last executing test programs: 3m51.233328831s ago: executing program 32 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0x3, @private0, 0x917d}}, 0x0, 0x0, 0x3c, 0x0, "11f24c2903d7b45a8f64ba9cd6c598579c42c6934894fe1470a49630512bae38d98984b3b03f004188eff625b8abad6bb3123870fd21eb5fd77abc1b8597a7df0888263de989607b9e13ae69d6d4cc6d"}, 0xd8) 3m48.290612302s ago: executing program 33 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 3m24.816420748s ago: executing program 34 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x60ed8, 0x5ea41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5d483d84d6925a46}, 0x200088c2) 3m17.200106635s ago: executing program 35 (id=720): r0 = syz_open_dev$loop(&(0x7f0000001540), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/fscaps', 0x82803, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000015c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x11, 0x1d, 0x4, "7f12aaa9d802b5665e8fc89b7c6314a6bb462534ce80b43c0479187d69b3617861d429b40665a81cfe53e03bca0b5ea1bf3716d30a8b8e32dc8bb56673fc9a74", "b2b67709a251b9bcac61a179bc1051ca36db62acedf6b2e55fdd02f04499b80e3197257e53c7a59c9fa8faf9e0f7fda8500f5b1f3a34c1de8635c936518b724f", "ed166c5a4c49713592344127227d0903a8ac559239f6189263ac6be58740b449", [0x4, 0x1009]}) 2m25.56860894s ago: executing program 6 (id=1183): rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffff7ec]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4, r0, 0x0}]) 2m25.170467152s ago: executing program 6 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000280)='1\x00', 0x1) 2m24.813121627s ago: executing program 6 (id=1198): r0 = socket$alg(0x26, 0x5, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x401, 0x1018, r2, 0x0) 2m24.566829663s ago: executing program 6 (id=1203): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m23.764757095s ago: executing program 6 (id=1212): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0xa0080, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x60c40, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m23.135567429s ago: executing program 6 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{0x4000009d, 0x0, 0x2}, {0x28a, 0x0, 0x4}, {0x174, 0x0, 0x3}]}) 2m22.485320875s ago: executing program 36 (id=1218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{0x4000009d, 0x0, 0x2}, {0x28a, 0x0, 0x4}, {0x174, 0x0, 0x3}]}) 2m9.051923775s ago: executing program 8 (id=1323): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000400), 0x1, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 2m8.660205366s ago: executing program 8 (id=1329): r0 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f0000000d40)=0x1) 2m6.84914166s ago: executing program 8 (id=1340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140), 0x91) splice(r1, 0x0, r0, &(0x7f0000000180)=0x8008, 0x9, 0x0) 2m6.676122398s ago: executing program 8 (id=1341): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) 2m6.447459741s ago: executing program 8 (id=1344): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108) 2m6.304206236s ago: executing program 7 (id=1347): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 2m5.999638587s ago: executing program 8 (id=1349): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x4) 2m5.336391985s ago: executing program 37 (id=1349): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x4) 2m4.364601474s ago: executing program 7 (id=1358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1d, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.964263765s ago: executing program 7 (id=1364): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x40000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xc1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 2m3.397407033s ago: executing program 7 (id=1368): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x497, &(0x7f0000002940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000) 2m2.682455876s ago: executing program 7 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000005646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m1.66716434s ago: executing program 7 (id=1379): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0xff80) 2m1.135328494s ago: executing program 38 (id=1379): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0xff80) 1m49.746761656s ago: executing program 9 (id=1464): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4) 1m49.1290817s ago: executing program 9 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xffffffffffffff0e}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1m48.740821699s ago: executing program 9 (id=1469): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) 1m47.763808129s ago: executing program 9 (id=1473): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$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") chdir(&(0x7f00000003c0)='./file0\x00') syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0) 1m46.763050061s ago: executing program 9 (id=1475): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0x7fff7ffd}]}) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000f74000/0x3000)=nil, 0x3) 1m42.504201476s ago: executing program 9 (id=1487): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[{0x18, 0x29, 0x37, "d8f0"}], 0x18}}], 0x1, 0x0) 1m42.030172144s ago: executing program 39 (id=1487): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[{0x18, 0x29, 0x37, "d8f0"}], 0x18}}], 0x1, 0x0) 1m15.940293008s ago: executing program 3 (id=1672): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m15.736702938s ago: executing program 3 (id=1675): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800040000000000080003000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) 1m15.506360782s ago: executing program 3 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m15.238276439s ago: executing program 3 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) 1m14.859794428s ago: executing program 3 (id=1686): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m14.560097978s ago: executing program 3 (id=1687): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 59.488475957s ago: executing program 40 (id=1687): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 6.135913873s ago: executing program 0 (id=2184): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x14, 0x693, &(0x7f00000000c0)="$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") setrlimit(0x1, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000021c0)='./file1\x00', 0x20fffbfff8) open(&(0x7f0000002200)='./file1\x00', 0x80242, 0x0) 5.594947798s ago: executing program 0 (id=2189): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x4, 0x746, 0x3, 0x4, 0xfb, 0x5d, 0xb}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x300}, 0xe) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000000b80)="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", 0x2a1}], 0x1) 5.167822392s ago: executing program 0 (id=2192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b0000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0x158, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4.710890649s ago: executing program 0 (id=2207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "f9d0875c"}]}]}]}]}, 0x40}}, 0x8000) 4.40809807s ago: executing program 0 (id=2201): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.135006968s ago: executing program 5 (id=2205): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = fanotify_init(0x40, 0x800) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000004540)=""/4090, 0xffa}], 0x1, 0xa, 0xb) 3.844005777s ago: executing program 4 (id=2208): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.576736475s ago: executing program 4 (id=2209): unshare(0x22020600) eventfd2(0x42000006, 0x801) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000002e80)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0xa425, 0x2, 0x3, 0x5a720035, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x80000006, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c5, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10004, 0x2, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x208, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x4000005, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c9368f, 0xe79, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0x2000000b, 0x6, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0xfffffff7, 0x86, 0x3, 0x303a, 0xfffffffd, 0xb, 0x5, 0xfffffffb, 0x6, 0x400001, 0x6, 0x7f, 0x6d05, 0x2, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0x7, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2026, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x5, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x14000, 0x0, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14b, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x4, 0x200af, 0x0, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xff7]}, 0x45c) ppoll(&(0x7f0000002e40)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.502686242s ago: executing program 5 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.402825393s ago: executing program 4 (id=2212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.362306006s ago: executing program 1 (id=2213): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000940)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.288041004s ago: executing program 5 (id=2214): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000003c0)='>') 3.204485122s ago: executing program 4 (id=2216): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}], 0x30}, 0x4000000) 3.13081954s ago: executing program 4 (id=2217): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000000180)="$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") chdir(&(0x7f000000ba80)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000bac0)='./file0\x00', 0x101201, 0x20) fallocate(r0, 0x0, 0xa00, 0x1000005) 2.773082337s ago: executing program 2 (id=2220): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000580)={[{@shortname_mixed}, {@fat=@tz_utc}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xfba}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x23, 0x34c, &(0x7f0000001740)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 1.995989776s ago: executing program 2 (id=2221): syz_open_procfs(0xffffffffffffffff, &(0x7f0000023cc0)='mountinfo\x00') r0 = syz_ublk_setup_io_uring(0x3b29, &(0x7f0000020c40)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000020cc0)=0x0, &(0x7f0000020d00)=0x0, &(0x7f0000020d40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000020d80)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000020e00)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000020e80)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 1.66408409s ago: executing program 2 (id=2222): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000d80)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000dc0)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000e00)=0x7fc, 0x4) 1.473492979s ago: executing program 1 (id=2223): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) 1.139327724s ago: executing program 1 (id=2224): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001480)=0x10482d, 0x4) 1.129381664s ago: executing program 0 (id=2225): migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x11) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x200001, 0x0, 0x2, 0x4}}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.003399667s ago: executing program 5 (id=2226): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x1, 0x0, 0x0) 871.911371ms ago: executing program 1 (id=2227): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000280)}, 0x31) 779.34831ms ago: executing program 2 (id=2228): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) pwrite64(r0, &(0x7f0000000000)="f2", 0x1, 0x5) 758.613382ms ago: executing program 5 (id=2229): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000001280)={0xa, 0x4e20, 0x1000, @private2, 0xfba}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001300)='R', 0x1}], 0x1}}, {{&(0x7f0000001340)={0xa, 0x4e20, 0x8001, @private0, 0x100}, 0x1c, &(0x7f0000001380)=[{&(0x7f00000013c0)='v', 0x1}], 0x1}}], 0x2, 0x931766f6359ea544) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x10000003, 0x2}, 0x10) 745.044664ms ago: executing program 4 (id=2230): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) 624.092156ms ago: executing program 1 (id=2231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000180)) 472.086382ms ago: executing program 2 (id=2232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24042841}, 0x20040040) 464.419772ms ago: executing program 5 (id=2233): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x1, 0x561, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000f00)='.\x00', 0x1a73471, &(0x7f0000000200)=ANY=[@ANYRES32], 0xd, 0x0, &(0x7f0000000000)) 270.178962ms ago: executing program 1 (id=2234): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x295f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, [0x8, 0x2, 0x7c2, 0x6, 0x7, 0x7650, 0x0, 0x100000001, 0x8, 0xfffffffffffffff7, 0x6, 0x3, 0x5, 0x33, 0x6]}, &(0x7f00000002c0)=0x100) 0s ago: executing program 2 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) kernel console output (not intermixed with test programs): ving interface: batadv_slave_0 [ 253.864769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.893790][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.929397][ T11] device bridge_slave_1 left promiscuous mode [ 253.959759][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.985328][ T11] device bridge_slave_0 left promiscuous mode [ 254.011949][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.209522][ T11] device veth1_macvtap left promiscuous mode [ 254.215665][ T11] device veth0_macvtap left promiscuous mode [ 254.239425][ T11] device veth1_vlan left promiscuous mode [ 254.245349][ T11] device veth0_vlan left promiscuous mode [ 254.361660][ T4370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 254.406992][ T4370] EXT4-fs (loop3): Remounting filesystem read-only [ 254.588381][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 254.736121][ T8474] can: request_module (can-proto-0) failed. [ 254.761250][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.776119][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.785176][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.793946][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.801693][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.810146][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.029450][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 255.683449][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.689987][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.778308][ T8506] loop9: detected capacity change from 0 to 2048 [ 255.953663][ T8506] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 256.855730][ T4370] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 256.885784][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 256.895525][ T4370] EXT4-fs (loop9): Remounting filesystem read-only [ 257.020392][ T8538] loop5: detected capacity change from 0 to 1024 [ 257.089493][ T8538] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.119161][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 257.140856][ T11] team0 (unregistering): Port device team_slave_1 removed [ 257.243721][ T11] team0 (unregistering): Port device team_slave_0 removed [ 257.317366][ T7999] EXT4-fs (loop9): unmounting filesystem. [ 257.450339][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.493940][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 257.506536][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 257.625660][ T8548] loop5: detected capacity change from 0 to 256 [ 257.634125][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.155721][ T8557] loop5: detected capacity change from 0 to 2048 [ 258.183311][ T8559] loop9: detected capacity change from 0 to 512 [ 258.263959][ T8559] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 258.303373][ T8559] EXT4-fs error (device loop9): ext4_empty_dir:3141: inode #2: comm syz.9.1418: Directory hole found for htree leaf block 0 [ 258.326124][ T8557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.940988][ T7999] EXT4-fs (loop9): unmounting filesystem. [ 258.949191][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 259.140574][ T11] bond0 (unregistering): Released all slaves [ 259.188926][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 259.252378][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.265583][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.297869][ T8382] device bridge_slave_1 entered promiscuous mode [ 259.387719][ T8480] rxe_eth0 speed is unknown, defaulting to 1000 [ 259.422488][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.622786][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.775726][ T8382] team0: Port device team_slave_0 added [ 259.813718][ T8382] team0: Port device team_slave_1 added [ 259.917750][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.946822][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.985478][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.001726][ T8590] netlink: 'syz.9.1429': attribute type 8 has an invalid length. [ 260.012244][ T8590] sch_fq: defrate 0 ignored. [ 260.022782][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.058433][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.105963][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.302995][ T8382] device hsr_slave_0 entered promiscuous mode [ 260.340713][ T8382] device hsr_slave_1 entered promiscuous mode [ 260.368934][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.385102][ T8382] Cannot create hsr debugfs directory [ 260.823531][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.886264][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 260.987424][ T8623] kvm [8622]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 261.003356][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.030570][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 261.113028][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.199128][ T4348] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 