last executing test programs: 1m40.235646419s ago: executing program 4 (id=24): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000009c0)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x8040) setuid(0xee01) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) 1m40.174841065s ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000f80)='./proc_mnt\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000001040)={'#! ', './proc_mnt/irq/1/smp_affinity', [{0x20, '\x15@\x10\xe8P\x91@,000000\x00'}]}, 0x31) 1m40.069604976s ago: executing program 4 (id=26): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @remote, @broadcast, @local}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m39.899006524s ago: executing program 4 (id=27): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m39.748428419s ago: executing program 2 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f0000005ac0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000005bc0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1m39.555179999s ago: executing program 2 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r2, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffff801, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}, 0x1, 0x0, 0x0, 0x24000861}, 0x4040000) 1m39.474719297s ago: executing program 2 (id=34): r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001b440)=""/102385, 0x18ff1, 0x8) 1m39.404704775s ago: executing program 4 (id=35): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f0100000000060000000006241a050000152412"], 0x0) 1m38.590820368s ago: executing program 4 (id=45): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0xe229) 1m38.569379301s ago: executing program 2 (id=46): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m38.38128944s ago: executing program 32 (id=45): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0xe229) 1m38.231689595s ago: executing program 2 (id=51): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, 0x0) 1m36.999616772s ago: executing program 2 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x40000103, 0x0, 0x7}, {0x40000081, 0x0, 0x6}]}) 1m36.895550702s ago: executing program 33 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x40000103, 0x0, 0x7}, {0x40000081, 0x0, 0x6}]}) 12.575545208s ago: executing program 5 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 12.025469015s ago: executing program 5 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 11.845638083s ago: executing program 5 (id=1140): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc31, &(0x7f0000001ec0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbckmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qzrPwA8Vq759z8AAAAAAAAAAAAAABx0KYp4MlLMXllNY9Xzjvrldt/tO6NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebk9/QP377bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5O73sNe6291sjoAjVuv3564cWO+cfb5c5tevjPwfv8TxwcuDj576plu2dGh4eGRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE6NBw1ZGpdmt6oXzxavdAFBGNnkrN7jHafiyi1vdA+7CzZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv/du+uLImqR4jvHVtP1iDjUPQ5frCYG79yOYh/7uAtlOxt9EUvFIzBmB1h/FPFqpPjZOydiPJ9nqnPNFyJeLfMHEW+V+VJEKj8Y5yPe2+ZzxKOpFkX8ZTn+F1fTRHU+6J5XLn+t8ZXpGzM9ZbvnlY94fbjrTPGQrg9HtuSDccDPTfUoolWd8VfTvX+zAwAAAAAAAAAAAAAAAMD9diSK+EykeOU//qSaVxzVvPRjFwf/cOBXe+eMP/0h+ynLPh8Ri8Xu5uQezhMDr6arKT3kucSPs3oU8ad5/t+3HnZjAAAAAAAAAAAAAAAAAAAAHmtF/CRSvPjuibQUvWuKt6dvNq61rk91VoXtrv1brZlei1hbW1trpE42c47lXMy5lHM550rOKHL9nM2cYzkXcy7lXM65kjMdyvVzNnOO5VzMuZRzOedKzvX252zmHMu5mHMp53LOlZxxQNbuBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4OCmiiF9Eim9/YzVFiohmxFh0crn/YbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACj1pyK+Hykaf9Rc31aLiFT933Gi/ON8NA+X+cloDpb5UjQv5WxVWWt+6yG0n73pS0X8OFL0199eH/A8/n2dZ+sfg3jrmxvPPlvr5KHuiwPv9z9x/NjFweHfeHqnx2m7Bpy83J6+facxOjQ8PNKzuZbf/ZM92wby+xb3p+tExPwbb77empqanLv3B+VHYA/VH6EHqfa49NSD6kHUDkQzHk7feQyU1//3IsXvvvuf3Qt+5/pfj1/pPFu/wsfP/2zj+v/i1h3t8vpf21ovX//La/p21/8ne7a9mL8b6atF1BduzfYdj6jPv/Hmqfat1s3Jm5PT50+f/vLg4JfPne47HFG/0Z6a7Hl0Xw4XAAAAAAAAAAAAAAAAwIOTivj9SNH68WpqRMSdar7WwMXBZ089cygOVfOtNs3bfm3k2qXGyzO3Zucm5+cnJxqj0+3xmYnJ3b5dvZruNTo0vC+d+VBH9rn9R+ovz8y+Mde++ccL275+tH7p+vzCXGt8+5fjSBQRzd4tJ6sGjw4NV42earemq6pXt51M/9H1pSL+K1KMn2+kz+dtef7/1hn+m+b/L27d0T7N//9Ez7byPVMq4ueR4nf+6un4fNXOo3HXMcvl/i5SnLzwuVwuDpflum3o3FegMzOwLPt/keKffrG5bHc+5JMbZc/s+sA+IsrxPxYpvv8X343fzNs23/9h+/E/unVH+zT+T/VsO7rpfgV77jp5/E9FipeefDt+K2/7oPt/dO+9cSIXXr8/xz6N/6d6tg3k9/3t+9N1AAAAAAAAAACAR1pfKuLvI8UPh2vphbxtN7//N7F1R/v0+1+f7tk2cX/WK/rQB3s+qAAAAABwQPSlIn4SKW4uvL0+h3rz/O+e+Z+/tzH/cyhtebX6Od+vVfcNuJ8//+s1kN93bO/dBgAAAAAAAAAAAAAAAAAAgAMlpSJeyOupj1Xz+Sd2XE99OVK88j/P5XLpeFmuuw78QPVn/crM9KlLU1Mz462F1vWpycbIbGt8sqz7VKRY/dvP5bpFtb56d735zhrvG2uxz0WK4X/olu2sxd5dm/ypjbJnyrKfiBT//Y+by3bXsf7URtmzZdm/iRRf/5ftyx7fKHuuLPvdSPGjrze6ZY+WZbv3R/30Rtnnx2eKfRgVAAAAAAAAAAAAAAAAAAAAHjd9qYg/jxT/e2tpfS5/Xv+/r+dp5a1v9qz3v8Wdap3/gWr9/50e38v6/9V9BRZ3elcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4SlHEm5Fi9spqWu4vn3fUL7enb98ZHRrevtqRVNU8VJUvv+pnzp47/6UXBi9084Pr32+fiddGrl1qvDxza3Zucn5+cqIxOt0en5mY3PUe9lp/q5PVAWjcev32xI0b842zz5/b9PKdgff7nzg+cHHw2VPPdMuODg0Pj/SUqfXd87vfJe2w/XAU8deR4rnv/TT9sD+iiL0fiw/57Oy3I1UnTladGB0arjoy1W5NL5QvXu0eiCKi0VOpWR6jtDFu+zkWe9KMWCybXzb4ZNm9kdnWXOv61GTjamtuob3Qnpm+mjqtLbvTiCIupIiliFjpv3t3fVHE65HiO8dW07/2Rxzqfla+eGXkq6fP7tyOYh/7uAtlOxt9EUvFIzBmB1h/FPHPkeJn75yIf+uPqEXnK74Q8WqZP4h4KzrjXf39OB/x3jafIx5NtSji/8vxv7ia3ukvzwfd88rlrzW+Mn1jpqds97zyyF8fHqQDfm6qRxE/qs74q+nf/b0GAAAAAAAAAAAAAAAAOECK+PVI8eK7J1I1P3h9TnF7+mbjWuv6VGdaX3fuX3fO9Nra2lojdbKZcyznYs6lnMs5V3JGkevnbJZZX1sby88Xcy7lXM65kjMO5fo5mznHci7mXMq5nHMlZ9Ry/ZzNnGM5F3Mu5VzOuZIzDsjcPQAAAAAAAAAAAAAAAAAA4OOlqP5L8e1vrKa1/s760mPRyWXrgX7s/TIAAP//YSD4sQ==") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f00000010c0), &(0x7f0000001100)='.\x00', 0x820f8, &(0x7f0000001140)=ANY=[], 0x0, 0x0, &(0x7f0000001180)) renameat2(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000016c0)='./bus\x00', 0x0) 11.180963182s ago: executing program 5 (id=1150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x33) 1.700756616s ago: executing program 0 (id=1283): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x26, 0x0, 0x8}, 0x28) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$eJzs3cFOE08cB/DfQqGF/z+Rm4mJyRoPeiJqfACM0cRIYoLpQW8kcmLjgV5aLvAYvoLv5QMYTlzMGNwuC21dSJWWms/nwo/5ziw7O2R3L52mKH27+yU6nSyWtmIrTrPYiKWoHMeo1lgLALA4TlOK7yml9ZTS5B7PG0Z7DwCARVQ9/9Nvn//xY8anBADcsPcfPr59sd2OnTzvRJwc97v9bvmzzF+/2X71JP9loxrzX5z0+93l8/xpPvrucJavxPowf1aOz8/j1Yjorsbjh2V+lr18t51fHt+OTzc+ewAAAAAAAAAAAAAAAAAAAAAAmI/7kVc26tZ6f5/NzdF8bZiXv13YH2hk/55W3Ku2B663B0pHs5gUAAAAAAAAAAAAAAAAAAAALJje4HB/tyj2DuqiHREXW1p1lLLL0YQiGx64qc8tKpZiuuFrw2leo/PnkZZseImaR7X+8BquTV7c6xTRui2rM22R/4XjpDu7RdGulnmsTzT/A6R0VkxewWpbjEtR5PV6rUZE8xk+2pl2XqcppeLrg4PeIFJj5/oe0Z7FjQgAAAAAAAAAAAAAAAAAALjwEfHxrLM8jzMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNnrDQ6rb/k/3N8tir0sBmVx0LuyOIqI/+PKztXfWonO/CYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+1nAAAA//8zfBSj") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.66273483s ago: executing program 3 (id=1285): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x208088, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf241b00000008009a000000000007002100"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040080) 1.483154518s ago: executing program 0 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003040)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1.404568196s ago: executing program 3 (id=1289): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 1.251099202s ago: executing program 0 (id=1292): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='()', 0x2) 1.250835142s ago: executing program 3 (id=1293): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) 1.150682192s ago: executing program 3 (id=1296): r0 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:h\xc2\xb9x <\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r0, 0x2000000) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x1, 0x3, 0x1) 1.110046426s ago: executing program 0 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 1.092141668s ago: executing program 3 (id=1298): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0={0xfc, 0x0, '\x00', 0x2}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0xff}, &(0x7f0000000340)=0x8) 1.07451519s ago: executing program 1 (id=1299): setns(0xc9, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @val={0xc, 0x99, {0xa00000, 0x74}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 975.40626ms ago: executing program 1 (id=1301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='20', 0x2) 955.400802ms ago: executing program 6 (id=1302): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[], 0x1, 0x1d8, &(0x7f0000000580)="$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") r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69) 890.777199ms ago: executing program 0 (id=1303): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000005d40)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x8009}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x1, 0xc6d, &(0x7f0000001980)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 882.00332ms ago: executing program 1 (id=1304): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 872.190101ms ago: executing program 3 (id=1305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x56a6a000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x3}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) 751.114383ms ago: executing program 1 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) 750.374574ms ago: executing program 6 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 555.021403ms ago: executing program 1 (id=1308): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xf, r0, 0x4000000000000001, &(0x7f0000000180)) 533.748425ms ago: executing program 6 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add syz0 127.0.0.1+7', 0x14) 484.193191ms ago: executing program 0 (id=1310): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x158, &(0x7f0000000240)="$eJzs2z1OMlEUxvHnAi/w4heKWhgLEwttZPiIJHa6FAIjIQ5qxAZioStwDe7MBWhhZ+U1TgAT+ZhEIjfK/9dwkoebOVOcmdOMAMytY+3IyMhaa7Wdzt7njOuWAMyI7f2+WQDzJ/7qugMAbjyfSI+Snl5uaoonh/aDj/y2n8dSw/mdtJXo5Sat/1/3iwdpr3/eZEaezwzyhZH5/m7/+ota0rJWlNWq1pTr5fXB+c0pNiEAAOaHUT4qn/iHmE6bgV8Ym/8L8+LYPBnmpYi8PDZPhXm+dhHUJ7UJYITYlPMfj5j/RMT8A3Cn3emeVYPAv6KgoKAYFK6fTAB+mnfduvTane5Bs1Vt+A3/vFQoHFUOy8VKyQs3e2/yfg/g9/p86bvuBAAAAAAAAAAAAAAAfNe6Nly3AAAAAGBGZvE5ket7BAAAAAAAAAAAAAAAAADgr3kPAAD//2QXJhI=") r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 443.235815ms ago: executing program 1 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x33, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080029"], 0x0) 352.701104ms ago: executing program 6 (id=1312): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 293.71758ms ago: executing program 5 (id=1313): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="47b7", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001580)={0x0, 0xa843, 0x6, "43e3d1310622"}, 0xe) 136.985496ms ago: executing program 6 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 133.780027ms ago: executing program 5 (id=1315): mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='mnt/ttyUSB0\x00', 0x44002, 0x0) 0s ago: executing program 6 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xc, 0xfff1}, {}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x13, 0x19}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x4c}}, 0x4008000) kernel console output (not intermixed with test programs): been corrected to 255 [ 74.962669][ T4446] hfsplus: invalid length 256 has been corrected to 255 [ 75.074938][ T4452] loop1: detected capacity change from 0 to 1024 [ 75.215647][ T4432] loop3: detected capacity change from 0 to 32768 [ 75.225460][ T4452] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.415733][ T4432] JBD2: Ignoring recovery information on journal [ 75.585113][ T4432] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 75.617690][ T4191] syz-executor (4191) used greatest stack depth: 20464 bytes left [ 75.787237][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 75.917362][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 75.928433][ T4476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 76.001187][ T4476] System zones: 1-12 [ 76.012156][ T4476] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.59: missing EA_INODE flag [ 76.031780][ T4476] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.59: error while reading EA inode 12 err=-117 [ 76.047642][ T4476] EXT4-fs (loop1): 1 orphan inode deleted [ 76.053422][ T4476] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 76.124771][ T4476] fscrypt (loop1, inode 15): Mutually exclusive encryption flags (0x1a) [ 76.351008][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.378603][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.393819][ T4440] device bridge_slave_0 entered promiscuous mode [ 76.405651][ T4490] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.461096][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.485822][ T4490] EXT4-fs (loop3): 1 truncate cleaned up [ 76.491811][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.499193][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 76.548467][ T4440] device bridge_slave_1 entered promiscuous mode [ 76.558009][ T4485] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.583529][ T26] audit: type=1800 audit(1793442125.291:2): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 76.692664][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.735074][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 76.745589][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.900996][ T4440] team0: Port device team_slave_0 added [ 76.927608][ T4440] team0: Port device team_slave_1 added [ 76.930163][ T1328] kernel read not supported for file /rfkill (pid: 1328 comm: kworker/0:3) [ 77.016631][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.023806][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.109578][ T26] audit: type=1326 audit(1793442125.821:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4515 comm="syz.1.70" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f018099e559 code=0x0 [ 77.157638][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.197234][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.210298][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.283801][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.404737][ T4440] device hsr_slave_0 entered promiscuous mode [ 77.413345][ T4440] device hsr_slave_1 entered promiscuous mode [ 77.421368][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.429969][ T4440] Cannot create hsr debugfs directory [ 77.621779][ T4535] set_capacity_and_notify: 3 callbacks suppressed [ 77.621801][ T4535] loop0: detected capacity change from 0 to 1024 [ 77.699428][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 77.917646][ T4317] hfsplus: b-tree write err: -5, ino 3 [ 77.973038][ T4297] device hsr_slave_0 left promiscuous mode [ 77.980093][ T4297] device hsr_slave_1 left promiscuous mode [ 77.989297][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.041136][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.052651][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.061615][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.070528][ T4297] device bridge_slave_1 left promiscuous mode [ 78.078220][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.101311][ T4297] device bridge_slave_0 left promiscuous mode [ 78.117005][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.138325][ T4544] serial 00:03: in use; can't configure [ 78.153775][ T4297] device veth1_macvtap left promiscuous mode [ 78.160712][ T4297] device veth0_macvtap left promiscuous mode [ 78.169935][ T4297] device veth1_vlan left promiscuous mode [ 78.176468][ T4297] device veth0_vlan left promiscuous mode [ 78.254202][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 78.434786][ T4555] loop1: detected capacity change from 0 to 256 [ 78.499007][ T4555] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 78.799693][ T26] audit: type=1400 audit(1793442127.511:4): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=4566 comm="syz.1.88" name="p" offset=92 [ 78.814122][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 78.917094][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 