last executing test programs: 8m47.01636455s ago: executing program 32 (id=1736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e0494993cfc0000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) 8m9.263653114s ago: executing program 33 (id=2256): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 6m39.916542084s ago: executing program 34 (id=3080): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 6m10.347307932s ago: executing program 7 (id=3314): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 6m9.272616704s ago: executing program 7 (id=3322): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x53) keyctl$get_persistent(0x16, 0x0, r0) 6m8.60947841s ago: executing program 7 (id=3327): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x277b, 0xfffd}, 0x90) 6m8.12012851s ago: executing program 7 (id=3334): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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") setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 6m7.239317485s ago: executing program 7 (id=3339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000040000fedbdf25120000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) 6m4.981197151s ago: executing program 7 (id=3352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m4.083710964s ago: executing program 35 (id=3352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m40.839478901s ago: executing program 3 (id=4133): r0 = semget$private(0x0, 0x2, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0x9b6a}], 0x1) semop(r0, &(0x7f0000000200), 0x53) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 4m39.737467695s ago: executing program 3 (id=4143): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 4m39.171548899s ago: executing program 3 (id=4146): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c000000010000000200"], 0x3414c0) 4m38.53947052s ago: executing program 3 (id=4151): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000540)={0x100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000100)) 4m37.813173936s ago: executing program 3 (id=4158): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 4m36.4295509s ago: executing program 3 (id=4165): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x1, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 4m35.699531675s ago: executing program 36 (id=4165): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x1, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 2m27.281446292s ago: executing program 2 (id=5419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 2m26.894550391s ago: executing program 2 (id=5425): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1fe) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems\x00', 0x80, 0x24) getdents64(r0, &(0x7f0000002300)=""/4108, 0x100c) 2m26.537013236s ago: executing program 2 (id=5430): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) time(&(0x7f0000000000)) 2m26.009942297s ago: executing program 2 (id=5436): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000b80)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x892, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) 2m25.438349063s ago: executing program 2 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m24.629516341s ago: executing program 2 (id=5452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m24.332802792s ago: executing program 37 (id=5452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m47.234171235s ago: executing program 1 (id=5700): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @random="a20f64a529d5", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m46.647729241s ago: executing program 1 (id=5703): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r1}) 1m45.881834559s ago: executing program 1 (id=5706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m41.596222699s ago: executing program 1 (id=5735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) 1m41.152546103s ago: executing program 1 (id=5740): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m40.60176272s ago: executing program 1 (id=5743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) writev(r0, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2) 1m25.499509598s ago: executing program 38 (id=5743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) writev(r0, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2) 3.41025137s ago: executing program 9 (id=6436): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a}) 3.131730775s ago: executing program 8 (id=6440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e1d, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x3, 0x1, 0x5, 0x5, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 3.009277331s ago: executing program 9 (id=6441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)={0x44, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{}, {0xd}, @broadcast, @device_a, @initial, {0x3, 0x2}}, 0x0, 0x1, 0x4e, @val={0x10, 0x1, 0xc5}}}]}, 0x44}}, 0x0) 2.711306728s ago: executing program 5 (id=6443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/current_tracer\x00', 0x1, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="bf", 0x1}], 0x1) 2.65782759s ago: executing program 4 (id=6444): r0 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @local}], 0x10) 2.637264957s ago: executing program 8 (id=6445): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c000, &(0x7f0000000280)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@nombcache}, {@nomblk_io_submit}, {@errors_remount}, {@i_version}]}, 0x1, 0x5b1, &(0x7f0000000880)="$eJzs3U1oHGUfAPD/zGabfuR90xfeF16lh6JChdJN0g+tntqrWCj0IHjRsN2Gkk23ZDfahIDpvYg9iEov9aYHj4oHD+LFo1cvfpyFYoOFpgdd2exsmqabuEmzWc3+fjDJ88zM7v//7Mzz7MwwwwbQtw43/qQRT0XE+SRieNWygcgWHm6ut7Q4X3ywOF9Mol6/8GsSSUTcX5wvttZPsv8HImIhIv4fEd/kI46mK2+5p1Wozs5NjpfLpemsPlKbujpSnZ07dnlqfKI0Ubpy4sWXTp0+eWrs+NjqdB/UV9fym2vrjR9vvnvju1du3/z0s0MLxffHkzgTQ9my1e3YTs3PJB9n1sw/2Y1gPZT0OgG2JJf180ZX+l8MRy7r9e3UVw8OgzuSHtBF9cGI+opVRaAPJDo99KnWcUDj/Lc17eTxx52zzROQRtylxfniO9GKP9C8NhF7l89N9v+WPHJm0jjfPLiTibIrLVyPiNGBgcf3/yTb/7ZudDsSpKu+PtvcUI9v/3Rl/Ik2489Q69rpE2qNf0vZ+LfUJn5unfHvfIcxfn/954/WjX99MJ5uGz9ZiZ+0iZ9GxJsdxr/12pen11tW/zjiSLSP35JsfH145NLlcmm0+bdtjK+OHHp5/fZH7F8nfvOa7d7lRFa3f0+WU9ph+7/49vNnFjaI//yzG2//dp//voh4r8P4/7n/yavrLbtzPbnbOArY7PZPIh+3O4z/wpnDP2RFVw0BAAAAAAAAAGAbpcv3siVpYaWcpoVC8xne/8b+tFyp1o5eqszksnveDkY+bd1pNdysJ436WHY/bqt+fE39RC4LmNu3XC8UK+WLPW47AAAAAAAAAAAAAAAAAAAA/F0cWPP8/73c8vP/a3+uGtit1v/Jb2C30/+hfz3a/5Oe5QHsPN//0LfqG/d/xwOwm/n+h/6l/0P/0v+hf7Xt//t2Pg9g5/n+h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAQFecP3euMdUfLM4XG/WLA7Mzk5W3jl0sVScLUzPFQrEyfbUwUalMlEuFYmXqr94vqVSujsaVmWsjtVK1NlKdnXtjqjJzpfUbYqV811sEAAAAAAAAAAAAAAAAAAAA/zxDy1OSFiLyzXqaFgoR/4qIg0kkly6XS6MR8e+I+D6XH2zUx3qdNAAAAAAAAAAAAAAAAAAAAOwy1dm5yfFyuTTdvcJAFqqzV/1U62o+A5tZOSIWNlwnnzWt4zQa77jpnFtRuruZnqhwbyd2pG0p5DrcD/u+0KMBCQAAAAAAAAAAAAAAAAAA+tjDh347fcUf3U0IAAAAAAAAAAAAAAAAAAAA+lL6SxIRjenI8HNDa5fuSZZyy/8j4u1bFz64Nl6rTY815t9dmV/7MJt/vBf5A51q9dM0Ihr9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHioOjs3OV4ul6a3WBjsYJ1etxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgK/4MAAD//4oTyqc=") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x8fffd) 2.507624669s ago: executing program 9 (id=6447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.303266645s ago: executing program 4 (id=6448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 2.302702152s ago: executing program 6 (id=6449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 2.240659158s ago: executing program 5 (id=6450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31d8b87caf0900010073797a3100000000100003800c"], 0x3c}}, 0x8000) 2.170649987s ago: executing program 0 (id=6451): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe000001b}) poll(&(0x7f0000004c00)=[{r1, 0x1260}], 0x1, 0x8) 2.088652554s ago: executing program 8 (id=6452): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', 0x24c03, 0x208) 2.060391861s ago: executing program 9 (id=6453): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.799319414s ago: executing program 5 (id=6454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="d8", 0x1) 1.710767893s ago: executing program 6 (id=6455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/245, 0xf5) 1.709496453s ago: executing program 4 (id=6456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x808}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}}, 0x18) 1.649683836s ago: executing program 0 (id=6457): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) 1.649482693s ago: executing program 9 (id=6458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.454906281s ago: executing program 5 (id=6459): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x1) 1.424625901s ago: executing program 6 (id=6460): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 1.394138388s ago: executing program 0 (id=6461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) 1.3927767s ago: executing program 4 (id=6462): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 1.181098951s ago: executing program 8 (id=6463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70045d5f1b8070c85aa508000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 1.125769912s ago: executing program 9 (id=6464): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x2f) 1.052285251s ago: executing program 0 (id=6465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x9, 0x0, 0x8, 0xfffffeff, 0x4, 0x7ff, 0x8, r1}, &(0x7f0000000100)=0x20) 968.138154ms ago: executing program 6 (id=6466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030300000e00000000001100000708000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}}, 0x14014) 881.791045ms ago: executing program 5 (id=6467): socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000080), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 727.4949ms ago: executing program 4 (id=6468): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 693.098893ms ago: executing program 8 (id=6469): epoll_create1(0x0) io_submit(0x0, 0x1, &(0x7f0000000bc0)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x3}]) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x800000d, 0x11, 0x158}) 481.822598ms ago: executing program 0 (id=6470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff99}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 481.668512ms ago: executing program 6 (id=6471): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 465.365689ms ago: executing program 5 (id=6472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 269.209103ms ago: executing program 4 (id=6473): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 238.222788ms ago: executing program 8 (id=6474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x300, 0x0, 0xff, 0x2, 0x0, 0x2}, 0x20) 55.223909ms ago: executing program 0 (id=6475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 0s ago: executing program 6 (id=6476): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) rmdir(&(0x7f0000000040)='./file0\x00') getdents(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): -fs error (device loop2): ext4_orphan_get:1408: comm syz.2.4929: couldn't read orphan inode 15 (err -117) [ 594.260556][T19102] loop2: lost filesystem error report for type 5 error -117 [ 594.261323][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 594.261346][ C0] EXT4-fs (loop2): initial error at time 2000000709: ext4_orphan_get:1403: inode 15 [ 594.261381][ C0] EXT4-fs (loop2): last error at time 2000000709: ext4_orphan_get:1408 [ 594.306130][T19102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.457254][T19102] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.4929: bg 0: block 5: invalid block bitmap [ 594.533687][T19102] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 594.533728][T19102] EXT4-fs (loop2): This should not happen!! Data will be lost [ 594.533728][T19102] [ 594.533747][T19102] EXT4-fs (loop2): Total free blocks count 0 [ 594.533764][T19102] EXT4-fs (loop2): Free/Dirty block details [ 594.533780][T19102] EXT4-fs (loop2): free_blocks=0 [ 594.533798][T19102] EXT4-fs (loop2): dirty_blocks=1 [ 594.533820][T19102] EXT4-fs (loop2): Block reservation details [ 594.533836][T19102] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 594.722043][T16894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.266710][T19138] loop1: detected capacity change from 0 to 8 [ 595.300300][T19138] SQUASHFS error: zlib decompression failed, data probably corrupt [ 595.300339][T19138] SQUASHFS error: Failed to read block 0x9b: -5 [ 595.300355][T19138] SQUASHFS error: Unable to read metadata cache entry [99] [ 595.300371][T19138] SQUASHFS error: Unable to read inode 0x127 [ 595.562091][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4945'. [ 595.562127][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4945'. [ 595.613836][T19146] loop2: detected capacity change from 0 to 1024 [ 595.652447][ T31] audit: type=1800 audit(2000000710.875:392): pid=19146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4947" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 595.661658][T18056] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 595.820618][T18056] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 595.822408][T18056] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 595.822436][T18056] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 595.822458][T18056] usb 2-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config [ 595.822481][T18056] usb 2-1: config 220 has no interface number 2 [ 595.822547][T18056] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 595.822578][T18056] usb 2-1: config 220 interface 0 has no altsetting 0 [ 595.822599][T18056] usb 2-1: config 220 interface 76 has no altsetting 0 [ 595.822621][T18056] usb 2-1: config 220 interface 1 has no altsetting 0 [ 595.827682][T18056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.827712][T18056] usb 2-1: Product: syz [ 595.827730][T18056] usb 2-1: Manufacturer: syz [ 595.827748][T18056] usb 2-1: SerialNumber: syz [ 596.078033][T18056] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 596.078073][T18056] uvcvideo 2-1:220.0: No valid video chain found. [ 596.078158][T18056] usb 2-1: selecting invalid altsetting 0 [ 596.110514][T19137] loop8: detected capacity change from 0 to 32768 [ 596.138258][T19137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4943 (19137) [ 596.179732][T19137] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 596.179771][T19137] BTRFS info (device loop8): using crc32c checksum algorithm [ 596.207013][T18056] usb 2-1: selecting invalid altsetting 0 [ 596.207048][T18056] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 596.226295][T18056] usb 2-1: USB disconnect, device number 34 [ 596.383269][T19137] BTRFS info (device loop8): enabling ssd optimizations [ 596.383302][T19137] BTRFS info (device loop8): turning on flush-on-commit [ 596.383322][T19137] BTRFS info (device loop8): enabling free space tree [ 596.383342][T19137] BTRFS info (device loop8): enabling auto defrag [ 596.383363][T19137] BTRFS info (device loop8): use lzo compression, level 1 [ 596.383387][T19137] BTRFS info (device loop8): max_inline set to 4096 [ 596.639449][T19128] loop9: detected capacity change from 0 to 32768 [ 596.658851][T19128] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4938 (19128) [ 596.719020][T19128] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.719059][T19128] BTRFS info (device loop9): using sha256 checksum algorithm [ 596.730165][T13893] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.011860][T19128] BTRFS info (device loop9): enabling ssd optimizations [ 597.011892][T19128] BTRFS info (device loop9): turning on async discard [ 597.011913][T19128] BTRFS info (device loop9): enabling free space tree [ 597.040950][T19198] netlink: 'syz.1.4956': attribute type 12 has an invalid length. [ 597.040975][T19198] netlink: 'syz.1.4956': attribute type 29 has an invalid length. [ 597.040992][T19198] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4956'. [ 597.041015][T19198] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 597.041031][T19198] netlink: 'syz.1.4956': attribute type 2 has an invalid length. [ 597.174293][ T31] audit: type=1800 audit(2000000712.395:393): pid=19128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4938" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 597.390622][T14710] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.402575][T19159] ftl_cs: FTL header not found. [ 597.473303][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4961'. [ 598.326650][T19226] loop2: detected capacity change from 0 to 512 [ 598.413945][T19226] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 598.413972][T19226] loop2: lost filesystem error report for type 5 error -12 [ 598.416964][T19226] EXT4-fs (loop2): 2 truncates cleaned up [ 598.426748][T19226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.618892][T19226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.4969: bg 0: block 5: invalid block bitmap [ 598.653430][T19226] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 598.653466][T19226] EXT4-fs (loop2): This should not happen!! Data will be lost [ 598.653466][T19226] [ 598.653484][T19226] EXT4-fs (loop2): Total free blocks count 0 [ 598.653500][T19226] EXT4-fs (loop2): Free/Dirty block details [ 598.653515][T19226] EXT4-fs (loop2): free_blocks=0 [ 598.653548][T19226] EXT4-fs (loop2): dirty_blocks=66 [ 598.653564][T19226] EXT4-fs (loop2): Block reservation details [ 598.653579][T19226] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 598.783269][T14027] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 598.786383][T19159] block2mtd: mtd4: [/dev/loop0] erase_size = 0KiB [6] [ 598.874804][ T5629] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 599.047531][T19236] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4973'. [ 599.047571][T19236] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4973'. [ 599.052035][ T5629] usb 10-1: Using ep0 maxpacket: 32 [ 599.061997][ T5629] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 599.091702][T19238] netlink: 774 bytes leftover after parsing attributes in process `syz.8.4974'. [ 599.091734][T19238] netlink: 'syz.8.4974': attribute type 1 has an invalid length. [ 599.130344][ T5629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.130376][ T5629] usb 10-1: Product: syz [ 599.130394][ T5629] usb 10-1: Manufacturer: syz [ 599.130412][ T5629] usb 10-1: SerialNumber: syz [ 599.142158][ T5629] usb 10-1: config 0 descriptor?? [ 599.494447][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4978'. [ 599.577866][ T5629] airspy 10-1:0.0: Board ID: 00 [ 599.577894][ T5629] airspy 10-1:0.0: Firmware version: [ 599.984888][ T5629] airspy 10-1:0.0: usb_control_msg() failed -71 request 0e [ 600.003766][ T5629] airspy 10-1:0.0: Registered as swradio24 [ 600.003792][ T5629] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 600.032338][ T5629] usb 10-1: USB disconnect, device number 5 [ 600.318014][T19279] bond0: option arp_interval: invalid value (0x0000000000000000) [ 600.318046][T19279] bond0: option arp_interval: allowed values 0 - 2147483647 [ 600.342646][ T52] Bluetooth: hci0: Zero size dump init pkt [ 600.803647][T19294] loop9: detected capacity change from 0 to 1764 [ 600.864774][T19294] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 600.928034][T19300] loop2: detected capacity change from 0 to 64 [ 601.342170][T12083] kernel write not supported for file [eventfd] (pid: 12083 comm: kworker/1:7) [ 601.602960][T12083] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 601.619482][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5008'. [ 601.619513][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5008'. [ 601.657072][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5008'. [ 601.657107][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5008'. [ 601.754864][T12083] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 