633][T18189] loop1: rw=0, sector=272, nr_sectors = 4 limit=256 [ 556.761202][T18189] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 556.778415][T18189] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 557.951610][T18242] size and base must be multiples of 4 kiB [ 557.959781][T18240] loop5: detected capacity change from 0 to 4096 [ 557.967550][T18242] CPU: 1 PID: 18242 Comm: syz.1.4452 Not tainted syzkaller #0 [ 557.975085][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.985202][T18242] Call Trace: [ 557.988529][T18242] [ 557.991507][T18242] dump_stack_lvl+0x18c/0x250 [ 557.996324][T18242] ? show_regs_print_info+0x20/0x20 [ 558.001575][T18242] ? load_image+0x420/0x420 [ 558.006190][T18242] ? __might_fault+0xaa/0x120 [ 558.011048][T18242] ? __might_fault+0xc6/0x120 [ 558.015784][T18242] ? __might_fault+0xaa/0x120 [ 558.020523][T18242] mtrr_del+0xc3/0xf0 [ 558.024676][T18242] mtrr_ioctl+0xcb6/0x13a0 [ 558.029155][T18242] ? mtrr_close+0x200/0x200 [ 558.033729][T18242] ? __fget_files+0x28/0x460 [ 558.038426][T18242] ? mtrr_close+0x200/0x200 [ 558.042988][T18242] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 558.048642][T18242] ? proc_reg_poll+0x290/0x290 [ 558.053454][T18242] __se_sys_ioctl+0xfd/0x170 [ 558.058105][T18242] do_syscall_64+0x55/0xb0 [ 558.062574][T18242] ? clear_bhb_loop+0x40/0x90 [ 558.067401][T18242] ? clear_bhb_loop+0x40/0x90 [ 558.072138][T18242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.078198][T18242] RIP: 0033:0x7f94f739e559 [ 558.082672][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.102356][T18242] RSP: 002b:00007f94f829f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.110821][T18242] RAX: ffffffffffffffda RBX: 00007f94f7625fa0 RCX: 00007f94f739e559 [ 558.118861][T18242] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 558.126875][T18242] RBP: 00007f94f7435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 558.134887][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.142895][T18242] R13: 00007f94f7626038 R14: 00007f94f7625fa0 R15: 00007ffe4fc4f748 [ 558.150925][T18242] [ 558.206085][T18245] loop3: detected capacity change from 0 to 512 [ 558.219522][T18246] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.242440][T18245] EXT4-fs: Ignoring removed oldalloc option [ 558.307654][T18245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 558.442965][T18245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.890678][ T5862] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 558.935743][ T970] IPVS: starting estimator thread 0... [ 559.031189][T18265] IPVS: using max 17 ests per chain, 40800 per kthread [ 559.098698][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 559.114460][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.126799][ T5862] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 559.136154][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.154918][ T5862] usb 6-1: Product: syz [ 559.159140][ T5862] usb 6-1: Manufacturer: syz [ 559.170112][ T5862] usb 6-1: SerialNumber: syz [ 559.202093][ T5862] usb 6-1: config 0 descriptor?? [ 559.226378][ T5862] gspca_main: se401-2.14.0 probing 047d:5003 [ 559.335904][T18274] loop3: detected capacity change from 0 to 512 [ 559.372627][T18274] EXT4-fs (loop3): orphan cleanup on readonly fs [ 559.386760][T18274] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 559.404116][T18274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 559.544474][T18274] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4460: attempt to clear invalid blocks 2 len 1 [ 559.598285][T18274] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4460: invalid indirect mapped block 1819239214 (level 0) [ 559.661084][T18274] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4460: invalid indirect mapped block 1819239214 (level 1) [ 559.725540][T18274] EXT4-fs (loop3): 1 truncate cleaned up [ 559.740223][T18274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 559.843982][T18274] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 559.910365][ T5862] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 560.026602][ T5786] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 560.216288][ T27] usb 6-1: USB disconnect, device number 16 [ 560.724469][T15805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.066985][ T1319] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.088404][ T1319] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.110767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 561.118863][ C1] lec:lec_tx_timeout: lec0 [ 561.125055][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.283095][ T1319] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.300891][ T1319] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.511508][ T1319] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.540801][ T1319] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.816158][ T1319] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.843188][T18324] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 561.849929][ T1319] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.922035][T18310] loop1: detected capacity change from 0 to 32768 [ 562.012990][T18310] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 562.258674][T18310] XFS (loop1): Ending clean mount [ 562.275912][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.289151][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.299601][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.308359][T18310] XFS (loop1): Quotacheck needed: Please wait. [ 562.315590][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.327762][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 562.341858][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.378448][ T1319] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.503452][ T1319] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.533498][T18310] XFS (loop1): Quotacheck: Done. [ 562.583868][ T1319] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.630222][ T1319] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.674286][T18339] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.751162][ T1319] tipc: Left network mode [ 562.850000][T18352] loop7: detected capacity change from 0 to 512 [ 562.903695][T18352] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 562.971385][T18352] EXT4-fs (loop7): 1 truncate cleaned up [ 562.992385][T18352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.021676][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.028063][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.135418][ T28] audit: type=1800 audit(1792198402.746:209): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4480" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 563.231868][T17212] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 563.378796][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.863474][T18369] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4483'. [ 564.441433][ T51] Bluetooth: hci3: command tx timeout [ 564.498735][T18390] netlink: 'syz.5.4487': attribute type 2 has an invalid length. [ 564.506636][T18390] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 564.514589][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4487'. [ 564.523627][T18390] netlink: 'syz.5.4487': attribute type 2 has an invalid length. [ 564.531587][T18390] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 564.539358][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4487'. [ 564.549141][T18390] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 565.291496][T18407] ip_tables: iptables: counters copy to user failed while replacing table [ 566.511212][ T51] Bluetooth: hci3: command tx timeout [ 566.871655][T18450] syz.5.4504[18450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.871944][T18450] syz.5.4504[18450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.920534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 566.940050][ C1] lec:lec_tx_timeout: lec0 [ 566.944919][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 567.068615][T18454] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 567.248116][ T28] audit: type=1400 audit(1792198406.856:210): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=18460 comm="syz.1.4508" name="foo" offset=60 [ 567.451703][T18468] phram: illegal device length [ 567.799790][T18474] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4511'. [ 567.812838][T18474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4511'. [ 567.822336][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.599551][ T51] Bluetooth: hci3: command tx timeout [ 570.178156][T18339] chnl_net:caif_netlink_parms(): no params data found [ 570.516914][ T1191] kernel write not supported for file /tomoyo/domain_policy (pid: 1191 comm: kworker/0:3) [ 570.671746][ T51] Bluetooth: hci3: command tx timeout [ 570.830397][T18521] loop1: detected capacity change from 0 to 256 [ 570.955188][T18339] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.988189][T18339] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.026300][T18339] bridge_slave_0: entered allmulticast mode [ 571.062859][T18339] bridge_slave_0: entered promiscuous mode [ 571.158753][T18339] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.208064][T18339] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.232770][T18339] bridge_slave_1: entered allmulticast mode [ 571.261148][T18339] bridge_slave_1: entered promiscuous mode [ 571.410349][T18339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.474691][T18339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.714735][T18339] team0: Port device team_slave_0 added [ 571.771746][T18535] sctp: [Deprecated]: syz.5.4530 (pid 18535) Use of int in maxseg socket option. [ 571.771746][T18535] Use struct sctp_assoc_value instead [ 571.797262][ T1319] hsr_slave_0: left promiscuous mode [ 571.823805][ T1319] hsr_slave_1: left promiscuous mode [ 571.854847][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.872620][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.901650][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.909185][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.948472][ T1319] bridge_slave_1: left allmulticast mode [ 571.956762][ T1319] bridge_slave_1: left promiscuous mode [ 571.962428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 571.962461][ C1] lec:lec_tx_timeout: lec0 [ 571.971107][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.985526][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.995320][ T1319] bridge_slave_0: left allmulticast mode [ 572.010414][ T1319] bridge_slave_0: left promiscuous mode [ 572.025257][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.043526][T18542] input: syz0 as /devices/virtual/input/input28 [ 572.235432][ T1319] batadv_slave_1: left promiscuous mode [ 572.310958][ T1319] veth1_macvtap: left promiscuous mode [ 572.316598][ T1319] veth0_macvtap: left promiscuous mode [ 572.339845][ T1319] veth1_vlan: left promiscuous mode [ 572.370831][ T1319] veth0_vlan: left promiscuous mode [ 572.580912][ T28] audit: type=1326 audit(1792198412.186:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.638755][ T28] audit: type=1326 audit(1792198412.186:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.689336][ T28] audit: type=1326 audit(1792198412.186:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.781631][ T28] audit: type=1326 audit(1792198412.186:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.846534][ T28] audit: type=1326 audit(1792198412.186:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.903997][ T28] audit: type=1326 audit(1792198412.186:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 572.956741][ T28] audit: type=1326 audit(1792198412.186:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 573.042833][ T28] audit: type=1326 audit(1792198412.186:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 573.073197][ T28] audit: type=1326 audit(1792198412.186:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 573.113948][ T28] audit: type=1326 audit(1792198412.186:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.4539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f739e559 code=0x50000 [ 573.389450][ T1319] team0 (unregistering): Port device bridge1 removed [ 573.770365][T18583] ip_tables: iptables: counters copy to user failed while replacing table [ 573.856978][T18583] ip_tables: iptables: counters copy to user failed while replacing table [ 574.842224][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 574.910203][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 574.984154][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.059823][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.599681][ T1319] bond0 (unregistering): Released all slaves [ 575.695964][T18339] team0: Port device team_slave_1 added [ 575.811267][T18339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.818298][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.883290][T18339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.937044][T18339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.965150][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.029543][T18339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.297910][T18339] hsr_slave_0: entered promiscuous mode [ 576.331387][T18339] hsr_slave_1: entered promiscuous mode [ 576.360128][T18339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.371610][T18339] Cannot create hsr debugfs directory [ 576.980659][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.988767][ C1] lec:lec_tx_timeout: lec0 [ 576.993540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.325495][T18339] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.654460][T18665] loop1: detected capacity change from 0 to 2048 [ 577.723374][T18665] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 577.730872][T18665] loop1: partition table partially beyond EOD, truncated [ 577.738178][T18665] loop1: p1 start 3405774849 is beyond EOD, truncated [ 577.802216][T18665] loop1: p2 start 53543428 is beyond EOD, truncated [ 577.808915][T18665] loop1: p3 start 4284289 is beyond EOD, truncated [ 577.841221][T18665] loop1: p5 start 3405774849 is beyond EOD, truncated [ 577.884299][T18665] loop1: p6 start 53543428 is beyond EOD, truncated [ 577.913462][T18339] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.110835][T18638] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 578.141780][T18680] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4570'. [ 578.266294][T18339] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.330646][T18638] usb 2-1: Using ep0 maxpacket: 32 [ 578.337741][T18638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 578.364362][T18638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 578.390094][T18638] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 578.440534][T18638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.464192][T18638] usb 2-1: config 0 descriptor?? [ 578.502068][T18638] hub 2-1:0.0: USB hub found [ 578.644599][T18339] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.690570][T18690] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4573'. [ 578.746379][T18690] netlink: 'syz.5.4573': attribute type 12 has an invalid length. [ 578.758630][T18638] hub 2-1:0.0: 26 ports detected [ 578.772093][T18638] hub 2-1:0.0: insufficient power available to use all downstream ports [ 578.775231][T18690] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4573'. [ 578.844733][T18693] pim6reg: entered allmulticast mode [ 578.900336][T18692] pim6reg: left allmulticast mode [ 578.965077][T18638] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 579.004237][T18638] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 579.044116][T18638] usbhid 2-1:0.0: can't add hid device: -71 [ 579.050197][T18638] usbhid: probe of 2-1:0.0 failed with error -71 [ 579.101885][T18638] usb 2-1: USB disconnect, device number 3 [ 579.413499][T18339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.440148][T18339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.483595][T18339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.496798][T18705] loop7: detected capacity change from 0 to 512 [ 579.524458][T18339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.600950][T18705] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.4577: inode has both inline data and extents flags [ 579.637759][T18705] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.4577: couldn't read orphan inode 15 (err -117) [ 579.655649][T18705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.936130][T18339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.948063][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.017695][T18339] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.052906][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.060092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.150794][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.158097][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.203535][T18716] block device autoloading is deprecated and will be removed. [ 580.214044][T18721] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 580.430002][T18728] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.4582'. [ 580.561331][T18716] ftl_cs: FTL header not found. [ 580.722407][T18716] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 580.985078][T18339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.722167][T18339] veth0_vlan: entered promiscuous mode [ 581.750186][T18339] veth1_vlan: entered promiscuous mode [ 581.863502][T18339] veth0_macvtap: entered promiscuous mode [ 581.925536][T18339] veth1_macvtap: entered promiscuous mode [ 581.985373][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.010631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 582.018739][ C1] lec:lec_tx_timeout: lec0 [ 582.025855][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.041330][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.052448][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.064435][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.075764][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.094036][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.109740][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.131824][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.154558][T18339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.166070][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.182311][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.194686][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.241125][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.252509][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.260880][ T27] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 582.268561][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.282490][T18339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.295186][T18339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.310036][T18339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.359998][T18339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.379617][T18339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.391716][T18339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.406150][T18339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.471862][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 582.480771][ T27] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 582.504061][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.537942][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 582.567866][ T27] pvrusb2: ********** [ 582.594322][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 582.635736][ T27] pvrusb2: Important functionality might not be entirely working. [ 582.653307][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 582.670873][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.691088][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.705844][ T27] pvrusb2: ********** [ 582.750452][ T2323] pvrusb2: Invalid write control endpoint [ 582.791909][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.813595][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.946279][ T2323] pvrusb2: Invalid write control endpoint [ 582.968025][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 582.992566][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 583.013070][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 583.036809][ T2323] pvrusb2: Device being rendered inoperable [ 583.051396][T18769] pvrusb2: Attempted to execute control transfer when device not ok [ 583.073661][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 583.091402][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 583.093970][ T27] usb 6-1: USB disconnect, device number 17 [ 583.156517][ T2323] pvrusb2: Attached sub-driver cx25840 [ 583.174149][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 583.196351][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.446674][T18832] netlink: 'syz.5.4615': attribute type 11 has an invalid length. [ 584.470564][T18832] netlink: 'syz.5.4615': attribute type 8 has an invalid length. [ 584.478342][T18832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4615'. [ 585.108800][T18859] loop1: detected capacity change from 0 to 512 [ 585.201702][T18859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 585.209881][T18859] System zones: 0-7 [ 585.225252][T18859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.426072][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.697860][T18861] loop4: detected capacity change from 0 to 32768 [ 585.792079][T18861] JBD2: Ignoring recovery information on journal [ 585.927811][T18861] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 586.002533][ T5862] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 586.203211][T18339] ocfs2: Unmounting device (7,4) on (node local) [ 586.234661][ T5862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.256678][ T5862] usb 2-1: not running at top speed; connect to a high speed hub [ 586.301480][ T5862] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 586.346299][ T5862] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 