78.960662][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 78.991922][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.021721][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.062577][ T4573] loop1: detected capacity change from 0 to 22 [ 79.107311][ T4573] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 79.151712][ T4573] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 79.220653][ T4297] bond0 (unregistering): Released all slaves [ 79.536118][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.543241][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.560187][ T4485] device bridge_slave_0 entered promiscuous mode [ 79.614959][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.651846][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.660278][ T4485] device bridge_slave_1 entered promiscuous mode [ 79.669746][ T4440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.715693][ T4440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.764267][ T4440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.765446][ T4600] loop0: detected capacity change from 0 to 2048 [ 79.800615][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.824532][ T4440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.837666][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.861348][ T4600] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 79.903576][ T4600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.990760][ T4485] team0: Port device team_slave_0 added [ 80.037489][ T4485] team0: Port device team_slave_1 added [ 80.123654][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.146219][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.153525][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.214500][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.332128][ T4616] loop0: detected capacity change from 0 to 512 [ 80.333944][ T4178] Bluetooth: hci1: command 0x041b tx timeout [ 80.342993][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.362421][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.405350][ T4616] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 80.423589][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.446021][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.453014][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.554737][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.585222][ T4616] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 80.621173][ T4616] System zones: 0-2, 18-18, 34-35 [ 80.729203][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.745247][ T4616] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 80.775086][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.784107][ T4616] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.796963][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.804124][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.852664][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.884530][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.894118][ T4178] Bluetooth: hci0: command 0x040f tx timeout [ 80.924446][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.931611][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.986094][ T26] audit: type=1800 audit(1793442129.701:5): pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.112" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 81.007355][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.050131][ T1328] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.058457][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.083393][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.152186][ T4485] device hsr_slave_0 entered promiscuous mode [ 81.185596][ T4485] device hsr_slave_1 entered promiscuous mode [ 81.213140][ T4485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.247673][ T4485] Cannot create hsr debugfs directory [ 81.287062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.316572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.351164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.389495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.427020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.453371][ T4647] loop1: detected capacity change from 0 to 2048 [ 81.471562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.527414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.532665][ T4647] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 81.544885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.553785][ T4272] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.580337][ T4647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.613707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.659130][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.914469][ T4272] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 81.923492][ T4272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.995528][ T4272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.014481][ T4661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 82.029644][ T4272] usb 1-1: config 1 has no interface number 0 [ 82.054182][ T4272] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 82.124012][ T4272] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 82.166325][ T4485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.206593][ T4485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.265804][ T4485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.283414][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.301557][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.322427][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.330263][ T4272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.345196][ T4485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.364008][ T4272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.372244][ T4272] usb 1-1: Product: syz [ 82.400113][ T4272] usb 1-1: Manufacturer: syz [ 82.406205][ T4272] usb 1-1: SerialNumber: syz [ 82.448809][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 82.493204][ T4272] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 82.514401][ T4272] cdc_ncm 1-1:1.1: bind() failure [ 82.712463][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.761823][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.785368][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.787194][ T4278] usb 1-1: USB disconnect, device number 2 [ 82.811361][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.862994][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.882669][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.907834][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.915090][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.956718][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.973796][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.982326][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 82.997303][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.023693][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.030867][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.051746][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.086838][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.115449][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.144866][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.195823][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.213268][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.237906][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.250627][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.260861][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.270260][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.283092][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.299917][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.324773][ T4440] device veth0_vlan entered promiscuous mode [ 83.341724][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.352697][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.373133][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.390797][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.401490][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.421487][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.435528][ T4440] device veth1_vlan entered promiscuous mode [ 83.500555][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.516119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.532764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.543008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.568152][ T4440] device veth0_macvtap entered promiscuous mode [ 83.576427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.609556][ T4440] device veth1_macvtap entered promiscuous mode [ 83.693557][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.723950][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.733818][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.756895][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.768231][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.781820][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.792114][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.803048][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.816177][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.837299][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.847042][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.857872][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.870214][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.880449][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.891481][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.901840][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.912610][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.922562][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.933460][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.948405][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.963498][ T4440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.973402][ T4440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.984379][ T4440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993192][ T4440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003805][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.012960][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.022129][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.029816][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.043619][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.090888][ T4297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.168386][ T4297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.209598][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.234614][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.242909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.274266][ T4297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.355214][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.372348][ T4297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.380722][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.409964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.494709][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 84.538111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.574948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.671699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.703766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.755199][ T4485] device veth0_vlan entered promiscuous mode [ 84.789011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.834371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.834735][ T4735] netlink: 56 bytes leftover after parsing attributes in process `syz.3.117'. [ 84.859685][ T4485] device veth1_vlan entered promiscuous mode [ 85.014539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.032797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.073747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.103970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.133152][ T4485] device veth0_macvtap entered promiscuous mode [ 85.157092][ T4741] loop1: detected capacity change from 0 to 1024 [ 85.164365][ T4744] loop3: detected capacity change from 0 to 256 [ 85.170535][ T4485] device veth1_macvtap entered promiscuous mode [ 85.217929][ T4744] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 85.233542][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.294710][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.317279][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.374594][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.386999][ T4744] exFAT-fs (loop3): error, invalid size(size(32) > aligned(9223372036854777344) [ 85.386999][ T4744] [ 85.398727][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.420779][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.423277][ T4744] exFAT-fs (loop3): Filesystem has been set read-only [ 85.441240][ T4746] loop5: detected capacity change from 0 to 128 [ 85.447768][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.460965][ T4747] exFAT-fs (loop3): error, invalid size(size(32) > aligned(9223372036854777344) [ 85.460965][ T4747] [ 85.510431][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.548982][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.591292][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.609812][ T4718] loop0: detected capacity change from 0 to 40427 [ 85.620376][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.664046][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.691200][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.692821][ T4749] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 85.710114][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.775463][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.787523][ T4718] F2FS-fs (loop0): invalid crc value [ 85.813698][ T4718] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.833413][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.857360][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.867962][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.880277][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.928263][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.932926][ T1241] rtrs_client L1777: : Resolving route failed, err: -19 [ 85.966726][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.054827][ T4749] rtrs_client L2622: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 86.083432][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.095284][ T4718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.119276][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.138302][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.154670][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.182792][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.198616][ T4752] netlink: 'syz.5.127': attribute type 3 has an invalid length. [ 86.262880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.284648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.311706][ T4485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.322102][ T4718] attempt to access beyond end of device [ 86.322102][ T4718] loop0: rw=2049, want=77960, limit=40427 [ 86.347485][ T4485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.373898][ T4485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.382777][ T4485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.486448][ T4194] attempt to access beyond end of device [ 86.486448][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 86.599982][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.623880][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.671576][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.722634][ T4768] block nbd5: NBD_DISCONNECT [ 86.738638][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.773200][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.807945][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.976970][ T1112] cfg80211: failed to load regulatory.db [ 87.015027][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.60'. [ 87.049104][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.60'. [ 87.278327][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.139'. [ 87.450177][ T4796] loop7: detected capacity change from 0 to 7 [ 