601.766204][T19329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5010'. [ 601.782743][T12083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.782775][T12083] usb 9-1: Product: syz [ 601.782793][T12083] usb 9-1: Manufacturer: syz [ 601.782811][T12083] usb 9-1: SerialNumber: syz [ 601.822501][T12083] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 601.839847][T12083] scsi host1: usb-storage 9-1:1.0 [ 602.819532][T12083] ums_eneub6250 9-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 602.829765][T12083] usb 9-1: USB disconnect, device number 14 [ 603.625782][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5031'. [ 604.222801][T19403] ./dev/sda1: Can't open blockdev [ 604.246574][T19406] loop8: detected capacity change from 0 to 256 [ 604.316451][T19369] loop1: detected capacity change from 0 to 32768 [ 604.318164][T19369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5022 (19369) [ 604.342298][T19406] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 604.403753][T19369] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 604.403792][T19369] BTRFS info (device loop1): using crc32c checksum algorithm [ 604.632199][T19369] BTRFS info (device loop1): enabling ssd optimizations [ 604.632230][T19369] BTRFS info (device loop1): turning on async discard [ 604.632250][T19369] BTRFS info (device loop1): enabling free space tree [ 604.638481][T19426] netlink: 'syz.0.5040': attribute type 1 has an invalid length. [ 604.638504][T19426] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5040'. [ 604.638524][T19426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5040'. [ 604.805372][T19369] BTRFS critical (device loop1 state E): emergency shutdown [ 604.957251][ T5626] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 606.100374][T19467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5057'. [ 606.944175][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5069'. [ 607.307163][T19504] loop8: detected capacity change from 0 to 4096 [ 607.395211][T19515] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 607.517749][T19504] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 608.333369][ T31] audit: type=1400 audit(2000000723.555:394): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=19536 comm="syz.9.5085" name="unknown" offset=16 [ 609.391857][T12083] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 609.545732][T12083] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 609.547214][T12083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.547241][T12083] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.548416][T12083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 609.548443][T12083] usb 3-1: SerialNumber: syz [ 609.788608][T12083] usb 3-1: 0:2 : does not exist [ 609.995523][T12083] usb 3-1: USB disconnect, device number 14 [ 610.060845][T19564] loop9: detected capacity change from 0 to 40427 [ 610.073292][T19564] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 610.073322][T19564] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 610.102287][T19564] F2FS-fs (loop9): invalid crc value [ 610.302157][T19564] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 610.376663][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.419880][T19564] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 610.419911][T19564] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 610.508106][T19581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.677709][T14710] syz-executor: attempt to access beyond end of device [ 610.677709][T14710] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 610.679736][T14710] CPU: 0 UID: 0 PID: 14710 Comm: syz-executor Tainted: G S L syzkaller #0 PREEMPT(full) [ 610.679777][T14710] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 610.679789][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 610.679806][T14710] Call Trace: [ 610.679823][T14710] [ 610.679834][T14710] dump_stack_lvl+0xe8/0x150 [ 610.679878][T14710] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 610.679921][T14710] f2fs_write_end_bio+0x1211/0x16e0 [ 610.679952][T14710] ? blkg_put+0x22/0x240 [ 610.680006][T14710] __submit_merged_bio+0x258/0x6a0 [ 610.680042][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680073][T14710] ? rcu_is_watching+0x16/0xb0 [ 610.680115][T14710] __submit_merged_write_cond+0x3c9/0x4e0 [ 610.680163][T14710] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 610.680214][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680255][T14710] f2fs_write_data_pages+0x2a27/0x36f0 [ 610.680296][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680326][T14710] ? __lock_acquire+0x747/0x2de0 [ 610.680393][T14710] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 610.680486][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680517][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680547][T14710] ? __bfs+0x153/0x290 [ 610.680573][T14710] ? __pfx_hlock_conflict+0x10/0x10 [ 610.680611][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680655][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680686][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680716][T14710] ? __lock_acquire+0x1511/0x2de0 [ 610.680775][T14710] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 610.680822][T14710] do_writepages+0x338/0x560 [ 610.680852][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680884][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680918][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.680947][T14710] ? do_raw_spin_unlock+0xf5/0x200 [ 610.680990][T14710] filemap_fdatawrite+0x1e9/0x2f0 [ 610.681023][T14710] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 610.681095][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.681128][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.681164][T14710] ? do_raw_spin_unlock+0xf5/0x200 [ 610.681207][T14710] f2fs_sync_dirty_inodes+0x30e/0x830 [ 610.681253][T14710] f2fs_write_checkpoint+0xa3d/0x2710 [ 610.681321][T14710] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 610.681407][T14710] kill_f2fs_super+0x2dd/0x700 [ 610.681445][T14710] ? __pfx_kill_f2fs_super+0x10/0x10 [ 610.681501][T14710] ? call_rcu+0x64d/0x8b0 [ 610.681534][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.681564][T14710] ? lockdep_hardirqs_on+0x7b/0x110 [ 610.681593][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.681639][T14710] deactivate_locked_super+0xbc/0x110 [ 610.681680][T14710] cleanup_mnt+0x3d3/0x460 [ 610.681712][T14710] task_work_run+0x1d9/0x270 [ 610.681746][T14710] ? __pfx_task_work_run+0x10/0x10 [ 610.681787][T14710] exit_to_user_mode_loop+0x204/0x770 [ 610.681820][T14710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.681851][T14710] ? rcu_is_watching+0x16/0xb0 [ 610.681888][T14710] do_syscall_64+0x328/0x520 [ 610.681918][T14710] ? trace_irq_disable+0x3b/0x140 [ 610.681946][T14710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.681979][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.682006][T14710] RIP: 0033:0x7f477df9f397 [ 610.682030][T14710] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 610.682052][T14710] RSP: 002b:00007fff650e8798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 610.682080][T14710] RAX: 0000000000000000 RBX: 00007f477e03448b RCX: 00007f477df9f397 [ 610.682098][T14710] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff650e8850 [ 610.682116][T14710] RBP: 00007fff650e8850 R08: 00007fff650e9850 R09: 00000000ffffffff [ 610.682135][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff650e98e0 [ 610.682152][T14710] R13: 00007f477e03448b R14: 000000000009514b R15: 00007fff650e9920 [ 610.682192][T14710] [ 610.838751][T14710] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 611.571397][T19595] nfsd: exp_rootfh path not found ./export_dir [ 611.984639][T19589] sctp: [Deprecated]: syz.2.5107 (pid 19589) Use of int in max_burst socket option. [ 611.984639][T19589] Use struct sctp_assoc_value instead [ 612.285769][T19609] loop2: detected capacity change from 0 to 8 [ 612.336770][T19609] SQUASHFS error: zlib decompression failed, data probably corrupt [ 612.336806][T19609] SQUASHFS error: Failed to read block 0x9b: -5 [ 612.336823][T19609] SQUASHFS error: Unable to read metadata cache entry [99] [ 612.336839][T19609] SQUASHFS error: Unable to read inode 0x127 [ 612.844578][T19570] tipc: Cannot configure node identity twice [ 613.120186][T19617] input: syz1 as /devices/virtual/input/input55 [ 613.123947][ T5629] kernel read not supported for file /video9 (pid: 5629 comm: kworker/1:4) [ 613.427213][T12083] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 613.515259][T12083] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 613.704825][T19611] ceph: No mds server is up or the cluster is laggy [ 613.772365][ T5622] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 613.805757][T12083] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 613.864275][T19630] overlayfs: upper fs does not support file handles, falling back to index=off. [ 613.864301][T19630] overlayfs: fs on './bus' does not support file handles, falling back to xino=off. [ 613.864337][T19630] overlayfs: conflicting lowerdir path [ 613.880802][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5123'. [ 613.947320][ T5622] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 613.957595][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.957624][ T5622] usb 3-1: Product: syz [ 613.957642][ T5622] usb 3-1: Manufacturer: syz [ 613.957660][ T5622] usb 3-1: SerialNumber: syz [ 614.373859][ T5622] rtl8150 3-1:1.0: couldn't reset the device [ 614.374262][ T5622] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 614.394852][ T5622] usb 3-1: USB disconnect, device number 15 [ 614.402013][T19645] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 614.510993][T19650] loop9: detected capacity change from 0 to 256 [ 614.611267][T19650] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 614.855086][T19661] comedi comedi1: dt2814: I/O base address not correctly aligned [ 615.411060][T19681] nbd: socks must be embedded in a SOCK_ITEM attr [ 615.415838][T19681] block nbd3: shutting down sockets [ 615.743705][T12083] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 615.892132][T12083] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 615.898031][T12083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.898059][T12083] usb 10-1: Product: syz [ 615.898077][T12083] usb 10-1: Manufacturer: syz [ 615.898094][T12083] usb 10-1: SerialNumber: syz [ 615.937044][T12083] usb 10-1: config 0 descriptor?? [ 615.950918][T12083] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 616.156409][ T5622] usb 10-1: USB disconnect, device number 6 [ 616.312446][T19710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.814069][T12083] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 616.969790][T12083] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 616.994696][T12083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.994729][T12083] usb 3-1: Product: syz [ 616.994751][T12083] usb 3-1: Manufacturer: syz [ 616.994772][T12083] usb 3-1: SerialNumber: syz [ 617.062232][T19726] loop8: detected capacity change from 0 to 256 [ 617.110896][T19726] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 617.111945][T19726] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 617.385692][T19732] loop1: detected capacity change from 0 to 512 [ 617.422399][T19732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.448884][T19732] EXT4-fs (loop1): 1 truncate cleaned up [ 617.467121][T19732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.489785][T12083] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 617.489862][T12083] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 617.517866][ T5629] kernel read not supported for file /adsp1 (pid: 5629 comm: kworker/1:4) [ 617.574918][ T31] audit: type=1800 audit(2000000732.785:395): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5170" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 617.716126][T12083] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 617.716191][T12083] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 617.765441][T12083] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 617.864375][T12083] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 617.884653][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.903016][T12083] usb 3-1: USB disconnect, device number 16 [ 617.909502][T19742] loop9: detected capacity change from 0 to 512 [ 618.209846][T19748] netlink: 'syz.1.5174': attribute type 1 has an invalid length. [ 618.258234][T19748] gretap0: entered promiscuous mode [ 618.270293][T19750] netlink: 'syz.1.5174': attribute type 1 has an invalid length. [ 618.449050][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5179'. [ 618.449085][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5179'. [ 619.378688][T19793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5191'. [ 619.707210][T19803] fuse: Bad value for 'fd' [ 620.253512][T19823] netlink: 'syz.2.5205': attribute type 2 has an invalid length. [ 620.253539][T19823] netlink: 'syz.2.5205': attribute type 1 has an invalid length. [ 620.253555][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5205'. [ 620.253575][T19823] netlink: 'syz.2.5205': attribute type 2 has an invalid length. [ 620.253591][T19823] netlink: 'syz.2.5205': attribute type 1 has an invalid length. [ 620.253606][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5205'. [ 620.253623][T19823] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 620.668729][T19829] loop9: detected capacity change from 0 to 512 [ 620.781472][T19832] loop2: detected capacity change from 0 to 8192 [ 621.202068][ T43] IPVS: starting estimator thread 0... [ 621.211862][T19840] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 621.211897][T19840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.302571][T19842] IPVS: using max 26 ests per chain, 62400 per kthread [ 622.002121][T19870] loop9: detected capacity change from 0 to 2048 [ 622.009763][T19870] EXT4-fs: Ignoring removed oldalloc option [ 622.044313][T19874] loop8: detected capacity change from 0 to 128 [ 622.097603][T19870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.131053][T19874] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.145182][T19874] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 622.174988][T19870] EXT4-fs error (device loop9): ext4_ext_precache:631: inode #2: comm syz.9.5224: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 622.229155][T19874] fscrypt (loop8, inode 12): Unsupported encryption flags (0x6b) [ 622.428993][T13893] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.464214][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.695495][T19893] zero sized request [ 623.624000][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.624060][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.109927][T19939] loop1: detected capacity change from 0 to 256 [ 624.217540][T19939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 624.506393][T19953] loop8: detected capacity change from 0 to 8 [ 624.786638][T19955] loop2: detected capacity change from 0 to 4096 [ 624.874760][T19958] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.944049][T19955] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 625.102290][T19955] Remounting filesystem read-only [ 625.386653][T19968] loop9: detected capacity change from 0 to 128 [ 628.706695][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5282'. [ 629.774826][T20036] overlayfs: invalid origin (0000) [ 629.776930][T20030] loop2: detected capacity change from 0 to 2048 [ 629.831595][T20030] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 629.831621][T20030] UDF-fs: Scanning with blocksize 512 failed [ 629.915448][T20030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.575732][T20057] macvlan0: entered promiscuous mode [ 630.591364][T20057] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 630.591390][T20057] netlink: 'syz.2.5308': attribute type 2 has an invalid length. [ 630.895850][ T31] audit: type=1400 audit(2000000746.115:396): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=20063 comm="syz.8.5311" name="unknown" offset=16 [ 631.279289][T20078] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5318'. [ 631.361509][ T31] audit: type=1807 audit(2000000746.585:397): UNKNOWN=? res=0 [ 631.362314][ T31] audit: type=1802 audit(2000000746.585:398): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.5320" res=0 errno=0 [ 631.363737][T20079] ima: policy update failed [ 631.363967][ T31] audit: type=1802 audit(2000000746.585:399): pid=20079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5320" res=0 errno=0 [ 631.503419][T20090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.503441][T20090] IPv6: NLM_F_CREATE should be set when creating new route [ 631.503503][T20090] IPv6: NLM_F_CREATE should be set when creating new route [ 631.503545][T20090] IPv6: NLM_F_CREATE should be set when creating new route [ 631.712707][T20095] loop1: detected capacity change from 0 to 1024 [ 631.774821][T20095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 631.774936][T20095] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.929803][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 631.931841][ T1005] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.939516][ T1101] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.939561][ T1101] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.939601][ T1101] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.055813][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 632.237770][T20120] loop1: detected capacity change from 0 to 256 [ 632.301937][T20120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 632.439225][T20129] loop2: detected capacity change from 0 to 64 [ 632.968583][T20141] loop8: detected capacity change from 0 to 4096 [ 632.995854][T20141] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 633.283036][T20152] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 633.283335][T20152] ntfs3(loop8): ino=1e, "file1" attr_set_size_ex [ 633.380486][T20156] loop9: detected capacity change from 0 to 64 [ 633.412021][T14027] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 633.416970][T20141] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 633.417001][T20141] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 633.417022][T20141] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 633.419745][ T1017] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 634.288863][T20180] loop8: detected capacity change from 0 to 256 [ 634.342704][T20180] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 634.343133][T20180] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 635.049798][T20194] nvme_fcloop: unknown parameter or missing value 'ww' [ 635.160318][T20198] jffs2: notice: (20198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 636.242374][T20234] erspan0: entered promiscuous mode [ 636.261357][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5387'. [ 636.369553][T20240] pimreg0: tun_chr_ioctl cmd 2147767506 [ 636.668909][T20249] sctp: [Deprecated]: syz.8.5392 (pid 20249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.668909][T20249] Use struct sctp_sack_info instead [ 636.765866][ T5756] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 636.772764][T12083] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 636.916950][ T5756] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 636.924634][T12083] usb 10-1: Using ep0 maxpacket: 32 [ 636.929230][T12083] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 636.933897][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.933925][ T5756] usb 2-1: Product: syz [ 636.933943][ T5756] usb 2-1: Manufacturer: syz [ 636.933961][ T5756] usb 2-1: SerialNumber: syz [ 636.935647][T12083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.935707][T12083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.935749][T12083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.967812][ T5756] usb 2-1: config 0 descriptor?? [ 636.980465][T12083] usb 10-1: config 0 descriptor?? [ 637.016128][ T5756] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 637.027810][T12083] hub 10-1:0.0: USB hub found [ 637.209371][T12083] hub 10-1:0.0: 1 port detected [ 637.446993][T12083] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 637.465259][T12083] usbhid 10-1:0.0: can't add hid device: -71 [ 637.465402][T12083] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 637.489706][T20267] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 637.493373][T12083] usb 10-1: USB disconnect, device number 7 [ 637.765544][T20273] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.821737][ T5756] gspca_stk1135: reg_w 0x5 err -71 [ 637.822795][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.822810][ T5756] gspca_stk1135: Sensor write failed [ 637.822859][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.822871][ T5756] gspca_stk1135: Sensor write failed [ 637.822911][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.822923][ T5756] gspca_stk1135: Sensor read failed [ 637.822964][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.822976][ T5756] gspca_stk1135: Sensor read failed [ 637.822986][ T5756] gspca_stk1135: Detected sensor type unknown (0x0) [ 637.823031][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.823044][ T5756] gspca_stk1135: Sensor read failed [ 637.823084][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.823097][ T5756] gspca_stk1135: Sensor read failed [ 637.823137][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.823149][ T5756] gspca_stk1135: Sensor write failed [ 637.823194][ T5756] gspca_stk1135: serial bus timeout: status=0x00 [ 637.823206][ T5756] gspca_stk1135: Sensor write failed [ 637.823285][ T5756] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 637.878532][ T5756] usb 2-1: USB disconnect, device number 35 [ 638.084317][T20286] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 638.189352][T20289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5409'. [ 638.205401][T20288] jffs2: notice: (20288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 638.260577][T20299] loop9: detected capacity change from 0 to 512 [ 638.293406][T20299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 638.293538][T20299] System zones: 1-12 [ 638.296746][T20299] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.5413: Directory hole found for htree index block 0 [ 638.296781][T20299] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 638.301271][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 638.301295][ C0] EXT4-fs (loop9): initial error at time 2000000753: dx_probe:791: inode 2 [ 638.301335][ C0] EXT4-fs (loop9): last error at time 2000000753: dx_probe:791: inode 2 [ 638.394070][T20299] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 638.394147][T20299] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.5413: Directory hole found for htree index block 0 [ 638.394178][T20299] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 638.486163][T20299] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 638.498346][T20299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.534859][T20299] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.5413: Directory hole found for htree index block 0 [ 638.630995][T20307] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.5413: Directory hole found for htree index block 0 [ 638.845548][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.095900][T20320] loop8: detected capacity change from 0 to 256 [ 639.180905][T20320] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 639.180936][T20320] FAT-fs (loop8): Filesystem has been set read-only [ 639.911621][ T5756] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 640.061247][ T5756] usb 10-1: Using ep0 maxpacket: 16 [ 640.062028][ T5756] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 640.063401][ T5756] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 640.063451][ T5756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.124309][ T5756] usb 10-1: config 0 descriptor?? [ 640.157544][T20349] loop2: detected capacity change from 0 to 256 [ 640.529341][T20361] loop8: detected capacity change from 0 to 1024 [ 640.548558][ T5756] hid (null): unknown global tag 0xe [ 640.548581][ T5756] hid (null): report_id 6598 is invalid [ 640.572502][ T5756] hid_parser_main: 456 callbacks suppressed [ 640.572527][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572584][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572607][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572629][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572650][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572700][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572722][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572743][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572764][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.572789][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown main item tag 0x0 [ 640.574715][ T5756] nzxt-kraken2 0003:1E71:170E.0036: unknown global tag 0xe [ 640.574738][ T5756] nzxt-kraken2 0003:1E71:170E.0036: item 0 4 1 14 parsing failed [ 640.575483][ T5756] nzxt-kraken2 0003:1E71:170E.0036: hid parse failed with -22 [ 640.575591][ T5756] nzxt-kraken2 0003:1E71:170E.0036: probe with driver nzxt-kraken2 failed with error -22 [ 640.614284][T16894] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 640.614312][T16894] FAT-fs (loop2): Filesystem has been set read-only [ 640.677728][T16894] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 640.733504][T20361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.764882][ T5860] usb 10-1: USB disconnect, device number 8 [ 640.815607][T13893] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.941834][T20370] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5445'. [ 641.155492][ T31] audit: type=1326 audit(2000000756.375:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20373 comm="syz.6.5447" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecfe99e159 code=0x0 [ 641.585193][ T1005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.015465][T16895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.033270][T16895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.036167][T16895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.039202][T16895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.050519][ T1005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.057161][T16895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.576438][ T1005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.608550][T20423] loop9: detected capacity change from 0 to 128 [ 642.613306][T20423] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 642.616732][T20423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.636243][ T31] audit: type=1800 audit(2000000757.845:401): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5468" name="file2" dev="loop9" ino=95 res=0 errno=0 [ 642.904365][ T1005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.807673][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5483'. [ 643.829863][ T31] audit: type=1326 audit(2000000759.045:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.830727][ T31] audit: type=1326 audit(2000000759.045:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890479][ T31] audit: type=1326 audit(2000000759.075:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890545][ T31] audit: type=1326 audit(2000000759.075:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890595][ T31] audit: type=1326 audit(2000000759.075:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890647][ T31] audit: type=1326 audit(2000000759.075:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890725][ T31] audit: type=1326 audit(2000000759.075:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 643.890775][ T31] audit: type=1326 audit(2000000759.075:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20461 comm="syz.1.5482" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ce59e159 code=0x7ffc0000 [ 644.182250][ T52] Bluetooth: hci4: command tx timeout [ 644.239431][ T1005] bridge_slave_1: left allmulticast mode [ 644.239461][ T1005] bridge_slave_1: left promiscuous mode [ 644.239702][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.304352][ T1005] bridge_slave_0: left allmulticast mode [ 644.304383][ T1005] bridge_slave_0: left promiscuous mode [ 644.316647][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.529230][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.588242][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.603908][ T1005] bond0 (unregistering): Released all slaves [ 645.655227][ T1005] bond1 (unregistering): Released all slaves [ 645.927779][T20506] smpboot: CPU 1 is now offline [ 646.205172][T20495] loop1: detected capacity change from 0 to 32768 [ 646.261503][ T52] Bluetooth: hci4: command tx timeout [ 646.263171][T20495] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 646.347043][T20495] XFS (loop1): Ending clean mount [ 646.361923][T20495] XFS (loop1): Quotacheck needed: Please wait. [ 646.686295][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 646.725387][T20495] XFS (loop1): Quotacheck: Done. [ 647.166570][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 647.166588][ T31] audit: type=1800 audit(2000000762.385:421): pid=20495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5493" name="file2" dev="loop1" ino=4423 res=0 errno=0 [ 647.460299][ T5626] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 647.832018][T20541] loop8: detected capacity change from 0 to 512 [ 647.857141][T20541] EXT4-fs (loop8): bad s_want_extra_isize: 2080 [ 648.035297][ T1005] hsr_slave_0: left promiscuous mode [ 648.048529][ T1005] hsr_slave_1: left promiscuous mode [ 648.049327][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.049346][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.077135][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.077154][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.289528][ T1005] veth1_macvtap: left promiscuous mode [ 648.289564][ T1005] veth0_macvtap: left promiscuous mode [ 648.289796][ T1005] veth1_vlan: left promiscuous mode [ 648.289855][ T1005] veth0_vlan: left promiscuous mode [ 648.343551][ T52] Bluetooth: hci4: command tx timeout [ 650.171811][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 650.205369][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 650.431178][ T52] Bluetooth: hci4: command tx timeout [ 650.676732][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 651.167014][T20398] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.167129][T20398] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.167265][T20398] bridge_slave_0: entered allmulticast mode [ 651.208877][T20398] bridge_slave_0: entered promiscuous mode [ 651.213179][T20610] program syz.0.5529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.280970][T20398] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.281180][T20398] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.281322][T20398] bridge_slave_1: entered allmulticast mode [ 651.319677][T20398] bridge_slave_1: entered promiscuous mode [ 651.381763][T17399] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 651.489606][ T1005] IPVS: stop unused estimator thread 0... [ 651.531348][T17399] usb 2-1: Using ep0 maxpacket: 32 [ 651.535208][T17399] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 651.577542][T17399] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 651.577566][T17399] usb 2-1: config 2 has no interface number 0 [ 651.577601][T17399] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 651.577623][T17399] usb 2-1: config 2 interface 88 has no altsetting 0 [ 651.624096][T17399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 651.624122][T17399] usb 2-1: Product: syz [ 651.624135][T17399] usb 2-1: Manufacturer: syz [ 651.624148][T17399] usb 2-1: SerialNumber: syz [ 651.658541][T20609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.693432][T20398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.746203][T20611] loop8: detected capacity change from 0 to 4096 [ 651.764463][T20611] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 651.771594][T20398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.917385][T20609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 652.090695][T20618] loop9: detected capacity change from 0 to 256 [ 652.092677][T20618] exfat: Deprecated parameter 'namecase' [ 652.092703][T20618] exfat: Deprecated parameter 'utf8' [ 652.092723][T20618] exfat: Deprecated parameter 'namecase' [ 652.092831][T20618] exfat: Deprecated parameter 'namecase' [ 652.175183][T20618] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 652.324286][T20398] team0: Port device team_slave_0 added [ 652.372039][T20398] team0: Port device team_slave_1 added [ 652.596769][T17399] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 652.596961][T17399] asix 2-1:2.88: probe with driver asix failed with error -71 [ 652.636318][T17399] usb 2-1: USB disconnect, device number 36 [ 652.789996][T20398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.790012][T20398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.790035][T20398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.929248][T20398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.929264][T20398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.929288][T20398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.261424][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 653.413649][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 653.416991][ T10] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 653.417012][ T10] usb 9-1: config 0 has no interface number 0 [ 653.417045][ T10] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.419898][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.419920][ T10] usb 9-1: Product: syz [ 653.419934][ T10] usb 9-1: Manufacturer: syz [ 653.419947][ T10] usb 9-1: SerialNumber: syz [ 653.508621][ T10] usb 9-1: config 0 descriptor?? [ 653.548411][ T10] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 653.648386][T20398] hsr_slave_0: entered promiscuous mode [ 653.663891][T20398] hsr_slave_1: entered promiscuous mode [ 653.666458][T20398] debugfs: 'hsr0' already exists in 'hsr' [ 653.666476][T20398] Cannot create hsr debugfs directory [ 654.356343][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 654.360416][ T10] usb 9-1: USB disconnect, device number 15 [ 654.394910][ T10] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 654.657049][T20650] jffs2: notice: (20650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 655.181511][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 655.441590][ T43] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.442374][ T43] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.442409][ T43] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.442439][ T43] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.862015][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 659.249348][T17399] input: syz0 as /devices/virtual/misc/uhid/0005:057C:0306.0037/input/input56 [ 659.402831][ T5622] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 659.496271][T17399] hid-generic 0005:057C:0306.0037: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 659.551896][ T5622] usb 10-1: Using ep0 maxpacket: 8 [ 659.554133][ T5622] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 659.554627][ T5622] usb 10-1: config 0 has no interfaces? [ 659.557422][ T5622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.557443][ T5622] usb 10-1: Product: syz [ 659.557456][ T5622] usb 10-1: Manufacturer: syz [ 659.557470][ T5622] usb 10-1: SerialNumber: syz [ 659.610551][ T5622] usb 10-1: config 0 descriptor?? [ 659.991229][ T5622] usb 10-1: USB disconnect, device number 9 [ 660.105297][T20718] fido_id[20718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 661.650709][T20751] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5569'. [ 661.670606][T20751] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5569'. [ 661.708111][T20746] loop9: detected capacity change from 0 to 4096 [ 661.732125][T20746] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 661.847563][T20746] ntfs3(loop9): ino=19, mi_enum_attr [ 661.847590][T20746] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 661.850844][T20746] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 662.088971][T20744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 662.088993][T20744] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 662.215816][T20744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 662.215838][T20744] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 662.280126][T20744] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 662.280148][T20744] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 662.306693][T20744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.306711][T20744] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 662.797908][T20744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 662.797929][T20744] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 663.217775][T20744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 663.217796][T20744] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 663.221001][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5576'. [ 663.651727][T20789] 9p: Bad value for 'rfdno' [ 663.928124][T20788] bond0: option arp_interval: invalid value ( ) [ 663.928146][T20788] bond0: option arp_interval: allowed values 0 - 2147483647 [ 663.989999][T20398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 664.018624][T20398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.034615][T20398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 664.086658][T20398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.087390][T20398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 664.152166][T20398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.170751][T20398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 664.235752][T20398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.409445][T20809] loop9: detected capacity change from 0 to 1024 [ 664.410302][T20809] EXT4-fs: Ignoring removed bh option [ 664.447909][T20809] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 664.516798][T20809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.847934][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.916506][T20398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.004692][T20398] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.051551][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.051636][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.099792][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.099878][T14027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.450728][T20867] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 668.051278][T20903] 9p: Bad value for 'wfdno' [ 668.339878][T20398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.529516][T20916] fuse: fd is not a fuse device [ 670.356644][T20966] syz_tun: entered promiscuous mode [ 670.398885][T20966] vlan2: entered promiscuous mode [ 670.529984][T20973] loop1: detected capacity change from 0 to 256 [ 670.552308][T20973] exfat: Deprecated parameter 'namecase' [ 670.552366][T20973] exfat: Deprecated parameter 'namecase' [ 670.552428][T20973] exfat: Deprecated parameter 'namecase' [ 670.622808][T20973] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 671.014137][T20398] veth0_vlan: entered promiscuous mode [ 671.089352][T20398] veth1_vlan: entered promiscuous mode [ 671.310479][T20398] veth0_macvtap: entered promiscuous mode [ 671.349765][T20398] veth1_macvtap: entered promiscuous mode [ 