586.370614][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.399014][ T5862] usb 2-1: Product: syz [ 586.419567][ T5862] usb 2-1: Manufacturer: syz [ 586.429503][ T5862] usb 2-1: SerialNumber: syz [ 586.529625][T18895] loop7: detected capacity change from 0 to 2048 [ 586.629154][T18895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.665590][T18895] ext4 filesystem being mounted at /502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 586.770214][ T5862] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 586.807080][T18895] fs-verity: sha512 using implementation "sha512-avx2" [ 586.908309][T18903] loop4: detected capacity change from 0 to 512 [ 586.976131][T18903] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4632: invalid indirect mapped block 256 (level 2) [ 586.999627][ T5862] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 587.012662][ T5862] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 587.040600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 587.048723][ C1] lec:lec_tx_timeout: lec0 [ 587.053394][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 587.097852][T18903] EXT4-fs (loop4): Remounting filesystem read-only [ 587.126425][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.157245][T18903] EXT4-fs (loop4): 2 truncates cleaned up [ 587.188521][T18903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.414634][ T5862] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 587.473801][T18339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.487230][ T5862] usb 2-1: USB disconnect, device number 4 [ 587.670344][T18675] udevd[18675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.236200][T18929] loop1: detected capacity change from 0 to 512 [ 588.257204][T18929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.270374][T18929] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 588.300383][T18929] EXT4-fs (loop1): 1 truncate cleaned up [ 588.361637][T18929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.646841][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.331355][ T5862] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 589.349942][T18936] loop7: detected capacity change from 0 to 32768 [ 589.460363][T18962] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4647'. [ 589.463834][T18936] JBD2: Ignoring recovery information on journal [ 589.533337][T18936] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 589.542950][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 589.595032][ T5862] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 589.664911][ T5862] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 589.700676][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.708969][ T5862] usb 6-1: Product: syz [ 589.730775][ T5862] usb 6-1: Manufacturer: syz [ 589.747891][ T5862] usb 6-1: SerialNumber: syz [ 589.772083][ T5862] usb 6-1: config 0 descriptor?? [ 589.794249][ T5862] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 589.817083][ T5862] usb 6-1: setting power ON [ 589.844668][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 589.873850][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.895595][ T5862] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 589.925251][ T5862] usb 6-1: media controller created [ 589.967048][T12945] ocfs2: Unmounting device (7,7) on (node local) [ 590.020396][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.039753][T18949] dvb-usb: bulk message failed: -22 (3/0) [ 590.060704][T18949] dvb-usb: bulk message failed: -22 (4/0) [ 590.066531][T18949] cxusb: i2c read failed [ 590.137229][ T5862] usb 6-1: selecting invalid altsetting 6 [ 590.152610][T18976] 9pnet_fd: Insufficient options for proto=fd [ 590.161026][ T5862] usb 6-1: digital interface selection failed (-22) [ 590.181693][ T5862] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 590.214338][ T5862] usb 6-1: setting power OFF [ 590.221814][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 590.243636][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 590.260972][ T5862] (NULL device *): no alternate interface [ 590.351465][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 590.399991][ T5862] usb 6-1: USB disconnect, device number 18 [ 591.045170][T18996] loop5: detected capacity change from 0 to 1024 [ 591.106267][T18996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 591.215521][T18996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 591.251915][T18996] System zones: 0-1, 3-12 [ 591.288081][T18996] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.455801][ T9076] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 592.060678][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 592.068800][ C1] lec:lec_tx_timeout: lec0 [ 592.073562][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.340935][ T27] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 592.522894][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.540878][ T27] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 4 [ 592.569575][ T27] usb 6-1: config 1 interface 2 has no altsetting 0 [ 592.580758][ T5862] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 592.591147][ T27] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 592.601295][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.609497][ T27] usb 6-1: Product: syz [ 592.629787][ T27] usb 6-1: Manufacturer: syz [ 592.640561][ T27] usb 6-1: SerialNumber: syz [ 592.784757][ T5862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 592.813635][ T5862] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.860672][ T5862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.893753][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 592.894878][ T27] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 592.932472][ T5862] usb 2-1: SerialNumber: syz [ 592.950075][ T27] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 592.965400][T19031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 593.012518][ T27] hub 6-1:1.2: Invalid hub with more than one config or interface [ 593.046787][ T27] hub: probe of 6-1:1.2 failed with error -22 [ 593.086419][ T27] usb 6-1: USB disconnect, device number 19 [ 593.181770][T19034] loop4: detected capacity change from 0 to 32768 [ 593.209285][T19034] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 593.258774][T19031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 593.474464][T18675] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 593.792124][ T5862] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 594.019615][ T5862] usb 2-1: USB disconnect, device number 5 [ 594.030134][ T5862] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 594.522606][T19080] phram: not enough arguments [ 594.661372][T19084] sctp: [Deprecated]: syz.4.4680 (pid 19084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.661372][T19084] Use struct sctp_sack_info instead [ 594.725732][T19070] loop7: detected capacity change from 0 to 32768 [ 594.835912][T19070] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 594.893214][T19070] JBD2: Ignoring recovery information on journal [ 595.024327][T19070] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 595.209314][ T51] Bluetooth: hci0: Zero size dump init pkt [ 595.640363][T12945] ocfs2: Unmounting device (7,7) on (node local) [ 596.491754][T19143] loop4: detected capacity change from 0 to 1024 [ 596.559791][T19145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.080543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 597.088683][ C1] lec:lec_tx_timeout: lec0 [ 597.093477][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.170080][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4706'. [ 597.565439][T19179] loop5: detected capacity change from 0 to 2048 [ 597.620222][T19179] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 597.641810][T19179] loop5: partition table partially beyond EOD, truncated [ 597.670851][T19179] loop5: p1 start 3405774849 is beyond EOD, truncated [ 597.677690][T19179] loop5: p2 start 53543428 is beyond EOD, truncated [ 597.700977][T19179] loop5: p3 start 4284289 is beyond EOD, truncated [ 597.729174][T19179] loop5: p5 start 3405774849 is beyond EOD, truncated [ 597.736307][T19179] loop5: p6 start 53543428 is beyond EOD, truncated [ 598.025756][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 598.025774][ T28] audit: type=1326 audit(1792198437.616:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19197 comm="syz.1.4717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94f739e559 code=0x0 [ 598.120757][ T27] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 598.229987][ T28] audit: type=1326 audit(1792198437.836:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19204 comm="syz.4.4719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3eb19e559 code=0x0 [ 598.330716][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 598.344377][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 598.357929][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 598.382160][ T27] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 598.401473][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.442922][ T27] usb 6-1: config 0 descriptor?? [ 598.463145][ T27] hub 6-1:0.0: USB hub found [ 598.675430][ T27] hub 6-1:0.0: 26 ports detected [ 598.689639][ T27] hub 6-1:0.0: insufficient power available to use all downstream ports [ 598.876395][ T27] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 598.901845][ T27] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 598.924968][ T27] usbhid 6-1:0.0: can't add hid device: -71 [ 598.937861][ T27] usbhid: probe of 6-1:0.0 failed with error -71 [ 598.981829][ T27] usb 6-1: USB disconnect, device number 20 [ 599.413865][T19234] loop7: detected capacity change from 0 to 4096 [ 599.435654][T19234] EXT4-fs: inline encryption not supported [ 599.499039][T19234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 599.533857][T19234] EXT4-fs (loop7): Test dummy encryption mode enabled [ 599.583889][T19234] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 599.663204][T19234] System zones: 0-5 [ 599.708780][T19234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.023099][T12945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.027708][T19257] loop1: detected capacity change from 0 to 40427 [ 601.056640][T19294] 9pnet_fd: p9_fd_create_unix (19294): problem connecting socket: ./file0: -111 [ 601.097139][T19257] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 601.128376][T19257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 601.192040][T19257] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 601.251972][T19257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 601.511390][T19257] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 601.518506][T19257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 602.100677][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.108751][ C1] lec:lec_tx_timeout: lec0 [ 602.113677][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 602.390158][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4751'. [ 604.805164][T19389] zswap: compressor - not available [ 605.180191][T19411] loop5: detected