87.508259][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.519591][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.528662][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.539637][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.595393][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.606385][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.681690][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.692671][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.727914][ T4297] device hsr_slave_0 left promiscuous mode [ 87.741870][ T4297] device hsr_slave_1 left promiscuous mode [ 87.762711][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.773877][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.787139][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.792228][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.804061][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.805652][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.823076][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.835298][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.846474][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.855105][ T4347] ldm_validate_partition_table(): Disk read failed. [ 87.866709][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.884246][ T4297] device bridge_slave_1 left promiscuous mode [ 87.891625][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.902643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.914574][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.925653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.934195][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.949212][ T4297] device bridge_slave_0 left promiscuous mode [ 87.957487][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.964932][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.975939][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.986688][ T4347] Dev loop7: unable to read RDB block 0 [ 87.996012][ T4297] device veth1_macvtap left promiscuous mode [ 88.007831][ T4297] device veth0_macvtap left promiscuous mode [ 88.022035][ T4297] device veth1_vlan left promiscuous mode [ 88.028195][ T4297] device veth0_vlan left promiscuous mode [ 88.032187][ T4347] loop7: unable to read partition table [ 88.040064][ T4347] loop7: partition table beyond EOD, truncated [ 88.087674][ T4796] ldm_validate_partition_table(): Disk read failed. [ 88.100663][ T4796] Dev loop7: unable to read RDB block 0 [ 88.164362][ T4796] loop7: unable to read partition table [ 88.170906][ T4796] loop7: partition table beyond EOD, truncated [ 88.202385][ T4796] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 88.609543][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 88.631420][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 88.646576][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.667893][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.747314][ T4297] bond0 (unregistering): Released all slaves [ 88.852879][ T4829] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.354163][ T4178] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.545733][ T4870] block device autoloading is deprecated and will be removed. [ 89.572297][ T4877] device erspan0 entered promiscuous mode [ 89.606112][ T4178] usb 4-1: Using ep0 maxpacket: 32 [ 89.644110][ T1112] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 89.682586][ T4882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'. [ 89.734268][ T4178] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 89.754755][ T4178] usb 4-1: config 0 has no interface number 0 [ 89.846732][ T4890] loop0: detected capacity change from 0 to 1024 [ 89.910067][ T4890] EXT4-fs (loop0): Ignoring removed bh option [ 89.914874][ T4178] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 89.955222][ T4178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.973727][ T4890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 90.014477][ T1112] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 90.023579][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.040797][ T4178] usb 4-1: Product: syz [ 90.053659][ T4890] System zones: 0-1, 3-12 [ 90.078434][ T4178] usb 4-1: Manufacturer: syz [ 90.111349][ T4178] usb 4-1: SerialNumber: syz [ 90.134723][ T1112] usb 7-1: config 0 descriptor?? [ 90.151581][ T4178] usb 4-1: config 0 descriptor?? [ 90.155694][ T4890] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.174: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.199961][ T1112] cp210x 7-1:0.0: cp210x converter detected [ 90.208424][ T4178] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.231343][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 90.267796][ T4890] Quota error (device loop0): write_blk: dquota write failed [ 90.304012][ T4890] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 90.324160][ T4890] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.174: Failed to acquire dquot type 0 [ 90.349717][ T26] audit: type=1400 audit(1793442139.061:6): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=4901 comm="syz.5.178" name="//o" offset=35 [ 90.376389][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 90.395295][ T4890] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.174: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.418593][ T4845] udc-core: couldn't find an available UDC or it's busy [ 90.453775][ T4845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.495790][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 90.512190][ T4178] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.517760][ T4890] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.174: Invalid inode bitmap blk 0 in block_group 0 [ 90.554264][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 90.559648][ T4178] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.571160][ T4890] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 90.592571][ T145] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.624253][ T4890] EXT4-fs (loop0): Remounting filesystem read-only [ 90.624534][ T1112] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 90.631055][ T4890] EXT4-fs (loop0): 1 orphan inode deleted [ 90.695482][ T4890] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback. [ 90.723004][ T145] EXT4-fs (loop0): Remounting filesystem read-only [ 90.746708][ T1112] usb 7-1: cp210x converter now attached to ttyUSB2 [ 90.787712][ T145] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 90.804147][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.822080][ T145] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 90.869042][ T145] EXT4-fs (loop0): Remounting filesystem read-only [ 90.943809][ T1112] usb 7-1: USB disconnect, device number 2 [ 90.973983][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.003163][ T1112] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 91.026136][ T1112] cp210x 7-1:0.0: device disconnected [ 91.037393][ T4201] usb 4-1: USB disconnect, device number 2 [ 91.103230][ T4201] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.169699][ T4201] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.203591][ T4201] quatech2 4-1:0.51: device disconnected [ 91.224214][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.252727][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.274423][ T4318] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 91.302950][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.333532][ T4318] usb 2-1: config 0 descriptor?? [ 91.562823][ T4938] loop6: detected capacity change from 0 to 64 [ 91.861048][ T4318] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.885303][ T4956] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 91.895275][ T4318] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.911327][ T4318] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.931789][ T4951] loop5: detected capacity change from 0 to 2048 [ 91.958745][ T4318] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 91.995192][ T4318] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 92.012109][ T4951] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.055859][ T4318] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 92.074556][ T4410] udevd[4410]: incorrect nilfs2 checksum on /dev/loop5 [ 92.100263][ T4964] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.204482][ T4318] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 0 [ 92.219450][ T4318] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 92.244342][ T4951] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 92.248790][ T4318] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 92.266105][ T4971] loop6: detected capacity change from 0 to 512 [ 92.310404][ T4318] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 92.330731][ T4971] FAT-fs (loop6): Directory bread(block 199916) failed [ 92.331039][ T4951] Remounting filesystem read-only [ 92.360813][ T4318] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 92.372834][ T4971] FAT-fs (loop6): Directory bread(block 199917) failed [ 92.415653][ T4318] usb 2-1: USB disconnect, device number 2 [ 92.422770][ T4971] FAT-fs (loop6): Directory bread(block 199918) failed [ 92.472374][ T4971] FAT-fs (loop6): Directory bread(block 199919) failed [ 92.489209][ T4978] loop0: detected capacity change from 0 to 1024 [ 92.538804][ T4971] FAT-fs (loop6): Directory bread(block 199920) failed [ 92.563399][ T4978] EXT4-fs (loop0): Ignoring removed bh option [ 92.588240][ T4971] FAT-fs (loop6): Directory bread(block 199921) failed [ 92.626264][ T4971] FAT-fs (loop6): Directory bread(block 199922) failed [ 92.645311][ T4971] FAT-fs (loop6): Directory bread(block 199923) failed [ 92.652637][ T4977] fido_id[4977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.736756][ T4978] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resuid=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 92.839356][ T4978] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.274097][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 93.309586][ T5009] loop0: detected capacity change from 0 to 1024 [ 93.367322][ T5009] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 93.478673][ T5009] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 93.529310][ T5020] netlink: 1 bytes leftover after parsing attributes in process `syz.3.213'. [ 93.546636][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 93.682330][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 93.697215][ T13] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.715872][ T13] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.924281][ T13] usb 7-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 93.946656][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.968625][ T13] usb 7-1: Product: syz [ 93.984273][ T13] usb 7-1: Manufacturer: syz [ 93.989010][ T13] usb 7-1: SerialNumber: syz [ 94.016361][ T13] usb 7-1: config 0 descriptor?? [ 94.085465][ T13] qmi_wwan: probe of 7-1:0.0 failed with error -22 [ 94.094169][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 94.338756][ T4996] loop6: detected capacity change from 0 to 8 [ 94.485854][ T4996] SQUASHFS error: lzo decompression failed, data probably corrupt [ 94.504016][ T4996] SQUASHFS error: Failed to read block 0x91: -5 [ 94.510331][ T4996] SQUASHFS error: Unable to read metadata cache entry [8f] [ 94.560230][ T4996] SQUASHFS error: Unable to read inode 0x11f [ 94.560437][ T5030] loop5: detected capacity change from 0 to 32768 [ 94.692646][ T5030] JBD2: Ignoring recovery information on journal [ 94.721833][ T4278] usb 7-1: USB disconnect, device number 3 [ 94.744710][ T5030] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 94.768785][ T5054] mmap: syz.1.226 (5054) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 94.814623][ T5030] JBD2: bad block at offset 32 [ 94.883540][ T5030] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 95.087788][ T4440] ocfs2: Unmounting device (7,5) on (node local) [ 95.138304][ T5085] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.277627][ T5089] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.237'. [ 95.685711][ T5116] vhci_hcd: not connected 4 [ 96.119467][ T5128] loop3: detected capacity change from 0 to 4096 [ 96.591642][ T5104] loop6: detected capacity change from 0 to 32768 [ 96.685957][ T5153] kAFS: Invalid Command on /proc/fs/afs/cells file [ 96.775374][ T5164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.260'. [ 96.842603][ T5104] XFS (loop6): Mounting V5 Filesystem [ 96.968210][ T5137] loop5: detected capacity change from 0 to 32768 [ 96.980833][ T5104] XFS (loop6): Ending clean mount [ 97.123107][ T5137] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 97.217678][ T5137] (syz.5.253,5137,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 97.311655][ T5137] (syz.5.253,5137,0):ocfs2_prepare_dir_for_insert:4372 ERROR: status = -2 [ 97.328425][ T5137] (syz.5.253,5137,0):ocfs2_mknod:299 ERROR: status = -2 [ 97.349410][ T5137] (syz.5.253,5137,0):ocfs2_mknod:504 ERROR: status = -2 [ 97.353186][ T4485] XFS (loop6): Unmounting Filesystem [ 97.364013][ T5137] (syz.5.253,5137,0):ocfs2_create:678 ERROR: status = -2 [ 97.543693][ T4440] ocfs2: Unmounting device (7,5) on (node local) [ 97.902681][ T5208] device-mapper: ioctl: Geometry exceeds range limits. [ 98.367859][ T5236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.280'. [ 98.493744][ T5245] netlink: 25 bytes leftover after parsing attributes in process `syz.1.283'. [ 98.559175][ T5245] device eql entered promiscuous mode [ 98.612248][ T5245] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.283'. [ 98.615332][ T5215] loop5: detected capacity change from 0 to 40427 [ 98.623165][ T5245] 0ªX¹¦Dö»: renamed from eql [ 98.652772][ T5245] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 98.663788][ T5250] loop3: detected capacity change from 0 to 128 [ 98.676332][ T5245] device 00ªX¹¦Dö» left promiscuous mode [ 98.682745][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 98.698710][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 98.715921][ T5250] EXT4-fs (loop3): Ignoring removed orlov option [ 98.731093][ T5215] F2FS-fs (loop5): invalid crc value [ 98.787452][ T5215] F2FS-fs (loop5): Found nat_bits in checkpoint [ 98.822376][ T5250] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 98.846466][ T5250] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.875850][ T5215] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 98.912757][ T5215] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 98.994744][ T5250] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz.3.284: No space for directory leaf checksum. Please run e2fsck -D. [ 99.037249][ T26] audit: type=1800 audit(1793442147.751:7): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.274" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 99.068118][ T5250] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #11: comm syz.3.284: checksumming directory block 0 [ 99.100338][ T4440] attempt to access beyond end of device [ 99.100338][ T4440] loop5: rw=2049, want=45104, limit=40427 [ 99.164170][ T4278] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.359971][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.294'. [ 99.534307][ T4278] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 99.564166][ T4278] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 99.744307][ T4278] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 99.753432][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.798127][ T4278] usb 2-1: Product: syz [ 99.802606][ T4278] usb 2-1: Manufacturer: syz [ 99.842957][ T5302] loop0: detected capacity change from 0 to 512 [ 99.843940][ T4278] usb 2-1: SerialNumber: syz [ 99.877417][ T4278] usb 2-1: config 0 descriptor?? [ 99.883812][ T5308] loop5: detected capacity change from 0 to 512 [ 99.914407][ T5262] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.922076][ T5262] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.001232][ T5308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.050457][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.304'. [ 100.056732][ T5308] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.114439][ T5308] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 100.194919][ T5262] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.202190][ T5320] capability: warning: `syz.6.307' uses deprecated v2 capabilities in a way that may be insecure [ 100.242444][ T5262] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 