671.463485][T20398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.530806][T20398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.719260][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.719853][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.719912][ T1101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.813567][ T1005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.334732][T14027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.334752][T14027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.553160][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.553179][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.219417][T21023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5657'. [ 673.219719][T21023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5657'. [ 673.391276][ T5622] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 673.541417][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 673.541998][ T5622] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.577396][ T5622] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 673.577421][ T5622] usb 5-1: config 0 has no interface number 0 [ 673.612060][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.612102][ T5622] usb 5-1: Product: syz [ 673.612116][ T5622] usb 5-1: Manufacturer: syz [ 673.612129][ T5622] usb 5-1: SerialNumber: syz [ 673.647668][ T5622] usb 5-1: config 0 descriptor?? [ 673.670093][ T5622] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 673.736060][T21028] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 673.907914][T21024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.908376][T21024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.991128][ T5622] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 674.032617][ T5622] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 674.445947][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 674.448158][ T5622] usb 5-1: USB disconnect, device number 16 [ 674.538139][ T5622] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 674.577196][ T5622] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 674.577788][ T5622] quatech2 5-1:0.51: device disconnected [ 675.245479][T21010] loop1: detected capacity change from 0 to 40427 [ 675.268903][T21010] F2FS-fs (loop1): invalid crc value [ 675.293721][T21047] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5665'. [ 675.882911][T21010] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 676.247984][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5674'. [ 676.248007][T21076] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5674'. [ 677.244154][T21096] No such timeout policy "syz1" [ 677.480441][T21091] netlink: 'syz.4.5680': attribute type 6 has an invalid length. [ 679.001220][ T189] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 679.151241][ T189] usb 10-1: Using ep0 maxpacket: 32 [ 679.153877][ T189] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 679.157765][ T189] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.157787][ T189] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 679.157808][ T189] usb 10-1: config 0 interface 0 has no altsetting 0 [ 679.216132][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.216157][ T189] usb 10-1: Product: syz [ 679.216170][ T189] usb 10-1: Manufacturer: syz [ 679.216184][ T189] usb 10-1: SerialNumber: syz [ 679.372430][ T189] usb 10-1: config 0 descriptor?? [ 679.864904][ T189] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 679.926474][T21151] ipvlan2: entered promiscuous mode [ 680.135892][T21151] team0: Device ipvlan2 failed to register rx_handler [ 680.284990][ T189] gs_usb 10-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 680.307779][ T189] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 680.373287][ T189] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 680.413107][ T189] usb 10-1: USB disconnect, device number 10 [ 681.605153][T21182] loop9: detected capacity change from 0 to 512 [ 681.679735][T21182] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.5714: bg 0: block 5: invalid block bitmap [ 681.679765][T21182] loop9: lost filesystem error report for type 5 error -117 [ 681.681126][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 681.681144][ C0] EXT4-fs (loop9): initial error at time 2000000796: ext4_validate_block_bitmap:436 [ 681.681165][ C0] EXT4-fs (loop9): last error at time 2000000796: ext4_validate_block_bitmap:436 [ 681.736279][T21182] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 681.736301][T21182] loop9: lost filesystem error report for type 5 error -117 [ 681.738887][T21182] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5714: invalid indirect mapped block 3 (level 2) [ 681.738916][T21182] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 681.739432][T21182] EXT4-fs (loop9): 1 orphan inode deleted [ 681.739449][T21182] EXT4-fs (loop9): 1 truncate cleaned up [ 681.820461][T21182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.086764][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.774475][T21224] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5728'. [ 683.791798][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.791848][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.269701][T21238] netlink: 'syz.0.5732': attribute type 15 has an invalid length. [ 684.801751][ T189] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 684.951559][ T189] usb 10-1: Using ep0 maxpacket: 8 [ 684.953781][ T189] usb 10-1: New USB device found, idVendor=0079, idProduct=1942, bcdDevice=28.1e [ 684.982651][ T189] usb 10-1: config 249 has an invalid interface number: 214 but max is 0 [ 684.982675][ T189] usb 10-1: config 249 has no interface number 0 [ 684.982708][ T189] usb 10-1: config 249 interface 214 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 684.982732][ T189] usb 10-1: config 249 interface 214 has no altsetting 0 [ 684.988459][ T189] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.988481][ T189] usb 10-1: Product: syz [ 684.988495][ T189] usb 10-1: Manufacturer: syz [ 684.988508][ T189] usb 10-1: SerialNumber: syz [ 685.158711][T21255] jffs2: notice: (21255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 685.470821][ T189] usb 10-1: USB disconnect, device number 11 [ 687.859142][T21302] netlink: 'syz.6.5754': attribute type 4 has an invalid length. [ 687.859161][T21302] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5754'. [ 690.444628][T21351] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5772'. [ 690.787247][T21354] overlayfs: failed to clone upperpath [ 690.814524][ T31] audit: type=1326 audit(2000000806.035:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 690.820464][ T31] audit: type=1326 audit(2000000806.035:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 690.910118][ T31] audit: type=1326 audit(2000000806.125:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 690.910167][ T31] audit: type=1326 audit(2000000806.125:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 690.910206][ T31] audit: type=1326 audit(2000000806.125:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.006152][ T31] audit: type=1326 audit(2000000806.225:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.006201][ T31] audit: type=1326 audit(2000000806.225:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.006241][ T31] audit: type=1326 audit(2000000806.225:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.007578][ T31] audit: type=1326 audit(2000000806.225:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.007622][ T31] audit: type=1326 audit(2000000806.225:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.9.5775" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9e159 code=0x7ffc0000 [ 691.496167][T21363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 692.067136][T21378] netlink: 'syz.9.5783': attribute type 1 has an invalid length. [ 693.843415][T21409] bonding: .æ is being created... [ 694.903380][T21431] jffs2: notice: (21431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 695.049493][T21433] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5803'. [ 695.534052][T21448] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.591386][T21451] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.826383][T21478] netlink: Only one type of NAT may be specified [ 696.826411][T21478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.356324][T17399] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 697.528861][T17399] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 697.548569][T17399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 697.548595][T17399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 697.548617][T17399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 697.548652][T17399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.603771][T17399] usb 10-1: config 0 descriptor?? [ 697.858540][T17399] ath6kl: Failed to submit usb control message: -71 [ 697.858583][T17399] ath6kl: unable to send the bmi data to the device: -71 [ 697.858596][T17399] ath6kl: Unable to send get target info: -71 [ 697.882955][T17399] ath6kl: Failed to init ath6kl core: -71 [ 697.919254][T17399] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 698.012455][T17399] usb 10-1: USB disconnect, device number 12 [ 699.421484][T21530] ipvlan2: entered promiscuous mode [ 699.444509][T21530] team0: Device ipvlan2 failed to register rx_handler [ 701.356603][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5848'. [ 701.513504][T16895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.528524][T16895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.539869][T16895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.555393][T16895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.568682][T16895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 702.275834][T21583] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5855'. [ 703.571790][T14027] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.701652][ T52] Bluetooth: hci5: command tx timeout [ 704.302280][T14027] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.912892][T14027] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.218737][T14027] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.244188][T21638] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5873'. [ 705.781504][ T52] Bluetooth: hci5: command tx timeout [ 706.205805][T21661] loop9: detected capacity change from 0 to 512 [ 706.223143][T21661] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 706.223161][T21661] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 706.255142][T21661] EXT4-fs (loop9): orphan cleanup on readonly fs [ 706.256606][T21661] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.5880: bad orphan inode 15 [ 706.256629][T21661] loop9: lost filesystem error report for type 5 error -117 [ 706.256977][T21661] ext4_test_bit(bit=14, block=18) = 1 [ 706.256992][T21661] is_bad_inode(inode)=0 [ 706.257000][T21661] NEXT_ORPHAN(inode)=1023 [ 706.257009][T21661] max_ino=32 [ 706.257016][T21661] i_nlink=0 [ 706.261235][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 706.261251][ C0] EXT4-fs (loop9): initial error at time 2000000821: ext4_orphan_get:1429 [ 706.261272][ C0] EXT4-fs (loop9): last error at time 2000000821: ext4_orphan_get:1429 [ 706.386222][T21661] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2933: inode #15: comm syz.9.5880: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 706.386281][T21661] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 706.386625][T21661] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 706.438341][T21661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 706.473800][T21661] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.5880: bg 0: block 440: padding at end of block bitmap is not set [ 706.666577][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.079327][T21677] loop9: detected capacity change from 0 to 512 [ 707.121738][T21677] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.5883: bg 0: block 5: invalid block bitmap [ 707.121767][T21677] loop9: lost filesystem error report for type 5 error -117 [ 707.123731][T21677] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 707.123752][T21677] loop9: lost filesystem error report for type 5 error -117 [ 707.125539][T21677] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5883: invalid indirect mapped block 3 (level 2) [ 707.125567][T21677] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 707.130736][T21677] EXT4-fs (loop9): 1 orphan inode deleted [ 707.130756][T21677] EXT4-fs (loop9): 1 truncate cleaned up [ 707.323406][T21677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.600350][T21676] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5885'. [ 707.659780][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.866469][ T52] Bluetooth: hci5: command tx timeout [ 708.537101][T14027] bridge_slave_1: left allmulticast mode [ 708.537125][T14027] bridge_slave_1: left promiscuous mode [ 708.537306][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.569931][T14027] bridge_slave_0: left allmulticast mode [ 708.569954][T14027] bridge_slave_0: left promiscuous mode [ 708.570157][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.787711][T21715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.946548][ T52] Bluetooth: hci5: command tx timeout [ 710.276389][T21738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.576251][T21720] loop9: detected capacity change from 0 to 32768 [ 710.706111][T21720] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 710.803925][T21720] XFS (loop9): Ending clean mount [ 710.852981][T21755] jffs2: notice: (21755) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 711.279461][T14027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.318489][T14027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.357226][T14027] bond0 (unregistering): Released all slaves [ 711.427956][T14027] bond1 (unregistering): Released all slaves [ 711.497405][T14710] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 711.929612][T14027] tipc: Disabling bearer [ 711.929715][T14027] tipc: Disabling bearer [ 711.929814][T14027] tipc: Left network mode [ 712.604985][T21564] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.605096][T21564] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.605228][T21564] bridge_slave_0: entered allmulticast mode [ 712.659286][T21564] bridge_slave_0: entered promiscuous mode [ 712.696566][T21564] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.702750][T21564] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.702864][T21564] bridge_slave_1: entered allmulticast mode [ 712.720037][T21564] bridge_slave_1: entered promiscuous mode [ 713.060288][T21564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.160455][T21795] erspan0: entered promiscuous mode [ 713.265559][T21564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.645946][T21564] team0: Port device team_slave_0 added [ 713.729925][T21807] sctp: [Deprecated]: syz.8.5922 (pid 21807) Use of int in max_burst socket option deprecated. [ 713.729925][T21807] Use struct sctp_assoc_value instead [ 713.807760][T14027] hsr_slave_0: left promiscuous mode [ 713.834501][T14027] hsr_slave_1: left promiscuous mode [ 713.835312][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.835329][T14027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.873397][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.873415][T14027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.209872][T21803] sctp: [Deprecated]: syz.9.5919 (pid 21803) Use of int in maxseg socket option. [ 714.209872][T21803] Use struct sctp_assoc_value instead [ 714.282976][T14027] veth1_macvtap: left promiscuous mode [ 714.283009][T14027] veth0_macvtap: left promiscuous mode [ 714.283112][T14027] veth1_vlan: left promiscuous mode [ 714.283170][T14027] veth0_vlan: left promiscuous mode [ 716.255035][ T5622] hid_parser_main: 365 callbacks suppressed [ 716.255080][ T5622] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 716.411467][ T5622] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 716.844962][T21851] fido_id[21851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 716.874463][T21834] loop9: detected capacity change from 0 to 32768 [ 716.936363][T21834] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 716.965361][T14027] team0 (unregistering): Port device team_slave_1 removed [ 717.065218][T14027] team0 (unregistering): Port device team_slave_0 removed [ 717.086171][T21834] XFS (loop9): Ending clean mount [ 717.560964][T14710] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.147374][T21564] team0: Port device team_slave_1 added [ 718.224728][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5937'. [ 718.224846][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5937'. [ 718.357922][T21564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.357938][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.357961][T21564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.420922][T21564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.420936][T21564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.467581][T21564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.587521][T21873] UBIFS error (pid: 21873): cannot open "c:::", error -22 [ 718.750115][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5946'. [ 718.784587][T21881] netlink: 'syz.8.5944': attribute type 10 has an invalid length. [ 718.819533][T21564] hsr_slave_0: entered promiscuous mode [ 718.856215][T21564] hsr_slave_1: entered promiscuous mode [ 718.871559][T21564] debugfs: 'hsr0' already exists in 'hsr' [ 718.871576][T21564] Cannot create hsr debugfs directory [ 718.897649][T21881] team0: Device vxcan0 is of different type [ 718.955579][T14027] IPVS: stop unused estimator thread 0... [ 719.877359][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5952'. [ 719.877383][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5952'. [ 720.279598][T21908] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5956'. [ 720.308860][T21875] loop9: detected capacity change from 0 to 32768 [ 720.326864][T21875] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5941 (21875) [ 720.365691][T21875] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 720.365736][T21875] BTRFS info (device loop9): using crc32c checksum algorithm [ 720.532913][T21875] BTRFS info (device loop9): enabling ssd optimizations [ 720.532936][T21875] BTRFS info (device loop9): turning on flush-on-commit [ 720.532952][T21875] BTRFS info (device loop9): enabling free space tree [ 720.532966][T21875] BTRFS info (device loop9): enabling auto defrag [ 720.532982][T21875] BTRFS info (device loop9): use lzo compression, level 1 [ 720.533000][T21875] BTRFS info (device loop9): max_inline set to 4096 [ 720.967243][T14710] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 721.751717][T21955] netlink: 'syz.6.5968': attribute type 2 has an invalid length. [ 722.531746][T21955] ´: entered promiscuous mode [ 722.541508][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 722.883549][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5977'. [ 723.000040][T21975] ipvlan2: entered allmulticast mode [ 723.000078][T21975] syz_tun: entered allmulticast mode [ 723.638909][T21995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.973600][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5988'. [ 725.097952][T21564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 725.132156][T21564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 725.137640][T21564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 725.190655][T21564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.214787][T21564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 725.262586][T21564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.281691][T21564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 