capacity change from 0 to 512 [ 605.212170][T19411] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 605.619174][T19422] loop5: detected capacity change from 0 to 256 [ 605.676496][T19422] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 606.059639][T19437] loop5: detected capacity change from 0 to 512 [ 606.128598][T19437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.154149][T19437] ext4 filesystem being mounted at /929/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.362871][T19437] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 606.396185][T19434] zswap: compressor - not available [ 606.402538][T19437] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 606.417774][T19437] EXT4-fs (loop5): This should not happen!! Data will be lost [ 606.417774][T19437] [ 606.458143][T19437] EXT4-fs (loop5): Total free blocks count 0 [ 606.488085][T19437] EXT4-fs (loop5): Free/Dirty block details [ 606.525084][T19437] EXT4-fs (loop5): free_blocks=65280 [ 606.545455][T19437] EXT4-fs (loop5): dirty_blocks=33 [ 606.570711][T19437] EXT4-fs (loop5): Block reservation details [ 606.596894][T19437] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 606.743014][ T9076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.120546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.128675][ C1] lec:lec_tx_timeout: lec0 [ 607.133794][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.173247][T19443] loop4: detected capacity change from 0 to 40427 [ 607.232318][T19443] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 607.248804][T19443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 607.279513][T19443] F2FS-fs (loop4): invalid crc value [ 607.323978][T19473] netlink: 'syz.1.4786': attribute type 39 has an invalid length. [ 607.519168][T19482] loop7: detected capacity change from 0 to 256 [ 607.574242][T19482] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 607.617727][T19443] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 607.657328][T19443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 607.748577][T19481] loop5: detected capacity change from 0 to 4096 [ 607.934223][T19443] syz.4.4778: attempt to access beyond end of device [ 607.934223][T19443] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 608.182850][T18339] syz-executor: attempt to access beyond end of device [ 608.182850][T18339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 608.241008][T18339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 608.877178][T19512] jffs2: notice: (19512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 608.977251][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4802'. [ 609.054665][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4802'. [ 609.420366][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4805'. [ 609.883625][T19529] loop5: detected capacity change from 0 to 40427 [ 609.914472][T19529] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 609.928440][T19554] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.944508][T19529] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 609.981076][T19529] F2FS-fs (loop5): invalid crc value [ 610.209354][T19565] loop1: detected capacity change from 0 to 512 [ 610.310267][T19565] FAT-fs (loop1): Directory bread(block 199916) failed [ 610.322845][T19567] loop4: detected capacity change from 0 to 1024 [ 610.331120][T19529] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 610.338245][T19529] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 610.347462][T19565] FAT-fs (loop1): Directory bread(block 199917) failed [ 610.379318][T19565] FAT-fs (loop1): Directory bread(block 199918) failed [ 610.401249][T19565] FAT-fs (loop1): Directory bread(block 199919) failed [ 610.408202][T19565] FAT-fs (loop1): Directory bread(block 199920) failed [ 610.489519][T19565] FAT-fs (loop1): Directory bread(block 199921) failed [ 610.501101][T19567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.522936][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4817'. [ 610.546995][T19565] FAT-fs (loop1): Directory bread(block 199922) failed [ 610.561218][T19574] netlink: 'syz.7.4817': attribute type 21 has an invalid length. [ 610.579316][T19565] FAT-fs (loop1): Directory bread(block 199923) failed [ 610.698166][T19567] fs-verity (loop4, inode 13): Unsupported log_blocksize: 12 [ 610.712162][T19529] syz.5.4803: attempt to access beyond end of device [ 610.712162][T19529] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 610.810043][T19565] FAT-fs (loop1): FAT read failed (blocknr 128) [ 610.846940][T18339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.862468][ T9076] syz-executor: attempt to access beyond end of device [ 610.862468][ T9076] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 610.946941][ T9076] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 611.229691][T19591] loop1: detected capacity change from 0 to 512 [ 611.313360][T19596] loop4: detected capacity change from 0 to 512 [ 611.317107][T19591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.402669][T19591] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.452751][T19596] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 611.483948][ T28] audit: type=1800 audit(1792198451.096:294): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4822" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 611.512437][T19596] FAT-fs (loop4): Filesystem has been set read-only [ 611.699886][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.378552][T19626] loop5: detected capacity change from 0 to 128 [ 612.386678][T19626] hpfs: bad mount options. [ 612.920721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 612.928793][ C1] lec:lec_tx_timeout: lec0 [ 612.934009][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.334584][T19626] loop5: detected capacity change from 0 to 40427 [ 613.382852][T19626] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 613.426731][T19626] F2FS-fs (loop5): invalid crc value [ 613.464524][T19626] F2FS-fs (loop5): Found nat_bits in checkpoint [ 613.484841][T19651] loop7: detected capacity change from 0 to 8192 [ 613.524738][T19651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 613.600680][T19651] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 613.610012][T19651] REISERFS (device loop7): using ordered data mode [ 613.631399][T19651] reiserfs: using flush barriers [ 613.671637][T19651] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 613.755390][T19626] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 613.764707][T19651] REISERFS (device loop7): checking transaction log (loop7) [ 613.842499][T19663] loop1: detected capacity change from 0 to 1024 [ 613.859482][T19651] REISERFS (device loop7): Using r5 hash to sort names [ 613.899007][T19651] REISERFS (device loop7): using 3.5.x disk format [ 613.911059][T19663] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 613.922057][T19651] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 613.931806][T19663] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 613.965326][T19626] syz.5.4833: attempt to access beyond end of device [ 613.965326][T19626] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.989532][T19663] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #32: comm syz.1.4843: iget: special inode unallocated [ 614.024695][T19626] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 614.053444][T19663] EXT4-fs (loop1): no journal found [ 614.112595][T19663] EXT4-fs (loop1): can't get journal size [ 614.143785][T19663] EXT4-fs (loop1): filesystem is read-only [ 614.164394][T19663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 614.418849][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.873295][T19685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4849'. [ 615.040787][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 615.233522][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 615.261059][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 615.272373][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.290966][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.327285][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.350956][T19703] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4853'. [ 615.370548][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.387568][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.397400][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.625271][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 615.645307][ T9] usbtmc 2-1:16.0: can't read capabilities [ 615.866118][T18638] usb 2-1: USB disconnect, device number 6 [ 616.273058][T19736] netlink: 'syz.7.4862': attribute type 9 has an invalid length. [ 616.287041][T19736] netlink: 371 bytes leftover after parsing attributes in process `syz.7.4862'. [ 616.587477][T19746] loop1: detected capacity change from 0 to 1024 [ 617.187892][T19764] loop7: detected capacity change from 0 to 128 [ 617.220985][ T55] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 617.473722][ T55] usb 2-1: not running at top speed; connect to a high speed hub [ 617.501091][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.522105][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 617.551182][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.605497][ T55] usb 2-1: Found UVC 1.00 device (046d:0825) [ 617.634591][ T55] usb 2-1: No streaming interface found for terminal 2. [ 617.823572][ T55] usb 2-1: string descriptor 0 read error: -71 [ 617.860690][ T55] usb 2-1: USB disconnect, device number 7 [ 617.876911][T19785] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.950585][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 617.958694][ C1] lec:lec_tx_timeout: lec0 [ 617.964554][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 618.624960][T19810] loop1: detected capacity change from 0 to 512 [ 618.705184][T19815] sctp: [Deprecated]: syz.5.4886 (pid 19815) Use of int in maxseg socket option. [ 618.705184][T19815] Use struct sctp_assoc_value instead [ 618.751335][T19810] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 618.817537][T19810] System zones: 0-2, 18-18, 34-34 [ 618.902067][T19810] EXT4-fs (loop1): 1 orphan inode deleted [ 618.909403][T19810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.975321][T19810] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.121849][T17212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.275861][ T28] audit: type=1326 audit(1792198458.886:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19834 comm="syz.4.4893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3eb19e559 code=0x0 [ 619.759471][ T27] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 619.798746][ T27] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.937541][T19843] loop5: detected capacity change from 0 to 32768 [ 620.027833][T19843] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 620.189810][T19843] (syz.5.4895,19843,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 620.433468][ T9076] ocfs2: Unmounting device (7,5) on (node local) [ 620.901145][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 620.980652][T19885] phram: illegal start address [ 621.121093][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 621.132669][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 621.156967][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 621.177553][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.215540][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.256897][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.280595][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.544575][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 621.550169][ T9] usbtmc 6-1:16.0: can't read capabilities [ 621.812067][ T5867] usb 6-1: USB disconnect, device number 21 [ 622.008306][T19893] loop1: detected capacity change from 0 to 40427 [ 622.029786][T19893] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 622.040032][T19893] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 622.104020][T19893] F2FS-fs (loop1): Found nat_bits in checkpoint [ 622.284176][T19893] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 622.300658][T19893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 622.990561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 622.998736][ C1] lec:lec_tx_timeout: lec0 [ 623.003895][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 623.230668][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 623.421498][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 623.447454][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.470003][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 623.497579][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 623.510708][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 623.533704][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.549620][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 623.579737][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 623.600796][ T9] usb 6-1: Manufacturer: syz [ 623.615865][ T9] usb 6-1: config 0 descriptor?? [ 623.983368][ T9] rc_core: IR keymap rc-hauppauge not found [ 624.007153][ T9] Registered IR keymap rc-empty [ 624.020763][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.070678][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.124986][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 624.159147][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 624.202997][T19972] bonding: bond0 is being created... [ 624.224550][T19972] bonding: bond0 already exists [ 624.231228][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.280698][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.322740][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.381142][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.433512][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.442828][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.449309][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.530942][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.591309][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.636870][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.688231][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.756405][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 624.814016][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 624.840793][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 624.876446][ T9] usb 6-1: USB disconnect, device number 22 [ 624.982694][T19993] loop7: detected capacity change from 0 to 64 [ 626.210597][ T5889] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 626.218951][T20034] ip_tables: iptables: counters copy to user failed while replacing table [ 626.414603][ T5889] usb 6-1: not running at top speed; connect to a high speed hub [ 626.467715][ T5889] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 626.507688][ T5889] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 626.539474][ T5889] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 626.560053][ T5889] usb 6-1: Product: syz [ 626.573668][ T5889] usb 6-1: Manufacturer: syz [ 626.609509][ T5889] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 626.823371][ T5889] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 626.852817][ T5889] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 626.886164][ T5889] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 626.939010][ T5889] usb 6-1: USB disconnect, device number 23 [ 627.128690][T20036] loop1: detected capacity change from 0 to 32768 [ 627.172887][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4956'. [ 627.221771][T20036] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 627.321737][T20036] XFS (loop1): Ending clean mount [ 627.722361][T17212] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 628.030616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 628.038711][ C1] lec:lec_tx_timeout: lec0 [ 628.045069][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.459477][T20074] loop7: detected capacity change from 0 to 32768 [ 628.577317][T20074] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 628.577317][T20074] [ 628.677171][T20074] ERROR: (device loop7): remounting filesystem as read-only [ 629.067131][ T28] audit: type=1326 audit(1792198468.676:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.4.4974" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x0 [ 629.310340][T20128] loop7: detected capacity change from 0 to 128 [ 629.400382][T20128] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.512458][T20128] ext4 filesystem being mounted at /599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 629.877679][T12945] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.188134][T20155] loop7: detected capacity change from 0 to 1024 [ 630.261348][T20155] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 630.280926][T20155] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 630.311827][T20155] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 630.518666][T20172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4987'. [ 630.693628][T20179] loop5: detected capacity change from 0 to 128 [ 630.779253][T20179] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.797263][T20179] ext4 filesystem being mounted at /967/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 631.137302][ T9076] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.322098][T20202] loop4: detected capacity change from 0 to 64 [ 631.590812][T20193] loop1: detected capacity change from 0 to 8192 [ 631.654558][T20193] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.208963][T20224] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5005'. [ 632.415007][T20230] loop4: detected capacity change from 0 to 1024 [ 632.537676][T20209] loop5: detected capacity change from 0 to 32768 [ 632.839667][T20239] netlink: 139 bytes leftover after parsing attributes in process `syz.1.5010'. [ 632.906673][T20240] loop4: detected capacity change from 0 to 512 [ 632.994731][T20240] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.5009: iget: bad i_size value: 38620345925642 [ 633.037101][T20240] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.5009: couldn't read orphan inode 15 (err -117) [ 633.060548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 633.068619][ C1] lec:lec_tx_timeout: lec0 [ 633.073539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 633.123121][T20240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.183114][T20240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.5009: bg 0: block 5: invalid block bitmap [ 633.246771][T20250] gretap0: entered promiscuous mode [ 633.260851][T20240] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28 [ 633.446082][T18339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.741182][T20260] loop1: detected capacity change from 0 to 2048 [ 633.806616][T20260] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.5017: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 633.850059][T20260] EXT4-fs (loop1): get root inode failed [ 633.850082][T20260] EXT4-fs (loop1): mount failed [ 634.187433][T20281] loop5: detected capacity change from 0 to 512 [ 634.222079][T20281] EXT4-fs: inline encryption not supported [ 634.228246][T20281] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.261591][T20281] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.286722][T20281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 634.318126][T20281] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 634.332498][T20281] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5021: invalid indirect mapped block 2683928664 (level 1) [ 634.347874][T20281] EXT4-fs (loop5): Remounting filesystem read-only [ 634.355220][T20281] EXT4-fs (loop5): 1 truncate cleaned up [ 634.362707][T20281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.378581][T20281] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 634.462353][ T9076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.762824][T20297] loop5: detected capacity change from 0 to 128 [ 634.783480][T20297] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 634.846207][T20297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 634.971862][T20301] loop1: detected capacity change from 0 to 4096 [ 635.467425][T20313] loop1: detected capacity change from 0 to 2048 [ 635.521975][T20314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 635.579925][ T28] audit: type=1800 audit(1792198475.186:297): pid=20313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5033" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 635.664210][ T28] audit: type=1800 audit(1792198475.216:298): pid=20313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5033" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 635.758045][T20314] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 635.769385][T20314] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 635.788622][T20314] Remounting filesystem read-only [ 635.794351][ T11] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 635.809117][ T11] NILFS (loop1): discard dirty block: blocknr=22, size=1024 [ 635.817109][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.830111][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.846236][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.856954][ T11] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 635.870410][ T11] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 635.878570][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.900921][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.920135][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.937812][ T11] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 635.945271][ T11] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 635.955754][ T11] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 635.963561][ T11] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 635.971481][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.980738][ T11] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 635.988504][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 635.998199][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.007559][ T11] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 