100.398410][ T5330] device bond_slave_0 entered promiscuous mode [ 100.405175][ T5330] device bond_slave_1 entered promiscuous mode [ 100.430233][ T5335] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 100.445252][ T5330] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.453705][ T5330] team0: Device macvtap1 failed to register rx_handler [ 100.474504][ T5330] device bond_slave_0 left promiscuous mode [ 100.480652][ T5330] device bond_slave_1 left promiscuous mode [ 100.597773][ T5338] device team_slave_0 entered promiscuous mode [ 100.721736][ T5349] Zero length message leads to an empty skb [ 100.754238][ T4278] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 100.800261][ T26] audit: type=1326 audit(1793442149.511:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.6.320" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96bdee2559 code=0x0 [ 100.902666][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 100.964170][ T4278] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 100.999352][ T4278] usb 2-1: USB disconnect, device number 3 [ 101.448639][ T5344] loop3: detected capacity change from 0 to 32768 [ 101.698683][ T5389] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 102.819486][ T5402] loop1: detected capacity change from 0 to 32768 [ 102.834781][ T5393] loop0: detected capacity change from 0 to 40427 [ 102.874407][ T5405] loop5: detected capacity change from 0 to 32768 [ 102.922310][ T5393] F2FS-fs (loop0): invalid crc value [ 102.922578][ T5402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (5402) [ 103.049294][ T5393] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.062769][ T5405] read_mapping_page failed! [ 103.102944][ T5405] ialloc: diAlloc returned -5! [ 103.121354][ T5402] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.174305][ T5402] BTRFS info (device loop1): disabling tree log [ 103.180723][ T5402] BTRFS info (device loop1): using free space tree [ 103.206920][ T5443] loop6: detected capacity change from 0 to 128 [ 103.258416][ T5402] BTRFS info (device loop1): has skinny extents [ 103.305872][ T5393] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 103.314883][ T278] read_mapping_page failed! [ 103.379167][ T5393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 103.597644][ T4194] attempt to access beyond end of device [ 103.597644][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 103.857675][ T5487] pimreg: tun_chr_ioctl cmd 1074025677 [ 103.868115][ T5402] BTRFS info (device loop1): enabling ssd optimizations [ 103.879670][ T5483] loop3: detected capacity change from 0 to 1024 [ 103.882749][ T5489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.912538][ T5487] pimreg: linktype set to 1 [ 104.275580][ T5494] loop5: detected capacity change from 0 to 4096 [ 104.427491][ T5503] loop6: detected capacity change from 0 to 8192 [ 104.582999][ T5494] ntfs3: loop5: Failed to load $Extend. [ 104.829622][ T5519] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 105.044866][ T5527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.117267][ T26] audit: type=1807 audit(1793442153.831:9): action=measure uid>1000 res=1 [ 105.135242][ T5530] ima: policy update completed [ 105.140213][ T26] audit: type=1802 audit(1793442153.851:10): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.368" res=1 errno=0 [ 105.570650][ T5556] tap0: tun_chr_ioctl cmd 1074025677 [ 105.594539][ T5556] tap0: linktype set to 774 [ 105.620010][ T5553] loop6: detected capacity change from 0 to 4096 [ 105.662492][ T5553] EXT4-fs (loop6): Test dummy encryption mode enabled [ 105.696438][ T5553] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 105.718978][ T5566] loop3: detected capacity change from 0 to 512 [ 105.744080][ T5553] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 105.818075][ T5570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.869999][ T5570] bond0: (slave bond1): Enslaving as an active interface with an up link [ 105.894393][ T5553] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,test_dummy_encryption=v1,nodioread_nolock,delalloc,max_dir_size_kb=0x0000000000000008,noblock_validity,minixdf,sysvgroups,errors=remount-ro,jqfmt=vfsv0,acl,noinit_itable,jqfmt=vfsv1,. Quota mode: writeback. [ 106.155182][ T5590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.278512][ T5586] loop3: detected capacity change from 0 to 4096 [ 106.309465][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.378'. [ 106.343782][ T5602] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 106.390909][ T5586] ntfs3: loop3: Failed to load $Extend. [ 106.651099][ T5612] tipc: Started in network mode [ 106.676294][ T5612] tipc: Node identity ac14140f, cluster identity 4711 [ 106.700215][ T5612] tipc: New replicast peer: 255.255.255.255 [ 106.716001][ T5612] tipc: Enabled bearer , priority 10 [ 106.726946][ T5615] netlink: 'syz.5.385': attribute type 10 has an invalid length. [ 106.812632][ T5615] team0: Port device netdevsim0 added [ 106.882380][ T5561] XFS (loop1): Mounting V5 Filesystem [ 107.019171][ T5561] XFS (loop1): Ending clean mount [ 107.165086][ T4190] XFS (loop1): Unmounting Filesystem [ 107.345456][ T5608] read_mapping_page failed! [ 107.350513][ T5608] ialloc: diAlloc returned -5! [ 107.428636][ T278] read_mapping_page failed! [ 107.726784][ T5535] tipc: Node number set to 2886997007 [ 107.748104][ T5657] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 107.813731][ T5646] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 107.822952][ T5657] team0: Port device netdevsim0 added [ 108.206495][ T5669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.224995][ T5669] bond0: (slave bond1): Enslaving as an active interface with an up link [ 108.327841][ T5673] block2mtd: erasesize must be a divisor of device size [ 108.355729][ T5675] set_capacity_and_notify: 4 callbacks suppressed [ 108.355746][ T5675] loop1: detected capacity change from 0 to 4096 [ 108.414100][ T5675] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.429503][ T5675] NILFS (loop1): mounting unchecked fs [ 108.474430][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.408'. [ 108.488628][ T5675] NILFS (loop1): recovery complete [ 108.517949][ T4347] udevd[4347]: incorrect nilfs2 checksum on /dev/loop1 [ 108.533702][ T5689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.764884][ T5702] loop3: detected capacity change from 0 to 1024 [ 108.849828][ T5705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.859469][ T5705] bond0: (slave bond1): Enslaving as an active interface with an up link [ 108.951829][ T5709] vxcan0: tx address claim with dest, not broadcast [ 108.992054][ T5711] loop1: detected capacity change from 0 to 8192 [ 109.004701][ T1241] hfsplus: b-tree write err: -5, ino 3 [ 109.280004][ T5718] loop3: detected capacity change from 0 to 4096 [ 109.320745][ T5724] kAFS: Invalid Command on /proc/fs/afs/cells file [ 109.327629][ T5535] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 109.393383][ T5718] NILFS (loop3): invalid segment: Checksum error in segment payload [ 109.442469][ T5718] NILFS (loop3): trying rollback from an earlier position [ 109.531813][ T5718] NILFS (loop3): recovery complete [ 109.561938][ T5736] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.624916][ T5718] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 109.667163][ T5718] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 109.701729][ T5740] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.767589][ T5535] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 109.803515][ T5535] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.830862][ T5749] loop0: detected capacity change from 0 to 4096 [ 109.831245][ T5535] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 109.911928][ T5749] NILFS (loop0): invalid segment: Checksum error in segment payload [ 109.960178][ T5749] NILFS (loop0): trying rollback from an earlier position [ 109.969260][ T5535] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 109.979519][ T5535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.024259][ T5749] NILFS (loop0): recovery complete [ 110.026917][ T5714] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.033238][ T5755] loop3: detected capacity change from 0 to 8192 [ 110.056938][ T5759] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.067149][ T5535] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 110.095599][ T5535] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 110.121135][ T5749] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 110.154264][ T5749] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 110.224947][ T5763] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 110.344120][ T5535] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.415864][ T5766] loop0: detected capacity change from 0 to 2048 [ 110.428277][ T5538] usb 7-1: USB disconnect, device number 4 [ 110.470984][ T5538] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 110.511054][ T5538] cyberjack 7-1:1.0: device disconnected [ 110.525323][ T5771] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.577840][ T5766] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 110.612614][ T5766] Remounting filesystem read-only [ 110.630495][ T5766] NILFS (loop0): error -2 truncating bmap (ino=16) [ 110.687190][ T4194] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 110.764391][ T5535] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.778030][ T5535] usb 2-1: config 0 has no interface number 0 [ 110.957485][ T5535] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 110.979771][ T5535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.002687][ T5535] usb 2-1: Product: syz [ 111.012665][ T5535] usb 2-1: Manufacturer: syz [ 111.029032][ T5535] usb 2-1: SerialNumber: syz [ 111.058105][ T5535] usb 2-1: config 0 descriptor?? [ 111.314306][ T5535] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 111.367308][ T5535] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.422919][ T5535] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 111.453203][ T5535] usb 2-1: media controller created [ 111.497884][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.664219][ T5535] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 111.788371][ T5535] usb 2-1: USB disconnect, device number 4 [ 111.899925][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 112.106245][ T145] wlan1: Trigger new scan to find an IBSS to join [ 112.159425][ T5843] block2mtd: erasesize must be a divisor of device size [ 112.293310][ T5818] loop5: detected capacity change from 0 to 32768 [ 112.396216][ T5818] JBD2: Ignoring recovery information on journal [ 112.496290][ T5818] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 112.586606][ T5857] netlink: 'syz.6.470': attribute type 2 has an invalid length. [ 112.598878][ T5857] netlink: 100 bytes leftover after parsing attributes in process `syz.6.470'. [ 112.822268][ T4440] ocfs2: Unmounting device (7,5) on (node local) [ 112.864106][ T5869] loop0: detected capacity change from 0 to 8192 [ 112.925152][ T26] audit: type=1400 audit(1793442161.641:11): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5877 comm="syz.1.478" name="p" offset=79 [ 113.063048][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.480'. [ 113.073956][ T4278] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.444073][ T4278] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.452360][ T4278] usb 4-1: config 0 has no interface number 0 [ 113.491939][ T5900] loop0: detected capacity change from 0 to 512 [ 113.503259][ T5902] loop1: detected capacity change from 0 to 1024 [ 113.593384][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.624175][ T4278] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 113.632186][ T5900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.633348][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.652149][ T4278] usb 4-1: Product: syz [ 113.658007][ T4278] usb 4-1: Manufacturer: syz [ 113.662839][ T4278] usb 4-1: SerialNumber: syz [ 113.670654][ T5902] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.682597][ T4278] usb 4-1: config 0 descriptor?? [ 113.711310][ T5902] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.489: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.735777][ T5900] EXT4-fs (loop0): 1 truncate cleaned up [ 113.741530][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,minixdf,debug_want_extra_isize=0x0000000000000080,nogrpid,grpquota,errors=remount-ro,dioread_lock,. Quota mode: writeback. [ 113.780186][ T5902] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 113.820670][ T5900] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #13: comm syz.0.488: bad extra_isize 62 (inode size 256) [ 113.850287][ T5900] EXT4-fs (loop0): Remounting filesystem read-only [ 113.934203][ T4278] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 113.984107][ T4278] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.011455][ T4278] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 114.052153][ T4278] usb 4-1: media controller created [ 114.094812][ T5931] block2mtd: erasesize must be a divisor of device size [ 114.114895][ T5929] device sit1 entered promiscuous mode [ 114.137036][ T4278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.216326][ T5938] loop6: detected capacity change from 0 to 64 [ 114.274811][ T4278] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 114.387178][ T4278] usb 4-1: USB disconnect, device number 3 [ 114.647124][ T5938] Trying to free block not in datazone [ 114.672922][ T5938] Trying to free block not in datazone [ 114.701194][ T5938] Trying to free block not in datazone [ 114.707135][ T4272] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.986744][ T5974] loop6: detected capacity change from 0 to 1024 [ 115.061506][ T5974] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.082680][ T4272] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.083736][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'. [ 115.108103][ T4272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.127368][ T5974] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.140972][ T155] wlan1: Trigger new scan to find an IBSS to join [ 115.185446][ T4272] usb 6-1: config 0 descriptor?? [ 115.218308][ T5974] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.503: lblock 0 mapped to illegal pblock 0 (length 1) [ 115.255324][ T4272] cp210x 6-1:0.0: cp210x converter detected [ 115.264423][ T5974] EXT4-fs error (device loop6): ext4_ext_remove_space:2944: inode #15: comm syz.6.503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 115.557244][ T5955] loop1: detected capacity change from 0 to 40427 [ 115.578344][ T5955] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 115.585721][ T5955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 115.612500][ T5955] F2FS-fs (loop1): invalid crc value [ 115.647139][ T5955] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 115.704023][ T4272] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 115.751009][ T5955] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 115.759001][ T5955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.770635][ T4272] usb 6-1: cp210x converter now attached to ttyUSB0 [ 115.961542][ T4190] attempt to access beyond end of device [ 115.961542][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 115.972074][ T4272] usb 6-1: USB disconnect, device number 2 [ 116.008921][ T4272] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.023110][ T4272] cp210x 6-1:0.0: device disconnected [ 116.550580][ T6041] loop6: detected capacity change from 0 to 512 [ 116.628517][ T6041] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 116.684263][ T6041] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 116.769941][ T6042] loop5: detected capacity change from 0 to 8192 [ 116.798338][ T4297] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 117.013245][ T6063] loop4: detected capacity change from 0 to 524287964 [ 117.039576][ C0] print_req_error: 25 callbacks suppressed [ 117.039594][ C0] blk_update_request: I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 117.043413][ T4272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.053592][ C0] blk_update_request: I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.077680][ C0] buffer_io_error: 25 callbacks suppressed [ 117.077698][ C0] Buffer I/O error on dev loop4, logical block 65535968, async page read [ 117.314038][ T4272] usb 2-1: Using ep0 maxpacket: 32 [ 117.434210][ T4272] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 117.456926][ T4272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.490667][ T4272] usb 2-1: config 0 descriptor?? [ 117.595533][ T6094] loop5: detected capacity change from 0 to 764 [ 117.764015][ T4272] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 117.804289][ T4272] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.854969][ T4272] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 117.862204][ T4272] usb 2-1: media controller created [ 117.897605][ T4272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.984510][ T4272] az6027: usb out operation failed. (-71) [ 118.024154][ T4272] az6027: usb out operation failed. (-71) [ 118.029995][ T4272] stb0899_attach: Driver disabled by Kconfig [ 118.046371][ T4272] az6027: no front-end attached [ 118.046371][ T4272] [ 118.088045][ T4272] az6027: usb out operation failed. (-71) [ 118.104342][ T1241] wlan1: Creating new IBSS network, BSSID 8e:fb:51:06:bb:a7 [ 118.108284][ T4272] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 118.143247][ T4272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 118.205763][ T4272] dvb-usb: schedule remote query interval to 400 msecs. [ 118.213017][ T4272] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 118.248547][ T4272] usb 2-1: USB disconnect, device number 5 [ 118.260839][ T6121] tipc: Started in network mode [ 118.288884][ T6121] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 118.315577][ T6123] tipc: Enabled bearer , priority 10 [ 118.367033][ T4272] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.135588][ T6156] loop6: detected capacity change from 0 to 256 [ 119.180085][ T6156] exfat: Deprecated parameter 'utf8' [ 119.204309][ T6156] exfat: Deprecated parameter 'utf8' [ 119.230073][ T6156] exfat: Deprecated parameter 'utf8' [ 119.268512][ T6159] loop3: detected capacity change from 0 to 1024 [ 119.282239][ T6161] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 119.325465][ T5540] tipc: Node number set to 1494569365 [ 119.332410][ T6159] EXT4-fs (loop3): Ignoring removed bh option [ 119.504982][ T6159] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resuid=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 119.564113][ T6156] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 120.282818][ T6202] loop0: detected capacity change from 0 to 4096 [ 120.455497][ T6214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.577'. [ 120.831857][ T6237] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.831857][ T6237] The task syz.3.584 (6237) triggered the difference, watch for misbehavior. [ 121.313187][ T6251] netlink: 104 bytes leftover after parsing attributes in process `syz.6.588'. [ 121.797200][ T6226] loop5: detected capacity change from 0 to 40427 [ 121.871517][ T6226] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 121.904215][ T6226] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.941503][ T6271] loop1: detected capacity change from 0 to 764 [ 121.948926][ T6226] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 122.002367][ T6226] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 122.040835][ T6226] F2FS-fs (loop5): invalid crc value [ 122.129408][ T6226] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.393664][ T6291] loop1: detected capacity change from 0 to 8 [ 122.409328][ T6226] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 122.428006][ T6226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.564206][ T6291] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 122.599329][ T4440] attempt to access beyond end of device [ 122.599329][ T4440] loop5: rw=2049, want=45104, limit=40427 [ 122.628348][ T6291] cramfs: wrong magic [ 123.180656][ T6309] scsi_strcpy_devinfo: vendor string 'èFƒ· P§ó?‡‹¹÷³oŠ;"Ó¢ Ú˜' is too long [ 123.249191][ T6309] scsi_strcpy_devinfo: model string 'ÏrTšegáÉxÑÍåRrba* [ 123.249191][ T6309] HƬ`Uó“b¥óØE6àëXÿ,ÉYudß,ö^ìñ5ùhÂßUa×™'× ^˜)ÖOþ•—lqGüVê’A4ø!yŸ ÑŠSÌ [ 123.249191][ T6309] è'@H>3«&w…äk' is too long [ 123.269729][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.346458][ T6293] loop0: detected capacity change from 0 to 32768 [ 123.402272][ T6293] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.598 (6293) [ 123.465312][ T6293] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.504802][ T6293] BTRFS info (device loop0): turning off barriers [ 123.542491][ T6293] BTRFS info (device loop0): enabling auto defrag [ 123.572925][ T6293] BTRFS info (device loop0): force zlib compression, level 3 [ 123.613473][ T6293] BTRFS info (device loop0): enabling ssd optimizations [ 123.633687][ T6293] BTRFS info (device loop0): using spread ssd allocation scheme [ 123.657014][ T6293] BTRFS info (device loop0): using free space tree [ 123.663689][ T6293] BTRFS info (device loop0): has skinny extents [ 123.684103][ T1112] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.741939][ T6269] loop6: detected capacity change from 0 to 40427 [ 123.837009][ T6334] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 123.941017][ T6269] F2FS-fs (loop6): invalid crc value [ 124.011844][ T6269] F2FS-fs (loop6): Found nat_bits in checkpoint [ 124.044359][ T1112] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.135581][ T6293] BTRFS info (device loop0): not using ssd optimizations [ 124.181156][ T6293] BTRFS info (device loop0): not using spread ssd allocation scheme [ 124.234104][ T6293] BTRFS info (device loop0): enabling ssd optimizations [ 124.241250][ T6293] BTRFS info (device loop0): using spread ssd allocation scheme [ 124.269798][ T1112] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 124.293880][ T1112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.324000][ T1112] usb 6-1: Product: syz [ 124.328236][ T1112] usb 6-1: Manufacturer: syz [ 124.353301][ T1112] usb 6-1: SerialNumber: syz [ 124.364188][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 124.469805][ T6269] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 124.674029][ T1112] dvbdev: DVB: registering new adapter (DEC3000-s) [ 124.759288][ T1112] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 124.838949][ T6269] attempt to access beyond end of device [ 124.838949][ T6269] loop6: rw=2049, want=77960, limit=40427 [ 124.926043][ T1112] ttusb_dec_send_command: command bulk message failed: error -71 [ 124.980807][ T1112] usb 6-1: USB disconnect, device number 3 [ 125.080780][ T4485] attempt to access beyond end of device [ 125.080780][ T4485] loop6: rw=2049, want=45104, limit=40427 [ 125.214386][ T6276] block2mtd: error: cannot open device #! [ 125.769210][ T6391] loop1: detected capacity change from 0 to 4096 [ 127.017933][ T6443] loop5: detected capacity change from 0 to 64 [ 127.193017][ T6446] rnbd_client L125: Can't parse path ip: -93 [ 127.499382][ T6414] loop0: detected capacity change from 0 to 40427 [ 127.582644][ T6414] F2FS-fs (loop0): invalid crc value [ 127.662221][ T6463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.713244][ T6414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.833656][ T6414] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 127.882720][ T6414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 128.106016][ T4194] attempt to access beyond end of device [ 128.106016][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 128.143140][ T6418] loop1: detected capacity change from 0 to 32768 [ 128.398251][ T6493] rnbd_client L125: Can't parse path ip: -93 [ 128.411517][ T6418] XFS (loop1): Mounting V5 Filesystem [ 128.685382][ T6418] XFS (loop1): Ending clean mount [ 128.737022][ T6503] loop5: detected capacity change from 0 to 8 [ 128.975421][ T4190] XFS (loop1): Unmounting Filesystem [ 128.993767][ T6469] loop6: detected capacity change from 0 to 32768 [ 129.022375][ T6512] loop0: detected capacity change from 0 to 64 [ 129.206312][ T6469] XFS (loop6): Mounting V5 Filesystem [ 129.305075][ T6529] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 129.336691][ T6469] XFS (loop6): Ending clean mount [ 129.422917][ T6529] iwpm_mapping_info_cb: Unable to parse nlmsg [ 129.512221][ T4485] XFS (loop6): Unmounting Filesystem [ 129.977887][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 130.216853][ T6568] device-mapper: table: 248:4: multipath: error getting device [ 130.272159][ T6568] device-mapper: ioctl: error adding target to table [ 130.483568][ T6578] user requested TSC rate below hardware speed [ 130.714472][ T6593] capability: warning: `syz.6.674' uses 32-bit capabilities (legacy support in use) [ 130.948746][ T6567] loop3: detected capacity change from 0 to 32768 [ 131.088110][ T6567] XFS (loop3): Mounting V5 Filesystem [ 131.113603][ T6583] loop5: detected capacity change from 0 to 32768 [ 131.178419][ T6567] XFS (loop3): Ending clean mount [ 131.186474][ T6583] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.668 (6583) [ 131.284069][ T6583] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 131.309761][ T4198] XFS (loop3): Unmounting Filesystem [ 131.312561][ T6583] BTRFS info (device loop5): turning off barriers [ 131.336031][ T6583] BTRFS info (device loop5): enabling auto defrag [ 131.380156][ T6583] BTRFS info (device loop5): force zlib compression, level 3 [ 131.394181][ T6583] BTRFS info (device loop5): enabling ssd optimizations [ 131.422573][ T6583] BTRFS info (device loop5): using spread ssd allocation scheme [ 131.441618][ T6583] BTRFS info (device loop5): using free space tree [ 131.477221][ T6583] BTRFS info (device loop5): has skinny extents [ 131.570365][ T6633] loop6: detected capacity change from 0 to 2048 [ 131.749804][ T6583] BTRFS info (device loop5): not using ssd optimizations [ 131.768415][ T6633] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.771927][ T6583] BTRFS info (device loop5): not using spread ssd allocation scheme [ 131.780117][ T6633] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.800923][ T6583] BTRFS info (device loop5): enabling ssd optimizations [ 131.808335][ T6583] BTRFS info (device loop5): using spread ssd allocation scheme [ 132.273083][ T6666] loop3: detected capacity change from 0 to 64 [ 132.627669][ T6685] input: syz1 as /devices/virtual/input/input6 [ 132.716989][ T6686] hsr0: VLAN not yet supported [ 133.057333][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.070604][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271053][ T6714] input: syz1 as /devices/virtual/input/input7 [ 133.334357][ T6716] program syz.5.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.352705][ T6697] loop1: detected capacity change from 0 to 32768 [ 133.382135][ T6697] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.701 (6697) [ 133.426873][ T6697] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 133.448253][ T6697] BTRFS info (device loop1): turning off barriers [ 133.488802][ T6697] BTRFS info (device loop1): enabling auto defrag [ 133.509037][ T6697] BTRFS info (device loop1): force zlib compression, level 3 [ 133.534822][ T6697] BTRFS info (device loop1): enabling ssd optimizations [ 133.563425][ T6697] BTRFS info (device loop1): using spread ssd allocation scheme [ 133.573567][ T6723] loop5: detected capacity change from 0 to 64 [ 133.600677][ T6697] BTRFS info (device loop1): using free space tree [ 133.614539][ T6697] BTRFS info (device loop1): has skinny extents [ 133.645738][ T6703] loop3: detected capacity change from 0 to 32768 [ 133.676911][ T6703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.705 (6703) [ 133.701933][ T6703] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.714116][ T6703] BTRFS info (device loop3): using free space tree [ 133.723772][ T6703] BTRFS info (device loop3): has skinny extents [ 133.914220][ T6697] BTRFS info (device loop1): not using ssd optimizations [ 133.921323][ T6697] BTRFS info (device loop1): not using spread ssd allocation scheme [ 133.952707][ T6697] BTRFS info (device loop1): enabling ssd optimizations [ 133.959985][ T6697] BTRFS info (device loop1): using spread ssd allocation scheme [ 133.982054][ T6703] BTRFS info (device loop3): enabling ssd optimizations [ 134.330653][ T6772] loop6: detected capacity change from 0 to 4096 [ 135.054742][ T6816] Failed to get privilege flags for destination (handle=0x2:0x1) [ 135.225908][ T6826] loop0: detected capacity change from 0 to 64 [ 135.233979][ T5528] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 135.404051][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 135.443914][ T6831] device macvlan0 entered promiscuous mode [ 135.452856][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.736'. [ 135.483384][ T6835] loop0: detected capacity change from 0 to 128 [ 135.521206][ T6835] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 135.645352][ T5528] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.678326][ T6842] î³ [ 135.728461][ T6844] Failed to get privilege flags for destination (handle=0x2:0x1) [ 135.825072][ T6839] hfsplus: catalog searching failed [ 135.834373][ T5528] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 135.843575][ T5528] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.895050][ T1241] hfsplus: b-tree write err: -5, ino 25 [ 135.896980][ T5528] usb 7-1: Product: syz [ 135.900880][ T1241] hfsplus: b-tree write err: -5, ino 4 [ 135.918343][ T5528] usb 7-1: Manufacturer: syz [ 135.923479][ T1241] hfsplus: b-tree write err: -5, ino 2 [ 135.928451][ T5528] usb 7-1: SerialNumber: syz [ 135.944807][ T1241] hfsplus: b-tree write err: -5, ino 26 [ 135.948024][ T5528] usb 7-1: config 0 descriptor?? [ 135.996202][ T5528] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 136.053457][ T6823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.732 (6823) [ 136.153432][ T6823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.172673][ T6823] BTRFS info (device loop1): using free space tree [ 136.180858][ T6823] BTRFS info (device loop1): has skinny extents [ 136.227599][ T6850] set_capacity_and_notify: 2 callbacks suppressed [ 136.227615][ T6850] loop3: detected capacity change from 0 to 8192 [ 136.308522][ T6850] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 136.369934][ T6850] REISERFS (device loop3): using ordered data mode [ 136.376621][ T6850] reiserfs: using flush barriers [ 136.402252][ T6850] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.471849][ T6850] REISERFS (device loop3): checking transaction log (loop3) [ 136.486162][ T6850] REISERFS (device loop3): Using r5 hash to sort names [ 136.506053][ T6850] REISERFS (device loop3): using 3.5.x disk format [ 136.519611][ T6850] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 136.603019][ T6823] BTRFS info (device loop1): enabling ssd optimizations [ 136.911358][ T5528] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 136.934773][ T5528] gspca_pac7302: probe of 7-1:0.0 failed with error -71 [ 136.975693][ T5528] usb 7-1: USB disconnect, device number 5 [ 137.064339][ T6892] loop5: detected capacity change from 0 to 128 [ 137.179346][ T6892] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 137.401150][ T6876] loop0: detected capacity change from 0 to 32768 [ 137.478487][ T6876] XFS (loop0): Mounting V5 Filesystem [ 137.617728][ T6876] XFS (loop0): Ending clean mount [ 137.765155][ T4194] XFS (loop0): Unmounting Filesystem [ 137.865479][ T6932] î³ [ 137.952820][ T6936] program syz.5.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.064201][ T6939] loop1: detected capacity change from 0 to 8192 [ 138.117801][ T4347] loop1: p1 < > p2 p4 < p5 > [ 138.122471][ T6943] kAFS: Invalid Command on /proc/fs/afs/cells file [ 138.122551][ T4347] loop1: partition table partially beyond EOD, truncated [ 138.173767][ T4347] loop1: p1 start 134217728 is beyond EOD, truncated [ 138.203928][ T4347] loop1: p2 size 591360 extends beyond EOD, truncated [ 138.235870][ T4347] loop1: p5 size 591360 extends beyond EOD, truncated [ 138.279306][ T6939] loop1: p1 < > p2 p4 < p5 > [ 138.288963][ T6939] loop1: partition table partially beyond EOD, truncated [ 138.305851][ T6939] loop1: p1 start 134217728 is beyond EOD, truncated [ 138.336647][ T6939] loop1: p2 size 591360 extends beyond EOD, truncated [ 138.364216][ T6939] loop1: p5 size 591360 extends beyond EOD, truncated [ 138.442152][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.5.780'. [ 138.632420][ T6969] program syz.0.