725.319516][T21564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.122606][T21564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.223972][T21564] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.270178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.270264][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.394721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.394806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.580259][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 727.645648][T22069] loop9: detected capacity change from 0 to 4096 [ 727.677130][T22069] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 727.857883][T22069] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 727.858502][T22069] ntfs3(loop9): ino=1a, mi_enum_attr [ 727.858642][T22069] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 728.085907][T22082] netlink: 'syz.4.6012': attribute type 1 has an invalid length. [ 729.712147][T21564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.366900][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 730.676560][T22140] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 731.513573][T21564] veth0_vlan: entered promiscuous mode [ 731.532229][T22160] netlink: 'syz.6.6036': attribute type 29 has an invalid length. [ 731.532248][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6036'. [ 731.566029][T22160] netlink: 'syz.6.6036': attribute type 29 has an invalid length. [ 731.566075][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6036'. [ 731.610818][T21564] veth1_vlan: entered promiscuous mode [ 731.815967][T21564] veth0_macvtap: entered promiscuous mode [ 731.839748][T21564] veth1_macvtap: entered promiscuous mode [ 731.968741][T21564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.014469][T21564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.083268][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.083594][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.083658][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.083687][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.634282][T22182] overlayfs: failed to clone upperpath [ 732.667564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.667582][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.688415][T22182] overlayfs: missing 'lowerdir' [ 732.932699][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.932719][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.789751][T22204] loop5: detected capacity change from 0 to 4096 [ 733.816384][T22204] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 733.955713][T22204] ntfs3(loop5): ino=19, mi_enum_attr [ 733.955739][T22204] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 734.216197][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 734.264883][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6057'. [ 737.047084][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 737.047101][ T31] audit: type=1400 audit(2000000852.265:433): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=22280 comm="syz.9.6080" name="unknown" offset=82 [ 737.533808][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6085'. [ 737.602403][T22292] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 738.967489][T22322] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6094'. [ 740.001041][T22351] loop9: detected capacity change from 0 to 16 [ 740.043571][T22351] erofs (device loop9): mounted with root inode @ nid 36. [ 740.145222][T22351] erofs (device loop9): readahead error at folio 7 @ nid 36 [ 740.145260][T22351] erofs (device loop9): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel [ 740.145278][T22351] erofs (device loop9): readahead error at folio 6 @ nid 36 [ 740.145305][T22351] erofs (device loop9): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 740.145322][T22351] erofs (device loop9): readahead error at folio 5 @ nid 36 [ 740.145347][T22351] erofs (device loop9): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel [ 740.145365][T22351] erofs (device loop9): readahead error at folio 4 @ nid 36 [ 740.145402][T22351] erofs (device loop9): not enough plain data on disk @ la 15360 of nid 36 [ 740.145417][T22351] erofs (device loop9): readahead error at folio 3 @ nid 36 [ 740.145438][T22351] erofs (device loop9): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel [ 740.145455][T22351] erofs (device loop9): readahead error at folio 2 @ nid 36 [ 740.145479][T22351] erofs (device loop9): readahead error at folio 1 @ nid 36 [ 740.145497][T22351] erofs (device loop9): readahead error at folio 0 @ nid 36 [ 740.145524][T22351] erofs (device loop9): read error -117 @ 0 of nid 36 [ 740.145540][T22351] erofs (device loop9): failed to readdir of logical block 0 of nid 36 [ 740.147887][T22351] erofs (device loop9): read error -117 @ 0 of nid 36 [ 740.147906][T22351] erofs (device loop9): failed to readdir of logical block 0 of nid 36 [ 742.302371][T22346] loop5: detected capacity change from 0 to 40427 [ 742.388358][T22346] F2FS-fs (loop5): build fault injection rate: 174 [ 742.388388][T22346] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 742.409386][T22346] F2FS-fs (loop5): invalid crc value [ 743.163149][T22346] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 743.197487][T22414] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6126'. [ 744.082622][T22432] rnbd_client L127: Can't parse path iýt­-$ζàÇÌwõ‘bAa¿< [ 744.082622][T22432] yÍ…×\¨ƒ@: -22 [ 745.337659][T22468] loop5: detected capacity change from 0 to 128 [ 745.369291][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6148'. [ 745.405433][T22468] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 745.405506][T22468] hpfs: filesystem error: improperly stopped [ 745.405520][T22468] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 745.405534][T22468] hpfs: You really don't want any checks? You are crazy... [ 745.405799][T22468] hpfs: hpfs_map_sector(): read error [ 745.405809][T22468] hpfs: code page support is disabled [ 745.406675][T22468] hpfs: hpfs_map_4sectors(): unaligned read [ 745.406741][T22468] hpfs: hpfs_map_4sectors(): unaligned read [ 745.406750][T22468] hpfs: filesystem error: unable to find root dir [ 746.512795][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.512845][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.806410][ T31] audit: type=1400 audit(2000000862.025:434): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=22489 comm="syz.5.6156" name="p" offset=48 [ 748.069082][T22513] tap0: tun_chr_ioctl cmd 1074025677 [ 748.069179][T22513] tap0: linktype set to 777 [ 748.656144][ T1017] IPVS: starting estimator thread 0... [ 748.741761][T22530] IPVS: using max 35 ests per chain, 84000 per kthread [ 749.544866][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.379853][T22565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.382463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.382939][T22565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383266][T22565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383563][T22565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.383839][T22565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.233069][T22575] netlink: 'syz.6.6185': attribute type 14 has an invalid length. [ 752.880612][T22611] loop9: detected capacity change from 0 to 512 [ 752.943356][T22611] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 752.994080][T22611] EXT4-fs (loop9): 1 truncate cleaned up [ 753.023210][T22611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.217303][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6199'. [ 753.514056][T14710] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.582601][ T5860] net_ratelimit: 2046 callbacks suppressed [ 754.582620][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.069627][ T31] audit: type=1326 audit(2000000870.285:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.134197][ T31] audit: type=1326 audit(2000000870.355:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.177913][ T31] audit: type=1326 audit(2000000870.395:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.179316][ T31] audit: type=1326 audit(2000000870.395:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.179364][ T31] audit: type=1326 audit(2000000870.395:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.179409][ T31] audit: type=1326 audit(2000000870.395:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.209881][ T31] audit: type=1326 audit(2000000870.425:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.209929][ T31] audit: type=1326 audit(2000000870.425:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.209968][ T31] audit: type=1326 audit(2000000870.425:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.268509][ T31] audit: type=1326 audit(2000000870.485:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22655 comm="syz.4.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8f9e159 code=0x7ffc0000 [ 755.622331][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.622437][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.359229][T22679] xt_hashlimit: size too large, truncated to 1048576 [ 756.661754][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.175532][T22691] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6223'. [ 757.310784][T22696] ip_tables: iptables: counters copy to user failed while replacing table [ 757.738567][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.048610][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.185269][T22711] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6230'. [ 758.185292][T22711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6230'. [ 758.185311][T22711] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6230'. [ 758.746866][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.747199][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.775647][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.804218][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.944686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.964671][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.860666][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.926902][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.169708][T22783] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6255'. [ 762.944465][T22804] overlayfs: upper fs does not support tmpfile. [ 763.031337][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.031430][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.674473][T22820] 9p: Unknown uid 00000000004294967295 [ 764.105813][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.286610][T22833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6274'. [ 764.347442][T22833] ipvlan2: entered allmulticast mode [ 764.347462][T22833] erspan0: entered allmulticast mode [ 765.085573][T22846] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6280'. [ 765.143229][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.168217][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6281'. [ 765.208987][T22852] ipvlan3: entered allmulticast mode [ 765.209008][T22852] syz_tun: entered allmulticast mode [ 765.536667][T22858] loop5: detected capacity change from 0 to 4096 [ 765.559260][T22858] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 765.723869][T22858] ntfs3(loop5): ino=19, mi_enum_attr [ 765.723896][T22858] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 766.144972][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.184208][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.355920][T22879] netlink: 'syz.4.6289': attribute type 7 has an invalid length. [ 766.404883][T22881] netlink: 'syz.4.6289': attribute type 7 has an invalid length. [ 767.264309][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.418062][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 767.418080][ T31] audit: type=1807 audit(2000000882.635:463): action=measure func=F res=0 [ 767.418137][ T31] audit: type=1802 audit(2000000882.635:464): pid=22904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.6295" res=0 errno=0 [ 767.467928][T22899] ima: policy update failed [ 767.468262][ T31] audit: type=1802 audit(2000000882.685:465): pid=22899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.6295" res=0 errno=0 [ 768.265664][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.374751][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.856764][T22928] program syz.5.6305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.997998][T22932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6306'. [ 768.998025][T22932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6306'. [ 769.221520][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.363621][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6310'. [ 769.414922][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.551139][T22940] loop9: detected capacity change from 0 to 2048 [ 769.725228][T22940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.182621][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.455871][ T1168] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 770.480348][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.518250][ T1168] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 770.518275][ T1168] EXT4-fs (loop9): This should not happen!! Data will be lost [ 770.518275][ T1168] [ 770.518289][ T1168] EXT4-fs (loop9): Total free blocks count 0 [ 770.518302][ T1168] EXT4-fs (loop9): Free/Dirty block details [ 770.518315][ T1168] EXT4-fs (loop9): free_blocks=4096 [ 770.518328][ T1168] EXT4-fs (loop9): dirty_blocks=208 [ 770.518341][ T1168] EXT4-fs (loop9): Block reservation details [ 770.518351][ T1168] EXT4-fs (loop9): i_reserved_data_blocks=13 [ 770.546633][ T1168] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8421510 with max blocks 184 with error 28 [ 770.643120][T14710] EXT4-fs warning (device loop9): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 771.579103][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.750582][T22993] macvlan2: entered allmulticast mode [ 771.750603][T22993] syz_tun: entered allmulticast mode [ 771.786531][T22993] batman_adv: batadv0: Adding interface: macvlan2 [ 771.786548][T22993] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.786575][T22993] batman_adv: batadv0: Interface activated: macvlan2 [ 772.613745][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.224644][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.696217][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.829192][T23011] loop9: detected capacity change from 0 to 32768 [ 774.211014][T23052] openvswitch: netlink: IP tunnel dst address not specified [ 774.212393][T23052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.366291][T23049] read_mapping_page failed! [ 774.366310][T23049] ERROR: (device loop9): txCommit: [ 774.366310][T23049] [ 774.494724][T23049] ERROR: (device loop9): remounting filesystem as read-only [ 774.516518][T23050] ERROR: (device loop9): diRead: i_ino != di_number [ 774.516518][T23050] [ 774.516604][T23050] jfs_lookup: iget failed on inum 8 [ 774.591544][T23058] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6351'. [ 774.744571][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.459353][ T31] audit: type=1807 audit(2000000890.675:466): action=measure uid>1 res=1 [ 775.459684][T23076] ima: policy update completed [ 775.459845][ T31] audit: type=1802 audit(2000000890.675:467): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.6359" res=1 errno=0 [ 775.781795][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.263262][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.859279][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.042720][T23114] bridge0: port 1(bridge_slave_0) entered listening state [ 777.206982][T23116] netlink: 428 bytes leftover after parsing attributes in process `syz.9.6373'. [ 777.207017][T23116] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6373'. [ 777.438743][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 777.614482][T23127] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6378'. [ 777.690479][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6378'. [ 777.740434][T23128] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6378'. [ 777.895588][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.914163][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.600865][T23153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 778.623161][T23153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 778.623312][T23153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 778.623412][T23153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 778.623498][T23153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 778.914536][T23164] program syz.9.6395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.522761][T23174] ima: policy update failed [ 779.525966][ T31] audit: type=1802 audit(2000000894.745:468): pid=23174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.6400" res=0 errno=0 [ 781.001555][ T5860] net_ratelimit: 447 callbacks suppressed [ 781.001574][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.413834][T23222] xt_hashlimit: max too large, truncated to 1048576 [ 782.006116][T23240] ip_tables: iptables: counters copy to user failed while replacing table [ 782.048574][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.274789][T23246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 782.342999][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.442227][T23250] gretap0: entered promiscuous mode [ 782.445516][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6432'. [ 782.445538][T23250] gretap0: left promiscuous mode [ 782.865267][T23260] loop5: detected capacity change from 0 to 2048 [ 782.893853][T23260] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 782.967112][T23261] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 783.100356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.185534][T23267] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6440'. [ 783.715149][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6447'. [ 783.715407][T23281] syz_tun: Device is already in use. [ 783.936656][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6448'. [ 784.034879][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6450'. [ 784.129141][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.029366][T23306] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.115249][T23316] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6463'. [ 