636.018416][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.037740][ T11] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 636.048455][ T11] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 636.058666][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.079964][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.089529][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.101037][T17212] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 636.117735][T17212] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 636.130607][T17212] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.150076][T17212] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 636.180430][T17212] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 636.201053][T17212] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 636.464350][T20327] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 637.788203][T20386] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input30 [ 638.080649][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 638.088725][ C1] lec:lec_tx_timeout: lec0 [ 638.861641][T20434] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input31 [ 638.910803][ T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 639.137865][ T55] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 639.171110][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.179331][T20443] loop4: detected capacity change from 0 to 2048 [ 639.208458][ T55] usb 2-1: config 0 descriptor?? [ 639.248544][ T55] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 639.262284][T20443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.376190][T20450] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5075'. [ 639.508205][T18339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.069547][ T55] gspca_sunplus: reg_w_riv err -71 [ 640.090312][ T55] sunplus: probe of 2-1:0.0 failed with error -71 [ 640.128069][ T55] usb 2-1: USB disconnect, device number 8 [ 640.233538][T20476] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input32 [ 640.935900][T20497] loop4: detected capacity change from 0 to 128 [ 641.011222][T20497] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 641.108480][ T28] audit: type=1800 audit(1792198480.706:299): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5092" name="file2" dev="loop4" ino=95 res=0 errno=0 [ 642.175243][T20539] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5108'. [ 642.268428][T20535] loop4: detected capacity change from 0 to 32768 [ 642.316342][T20535] Dev loop4 SGI disklabel: csum bad, label corrupted [ 642.450933][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5109'. [ 643.100893][ T55] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 643.217092][T20568] binder: 20567:20568 ioctl c0306201 0 returned -14 [ 643.292518][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.324431][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 643.343636][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.369220][ T55] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 643.380322][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.398943][ T55] usb 6-1: Product: syz [ 643.405500][ T55] usb 6-1: Manufacturer: syz [ 643.410167][ T55] usb 6-1: SerialNumber: syz [ 643.463499][ T55] usb 6-1: Found UVC 1.00 device syz (046d:0821) [ 643.480310][ T55] usb 6-1: No valid video chain found. [ 643.714270][ T55] usb 6-1: USB disconnect, device number 24 [ 643.814500][T20584] netlink: 'syz.4.5119': attribute type 1 has an invalid length. [ 643.830739][T20584] netlink: 'syz.4.5119': attribute type 1 has an invalid length. [ 643.860915][T20584] iwpm_send_hello: Unable to send a nlmsg [ 643.995507][T20590] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 644.661215][T20613] loop1: detected capacity change from 0 to 4096 [ 644.710635][T20613] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 644.854156][T20613] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 645.068787][T20631] pimreg: tun_chr_ioctl cmd 1074025677 [ 645.087928][T20631] pimreg: linktype set to 774 [ 645.295157][T20630] loop5: detected capacity change from 0 to 8192 [ 646.081095][T20657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 646.647001][T20672] loop5: detected capacity change from 0 to 1024 [ 646.693962][T20672] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 646.777739][T20672] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #3: block 1: comm syz.5.5143: lblock 1 mapped to illegal pblock 1 (length 1) [ 646.846049][T20672] Quota error (device loop5): write_blk: dquota write failed [ 646.861670][T20672] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 646.872927][T20672] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.5143: Failed to acquire dquot type 0 [ 646.902064][T20684] loop4: detected capacity change from 0 to 512 [ 646.998185][T20672] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.5143: Freeing blocks not in datazone - block = 0, count = 4096 [ 647.075851][T20672] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.5143: Invalid inode bitmap blk 0 in block_group 0 [ 647.133295][T20684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.185569][T20672] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 647.207288][T20684] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.244817][T20672] EXT4-fs (loop5): 1 orphan inode deleted [ 647.267811][T20672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.461366][T20672] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.5143: Invalid inode table block 18446744069414584321 in block_group 0 [ 647.569858][T20672] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 647.858750][T18339] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.863815][T20683] loop7: detected capacity change from 0 to 131072 [ 647.878592][T20683] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (512, 24) [ 647.886792][T20683] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 647.895251][T20683] F2FS-fs (loop7): Test dummy encryption mode enabled [ 647.914175][ T9076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.923384][T20683] F2FS-fs (loop7): invalid crc value [ 648.033410][T20683] F2FS-fs (loop7): Found nat_bits in checkpoint [ 648.077468][T20683] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 648.121422][T20683] F2FS-fs (loop7): Start checkpoint disabled! [ 648.173808][T20683] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 648.181523][T20683] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 648.653213][T20692] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 648.890632][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 649.110707][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 649.138678][ T23] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 649.170616][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.178776][ T23] usb 2-1: Product: syz [ 649.232253][ T23] usb 2-1: Manufacturer: syz [ 649.236948][ T23] usb 2-1: SerialNumber: syz [ 649.525306][ T23] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 649.563629][ T55] IPVS: starting estimator thread 0... [ 649.575107][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.609835][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 649.633482][ T23] usb 2-1: media controller created [ 649.670807][T20739] IPVS: using max 17 ests per chain, 40800 per kthread [ 649.705643][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.814247][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 649.921147][ T23] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 649.968596][ T23] usb 2-1: USB disconnect, device number 9 [ 650.205907][T20751] CacheFiles: Failed to register: -95 [ 650.278998][ T28] audit: type=1326 audit(1792198489.886:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.361583][ T28] audit: type=1326 audit(1792198489.916:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.385695][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.455709][ T28] audit: type=1326 audit(1792198489.916:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.479880][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.526874][ T28] audit: type=1326 audit(1792198489.926:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.550886][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.582841][ T28] audit: type=1326 audit(1792198489.926:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.660589][ T28] audit: type=1326 audit(1792198489.926:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.684706][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.702641][ T28] audit: type=1326 audit(1792198489.936:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.761109][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 650.785646][ T28] audit: type=1326 audit(1792198489.936:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20753 comm="syz.4.5165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3eb19e559 code=0x7ffc0000 [ 650.991875][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 651.002530][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 651.028859][ T9] usb 6-1: config 0 has no interface number 0 [ 651.060231][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 651.087150][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.102152][ T9] usb 6-1: Product: syz [ 651.108489][ T9] usb 6-1: Manufacturer: syz [ 651.131286][ T9] usb 6-1: SerialNumber: syz [ 651.149265][ T9] usb 6-1: config 0 descriptor?? [ 651.213729][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 651.469730][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 651.518810][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 651.855882][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 651.993149][T20804] loop1: detected capacity change from 0 to 2048 [ 652.056097][T20804] loop1: p3 < > p4 < > [ 652.069797][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 652.079439][T20804] loop1: partition table partially beyond EOD, truncated [ 652.087990][ T9] usb 6-1: USB disconnect, device number 25 [ 652.100896][T20804] loop1: p3 start 4284289 is beyond EOD, truncated [ 652.113936][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 652.152211][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 652.202049][ T9] quatech2 6-1:0.51: device disconnected [ 652.285607][T20813] loop7: detected capacity change from 0 to 256 [ 652.327506][T20813] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 652.537865][T20817] loop7: detected capacity change from 0 to 256 [ 652.556817][T20817] exfat: Deprecated parameter 'utf8' [ 652.570252][T20817] exfat: Deprecated parameter 'utf8' [ 652.632765][T20817] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 653.188319][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 653.188336][ T28] audit: type=1400 audit(1792198492.796:349): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=20836 comm="syz.4.5191" name="foo" offset=81 [ 653.496899][ T28] audit: type=1400 audit(1792198493.106:350): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=20852 comm="syz.4.5198" name="unknown" offset=28 [ 653.572198][T20855] loop5: detected capacity change from 