last executing test programs: 10.600532269s ago: executing program 4 (id=738): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 9.635267893s ago: executing program 2 (id=741): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x20, 0x381) write(r1, &(0x7f00000000c0)='1\x00', 0x1) 9.355482149s ago: executing program 0 (id=744): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ff0012ffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000086dd080088be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800000000"], 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) write$UHID_INPUT2(r0, &(0x7f0000000900), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 9.122400619s ago: executing program 1 (id=745): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.425508919s ago: executing program 2 (id=746): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xff, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) 8.186169165s ago: executing program 4 (id=748): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0x303, 0x8, 0x2b, 0x0, 0x0}) 8.099817057s ago: executing program 3 (id=749): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0xf, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 8.056928004s ago: executing program 1 (id=750): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) accept4$inet(r0, 0x0, 0x0, 0x80000) 8.02418693s ago: executing program 2 (id=751): r0 = syz_usb_connect$hid(0x3, 0x94, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1803, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x81, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x20, 0xa, 0x28, {0x28, 0x2, "77f11db3ca8977b41af7e0bfd82c59586fc0a32eda0fc82e1c1dc178aeb4f6389c58a611d45d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.862470764s ago: executing program 0 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 7.753263761s ago: executing program 4 (id=753): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400885d) 7.643994966s ago: executing program 5 (id=754): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000fedbdf2580200000000400050015000008000300", @ANYRES16=r6, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 7.633656861s ago: executing program 1 (id=755): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@journal_dev}, {@nojournal_checksum}, {@block_validity}, {@debug}, {@bh}, {@noacl}]}, 0x1, 0x479, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 7.631791313s ago: executing program 3 (id=756): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400885d) 7.392631781s ago: executing program 0 (id=757): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ff0012ffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000086dd080088be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800"], 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 7.275041758s ago: executing program 1 (id=758): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone3(0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x20, 0x381) write(r1, &(0x7f00000000c0)='1\x00', 0x1) 6.322904091s ago: executing program 5 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 4.380454492s ago: executing program 1 (id=760): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030322c736d61636b6673665e6f6f723d736d61636b66737472616e732d7574652c666f776e65723ee913b6e7858b459aea76a61374d95a5ba0ea131492042d59ca3669979b6c1e1ec7d9bb6c99ec974795d51b342596c4a62342a4d28a02f68f2ee922c8041f11fad6b3d4a0518253955e447f57f4d4dc2acad3457c75d1861af156d552fb5c05e042d5b09427d15fea177d488b", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab", @ANYBLOB="f9c1eb3e827127e08d98faa9d0c71b0e9140cd349baa"], 0xa, 0xc35, &(0x7f0000001c40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x4, 0xda00, 0x6, 0xffe}}, 0xfffffffffffffffe, 0x1000) 3.333485963s ago: executing program 5 (id=761): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone3(0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x20, 0x381) write(r1, &(0x7f00000000c0)='1\x00', 0x1) 3.321527432s ago: executing program 4 (id=762): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.313161157s ago: executing program 3 (id=763): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x2f2, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) 3.222974225s ago: executing program 2 (id=764): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ff0012ffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000086dd080088be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800000000"], 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 2.605991444s ago: executing program 0 (id=765): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 1.996095203s ago: executing program 5 (id=766): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.941180321s ago: executing program 4 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee00, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) close(r0) unlinkat(r0, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000001240001801400018008000100ac1414bb08000200ac0314bb0c00028005004100000000002400028014000180080001000000000008000900ac1414000c000280050001000000000008000740000000000800084000000cde10a8ea1af935d155eb140c23b578ee9504b0f423674f4e36092ad124e3911c2c5f14c85ca3a94c94edbb4323da986a74b443d2fa60ce919b27244f52638e2aa56ca238b18e273c04d991e00261ca1c32cb831614509d2b1b13d20ce15f5a1b63e22e908e12e0463e2a89dec88fcaf10cb85998971144ad8d8c9d10e295"], 0x6c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0xa, {0x4000003, 0x5ffc, 0x8, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 1.912080338s ago: executing program 1 (id=768): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) 1.786743869s ago: executing program 0 (id=769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x2, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x3ffffffff}, 0x400}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x1, 0x8, 0x0, 0x1, 0x7}]}]}, 0xfc}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.644328846s ago: executing program 3 (id=770): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}, {&(0x7f0000000340)="b54ed3488224b19127188fd3b695960c8b0f8e4954", 0x15}, {&(0x7f0000000140)="cbb2880fd6c639f1f539bd31d9412ee4ba", 0x11}], 0x3}, 0xd890) 1.231829081s ago: executing program 4 (id=771): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) 1.123920098s ago: executing program 3 (id=772): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000004c0)=0x6, 0x2) 1.089959951s ago: executing program 5 (id=773): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4002, &(0x7f0000000080)=ANY=[@ANYBLOB='dir_umask=00000000000000000000007,codepage=iso8859-7,iocharset=iso8859-4,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c002883d9fa"], 0x1, 0x343, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x108) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.051473406s ago: executing program 0 (id=774): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400885d) 668.112009ms ago: executing program 2 (id=775): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 547.649325ms ago: executing program 3 (id=776): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400885d) 232.670906ms ago: executing program 5 (id=777): syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x2, 0x8}, {0x7, 0x2, 0x14, 0x4}}}}, 0x15) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=778): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(0xffffffffffffffff, 0x32ce970513f32900) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x20, 0x381) write(r1, &(0x7f00000000c0)='1\x00', 0x1) kernel console output (not intermixed with test programs): t [ 92.797550][ T4926] Bluetooth: hci2: command tx timeout [ 92.797765][ T5615] Bluetooth: hci0: command tx timeout [ 92.803815][ T5630] Bluetooth: hci3: command tx timeout [ 92.809153][ T5609] Bluetooth: hci4: command tx timeout [ 92.815120][ T5624] Bluetooth: hci5: command tx timeout [ 93.370116][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.377397][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.384688][ T5608] bridge_slave_0: entered allmulticast mode [ 93.393286][ T5608] bridge_slave_0: entered promiscuous mode [ 93.443455][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.450838][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.458714][ T5616] bridge_slave_0: entered allmulticast mode [ 93.466569][ T5616] bridge_slave_0: entered promiscuous mode [ 93.499046][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.506282][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.513463][ T5608] bridge_slave_1: entered allmulticast mode [ 93.521456][ T5608] bridge_slave_1: entered promiscuous mode [ 93.566192][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.573349][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.580715][ T5616] bridge_slave_1: entered allmulticast mode [ 93.588463][ T5616] bridge_slave_1: entered promiscuous mode [ 93.700057][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.707390][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.714585][ T5618] bridge_slave_0: entered allmulticast mode [ 93.722425][ T5618] bridge_slave_0: entered promiscuous mode [ 93.758215][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.778565][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.788005][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.795251][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.803054][ T5618] bridge_slave_1: entered allmulticast mode [ 93.811087][ T5618] bridge_slave_1: entered promiscuous mode [ 93.840812][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.865542][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.979599][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.986895][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.994107][ T5620] bridge_slave_0: entered allmulticast mode [ 94.002716][ T5620] bridge_slave_0: entered promiscuous mode [ 94.023616][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.030839][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.038350][ T5607] bridge_slave_0: entered allmulticast mode [ 94.046023][ T5607] bridge_slave_0: entered promiscuous mode [ 94.069751][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.085798][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.095166][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.102355][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109837][ T5619] bridge_slave_0: entered allmulticast mode [ 94.117557][ T5619] bridge_slave_0: entered promiscuous mode [ 94.126015][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.133299][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.140896][ T5620] bridge_slave_1: entered allmulticast mode [ 94.148924][ T5620] bridge_slave_1: entered promiscuous mode [ 94.158621][ T5616] team0: Port device team_slave_0 added [ 94.164370][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.171652][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.179313][ T5607] bridge_slave_1: entered allmulticast mode [ 94.187068][ T5607] bridge_slave_1: entered promiscuous mode [ 94.196171][ T5608] team0: Port device team_slave_0 added [ 94.214951][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.222198][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.229698][ T5619] bridge_slave_1: entered allmulticast mode [ 94.237706][ T5619] bridge_slave_1: entered promiscuous mode [ 94.272568][ T5616] team0: Port device team_slave_1 added [ 94.293389][ T5608] team0: Port device team_slave_1 added [ 94.378385][ T5618] team0: Port device team_slave_0 added [ 94.388069][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.400400][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.425498][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.449907][ T5618] team0: Port device team_slave_1 added [ 94.458496][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.470405][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.494717][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.501853][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.527937][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.542722][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.565537][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.572867][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.598950][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.666036][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.673130][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.699201][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.724414][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.731492][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.757621][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.784261][ T5619] team0: Port device team_slave_0 added [ 94.792287][ T5620] team0: Port device team_slave_0 added [ 94.798895][ T5624] Bluetooth: hci1: command tx timeout [ 94.816980][ T5607] team0: Port device team_slave_0 added [ 94.833562][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.840649][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.866625][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.877260][ T5630] Bluetooth: hci0: command tx timeout [ 94.879870][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.883238][ T5624] Bluetooth: hci4: command tx timeout [ 94.889650][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.889702][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.926342][ T5630] Bluetooth: hci5: command tx timeout [ 94.932364][ T5624] Bluetooth: hci3: command tx timeout [ 94.937810][ T4926] Bluetooth: hci2: command tx timeout [ 94.955152][ T5619] team0: Port device team_slave_1 added [ 94.972429][ T5620] team0: Port device team_slave_1 added [ 94.993063][ T5607] team0: Port device team_slave_1 added [ 95.033129][ T5618] hsr_slave_0: entered promiscuous mode [ 95.040707][ T5618] hsr_slave_1: entered promiscuous mode [ 95.101218][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.108370][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.134438][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.175085][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.182172][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.208863][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.233916][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.241040][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.267057][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.288247][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.295825][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.322414][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.340721][ T5616] hsr_slave_0: entered promiscuous mode [ 95.347366][ T5616] hsr_slave_1: entered promiscuous mode [ 95.353594][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 95.359566][ T5616] Cannot create hsr debugfs directory [ 95.365871][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.373275][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.399684][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.417959][ T5608] hsr_slave_0: entered promiscuous mode [ 95.424463][ T5608] hsr_slave_1: entered promiscuous mode [ 95.431084][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 95.437399][ T5608] Cannot create hsr debugfs directory [ 95.468224][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.475304][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.501440][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.741031][ T5607] hsr_slave_0: entered promiscuous mode [ 95.747615][ T5607] hsr_slave_1: entered promiscuous mode [ 95.753805][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 95.759854][ T5607] Cannot create hsr debugfs directory [ 95.792778][ T5620] hsr_slave_0: entered promiscuous mode [ 95.799346][ T5620] hsr_slave_1: entered promiscuous mode [ 95.805555][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 95.811442][ T5620] Cannot create hsr debugfs directory [ 95.852965][ T5619] hsr_slave_0: entered promiscuous mode [ 95.859589][ T5619] hsr_slave_1: entered promiscuous mode [ 95.865892][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 95.872277][ T5619] Cannot create hsr debugfs directory [ 96.431910][ T5618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.447082][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.495933][ T5618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.505728][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.514209][ T5618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.525987][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.569023][ T5618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.580263][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.649354][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.663241][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.677464][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.690504][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.699138][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.709641][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.717876][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.729603][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.846016][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.860103][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.868686][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.876534][ T4926] Bluetooth: hci1: command tx timeout [ 96.881238][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.890653][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.901887][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.914131][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.925176][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.956574][ T5609] Bluetooth: hci5: command tx timeout [ 96.961318][ T4926] Bluetooth: hci2: command tx timeout [ 96.962052][ T5630] Bluetooth: hci3: command tx timeout [ 96.962093][ T5630] Bluetooth: hci4: command tx timeout [ 96.962125][ T5630] Bluetooth: hci0: command tx timeout [ 97.072234][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.082969][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.095028][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.109723][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.118820][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.129632][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.137859][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.149199][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.225032][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.315907][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.329828][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.340355][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.360789][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.371197][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.396913][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.409496][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.425697][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.433668][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.463468][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.473873][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.489203][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.531714][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.538913][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.633591][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.645945][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.654683][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.665478][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.678776][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.689986][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.707212][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.721030][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.732448][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.769761][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.790359][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.797529][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.873522][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.880686][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.922629][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.935244][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.985701][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.992877][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.032107][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.039305][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.082106][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.143524][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.150748][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.199562][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.206805][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.288461][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.425557][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.480162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.487375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.577111][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.593727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.600941][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.769056][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.845857][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.853083][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.926134][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.933327][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.956441][ T4926] Bluetooth: hci1: command tx timeout [ 99.048031][ T4926] Bluetooth: hci5: command tx timeout [ 99.048131][ T5624] Bluetooth: hci0: command tx timeout [ 99.053653][ T4926] Bluetooth: hci4: command tx timeout [ 99.053690][ T4926] Bluetooth: hci3: command tx timeout [ 99.053723][ T4926] Bluetooth: hci2: command tx timeout [ 99.313802][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.953821][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.065708][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.303804][ T5616] veth0_vlan: entered promiscuous mode [ 100.416468][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.432744][ T5608] veth0_vlan: entered promiscuous mode [ 100.460446][ T5616] veth1_vlan: entered promiscuous mode [ 100.516974][ T5608] veth1_vlan: entered promiscuous mode [ 100.635771][ T5618] veth0_vlan: entered promiscuous mode [ 100.682847][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.693259][ T5616] veth0_macvtap: entered promiscuous mode [ 100.738020][ T5608] veth0_macvtap: entered promiscuous mode [ 100.762947][ T5618] veth1_vlan: entered promiscuous mode [ 100.785568][ T5608] veth1_macvtap: entered promiscuous mode [ 100.795899][ T5616] veth1_macvtap: entered promiscuous mode [ 100.872789][ T5619] veth0_vlan: entered promiscuous mode [ 100.931350][ T5619] veth1_vlan: entered promiscuous mode [ 100.960879][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.970851][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.019284][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.028990][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.078392][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.146461][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.163953][ T5618] veth0_macvtap: entered promiscuous mode [ 101.198458][ T3281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.212933][ T5619] veth0_macvtap: entered promiscuous mode [ 101.232960][ T5618] veth1_macvtap: entered promiscuous mode [ 101.249379][ T5619] veth1_macvtap: entered promiscuous mode [ 101.347147][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.381247][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.420320][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.436010][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.444710][ T5620] veth0_vlan: entered promiscuous mode [ 101.516729][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.526032][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.534609][ T5607] veth0_vlan: entered promiscuous mode [ 101.556020][ T3281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.569372][ T3281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.573194][ T5620] veth1_vlan: entered promiscuous mode [ 101.630078][ T5607] veth1_vlan: entered promiscuous mode [ 101.681297][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.691713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.699540][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.707530][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.737613][ T3281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.893310][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.924621][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.927977][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.014276][ T5607] veth0_macvtap: entered promiscuous mode [ 102.047237][ T5620] veth0_macvtap: entered promiscuous mode [ 102.098429][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.129388][ T5607] veth1_macvtap: entered promiscuous mode [ 102.162020][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.182431][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.237924][ T5620] veth1_macvtap: entered promiscuous mode [ 102.292374][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.303222][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.341758][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.352528][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.367316][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.384548][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.398453][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.462077][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.493368][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.530146][ T5852] loop3: detected capacity change from 0 to 2048 [ 102.605545][ T5852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.637540][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.826673][ T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.992027][ T5856] loop5: detected capacity change from 0 to 2048 [ 103.055502][ T5856] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 103.120832][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.153872][ T5856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.163632][ T133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.254786][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.283438][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.847150][ T5866] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 104.587633][ T133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.786299][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.812473][ T5873] loop0: detected capacity change from 0 to 256 [ 104.822552][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.909231][ T5871] lo speed is unknown, defaulting to 1000 [ 105.339726][ T5871] lo speed is unknown, defaulting to 1000 [ 105.425711][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.467489][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.521599][ T5880] netlink: 'syz.0.13': attribute type 7 has an invalid length. [ 105.551077][ T5871] lo speed is unknown, defaulting to 1000 [ 105.569993][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.585319][ T5871] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 105.617501][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.633693][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.649967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.683589][ T5871] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 105.715670][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.773197][ T5871] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 105.790393][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.807916][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.826434][ T1148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.845215][ T1148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.867642][ T5871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.875134][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 105.925307][ T5871] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.948593][ T5884] random: crng reseeded on system resumption [ 105.967222][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.033003][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.175835][ T5871] lo speed is unknown, defaulting to 1000 [ 106.181879][ T5868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181963][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.182025][ T5868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.182086][ T5868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.182146][ T5868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.330813][ T5871] lo speed is unknown, defaulting to 1000 [ 106.369961][ T5888] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 106.369961][ T5888] Please contact the netfilter-devel mailing list or update your nftables rules. [ 106.427996][ T5871] lo speed is unknown, defaulting to 1000 [ 106.495188][ T5890] loop1: detected capacity change from 0 to 64 [ 106.512996][ T5871] lo speed is unknown, defaulting to 1000 [ 106.572192][ T5894] loop5: detected capacity change from 0 to 64 [ 106.581683][ T5871] lo speed is unknown, defaulting to 1000 [ 106.608627][ T5871] lo speed is unknown, defaulting to 1000 [ 106.665749][ T5890] Bad inode number on dev loop1: 2 is out of range [ 106.679843][ T5896] loop4: detected capacity change from 0 to 8 [ 107.109673][ T5904] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 107.116388][ T5904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.180799][ T5904] vhci_hcd vhci_hcd.0: Device attached [ 107.557491][ T5734] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 108.366535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.314811][ T5905] vhci_hcd: connection reset by peer [ 109.584913][ T1148] vhci_hcd vhci_hcd.3: stop threads [ 109.591667][ T1148] vhci_hcd vhci_hcd.3: release socket [ 109.603916][ T1148] vhci_hcd vhci_hcd.3: disconnect device [ 109.695566][ T5924] loop5: detected capacity change from 0 to 4096 [ 109.712852][ T5924] EXT4-fs (loop5): unsupported descriptor size 0 [ 110.257858][ T5609] Bluetooth: hci3: command 0x0405 tx timeout [ 110.770890][ T5932] loop3: detected capacity change from 0 to 256 [ 110.800214][ T5932] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x111902d0, checksum : 0x1119abd0) [ 110.810855][ T5932] exFAT-fs (loop3): invalid boot region [ 110.864945][ T5932] exFAT-fs (loop3): failed to recognize exfat type [ 111.423444][ T5941] loop0: detected capacity change from 0 to 64 [ 111.453508][ T5942] loop2: detected capacity change from 0 to 16 [ 111.631927][ T5942] erofs (device loop2): mounted with root inode @ nid 36. [ 112.170728][ T5934] loop4: detected capacity change from 0 to 8192 [ 112.292616][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.446392][ T5934] loop4: p1 p2 p4 [ 112.467654][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 112.473954][ T5934] loop4: p1 start 759040 is beyond EOD, truncated [ 112.499155][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.515025][ T5946] loop3: detected capacity change from 0 to 1764 [ 112.531512][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 112.562806][ T5934] loop4: p4 start 83886080 is beyond EOD, truncated [ 112.615823][ T29] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 112.654379][ T29] usb 2-1: config 9 has no interface number 0 [ 112.691619][ T29] usb 2-1: config 9 interface 57 has no altsetting 0 [ 112.701384][ T5946] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 112.732460][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.564514][ T5734] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 113.651127][ T29] usb 2-1: Product: syz [ 115.048411][ T29] usb 2-1: Manufacturer: syz [ 115.096681][ T5952] loop2: detected capacity change from 0 to 1024 [ 115.141048][ T29] usb 2-1: SerialNumber: syz [ 115.205494][ T5952] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.282828][ T5952] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.328225][ T29] usb 2-1: can't set config #9, error -71 [ 115.347342][ T5952] JBD2: no valid journal superblock found [ 115.392704][ T5952] EXT4-fs (loop2): Could not load journal inode [ 115.401448][ T29] usb 2-1: USB disconnect, device number 2 [ 115.570159][ T5961] loop1: detected capacity change from 0 to 24 [ 115.612374][ T5961] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 115.667316][ T5961] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 115.786875][ T5964] loop5: detected capacity change from 0 to 4096 [ 116.042011][ T5964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.093337][ T5861] udevd[5861]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 116.375568][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.392426][ T5982] loop2: detected capacity change from 0 to 4096 [ 116.601450][ T5980] loop1: detected capacity change from 0 to 8192 [ 116.718316][ T5982] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 117.060987][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.871180][ T5989] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 118.058533][ T5993] loop3: detected capacity change from 0 to 512 [ 118.133607][ T5993] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.188324][ T5993] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.228941][ T5992] loop4: detected capacity change from 0 to 4096 [ 118.259556][ T5993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.289921][ T5992] EXT4-fs (loop4): unsupported descriptor size 0 [ 118.320051][ T5995] loop5: detected capacity change from 0 to 256 [ 118.398151][ T5993] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.435478][ T5995] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.483558][ T5993] EXT4-fs (loop3): 1 truncate cleaned up [ 118.549526][ T6003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 118.556102][ T6003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.568925][ T5993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.593121][ T6000] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 118.655867][ T6000] bond1: entered allmulticast mode [ 118.664034][ T6003] vhci_hcd vhci_hcd.0: Device attached [ 118.681197][ T5995] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 118.906201][ T5734] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 118.908136][ T5995] UBIFS error (pid: 5995): cannot open "ubi:0", error -19 [ 119.143531][ T5609] Bluetooth: hci1: command 0x0401 tx timeout [ 119.685622][ T6004] vhci_hcd: connection closed [ 119.750275][ T5869] vhci_hcd vhci_hcd.2: stop threads [ 119.985463][ T5869] vhci_hcd vhci_hcd.2: release socket [ 120.075425][ T5869] vhci_hcd vhci_hcd.2: disconnect device [ 120.223679][ T5734] usb 37-1: enqueue for inactive