785.180814][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.384452][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.546502][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.211778][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.823171][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.238343][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.277001][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.423134][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.311830][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.021481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.347735][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.303690][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.387921][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.429974][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.469155][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.345193][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.510327][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.547691][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.423356][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.589344][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.381402][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.629268][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.669162][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.709547][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.421333][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.748631][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.541470][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.788344][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.830257][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.868870][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.581687][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.909322][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.948850][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.022508][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.988514][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.621704][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.946570][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.946620][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.030173][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.069760][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.109415][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.661307][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.148242][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.189601][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.228104][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.701412][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.268779][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.308589][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.623639][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.351550][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.741397][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.389360][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.432397][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.468534][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.782313][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.509373][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.548373][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.588497][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.822807][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.628529][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.668402][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.222707][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.381274][T16895] Bluetooth: hci5: command 0x0406 tx timeout [ 825.711045][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.861347][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.748757][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.790076][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.829500][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.901925][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.869873][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.909149][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.947666][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.948041][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.987728][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.027658][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.821581][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.983318][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.069165][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.111743][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.147949][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.021560][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.188974][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.229916][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.269971][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.061393][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.308675][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.348536][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.387708][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.783858][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.785443][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.101518][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.426830][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.468523][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.507696][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.141833][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.552251][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.588773][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.629478][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.182625][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.668560][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.708596][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.750974][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.221252][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.381867][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.788314][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.022408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.025774][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.830092][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.867816][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.910354][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.061419][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.949022][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.987697][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.029932][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.101679][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.072449][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.108393][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.981446][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.148561][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.148931][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.188922][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.262683][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.266395][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.306291][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.338129][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.230150][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.268800][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.307385][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.382127][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.348632][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.390130][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.390788][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.390833][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.427339][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.427433][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.466660][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.506418][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.581718][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.461628][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.547500][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.591533][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.629589][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.503233][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.666514][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.707837][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.746483][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.542665][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.793160][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.826541][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.866525][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.182855][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.581343][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.907342][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.947392][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.987777][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.622763][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.029116][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.067733][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.106757][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.661420][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.147376][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.186384][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.227120][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.701607][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.781409][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.266386][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.306235][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.348302][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.742198][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.388864][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.427749][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.467220][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.467735][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.468516][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.472086][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.781368][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.507718][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.546310][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.588544][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.821597][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.382797][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.383968][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.405883][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.406294][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.626688][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.668230][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.706239][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.861787][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.787755][ T5622] net_ratelimit: 1 callbacks suppressed [ 905.787775][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.826159][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.901628][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.142362][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.143407][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.186728][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.867153][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.907379][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.947748][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.947844][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.986698][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.029312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.981658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.067661][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.106356][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.147731][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.021382][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.187857][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.741388][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.227367][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.267636][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.061494][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.310480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.348823][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.387143][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.101403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.426655][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.467224][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.506260][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.146633][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.547751][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.341455][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.587235][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.628303][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.183000][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.667498][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.706635][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.748794][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.829999][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.830050][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.221338][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.788284][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.826465][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.866898][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.261594][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.906303][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.951473][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.955663][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.986220][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.301391][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.029480][ T5622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.501177][ T32] INFO: task jbd2/sda1-8:4942 blocked in I/O wait for more than 143 seconds. [ 938.501204][ T32] Tainted: G S L syzkaller #0 [ 938.501216][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.501226][ T32] task:jbd2/sda1-8 state:D stack:25288 pid:4942 tgid:4942 ppid:2 task_flags:0x240040 flags:0x00080000 [ 938.501281][ T32] Call Trace: [ 938.501289][ T32] [ 938.501302][ T32] __schedule+0x17db/0x58f0 [ 938.501337][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.501361][ T32] ? percpu_ref_put_many+0x18e/0x240 [ 938.501392][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.501426][ T32] ? __pfx___schedule+0x10/0x10 [ 938.501454][ T32] ? schedule+0x90/0x2b0 [ 938.501477][ T32] schedule+0x164/0x2b0 [ 938.501504][ T32] io_schedule+0x7f/0xd0 [ 938.501526][ T32] bit_wait_io+0x11/0xd0 [ 938.501550][ T32] __wait_on_bit+0xac/0x300 [ 938.501572][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.501598][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.501622][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.501644][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.501670][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.501696][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.501721][ T32] ? __wait_on_buffer+0xe/0x80 [ 938.501748][ T32] jbd2_journal_commit_transaction+0x2f1d/0x5b70 [ 938.501770][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.501792][ T32] ? trace_hrtimer_start+0x82/0x200 [ 938.501857][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 938.501888][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 938.501924][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.501974][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502002][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502028][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 938.502047][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502072][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502094][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 938.502114][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502143][ T32] ? __timer_delete_sync+0x4a7/0x520 [ 938.502169][ T32] kjournald2+0x3bc/0x750 [ 938.502211][ T32] ? __pfx_kjournald2+0x10/0x10 [ 938.502234][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502258][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 938.502285][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502307][ T32] ? __kthread_parkme+0x71/0x1f0 [ 938.502339][ T32] ? __kthread_parkme+0x199/0x1f0 [ 938.502373][ T32] kthread+0x38b/0x480 [ 938.502394][ T32] ? __pfx_kjournald2+0x10/0x10 [ 938.502417][ T32] ? __pfx_kthread+0x10/0x10 [ 938.502439][ T32] ret_from_fork+0x514/0xb70 [ 938.502461][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 938.502480][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502550][ T32] ? __switch_to+0xc89/0x1420 [ 938.502583][ T32] ? __pfx_kthread+0x10/0x10 [ 938.502604][ T32] ret_from_fork_asm+0x1a/0x30 [ 938.502652][ T32] [ 938.502668][ T32] INFO: task syz-executor:5599 blocked in I/O wait for more than 143 seconds. [ 938.502685][ T32] Tainted: G S L syzkaller #0 [ 938.502696][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.502705][ T32] task:syz-executor state:D stack:20896 pid:5599 tgid:5599 ppid:5598 task_flags:0x440100 flags:0x00080000 [ 938.502760][ T32] Call Trace: [ 938.502767][ T32] [ 938.502779][ T32] __schedule+0x17db/0x58f0 [ 938.502818][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.502852][ T32] ? __pfx___schedule+0x10/0x10 [ 938.502881][ T32] ? schedule+0x90/0x2b0 [ 938.502904][ T32] schedule+0x164/0x2b0 [ 938.502926][ T32] io_schedule+0x7f/0xd0 [ 938.502949][ T32] bit_wait_io+0x11/0xd0 [ 938.502993][ T32] __wait_on_bit+0xac/0x300 [ 938.503016][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.503041][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.503065][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.503087][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.503114][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.503145][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.503177][ T32] do_get_write_access+0x662/0x1070 [ 938.503224][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 938.503258][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 938.503295][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 938.503325][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 938.503355][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 938.503383][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.503413][ T32] ext4_reserve_inode_write+0x294/0x360 [ 938.503452][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 938.503487][ T32] ext4_dirty_inode+0xd0/0x110 [ 938.503516][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 938.503546][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 938.503575][ T32] file_update_time_flags+0x399/0x440 [ 938.503600][ T32] ext4_page_mkwrite+0x224/0x1140 [ 938.503632][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 938.503663][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.503691][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 938.503719][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.503748][ T32] do_page_mkwrite+0x147/0x310 [ 938.503774][ T32] do_wp_page+0x1a9c/0x4b80 [ 938.503818][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 938.503842][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 938.503873][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 938.503899][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.503933][ T32] handle_mm_fault+0x15d7/0x3750 [ 938.503998][ T32] ? handle_mm_fault+0xf1/0x3750 [ 938.504037][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 938.504063][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 938.504093][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 938.504136][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.504170][ T32] do_user_addr_fault+0xa4f/0x1340 [ 938.504198][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.504223][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.504245][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 938.504269][ T32] exc_page_fault+0x6a/0xc0 [ 938.504292][ T32] asm_exc_page_fault+0x26/0x30 [ 938.504312][ T32] RIP: 0033:0x7f1e6447c6e2 [ 938.504330][ T32] RSP: 002b:00007fff80ccb1a0 EFLAGS: 00010212 [ 938.504348][ T32] RAX: 00007f1e62430000 RBX: 000055557078e4f0 RCX: 0000000000000007 [ 938.504362][ T32] RDX: 00000000000026cc RSI: 000055557078ee78 RDI: 0000000000000080 [ 938.504375][ T32] RBP: 00007fff80ccb6a0 R08: 000055557078eea8 R09: 00000000000000a2 [ 