0 to 128 [ 653.603849][T20855] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 653.612808][T20855] FAT-fs (loop5): Filesystem has been set read-only [ 653.918542][T20868] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5205'. [ 653.973822][T20869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5206'. [ 654.305649][T17005] kernel write not supported for file /amidi2 (pid: 17005 comm: kworker/1:7) [ 654.515746][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'. [ 654.532802][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'. [ 654.582818][T20893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5215'. [ 654.609976][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5215'. [ 655.090810][T17005] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 655.301919][T17005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.322721][T17005] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 655.337520][T17005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.766000][T17005] usbhid 6-1:1.0: can't add hid device: -71 [ 655.773138][T17005] usbhid: probe of 6-1:1.0 failed with error -71 [ 655.787032][T17005] usb 6-1: USB disconnect, device number 26 [ 667.470731][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 680.288098][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 685.875461][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.882256][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.950611][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 685.958678][ C1] lec:lec_tx_timeout: lec0 [ 685.963573][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 690.970501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.978549][ C1] lec:lec_tx_timeout: lec0 [ 744.826020][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 747.315747][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.328519][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.950597][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 749.958736][ C1] lec:lec_tx_timeout: lec0 [ 749.963373][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 754.970572][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 754.978600][ C1] lec:lec_tx_timeout: lec0 [ 780.118994][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 808.448169][T14155] lec:lec_start_xmit: lec0:No lecd attached [ 808.755371][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.762066][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.950724][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 813.958776][ C1] lec:lec_tx_timeout: lec0 [ 813.963549][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 815.801119][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 815.808925][ T29] Not tainted syzkaller #0 [ 815.814031][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.822831][ T29] task:jbd2/sda1-8 state:D stack:25848 pid:5103 ppid:2 flags:0x00004000 [ 815.832618][ T29] Call Trace: [ 815.836046][ T29] [ 815.839022][ T29] __schedule+0x15ae/0x4660 [ 815.845054][ T29] ? asan.module_dtor+0x20/0x20 [ 815.849978][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 815.858146][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 815.866991][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 815.875357][ T29] schedule+0xbd/0x170 [ 815.879461][ T29] io_schedule+0x80/0xd0 [ 815.883871][ T29] bit_wait_io+0x11/0xd0 [ 815.888180][ T29] __wait_on_bit+0x9f/0x2c0 [ 815.893333][ T29] ? bit_wait+0xd0/0xd0 [ 815.897573][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 815.903344][ T29] ? bit_wait+0xd0/0xd0 [ 815.907549][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 815.912504][ T29] ? do_raw_write_lock+0x11e/0x260 [ 815.917681][ T29] ? bit_waitqueue+0x30/0x30 [ 815.922709][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 815.927792][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 815.934330][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 815.941273][ T29] ? lock_chain_count+0x20/0x20 [ 815.946192][ T29] ? _raw_spin_unlock+0x40/0x40 [ 815.952198][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 815.957898][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 815.966634][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 815.973714][ T29] ? timer_delete_sync+0x20/0x20 [ 815.981539][ T29] ? do_raw_read_unlock+0x80/0x80 [ 815.986719][ T29] ? prepare_to_wait+0x1aa/0x200 [ 815.992411][ T29] kjournald2+0x40f/0x810 [ 815.996829][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 816.002619][ T29] ? wake_bit_function+0x200/0x200 [ 816.007778][ T29] ? _raw_spin_unlock+0x40/0x40 [ 816.012744][ T29] ? __kthread_parkme+0x71/0x1c0 [ 816.017737][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 816.022980][ T29] kthread+0x2fa/0x390 [ 816.027098][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 816.032867][ T29] ? kthread_blkcg+0xd0/0xd0 [ 816.037501][ T29] ret_from_fork+0x48/0x80 [ 816.042126][ T29] ? kthread_blkcg+0xd0/0xd0 [ 816.046867][ T29] ret_from_fork_asm+0x11/0x20 [ 816.051817][ T29] [ 816.054894][ T29] INFO: task syz-executor:5764 blocked for more than 143 seconds. [ 816.062875][ T29] Not tainted syzkaller #0 [ 816.067840][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.077207][ T29] task:syz-executor state:D stack:22408 pid:5764 ppid:5763 flags:0x00004002 [ 816.090164][ T29] Call Trace: [ 816.093622][ T29] [ 816.096603][ T29] __schedule+0x15ae/0x4660 [ 816.102602][ T29] ? mark_lock+0x94/0x320 [ 816.107000][ T29] ? asan.module_dtor+0x20/0x20 [ 816.112175][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.117360][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 816.123643][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 816.128931][ T29] schedule+0xbd/0x170 [ 816.133239][ T29] io_schedule+0x80/0xd0 [ 816.137574][ T29] bit_wait_io+0x11/0xd0 [ 816.142094][ T29] __wait_on_bit+0x9f/0x2c0 [ 816.146690][ T29] ? bit_wait+0xd0/0xd0 [ 816.150963][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 816.156484][ T29] ? bit_wait+0xd0/0xd0 [ 816.160843][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 816.165655][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 816.170803][ T29] ? bit_waitqueue+0x30/0x30 [ 816.176018][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 816.184892][ T29] do_get_write_access+0x5c9/0xe00 [ 816.190050][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 816.197603][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 816.205209][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 816.213751][ T29] ? __might_sleep+0xe0/0xe0 [ 816.218417][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 816.224218][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 816.229760][ T29] ext4_dirty_inode+0xcb/0x110 [ 816.235667][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 816.242652][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 816.247755][ T29] file_update_time+0x187/0x1a0 [ 816.252763][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 816.258396][ T29] ? do_wp_page+0x4ce/0x34d0 [ 816.263243][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 816.269547][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.274718][ T29] do_page_mkwrite+0x153/0x3f0 [ 816.281443][ T29] do_wp_page+0xd4d/0x34d0 [ 816.286036][ T29] ? folio_put+0xd0/0xd0 [ 816.290328][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 816.295569][ T29] ? __rwlock_init+0x150/0x150 [ 816.300618][ T29] handle_mm_fault+0x1306/0x4a50 [ 816.305627][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 816.311778][ T29] ? numa_migrate_prep+0x350/0x350 [ 816.316963][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 816.324805][ T29] do_user_addr_fault+0x736/0x12d0 [ 816.330016][ T29] exc_page_fault+0x64/0x100 [ 816.334764][ T29] ? clear_bhb_loop+0x40/0x90 [ 816.339530][ T29] asm_exc_page_fault+0x26/0x30 [ 816.344943][ T29] RIP: 0033:0x7f7ca16705e3 [ 816.349434][ T29] RSP: 002b:00007ffe6a41cc70 EFLAGS: 00010202 [ 816.356712][ T29] RAX: 00007f7c9e400000 RBX: 00007ffe6a41cda0 RCX: 00000000005ffde8 [ 816.364868][ T29] RDX: 00007f7c9e3ffffc RSI: 0000000000000008 RDI: 00007ffe6a41cda0 [ 816.372969][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 816.381749][ T29] R10: 00007ffe6a41cd80 R11: 0000000000000000 R12: 0000000000000000 [ 816.389837][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 816.398046][ T29] [ 816.401285][ T29] INFO: task syz.1.5223:20920 blocked for more than 143 seconds. [ 816.409046][ T29] Not tainted syzkaller #0 [ 816.415460][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.426321][ T29] task:syz.1.5223 state:D stack:26696 pid:20920 ppid:17212 flags:0x00004004 [ 816.436963][ T29] Call Trace: [ 816.440622][ T29] [ 816.445699][ T29] __schedule+0x15ae/0x4660 [ 816.450306][ T29] ? mark_lock+0x94/0x320 [ 816.454811][ T29] ? asan.module_dtor+0x20/0x20 [ 816.459739][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.467050][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 816.473085][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 816.478335][ T29] schedule+0xbd/0x170 [ 816.483266][ T29] io_schedule+0x80/0xd0 [ 816.490158][ T29] bit_wait_io+0x11/0xd0 [ 816.494538][ T29] __wait_on_bit+0x9f/0x2c0 [ 816.499095][ T29] ? bit_wait+0xd0/0xd0 [ 816.503543][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 816.509063][ T29] ? bit_wait+0xd0/0xd0 [ 816.513405][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 816.518221][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 816.523488][ T29] ? bit_waitqueue+0x30/0x30 [ 816.528149][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 816.533522][ T29] do_get_write_access+0x5c9/0xe00 [ 816.538739][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 816.545163][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 816.551488][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 816.557703][ T29] ? __might_sleep+0xe0/0xe0 [ 816.566243][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 816.571947][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 816.577505][ T29] ext4_dirty_inode+0xcb/0x110 [ 816.586278][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 816.592856][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 816.597968][ T29] file_update_time+0x187/0x1a0 [ 816.603052][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 816.608135][ T29] ? filemap_fault+0x103c/0x1540 [ 816.613236][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 816.619028][ T29] ? pte_alloc_one+0x3b6/0x540 [ 816.624075][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 816.630525][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.635709][ T29] do_page_mkwrite+0x153/0x3f0 [ 816.640690][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 816.645700][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 816.650947][ T29] ? numa_migrate_prep+0x350/0x350 [ 816.656207][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 816.664675][ T29] do_user_addr_fault+0x736/0x12d0 [ 816.669958][ T29] exc_page_fault+0x64/0x100 [ 816.677063][ T29] ? clear_bhb_loop+0x40/0x90 [ 816.683960][ T29] asm_exc_page_fault+0x26/0x30 [ 816.692021][ T29] RIP: 0033:0x7f94f726bea3 [ 816.696498][ T29] RSP: 002b:00007ffe4fc4f8b0 