port 0 [ 120.316416][ T5734] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 121.166459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.292210][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.354294][ T6026] random: crng reseeded on system resumption [ 121.367579][ T6022] loop0: detected capacity change from 0 to 1024 [ 121.406602][ T6022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.437886][ T6022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.463525][ T6022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.810587][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.820235][ T6037] loop1: detected capacity change from 0 to 2048 [ 122.280231][ T6041] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 122.638158][ T6044] loop4: detected capacity change from 0 to 256 [ 122.658678][ T6037] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 122.859264][ T6037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.005517][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.144981][ T6049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.976006][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.69'. [ 123.985939][ T6057] bridge0: entered promiscuous mode [ 123.991420][ T6057] bridge0: entered allmulticast mode [ 125.035463][ T6056] loop4: detected capacity change from 0 to 256 [ 125.239788][ T6049] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 125.257343][ T6056] ======================================================= [ 125.257343][ T6056] WARNING: The mand mount option has been deprecated and [ 125.257343][ T6056] and is ignored by this kernel. Remove the mand [ 125.257343][ T6056] option from the mount to silence this warning. [ 125.257343][ T6056] ======================================================= [ 125.292363][ T5609] Bluetooth: hci1: command 0x0401 tx timeout [ 125.435484][ T6064] loop1: detected capacity change from 0 to 1764 [ 125.543542][ T6067] comedi comedi1: comedi_parport: I/O port conflict (0xfffff000,3) [ 127.049701][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 128.127511][ T6081] netlink: 'syz.5.79': attribute type 10 has an invalid length. [ 128.151998][ T6081] macvlan1: entered promiscuous mode [ 128.159368][ T6081] macvlan1: entered allmulticast mode [ 128.173434][ T6081] veth1_vlan: entered allmulticast mode [ 128.246966][ T6081] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 128.255055][ T6083] loop1: detected capacity change from 0 to 512 [ 128.311082][ T6085] loop0: detected capacity change from 0 to 64 [ 128.350007][ T6083] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.361135][ T6088] loop3: detected capacity change from 0 to 256 [ 128.388638][ T6083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.463994][ T30] audit: type=1800 audit(1787183583.943:2): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.81" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 128.494426][ T6083] EXT4-fs (loop1): 1 truncate cleaned up [ 128.514129][ T6089] loop4: detected capacity change from 0 to 2048 [ 128.557302][ T6083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.593536][ T6093] loop5: detected capacity change from 0 to 64 [ 128.699132][ T6093] MINIX-fs: bad superblock or unable to read bitmaps [ 128.708408][ T6095] loop2: detected capacity change from 0 to 64 [ 129.519352][ T6103] loop0: detected capacity change from 0 to 512 [ 129.556522][ T6103] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.574051][ T6103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.624106][ T6103] EXT4-fs (loop0): 1 truncate cleaned up [ 129.662173][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.745768][ T6098] Bluetooth: MGMT ver 1.23 [ 130.215541][ T6107] loop4: detected capacity change from 0 to 256 [ 130.585405][ T6107] exfat: Deprecated parameter 'utf8' [ 130.621940][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.675017][ T6107] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 130.847598][ T6116] siw: device registration error -23 [ 131.643250][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.163875][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.186459][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.640423][ T6126] loop3: detected capacity change from 0 to 16 [ 132.663340][ T6126] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 132.677028][ T6127] loop2: detected capacity change from 0 to 1024 [ 132.888395][ T6129] jffs2: notice: (6129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.189391][ T6146] loop4: detected capacity change from 0 to 256 [ 135.254835][ T6145] loop5: detected capacity change from 0 to 2048 [ 135.312892][ T6145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.543776][ T6152] loop3: detected capacity change from 0 to 2048 [ 135.633981][ T6156] loop0: detected capacity change from 0 to 512 [ 135.669756][ T6150] loop2: detected capacity change from 0 to 4096 [ 135.712832][ T6152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.713863][ T6150] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 135.773628][ T6156] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.852223][ T6159] loop4: detected capacity change from 0 to 2048 [ 135.934545][ T6150] ntfs3(loop2): ino=19, mi_enum_attr [ 135.950915][ T6156] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.104: Bad quota inum: 2, type: 1 [ 135.981837][ T6150] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 136.023214][ T6150] ntfs3(loop2): ino=1a, mi_enum_attr [ 136.025166][ T6156] EXT4-fs warning (device loop0): ext4_enable_quotas:7280: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 136.046608][ T6150] ntfs3(loop2): ino=1a, mi_enum_attr [ 136.050196][ T6163] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.072087][ T6150] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 136.145970][ T6159] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5 [ 136.238719][ T6168] loop5: detected capacity change from 0 to 24 [ 136.246791][ T6159] Remounting filesystem read-only [ 136.254566][ T6165] loop3: detected capacity change from 0 to 2048 [ 136.259557][ T6168] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 136.330282][ T6168] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.526247][ T5608] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 136.575485][ T6172] loop5: detected capacity change from 0 to 16 [ 136.584884][ T6172] erofs (device loop5): mounted with root inode @ nid 36. [ 136.587975][ T6165] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 136.673440][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'. [ 136.683384][ T6173] bridge0: entered promiscuous mode [ 136.688719][ T6173] bridge0: entered allmulticast mode [ 137.320727][ T6165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.353687][ T6172] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 137.732314][ T6179] loop4: detected capacity change from 0 to 256 [ 137.760453][ T6181] jffs2: notice: (6181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.770324][ T6179] exfat: Deprecated parameter 'utf8' [ 137.847143][ T6179] exfat: Deprecated parameter 'utf8' [ 138.090803][ T6179] exfat: Deprecated parameter 'namecase' [ 139.250370][ T6179] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 141.317933][ T6203] loop0: detected capacity change from 0 to 1024 [ 141.484201][ T6208] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 141.490777][ T6208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.554873][ T6208] vhci_hcd vhci_hcd.0: Device attached [ 141.663316][ T6214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.981078][ T5753] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 143.416558][ T6214] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 143.680035][ T6210] vhci_hcd: connection closed [ 143.779224][ T5867] vhci_hcd vhci_hcd.5: stop threads [ 143.844852][ T5609] Bluetooth: hci1: command 0x0401 tx timeout [ 144.091138][ T5867] vhci_hcd vhci_hcd.5: release socket [ 144.182952][ T5867] vhci_hcd vhci_hcd.5: disconnect device [ 144.323961][ T6221] loop1: detected capacity change from 0 to 2048 [ 144.385814][ T6221] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.538518][ T6225] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.595943][ T6224] loop2: detected capacity change from 0 to 2048 [ 144.695589][ T6228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.733659][ T6230] loop0: detected capacity change from 0 to 24 [ 144.769836][ T6230] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 144.786770][ T6224] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5 [ 144.821783][ T6230] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 144.842644][ T6224] Remounting filesystem read-only [ 144.976720][ T6235] comedi comedi2: dt2801: I/O base address or length out of range [ 145.203784][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 145.212923][ T6239] bridge0: entered promiscuous mode [ 145.218273][ T6239] bridge0: entered allmulticast mode [ 145.838105][ T6237] loop5: detected capacity change from 0 to 128 [ 146.119060][ T6247] loop2: detected capacity change from 0 to 2048 [ 146.207001][ T6247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.614055][ T6260] siw: device registration error -23 [ 147.276774][ T6262] loop5: detected capacity change from 0 to 256 [ 148.019825][ T6262] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 148.406983][ T6265] loop0: detected capacity change from 0 to 256 [ 149.266642][ T5753] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 149.736118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.321350][ T6269] comedi comedi1: Cannot bond this driver to itself! [ 150.610119][ T6270] ceph: No mds server is up or the cluster is laggy [ 150.869320][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 150.954981][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 151.576556][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 151.652743][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 151.661069][ T6278] loop0: detected capacity change from 0 to 256 [ 151.765484][ T6278] exfat: Deprecated parameter 'utf8' [ 151.801307][ T6278] exfat: Deprecated parameter 'utf8' [ 151.850658][ T6278] exfat: Deprecated parameter 'utf8' [ 152.013743][ T6283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.255351][ T6278] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 153.118172][ T6283] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 153.688958][ T6291] loop3: detected capacity change from 0 to 512 [ 153.716904][ T6292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 153.723483][ T6292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.750942][ T6291] EXT4-fs (loop3): Test dummy encryption mode enabled [ 153.776639][ T6291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.807290][ T6296] loop0: detected capacity change from 0 to 1024 [ 153.828503][ T6292] vhci_hcd vhci_hcd.0: Device attached [ 153.843096][ T6299] loop4: detected capacity change from 0 to 512 [ 153.898358][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 153.904118][ T6299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.158555][ T5624] Bluetooth: hci1: command 0x0401 tx timeout [ 154.219090][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.253786][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 154.527372][ T6299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.984000][ T6294] vhci_hcd: connection closed [ 154.989884][ T6058] vhci_hcd vhci_hcd.1: stop threads [ 155.293234][ T6058] vhci_hcd vhci_hcd.1: release socket [ 155.830126][ T6058] vhci_hcd vhci_hcd.1: disconnect device [ 155.896180][ T6299] EXT4-fs (loop4): 1 truncate cleaned up [ 