938.504389][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff80ccb4e0 [ 938.504402][ T32] R13: 00007fff80ccb2d0 R14: 585858582e7a7973 R15: 00007fff80ccb220 [ 938.504434][ T32] [ 938.504456][ T32] INFO: task kworker/u8:4:14027 blocked in I/O wait for more than 143 seconds. [ 938.504473][ T32] Tainted: G S L syzkaller #0 [ 938.504484][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.504492][ T32] task:kworker/u8:4 state:D stack:20552 pid:14027 tgid:14027 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 938.504542][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 938.504568][ T32] Call Trace: [ 938.504575][ T32] [ 938.504588][ T32] __schedule+0x17db/0x58f0 [ 938.504608][ T32] ? blk_mq_flush_plug_list+0x415/0x540 [ 938.504645][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 938.504675][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.504698][ T32] ? __blk_flush_plug+0x416/0x4d0 [ 938.504721][ T32] ? __pfx___schedule+0x10/0x10 [ 938.504749][ T32] ? schedule+0x90/0x2b0 [ 938.504772][ T32] schedule+0x164/0x2b0 [ 938.504795][ T32] io_schedule+0x7f/0xd0 [ 938.504817][ T32] rq_qos_wait+0x266/0x360 [ 938.504848][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 938.504869][ T32] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 938.504892][ T32] ? __pfx_rq_qos_wait+0x10/0x10 [ 938.504920][ T32] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 938.504950][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 938.504994][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505019][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505049][ T32] wbt_wait+0x326/0x550 [ 938.505074][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 938.505095][ T32] ? __pfx_dd_bio_merge+0x10/0x10 [ 938.505132][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 938.505151][ T32] __rq_qos_throttle+0x6b/0xb0 [ 938.505181][ T32] blk_mq_submit_bio+0x1512/0x2a70 [ 938.505208][ T32] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 938.505238][ T32] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 938.505259][ T32] ? blk_cgroup_bio_start+0x5d7/0x670 [ 938.505291][ T32] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 938.505326][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505351][ T32] ? __submit_bio+0x7e/0x340 [ 938.505378][ T32] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 938.505407][ T32] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 938.505428][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505454][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505476][ T32] ? submit_bio_noacct+0x104f/0x1b80 [ 938.505501][ T32] ? blkcg_set_ioprio+0x16b/0x2a0 [ 938.505540][ T32] ext4_bio_write_folio+0xf90/0x1780 [ 938.505582][ T32] mpage_process_page_bufs+0x6bd/0x8a0 [ 938.505612][ T32] mpage_prepare_extent_to_map+0xf92/0x1890 [ 938.505644][ T32] ? process_scheduled_works+0xc3d/0x1630 [ 938.505691][ T32] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 938.505746][ T32] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 938.505776][ T32] ? ext4_init_io_end+0x29/0x130 [ 938.505800][ T32] ? kmem_cache_alloc_noprof+0x156/0x600 [ 938.505830][ T32] ? ext4_init_io_end+0x29/0x130 [ 938.505867][ T32] ext4_do_writepages+0xb8a/0x4770 [ 938.505914][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.505937][ T32] ? kfree+0x1c5/0x650 [ 938.505983][ T32] ? ieee80211_inform_bss+0xbda/0x10d0 [ 938.506025][ T32] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 938.506050][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 938.506074][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506097][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.506127][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.506152][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506175][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.506203][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506226][ T32] ? lock_acquire+0x115/0x350 [ 938.506247][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506277][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506310][ T32] ext4_writepages+0x241/0x3b0 [ 938.506333][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 938.506368][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 938.506397][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 938.506418][ T32] do_writepages+0x338/0x560 [ 938.506440][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 938.506471][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506494][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 938.506518][ T32] ? writeback_sb_inodes+0x450/0x1b00 [ 938.506550][ T32] __writeback_single_inode+0x136/0x1220 [ 938.506580][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506602][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 938.506635][ T32] writeback_sb_inodes+0x9de/0x1b00 [ 938.506686][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 938.506747][ T32] ? __pfx_down_read_trylock+0x10/0x10 [ 938.506782][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.506810][ T32] __writeback_inodes_wb+0x114/0x240 [ 938.506845][ T32] wb_writeback+0x42f/0xad0 [ 938.506875][ T32] ? queue_io+0x2b1/0x470 [ 938.506906][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 938.506930][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 938.507609][ T32] wb_workfn+0xc92/0x10f0 [ 938.507653][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 938.507689][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.507720][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.507742][ T32] ? lock_acquire+0x115/0x350 [ 938.507764][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.507793][ T32] ? rcu_is_watching+0x16/0xb0 [ 938.507817][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.507841][ T32] ? process_scheduled_works+0x97a/0x1630 [ 938.507868][ T32] process_scheduled_works+0xc3d/0x1630 [ 938.507894][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.507945][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 938.508002][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508025][ T32] ? assign_work+0x3cf/0x5d0 [ 938.508057][ T32] worker_thread+0xa47/0xfb0 [ 938.508087][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508119][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508147][ T32] ? __kthread_parkme+0x71/0x1f0 [ 938.508190][ T32] kthread+0x38b/0x480 [ 938.508215][ T32] ? __pfx_worker_thread+0x10/0x10 [ 938.508240][ T32] ? __pfx_kthread+0x10/0x10 [ 938.508262][ T32] ret_from_fork+0x514/0xb70 [ 938.508284][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 938.508303][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508329][ T32] ? __switch_to+0xc89/0x1420 [ 938.508359][ T32] ? __pfx_kthread+0x10/0x10 [ 938.508381][ T32] ret_from_fork_asm+0x1a/0x30 [ 938.508428][ T32] [ 938.508476][ T32] INFO: task syz.9.6464:23313 blocked in I/O wait for more than 143 seconds. [ 938.508493][ T32] Tainted: G S L syzkaller #0 [ 938.508504][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.508513][ T32] task:syz.9.6464 state:D stack:25608 pid:23313 tgid:23313 ppid:14710 task_flags:0x440040 flags:0x00080002 [ 938.508566][ T32] Call Trace: [ 938.508573][ T32] [ 938.508585][ T32] __schedule+0x17db/0x58f0 [ 938.508614][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508638][ T32] ? lock_acquire+0x115/0x350 [ 938.508664][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.508694][ T32] ? __pfx___schedule+0x10/0x10 [ 938.508722][ T32] ? schedule+0x90/0x2b0 [ 938.508745][ T32] schedule+0x164/0x2b0 [ 938.508767][ T32] io_schedule+0x7f/0xd0 [ 938.508794][ T32] bit_wait_io+0x11/0xd0 [ 938.508818][ T32] __wait_on_bit+0xac/0x300 [ 938.508840][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.508865][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.508890][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.508911][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.508938][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.508984][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.509016][ T32] do_get_write_access+0x662/0x1070 [ 938.509209][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 938.509245][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 938.509282][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 938.509311][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 938.509341][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 938.509369][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.509399][ T32] ext4_reserve_inode_write+0x294/0x360 [ 938.509438][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 938.509484][ T32] ext4_dirty_inode+0xd0/0x110 [ 938.509513][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 938.509542][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 938.509570][ T32] file_update_time_flags+0x399/0x440 [ 938.509596][ T32] ext4_page_mkwrite+0x224/0x1140 [ 938.509635][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 938.509660][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.509684][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 938.509724][ T32] do_page_mkwrite+0x147/0x310 [ 938.509748][ T32] do_pte_missing+0x757/0x34b0 [ 938.509776][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.509802][ T32] ? handle_mm_fault+0xf1/0x3750 [ 938.509833][ T32] handle_mm_fault+0x1a53/0x3750 [ 938.509870][ T32] ? handle_mm_fault+0xf1/0x3750 [ 938.509908][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 938.509934][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 938.510010][ T32] do_user_addr_fault+0xa4f/0x1340 [ 938.510037][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.510062][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.510085][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 938.510108][ T32] exc_page_fault+0x6a/0xc0 [ 938.510136][ T32] asm_exc_page_fault+0x26/0x30 [ 938.510155][ T32] RIP: 0033:0x7f477de72f32 [ 938.510172][ T32] RSP: 002b:00007fff650e95d0 EFLAGS: 00010202 [ 938.510190][ T32] RAX: 0000000000005008 RBX: 00007f477ed55720 RCX: 0000000000000000 [ 938.510204][ T32] RDX: 0000001b3321f000 RSI: 0000000000000008 RDI: 00007f477ed55720 [ 938.510217][ T32] RBP: 00000000000004bb R08: 00007f477e210000 R09: 00007f477e226038 [ 938.510231][ T32] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff8a46ff7c [ 938.510244][ T32] R13: 00007f477e226038 R14: 00000000000000ac R15: ffffffffffffb000 [ 938.510261][ T32] ? __ip_make_skb+0xd1c/0x1c10 [ 938.510294][ T32] [ 938.510303][ T32] INFO: task syz.5.6472:23332 blocked in I/O wait for more than 143 seconds. [ 938.510320][ T32] Tainted: G S L syzkaller #0 [ 938.510331][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.510339][ T32] task:syz.5.6472 state:D stack:25608 pid:23332 tgid:23332 ppid:21564 task_flags:0x440040 flags:0x00080002 [ 938.510393][ T32] Call Trace: [ 938.510400][ T32] [ 938.510412][ T32] __schedule+0x17db/0x58f0 [ 938.510442][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.510465][ T32] ? lock_acquire+0x115/0x350 [ 938.510490][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.510541][ T32] ? __pfx___schedule+0x10/0x10 [ 938.510570][ T32] ? schedule+0x90/0x2b0 [ 938.510593][ T32] schedule+0x164/0x2b0 [ 938.510615][ T32] io_schedule+0x7f/0xd0 [ 938.510638][ T32] bit_wait_io+0x11/0xd0 [ 938.510661][ T32] __wait_on_bit+0xac/0x300 [ 938.510683][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.510708][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.510733][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.510754][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.510780][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.510807][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.510838][ T32] do_get_write_access+0x662/0x1070 [ 938.510884][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 938.510918][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 938.593554][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 938.593589][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 938.593618][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 938.593646][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.593677][ T32] ext4_reserve_inode_write+0x294/0x360 [ 938.593715][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 938.593749][ T32] ext4_dirty_inode+0xd0/0x110 [ 938.593779][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 938.593808][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 938.593836][ T32] file_update_time_flags+0x399/0x440 [ 938.593861][ T32] ext4_page_mkwrite+0x224/0x1140 [ 938.593901][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 938.593932][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 938.593983][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.594006][ T32] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 938.594043][ T32] do_page_mkwrite+0x147/0x310 [ 938.594068][ T32] do_pte_missing+0x757/0x34b0 [ 938.594093][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 938.594117][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.594153][ T32] handle_mm_fault+0x1a53/0x3750 [ 938.594191][ T32] ? handle_mm_fault+0xf1/0x3750 [ 938.594229][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 938.594254][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 938.594296][ T32] ? sched_clock_cpu+0x74/0x440 [ 938.594326][ T32] do_user_addr_fault+0xa4f/0x1340 [ 938.594353][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.594378][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.594400][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 938.594423][ T32] exc_page_fault+0x6a/0xc0 [ 938.594446][ T32] asm_exc_page_fault+0x26/0x30 [ 938.594466][ T32] RIP: 0033:0x7fee59072809 [ 938.594482][ T32] RSP: 002b:00007ffcae688560 EFLAGS: 00010202 [ 938.594500][ T32] RAX: 0000001b2fe24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 938.706165][ T32] RDX: 0000001b2fe23ffc RSI: 00000000005ffde8 RDI: 00007fee59f55700 [ 938.706183][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fee59412000 [ 938.706196][ T32] R10: 00007fee59f55700 R11: 0000000000000000 R12: 0000000000000000 [ 938.706209][ T32] R13: 000000000007ffff R14: ffffffff8243d551 R15: 00007fee59f55720 [ 938.706225][ T32] ? pfn_valid+0x3e1/0x490 [ 938.706263][ T32] [ 938.706276][ T32] INFO: task syz.4.6473:23334 blocked in I/O wait for more than 143 seconds. [ 938.706293][ T32] Tainted: G S L syzkaller #0 [ 938.706304][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.706312][ T32] task:syz.4.6473 state:D stack:25608 pid:23334 tgid:23334 ppid:20398 task_flags:0x440040 flags:0x00080002 [ 938.706365][ T32] Call Trace: [ 938.706373][ T32] [ 938.706385][ T32] __schedule+0x17db/0x58f0 [ 938.706415][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.706443][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.706469][ T32] ? __pfx___schedule+0x10/0x10 [ 938.706497][ T32] ? schedule+0x90/0x2b0 [ 938.706520][ T32] schedule+0x164/0x2b0 [ 938.706542][ T32] io_schedule+0x7f/0xd0 [ 938.706565][ T32] bit_wait_io+0x11/0xd0 [ 938.706588][ T32] __wait_on_bit+0xac/0x300 [ 938.706610][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.706635][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.706660][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.706682][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.706707][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.706734][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.706765][ T32] do_get_write_access+0x662/0x1070 [ 938.706812][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 938.706846][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 938.706882][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 938.706912][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 938.706941][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 938.706993][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.707023][ T32] ext4_reserve_inode_write+0x294/0x360 [ 938.707061][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 938.707095][ T32] ext4_dirty_inode+0xd0/0x110 [ 938.707128][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 938.707156][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 938.707185][ T32] file_update_time_flags+0x399/0x440 [ 938.707210][ T32] ext4_page_mkwrite+0x224/0x1140 [ 938.707249][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 938.707280][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 938.707310][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.707332][ T32] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 938.707368][ T32] do_page_mkwrite+0x147/0x310 [ 938.707392][ T32] do_pte_missing+0x757/0x34b0 [ 938.707417][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 938.707441][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.707471][ T32] handle_mm_fault+0x1a53/0x3750 [ 938.707509][ T32] ? handle_mm_fault+0xf1/0x3750 [ 938.707547][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 938.707572][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 938.866607][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.866660][ T32] do_user_addr_fault+0xa4f/0x1340 [ 938.866688][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.866713][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.866735][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 938.866758][ T32] exc_page_fault+0x6a/0xc0 [ 938.866781][ T32] asm_exc_page_fault+0x26/0x30 [ 938.866801][ T32] RIP: 0033:0x7fb7d8e72809 [ 938.866818][ T32] RSP: 002b:00007fff62335290 EFLAGS: 00010202 [ 938.866836][ T32] RAX: 0000001b2f324000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 938.866850][ T32] RDX: 0000001b2f323ffc RSI: 00000000005ffde8 RDI: 00007fb7d9d55700 [ 938.866864][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fb7d9212000 [ 938.866877][ T32] R10: 00007fb7d9d55700 R11: 0000000000000000 R12: 0000000000000000 [ 938.866890][ T32] R13: 000000000000000b R14: ffffffff816d65ce R15: 00007fb7d9d55720 [ 938.866905][ T32] ? fpregs_assert_state_consistent+0xee/0x150 [ 938.866947][ T32] [ 938.866981][ T32] INFO: task syz.8.6474:23335 blocked in I/O wait for more than 143 seconds. [ 938.866999][ T32] Tainted: G S L syzkaller #0 [ 938.867010][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.867019][ T32] task:syz.8.6474 state:D stack:27248 pid:23335 tgid:23335 ppid:13893 task_flags:0x440040 flags:0x00080002 [ 938.867073][ T32] Call Trace: [ 938.867080][ T32] [ 938.867093][ T32] __schedule+0x17db/0x58f0 [ 938.867138][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 938.867169][ T32] ? __pfx___schedule+0x10/0x10 [ 938.867197][ T32] ? schedule+0x90/0x2b0 [ 938.867220][ T32] schedule+0x164/0x2b0 [ 938.867243][ T32] io_schedule+0x7f/0xd0 [ 938.867265][ T32] bit_wait_io+0x11/0xd0 [ 938.867289][ T32] __wait_on_bit+0xac/0x300 [ 938.867310][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.867336][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 938.867360][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 938.867382][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 938.867408][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 938.867435][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.867466][ T32] do_get_write_access+0x662/0x1070 [ 938.867513][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 938.867547][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 938.867583][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 938.867615][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.867646][ T32] ext4_reserve_inode_write+0x294/0x360 [ 938.867684][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 938.867719][ T32] ext4_dirty_inode+0xd0/0x110 [ 938.867748][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 938.867777][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 938.867799][ T32] ? mnt_get_write_access+0x216/0x280 [ 938.867821][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 938.867848][ T32] touch_atime+0x568/0x670 [ 938.867866][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 