261.278326][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.388911][ T4348] usb 6-1: Using ep0 maxpacket: 8 [ 261.396395][ T4348] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 261.424435][ T4348] usb 6-1: config 16 has an invalid interface number: 128 but max is 0 [ 261.439041][ T4348] usb 6-1: config 16 has no interface number 0 [ 261.445514][ T4348] usb 6-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.456334][ T4348] usb 6-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.466815][ T4348] usb 6-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.478119][ T4348] usb 6-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.491631][ T4348] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.501127][ T4348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.724538][ T4348] usb 6-1: GET_CAPABILITIES returned 0 [ 261.734368][ T4348] usbtmc 6-1:16.128: can't read capabilities [ 261.935438][ T4348] usb 6-1: USB disconnect, device number 7 [ 261.936987][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.977313][ T8641] loop9: detected capacity change from 0 to 1024 [ 261.985078][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.993862][ T8480] device bridge_slave_0 entered promiscuous mode [ 262.003618][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.012732][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1444'. [ 262.022817][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.036626][ T8480] device bridge_slave_1 entered promiscuous mode [ 262.434303][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.462734][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.590786][ T8480] team0: Port device team_slave_0 added [ 262.610932][ T8480] team0: Port device team_slave_1 added [ 262.676706][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.698535][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.774785][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.820044][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.845340][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.917155][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.051955][ T8480] device hsr_slave_0 entered promiscuous mode [ 263.077497][ T8480] device hsr_slave_1 entered promiscuous mode [ 263.084696][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.099963][ T8480] Cannot create hsr debugfs directory [ 263.109255][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 263.194799][ T8660] loop5: detected capacity change from 0 to 128 [ 263.313968][ T8660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 263.336907][ T8660] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.444096][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 264.077777][ T8686] loop9: detected capacity change from 0 to 128 [ 264.110110][ T8686] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 264.169041][ T8686] hpfs: filesystem error: improperly stopped [ 264.183150][ T8686] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 264.204312][ T8686] hpfs: You really don't want any checks? You are crazy... [ 264.249231][ T8686] hpfs: Code page index out of array [ 264.254639][ T8686] hpfs: code page support is disabled [ 264.280769][ T8686] hpfs: hpfs_map_4sectors(): unaligned read [ 264.286849][ T8686] hpfs: hpfs_map_4sectors(): unaligned read [ 264.319153][ T8686] hpfs: filesystem error: unable to find root dir [ 264.576358][ T8692] loop9: detected capacity change from 0 to 128 [ 264.813456][ T8699] loop5: detected capacity change from 0 to 256 [ 264.902473][ T8699] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 265.826683][ T8726] loop5: detected capacity change from 0 to 1024 [ 265.849424][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1467'. [ 265.882686][ T8723] batman_adv: batadv0: Adding interface: ipvlan2 [ 265.889297][ T8723] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.928488][ T8723] batman_adv: batadv0: Interface activated: ipvlan2 [ 266.251449][ T8732] loop5: detected capacity change from 0 to 22 [ 266.279489][ T8732] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 266.336600][ T8732] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 267.136788][ T11] device hsr_slave_0 left promiscuous mode [ 267.168770][ T11] device hsr_slave_1 left promiscuous mode [ 267.189052][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.196588][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.260346][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.267864][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.289748][ T11] device bridge_slave_1 left promiscuous mode [ 267.296083][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.358429][ T8747] loop9: detected capacity change from 0 to 2048 [ 267.366234][ T11] device bridge_slave_0 left promiscuous mode [ 267.404193][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.578635][ T8747] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 267.632033][ T11] device veth1_macvtap left promiscuous mode [ 267.697800][ T11] device veth0_macvtap left promiscuous mode [ 267.729206][ T11] device veth1_vlan left promiscuous mode [ 267.775778][ T11] device veth0_vlan left promiscuous mode [ 267.988970][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 268.215547][ T8749] loop3: detected capacity change from 0 to 131072 [ 268.222152][ C0] sched: RT throttling activated [ 268.267688][ T8749] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 268.274684][ T8749] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.303347][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.332810][ T8749] F2FS-fs (loop3): invalid crc value [ 268.365238][ T8749] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.393798][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.451796][ T8749] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 268.459108][ T8749] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 268.484826][ T8749] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 268.506526][ T7999] EXT4-fs error (device loop9): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 268.592859][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 268.609365][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.640080][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.670715][ T7999] EXT4-fs error (device loop9): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 268.700182][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 268.722464][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.768098][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.797163][ T7999] EXT4-fs error (device loop9): empty_inline_dir:1912: inode #12: block 9: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 268.843411][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 268.877075][ T7999] EXT4-fs error (device loop9): ext4_read_inline_dir:1628: inode #12: block 9: comm syz-executor: path /40/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=60 fake=0 [ 268.926399][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 268.995854][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.060544][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.117625][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.162115][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.210953][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.257479][ T7999] EXT4-fs warning (device loop9): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 269.508948][ T4767] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.633371][ T8769] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1479'. [ 269.720563][ T4767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.748977][ T4767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.778993][ T4767] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 269.797027][ T4767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.825986][ T4767] usb 4-1: config 0 descriptor?? [ 270.287647][ T4767] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 270.295798][ T4767] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 270.345119][ T11] device team_slave_1 left promiscuous mode [ 270.356162][ T11] team0 (unregistering): Port device team_slave_1 removed [ 270.392917][ T4767] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 270.420663][ T11] device team_slave_0 left promiscuous mode [ 270.427978][ T11] team0 (unregistering): Port device team_slave_0 removed [ 270.441779][ T4767] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 270.490122][ T4767] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 270.519373][ T4767] usb 4-1: USB disconnect, device number 9 [ 270.551949][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.563518][ T4767] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 270.658474][ T8772] fido_id[8772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 270.705668][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.408941][ T7751] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.498279][ T11] bond0 (unregistering): Released all slaves [ 271.618934][ T7751] usb 4-1: Using ep0 maxpacket: 8 [ 271.625949][ T7751] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 271.642443][ T7751] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.652589][ T7751] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.662792][ T7751] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.673059][ T7751] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.702557][ T7751] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.719936][ T7751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.958963][ T7751] usb 4-1: GET_CAPABILITIES returned 0 [ 271.964546][ T7751] usbtmc 4-1:16.0: can't read capabilities [ 272.147650][ T7999] EXT4-fs (loop9): unmounting filesystem. [ 272.198447][ T129] usb 4-1: USB disconnect, device number 10 [ 272.867204][ T27] audit: type=1400 audit(1793506221.995:76): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8820 comm="syz.5.1490" name="p" offset=79 [ 273.173484][ T8382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.311965][ T8382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.332978][ T8382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.391064][ T8382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.503697][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.515281][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.525181][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.533379][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.541282][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.548635][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.621692][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.645567][ T8480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.675248][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1496'. [ 273.745661][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.771452][ T8480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.801052][ T8480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.818224][ T8480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.851461][ T8830] rxe_eth0 speed is unknown, defaulting to 1000 [ 273.898555][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.033497][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.115085][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.176096][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.185161][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.212127][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.269114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.304878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.323522][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.330786][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.383340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.403607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.414884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.425597][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.432847][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.477798][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.489343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.540095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.550140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.562898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.603761][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.651114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.665391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.674844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.686321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.695771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.705195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.714106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.780825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.790040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.798625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.806487][ T8841] loop3: detected capacity change from 0 to 32768 [ 274.816155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.826175][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.833442][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.865705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.876342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.876982][ T8848] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1501'. [ 274.895863][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.903167][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.912625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.924751][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.927819][ T8841] XFS (loop3): Mounting V5 Filesystem [ 274.953397][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1501'. [ 274.964681][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1501'. [ 274.984674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.085892][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.095426][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.141041][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.163455][ T8841] XFS (loop3): Ending clean mount [ 275.173835][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.183415][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.197772][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.207732][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.221176][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.299891][ T8859] loop5: detected capacity change from 0 to 2048 [ 275.381514][ T8859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.469782][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.478552][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.482537][ T4274] XFS (loop3): Unmounting Filesystem [ 275.582071][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.590045][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 275.733240][ T8830] chnl_net:caif_netlink_parms(): no params data found [ 276.041906][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.071288][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.303145][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.321924][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.352757][ T8830] device bridge_slave_0 entered promiscuous mode [ 276.372038][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.388972][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.397484][ T8830] device bridge_slave_1 entered promiscuous mode [ 276.436811][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.517825][ T8830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.570435][ T8830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.596734][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.611499][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.703585][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.715017][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.730027][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.767383][ T8886] netlink: 'syz.3.1509': attribute type 10 has an invalid length. [ 276.785075][ T8382] device veth0_vlan entered promiscuous mode [ 276.823230][ T8830] team0: Port device team_slave_0 added [ 276.838158][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.848385][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.871123][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.880703][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.919182][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 276.938738][ T8830] team0: Port device team_slave_1 added [ 276.954866][ T8382] device veth1_vlan entered promiscuous mode [ 276.993233][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.005743][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.028236][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.078229][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.085670][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.106643][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.133254][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.147576][ T8830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.163731][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.170986][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.179311][ T7] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 277.212837][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.237342][ T8830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.248411][ T7] usb 6-1: config 0 descriptor?? [ 277.307905][ T8892] loop3: detected capacity change from 0 to 512 [ 277.367607][ T8892] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1512: bg 0: block 5: invalid block bitmap [ 277.402773][ T8892] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 277.417696][ T8892] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1512: invalid indirect mapped block 3 (level 2) [ 277.439239][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.457965][ T8892] EXT4-fs (loop3): 1 orphan inode deleted [ 277.470809][ T8480] device veth0_vlan entered promiscuous mode [ 277.477591][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.490805][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.519361][ T8892] EXT4-fs (loop3): 1 truncate cleaned up [ 277.530184][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.540358][ T8892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.552408][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.583942][ T8480] device veth1_vlan entered promiscuous mode [ 277.620887][ T8382] device veth0_macvtap entered promiscuous mode [ 277.634581][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.647171][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.658161][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.669550][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 277.680567][ T7] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 277.687688][ T7] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 277.704823][ T7] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 277.712504][ T7] hid-led 0003:27B8:01ED.000D: item fetching failed at offset 4/5 [ 277.721327][ T7] hid-led: probe of 0003:27B8:01ED.000D failed with error -22 [ 277.744513][ T8830] device hsr_slave_0 entered promiscuous mode [ 277.757994][ T8830] device hsr_slave_1 entered promiscuous mode [ 277.767391][ T8830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.771052][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 277.777786][ T8830] Cannot create hsr debugfs directory [ 277.893727][ T8382] device veth1_macvtap entered promiscuous mode [ 277.896714][ T7747] usb 6-1: USB disconnect, device number 8 [ 277.919051][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.937422][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.954617][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.997983][ T8896] device netdevsim0 entered promiscuous mode [ 278.007704][ T8896] device netdevsim0 left promiscuous mode [ 278.058707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.068445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.112222][ T8480] device veth0_macvtap entered promiscuous mode [ 278.168628][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.181540][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.194271][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.204926][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.215376][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.228717][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.247981][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.258780][ T8480] device veth1_macvtap entered promiscuous mode [ 278.315386][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.338241][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.351634][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.360806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.372576][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.384005][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.397427][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.410906][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.420937][ T8382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.431643][ T8382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.443499][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.461501][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 278.476281][ T8898] bond0: option min_links: invalid value (18446744073709551615) [ 278.484354][ T8898] bond0: option min_links: allowed values 0 - 2147483647 [ 278.505507][ T11] device hsr_slave_0 left promiscuous mode [ 278.530006][ T11] device hsr_slave_1 left promiscuous mode [ 278.539849][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.547344][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.569747][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.577735][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.587896][ T11] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 278.594957][ T11] batman_adv: batadv0: Removing interface: ipvlan2 [ 278.602334][ T11] device bridge_slave_1 left promiscuous mode [ 278.608635][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.617632][ T11] device bridge_slave_0 left promiscuous mode [ 278.638070][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.693223][ T11] device veth1_macvtap left promiscuous mode [ 278.706324][ T11] device veth0_macvtap left promiscuous mode [ 278.712818][ T11] device veth1_vlan left promiscuous mode [ 278.718702][ T11] device veth0_vlan left promiscuous mode [ 278.761537][ T27] audit: type=1326 audit(1793506227.895:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.5.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09259f559 code=0x7ffc0000 [ 278.819775][ T27] audit: type=1326 audit(1793506227.925:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.5.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb09259f559 code=0x7ffc0000 [ 278.875036][ T27] audit: type=1326 audit(1793506227.925:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.5.1517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09259f559 code=0x7ffc0000 [ 279.630135][ T11] team0 (unregistering): Port device team_slave_1 removed [ 279.733121][ T11] team0 (unregistering): Port device team_slave_0 removed [ 279.757070][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 279.804261][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.817168][ T8911] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1520'. [ 279.880104][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.376290][ T11] bond0 (unregistering): Released all slaves [ 280.460351][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.474170][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.496485][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.507963][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.519812][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.530621][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.544786][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.556796][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.569370][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.587709][ T8382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.602657][ T8382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.612404][ T8382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.621922][ T8382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.657406][ T8913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.666258][ T8913] bond0: (slave bond1): Enslaving as an active interface with an up link [ 280.678315][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.727558][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.768739][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.804243][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.829162][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.840075][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.850585][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.866104][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.892028][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.931267][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.940614][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.965639][ T8480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.981409][ T8480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.990585][ T8480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.999534][ T8480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.300042][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.307938][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.435340][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.476581][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.499934][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.518235][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.612063][ T8567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.626926][ T8567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.635680][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.753909][ T27] audit: type=1326 audit(1793506230.885:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 281.802055][ T8923] loop3: detected capacity change from 0 to 64 [ 281.814329][ T27] audit: type=1326 audit(1793506230.885:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 281.838760][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 281.863345][ T27] audit: type=1326 audit(1793506230.885:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 281.887720][ T27] audit: type=1326 audit(1793506230.885:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 281.912514][ T27] audit: type=1326 audit(1793506230.885:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 281.964838][ T27] audit: type=1326 audit(1793506230.885:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 282.077663][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.109454][ T27] audit: type=1326 audit(1793506230.885:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.0.1352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874379f559 code=0x7ffc0000 [ 282.144480][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.180729][ T8567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.386068][ T7746] kernel write not supported for file /sequencer2 (pid: 7746 comm: kworker/1:16) [ 282.410802][ T8931] loop3: detected capacity change from 0 to 512 [ 282.499380][ T8931] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 282.555524][ T8931] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.635732][ T8830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.669174][ T8931] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.723666][ T8830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.763518][ T8830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.837146][ T8830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.867142][ T8941] loop0: detected capacity change from 0 to 512 [ 282.903224][ T8941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 282.999700][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 283.005914][ T8941] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1527: inode #88: comm syz.0.1527: iget: illegal inode # [ 283.057632][ T8941] EXT4-fs (loop0): Remounting filesystem read-only [ 283.091954][ T8941] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1527: error while reading EA inode 88 err=-117 [ 283.155710][ T8941] EXT4-fs (loop0): Remounting filesystem read-only [ 283.196227][ T8941] EXT4-fs (loop0): 1 orphan inode deleted [ 283.219880][ T8941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.286856][ T8941] EXT4-fs (loop0): shut down requested (2) [ 283.338695][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.398350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.417221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.438741][ T8382] EXT4-fs (loop0): unmounting filesystem. [ 283.455424][ T8830] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.480560][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.500464][ T8955] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 283.500464][ T8955] The task syz.5.1532 (8955) triggered the difference, watch for misbehavior. [ 283.560534][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.584887][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.592179][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.635245][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.672621][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.710581][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.728138][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.735423][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.769216][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.795008][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.836879][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.851562][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.870007][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.889779][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.909960][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.932338][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.964541][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.996730][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.022149][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.057029][ T8830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.784562][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.796945][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.847068][ T8830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.766424][ T9025] program syz.5.1551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.085788][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.100068][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.121110][ T9011] loop0: detected capacity change from 0 to 32768 [ 286.183390][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.205793][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.232822][ T9011] ERROR: (device loop0): diAllocAG: numfree > numinos [ 286.232822][ T9011] [ 286.267663][ T8830] device veth0_vlan entered promiscuous mode [ 286.276422][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.301138][ T9011] ERROR: (device loop0): remounting filesystem as read-only [ 286.308534][ T9011] ialloc: diAlloc returned -5! [ 286.316311][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.345583][ T8830] device veth1_vlan entered promiscuous mode [ 286.369012][ T9043] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 286.369012][ T9043] [ 286.470332][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.489706][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.529851][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.580215][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.613029][ T8830] device veth0_macvtap entered promiscuous mode [ 286.653855][ T8830] device veth1_macvtap entered promiscuous mode [ 286.749240][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.781607][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.817223][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.869479][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.906194][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.929116][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.958086][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.989028][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.045687][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.089624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.107077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.156452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.188396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.222907][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.258767][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.295331][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.322883][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.346491][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.367674][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.386457][ T8830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.425236][ T8830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.450232][ T8830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.476073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.507528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.526905][ T8830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.538002][ T8830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.577913][ T8830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.623972][ T8830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.675868][ T9075] loop3: detected capacity change from 0 to 2048 [ 287.778530][ T9075] NILFS (loop3): invalid segment: Magic number mismatch [ 287.836551][ T9075] NILFS (loop3): trying rollback from an earlier position [ 287.888231][ T9075] NILFS (loop3): recovery complete [ 287.944844][ T9077] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.957305][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.986378][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.014126][ T9075] NILFS (loop3): error -22 preparing GC: cannot read source blocks [ 288.039843][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.081743][ T9080] loop0: detected capacity change from 0 to 2048 [ 288.133946][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.159836][ T9080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.162759][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.221334][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.338939][ T7746] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 288.569024][ T7746] usb 3-1: Using ep0 maxpacket: 32 [ 288.577282][ T7746] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.601509][ T9091] loop3: detected capacity change from 0 to 512 [ 288.647769][ T7746] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.681156][ T7746] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 288.716172][ T7746] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 288.761797][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 288.761814][ T27] audit: type=1800 audit(1793506237.895:98): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1573" name="file2" dev="loop3" ino=1048827 res=0 errno=0 [ 288.799017][ T7746] usb 3-1: Product: syz [ 288.803318][ T7746] usb 3-1: Manufacturer: syz [ 288.823284][ T9091] syz.3.1573: attempt to access beyond end of device [ 288.823284][ T9091] loop3: rw=0, sector=17179852706, nr_sectors = 16 limit=512 [ 288.879459][ T7746] hub 3-1:4.0: USB hub found [ 289.079814][ T7746] hub 3-1:4.0: 3 ports detected [ 289.286764][ T7746] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 289.314183][ T7746] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 289.379698][ T7746] usb 3-1: USB disconnect, device number 4 [ 289.640608][ T9092] loop0: detected capacity change from 0 to 32768 [ 289.710322][ T9092] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 289.986496][ T8382] ocfs2: Unmounting device (7,0) on (node local) [ 290.029584][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 290.066185][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 290.123033][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 