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.770619][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 138.776677][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 138.809138][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 138.915266][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 138.915389][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 138.938941][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 139.142292][ T6998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.798'. [ 139.276333][ T6955] loop3: detected capacity change from 0 to 32768 [ 139.463165][ T6955] XFS (loop3): Mounting V5 Filesystem [ 139.591922][ T6955] XFS (loop3): Ending clean mount [ 139.794760][ T4198] XFS (loop3): Unmounting Filesystem [ 140.079310][ T7057] hub 5-0:1.0: USB hub found [ 140.096359][ T7057] hub 5-0:1.0: 1 port detected [ 140.377503][ T7069] loop5: detected capacity change from 0 to 512 [ 140.440110][ T7069] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 140.504593][ T7069] EXT4-fs error (device loop5): ext4_orphan_get:1436: comm syz.5.828: bad orphan inode 131083 [ 140.525726][ T7069] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,init_itable,grpquota,,errors=continue. Quota mode: writeback. [ 140.553312][ T7069] EXT4-fs error (device loop5): ext4_find_dest_de:2117: inode #2: block 13: comm syz.5.828: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 140.796189][ T7077] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.901724][ T7060] loop6: detected capacity change from 0 to 131072 [ 140.988085][ T26] audit: type=1400 audit(1793442189.701:12): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=7080 comm="syz.0.834" name="/" offset=33 [ 140.993166][ T7083] loop1: detected capacity change from 0 to 128 [ 141.028903][ T7060] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24) [ 141.036998][ T7060] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 141.046304][ T7060] F2FS-fs (loop6): Test dummy encryption mode enabled [ 141.094152][ T7060] F2FS-fs (loop6): invalid crc value [ 141.110456][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 141.139128][ T7088] device bond0 entered promiscuous mode [ 141.152151][ T7088] device bond_slave_0 entered promiscuous mode [ 141.160985][ T7060] F2FS-fs (loop6): Found nat_bits in checkpoint [ 141.198604][ T7060] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 141.224934][ T7060] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 141.236495][ T7060] F2FS-fs (loop6): Start checkpoint disabled! [ 141.255814][ T7088] device bond_slave_1 entered promiscuous mode [ 141.308465][ T7083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.325813][ T7088] device bond1 entered promiscuous mode [ 141.337369][ T7060] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 141.346192][ T7060] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 141.351984][ T7083] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.384566][ T7088] device gretap0 entered promiscuous mode [ 141.453087][ T7088] device hsr1 entered promiscuous mode [ 141.483039][ T7093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.514668][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 141.818448][ T7085] loop5: detected capacity change from 0 to 32768 [ 141.846650][ T4297] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 141.901698][ T7085] XFS (loop5): Mounting V5 Filesystem [ 141.902987][ T7112] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.917171][ T7112] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.927049][ T7112] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.936877][ T7112] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.052413][ T7114] loop3: detected capacity change from 0 to 8192 [ 142.076033][ T7085] XFS (loop5): Ending clean mount [ 142.144204][ T4347] loop3: p1 < > p2 p4 < p5 > [ 142.150419][ T4347] loop3: partition table partially beyond EOD, truncated [ 142.180568][ T4440] XFS (loop5): Unmounting Filesystem [ 142.192085][ T4347] loop3: p1 start 134217728 is beyond EOD, truncated [ 142.257908][ T4347] loop3: p2 size 591360 extends beyond EOD, truncated [ 142.275573][ T4347] loop3: p5 size 591360 extends beyond EOD, truncated [ 142.307925][ T26] audit: type=1400 audit(1793442191.021:13): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=7119 comm="syz.1.848" name="/" offset=33 [ 142.372962][ T7114] loop3: p1 < > p2 p4 < p5 > [ 142.379324][ T7114] loop3: partition table partially beyond EOD, truncated [ 142.409289][ T7114] loop3: p1 start 134217728 is beyond EOD, truncated [ 142.422197][ T7114] loop3: p2 size 591360 extends beyond EOD, truncated [ 142.444910][ T7114] loop3: p5 size 591360 extends beyond EOD, truncated [ 142.877337][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 142.877497][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 142.921934][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 143.019293][ T4410] udevd[4410]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 143.119278][ T7132] loop3: detected capacity change from 0 to 4096 [ 143.144504][ T7141] netlink: 72 bytes leftover after parsing attributes in process `syz.5.856'. [ 143.200255][ T7143] kAFS: bad VL server IP address [ 143.370013][ T7124] loop1: detected capacity change from 0 to 32768 [ 143.415362][ T7149] loop3: detected capacity change from 0 to 1024 [ 143.478974][ T7124] ea_get: invalid extended attribute [ 143.508196][ T7149] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.859: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.590919][ T7124] ffff88805cd768f0: 04 00 00 00 .... [ 143.656245][ T7149] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 143.656250][ T7156] ea_get: invalid extended attribute [ 143.706409][ T7149] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.859: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.709270][ T7156] ffff88805cd768f0: 04 00 00 00 .... [ 143.774366][ T7149] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 143.799797][ T7149] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.859: Failed to acquire dquot type 0 [ 143.842037][ T7149] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 143.875312][ T7149] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.859: mark_inode_dirty error [ 143.905264][ T7151] loop6: detected capacity change from 0 to 32768 [ 143.923333][ T7149] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 143.968047][ T7149] EXT4-fs (loop3): 1 orphan inode deleted [ 143.976614][ T7149] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 143.999042][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.001825][ T4297] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.129605][ T7151] XFS (loop6): Mounting V5 Filesystem [ 144.136639][ T4297] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 144.176198][ T4297] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 144.208491][ T7148] loop0: detected capacity change from 0 to 40427 [ 144.237133][ T7151] XFS (loop6): Ending clean mount [ 144.243128][ T7149] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.859: Invalid inode table block 1 in block_group 0 [ 144.268430][ T7148] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 144.294017][ T7148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 144.326258][ T7149] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.338164][ T7148] F2FS-fs (loop0): invalid crc value [ 144.409011][ T7148] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 144.448022][ T4485] XFS (loop6): Unmounting Filesystem [ 144.459677][ T4198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 144.506435][ T4198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.583920][ T4198] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 144.807052][ T7148] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 144.820554][ T7148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.083202][ T4194] attempt to access beyond end of device [ 145.083202][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 145.125646][ T7190] loop1: detected capacity change from 0 to 4096 [ 145.283500][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.878'. [ 145.741106][ T7224] loop6: detected capacity change from 0 to 512 [ 145.845694][ T7224] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.896609][ T7224] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.191333][ T7236] loop5: detected capacity change from 0 to 4096 [ 146.228322][ T4458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 146.313724][ T7221] F2FS-fs (loop3): invalid crc value [ 146.390653][ T7221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.497667][ T7250] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.895: corrupted in-inode xattr [ 146.627431][ T7250] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.895: couldn't read orphan inode 15 (err -117) [ 146.671899][ T7221] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 146.692248][ T7248] ntfs3: loop6: Failed to load $Extend. [ 146.717325][ T7221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 146.737472][ T7250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.859607][ T4485] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 146.883469][ T7250] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.895: bad entry in directory: inode out of bounds - offset=0, inode=87, rec_len=12, size=1024 fake=0 [ 146.934505][ T4485] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 146.999153][ T4198] attempt to access beyond end of device [ 146.999153][ T4198] loop3: rw=2049, want=45104, limit=40427 [ 147.006852][ T7270] set_capacity_and_notify: 3 callbacks suppressed [ 147.006869][ T7270] loop1: detected capacity change from 0 to 512 [ 147.066573][ T7274] loop5: detected capacity change from 0 to 512 [ 147.103019][ T7274] EXT4-fs (loop5): Ignoring removed nobh option [ 147.188505][ T7274] EXT4-fs (loop5): 1 truncate cleaned up [ 147.295913][ T7274] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,nombcache,noload,nobh,debug_want_extra_isize=0x0000000000000008,. Quota mode: none. [ 147.337425][ T7270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.356098][ T4458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 147.366972][ T7270] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.542494][ T7272] loop6: detected capacity change from 0 to 32768 [ 147.574885][ T7283] loop0: detected capacity change from 0 to 256 [ 147.717412][ T7294] netlink: 27 bytes leftover after parsing attributes in process `syz.1.914'. [ 147.782225][ T7272] XFS (loop6): Mounting V5 Filesystem [ 147.889741][ T7272] XFS (loop6): Ending clean mount [ 148.022257][ T7307] loop3: detected capacity change from 0 to 1024 [ 148.041257][ T26] audit: type=1400 audit(1793442196.751:14): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7313 comm="syz.5.920" name="unknown" offset=16 [ 148.167655][ T4485] XFS (loop6): Unmounting Filesystem [ 148.205828][ T7307] hfsplus: invalid length 1280 has been corrected to 255 [ 148.922322][ T7353] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.938'. [ 149.052841][ T7357] loop6: detected capacity change from 0 to 1024 [ 149.594139][ T6800] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.699492][ T7390] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.781657][ T7394] loop3: detected capacity change from 0 to 4096 [ 149.840785][ T7394] ntfs3: loop3: Failed to load $Extend. [ 149.933531][ T7400] program syz.1.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.943415][ T4198] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 149.954131][ T6800] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.965087][ T4198] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 149.976952][ T6800] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 149.993660][ T6800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.080774][ T6800] as10x_usb: device has been detected [ 150.094399][ T6800] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 150.144038][ T6800] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 150.174747][ T7410] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 150.195820][ T6800] as10x_usb: error during firmware upload part1 [ 150.202717][ T6800] Registered device Abilis Systems DVB-Titan [ 150.421310][ T7424] netlink: 'syz.3.972': attribute type 11 has an invalid length. [ 150.444191][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 150.474983][ T7428] loop1: detected capacity change from 0 to 128 [ 150.538137][ T7428] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 150.569748][ T7428] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.586831][ T7435] loop3: detected capacity change from 0 to 256 [ 150.624519][ T7435] exfat: Deprecated parameter 'utf8' [ 150.629874][ T7435] exfat: Deprecated parameter 'utf8' [ 150.645535][ T7435] exfat: Deprecated parameter 'utf8' [ 150.660342][ T7437] loop6: detected capacity change from 0 to 128 [ 150.701535][ T7435] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 150.800033][ T7437] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 150.816748][ T7437] FAT-fs (loop6): Filesystem has been set read-only [ 150.896563][ T7440] erofs: (device loop1): mounted with root inode @ nid 36. [ 150.954987][ T5535] usb 6-1: USB disconnect, device number 4 [ 151.018808][ T5535] Unregistered device Abilis Systems DVB-Titan [ 151.028386][ T5535] as10x_usb: device has been disconnected [ 151.665657][ T7475] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.771742][ T7475] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.862092][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1001'. [ 151.899556][ T7479] smc: removing ib device rxe0 [ 151.901235][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'. [ 151.953579][ T7455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.987 (7455) [ 151.989853][ T7491] raw_sendmsg: syz.6.1003 forgot to set AF_INET. Fix it! [ 152.023349][ T7455] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 152.046150][ T7455] BTRFS info (device loop1): setting nodatacow, compression disabled [ 152.076697][ T7455] BTRFS info (device loop1): enabling auto defrag [ 152.100707][ T7455] BTRFS info (device loop1): max_inline at 0 [ 152.117968][ T7455] BTRFS info (device loop1): using free space tree [ 152.138273][ T7455] BTRFS info (device loop1): has skinny extents [ 152.257454][ T7512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1008'. [ 152.635542][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1013'. [ 152.861172][ T7538] set_capacity_and_notify: 3 callbacks suppressed [ 152.861193][ T7538] loop6: detected capacity change from 0 to 1024 [ 152.900844][ T4347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4347) [ 152.953571][ T7538] EXT4-fs (loop6): Ignoring removed oldalloc option [ 152.991904][ T7538] EXT4-fs (loop6): Ignoring removed oldalloc option [ 153.001886][ T7541] syz.3.1019 uses obsolete (PF_INET,SOCK_PACKET) [ 153.036951][ T7538] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.060162][ T7541] netlink: 'syz.3.1019': attribute type 8 has an invalid length. [ 153.201329][ T7538] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 153.441927][ T7558] loop3: detected capacity change from 0 to 8 [ 153.495447][ T7554] smpboot: CPU 1 is now offline [ 153.587736][ T7558] SQUASHFS error: Failed to read block 0x260685: -5 [ 153.673564][ T7558] SQUASHFS error: Unable to read metadata cache entry [260685] [ 153.746848][ T7558] SQUASHFS error: Unable to read directory block [260685:0] [ 153.793760][ T7561] loop6: detected capacity change from 0 to 4096 [ 153.955129][ T7561] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 153.966151][ T7564] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.018555][ T7563] loop0: detected capacity change from 0 to 2048 [ 154.070846][ T7561] NILFS (loop6): mounting fs with errors [ 154.178015][ T7570] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.291569][ T7561] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 154.588916][ T7574] loop3: detected capacity change from 0 to 8192 [ 154.713756][ T7574] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 154.790115][ T7574] REISERFS (device loop3): using ordered data mode [ 154.842194][ T7574] reiserfs: using flush barriers [ 154.918619][ T7574] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 154.986723][ T7589] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.009483][ T7574] REISERFS (device loop3): checking transaction log (loop3) [ 155.070187][ T7589] syz.1.1037 (7589) used greatest stack depth: 19712 bytes left [ 155.086766][ T7574] REISERFS (device loop3): Using r5 hash to