938.867898][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 938.867930][ T32] mmap_region+0xe7e/0x2270 [ 938.867974][ T32] ? __page_table_check_zero+0x6c/0x430 [ 938.868010][ T32] ? __pfx_mmap_region+0x10/0x10 [ 938.980731][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.980758][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.980795][ T32] ? lock_acquire+0x115/0x350 [ 938.980822][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.980844][ T32] ? __lock_acquire+0x747/0x2de0 [ 938.980905][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.980944][ T32] ? mt_find+0x186/0x630 [ 939.009832][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.009859][ T32] ? mt_find+0x5ff/0x630 [ 939.009886][ T32] ? mt_find+0x186/0x630 [ 939.009910][ T32] ? __pfx_mt_find+0x10/0x10 [ 939.009941][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.009983][ T32] ? security_mmap_addr+0x71/0x240 [ 939.010007][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010030][ T32] ? shmem_mapping+0xd/0x50 [ 939.010050][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010072][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 939.010101][ T32] do_mmap+0xe0a/0x1300 [ 939.010133][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010165][ T32] ? __pfx_do_mmap+0x10/0x10 [ 939.010189][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010216][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010246][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 939.010267][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010290][ T32] ? down_write_killable+0x17e/0x240 [ 939.010319][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 939.010343][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010374][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 939.010399][ T32] ? lock_acquire+0x115/0x350 [ 939.010423][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 939.010449][ T32] ? __fget_files+0x2a/0x420 [ 939.010480][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.010503][ T32] ? __fget_files+0x3a2/0x420 [ 939.010529][ T32] ? __fget_files+0x2a/0x420 [ 939.010560][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 939.010594][ T32] do_syscall_64+0x166/0x520 [ 939.010616][ T32] ? trace_irq_disable+0x3b/0x140 [ 939.010636][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.010661][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.010681][ T32] RIP: 0033:0x7f5bf0b9dec2 [ 939.125663][ T32] RSP: 002b:00007ffefd2f4c48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 939.125692][ T32] RAX: ffffffffffffffda RBX: 0000001b30264000 RCX: 00007f5bf0b9dec2 [ 939.125708][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b30264000 [ 939.125721][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 939.125734][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000241 [ 939.125747][ T32] R13: 00000000000927c0 R14: 00000000000bfca6 R15: 00007ffefd2f4f20 [ 939.125780][ T32] [ 939.125793][ T32] INFO: task syz.0.6475:23337 blocked in I/O wait for more than 143 seconds. [ 939.125811][ T32] Tainted: G S L syzkaller #0 [ 939.125822][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.125831][ T32] task:syz.0.6475 state:D stack:27248 pid:23337 tgid:23337 ppid:5613 task_flags:0x440040 flags:0x00080002 [ 939.125886][ T32] Call Trace: [ 939.125893][ T32] [ 939.125906][ T32] __schedule+0x17db/0x58f0 [ 939.125950][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 939.126013][ T32] ? __pfx___schedule+0x10/0x10 [ 939.126042][ T32] ? schedule+0x90/0x2b0 [ 939.126064][ T32] schedule+0x164/0x2b0 [ 939.126087][ T32] io_schedule+0x7f/0xd0 [ 939.126109][ T32] bit_wait_io+0x11/0xd0 [ 939.126133][ T32] __wait_on_bit+0xac/0x300 [ 939.126155][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 939.126180][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 939.126205][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 939.126226][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 939.126252][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 939.126280][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126311][ T32] do_get_write_access+0x662/0x1070 [ 939.126359][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 939.126393][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 939.126429][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 939.126471][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126501][ T32] ext4_reserve_inode_write+0x294/0x360 [ 939.126539][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 939.126574][ T32] ext4_dirty_inode+0xd0/0x110 [ 939.126604][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 939.126633][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 939.126655][ T32] ? mnt_get_write_access+0x216/0x280 [ 939.126676][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 939.126704][ T32] touch_atime+0x568/0x670 [ 939.126723][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 939.126754][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 939.126786][ T32] mmap_region+0xe7e/0x2270 [ 939.126813][ T32] ? __page_table_check_zero+0x6c/0x430 [ 939.126848][ T32] ? __pfx_mmap_region+0x10/0x10 [ 939.126873][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.126895][ T32] ? __lock_acquire+0x747/0x2de0 [ 939.126932][ T32] ? lock_acquire+0x115/0x350 [ 939.126978][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.127001][ T32] ? __lock_acquire+0x747/0x2de0 [ 939.127062][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249342][ T32] ? mt_find+0x186/0x630 [ 939.249382][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249406][ T32] ? mt_find+0x5ff/0x630 [ 939.249432][ T32] ? mt_find+0x186/0x630 [ 939.249484][ T32] ? __pfx_mt_find+0x10/0x10 [ 939.249516][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249539][ T32] ? security_mmap_addr+0x71/0x240 [ 939.249561][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249584][ T32] ? shmem_mapping+0xd/0x50 [ 939.249604][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249626][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 939.249656][ T32] do_mmap+0xe0a/0x1300 [ 939.249681][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249713][ T32] ? __pfx_do_mmap+0x10/0x10 [ 939.249736][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249764][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249794][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 939.249815][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249837][ T32] ? down_write_killable+0x17e/0x240 [ 939.249867][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 939.249892][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.249923][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 939.249947][ T32] ? lock_acquire+0x115/0x350 [ 939.249996][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 939.250021][ T32] ? __fget_files+0x2a/0x420 [ 939.250053][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.250076][ T32] ? __fget_files+0x3a2/0x420 [ 939.250102][ T32] ? __fget_files+0x2a/0x420 [ 939.250133][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 939.250167][ T32] do_syscall_64+0x166/0x520 [ 939.250189][ T32] ? trace_irq_disable+0x3b/0x140 [ 939.250209][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.250235][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.250254][ T32] RIP: 0033:0x7fb4c659dec2 [ 939.250272][ T32] RSP: 002b:00007ffe67728a08 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 939.250293][ T32] RAX: ffffffffffffffda RBX: 0000001b33364000 RCX: 00007fb4c659dec2 [ 939.250308][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33364000 [ 939.250321][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 939.250334][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000475 [ 939.250347][ T32] R13: 00000000000927c0 R14: 00000000000bfd79 R15: 00007ffe67728ce0 [ 939.250378][ T32] [ 939.250391][ T32] INFO: task syz.6.6476:23338 blocked in I/O wait for more than 144 seconds. [ 939.250410][ T32] Tainted: G S L syzkaller #0 [ 939.250421][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 939.250430][ T32] task:syz.6.6476 state:D stack:27240 pid:23338 tgid:23338 ppid:10434 task_flags:0x440040 flags:0x00080002 [ 939.250489][ T32] Call Trace: [ 939.250496][ T32] [ 939.250508][ T32] __schedule+0x17db/0x58f0 [ 939.250548][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 939.250579][ T32] ? __pfx___schedule+0x10/0x10 [ 939.250607][ T32] ? schedule+0x90/0x2b0 [ 939.250630][ T32] schedule+0x164/0x2b0 [ 939.250652][ T32] io_schedule+0x7f/0xd0 [ 939.250675][ T32] bit_wait_io+0x11/0xd0 [ 939.250699][ T32] __wait_on_bit+0xac/0x300 [ 939.250720][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 939.250746][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 939.405510][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 939.405542][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 939.405568][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 939.405595][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.405627][ T32] do_get_write_access+0x662/0x1070 [ 939.405674][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 939.405708][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 939.405745][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 939.405776][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.405806][ T32] ext4_reserve_inode_write+0x294/0x360 [ 939.405844][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 939.405879][ T32] ext4_dirty_inode+0xd0/0x110 [ 939.405908][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 939.405936][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 939.405982][ T32] ? mnt_get_write_access+0x216/0x280 [ 939.406005][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 939.406032][ T32] touch_atime+0x568/0x670 [ 939.406050][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 939.406082][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 939.406114][ T32] mmap_region+0xe7e/0x2270 [ 939.406140][ T32] ? __page_table_check_zero+0x6c/0x430 [ 939.406176][ T32] ? __pfx_mmap_region+0x10/0x10 [ 939.406200][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406223][ T32] ? __lock_acquire+0x747/0x2de0 [ 939.406259][ T32] ? lock_acquire+0x115/0x350 [ 939.406287][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406309][ T32] ? __lock_acquire+0x747/0x2de0 [ 939.406369][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406408][ T32] ? mt_find+0x186/0x630 [ 939.406436][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406463][ T32] ? mt_find+0x5ff/0x630 [ 939.406490][ T32] ? mt_find+0x186/0x630 [ 939.406514][ T32] ? __pfx_mt_find+0x10/0x10 [ 939.406545][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406567][ T32] ? security_mmap_addr+0x71/0x240 [ 939.406590][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406612][ T32] ? shmem_mapping+0xd/0x50 [ 939.406632][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406654][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 939.406683][ T32] do_mmap+0xe0a/0x1300 [ 939.406709][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406741][ T32] ? __pfx_do_mmap+0x10/0x10 [ 939.406765][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406792][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406821][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 939.406842][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.406865][ T32] ? down_write_killable+0x17e/0x240 [ 939.406894][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 939.406918][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.484368][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.534224][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 939.534259][ T32] ? lock_acquire+0x115/0x350 [ 939.534285][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 939.534310][ T32] ? __fget_files+0x2a/0x420 [ 939.534341][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.534364][ T32] ? __fget_files+0x3a2/0x420 [ 939.534390][ T32] ? __fget_files+0x2a/0x420 [ 939.534421][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 939.534455][ T32] do_syscall_64+0x166/0x520 [ 939.534487][ T32] ? trace_irq_disable+0x3b/0x140 [ 939.534507][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.534533][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.534553][ T32] RIP: 0033:0x7fecfe99dec2 [ 939.534571][ T32] RSP: 002b:00007fff613160b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 939.534592][ T32] RAX: ffffffffffffffda RBX: 0000001b30164000 RCX: 00007fecfe99dec2 [ 939.534607][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b30164000 [ 939.534620][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 939.534633][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000301 [ 939.534646][ T32] R13: 00000000000927c0 R14: 00000000000bfd6b R15: 00007fff61316390 [ 939.534676][ T32] [ 939.534842][ T32] [ 939.534842][ T32] Showing all locks held in the system: [ 939.534854][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 939.534868][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 939.534923][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 939.534936][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 939.535019][ T32] locks held by kworker/u8:7/1005: 3, last CPU#0: [ 939.535033][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535088][ T32] #1: ffffc90004f77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535143][ T32] #2: ffff888020713258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 939.535208][ T32] locks held by kworker/u8:9/1101: 3, last CPU#0: [ 939.535222][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535275][ T32] #1: ffffc90005207c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535330][ T32] #2: ffff888033ae7258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 939.535392][ T32] locks held by kworker/u8:11/1168: 3, last CPU#0: [ 939.535406][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535464][ T32] #1: ffffc90005547c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535520][ T32] #2: ffff88807af6b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 939.535602][ T32] locks held by syz-executor/5599: 3, on CPU#0: [ 939.535615][ T32] #0: ffff8880752c91c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 939.535672][ T32] #1: ffff88803417c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 939.535730][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.535789][ T32] locks held by kworker/u8:4/14027: 4, on CPU#0: [ 939.535803][ T32] #0: ffff8880202f6940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.535857][ T32] #1: ffffc9000462fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.650310][ T32] #2: ffff88803417c0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 939.650380][ T32] #3: ffff88803417ac98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 939.650441][ T32] locks held by getty/18681: 2, on CPU#0: [ 939.650455][ T32] #0: ffff8880297140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 939.650518][ T32] #1: ffffc900046532e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 939.650577][ T32] locks held by kworker/u8:10/22317: 4, last CPU#0: [ 939.650591][ T32] #0: ffff88803220d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.650646][ T32] #1: ffffc90005a47c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 939.650701][ T32] #2: ffff888051a659c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 939.650749][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0 [ 939.650799][ T32] locks held by syz.9.6464/23313: 3, on CPU#0: [ 939.650812][ T32] #0: ffff88807562c6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 939.650869][ T32] #1: ffff88803417c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 939.650926][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.705379][ T32] locks held by syz.5.6472/23332: 3, on CPU#0: [ 939.705395][ T32] #0: ffff888030d3e088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 939.705453][ T32] #1: ffff88803417c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 939.705521][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.705576][ T32] locks held by syz.4.6473/23334: 3, on CPU#0: [ 939.705589][ T32] #0: ffff88807b5081c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 939.705645][ T32] #1: ffff88803417c558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 939.705701][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.705755][ T32] locks held by syz.8.6474/23335: 3, on CPU#0: [ 939.705769][ T32] #0: ffff88802b61dcf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 939.705818][ T32] #1: ffff88803417c460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 939.705875][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.705930][ T32] locks held by syz.0.6475/23337: 3, on CPU#0: [ 939.705943][ T32] #0: ffff88802b61f678 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 939.706016][ T32] #1: ffff88803417c460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 939.755093][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.755159][ T32] locks held by syz.6.6476/23338: 3, on CPU#0: [ 939.755173][ T32] #0: ffff888012169078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 939.755224][ T32] #1: ffff88803417c460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 939.822858][ T32] #2: ffff888034178938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 939.822929][ T32] [ 939.822935][ T32] ============================================= [ 939.822935][ T32] [ 939.822944][ T32] NMI backtrace for cpu 0 [ 939.822964][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 939.822990][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 939.822999][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 939.823011][ T32] Call Trace: [ 939.823020][ T32] [ 939.823029][ T32] dump_stack_lvl+0xe8/0x150 [ 939.823059][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 939.823089][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 939.823123][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 939.823155][ T32] sys_info+0x135/0x170 [ 939.823180][ T32] watchdog+0xfd7/0x1030 [ 939.823208][ T32] ? watchdog+0x1c7/0x1030 [ 939.823235][ T32] kthread+0x38b/0x480 [ 939.823255][ T32] ? __pfx_watchdog+0x10/0x10 [ 939.823272][ T32] ? __pfx_kthread+0x10/0x10 [ 939.823293][ T32] ret_from_fork+0x514/0xb70 [ 939.823315][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 939.823333][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.823356][ T32] ? __switch_to+0xc89/0x1420 [ 939.823386][ T32] ? __pfx_kthread+0x10/0x10 [ 939.823406][ T32] ret_from_fork_asm+0x1a/0x30 [ 939.823451][ T32] [ 939.823487][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 942.998734][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 943.009397][ T32] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 943.015524][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 943.025559][ T32] Call Trace: [ 943.028819][ T32] [ 943.031733][ T32] vpanic+0x56d/0xa60 [ 943.035716][ T32] ? __pfx_vpanic+0x10/0x10 [ 943.040207][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.045829][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 943.051365][ T32] panic+0xc5/0xd0 [ 943.055077][ T32] ? __pfx_panic+0x10/0x10 [ 943.059485][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.065105][ T32] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 943.070211][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 943.076360][ T32] watchdog+0x1030/0x1030 [ 943.080681][ T32] ? watchdog+0x1c7/0x1030 [ 943.085086][ T32] kthread+0x38b/0x480 [ 943.089136][ T32] ? __pfx_watchdog+0x10/0x10 [ 943.093794][ T32] ? __pfx_kthread+0x10/0x10 [ 943.098370][ T32] ret_from_fork+0x514/0xb70 [ 943.102944][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 943.108060][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.113677][ T32] ? __switch_to+0xc89/0x1420 [ 943.118346][ T32] ? __pfx_kthread+0x10/0x10 [ 943.122922][ T32] ret_from_fork_asm+0x1a/0x30 [ 943.127694][ T32] [ 943.130733][ T32] Kernel Offset: disabled [ 943.135036][ T32] Rebooting in 86400 seconds..