290.169029][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1586'. [ 290.466590][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 290.987435][ T9149] zero sized request [ 291.526090][ T9132] loop3: detected capacity change from 0 to 40427 [ 291.576693][ T9132] F2FS-fs (loop3): invalid crc value [ 291.616136][ T9132] F2FS-fs (loop3): Found nat_bits in checkpoint [ 291.792741][ T9132] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 291.853940][ T9132] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 292.118590][ T4274] syz-executor: attempt to access beyond end of device [ 292.118590][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 292.451825][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 292.738973][ T7746] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 292.905837][ T9209] loop4: detected capacity change from 0 to 1024 [ 292.956193][ T9209] EXT4-fs: Ignoring removed bh option [ 292.961922][ T7746] usb 3-1: Using ep0 maxpacket: 8 [ 292.972211][ T7746] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 292.997104][ T7746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.010587][ T7746] usb 3-1: Product: syz [ 293.015550][ T7746] usb 3-1: Manufacturer: syz [ 293.021576][ T7746] usb 3-1: SerialNumber: syz [ 293.048637][ T7746] usb 3-1: config 0 descriptor?? [ 293.071629][ T9209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 293.125799][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'. [ 293.282577][ T7746] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.304454][ T7746] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 293.336642][ T7746] usb 3-1: USB disconnect, device number 5 [ 293.398376][ T8830] EXT4-fs (loop4): unmounting filesystem. [ 293.706884][ T9229] loop5: detected capacity change from 0 to 1024 [ 293.760036][ T9229] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 293.829720][ T4767] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 294.032476][ T4767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.067265][ T4767] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.119130][ T4767] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.128266][ T4767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 294.186290][ T4767] usb 5-1: SerialNumber: syz [ 294.404060][ T4767] usb 5-1: 0:2 : does not exist [ 294.460652][ T4767] usb 5-1: USB disconnect, device number 5 [ 294.694760][ T9226] loop0: detected capacity change from 0 to 40427 [ 294.714940][ T9226] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 294.730012][ T4562] udevd[4562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.755051][ T9226] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 294.805456][ T9226] F2FS-fs (loop0): invalid crc value [ 294.855185][ T9226] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 295.187169][ T9226] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 295.224679][ T9226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 295.240132][ T4280] Bluetooth: hci3: hardware error 0x00 [ 295.439352][ T9275] netem: change failed [ 295.618566][ T9281] input: syz1 as /devices/virtual/input/input18 [ 295.809159][ T9285] input: syz0 as /devices/virtual/input/input19 [ 296.152584][ T9299] sd 0:0:1:0: PR command failed: 1026 [ 296.158102][ T9299] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 296.175591][ T9299] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 296.728991][ T4401] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 296.940818][ T4401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.962477][ T4401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.998974][ T4401] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.048989][ T4401] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.099010][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.153477][ T4401] usb 6-1: config 0 descriptor?? [ 297.349289][ T4280] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 297.570065][ T4401] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description [ 297.596745][ T4401] plantronics 0003:047F:FFFF.000E: parse failed [ 297.616457][ T4401] plantronics: probe of 0003:047F:FFFF.000E failed with error -22 [ 297.801010][ T4397] usb 6-1: USB disconnect, device number 9 [ 297.911377][ T9338] loop3: detected capacity change from 0 to 1024 [ 298.534994][ T4397] Process accounting resumed [ 299.651186][ T9407] device vlan2 entered promiscuous mode [ 299.656839][ T9407] device team0 entered promiscuous mode [ 299.713722][ T9407] device team_slave_0 entered promiscuous mode [ 299.725808][ T9407] device team_slave_1 entered promiscuous mode [ 300.073945][ T9389] loop5: detected capacity change from 0 to 40427 [ 300.128615][ T9389] F2FS-fs (loop5): invalid crc value [ 300.186956][ T9389] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.343739][ T9389] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 300.425522][ T9389] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 300.671903][ T9412] loop4: detected capacity change from 0 to 32768 [ 300.696696][ T5842] syz-executor: attempt to access beyond end of device [ 300.696696][ T5842] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 300.748449][ T9412] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 300.748449][ T9412] [ 300.812886][ T9412] ERROR: (device loop4): remounting filesystem as read-only [ 300.929095][ T9412] jfs_lookup: dtSearch returned -5 [ 300.958653][ T9431] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 300.958653][ T9431] [ 302.177513][ T9462] loop4: detected capacity change from 0 to 4096 [ 303.082291][ T9491] netlink: 'syz.5.1708': attribute type 1 has an invalid length. [ 303.107296][ T9491] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1708'. [ 303.430440][ T9504] loop4: detected capacity change from 0 to 16 [ 303.494913][ T9504] erofs: (device loop4): mounted with root inode @ nid 36. [ 303.595243][ T27] audit: type=1800 audit(1793506252.725:99): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1713" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 304.123337][ T9522] loop4: detected capacity change from 0 to 256 [ 304.198414][ T9522] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 304.441461][ T9528] loop2: detected capacity change from 0 to 2048 [ 304.527238][ T9528] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.765779][ T9536] loop4: detected capacity change from 0 to 128 [ 304.903561][ T9536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.969388][ T9536] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.988581][ T9516] loop5: detected capacity change from 0 to 32768 [ 305.096248][ T9516] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 305.096248][ T9516] [ 305.151515][ T9516] ERROR: (device loop5): remounting filesystem as read-only [ 305.204447][ T8830] EXT4-fs (loop4): unmounting filesystem. [ 305.210505][ T9516] ERROR: (device loop5): jfs_rename: [ 305.210505][ T9516] [ 305.401046][ T5842] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 305.401046][ T5842] [ 305.439192][ T5842] ERROR: (device loop5): remounting filesystem as read-only [ 306.145705][ T27] audit: type=1400 audit(1793506255.275:100): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=66226F pid=9566 comm="syz.4.1731" name=66226F offset=66 [ 306.986097][ T9597] loop2: detected capacity change from 0 to 256 [ 307.113905][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1744'. [ 307.337558][ T9602] loop2: detected capacity change from 0 to 256 [ 308.072989][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 310.070190][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 310.079317][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 310.924074][ T9701] device team_slave_0 entered promiscuous mode [ 310.943903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.214239][ T9706] loop0: detected capacity change from 0 to 256 [ 311.354658][ T9706] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 312.170081][ T9708] loop4: detected capacity change from 0 to 131072 [ 312.202062][ T9708] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 312.209132][ T9708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 312.236935][ T9708] F2FS-fs (loop4): invalid crc value [ 312.284823][ T9708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 312.337631][ T9708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 312.344857][ T9708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 312.442867][ T9708] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 312.778477][ T9704] loop2: detected capacity change from 0 to 40427 [ 312.873451][ T9704] F2FS-fs (loop2): invalid crc value [ 312.918261][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1786'. [ 312.937807][ T9732] netlink: 'syz.4.1785': attribute type 9 has an invalid length. [ 312.948650][ T9704] F2FS-fs (loop2): Found nat_bits in checkpoint [ 313.019453][ T9732] netlink: 379 bytes leftover after parsing attributes in process `syz.4.1785'. [ 313.176752][ T9704] F2FS-fs (loop2): Start checkpoint disabled! [ 313.288915][ T9704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 313.355840][ T9739] bond0: option arp_validate: invalid value ( I) [ 313.863508][ T4375] kworker/u4:7: attempt to access beyond end of device [ 313.863508][ T4375] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.117950][ T9747] loop5: detected capacity change from 0 to 4096 [ 314.253360][ T9747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 314.340116][ T9747] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 314.551815][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 314.930753][ T9764] loop2: detected capacity change from 0 to 8 [ 315.003736][ T9764] SQUASHFS error: Failed to read block 0x4de: -5 [ 315.061292][ T9764] SQUASHFS error: Failed to read block 0x4de: -5 [ 315.067904][ T27] audit: type=1800 audit(1793506264.195:101): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1789" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 315.568290][ T9779] syz.4.1800 (9779): /proc/9778/oom_adj is deprecated, please use /proc/9778/oom_score_adj instead. [ 316.471687][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.497777][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.509350][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.522304][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.530030][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.537470][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.644377][ T9804] rxe_eth0 speed is unknown, defaulting to 1000 [ 316.924722][ T4375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.039209][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.077445][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.112016][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.118443][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127643][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.169445][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.209092][ T9823] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 317.239052][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.265581][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.277064][ T9837] program syz.2.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.294352][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 317.341795][ T9823] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 317.541594][ T4375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.592607][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1824'. [ 317.829271][ T4375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.039490][ T4375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.535656][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 318.628979][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 319.196560][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.235467][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.269434][ T9804] device bridge_slave_0 entered promiscuous mode [ 319.377591][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.399240][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.435039][ T9804] device bridge_slave_1 entered promiscuous mode [ 319.556124][ T9864] loop0: detected capacity change from 0 to 40427 [ 319.587819][ T9868] loop5: detected capacity change from 0 to 40427 [ 319.614323][ T9864] F2FS-fs (loop0): invalid crc value [ 319.614813][ T9889] loop2: detected capacity change from 0 to 2048 [ 319.631069][ T9874] loop4: detected capacity change from 0 to 40427 [ 319.649491][ T9864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 319.670488][ T9868] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 319.702741][ T9874] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 319.731726][ T9868] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 319.749864][ T9874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 319.813846][ T9874] F2FS-fs (loop4): invalid crc value [ 319.827282][ T9868] F2FS-fs (loop5): invalid crc value [ 319.843454][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.880895][ T9864] F2FS-fs (loop0): Start checkpoint disabled! [ 319.901057][ T9889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.909815][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.947912][ T9864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 319.966244][ T9868] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 319.974385][ T9874] F2FS-fs (loop4): Found nat_bits in checkpoint [ 320.273047][ T9874] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 320.280710][ T8480] EXT4-fs (loop2): unmounting filesystem. [ 320.290663][ T9874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 320.421141][ T9868] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 320.428289][ T9868] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 320.450288][ T9804] team0: Port device team_slave_0 added [ 320.593877][ T9] kworker/u4:0: attempt to access beyond end of device [ 320.593877][ T9] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.628361][ T9804] team0: Port device team_slave_1 added [ 320.716913][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 320.847731][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.898892][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.968986][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.023343][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.037963][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.110373][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.320095][ T9917] loop0: detected capacity change from 0 to 2048 [ 321.444853][ T9917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 321.498959][ T9917] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.627231][ T9804] device hsr_slave_0 entered promiscuous mode [ 321.664976][ T9804] device hsr_slave_1 entered promiscuous mode [ 321.705161][ T9804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.758673][ T9804] Cannot create hsr debugfs directory [ 321.770808][ T8382] EXT4-fs (loop0): unmounting filesystem. [ 322.457950][ T9943] loop4: detected capacity change from 0 to 64 [ 322.527424][ T4375] device hsr_slave_0 left promiscuous mode [ 322.607095][ T9943] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop4:00000002 [ 322.696998][ T4375] device hsr_slave_1 left promiscuous mode [ 322.788951][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 322.867891][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.922398][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.947715][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.972608][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.990402][ T4375] device bridge_slave_1 left promiscuous mode [ 323.003623][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.021912][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1855'. [ 323.051049][ T4375] device bridge_slave_0 left promiscuous mode [ 323.058642][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.167597][ T4375] device bridge0 left promiscuous mode [ 323.184359][ T4375] device veth1_macvtap left promiscuous mode [ 323.192357][ T4375] device veth0_macvtap left promiscuous mode [ 323.204198][ T4375] device veth1_vlan left promiscuous mode [ 323.215990][ T4375] device veth0_vlan left promiscuous mode [ 323.520028][ T9969] loop2: detected capacity change from 0 to 4096 [ 323.554518][ T9969] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 323.633120][ T9969] ntfs3: loop2: ino=19, mi_enum_attr [ 323.645300][ T9969] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 323.673347][ T9969] ntfs3: loop2: ino=1a, mi_enum_attr [ 323.704504][ T9969] ntfs3: loop2: ino=1a, mi_enum_attr [ 323.948460][ T9967] loop4: detected capacity change from 0 to 32768 [ 324.056758][ T9967] JBD2: Ignoring recovery information on journal [ 324.127608][ T9967] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 324.215863][ T4375] bond0 (unregistering): (slave bond1): Releasing backup interface [ 324.248075][ T4375] bond1 (unregistering): Released all slaves [ 324.442370][ T8830] ocfs2: Unmounting device (7,4) on (node local) [ 324.726647][ T27] audit: type=1326 audit(1793506273.855:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.4.1863" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9a39f559 code=0x7ffc0000 [ 324.759126][ T27] audit: type=1326 audit(1793506273.855:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.4.1863" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9a39f559 code=0x7ffc0000 [ 324.790709][ T27] audit: type=1326 audit(1793506273.855:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.4.1863" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8a9a39f559 code=0x7ffc0000 [ 324.838468][ T27] audit: type=1326 audit(1793506273.855:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.4.1863" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9a39f559 code=0x7ffc0000 [ 324.869733][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 324.878034][ T27] audit: type=1326 audit(1793506273.855:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.4.1863" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9a39f559 code=0x7ffc0000 [ 325.523002][ T4375] device team_slave_1 left promiscuous mode [ 325.529088][ T27] audit: type=1400 