sort names [ 155.103790][ T7574] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 155.138744][ T7597] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1041'. [ 155.164688][ T7574] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 155.192788][ T7598] pimreg0: tun_chr_ioctl cmd 1074025676 [ 155.230195][ T7598] pimreg0: owner set to 0 [ 155.353299][ T7602] loop5: detected capacity change from 0 to 128 [ 155.379414][ T7605] loop1: detected capacity change from 0 to 512 [ 155.423341][ T7602] FAT-fs (loop5): Unrecognized mount option "vfat" or missing value [ 155.482022][ T7605] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 155.496903][ T7607] ALSA: mixer_oss: invalid OSS volume '' [ 155.542189][ T7605] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 155.555912][ T7607] ALSA: mixer_oss: invalid OSS volume 'qO' [ 155.563143][ T7607] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀÎ —' [ 155.600068][ T7605] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.1044: iget: bad i_size value: 12154757448730 [ 155.679942][ T7605] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1044: couldn't read orphan inode 13 (err -117) [ 155.749211][ T7605] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 155.987516][ T7613] loop5: detected capacity change from 0 to 4096 [ 156.188281][ T7630] netlink: 'syz.1.1054': attribute type 5 has an invalid length. [ 156.512045][ T7649] loop5: detected capacity change from 0 to 128 [ 156.522358][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1063'. [ 156.605258][ T7649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.704110][ T7649] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.873261][ T7657] loop6: detected capacity change from 0 to 4096 [ 156.896273][ T7649] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes [ 156.971817][ T7660] team0: Port device netdevsim0 removed [ 156.982549][ T7657] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 157.028673][ T7660] batman_adv: batadv0: Adding interface: netdevsim0 [ 157.088045][ T7660] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.143055][ T7657] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 157.221855][ T7657] ntfs3: loop6: Failed to load $Extend. [ 157.324791][ T7660] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 157.393730][ T7673] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.423200][ T7663] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 157.479050][ T7673] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 157.599429][ T7673] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.050136][ T7695] set_capacity_and_notify: 1 callbacks suppressed [ 158.050149][ T7695] loop1: detected capacity change from 0 to 4096 [ 158.623482][ T7728] loop6: detected capacity change from 0 to 128 [ 158.714982][ T7728] FAT-fs (loop6): Unrecognized mount option "vfat" or missing value [ 159.040291][ T7750] loop6: detected capacity change from 0 to 1024 [ 159.103147][ T7750] EXT4-fs (loop6): Ignoring removed orlov option [ 159.169053][ T7750] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 159.479353][ T7750] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 159.503162][ T7772] device netdevsim0 entered promiscuous mode [ 159.540479][ T7772] device netdevsim0 left promiscuous mode [ 159.549548][ T7775] loop0: detected capacity change from 0 to 512 [ 159.651040][ T7775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.765374][ T7775] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.930174][ T7775] Quota error (device loop0): find_tree_dqentry: Getting block too big (773 >= 6) [ 160.023773][ T7792] loop6: detected capacity change from 0 to 512 [ 160.042225][ T7775] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 160.088061][ T7792] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1122: invalid indirect mapped block 256 (level 2) [ 160.134025][ T7775] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1118: Failed to acquire dquot type 1 [ 160.163662][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1127'. [ 160.186557][ T7792] EXT4-fs (loop6): Remounting filesystem read-only [ 160.203596][ T7792] EXT4-fs (loop6): 2 truncates cleaned up [ 160.220450][ T7798] device bond0 entered promiscuous mode [ 160.229950][ T7792] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 160.250057][ T7798] device bond_slave_0 entered promiscuous mode [ 160.288817][ T7798] device bond_slave_1 entered promiscuous mode [ 160.354393][ T7798] device gretap0 entered promiscuous mode [ 160.388865][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 160.399076][ T7798] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 160.450958][ T7798] Cannot create hsr debugfs directory [ 160.480968][ T7798] device hsr1 entered promiscuous mode [ 160.509819][ T7799] bonding: unable to delete non-existent b [ 160.537080][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 160.761720][ T7817] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.840369][ T7823] loop1: detected capacity change from 0 to 256 [ 160.929977][ T7823] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 161.052962][ T7833] loop6: detected capacity change from 0 to 64 [ 161.068982][ T7829] loop5: detected capacity change from 0 to 2048 [ 161.185578][ T7829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.401718][ T7829] UDF-fs: error (device loop5): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 161.604003][ T5529] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.875822][ T5529] usb 2-1: Using ep0 maxpacket: 16 [ 162.017002][ T5529] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.053097][ T7862] device-mapper: table: 248:6: snapshot: Cannot get origin device [ 162.070041][ T5529] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.083778][ T7839] loop3: detected capacity change from 0 to 32768 [ 162.097547][ T7862] device-mapper: ioctl: error adding target to table [ 162.119082][ T5529] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 162.187210][ T7839] jfs_rmdir: dtDelete returned -2 [ 162.223913][ T5529] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.257718][ T5529] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 162.305005][ T5529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.348719][ T5529] usb 2-1: config 0 descriptor?? [ 162.620287][ T7874] loop0: detected capacity change from 0 to 4096 [ 162.741437][ T7874] ntfs3: loop0: Failed to load $Extend. [ 162.860767][ T7874] ntfs3: loop0: ino=5, "/" directory corrupted [ 162.973055][ T7870] (syz.6.1161,7870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.004061][ T7880] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 163.049685][ T5538] usb 2-1: USB disconnect, device number 6 [ 163.096125][ T7870] (syz.6.1161,7870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.200043][ T7870] JBD2: Ignoring recovery information on journal [ 163.319663][ T7870] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 163.660078][ T7907] set_capacity_and_notify: 3 callbacks suppressed [ 163.660091][ T7907] loop3: detected capacity change from 0 to 256 [ 163.687530][ T7906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1174'. [ 163.774222][ T5526] Bluetooth: hci5: command 0x1003 tx timeout [ 163.796290][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 163.878675][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 164.034663][ T7870] syz.6.1161 (7870) used greatest stack depth: 19104 bytes left [ 164.160863][ T4485] ocfs2: Unmounting device (7,6) on (node local) [ 164.436034][ T7919] loop0: detected capacity change from 0 to 8192 [ 164.473462][ T7927] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 164.517354][ T7919] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 164.543277][ T7927] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 164.588030][ T7927] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.598134][ T7919] REISERFS (device loop0): using ordered data mode [ 164.629867][ T7927] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 164.651666][ T7919] reiserfs: using flush barriers [ 164.679043][ T7927] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 164.700654][ T7919] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.729288][ T7927] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 164.753685][ T7927] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 164.792840][ T7927] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 164.810018][ T7919] REISERFS (device loop0): checking transaction log (loop0) [ 164.829202][ T7927] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 164.853597][ T7927] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 164.895881][ T7927] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 164.936188][ T7927] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 164.954933][ T7927] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 164.990404][ T7927] comedi comedi3: 8255: I/O port conflict (0x10000002,4) [ 165.012424][ T7927] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 165.099734][ T7919] REISERFS (device loop0): Using tea hash to sort names [ 165.161954][ T7919] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 165.322039][ T7960] siw: device registration error -23 [ 165.471404][ T7967] loop6: detected capacity change from 0 to 1024 [ 165.531475][ T7967] EXT4-fs (loop6): Ignoring removed nobh option [ 165.540170][ T7971] loop3: detected capacity change from 0 to 8 [ 165.576977][ T7967] EXT4-fs (loop6): Ignoring removed orlov option [ 165.613655][ T7967] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.727019][ T7975] Bluetooth: hci1: expected 87 bytes, got 2 bytes [ 165.748312][ T7967] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,dioread_nolock,noauto_da_alloc,i_version,,errors=continue. Quota mode: writeback. [ 165.771426][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.838383][ T7981] loop3: detected capacity change from 0 to 512 [ 165.856082][ T5529] Bluetooth: hci5: command 0x1001 tx timeout [ 165.863373][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 165.946701][ T7981] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1205: corrupted in-inode xattr [ 165.987562][ T7981] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1205: couldn't read orphan inode 15 (err -117) [ 166.046490][ T7981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.090677][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.179291][ T7981] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.1205: bad entry in directory: inode out of bounds - offset=0, inode=87, rec_len=12, size=1024 fake=0 [ 166.231219][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.267744][ T7988] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1206'. [ 167.261230][ T8041] loop6: detected capacity change from 0 to 1024 [ 167.388130][ T8041] hfsplus: invalid length 1280 has been corrected to 255 [ 167.744065][ T5526] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.957803][ T5545] Bluetooth: hci5: command 0x1009 tx timeout [ 168.017754][ T5526] usb 2-1: Using ep0 maxpacket: 8 [ 168.251823][ T8047] loop0: detected capacity change from 0 to 32768 [ 168.264536][ T8080] sctp: [Deprecated]: syz.3.1248 (pid 8080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.264536][ T8080] Use struct sctp_sack_info instead [ 168.304149][ T5526] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 168.326365][ T5526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.367312][ T5526] usb 2-1: Product: syz [ 168.371794][ T5526] usb 2-1: Manufacturer: syz [ 168.401332][ T5526] usb 2-1: SerialNumber: syz [ 168.444325][ T8047] XFS (loop0): Mounting V5 Filesystem [ 168.484600][ T8047] XFS (loop0): Ending clean mount [ 168.522507][ T4194] XFS (loop0): Unmounting Filesystem [ 168.578488][ T5545] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 168.837004][ T5545] usb 7-1: Using ep0 maxpacket: 16 [ 168.906282][ T5526] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 168.964561][ T5545] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.997189][ T5545] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 169.027507][ T5545] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.117016][ T5526] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 169.222705][ T8098] loop3: detected capacity change from 0 to 40427 [ 169.229960][ T5545] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 169.250059][ T5545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.273418][ T8098] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 169.301216][ T5545] usb 7-1: Product: syz [ 169.310969][ T8098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.353981][ T5545] usb 7-1: Manufacturer: syz [ 169.387748][ T5545] usb 7-1: SerialNumber: syz [ 169.397272][ T8098] F2FS-fs (loop3): invalid crc value [ 169.434961][ T5545] usb 7-1: config 0 descriptor?? [ 169.443129][ T8098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.475017][ T5545] mcba_usb 7-1:0.0: Can't find endpoints [ 169.511879][ T4450] udevd[4450]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 169.582512][ T8098] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.600815][ T5526] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 169.611610][ T8098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.628448][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.650283][ T5526] usb 2-1: USB disconnect, device number 7 [ 169.680714][ T8078] udc-core: couldn't find an available UDC or it's busy [ 169.759784][ T8078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 169.822222][ T5528] usb 7-1: USB disconnect, device number 6 [ 170.262503][ T8126] loop3: detected capacity change from 0 to 16 [ 170.312552][ T8126] erofs: (device loop3): mounted with root inode @ nid 36. [ 170.550139][ T26] audit: type=1400 audit(1793442219.259:15): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=8137 comm="syz.1.1271" name=223A6F offset=35 [ 170.683714][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1276'. [ 170.707704][ T26] audit: type=1107 audit(1793442219.419:16): pid=8144 uid=0 auid=4 ses=1 subj=unconfined msg='' [ 170.757034][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1276'. [ 170.776741][ T8152] ip_tables: iptables: counters copy to user failed while replacing table [ 170.970180][ T8165] loop0: detected capacity change from 0 to 256 [ 171.047103][ T8169] loop3: detected capacity change from 0 to 128 [ 171.334799][ T8179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1290'. [ 171.380448][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 171.442689][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 171.482504][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 171.644424][ T8195] sctp: [Deprecated]: syz.3.1298 (pid 8195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.644424][ T8195] Use struct sctp_sack_info instead [ 171.740846][ T8204] loop6: detected capacity change from 0 to 64 [ 171.879486][ T8207] loop0: detected capacity change from 0 to 2048 [ 171.962648][ T8207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.302420][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 172.353585][ T8223] loop0: detected capacity change from 0 to 64 [ 172.434219][ T8223] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 172.530752][ T8223] MINIX-fs: bad superblock [ 172.854076][ T5526] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 173.174020][ T5526] usb 6-1: not running at top speed; connect to a high speed hub [ 173.254281][ T5526] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 173.270341][ T5526] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.434037][ T5526] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 173.443132][ T5526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.456343][ T5526] usb 6-1: Product: syz [ 173.460533][ T5526] usb 6-1: Manufacturer: syz [ 173.468402][ T5526] usb 6-1: SerialNumber: syz [ 173.515665][ T5526] oti6858 6-1:1.0: oti6858 converter detected [ 173.527391][ T5526] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 186.334207][ T5545] Bluetooth: hci3: command 0x0406 tx timeout [ 186.340337][ T5545] Bluetooth: hci2: command 0x0406 tx timeout [ 186.353774][ T5545] Bluetooth: hci4: command 0x0406 tx timeout [ 193.216260][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.223075][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.694014][ T5528] Bluetooth: hci1: command 0x0406 tx timeout [ 201.702163][ T5528] Bluetooth: hci0: command 0x0406 tx timeout [ 207.294293][ T1241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.654552][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.935959][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943332][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.657137][ T1241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.654309][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.378877][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385217][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.694079][ T27] INFO: task jbd2/sda1-8:3523 blocked for more than 143 seconds. [ 325.702322][ T27] Not tainted syzkaller #0 [ 325.720308][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.732835][ T27] task:jbd2/sda1-8 state:D stack:25360 pid: 3523 ppid: 2 flags:0x00004000 [ 325.750587][ T27] Call Trace: [ 325.754598][ T27] [ 325.757551][ T27] __schedule+0x11c3/0x4350 [ 325.762576][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 325.772318][ T27] ? lock_chain_count+0x20/0x20 [ 325.779476][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 325.790864][ T27] ? release_firmware_map_entry+0x190/0x190 [ 325.798035][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 325.807776][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 325.813430][ T27] schedule+0x11b/0x1e0 [ 325.818254][ T27] io_schedule+0x7c/0xd0 [ 325.823047][ T27] bit_wait_io+0xd/0xc0 [ 325.831744][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 325.838999][ T27] ? bit_wait+0xc0/0xc0 [ 325.843524][ T27] ? __wait_on_bit+0x170/0x170 [ 325.852790][ T27] ? do_raw_write_lock+0x11a/0x260 [ 325.858506][ T27] ? bit_waitqueue+0x30/0x30 [ 325.863285][ T27] ? do_raw_read_unlock+0x39/0x70 [ 325.872368][ T27] jbd2_journal_commit_transaction+0x2f0b/0x5c30 [ 325.879108][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 325.889588][ T27] ? _raw_spin_unlock+0x40/0x40 [ 325.897878][ T27] ? rcu_is_watching+0x11/0xa0 [ 325.903137][ T27] ? __timer_delete_sync+0x1f5/0x290 [ 325.912513][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 325.918063][ T27] ? timer_delete_sync+0x20/0x20 [ 325.923196][ T27] ? do_raw_read_unlock+0x70/0x70 [ 325.931968][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 325.937963][ T27] kjournald2+0x45a/0x900 [ 325.943546][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 325.952938][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 325.959294][ T27] ? init_wait_entry+0xd0/0xd0 [ 325.967790][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 325.974324][ T27] ? __kthread_parkme+0x14e/0x1b0 [ 325.979378][ T27] kthread+0x42e/0x520 [ 325.983457][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 325.992136][ T27] ? kthread_blkcg+0xd0/0xd0 [ 325.996968][ T27] ret_from_fork+0x1f/0x30 [ 326.001400][ T27] [ 326.010350][ T27] INFO: task syz-executor:4176 blocked for more than 143 seconds. [ 326.019255][ T27] Not tainted syzkaller #0 [ 326.027844][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.037352][ T27] task:syz-executor state:D stack:22928 pid: 4176 ppid: 4175 flags:0x00004002 [ 326.051513][ T27] Call Trace: [ 326.055072][ T27] [ 326.058115][ T27] __schedule+0x11c3/0x4350 [ 326.062657][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.072456][ T27] ? lock_chain_count+0x20/0x20 [ 326.078154][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 326.083476][ T27] ? release_firmware_map_entry+0x190/0x190 [ 326.093557][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 326.100893][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 326.109604][ T27] schedule+0x11b/0x1e0 [ 326.116337][ T27] io_schedule+0x7c/0xd0 [ 326.120682][ T27] bit_wait_io+0xd/0xc0 [ 326.129069][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 326.135066][ T27] ? bit_wait+0xc0/0xc0 [ 326.139354][ T27] ? __wait_on_bit+0x170/0x170 [ 326.148724][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 326.154222][ T27] ? bit_waitqueue+0x30/0x30 [ 326.158948][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 326.167915][ T27] do_get_write_access+0x134/0xe40 [ 326.173079][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 326.180703][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 326.190388][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 326.196916][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 326.202504][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 326.212123][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 326.218320][ T27] ext4_dirty_inode+0xbf/0x100 [ 326.223100][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 326.234901][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 326.240297][ T27] generic_update_time+0x1cd/0x1f0 [ 326.250828][ T27] file_update_time+0x3c0/0x440 [ 326.258603][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 326.267551][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 326.273054][ T27] ? wp_page_shared+0x15b/0x6c0 [ 326.278403][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 326.288125][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 326.293181][ T27] do_page_mkwrite+0x168/0x3c0 [ 326.298603][ T27] wp_page_shared+0x163/0x6c0 [ 326.303500][ T27] handle_mm_fault+0x1fbd/0x4440 [ 326.312152][ T27] ? get_page+0xe0/0xe0 [ 326.317000][ T27] ? vmacache_find+0x4e3/0x590 [ 326.321951][ T27] ? vmacache_update+0xa0/0x100 [ 326.330462][ T27] ? find_vma+0x1df/0x230 [ 326.337131][ T27] do_user_addr_fault+0x494/0xc90 [ 326.342478][ T27] exc_page_fault+0x60/0x100 [ 326.353379][ T27] ? clear_bhb_loop+0x30/0x80 [ 326.358815][ T27] asm_exc_page_fault+0x22/0x30 [ 326.367831][ T27] RIP: 0033:0x7f07ed3365e3 [ 326.372400][ T27] RSP: 002b:00007ffe02162320 EFLAGS: 00010202 [ 326.378830][ T27] RAX: 00007f07e94afd3c RBX: 00007ffe02162450 RCX: 0000000000000000 [ 326.390189][ T27] RDX: 00007f07e94afd38 RSI: 0000000000000008 RDI: 00007ffe02162450 [ 326.399025][ T27] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 326.410630][ T27] R10: 00007ffe02162430 R11: 0000000000000000 R12: 0000000000000000 [ 326.421453][ T27] R13: 00000000000152c4 R14: fffffffffffead3c R15: 0000000000000000 [ 326.433313][ T27] [ 326.436807][ T27] INFO: task syz.5.1315:8231 blocked for more than 144 seconds. [ 326.449630][ T27] Not tainted syzkaller #0 [ 326.457695][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.470310][ T27] task:syz.5.1315 state:D stack:27408 pid: 8231 ppid: 4440 flags:0x00004004 [ 326.479918][ T27] Call Trace: [ 326.483371][ T27] [ 326.489936][ T27] __schedule+0x11c3/0x4350 [ 326.496195][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.502281][ T27] ? lock_chain_count+0x20/0x20 [ 326.510685][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 326.516428][ T27] ? release_firmware_map_entry+0x190/0x190 [ 326.522436][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 326.531773][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 326.537253][ T27] schedule+0x11b/0x1e0 [ 326.541432][ T27] io_schedule+0x7c/0xd0 [ 326.549286][ T27] bit_wait_io+0xd/0xc0 [ 326.556065][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 326.562280][ T27] ? bit_wait+0xc0/0xc0 [ 326.571829][ T27] ? __wait_on_bit+0x170/0x170 [ 326.578290][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 326.587340][ T27] ? bit_waitqueue+0x30/0x30 [ 326.592145][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 326.598188][ T27] do_get_write_access+0x134/0xe40 [ 326.603700][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 326.615033][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 326.621238][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 326.631553][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 326.637232][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 326.643058][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 326.652089][ T27] ext4_dirty_inode+0xbf/0x100 [ 326.659076][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 326.669706][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 326.676691][ T27] generic_update_time+0x1cd/0x1f0 [ 326.681915][ T27] file_update_time+0x3c0/0x440 [ 326.691080][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 326.696861][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 326.701929][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 326.711346][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 326.718131][ T27] ? count_memcg_event_mm+0x324/0x370 [ 326.723522][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 326.733704][ T27] ? finish_lock_switch+0x12d/0x290 [ 326.747998][ T27] do_page_mkwrite+0x168/0x3c0 [ 326.754463][ T27] handle_mm_fault+0x1e47/0x4440 [ 326.760958][ T27] ? get_page+0xe0/0xe0 [ 326.768739][ T27] ? vmacache_find+0x238/0x590 [ 326.773695][ T27] ? find_vma+0xd2/0x230 [ 326.779445][ T27] do_user_addr_fault+0x494/0xc90 [ 326.790225][ T27] exc_page_fault+0x60/0x100 [ 326.795113][ T27] asm_exc_page_fault+0x22/0x30 [ 326.800049][ T27] RIP: 0033:0x7fecff4c9332 [ 326.808020][ T27] RSP: 002b:00007ffea818d7e0 EFLAGS: 00010202 [ 326.816245][ T27] RAX: 0000000000003008 RBX: 00007fed003aa720 RCX: 0000000000000000 [ 326.828415][ T27] RDX: 0000001b31e21000 RSI: 0000000000000008 RDI: 00007fed003aa720 [ 326.837295][ T27] RBP: 00000000000004c8 R08: 00007fecff865000 R09: 00007fecff87b038 [ 326.849630][ T27] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff840ad58d [ 326.857969][ T27] R13: 00007fecff87b038 R14: 000000000000017c R15: ffffffffffffd000 [ 326.870385][ T27] ? kobject_get_path+0x18d/0x210 [ 326.876089][ T27] [ 326.879284][ T27] INFO: task syz.6.1316:8234 blocked for more than 144 seconds. [ 326.891934][ T27] Not tainted syzkaller #0 [ 326.898977][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.911555][ T27] task:syz.6.1316 state:D stack:27664 pid: 8234 ppid: 4485 flags:0x00004004 [ 326.921119][ T27] Call Trace: [ 326.927674][ T27] [ 326.930701][ T27] __schedule+0x11c3/0x4350 [ 326.935677][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.942075][ T27] ? lock_chain_count+0x20/0x20 [ 326.950733][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 326.956572][ T27] ? release_firmware_map_entry+0x190/0x190 [ 326.968208][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 326.975339][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 326.980741][ T27] schedule+0x11b/0x1e0 [ 326.988377][ T27] io_schedule+0x7c/0xd0 [ 326.992834][ T27] bit_wait_io+0xd/0xc0 [ 326.998721][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 327.009325][ T27] ? bit_wait+0xc0/0xc0 [ 327.013576][ T27] ? __wait_on_bit+0x170/0x170 [ 327.018815][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 327.027588][ T27] ? bit_waitqueue+0x30/0x30 [ 327.032381][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 327.038022][ T27] do_get_write_access+0x134/0xe40 [ 327.043344][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 327.052969][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 327.060971][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 327.071788][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 327.078095][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 327.087340][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 327.093326][ T27] ext4_dirty_inode+0xbf/0x100 [ 327.099363][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 327.110275][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 327.117911][ T27] generic_update_time+0x1cd/0x1f0 [ 327.123078][ T27] file_update_time+0x3c0/0x440 [ 327.131408][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 327.137696][ T27] ? mark_lock+0x94/0x320 [ 327.142039][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 327.150618][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 327.156588][ T27] ? pte_alloc_one+0x287/0x310 [ 327.161491][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 327.172357][ T27] ? __rwlock_init+0x140/0x140 [ 327.177964][ T27] ? count_memcg_event_mm+0x324/0x370 [ 327.183383][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 327.191979][ T27] do_page_mkwrite+0x168/0x3c0 [ 327.196988][ T27] handle_mm_fault+0x1e47/0x4440 [ 327.202047][ T27] ? get_page+0xe0/0xe0 [ 327.209883][ T27] ? vmacache_find+0x4e3/0x590 [ 327.216889][ T27] ? vmacache_update+0xa0/0x100 [ 327.221869][ T27] ? find_vma+0x1df/0x230 [ 327.231189][ T27] do_user_addr_fault+0x494/0xc90 [ 327.236605][ T27] exc_page_fault+0x60/0x100 [ 327.241532][ T27] ? clear_bhb_loop+0x30/0x80 [ 327.250196][ T27] asm_exc_page_fault+0x22/0x30 [ 327.255362][ T27] RIP: 0033:0x7f96bddafea3 [ 327.259959][ T27] RSP: 002b:00007ffd78716c30 EFLAGS: 00010246 [ 327.270984][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34564000 [ 327.279733][ T27] RDX: 0000001b34524000 RSI: 0000000000400000 RDI: 00007f96be12a708 [ 327.290967][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 327.301787][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 327.312965][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd78716ec0 [ 327.322165][ T27] [ 327.329618][ T27] [ 327.329618][ T27] Showing all locks held in the system: [ 327.340179][ T27] 1 lock held by khungtaskd/27: [ 327.348012][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 327.358753][ T27] 2 locks held by getty/3941: [ 327.366549][ T27] #0: ffff88802d989098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 327.378599][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 327.392119][ T27] 3 locks held by syz-executor/4176: [ 327.398586][ T27] #0: ffff88807a825f68 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 327.411747][ T27] #1: ffff88814cd70558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 327.422732][ T27] #2: ffff88814cd74990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 327.437589][ T27] 3 locks held by syz.5.1315/8231: [ 327.442990][ T27] #0: ffff88801786e6a8 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 327.459871][ T27] #1: ffff88814cd70558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 327.470222][ T27] #2: ffff88814cd74990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 327.484666][ T27] 3 locks held by syz.6.1316/8234: [ 327.489797][ T27] #0: ffff88801786f528 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 327.501867][ T27] #1: ffff88814cd70558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 327.513268][ T27] #2: ffff88814cd74990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 327.526701][ T27] [ 327.529040][ T27] ============================================= [ 327.529040][ T27] [ 327.538786][ T27] NMI backtrace for cpu 0 [ 327.543242][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 327.550518][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.560827][ T27] Call Trace: [ 327.564099][ T27] [ 327.567204][ T27] dump_stack_lvl+0x188/0x250 [ 327.572006][ T27] ? show_regs_print_info+0x20/0x20 [ 327.577386][ T27] ? load_image+0x410/0x410 [ 327.582091][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 327.587540][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 327.592674][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 327.597724][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 327.604331][ T27] ? _printk+0xda/0x130 [ 327.608810][ T27] ? load_image+0x410/0x410 [ 327.613822][ T27] ? load_image+0x410/0x410 [ 327.618434][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 327.624538][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 327.630830][ T27] watchdog+0xe1b/0xe60 [ 327.635009][ T27] kthread+0x42e/0x520 [ 327.639080][ T27] ? hungtask_pm_notify+0x40/0x40 [ 327.644388][ T27] ? kthread_blkcg+0xd0/0xd0 [ 327.648993][ T27] ret_from_fork+0x1f/0x30 [ 327.653424][ T27] [ 327.673912][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 327.681042][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 327.688320][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 327.698453][ T27] Call Trace: [ 327.701738][ T27] [ 327.704851][ T27] dump_stack_lvl+0x188/0x250 [ 327.709633][ T27] ? show_regs_print_info+0x20/0x20 [ 327.715010][ T27] ? load_image+0x410/0x410 [ 327.719629][ T27] panic+0x2f8/0x850 [ 327.723794][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 327.729527][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 327.734190][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 327.739745][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 327.745915][ T27] watchdog+0xe5a/0xe60 [ 327.750194][ T27] kthread+0x42e/0x520 [ 327.754348][ T27] ? hungtask_pm_notify+0x40/0x40 [ 327.760374][ T27] ? kthread_blkcg+0xd0/0xd0 [ 327.765172][ T27] ret_from_fork+0x1f/0x30 [ 327.769636][ T27] [ 327.772722][ T27] Kernel Offset: disabled [ 327.777079][ T27] Rebooting in 86400 seconds..