156.002521][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.126735][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.297755][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 157.306939][ T6320] bridge0: entered promiscuous mode [ 157.312236][ T6320] bridge0: entered allmulticast mode [ 158.012297][ T6324] loop1: detected capacity change from 0 to 64 [ 158.249808][ T6327] comedi comedi3: pcm3724: I/O base address not correctly aligned [ 158.300868][ T6328] loop0: detected capacity change from 0 to 2048 [ 158.302048][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.328930][ T6328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.428217][ T6319] loop2: detected capacity change from 0 to 4096 [ 158.458246][ T6319] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 158.572310][ T6330] comedi comedi2: board detection failed [ 158.590935][ T6319] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 158.607153][ T6333] loop5: detected capacity change from 0 to 64 [ 158.631216][ T6319] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 159.133830][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.162'. [ 159.660988][ T6342] loop3: detected capacity change from 0 to 16 [ 159.779549][ T6344] loop4: detected capacity change from 0 to 512 [ 159.790856][ T6344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.832710][ T6342] erofs (device loop3): mounted with root inode @ nid 36. [ 159.863517][ T6344] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 159.916349][ T6344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 159.938058][ T6342] erofs (device loop3): invalid fast symlink size 39 @ nid 83 [ 160.050133][ T6350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.876250][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 160.967444][ T6350] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 160.984044][ T6344] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 160.993830][ T6344] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 161.006008][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.053170][ T6352] loop0: detected capacity change from 0 to 256 [ 161.111212][ T6355] loop2: detected capacity change from 0 to 512 [ 161.143662][ T6344] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 161.155111][ T6355] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.167: invalid block [ 161.156015][ T6356] loop1: detected capacity change from 0 to 22 [ 161.174324][ T6355] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.176220][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.192436][ C0] EXT4-fs (loop2): initial error at time 1787183872: ext4_get_branch:178: inode 11: block 4294967295 [ 161.203460][ C0] EXT4-fs (loop2): last error at time 1787183872: ext4_get_branch:178: inode 11: block 4294967295 [ 161.217076][ T6355] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.167: invalid indirect mapped block 4294967295 (level 1) [ 161.234520][ T6355] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.265925][ T6355] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #11: comm syz.2.167: invalid indirect mapped block 4294967295 (level 1) [ 161.346394][ T6356] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 161.393179][ T6356] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 161.549463][ T6355] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.553842][ T6355] EXT4-fs (loop2): 2 truncates cleaned up [ 161.665583][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.784111][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 161.793396][ T6362] bridge0: entered promiscuous mode [ 161.798840][ T6362] bridge0: entered allmulticast mode [ 162.188461][ T5624] Bluetooth: hci1: command 0x0401 tx timeout [ 162.306943][ T6358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 162.447651][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.452711][ T6355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.167: bg 0: block 5: invalid block bitmap [ 162.573275][ T6367] loop5: detected capacity change from 0 to 512 [ 162.617926][ T6367] EXT4-fs (loop5): Test dummy encryption mode enabled [ 162.635691][ T6367] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.665745][ T6370] loop4: detected capacity change from 0 to 256 [ 162.678946][ T6370] exfat: Deprecated parameter 'utf8' [ 162.702216][ T6370] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 162.751523][ T6367] EXT4-fs (loop5): 1 truncate cleaned up [ 162.784978][ T6367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.884894][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.980328][ T6385] loop0: detected capacity change from 0 to 4096 [ 164.062302][ T6385] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 164.191833][ T6385] ntfs3(loop0): Failed to load $Extend (-22). [ 164.205817][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.243165][ T6385] ntfs3(loop0): Failed to initialize $Extend. [ 164.329759][ T6390] loop2: detected capacity change from 0 to 1024 [ 164.342714][ T6383] loop4: detected capacity change from 0 to 4096 [ 164.466617][ T6383] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 165.499199][ T6390] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 165.641177][ T6383] ntfs3(loop4): ino=19, mi_enum_attr [ 165.654095][ T6402] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 165.663630][ T6383] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 165.673723][ T6402] macvlan1: entered promiscuous mode [ 165.685161][ T6383] ntfs3(loop4): ino=1a, mi_enum_attr [ 165.692446][ T6402] macvlan1: entered allmulticast mode [ 165.698689][ T6383] ntfs3(loop4): ino=1a, mi_enum_attr [ 165.715951][ T6383] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 165.744145][ T6402] veth1_vlan: entered allmulticast mode [ 165.778593][ T6405] syz.5.185 uses obsolete (PF_INET,SOCK_PACKET) [ 165.804557][ T6406] loop1: detected capacity change from 0 to 64 [ 165.855941][ T6402] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 166.182411][ T6410] loop0: detected capacity change from 0 to 256 [ 166.345214][ T6412] bond1: entered allmulticast mode [ 166.351551][ T6412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.413664][ T6418] loop5: detected capacity change from 0 to 24 [ 166.436702][ T6418] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 166.462412][ T6418] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 166.542246][ T6421] loop2: detected capacity change from 0 to 8 [ 166.574663][ T6421] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 166.616752][ T6418] romfs: read error for inode 0x70040 [ 166.635881][ T5976] udevd[5976]: incorrect cramfs checksum on /dev/loop2 [ 166.692728][ T6421] cramfs: bad data blocksize 4294934200 [ 166.699438][ T6423] loop4: detected capacity change from 0 to 64 [ 166.719129][ T6419] loop3: detected capacity change from 0 to 4096 [ 166.730232][ T6421] cramfs: bad data blocksize 4294934200 [ 166.759593][ T6419] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 166.762406][ T30] audit: type=1800 audit(1787183878.235:3): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.193" name="file1" dev="loop2" ino=33092 res=0 errno=0 [ 166.814654][ T5861] udevd[5861]: incorrect cramfs checksum on /dev/loop2 [ 166.902534][ T6426] loop1: detected capacity change from 0 to 512 [ 166.952571][ T6426] EXT4-fs (loop1): Test dummy encryption mode enabled [ 166.990204][ T6426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.010700][ T6419] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 167.078886][ T6426] EXT4-fs (loop1): 1 truncate cleaned up [ 167.110874][ T6430] loop5: detected capacity change from 0 to 64 [ 167.186020][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.138306][ T6449] loop2: detected capacity change from 0 to 64 [ 169.173775][ T6452] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 169.183541][ T6453] loop0: detected capacity change from 0 to 4096 [ 169.219142][ T6452] macvlan1: entered promiscuous mode [ 169.358562][ T6452] macvlan1: entered allmulticast mode [ 169.450669][ T6453] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 169.488678][ T6452] veth1_vlan: entered allmulticast mode [ 170.324797][ T6452] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 170.361797][ T6453] ntfs3(loop0): ino=19, mi_enum_attr [ 170.401706][ T6453] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 170.412040][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.691161][ T6453] ntfs3(loop0): ino=1a, mi_enum_attr [ 170.706272][ T6453] ntfs3(loop0): ino=1a, mi_enum_attr [ 170.714458][ T6453] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 170.799941][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 171.568868][ T6465] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 171.635407][ T6465] netlink: 'syz.1.208': attribute type 2 has an invalid length. [ 171.711494][ T6472] loop5: detected capacity change from 0 to 256 [ 171.791650][ T6473] loop4: detected capacity change from 0 to 512 [ 173.645779][ T6496] loop2: detected capacity change from 0 to 512 [ 173.653102][ T6499] loop1: detected capacity change from 0 to 512 [ 173.665236][ T6499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.683460][ T6494] loop4: detected capacity change from 0 to 8 [ 173.687302][ T6499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.719865][ T6499] EXT4-fs (loop1): 1 truncate cleaned up [ 173.972999][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.800305][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.816108][ T6494] process 'syz.4.218' launched './file2' with NULL argv: empty string added [ 174.912833][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.223'. [ 175.064587][ T6496] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.043871][ T6494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 176.175280][ T6494] SQUASHFS error: Failed to read block 0x0: -5 [ 176.210834][ T6494] SQUASHFS error: lzo decompression failed, data probably corrupt [ 176.300091][ T6494] SQUASHFS error: Failed to read block 0x0: -5 [ 176.570530][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 177.590683][ T6524] loop5: detected capacity change from 0 to 4096 [ 177.627236][ T6524] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 177.700357][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.731184][ T6529] loop0: detected capacity change from 0 to 1764 [ 177.765647][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.803568][ T6524] ntfs3(loop5): ino=19, mi_enum_attr [ 177.843479][ T6524] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 177.907923][ T6524] ntfs3(loop5): ino=1a, mi_enum_attr [ 177.942411][ T6524] ntfs3(loop5): ino=1a, mi_enum_attr [ 178.012715][ T6524] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 178.079652][ T6535] loop2: detected capacity change from 0 to 8 [ 178.163182][ T6535] SQUASHFS error: zlib decompression failed, data probably corrupt [ 178.214803][ T6535] SQUASHFS error: Failed to read block 0x4e8: -5 [ 178.250103][ T6537] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 178.267459][ T6540] loop0: detected capacity change from 0 to 256 [ 178.539091][ T30] audit: type=1800 audit(1787183889.775:4): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.230" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 178.605084][ T6540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 179.424875][ T6547] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 179.431458][ T6547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.449852][ T6547] vhci_hcd vhci_hcd.0: Device attached [ 179.686429][ T5753] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 180.932601][ T6564] loop5: detected capacity change from 0 to 1764 [ 181.387872][ T6548] vhci_hcd: connection reset by peer [ 181.657943][ T6573] warning: `syz.1.