audit(1793506274.655:107): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313020202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313020202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A2020202020202030202020202020203020202020302020202030202020203020202020203020202020202020202020302020202020202020203020202020202020203020202020202020302020202033202020203320202020302020202020302020202020202033202020202020 [ 325.537477][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 325.705495][ T4375] device team_slave_0 left promiscuous mode [ 325.716245][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 325.829988][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.130329][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.232906][ T4375] bond0 (unregistering): Released all slaves [ 328.268559][T10039] loop5: detected capacity change from 0 to 16 [ 328.296274][T10039] erofs: (device loop5): mounted with root inode @ nid 36. [ 328.453721][ T27] audit: type=1400 audit(1793506277.585:108): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313020202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313120202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A2020202020202030202020202020203020202020302020202030202020203020202020203020202020202020202020302020202020202020203020202020202020203020202020202020302020202034202020203420202020302020202020302020202020202034202020202020 [ 328.657675][T10049] __sock_release: fasync list not empty! [ 329.240325][ T9804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.282030][ T9804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.320202][ T9804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.332113][T10067] program syz.5.1897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.360152][ T9804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.481840][T10070] loop0: detected capacity change from 0 to 128 [ 329.533341][T10072] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.543013][T10072] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.552329][T10072] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.561122][T10072] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.610292][T10070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.634209][T10070] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.739057][T10077] netlink: 'syz.5.1900': attribute type 12 has an invalid length. [ 329.765035][T10077] netlink: 'syz.5.1900': attribute type 29 has an invalid length. [ 329.829434][T10077] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1900'. [ 329.838563][T10077] netlink: 'syz.5.1900': attribute type 2 has an invalid length. [ 329.857267][ T8382] EXT4-fs (loop0): unmounting filesystem. [ 329.937673][T10077] netlink: 'syz.5.1900': attribute type 3 has an invalid length. [ 329.976073][T10077] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1900'. [ 330.036276][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.048012][T10084] program syz.2.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.103420][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.129841][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.163563][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.228148][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.256743][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.272128][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.279403][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.334056][T10093] loop5: detected capacity change from 0 to 1024 [ 330.340550][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.349754][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.378499][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.385783][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.489906][T10093] hfsplus: invalid length 1280 has been corrected to 255 [ 330.625459][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.685164][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.719474][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.851577][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.872896][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.903053][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.945304][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.970170][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.996244][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.018124][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 331.045478][ T9804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.074607][ T9804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.093163][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.138091][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.169669][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.588132][T10134] loop0: detected capacity change from 0 to 256 [ 331.651608][T10134] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 331.998173][T10140] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 332.033735][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.059340][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.071974][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.144015][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.161391][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.240760][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.250495][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.272164][ T9804] device veth0_vlan entered promiscuous mode [ 332.285912][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.303014][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.336072][ T9804] device veth1_vlan entered promiscuous mode [ 332.418025][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.427842][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.470476][ T9804] device veth0_macvtap entered promiscuous mode [ 332.540040][ T9804] device veth1_macvtap entered promiscuous mode [ 332.549079][ T4288] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 332.568236][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 332.617582][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.669150][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.710168][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.751475][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.761719][ T4288] usb 6-1: Using ep0 maxpacket: 32 [ 332.769003][ T4288] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 332.794249][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.805406][ T4288] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.814442][ T4288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 332.828994][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.845093][ T4288] usb 6-1: config 1 has no interface number 0 [ 332.858869][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.869877][ T4288] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.888832][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.899245][ T4288] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 332.920958][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.932894][ T4288] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 332.943555][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.963435][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.976977][ T4288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.987957][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.037520][ T4288] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 333.049713][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.063148][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.080699][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.121473][T10143] loop2: detected capacity change from 0 to 40427 [ 333.138953][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.192980][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.204617][T10143] F2FS-fs (loop2): invalid crc value [ 333.229291][ T4288] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 333.241039][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.306071][T10143] F2FS-fs (loop2): Found nat_bits in checkpoint [ 333.327515][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.370851][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.411383][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.458487][T10143] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 333.471577][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.487806][T10148] loop5: detected capacity change from 0 to 128 [ 333.557797][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.571013][T10148] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 333.586690][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.615823][T10148] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 333.622081][T10143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 333.636852][ T9804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.669003][ T9804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.677894][T10148] vxfs: can't find superblock. [ 333.725591][ T9804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.753172][ T9804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.827865][T10143] syz.2.1922: attempt to access beyond end of device [ 333.827865][T10143] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 333.889073][T10171] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 333.980114][ T129] usb 6-1: USB disconnect, device number 10 [ 333.993626][ T129] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 334.162138][ T8480] syz-executor: attempt to access beyond end of device [ 334.162138][ T8480] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.391586][T10123] block2mtd: error: cannot open device /dev/ [ 334.471089][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.492158][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.543725][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.606047][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.620270][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.627940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.017630][T10196] loop2: detected capacity change from 0 to 131072 [ 336.099793][T10196] F2FS-fs (loop2): Found nat_bits in checkpoint [ 336.182618][T10196] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 336.258378][T10196] F2FS-fs (loop2): access invalid blkaddr:0 [ 336.265007][T10196] CPU: 1 PID: 10196 Comm: syz.2.1930 Not tainted syzkaller #0 [ 336.272541][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.282663][T10196] Call Trace: [ 336.285984][T10196] [ 336.288954][T10196] dump_stack_lvl+0x188/0x24e [ 336.293693][T10196] ? show_regs_print_info+0x12/0x12 [ 336.298939][T10196] ? __up_read+0x2b4/0x6b0 [ 336.303395][T10196] ? __lock_acquire+0x7ea0/0x7ea0 [ 336.308471][T10196] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 336.313922][T10196] sanity_check_extent_cache+0xf8/0x1f0 [ 336.319514][T10196] f2fs_iget+0x360c/0x4b20 [ 336.323984][T10196] f2fs_lookup+0x394/0x800 [ 336.328439][T10196] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 336.334536][T10196] ? from_kgid+0x14f/0x6a0 [ 336.338990][T10196] ? make_kgid+0x650/0x650 [ 336.343547][T10196] ? rwsem_write_trylock+0x135/0x1c0 [ 336.348901][T10196] ? inode_permission+0xef/0x480 [ 336.353873][T10196] ? bpf_lsm_inode_create+0x5/0x10 [ 336.359044][T10196] ? security_inode_create+0xb3/0x100 [ 336.364461][T10196] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 336.370557][T10196] path_openat+0xff8/0x2f10 [ 336.375117][T10196] ? do_filp_open+0x420/0x420 [ 336.379852][T10196] do_filp_open+0x1ee/0x420 [ 336.384401][T10196] ? vfs_tmpfile+0x490/0x490 [ 336.389052][T10196] ? _raw_spin_unlock+0x24/0x40 [ 336.393941][T10196] ? alloc_fd+0x590/0x640 [ 336.398316][T10196] do_sys_openat2+0x14b/0x4f0 [ 336.403062][T10196] ? do_sys_open+0xe0/0xe0 [ 336.407516][T10196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 336.413565][T10196] ? lock_chain_count+0x20/0x20 [ 336.418466][T10196] __x64_sys_openat+0x135/0x160 [ 336.423391][T10196] do_syscall_64+0x4c/0xa0 [ 336.427852][T10196] ? clear_bhb_loop+0x60/0xb0 [ 336.432571][T10196] ? clear_bhb_loop+0x60/0xb0 [ 336.437303][T10196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.443236][T10196] RIP: 0033:0x7ff81ad9f559 [ 336.447700][T10196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.467340][T10196] RSP: 002b:00007ff81bcfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.475789][T10196] RAX: ffffffffffffffda RBX: 00007ff81b025fa0 RCX: 00007ff81ad9f559 [ 336.483789][T10196] RDX: 0000000000020842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 336.491902][T10196] RBP: 00007ff81ae36b50 R08: 0000000000000000 R09: 0000000000000000 [ 336.499905][T10196] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000000 [ 336.507928][T10196] R13: 00007ff81b026038 R14: 00007ff81b025fa0 R15: 00007ffeb3df8b38 [ 336.515950][T10196] [ 336.520914][T10196] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 336.586151][T10179] loop0: detected capacity change from 0 to 40427 [ 336.634017][T10179] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 336.677616][T10179] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 336.738767][T10179] F2FS-fs (loop0): invalid crc value [ 336.803195][T10179] F2FS-fs (loop0): Found nat_bits in checkpoint [ 337.038927][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 337.089522][T10179] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 337.109042][T10179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.248923][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 337.258276][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.319888][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.358921][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.414708][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.464283][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.516768][ T7] usb 2-1: config 0 descriptor?? [ 337.907077][T10216] loop4: detected capacity change from 0 to 32768 [ 337.966137][ T7] microsoft 0003:045E:07DA.000F: report is too long [ 337.989003][ T4284] Bluetooth: hci0: command 0x0411 tx timeout [ 338.024500][T10238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 338.065417][ T7] microsoft 0003:045E:07DA.000F: item 0 4 0 8 parsing failed [ 338.076322][ T7] microsoft 0003:045E:07DA.000F: parse failed [ 338.083298][ T7] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 338.169579][ T129] usb 2-1: USB disconnect, device number 6 [ 338.200449][T10216] XFS (loop4): Mounting V5 Filesystem [ 338.341772][T10216] XFS (loop4): Ending clean mount [ 338.620904][ T8830] XFS (loop4): Unmounting Filesystem [ 339.067750][T10266] kAFS: bad VL server IP address [ 339.809605][ T7747] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 340.011599][ T7747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.028335][T10268] loop1: detected capacity change from 0 to 32768 [ 340.033969][ T7747] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.067063][ T7747] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 340.091762][T10268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1953 (10268) [ 340.107134][ T7747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.118909][ T7] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 340.126526][ T7747] usb 3-1: Product: syz [ 340.157997][ T7747] usb 3-1: Manufacturer: syz [ 340.189923][ T7747] usb 3-1: SerialNumber: syz [ 340.334988][T10268] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.356914][ T7] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 340.372374][T10268] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 340.382268][ T7] usb 5-1: config 0 has no interface number 0 [ 340.400771][ T7] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 340.412429][T10268] BTRFS info (device loop1): setting nodatasum [ 340.418679][T10268] BTRFS info (device loop1): force zlib compression, level 3 [ 340.444586][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.484536][ T7] usb 5-1: Product: syz [ 340.496082][ T7] usb 5-1: Manufacturer: syz [ 340.509140][T10268] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 340.515213][ T7] usb 5-1: SerialNumber: syz [ 340.558886][T10268] BTRFS info (device loop1): use lzo compression, level 0 [ 340.563429][ T7] usb 5-1: config 0 descriptor?? [ 340.587715][T10305] loop0: detected capacity change from 0 to 512 [ 340.588191][T10268] BTRFS info (device loop1): turning on flush-on-commit [ 340.638374][T10305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.656371][T10268] BTRFS info (device loop1): enabling auto defrag [ 340.678965][T10268] BTRFS info (device loop1): max_inline at 4096 [ 340.691358][ T4284] Bluetooth: hci5: CSR: Local version failed (-71) [ 340.704640][ T4401] usb 3-1: USB disconnect, device number 6 [ 340.706084][T10268] BTRFS info (device loop1): using free space tree [ 340.765469][T10305] EXT4-fs (loop0): 1 truncate cleaned up [ 340.779331][T10305] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 341.023463][ T8382] EXT4-fs (loop0): unmounting filesystem. [ 341.150722][T10268] BTRFS info (device loop1): enabling ssd optimizations [ 341.470951][ T7] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 341.493385][ T7] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 341.552369][ T7] asix: probe of 5-1:0.251 failed with error -71 [ 341.574080][T10299] loop5: detected capacity change from 0 to 40427 [ 341.600602][ T7] usb 5-1: USB disconnect, device number 6 [ 341.661915][ T9804] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.686439][T10299] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 341.714275][T10299] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x30e4 [ 341.764643][T10299] F2FS-fs (loop5): invalid crc value [ 341.815354][T10299] F2FS-fs (loop5): Found nat_bits in checkpoint [ 341.931876][T10299] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 342.104072][T10299] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 342.168554][T10299] F2FS-fs (loop5) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 342.250687][T10348] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xcb/0x600 [ 344.276148][T10388] loop0: detected capacity change from 0 to 131072 [ 344.294646][T10388] F2FS-fs (loop0): invalid crc value [ 344.378079][T10388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 344.422427][T10388] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 