EFLAGS: 00010246 [ 816.702803][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f064000 [ 816.712016][ T29] RDX: 0000001b2f024000 RSI: 0000000000400000 RDI: 00007f94f75e4708 [ 816.720025][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 816.728630][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 816.736755][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe4fc4fb40 [ 816.745024][ T29] [ 816.748124][ T29] INFO: task syz.5.5222:20921 blocked for more than 144 seconds. [ 816.755975][ T29] Not tainted syzkaller #0 [ 816.761238][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.769954][ T29] task:syz.5.5222 state:D stack:27560 pid:20921 ppid:9076 flags:0x00004004 [ 816.780325][ T29] Call Trace: [ 816.787158][ T29] [ 816.796833][ T29] __schedule+0x15ae/0x4660 [ 816.804679][ T29] ? mark_lock+0x94/0x320 [ 816.809043][ T29] ? asan.module_dtor+0x20/0x20 [ 816.814067][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.819185][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 816.825412][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 816.830784][ T29] schedule+0xbd/0x170 [ 816.834910][ T29] io_schedule+0x80/0xd0 [ 816.839203][ T29] bit_wait_io+0x11/0xd0 [ 816.843627][ T29] __wait_on_bit+0x9f/0x2c0 [ 816.848188][ T29] ? bit_wait+0xd0/0xd0 [ 816.852464][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 816.857964][ T29] ? bit_wait+0xd0/0xd0 [ 816.862426][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 816.867233][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 816.872582][ T29] ? bit_waitqueue+0x30/0x30 [ 816.877219][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 816.884170][ T29] do_get_write_access+0x5c9/0xe00 [ 816.889459][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 816.898208][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 816.904783][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 816.911694][ T29] ? __might_sleep+0xe0/0xe0 [ 816.916362][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 816.922751][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 816.928293][ T29] ext4_dirty_inode+0xcb/0x110 [ 816.933498][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 816.939360][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 816.944920][ T29] file_update_time+0x187/0x1a0 [ 816.949922][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 816.955725][ T29] ? filemap_fault+0x103c/0x1540 [ 816.961002][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 816.966778][ T29] ? pte_alloc_one+0x3b6/0x540 [ 816.971987][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 816.978306][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 816.984011][ T29] do_page_mkwrite+0x153/0x3f0 [ 816.988822][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 816.995823][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 817.001149][ T29] ? numa_migrate_prep+0x350/0x350 [ 817.006342][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 817.013000][ T29] do_user_addr_fault+0x736/0x12d0 [ 817.018206][ T29] exc_page_fault+0x64/0x100 [ 817.023707][ T29] ? clear_bhb_loop+0x40/0x90 [ 817.028449][ T29] asm_exc_page_fault+0x26/0x30 [ 817.034803][ T29] RIP: 0033:0x7fa8c826bea3 [ 817.039275][ T29] RSP: 002b:00007ffe7b5105b0 EFLAGS: 00010246 [ 817.046956][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b31564000 [ 817.055242][ T29] RDX: 0000001b31524000 RSI: 0000000000600000 RDI: 00007fa8c85e4708 [ 817.063570][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.074450][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 817.082906][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe7b510840 [ 817.091293][ T29] [ 817.094366][ T29] [ 817.094366][ T29] Showing all locks held in the system: [ 817.104490][ T29] 1 lock held by khungtaskd/29: [ 817.109390][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 817.119827][ T29] 2 locks held by kworker/u4:5/63: [ 817.128408][ T29] 6 locks held by kworker/u4:9/4749: [ 817.137158][ T29] #0: ffff888140045138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 817.149075][ T29] #1: ffffc9000f6e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 817.163149][ T29] #2: ffff88814e62e0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 817.174066][ T29] #3: ffff88814e630c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 817.184960][ T29] #4: ffff88814e632990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 817.195417][ T29] #5: ffff8880772d7088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 817.207292][ T29] 1 lock held by syslogd/5122: [ 817.212408][ T29] #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 817.222995][ T29] 2 locks held by getty/5535: [ 817.227719][ T29] #0: ffff8880326b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 817.238415][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 817.251962][ T29] 3 locks held by syz-executor/5764: [ 817.257300][ T29] #0: ffff888032453aa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 817.269076][ T29] #1: ffff88814e62e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 817.279016][ T29] #2: ffff88814e632990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 817.288829][ T29] 3 locks held by syz.1.5223/20920: [ 817.294214][ T29] #0: ffff888032453120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 817.306246][ T29] #1: ffff88814e62e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 817.316470][ T29] #2: ffff88814e632990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 817.326316][ T29] 3 locks held by syz.5.5222/20921: [ 817.331706][ T29] #0: ffff888026869e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 817.341872][ T29] #1: ffff88814e62e510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 817.351963][ T29] #2: ffff88814e632990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 817.361857][ T29] [ 817.364229][ T29] ============================================= [ 817.364229][ T29] [ 817.372853][ T29] NMI backtrace for cpu 1 [ 817.377219][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 817.384459][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 817.394536][ T29] Call Trace: [ 817.397834][ T29] [ 817.400783][ T29] dump_stack_lvl+0x18c/0x250 [ 817.405486][ T29] ? __wake_up_klogd+0xd9/0x100 [ 817.410392][ T29] ? show_regs_print_info+0x20/0x20 [ 817.415620][ T29] ? load_image+0x420/0x420 [ 817.420159][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 817.425155][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 817.431795][ T29] ? load_image+0x420/0x420 [ 817.436339][ T29] ? wq_watchdog_touch+0xef/0x170 [ 817.441394][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 817.447498][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 817.453502][ T29] watchdog+0xf59/0xfa0 [ 817.457704][ T29] ? watchdog+0x1e1/0xfa0 [ 817.462088][ T29] kthread+0x2fa/0x390 [ 817.466201][ T29] ? hungtask_pm_notify+0x50/0x50 [ 817.471267][ T29] ? kthread_blkcg+0xd0/0xd0 [ 817.475887][ T29] ret_from_fork+0x48/0x80 [ 817.480334][ T29] ? kthread_blkcg+0xd0/0xd0 [ 817.484955][ T29] ret_from_fork_asm+0x11/0x20 [ 817.489761][ T29] [ 817.493684][ T29] Sending NMI from CPU 1 to CPUs 0: [ 817.498942][ C0] NMI backtrace for cpu 0 [ 817.498954][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 817.498971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 817.498983][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 817.499051][ C0] RIP: 0010:unwind_next_frame+0x23f/0x2990 [ 817.499072][ C0] Code: 00 44 39 f5 0f 86 46 1d 00 00 44 89 f0 4c 8d 24 85 40 fe 94 90 4c 89 e0 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f b6 04 18 <84> c0 0f 85 03 22 00 00 45 8b 24 24 44 89 f0 ff c0 48 8d 2c 85 40 [ 817.499086][ C0] RSP: 0018:ffffc90000b9f5d8 EFLAGS: 00000a07 [ 817.499100][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 817.499112][ C0] RDX: ffff888019699e00 RSI: 000000000000762b RDI: 000000000009c000 [ 817.499123][ C0] RBP: 000000000009c000 R08: ffffc90000b9f770 R09: 0000000000000000 [ 817.499135][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff9096d6ec [ 817.499146][ C0] R13: 000000000009c001 R14: 000000000000762b R15: 0000000000000001 [ 817.499157][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 817.499171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.499183][ C0] CR2: 00007f717355b6c8 CR3: 000000000dd32000 CR4: 00000000003506f0 [ 817.499198][ C0] Call Trace: [ 817.499205][ C0] [ 817.499215][ C0] ? stack_trace_save+0xa9/0x100 [ 817.499239][ C0] ? stack_trace_save+0xaa/0x100 [ 817.499261][ C0] ? stack_trace_save+0xaa/0x100 [ 817.499281][ C0] ? stack_trace_save+0x100/0x100 [ 817.499302][ C0] arch_stack_walk+0x144/0x190 [ 817.499324][ C0] ? stack_trace_save+0xaa/0x100 [ 817.499348][ C0] stack_trace_save+0xaa/0x100 [ 817.499369][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 817.499389][ C0] ? skb_release_data+0x609/0x7f0 [ 817.499498][ C0] ? worker_thread+0xa5e/0xfe0 [ 817.499519][ C0] ? kthread+0x2fa/0x390 [ 817.499535][ C0] ? ret_from_fork+0x48/0x80 [ 817.499555][ C0] ? ret_from_fork_asm+0x11/0x20 [ 817.499581][ C0] kasan_set_track+0x4e/0x70 [ 817.499631][ C0] ? kmem_cache_free+0xf8/0x290 [ 817.499657][ C0] kasan_save_free_info+0x28/0x40 [ 817.499681][ C0] ____kasan_slab_free+0x126/0x1f0 [ 817.499704][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 817.499725][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 817.499746][ C0] kmem_cache_free+0xf8/0x290 [ 817.499775][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 817.499803][ C0] ? process_scheduled_works+0x975/0x1600 [ 817.499828][ C0] process_scheduled_works+0xa60/0x1600 [ 817.499866][ C0] ? worker_attach_to_pool+0x370/0x370 [ 817.499892][ C0] ? assign_work+0x3cc/0x5d0 [ 817.499916][ C0] worker_thread+0xa5e/0xfe0 [ 817.499953][ C0] kthread+0x2fa/0x390 [ 817.499970][ C0] ? pr_cont_work+0x550/0x550 [ 817.499991][ C0] ? kthread_blkcg+0xd0/0xd0 [ 817.500009][ C0] ret_from_fork+0x48/0x80 [ 817.500029][ C0] ? kthread_blkcg+0xd0/0xd0 [ 817.500046][ C0] ret_from_fork_asm+0x11/0x20 [ 817.500077][ C0] [ 817.809460][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 817.816344][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 817.823575][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 817.833669][ T29] Call Trace: [ 817.836992][ T29] [ 817.839958][ T29] dump_stack_lvl+0x18c/0x250 [ 817.844675][ T29] ? show_regs_print_info+0x20/0x20 [ 817.849886][ T29] ? load_image+0x420/0x420 [ 817.854517][ T29] panic+0x2ca/0x720 [ 817.858450][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 817.862972][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 817.868570][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 817.873976][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 817.880202][ T29] watchdog+0xf98/0xfa0 [ 817.884378][ T29] ? watchdog+0x1e1/0xfa0 [ 817.888725][ T29] kthread+0x2fa/0x390 [ 817.892818][ T29] ? hungtask_pm_notify+0x50/0x50 [ 817.897879][ T29] ? kthread_blkcg+0xd0/0xd0 [ 817.902517][ T29] ret_from_fork+0x48/0x80 [ 817.906980][ T29] ? kthread_blkcg+0xd0/0xd0 [ 817.911612][ T29] ret_from_fork_asm+0x11/0x20 [ 817.916440][ T29] [ 817.920081][ T29] Kernel Offset: disabled [ 817.924416][ T29] Rebooting in 86400 seconds..