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.936711][ T5867] vhci_hcd vhci_hcd.4: stop threads [ 181.990024][ T5867] vhci_hcd vhci_hcd.4: release socket [ 182.030197][ T5867] vhci_hcd vhci_hcd.4: disconnect device [ 182.251056][ T6578] loop0: detected capacity change from 0 to 512 [ 182.301787][ T6578] EXT4-fs (loop0): Test dummy encryption mode enabled [ 182.344178][ T6578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.362627][ T6581] loop5: detected capacity change from 0 to 512 [ 182.391206][ T6582] loop1: detected capacity change from 0 to 512 [ 182.437061][ T6581] EXT4-fs (loop5): Test dummy encryption mode enabled [ 182.459480][ T6578] EXT4-fs (loop0): 1 truncate cleaned up [ 182.471018][ T6581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.490047][ T6581] EXT4-fs (loop5): 1 truncate cleaned up [ 182.498421][ T6581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.518848][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.552170][ T6584] loop4: detected capacity change from 0 to 2048 [ 182.564308][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.672521][ T6582] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.377063][ T6584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.812899][ T6584] EXT4-fs error (device loop4): ext4_lookup:1777: inode #2: comm syz.4.246: bad inode number: 12 [ 183.843823][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'. [ 183.846906][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.974869][ T6584] EXT4-fs (loop4): Remounting filesystem read-only [ 184.018337][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.234783][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.274582][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.452196][ T6608] siw: device registration error -23 [ 185.343739][ T6609] loop1: detected capacity change from 0 to 128 [ 185.836521][ T5753] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 185.962352][ T6617] loop5: detected capacity change from 0 to 4096 [ 186.000275][ T6621] loop1: detected capacity change from 0 to 64 [ 186.062005][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 186.071430][ T6623] loop2: detected capacity change from 0 to 64 [ 186.089829][ T6617] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 186.167807][ T6617] ntfs3(loop5): Failed to load $Extend (-22). [ 186.204054][ T6617] ntfs3(loop5): Failed to initialize $Extend. [ 186.266246][ T6626] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 186.272807][ T6626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.348371][ T6626] vhci_hcd vhci_hcd.0: Device attached [ 186.519241][ T6632] loop4: detected capacity change from 0 to 736 [ 186.699629][ T5832] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 187.946191][ T6627] vhci_hcd: connection reset by peer [ 188.115183][ T133] vhci_hcd vhci_hcd.0: stop threads [ 188.279562][ T133] vhci_hcd vhci_hcd.0: release socket [ 188.432969][ T133] vhci_hcd vhci_hcd.0: disconnect device [ 188.668213][ T6649] loop5: detected capacity change from 0 to 64 [ 188.835458][ T6655] loop1: detected capacity change from 0 to 256 [ 188.996820][ T6658] loop0: detected capacity change from 0 to 1024 [ 189.744035][ T6658] hfsplus: cannot replace xattr [ 190.156693][ T6673] loop1: detected capacity change from 0 to 4096 [ 190.177161][ T6677] comedi comedi1: rti802: I/O base address not correctly aligned [ 190.212496][ T6673] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 190.283430][ T6673] ntfs3(loop1): Failed to load $Extend (-22). [ 190.842281][ T6673] ntfs3(loop1): Failed to initialize $Extend. [ 192.456116][ T5832] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 193.081508][ T6701] loop3: detected capacity change from 0 to 512 [ 193.119016][ T6701] EXT4-fs (loop3): Test dummy encryption mode enabled [ 193.693952][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.943001][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.382999][ T6701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.976017][ T6701] EXT4-fs (loop3): 1 truncate cleaned up [ 195.985020][ T6701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.486019][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.722209][ T6734] loop0: detected capacity change from 0 to 512 [ 198.777521][ T6734] EXT4-fs (loop0): Test dummy encryption mode enabled [ 198.923067][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 198.980843][ T6734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.105555][ T6734] EXT4-fs (loop0): 1 truncate cleaned up [ 199.134661][ T6734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.984430][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.256257][ T5624] Bluetooth: hci1: unexpected event for opcode 0x203d [ 202.438575][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.303'. [ 203.112510][ T6763] loop3: detected capacity change from 0 to 512 [ 203.168171][ T6763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.242010][ T6763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.318359][ T6763] EXT4-fs (loop3): 1 truncate cleaned up [ 203.365905][ T6763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.392155][ T6768] jffs2: notice: (6768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 204.455973][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.625618][ T6782] loop4: detected capacity change from 0 to 512 [ 204.673264][ T6782] EXT4-fs (loop4): Test dummy encryption mode enabled [ 204.696925][ T6782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.735915][ T6789] loop5: detected capacity change from 0 to 64 [ 204.779765][ T6782] EXT4-fs (loop4): 1 truncate cleaned up [ 204.817749][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.423397][ T6794] loop0: detected capacity change from 0 to 2048 [ 205.635120][ T6788] loop2: detected capacity change from 0 to 4096 [ 205.789484][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.885898][ T6788] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 205.934532][ T6794] EXT4-fs error (device loop0): ext4_lookup:1777: inode #2: comm syz.0.314: bad inode number: 12 [ 206.001034][ T6794] EXT4-fs (loop0): Remounting filesystem read-only [ 206.085408][ T6788] ntfs3(loop2): Failed to load $Extend (-22). [ 206.125464][ T6788] ntfs3(loop2): Failed to initialize $Extend. [ 206.128047][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.167935][ T6801] loop5: detected capacity change from 0 to 2048 [ 206.202300][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.238873][ T6801] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.369946][ T6804] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.203881][ T6812] loop3: detected capacity change from 0 to 256 [ 207.431891][ T6816] loop0: detected capacity change from 0 to 512 [ 207.476349][ T6816] EXT4-fs (loop0): Test dummy encryption mode enabled [ 207.509355][ T6816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.584908][ T6816] EXT4-fs (loop0): 1 truncate cleaned up [ 207.665426][ T6816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.878158][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 208.965022][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.399606][ T6841] loop4: detected capacity change from 0 to 1024 [ 209.413899][ T6844] loop1: detected capacity change from 0 to 16 [ 209.443451][ T6841] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 209.459265][ T6844] erofs (device loop1): mounted with root inode @ nid 36. [ 209.483157][ T6845] loop0: detected capacity change from 0 to 64 [ 209.786113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.397062][ T6857] loop5: detected capacity change from 0 to 512 [ 210.454328][ T6857] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.507977][ T6857] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.563588][ T6864] loop1: detected capacity change from 0 to 16 [ 210.580431][ T6857] EXT4-fs (loop5): 1 truncate cleaned up [ 210.614699][ T6864] erofs (device loop1): mounted with root inode @ nid 36. [ 210.691620][ T6857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.739798][ T6864] erofs (device loop1): compressed inode (nid 89) is invalid in a plain filesystem [ 211.918735][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.156705][ T6883] loop2: detected capacity change from 0 to 512 [ 212.249735][ T6883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.281659][ T6883] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.503640][ T6883] EXT4-fs error (device loop2): ext4_xattr_block_find:1881: inode #12: comm syz.2.351: corrupted xattr block 6: invalid header [ 214.429446][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.786572][ T6907] loop1: detected capacity change from 0 to 64 [ 215.072776][ T5621] Bluetooth: hci5: Malformed LE Event: 0x1d [ 215.265089][ T6916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'. [ 215.662533][ T6915] loop5: detected capacity change from 0 to 512 [ 215.755932][ T6915] EXT4-fs (loop5): Test dummy encryption mode enabled [ 215.814741][ T6915] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.852404][ T6915] EXT4-fs (loop5): 1 truncate cleaned up [ 215.871330][ T6915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.206210][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 216.213153][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 216.219228][ T5621] Bluetooth: hci1: command 0x0401 tx timeout [ 216.243263][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 216.243886][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 216.252183][ T5621] Bluetooth: hci3: command 0x0405 tx timeout [ 216.375229][ T6927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.363'. [ 217.646986][ T6930] geneve3: entered allmulticast mode [ 217.858525][ T6933] loop1: detected capacity change from 0 to 512 [ 217.898985][ T6933] EXT4-fs (loop1): Test dummy encryption mode enabled [ 217.902142][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.913918][ T6933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.998336][ T6933] EXT4-fs (loop1): 1 truncate cleaned up [ 218.042691][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.395560][ T6949] loop3: detected capacity change from 0 to 16 [ 218.610064][ T6949] erofs (device loop3): blkszbits 1 isn't supported [ 219.172837][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.671907][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.374'. [ 220.567543][ T5615] Bluetooth: hci4: ISO packet too small [ 221.045557][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.380'. [ 221.868401][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 222.444818][ T6986] loop4: detected capacity change from 0 to 64 [ 222.685339][ T6991] loop5: detected capacity change from 0 to 512 [ 222.754767][ T5615] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 222.805848][ T6991] EXT4-fs (loop5): orphan cleanup on readonly fs [ 222.874766][ T6991] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.385: ea_inode with extended attributes [ 223.008753][ T6991] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.016074][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 223.031698][ C1] EXT4-fs (loop5): initial error at time 1787183934: ext4_xattr_inode_iget:441: inode 11 [ 223.041573][ C1] EXT4-fs (loop5): last error at time 1787183934: ext4_xattr_inode_iget:441: inode 11 [ 223.074625][ T6991] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: comm syz.5.385: error while reading EA inode 11 err=-117 [ 223.199021][ T6999] loop1: detected capacity change from 0 to 1024 [ 223.243084][ T6991] loop5: lost filesystem error report for type 5 error -117 [ 223.243183][ T6999] hfsplus: failed to load extents file [ 223.265989][ T6991] EXT4-fs (loop5): 1 orphan inode deleted [ 223.349982][ T6991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.631083][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.751043][ T7010] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.567161][ T7020] netlink: 32 bytes leftover after parsing attributes in process `syz.5.398'. [ 225.480506][ T7026] loop0: detected capacity change from 0 to 256 [ 226.253014][ T7035] jffs2: notice: (7035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 226.868709][ T5615] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 227.476717][ T5615] Bluetooth: hci1: Injecting HCI hardware error event [ 227.491680][ T5613] Bluetooth: hci1: hardware error 0x00 [ 227.530979][ T7044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.407'. [ 228.254989][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.412'. [ 229.373954][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.416'. [ 230.065306][ T5613] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 230.333830][ T7069] loop5: detected capacity change from 0 to 128 [ 230.551574][ T7069] EXT4-fs: Ignoring removed nobh option [ 231.110615][ T7069] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.330496][ T7069] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.625358][ T5618] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.926513][ T7085] openvswitch: netlink: IP tunnel dst address not specified [ 232.085045][ T7083] loop1: detected capacity change from 0 to 4096 [ 232.095307][ T7090] loop4: detected capacity change from 0 to 2048 [ 232.116768][ T7086] loop5: detected capacity change from 0 to 4096 [ 232.134956][ T7083] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 232.149549][ T7090] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.227635][ T7090] NILFS (loop4): mounting unchecked fs [ 232.260853][ T7086] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 232.355274][ T7090] NILFS (loop4): recovery complete [ 232.431662][ T5859] udevd[5859]: incorrect nilfs2 checksum on /dev/loop4 [ 232.455355][ T7083] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 232.510322][ T7093] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.528214][ T7086] ntfs3(loop5): Failed to load $Extend (-22). [ 232.609276][ T7086] ntfs3(loop5): Failed to initialize $Extend. [ 233.664212][ T7104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.426'. [ 234.767306][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.5.428'. [ 235.922898][ T7114] loop0: detected capacity change from 0 to 512 [ 235.966423][ T7114] EXT4-fs (loop0): Test dummy encryption mode enabled [ 236.001847][ T7114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.090109][ T7114] EXT4-fs (loop0): 1 truncate cleaned up [ 236.159977][ T7114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.053158][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.454490][ T7138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.438'. [ 238.238229][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 238.280936][ T7146] netlink: 15 bytes leftover after parsing attributes in process `syz.4.441'. [ 238.351992][ T7150] loop3: detected capacity change from 0 to 128 [ 238.645180][ T7154] loop0: detected capacity change from 0 to 16 [ 238.750957][ T7154] erofs (device loop0): mounted with root inode @ nid 36. [ 239.464902][ T7168] loop0: detected capacity change from 0 to 512 [ 239.507100][ T7168] EXT4-fs (loop0): Test dummy encryption mode enabled [ 239.538889][ T7168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.578766][ T7172] jffs2: notice: (7172) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 239.662595][ T7168] EXT4-fs (loop0): 1 truncate cleaned up [ 239.725005][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.798535][ T7180] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.455'. [ 239.809545][ T7152] loop2: detected capacity change from 0 to 32768 [ 239.906943][ T7152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.443 (7152) [ 240.056824][ T7182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.456'. [ 241.284037][ T7186] syz.5.457: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.299664][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.5.457 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.299716][ T7186] Tainted: [L]=SOFTLOCKUP [ 241.299729][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 241.299750][ T7186] Call Trace: [ 241.299761][ T7186] [ 241.299774][ T7186] dump_stack_lvl+0x100/0x190 [ 241.299832][ T7186] warn_alloc.cold+0x94/0xa8 [ 241.299870][ T7186] ? __pfx_warn_alloc+0x10/0x10 [ 241.299928][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.299973][ T7186] ? check_prev_add+0x354/0xe60 [ 241.300039][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.300092][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.300132][ T7186] __vmalloc_node_range_noprof+0x136c/0x1630 [ 241.300189][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300240][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300285][ T7186] ? rcu_is_watching+0x13/0xc0 [ 241.300341][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.300380][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300425][ T7186] ? trace_contention_end+0x126/0x160 [ 241.300478][ T7186] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 241.300538][ T7186] ? __mutex_lock+0x26c/0x1bc0 [ 241.300594][ T7186] ? dvb_demux_do_ioctl+0x929/0x1200 [ 241.300656][ T7186] ? kasan_quarantine_put+0x104/0x240 [ 241.300698][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300743][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.300795][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300853][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.300902][ T7186] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.300954][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.301007][ T7186] ? tomoyo_path_number_perm+0x188/0x580 [ 241.301063][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301107][ T7186] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 241.301166][ T7186] __vmalloc_node_noprof+0xad/0xf0 [ 241.301216][ T7186] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 241.301275][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301321][ T7186] dvb_demux_do_ioctl+0x9e0/0x1200 [ 241.301382][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.301428][ T7186] ? do_vfs_ioctl+0x226/0x13e0 [ 241.301489][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301530][ T7186] dvb_usercopy+0x167/0x340 [ 241.301580][ T7186] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 241.301637][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301681][ T7186] ? __pfx_dvb_usercopy+0x10/0x10 [ 241.301750][ T7186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.301795][ T7186] ? __fget_files+0x21f/0x3d0 [ 241.301846][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301887][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.301929][ T7186] dvb_demux_ioctl+0x29/0x40 [ 241.301980][ T7186] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 241.302035][ T7186] __x64_sys_ioctl+0x18e/0x210 [ 241.302095][ T7186] do_syscall_64+0x123/0x790 [ 241.302154][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.302192][ T7186] RIP: 0033:0x7f260f19e0d9 [ 241.302221][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.302256][ T7186] RSP: 002b:00007f2610026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.302291][ T7186] RAX: ffffffffffffffda RBX: 00007f260f425fa0 RCX: 00007f260f19e0d9 [ 241.302316][ T7186] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 241.302339][ T7186] RBP: 00007f260f235024 R08: 0000000000000000 R09: 0000000000000000 [ 241.302362][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.302383][ T7186] R13: 00007f260f426038 R14: 00007f260f425fa0 R15: 00007ffe1976f3e8 [ 241.302419][ T7186] ? __UNIQUE_ID_modinfo_736+0x636dc2c8/0xffffffffffec917e [ 241.302471][ T7186] [ 241.303123][ T7186] Mem-Info: [ 241.605343][ T7188] loop4: detected capacity change from 0 to 764 [ 241.735538][ T7152] BTRFS error (device loop2): open_ctree failed: -4 [ 241.807912][ T7188] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 241.922927][ T7186] active_anon:11218 inactive_anon:0 isolated_anon:0 [ 241.922927][ T7186] active_file:0 inactive_file:44130 isolated_file:0 [ 241.922927][ T7186] unevictable:0 dirty:541 writeback:0 [ 241.922927][ T7186] slab_reclaimable:10663 slab_unreclaimable:98694 [ 241.922927][ T7186] mapped:35317 shmem:4755 pagetables:1316 [ 241.922927][ T7186] sec_pagetables:0 bounce:0 [ 241.922927][ T7186] kernel_misc_reclaimable:0 [ 241.922927][ T7186] free:1309546 free_pcp:8202 free_cma:0 [ 242.026710][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.927122][ T7186] Node 0 active_anon:44104kB inactive_anon:0kB active_file:0kB inactive_file:176128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141244kB dirty:2084kB writeback:0kB shmem:18600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 242.962032][ T7186] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 242.994151][ T7186] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.027027][ T7186] lowmem_reserve[]: 0 2472 2472 2472 2472 [ 243.032905][ T7186] Node 0 DMA32 free:1278380kB boost:0kB min:33996kB low:42492kB high:50988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43904kB inactive_anon:0kB active_file:0kB inactive_file:176128kB unevictable:0kB writepending:2084kB zspages:0kB present:3129332kB managed:2531936kB mlocked:0kB bounce:0kB free_pcp:33588kB local_pcp:16136kB free_cma:0kB [ 243.069176][ T7186] lowmem_reserve[]: 0 0 0 0 0 [ 243.074076][ T7186] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:136kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.134476][ T7186] lowmem_reserve[]: 0 0 0 0 0 [ 243.152954][ T7186] Node 1 Normal free:3944700kB boost:0kB min:55900kB low:69872kB high:83844kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.213173][ T7197] xt_ipcomp: unknown flags 1D [ 243.264136][ T7186] lowmem_reserve[]: 0 0 0 0 0 [ 243.324331][ T7186] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 243.412308][ T7186] Node 0 DMA32: 701*4kB (UM) 1093*8kB (UM) 213*16kB (UME) 244*32kB (UM) 12*64kB (UME) 8*128kB (UME) 16*256kB (UME) 10*512kB (UM) 1*1024kB (M) 1*2048kB (U) 303*4096kB (M) = 1277932kB [ 243.415915][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 243.486113][ T7186] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 243.550099][ T7186] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 8*16kB (UM) 7*32kB (UM) 12*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944700kB [ 243.595766][ T7206] loop1: detected capacity change from 0 to 8 [ 243.640624][ T7186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.677774][ T7186] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.719461][ T7186] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.765515][ T7186] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.800495][ T7186] 48670 total pagecache pages [ 243.830315][ T7186] 0 pages in swap cache [ 243.855624][ T7186] Free swap = 124996kB [ 243.875806][ T7186] Total swap = 124996kB [ 243.895767][ T7186] 2097051 pages RAM [ 243.918722][ T7186] 0 pages HighMem/MovableOnly [ 243.942348][ T7186] 432418 pages reserved [ 243.967388][ T7186] 0 pages cma reserved [ 244.107756][ T7214] loop1: detected capacity change from 0 to 512 [ 244.182702][ T7214] EXT4-fs (loop1): Test dummy encryption mode enabled [ 244.189865][ T7217] comedi comedi2: multiq3: I/O base address or length out of range [ 244.262313][ T7214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.372527][ T7214] EXT4-fs (loop1): 1 truncate cleaned up [ 244.434287][ T7214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.054054][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.421034][ T7247] loop0: detected capacity change from 0 to 256 [ 247.430941][ T7247] exfat: Deprecated parameter 