344.454395][T10388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 344.792016][T10413] loop2: detected capacity change from 0 to 1024 [ 344.968329][T10418] hfsplus: request for non-existent node 211 in B*Tree [ 345.005373][T10418] hfsplus: request for non-existent node 211 in B*Tree [ 345.168877][ T4288] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 345.184047][ T48] hfsplus: b-tree write err: -5, ino 8 [ 345.360755][ T4288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.404187][ T4288] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 345.438863][ T4288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 345.477422][ T4288] usb 6-1: Product: syz [ 345.497696][ T4288] usb 6-1: Manufacturer: syz [ 345.542037][ T4288] usb 6-1: bad CDC descriptors [ 345.768968][ T4288] usb 6-1: USB disconnect, device number 11 [ 345.946031][T10446] loop4: detected capacity change from 0 to 2048 [ 346.035047][T10450] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.097888][T10453] kAFS: bad VL server IP address [ 346.591076][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2001'. [ 346.844734][T10479] Invalid input. Must be >= 2304 [ 346.907289][T10482] loop1: detected capacity change from 0 to 512 [ 347.023773][T10482] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 347.063914][T10482] FAT-fs (loop1): Filesystem has been set read-only [ 347.575715][T10474] loop2: detected capacity change from 0 to 32768 [ 347.628447][T10474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2003 (10474) [ 347.666773][T10474] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.700288][T10476] loop4: detected capacity change from 0 to 32768 [ 347.710463][T10474] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 347.765436][T10474] BTRFS info (device loop2): setting nodatasum [ 347.815225][T10474] BTRFS info (device loop2): force zlib compression, level 3 [ 347.830760][T10476] XFS (loop4): Mounting V5 Filesystem [ 347.858959][T10474] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 347.868271][T10474] BTRFS info (device loop2): use lzo compression, level 0 [ 347.887634][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2022'. [ 347.941490][T10474] BTRFS info (device loop2): turning on flush-on-commit [ 347.981632][T10476] XFS (loop4): Ending clean mount [ 347.986228][T10474] BTRFS info (device loop2): enabling auto defrag [ 348.063445][T10474] BTRFS info (device loop2): max_inline at 4096 [ 348.121963][T10474] BTRFS info (device loop2): using free space tree [ 348.406045][ T8830] XFS (loop4): Unmounting Filesystem [ 348.504942][T10474] BTRFS info (device loop2): enabling ssd optimizations [ 349.299362][ T8480] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.573544][T10595] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 350.883165][T10608] loop0: detected capacity change from 0 to 512 [ 350.938242][T10600] loop2: detected capacity change from 0 to 8192 [ 350.968727][T10600] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 351.012948][T10600] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 351.036362][T10600] REISERFS (device loop2): using ordered data mode [ 351.055541][T10600] reiserfs: using flush barriers [ 351.129457][T10600] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 351.166327][T10608] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 351.229004][T10608] FAT-fs (loop0): Filesystem has been set read-only [ 351.244796][T10600] REISERFS (device loop2): checking transaction log (loop2) [ 351.568214][T10600] REISERFS (device loop2): Using tea hash to sort names [ 351.609355][T10600] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 351.674530][T10600] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 351.960853][T10635] loop5: detected capacity change from 0 to 1024 [ 352.056549][T10635] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 352.130856][T10635] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 352.163350][T10635] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.253689][T10607] loop1: detected capacity change from 0 to 32768 [ 352.304828][T10640] ptp ptp0: new virtual clock ptp1 [ 352.370903][T10640] ptp ptp0: new virtual clock ptp2 [ 352.403308][T10607] XFS (loop1): Mounting V5 Filesystem [ 352.448404][T10640] ptp ptp0: new virtual clock ptp3 [ 352.468053][T10640] ptp ptp0: new virtual clock ptp4 [ 352.505614][T10640] ptp ptp0: new virtual clock ptp5 [ 352.528958][T10640] ptp ptp0: guarantee physical clock free running [ 352.532972][T10607] XFS (loop1): Ending clean mount [ 352.777434][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 352.904777][ T9804] XFS (loop1): Unmounting Filesystem [ 353.696001][ T27] audit: type=1400 audit(1793506302.825:109): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10686 comm="syz.1.2043" name="unknown" offset=16 [ 354.876399][T10694] loop0: detected capacity change from 0 to 131072 [ 354.884540][T10694] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 354.891441][T10694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 354.902642][T10694] F2FS-fs (loop0): invalid crc value [ 355.006283][T10694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 355.073164][T10694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 355.080565][T10694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 355.096269][T10696] loop2: detected capacity change from 0 to 32768 [ 355.148416][T10710] loop5: detected capacity change from 0 to 1024 [ 355.250764][T10696] XFS (loop2): Mounting V5 Filesystem [ 355.293837][T10696] XFS (loop2): Ending clean mount [ 355.647378][ T8480] XFS (loop2): Unmounting Filesystem [ 355.682697][T10726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 356.127520][T10737] loop5: detected capacity change from 0 to 512 [ 356.184394][T10737] EXT4-fs: Ignoring removed nobh option [ 356.241252][T10708] loop1: detected capacity change from 0 to 32768 [ 356.303204][T10737] EXT4-fs (loop5): 1 truncate cleaned up [ 356.323931][T10737] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 356.364914][T10708] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 356.676922][ T5842] EXT4-fs (loop5): unmounting filesystem. [ 356.799613][ T9804] ocfs2: Unmounting device (7,1) on (node local) [ 357.272986][ T4767] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 357.468901][ T4767] usb 3-1: Using ep0 maxpacket: 16 [ 357.478229][ T4767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.520066][ T4767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.551385][ T4767] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.593582][ T4767] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.620766][ T4767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.658158][ T4767] usb 3-1: config 0 descriptor?? [ 357.886006][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 357.914858][T10789] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 357.936060][T10789] netlink: 'syz.0.2078': attribute type 2 has an invalid length. [ 358.097298][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.122514][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.159283][ T4767] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 358.177260][ T4767] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 358.197517][ T4767] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 358.217771][ T4767] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 358.253407][T10797] loop0: detected capacity change from 0 to 1024 [ 358.260263][ T4767] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input22 [ 358.320424][ T4767] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 358.320906][T10797] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.378900][T10797] EXT4-fs: Ignoring removed oldalloc option [ 358.386616][ T4767] usb 3-1: USB disconnect, device number 7 [ 358.452779][T10797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.509185][T10797] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.558730][T10797] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.2080: lblock 3 mapped to illegal pblock 3 (length 3) [ 358.670670][T10797] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 358.719041][T10797] EXT4-fs (loop0): This should not happen!! Data will be lost [ 358.719041][T10797] [ 358.878619][T10803] fido_id[10803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 358.919765][ T4370] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 5) [ 358.969768][ T4370] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 359.003402][ T4370] EXT4-fs (loop0): This should not happen!! Data will be lost [ 359.003402][ T4370] [ 359.030556][ T4370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 359.095243][ T4370] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 359.144739][ T4370] EXT4-fs (loop0): This should not happen!! Data will be lost [ 359.144739][ T4370] [ 359.157026][T10819] rnbd_client L125: Can't parse path ip: -93 [ 359.182589][ T4370] EXT4-fs (loop0): Total free blocks count 0 [ 359.199237][ T4370] EXT4-fs (loop0): Free/Dirty block details [ 359.205246][ T4370] EXT4-fs (loop0): free_blocks=0 [ 359.441119][T10830] loop4: detected capacity change from 0 to 512 [ 359.519572][T10830] EXT4-fs (loop4): 1 truncate cleaned up [ 359.526325][T10830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 359.724531][ T27] audit: type=1800 audit(1793506308.855:110): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2091" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 359.751035][T10830] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2091: bg 0: block 465: padding at end of block bitmap is not set [ 359.844260][T10830] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 359.864915][T10830] EXT4-fs (loop4): This should not happen!! Data will be lost [ 359.864915][T10830] [ 359.875508][T10830] EXT4-fs (loop4): Total free blocks count 0 [ 359.883276][T10830] EXT4-fs (loop4): Free/Dirty block details [ 359.902086][T10830] EXT4-fs (loop4): free_blocks=0 [ 359.917437][T10830] EXT4-fs (loop4): dirty_blocks=8 [ 359.937280][T10830] EXT4-fs (loop4): Block reservation details [ 359.960634][T10830] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 360.113709][ T8830] EXT4-fs (loop4): unmounting filesystem. [ 360.262851][T10851] bond0: no command found in slaves file - use +ifname or -ifname [ 360.763748][T10869] loop2: detected capacity change from 0 to 128 [ 361.056002][T10878] loop1: detected capacity change from 0 to 128 [ 361.588850][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 361.669025][ T4284] Bluetooth: hci0: command 0x0405 tx timeout [ 361.778910][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 361.785882][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.827610][ T7] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.858567][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.905855][ T7] usb 6-1: config 0 descriptor?? [ 362.040029][T10882] loop2: detected capacity change from 0 to 32768 [ 362.155041][ T7] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 362.225656][T10882] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 362.244296][T10911] device bridge0 entered promiscuous mode [ 362.315512][T10911] device macsec1 entered promiscuous mode [ 362.401071][ T7] usb 6-1: USB disconnect, device number 12 [ 362.451726][ T8480] ocfs2: Unmounting device (7,2) on (node local) [ 362.577794][T10916] loop1: detected capacity change from 0 to 512 [ 362.668630][T10916] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.728755][T10916] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.2121: casefold flag without casefold feature [ 362.826967][T10916] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2121: couldn't read orphan inode 13 (err -117) [ 362.898483][T10916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.986792][T10916] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 363.004263][T10928] loop2: detected capacity change from 0 to 1024 [ 363.078359][T10916] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 363.106855][T10916] ext4 filesystem being remounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.278969][ T9804] EXT4-fs (loop1): unmounting filesystem. [ 364.081926][T10970] loop0: detected capacity change from 0 to 1024 [ 364.093046][T10969] loop5: detected capacity change from 0 to 1024 [ 364.154246][T10969] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.193043][T10969] EXT4-fs: Ignoring removed oldalloc option [ 364.248041][T10969] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 364.339153][T10969] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.392090][T10969] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.2138: lblock 3 mapped to illegal pblock 3 (length 3) [ 364.488009][T10969] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 364.558841][T10969] EXT4-fs (loop5): This should not happen!! Data will be lost [ 364.558841][T10969] [ 364.753651][ T8567] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 5) [ 364.825094][ T8567] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 364.848940][ T8567] EXT4-fs (loop5): This should not happen!! Data will be lost [ 364.848940][ T8567] [ 364.872119][ T8567] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set [ 364.904593][T10992] loop1: detected capacity change from 0 to 4096 [ 364.915104][ T8567] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 364.965515][ T8567] EXT4-fs (loop5): This should not happen!! Data will be lost [ 364.965515][ T8567] [ 365.026188][ T8567] EXT4-fs (loop5): Total free blocks count 0 [ 365.033575][T10996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.040759][T10992] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 365.072343][ T8567] EXT4-fs (loop5): Free/Dirty block details [ 365.078673][ T8567] EXT4-fs (loop5): free_blocks=0 [ 365.127800][T10992] NILFS (loop1): mounting fs with errors [ 365.188551][T10992] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 159744 [ 365.262709][T10992] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 365.328744][T11002] loop0: Can't mount, would change RO state [ 365.352708][T10992] NILFS (loop1): error -5 truncating bmap (ino=15) [ 366.061456][T11030] loop4: detected capacity change from 0 to 8 [ 366.206020][T11030] SQUASHFS error: Unable to read directory block [629:46] [ 366.554175][T11045] loop4: detected capacity change from 0 to 16 [ 366.621274][T11045] erofs: (device loop4): mounted with root inode @ nid 36. [ 367.078392][T11060] loop2: detected capacity change from 0 to 512 [ 367.140010][T11060] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 367.158933][T11060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 367.181059][T11060] EXT4-fs (loop2): orphan cleanup on readonly fs [ 367.187580][T11060] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2168: iget: bad i_size value: 12154761577498 [ 367.331258][T11060] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2168: couldn't read orphan inode 13 (err -117) [ 367.366910][T11060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 367.601849][T11044] loop1: detected capacity change from 0 to 32768 [ 367.687119][T11044] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 367.698507][T11073] vivid-008: disconnect [ 367.704175][T11072] vivid-008: reconnect [ 367.975984][T11044] syz.1.2164 (11044) used greatest stack depth: 18656 bytes left [ 368.014869][T11082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2175'. [ 368.057053][ T8480] EXT4-fs (loop2): unmounting filesystem. [ 368.065588][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 368.132148][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 368.155534][ T9804] ocfs2: Unmounting device (7,1) on (node local) [ 368.289289][ T27] audit: type=1400 audit(1793506317.425:111): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=222F6F pid=11086 comm="syz.2.2177" name=222F6F offset=35 [ 368.621498][T11100] bond0: (slave bond_slave_0): Releasing backup interface [ 368.759691][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 368.788744][T11106] autofs4:pid:11106:autofs_fill_super: pipe file descriptor does not contain proper ops [ 368.816816][T11105] loop0: detected capacity change from 0 to 1024 [ 369.155971][T11114] loop4: detected capacity change from 0 to 16 [ 369.224296][T11114] erofs: (device loop4): mounted with root inode @ nid 36. [ 369.271068][T11115] loop1: detected capacity change from 0 to 2048 [ 369.384716][T11115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.452040][T11085] loop5: detected capacity change from 0 to 32768 [ 369.516565][T11115] UDF-fs: unknown compression code (128) [ 369.523439][T11085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2176 (11085) [ 369.670285][T11085] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.718975][T11085] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 369.729436][T11085] BTRFS info (device loop5): setting nodatasum [ 369.735679][T11085] BTRFS info (device loop5): force zlib compression, level 3 [ 369.800006][T11085] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 369.829151][T11126] program syz.0.2192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.849187][T11085] BTRFS info (device loop5): use lzo compression, level 0 [ 369.856503][T11085] BTRFS info (device loop5): turning on flush-on-commit [ 369.930673][T11085] BTRFS info (device loop5): enabling auto defrag [ 369.937234][T11085] BTRFS info (device loop5): max_inline at 4096 [ 369.974431][T11085] BTRFS info (device loop5): using free space tree [ 370.252467][T11085] BTRFS info (device loop5): enabling ssd optimizations [ 370.308886][T11157] loop0: Can't mount, would change RO state [ 370.636257][ T5842] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.114598][T10362] kernel write not supported for file /comedi4 (pid: 10362 comm: kworker/0:17) [ 371.788873][ T4767] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.818913][ T4288] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 371.987925][ T4767] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 372.008889][ T4288] usb 6-1: Using ep0 maxpacket: 32 [ 372.016451][ T4288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.037136][ T4767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.062776][ T4767] usb 2-1: Product: syz [ 372.067046][ T4767] usb 2-1: Manufacturer: syz [ 372.072316][ T4288] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.094080][ T4767] usb 2-1: SerialNumber: syz [ 372.099108][ T4288] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.134643][T11223] loop2: detected capacity change from 0 to 256 [ 372.147490][ T4288] usb 6-1: config 0 interface 0 has no altsetting 0 [ 372.182883][ T4288] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 372.219283][ T4288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.244950][T11223] FAT-fs (loop2): Directory bread(block 64) failed [ 372.273413][ T4288] usb 6-1: config 0 descriptor?? [ 372.279179][T11223] FAT-fs (loop2): Directory bread(block 65) failed [ 372.298744][T11223] FAT-fs (loop2): Directory bread(block 66) failed [ 372.305533][T11223] FAT-fs (loop2): Directory bread(block 67) failed [ 372.332828][T11223] FAT-fs (loop2): Directory bread(block 68) failed [ 372.356367][T11223] FAT-fs (loop2): Directory bread(block 69) failed [ 372.363879][ T4767] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 372.397250][T11223] FAT-fs (loop2): Directory bread(block 70) failed [ 372.415442][ T4767] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 372.427893][T11223] FAT-fs (loop2): Directory bread(block 71) failed [ 372.428168][T11223] FAT-fs (loop2): Directory bread(block 72) failed [ 372.488966][T11223] FAT-fs (loop2): Directory bread(block 73) failed [ 372.668617][ T4767] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 372.704933][ T4767] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 372.727661][ T4288] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 372.750102][ T4767] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 372.759345][ T4288] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 372.766956][ T4288] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 372.785127][ T4288] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 372.817371][ T4288] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 372.860376][ T4767] lan78xx: probe of 2-1:1.0 failed with error -71 [ 372.921443][ T4288] corsair-cpro: probe of 0003:1B1C:0C10.0011 failed with error -38 [ 372.930718][ T4767] usb 2-1: USB disconnect, device number 7 [ 373.145945][T10362] usb 6-1: USB disconnect, device number 13 [ 373.223061][T11212] loop4: detected capacity change from 0 to 65536 [ 373.303621][T11212] XFS (loop4): Mounting V5 Filesystem [ 373.398223][T11212] XFS (loop4): Ending clean mount [ 373.437839][T11212] XFS (loop4): Quotacheck needed: Please wait. [ 373.616082][T11212] XFS (loop4): Quotacheck: Done. [ 374.089546][ T8830] XFS (loop4): Unmounting Filesystem [ 374.519914][T11280] loop5: detected capacity change from 0 to 512 [ 374.564289][T11277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.642796][T11280] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.662997][T11280] EXT4-fs warning (device loop5): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 374.690731][T11280] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 374.748901][T11280] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.2233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 374.817658][T11280] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2233: couldn't read orphan inode 13 (err -117) [ 374.860284][T11280] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 375.509354][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 378.561482][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.567897][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.599237][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 436.057482][ T3642] udevd[3642]: worker [4562] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 439.993017][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.999462][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 493.269004][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 501.434183][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.440649][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.749104][ T28] INFO: task kworker/u4:2:31 blocked for more than 143 seconds. [ 525.756821][ T28] Not tainted syzkaller #0 [ 525.765865][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.776678][ T28] task:kworker/u4:2 state:D stack:21696 pid:31 ppid:2 flags:0x00004000 [ 525.786037][ T28] Workqueue: writeback wb_workfn (flush-8:0) [ 525.792433][ T28] Call Trace: [ 525.795768][ T28] [ 525.798793][ T28] __schedule+0x1089/0x4140 [ 525.804060][ T28] ? release_firmware_map_entry+0x187/0x187 [ 525.810128][ T28] ? blk_check_plugged+0x250/0x250 [ 525.815303][ T28] ? blk_check_plugged+0x250/0x250 [ 525.820875][ T28] ? kthread_data+0x4b/0xc0 [ 525.825435][ T28] ? wq_worker_sleeping+0x60/0x280 [ 525.831182][ T28] schedule+0xb9/0x180 [ 525.835319][ T28] io_schedule+0x7c/0xd0 [ 525.840729][ T28] bit_wait_io+0xf/0x100 [ 525.845021][ T28] __wait_on_bit+0x9b/0x2c0 [ 525.849868][ T28] ? bit_wait+0x100/0x100 [ 525.854256][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 525.860074][ T28] ? bit_wait+0x100/0x100 [ 525.864477][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 525.871465][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 525.876552][ T28] ? bit_waitqueue+0x30/0x30 [ 525.881517][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 525.886802][ T28] do_get_write_access+0x605/0xf20 [ 525.892316][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 525.898347][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 525.905072][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 525.912593][ T28] ? __might_sleep+0xd0/0xd0 [ 525.917765][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 525.923177][ T28] ? ext4_mb_new_blocks+0x29ef/0x44d0 [ 525.928616][ T28] ext4_reserve_inode_write+0x201/0x290 [ 525.934782][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 525.940562][ T28] ext4_dirty_inode+0xbf/0x100 [ 525.945515][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 525.951721][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 525.956809][ T28] ext4_new_meta_blocks+0x2c0/0x3d0 [ 525.962404][ T28] ? ext4_should_retry_alloc+0x2c0/0x2c0 [ 525.968094][ T28] ? slab_free_freelist_hook+0x133/0x1b0 [ 525.974786][ T28] ? ext4_inode_to_goal_block+0x313/0x450 [ 525.980891][ T28] ext4_ext_insert_extent+0x101d/0x47d0 [ 525.986540][ T28] ? rcu_is_watching+0x11/0xa0 [ 525.992120][ T28] ? ext4_ext_search_right+0x376/0x800 [ 525.997658][ T28] ? ext4_ext_next_allocated_block+0x250/0x250 [ 526.004179][ T28] ? ext4_ext_find_goal+0xed/0x1d0 [ 526.012892][ T28] ext4_ext_map_blocks+0x1993/0x6680 [ 526.018287][ T28] ? ext4_ext_release+0x10/0x10 [ 526.027377][ T28] ? rwsem_write_trylock+0x135/0x1c0 [ 526.033135][ T28] ? ext4_es_lookup_extent+0x638/0xb00 [ 526.039000][ T28] ext4_map_blocks+0x9d7/0x1a90 [ 526.043940][ T28] ? slab_pre_alloc_hook+0x59/0x300 [ 526.049768][ T28] ? ext4_issue_zeroout+0x250/0x250 [ 526.055017][ T28] ? rcu_is_watching+0x11/0xa0 [ 526.060203][ T28] ? ext4_inode_journal_mode+0x372/0x460 [ 526.065900][ T28] ext4_writepages+0x1462/0x2fe0 [ 526.072054][ T28] ? ext4_read_folio+0x370/0x370 [ 526.077109][ T28] ? __lock_acquire+0x142d/0x7ea0 [ 526.082578][ T28] ? verify_lock_unused+0x140/0x140 [ 526.087874][ T28] ? writeback_sb_inodes+0x44d/0x17f0 [ 526.094468][ T28] ? ext4_read_folio+0x370/0x370 [ 526.099757][ T28] do_writepages+0x3c6/0x640 [ 526.104428][ T28] ? __writepage+0x130/0x130 [ 526.109407][ T28] ? writeback_sb_inodes+0x6d1/0x17f0 [ 526.114842][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.120425][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 526.125520][ T28] __writeback_single_inode+0x153/0x1170 [ 526.131574][ T28] writeback_sb_inodes+0xad5/0x17f0 [ 526.136875][ T28] ? queue_io+0x570/0x570 [ 526.142533][ T28] ? __rwlock_init+0x140/0x140 [ 526.147372][ T28] __writeback_inodes_wb+0x12a/0x3f0 [ 526.153102][ T28] wb_writeback+0x484/0xd40 [ 526.157681][ T28] ? percpu_ref_tryget+0x250/0x250 [ 526.163360][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.169641][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.175351][ T28] wb_workfn+0xb68/0xee0 [ 526.180073][ T28] ? inode_wait_for_writeback+0x220/0x220 [ 526.185880][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.192330][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.197431][ T28] ? read_lock_is_recursive+0x10/0x10 [ 526.203359][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 526.209536][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.214794][ T28] ? process_one_work+0x7b4/0x1160 [ 526.220335][ T28] process_one_work+0x8ab/0x1160 [ 526.225332][ T28] ? worker_detach_from_pool+0x240/0x240 [ 526.231611][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.236710][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 526.243335][ T28] ? wq_worker_running+0x97/0x190 [ 526.248427][ T28] worker_thread+0xaf5/0x12a0 [ 526.253507][ T28] kthread+0x29d/0x330 [ 526.257615][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 526.263022][ T28] ? kthread_blkcg+0xd0/0xd0 [ 526.267682][ T28] ret_from_fork+0x1f/0x30 [ 526.272644][ T28] [ 526.276424][ T28] INFO: task jbd2/sda1-8:3605 blocked for more than 143 seconds. [ 526.284580][ T28] Not tainted syzkaller #0 [ 526.289815][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.298525][ T28] task:jbd2/sda1-8 state:D stack:25552 pid:3605 ppid:2 flags:0x00004000 [ 526.307848][ T28] Call Trace: [ 526.311549][ T28] [ 526.314541][ T28] __schedule+0x1089/0x4140 [ 526.319525][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.324626][ T28] ? release_firmware_map_entry+0x187/0x187 [ 526.330999][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 526.336977][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 526.343563][ T28] schedule+0xb9/0x180 [ 526.347717][ T28] io_schedule+0x7c/0xd0 [ 526.353050][ T28] bit_wait_io+0xf/0x100 [ 526.357358][ T28] __wait_on_bit+0x9b/0x2c0 [ 526.362291][ T28] ? bit_wait+0x100/0x100 [ 526.366723][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 526.373464][ T28] ? bit_wait+0x100/0x100 [ 526.377858][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 526.384622][ T28] ? do_raw_write_lock+0x11a/0x260 [ 526.390041][ T28] ? bit_waitqueue+0x30/0x30 [ 526.394865][ T28] ? do_raw_read_unlock+0x39/0x70 [ 526.400093][ T28] jbd2_journal_commit_transaction+0x2f0f/0x5f30 [ 526.406533][ T28] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 526.413415][ T28] ? lock_chain_count+0x20/0x20 [ 526.418324][ T28] ? _raw_spin_unlock+0x40/0x40 [ 526.423321][ T28] ? rcu_is_watching+0x11/0xa0 [ 526.428160][ T28] ? __timer_delete_sync+0x239/0x2e0 [ 526.433562][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.438644][ T28] ? timer_delete_sync+0x20/0x20 [ 526.443812][ T28] ? do_raw_read_unlock+0x70/0x70 [ 526.449833][ T28] ? prepare_to_wait+0x1a6/0x1f0 [ 526.454844][ T28] kjournald2+0x40b/0x800 [ 526.459364][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 526.465339][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 526.471410][ T28] ? wake_bit_function+0x200/0x200 [ 526.476583][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 526.484128][ T28] ? __kthread_parkme+0x71/0x1c0 [ 526.489195][ T28] ? __kthread_parkme+0x15b/0x1c0 [ 526.494293][ T28] kthread+0x29d/0x330 [ 526.498411][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 526.504653][ T28] ? kthread_blkcg+0xd0/0xd0 [ 526.509349][ T28] ret_from_fork+0x1f/0x30 [ 526.513843][ T28] [ 526.516967][ T28] INFO: task syz-executor:4262 blocked for more than 144 seconds. [ 526.527431][ T28] Not tainted syzkaller #0 [ 526.532616][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.541414][ T28] task:syz-executor state:D stack:22736 pid:4262 ppid:4261 flags:0x00004002 [ 526.550931][ T28] Call Trace: [ 526.554296][ T28] [ 526.557271][ T28] __schedule+0x1089/0x4140 [ 526.562196][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.567304][ T28] ? release_firmware_map_entry+0x187/0x187 [ 526.573397][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 526.579409][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 526.585275][ T28] schedule+0xb9/0x180 [ 526.590180][ T28] io_schedule+0x7c/0xd0 [ 526.594500][ T28] bit_wait_io+0xf/0x100 [ 526.598860][ T28] __wait_on_bit+0x9b/0x2c0 [ 526.603409][ T28] ? bit_wait+0x100/0x100 [ 526.607801][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 526.614922][ T28] ? bit_wait+0x100/0x100 [ 526.619531][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 526.624334][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 526.629761][ T28] ? bit_waitqueue+0x30/0x30 [ 526.634459][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 526.639978][ T28] do_get_write_access+0x605/0xf20 [ 526.645177][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 526.651689][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 526.657924][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 526.664401][ T28] ? rcu_is_watching+0x11/0xa0 [ 526.670357][ T28] ext4_reserve_inode_write+0x201/0x290 [ 526.675985][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 526.682396][ T28] ext4_dirty_inode+0xbf/0x100 [ 526.687850][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 526.694019][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 526.699356][ T28] __file_update_time+0x21d/0x240 [ 526.704450][ T28] file_update_time+0x2f3/0x370 [ 526.709665][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 526.715039][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 526.720866][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 526.725969][ T28] ? ext4_change_inode_journal_flag+0x890/0x890 [ 526.732382][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 526.737735][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 526.742883][ T28] do_page_mkwrite+0x16b/0x5c0 [ 526.747713][ T28] wp_page_shared+0x167/0x370 [ 526.752549][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 526.757536][ T28] ? mt_find+0x157/0x830 [ 526.761897][ T28] ? numa_migrate_prep+0x250/0x250 [ 526.767095][ T28] ? lock_chain_count+0x20/0x20 [ 526.772158][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 526.777498][ T28] do_user_addr_fault+0x5a9/0xbb0 [ 526.782881][ T28] exc_page_fault+0x60/0x100 [ 526.787554][ T28] ? clear_bhb_loop+0x60/0xb0 [ 526.794111][ T28] asm_exc_page_fault+0x22/0x30 [ 526.799135][ T28] RIP: 0033:0x7f98b62715e3 [ 526.803608][ T28] RSP: 002b:00007ffe306fbf10 EFLAGS: 00010206 [ 526.813667][ T28] RAX: 00007f98aedfd0f0 RBX: 00007ffe306fc040 RCX: 0000000000000000 [ 526.821753][ T28] RDX: 00007f98aedfd0ec RSI: 0000000000000008 RDI: 00007ffe306fc040 [ 526.829995][ T28] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 526.838021][ T28] R10: 00007ffe306fc020 R11: 0000000000000000 R12: 0000000000000000 [ 526.846109][ T28] R13: 0000000000002f10 R14: ffffffffffffd0f0 R15: 0000000000000000 [ 526.854265][ T28] [ 526.857413][ T28] INFO: task syz.0.2225:11253 blocked for more than 144 seconds. [ 526.865275][ T28] Not tainted syzkaller #0 [ 526.870552][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.879323][ T28] task:syz.0.2225 state:D stack:25488 pid:11253 ppid:8382 flags:0x00004004 [ 526.888582][ T28] Call Trace: [ 526.893827][ T28] [ 526.896828][ T28] __schedule+0x1089/0x4140 [ 526.904483][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 526.909788][ T28] ? release_firmware_map_entry+0x187/0x187 [ 526.915740][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 526.923557][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 526.930308][ T28] schedule+0xb9/0x180 [ 526.934440][ T28] io_schedule+0x7c/0xd0 [ 526.941045][ T28] bit_wait_io+0xf/0x100 [ 526.945321][ T28] __wait_on_bit+0x9b/0x2c0 [ 526.950013][ T28] ? bit_wait+0x100/0x100 [ 526.954405][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 526.960051][ T28] ? bit_wait+0x100/0x100 [ 526.964463][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 526.969324][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 526.974389][ T28] ? bit_waitqueue+0x30/0x30 [ 526.979112][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 526.984372][ T28] do_get_write_access+0x605/0xf20 [ 526.989610][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 526.996304][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 527.003090][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 527.009398][ T28] ? rcu_is_watching+0x11/0xa0 [ 527.014226][ T28] ext4_reserve_inode_write+0x201/0x290 [ 527.019889][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 527.025509][ T28] ext4_dirty_inode+0xbf/0x100 [ 527.033410][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 527.039416][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 527.044538][ T28] __file_update_time+0x21d/0x240 [ 527.049688][ T28] file_update_time+0x2f3/0x370 [ 527.054595][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 527.060045][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 527.065424][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 527.070573][ T28] ? ext4_change_inode_journal_flag+0x890/0x890 [ 527.076888][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 527.082369][ T28] ? put_page+0x270/0x270 [ 527.086749][ T28] do_page_mkwrite+0x16b/0x5c0 [ 527.092290][ T28] handle_mm_fault+0x199c/0x3d40 [ 527.098375][ T28] ? mt_find+0x157/0x830 [ 527.103124][ T28] ? numa_migrate_prep+0x250/0x250 [ 527.108313][ T28] ? lock_chain_count+0x20/0x20 [ 527.113435][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 527.120532][ T28] do_user_addr_fault+0x5a9/0xbb0 [ 527.125654][ T28] exc_page_fault+0x60/0x100 [ 527.130407][ T28] asm_exc_page_fault+0x22/0x30 [ 527.135455][ T28] RIP: 0033:0x7f8743674332 [ 527.140019][ T28] RSP: 002b:00007ffd874c0950 EFLAGS: 00010202 [ 527.146196][ T28] RAX: 000000000000e008 RBX: 00007f8744555720 RCX: 0000000000000000 [ 527.154303][ T28] RDX: 0000001b2f516000 RSI: 0000000000000008 RDI: 00007f8744555720 [ 527.162558][ T28] RBP: 00000000000004c6 R08: 00007f8743a10000 R09: 00007f8743a26038 [ 527.170675][ T28] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff81c14f3c [ 527.178687][ T28] R13: 00007f8743a26038 R14: 00000000000001b9 R15: ffffffffffff2000 [ 527.186833][ T28] ? mlock_page_drain_local+0xec/0x490 [ 527.192532][ T28] [ 527.195621][ T28] INFO: task syz.5.2233:11278 blocked for more than 144 seconds. [ 527.204244][ T28] Not tainted syzkaller #0 [ 527.209284][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.218001][ T28] task:syz.5.2233 state:D stack:26256 pid:11278 ppid:5842 flags:0x00004004 [ 527.227371][ T28] Call Trace: [ 527.230807][ T28] [ 527.233790][ T28] __schedule+0x1089/0x4140 [ 527.238374][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 527.243583][ T28] ? release_firmware_map_entry+0x187/0x187 [ 527.249663][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 527.255617][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 527.260998][ T28] schedule+0xb9/0x180 [ 527.265132][ T28] io_schedule+0x7c/0xd0 [ 527.270226][ T28] bit_wait_io+0xf/0x100 [ 527.274525][ T28] __wait_on_bit+0x9b/0x2c0 [ 527.279174][ T28] ? bit_wait+0x100/0x100 [ 527.283582][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 527.289187][ T28] ? bit_wait+0x100/0x100 [ 527.293553][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 527.298333][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 527.304368][ T28] ? bit_waitqueue+0x30/0x30 [ 527.309093][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 527.314342][ T28] do_get_write_access+0x605/0xf20 [ 527.319585][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 527.325609][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 527.331913][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 527.338128][ T28] ? rcu_is_watching+0x11/0xa0 [ 527.343020][ T28] ext4_reserve_inode_write+0x201/0x290 [ 527.348982][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 527.354633][ T28] ext4_dirty_inode+0xbf/0x100 [ 527.360320][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 527.366200][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 527.371424][ T28] __file_update_time+0x21d/0x240 [ 527.376519][ T28] file_update_time+0x2f3/0x370 [ 527.381633][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 527.386978][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 527.392403][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 527.397495][ T28] ? pte_alloc_one+0x287/0x310 [ 527.403023][ T28] ? ext4_change_inode_journal_flag+0x890/0x890 [ 527.409433][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 527.414780][ T28] ? put_page+0x270/0x270 [ 527.419236][ T28] do_page_mkwrite+0x16b/0x5c0 [ 527.424058][ T28] handle_mm_fault+0x199c/0x3d40 [ 527.435294][ T28] ? mt_find+0x157/0x830 [ 527.439690][ T28] ? numa_migrate_prep+0x250/0x250 [ 527.444871][ T28] ? lock_chain_count+0x20/0x20 [ 527.449884][ T28] ? ktime_get+0x247/0x270 [ 527.454362][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 527.459876][ T28] do_user_addr_fault+0x5a9/0xbb0 [ 527.464988][ T28] exc_page_fault+0x60/0x100 [ 527.469692][ T28] asm_exc_page_fault+0x22/0x30 [ 527.476772][ T28] RIP: 0033:0x7fb092473c09 [ 527.481348][ T28] RSP: 002b:00007ffeb28a9240 EFLAGS: 00010202 [ 527.487473][ T28] RAX: 0000001b31424000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 527.495748][ T28] RDX: 0000001b31423ffc RSI: 00000000003ffde8 RDI: 00007fb093355700 [ 527.503827][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fb092812000 [ 527.512611][ T28] R10: 00007fb093355700 R11: 0000000000000000 R12: 0000000000000000 [ 527.520764][ T28] R13: 0000000000017176 R14: ffffffff812f90fc R15: 00007fb093355720 [ 527.528852][ T28] ? fpregs_assert_state_consistent+0xac/0xe0 [ 527.534999][ T28] [ 527.538067][ T28] INFO: task syz.2.2235:11285 blocked for more than 145 seconds. [ 527.545921][ T28] Not tainted syzkaller #0 [ 527.550995][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.559779][ T28] task:syz.2.2235 state:D stack:27600 pid:11285 ppid:8480 flags:0x00004004 [ 527.569105][ T28] Call Trace: [ 527.572426][ T28] [ 527.575410][ T28] __schedule+0x1089/0x4140 [ 527.580098][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 527.585210][ T28] ? release_firmware_map_entry+0x187/0x187 [ 527.592548][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 527.598511][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 527.603983][ T28] schedule+0xb9/0x180 [ 527.609198][ T28] io_schedule+0x7c/0xd0 [ 527.613525][ T28] bit_wait_io+0xf/0x100 [ 527.617811][ T28] __wait_on_bit+0x9b/0x2c0 [ 527.622427][ T28] ? bit_wait+0x100/0x100 [ 527.626805][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 527.632361][ T28] ? bit_wait+0x100/0x100 [ 527.636727][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 527.641593][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 527.646685][ T28] ? bit_waitqueue+0x30/0x30 [ 527.651487][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 527.656730][ T28] do_get_write_access+0x605/0xf20 [ 527.661977][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 527.668004][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 527.674898][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 527.681920][ T28] ? rcu_is_watching+0x11/0xa0 [ 527.686768][ T28] ext4_reserve_inode_write+0x201/0x290 [ 527.692515][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 527.698038][ T28] ext4_dirty_inode+0xbf/0x100 [ 527.702965][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 527.711577][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 527.716695][ T28] __file_update_time+0x21d/0x240 [ 527.721909][ T28] file_update_time+0x2f3/0x370 [ 527.726822][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 527.732247][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 527.737628][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 527.742799][ T28] ? pte_alloc_one+0x287/0x310 [ 527.747618][ T28] ? ext4_change_inode_journal_flag+0x890/0x890 [ 527.754128][ T28] do_page_mkwrite+0x16b/0x5c0 [ 527.759082][ T28] handle_mm_fault+0x199c/0x3d40 [ 527.764081][ T28] ? mt_find+0x157/0x830 [ 527.768398][ T28] ? numa_migrate_prep+0x250/0x250 [ 527.773673][ T28] ? lock_chain_count+0x20/0x20 [ 527.778578][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 527.784025][ T28] do_user_addr_fault+0x5a9/0xbb0 [ 527.789202][ T28] exc_page_fault+0x60/0x100 [ 527.793849][ T28] ? clear_bhb_loop+0x60/0xb0 [ 527.798607][ T28] asm_exc_page_fault+0x22/0x30 [ 527.803629][ T28] RIP: 0033:0x7ff81ac6cea3 [ 527.808084][ T28] RSP: 002b:00007ffeb3df8ca0 EFLAGS: 00010246 [ 527.815589][ T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d164000 [ 527.824073][ T28] RDX: 0000001b2d124000 RSI: 0000000000400000 RDI: 00007ff81afe7708 [ 527.832685][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.840983][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 527.849346][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb3df8f30 [ 527.857375][ T28] [ 527.860772][ T28] INFO: task syz.4.2230:11291 blocked for more than 145 seconds. [ 527.868523][ T28] Not tainted syzkaller #0 [ 527.873618][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.882421][ T28] task:syz.4.2230 state:D stack:27600 pid:11291 ppid:8830 flags:0x00004004 [ 527.891764][ T28] Call Trace: [ 527.895079][ T28] [ 527.898050][ T28] __schedule+0x1089/0x4140 [ 527.902702][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 527.907811][ T28] ? release_firmware_map_entry+0x187/0x187 [ 527.913828][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 527.920447][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 527.925718][ T28] schedule+0xb9/0x180 [ 527.930132][ T28] io_schedule+0x7c/0xd0 [ 527.934447][ T28] bit_wait_io+0xf/0x100 [ 527.938803][ T28] __wait_on_bit+0x9b/0x2c0 [ 527.944680][ T28] ? bit_wait+0x100/0x100 [ 527.949152][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 527.954673][ T28] ? bit_wait+0x100/0x100 [ 527.959160][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 527.963982][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 527.969172][ T28] ? bit_waitqueue+0x30/0x30 [ 527.973825][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 527.979191][ T28] do_get_write_access+0x605/0xf20 [ 527.984364][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 527.990965][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 527.999915][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 528.006238][ T28] ? rcu_is_watching+0x11/0xa0 [ 528.011111][ T28] ext4_reserve_inode_write+0x201/0x290 [ 528.017342][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 528.024208][ T28] ext4_dirty_inode+0xbf/0x100 [ 528.029139][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 528.035009][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 528.040302][ T28] __file_update_time+0x21d/0x240 [ 528.045470][ T28] file_update_time+0x2f3/0x370 [ 528.050462][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 528.055853][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 528.061293][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 528.066388][ T28] ? pte_alloc_one+0x287/0x310 [ 528.071599][ T28] ? ext4_change_inode_journal_flag+0x890/0x890 [ 528.078005][ T28] do_page_mkwrite+0x16b/0x5c0 [ 528.082925][ T28] handle_mm_fault+0x199c/0x3d40 [ 528.087926][ T28] ? mt_find+0x157/0x830 [ 528.092404][ T28] ? numa_migrate_prep+0x250/0x250 [ 528.097587][ T28] ? lock_chain_count+0x20/0x20 [ 528.102573][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 528.107898][ T28] do_user_addr_fault+0x5a9/0xbb0 [ 528.113524][ T28] exc_page_fault+0x60/0x100 [ 528.118167][ T28] ? clear_bhb_loop+0x60/0xb0 [ 528.123815][ T28] asm_exc_page_fault+0x22/0x30 [ 528.128885][ T28] RIP: 0033:0x7f8a9a26cea3 [ 528.133463][ T28] RSP: 002b:00007fff83a237f0 EFLAGS: 00010246 [ 528.139982][ T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33f64000 [ 528.148009][ T28] RDX: 0000001b33f24000 RSI: 0000000000400000 RDI: 00007f8a9a5e7708 [ 528.156506][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.166200][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 528.175552][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff83a23a80 [ 528.183818][ T28] [ 528.186957][ T28] [ 528.186957][ T28] Showing all locks held in the system: [ 528.194793][ T28] 1 lock held by rcu_tasks_kthre/12: [ 528.200342][ T28] #0: ffffffff8db2e3f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 528.210936][ T28] 1 lock held by rcu_tasks_trace/13: [ 528.216473][ T28] #0: ffffffff8db2ec30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 528.228583][ T28] 1 lock held by khungtaskd/28: [ 528.233740][ T28] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 528.243728][ T28] 6 locks held by kworker/u4:2/31: [ 528.249939][ T28] #0: ffff88814010e938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 528.260734][ T28] #1: ffffc90000a7fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 528.272838][ T28] #2: ffff88814d8d20e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 528.282990][ T28] #3: ffff88814d8d4c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x246/0x2fe0 [ 528.294167][ T28] #4: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.303979][ T28] #5: ffff888074bd8c90 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 528.314031][ T28] 2 locks held by getty/4030: [ 528.318871][ T28] #0: ffff88814d1e7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 528.329323][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x430/0x1400 [ 528.339633][ T28] 3 locks held by syz-executor/4262: [ 528.344949][ T28] #0: ffff88807cce5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 528.358367][ T28] #1: ffff88814d8d2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 528.369099][ T28] #2: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.384828][ T28] 3 locks held by syz.0.2225/11253: [ 528.390130][ T28] #0: ffff88802e789f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 528.400313][ T28] #1: ffff88814d8d2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 528.410195][ T28] #2: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.419980][ T28] 3 locks held by syz.5.2233/11278: [ 528.425216][ T28] #0: ffff88802a2c5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 528.435905][ T28] #1: ffff88814d8d2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 528.445831][ T28] #2: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.455631][ T28] 3 locks held by syz.2.2235/11285: [ 528.460977][ T28] #0: ffff888076bf8158 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 528.471116][ T28] #1: ffff88814d8d2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 528.481377][ T28] #2: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.491354][ T28] 3 locks held by syz.4.2230/11291: [ 528.498052][ T28] #0: ffff888076bfbd58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 528.510256][ T28] #1: ffff88814d8d2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 528.520356][ T28] #2: ffff88814d8d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 528.531894][ T28] [ 528.534312][ T28] ============================================= [ 528.534312][ T28] [ 528.542938][ T28] NMI backtrace for cpu 1 [ 528.547299][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 528.554521][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.564612][ T28] Call Trace: [ 528.567904][ T28] [ 528.570848][ T28] dump_stack_lvl+0x188/0x24e [ 528.575570][ T28] ? show_regs_print_info+0x12/0x12 [ 528.580793][ T28] ? load_image+0x410/0x410 [ 528.585312][ T28] ? vprintk_emit+0x59f/0x6a0 [ 528.590035][ T28] ? printk_sprint+0x460/0x460 [ 528.594848][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 528.599847][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 528.606064][ T28] ? _printk+0xda/0x130 [ 528.610272][ T28] ? load_image+0x410/0x410 [ 528.614812][ T28] ? load_image+0x410/0x410 [ 528.619352][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 528.625458][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 528.631591][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 528.637628][ T28] watchdog+0xf0e/0xf50 [ 528.641820][ T28] ? watchdog+0x1ed/0xf50 [ 528.646194][ T28] kthread+0x29d/0x330 [ 528.650294][ T28] ? hungtask_pm_notify+0x40/0x40 [ 528.655359][ T28] ? kthread_blkcg+0xd0/0xd0 [ 528.659982][ T28] ret_from_fork+0x1f/0x30 [ 528.664444][ T28] [ 528.668382][ T28] Sending NMI from CPU 1 to CPUs 0: [ 528.673886][ C0] NMI backtrace for cpu 0 [ 528.673897][ C0] CPU: 0 PID: 8567 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 528.673913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.673923][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 528.673952][ C0] RIP: 0010:preempt_count_add+0x3e/0x190 [ 528.673974][ C0] Code: c6 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 eb 00 00 00 83 3d f2 bf 6d 16 00 75 07 65 8b 05 f1 9d a9 7e 65 01 3d ea 9d a9 7e <48> c7 c0 40 91 c6 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 [ 528.673989][ C0] RSP: 0018:ffffc9000369f600 EFLAGS: 00000282 [ 528.674002][ C0] RAX: 0000000080000001 RBX: ffffc9000369f6c8 RCX: ffffffff97c69103 [ 528.674015][ C0] RDX: dffffc0000000000 RSI: ffffffff8613f12f RDI: 0000000000000001 [ 528.674027][ C0] RBP: 1ffff920006d3ee0 R08: ffffc9000369f790 R09: 0000000000000005 [ 528.674039][ C0] R10: dffffc0000000000 R11: fffff520006d3ee5 R12: ffffffff8613f12f [ 528.674051][ C0] R13: ffffc9000369fb80 R14: dffffc0000000000 R15: dffffc0000000000 [ 528.674064][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 528.674078][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.674090][ C0] CR2: 0000560690126660 CR3: 000000007c764000 CR4: 00000000003506f0 [ 528.674105][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 528.674115][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 528.674126][ C0] Call Trace: [ 528.674131][ C0] [ 528.674139][ C0] unwind_next_frame+0x97/0x1fd0 [ 528.674163][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 528.674186][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 528.674209][ C0] ? stack_trace_save+0xf0/0xf0 [ 528.674231][ C0] arch_stack_walk+0x10c/0x140 [ 528.674254][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 528.674279][ C0] stack_trace_save+0xa6/0xf0 [ 528.674300][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 528.674320][ C0] ? mark_lock+0x94/0x320 [ 528.674346][ C0] ? verify_lock_unused+0x140/0x140 [ 528.674369][ C0] ? __lock_acquire+0x142d/0x7ea0 [ 528.674393][ C0] ? memset+0x1e/0x40 [ 528.674410][ C0] kasan_set_track+0x4b/0x70 [ 528.674433][ C0] ? kasan_set_track+0x4b/0x70 [ 528.674455][ C0] ? __kasan_slab_alloc+0x6b/0x80 [ 528.674478][ C0] ? slab_post_alloc_hook+0x4b/0x490 [ 528.674498][ C0] ? kmem_cache_alloc_node+0x1ad/0x310 [ 528.674516][ C0] ? __alloc_skb+0xf9/0x7d0 [ 528.674535][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 528.674585][ C0] __kasan_slab_alloc+0x6b/0x80 [ 528.674610][ C0] slab_post_alloc_hook+0x4b/0x490 [ 528.674634][ C0] kmem_cache_alloc_node+0x1ad/0x310 [ 528.674653][ C0] ? __alloc_skb+0xf9/0x7d0 [ 528.674675][ C0] __alloc_skb+0xf9/0x7d0 [ 528.674696][ C0] nsim_dev_trap_report_work+0x24f/0xa80 [ 528.674726][ C0] ? process_one_work+0x7b4/0x1160 [ 528.674746][ C0] process_one_work+0x8ab/0x1160 [ 528.674774][ C0] ? worker_detach_from_pool+0x240/0x240 [ 528.674796][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 528.674818][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 528.674848][ C0] ? wq_worker_running+0x97/0x190 [ 528.674865][ C0] worker_thread+0xaf5/0x12a0 [ 528.674892][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 528.674920][ C0] kthread+0x29d/0x330 [ 528.674934][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 528.674953][ C0] ? kthread_blkcg+0xd0/0xd0 [ 528.674969][ C0] ret_from_fork+0x1f/0x30 [ 528.675000][ C0] [ 528.688966][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 528.689007][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 528.689062][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.689094][ T28] Call Trace: [ 528.689116][ T28] [ 528.689139][ T28] dump_stack_lvl+0x188/0x24e [ 528.689245][ T28] ? memcpy+0x3c/0x60 [ 528.689341][ T28] ? show_regs_print_info+0x12/0x12 [ 528.689426][ T28] ? load_image+0x410/0x410 [ 528.689525][ T28] panic+0x2d3/0x710 [ 528.689588][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 528.689687][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 528.689744][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 528.689835][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 528.689864][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 528.689924][ T28] watchdog+0xf4d/0xf50 [ 528.690003][ T28] ? watchdog+0x1ed/0xf50 [ 528.690087][ T28] kthread+0x29d/0x330 [ 528.690131][ T28] ? hungtask_pm_notify+0x40/0x40 [ 528.690211][ T28] ? kthread_blkcg+0xd0/0xd0 [ 528.690266][ T28] ret_from_fork+0x1f/0x30 [ 528.690385][ T28] [ 528.691508][ T28] Kernel Offset: disabled [ 529.129115][ T28] Rebooting in 86400 seconds..