'utf8' [ 247.436615][ T7247] exfat: Deprecated parameter 'utf8' [ 247.442199][ T7247] exfat: Deprecated parameter 'namecase' [ 247.514425][ T7247] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 247.799582][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 247.857093][ T7253] netlink: 72 bytes leftover after parsing attributes in process `syz.3.486'. [ 248.284593][ T7265] veth1_vlan: left allmulticast mode [ 248.342512][ T7265] macvlan1: left promiscuous mode [ 248.927646][ T7273] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 249.383192][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 250.716330][ T7295] loop5: detected capacity change from 0 to 128 [ 250.763583][ T7298] netlink: 'syz.3.505': attribute type 21 has an invalid length. [ 250.833640][ T7295] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.861738][ T7298] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.922947][ T7295] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.485046][ T5618] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.136060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 252.449071][ T7312] loop3: detected capacity change from 0 to 512 [ 252.471747][ T7315] IPVS: length: 126 != 8 [ 252.500078][ T7312] EXT4-fs (loop3): orphan cleanup on readonly fs [ 252.518923][ T7312] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.510: ea_inode with extended attributes [ 252.729873][ T7312] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.734781][ T7312] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: comm syz.3.510: error while reading EA inode 11 err=-117 [ 252.744056][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 252.744106][ C0] EXT4-fs (loop3): initial error at time 1787183964: ext4_xattr_inode_iget:441: inode 11 [ 252.744159][ C0] EXT4-fs (loop3): last error at time 1787183964: ext4_xattr_inode_iget:441: inode 11 [ 252.863048][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz.5.512'. [ 254.507080][ T7312] loop3: lost filesystem error report for type 5 error -117 [ 254.507806][ T7312] EXT4-fs (loop3): 1 orphan inode deleted [ 254.673110][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.039494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.045864][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.726552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.944171][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.482512][ T7360] loop4: detected capacity change from 0 to 128 [ 256.515723][ T7360] EXT4-fs: Ignoring removed nobh option [ 256.714285][ T7360] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.744361][ T7360] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.474847][ T5607] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.734511][ T7373] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 259.167902][ T7385] loop4: detected capacity change from 0 to 256 [ 259.286170][ T5753] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 259.491707][ T5753] usb 4-1: not running at top speed; connect to a high speed hub [ 259.519357][ T5753] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 259.545643][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.565254][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.605603][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.720995][ T5753] gspca_main: spca501-2.14.0 probing 0000:0000 [ 259.832951][ T7392] loop4: detected capacity change from 0 to 512 [ 259.883293][ T7392] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.931982][ T7392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.067818][ T7392] EXT4-fs (loop4): 1 truncate cleaned up [ 260.121067][ T7392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.259371][ T5753] gspca_spca501: reg write: error -110 [ 260.274451][ T5753] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 260.301728][ T5753] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 261.040564][ T5753] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 261.052619][ T5753] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 261.065303][ T5753] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 261.074713][ T5753] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 261.084042][ T5753] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 261.105413][ T5753] usb 4-1: USB disconnect, device number 2 [ 261.330143][ T7407] loop2: detected capacity change from 0 to 128 [ 261.366974][ T7407] EXT4-fs: Ignoring removed nobh option [ 261.373233][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.425056][ T7412] loop0: detected capacity change from 0 to 8 [ 261.442740][ T7412] SQUASHFS error: Unable to read directory block [629:0] [ 261.463868][ T7407] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.588814][ T7407] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.790824][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.545'. [ 262.376101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 262.863185][ T7420] loop1: detected capacity change from 0 to 256 [ 262.961197][ T5619] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.332701][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.546'. [ 264.658007][ T7435] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.553'. [ 265.307522][ T7449] loop0: detected capacity change from 0 to 64 [ 265.350947][ T7450] loop2: detected capacity change from 0 to 512 [ 265.410315][ T7450] EXT4-fs (loop2): Test dummy encryption mode enabled [ 265.440049][ T7450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.523007][ T7450] EXT4-fs (loop2): 1 truncate cleaned up [ 265.563795][ T7450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.834673][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.905062][ T7479] loop0: detected capacity change from 0 to 16 [ 266.986565][ T7479] erofs (device loop0): mounted with root inode @ nid 36. [ 267.135009][ T7474] loop1: detected capacity change from 0 to 4096 [ 267.234067][ T7474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.501282][ T7474] EXT4-fs error (device loop1): ext4_find_dest_de:2049: inode #2: block 16: comm syz.1.571: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=4096 fake=1 [ 268.822672][ T7497] loop3: detected capacity change from 0 to 512 [ 268.852163][ T7497] EXT4-fs (loop3): Test dummy encryption mode enabled [ 268.867093][ T7497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.931718][ T7497] EXT4-fs (loop3): 1 truncate cleaned up [ 268.948790][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.002942][ T7497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.144546][ T7496] loop5: detected capacity change from 0 to 4096 [ 269.941520][ T7496] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 270.075634][ T7496] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 270.226241][ T7512] loop2: detected capacity change from 0 to 512 [ 270.272750][ T7512] EXT4-fs (loop2): Test dummy encryption mode enabled [ 270.303096][ T7512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.317529][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.331754][ T7514] loop0: detected capacity change from 0 to 512 [ 270.383727][ T7512] EXT4-fs (loop2): 1 truncate cleaned up [ 270.392415][ T7514] EXT4-fs (loop0): Test dummy encryption mode enabled [ 270.438167][ T7514] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.460387][ T7512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.511168][ T7514] EXT4-fs (loop0): 1 truncate cleaned up [ 270.529089][ T7514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.905787][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.586'. [ 273.079325][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 273.153213][ T7539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 273.153484][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.427939][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.183456][ T7552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.596'. [ 274.906434][ T7551] netlink: 392 bytes leftover after parsing attributes in process `syz.2.595'. [ 274.986669][ T7554] loop1: detected capacity change from 0 to 64 [ 275.318826][ T7558] loop4: detected capacity change from 0 to 512 [ 275.375293][ T7558] EXT4-fs (loop4): Test dummy encryption mode enabled [ 275.433201][ T7558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 275.628710][ T7558] EXT4-fs (loop4): 1 truncate cleaned up [ 275.724288][ T7558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.909599][ T7567] batadv0: entered promiscuous mode [ 275.935758][ T7568] Illegal XDP return value 14 on prog (id 10) dev N/A, expect packet loss! [ 278.434553][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.567552][ T7577] loop1: detected capacity change from 0 to 1024 [ 278.590861][ T7573] loop3: detected capacity change from 0 to 4096 [ 278.618196][ T7577] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.643476][ T7573] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 278.765688][ T7577] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 278.794103][ T7577] EXT4-fs (loop1): orphan cleanup on readonly fs [ 278.798006][ T7581] loop5: detected capacity change from 0 to 512 [ 278.839477][ T7581] EXT4-fs (loop5): Test dummy encryption mode enabled [ 278.863496][ T7581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 278.878908][ T7577] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.606: Freeing blocks not in datazone - block = 0, count = 4096 [ 278.892730][ T7577] loop1: lost filesystem error report for type 5 error -117 [ 278.896022][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 278.909747][ C1] EXT4-fs (loop1): initial error at time 1787183990: ext4_free_blocks:6717 [ 278.918399][ C1] EXT4-fs (loop1): last error at time 1787183990: ext4_free_blocks:6717 [ 279.023282][ T7577] EXT4-fs (loop1): Remounting filesystem read-only [ 279.397574][ T7577] EXT4-fs (loop1): 1 orphan inode deleted [ 279.434201][ T7573] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 279.459761][ T7589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.470306][ T7577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.635727][ T7581] EXT4-fs (loop5): 1 truncate cleaned up [ 279.710838][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.738368][ T7581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.908672][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.615'. [ 281.917672][ T7598] bridge0: entered promiscuous mode [ 281.922900][ T7598] bridge0: entered allmulticast mode [ 282.220911][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.254490][ T7614] loop4: detected capacity change from 0 to 512 [ 282.308075][ T7614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.355829][ T7614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 282.417147][ T7614] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 282.436293][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 282.442730][ C0] EXT4-fs (loop4): initial error at time 1787183993: ext4_mb_generate_buddy:1314 [ 282.451874][ C0] EXT4-fs (loop4): last error at time 1787183993: ext4_mb_generate_buddy:1314 [ 282.544883][ T7614] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.618: attempt to clear invalid blocks 2 len 1 [ 282.614492][ T7614] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.627889][ T7614] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.618: invalid indirect mapped block 1819239214 (level 0) [ 282.687015][ T7622] loop5: detected capacity change from 0 to 64 [ 282.724821][ T7614] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.727519][ T7614] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.618: invalid indirect mapped block 1819239214 (level 1) [ 282.789498][ T7622] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 282.853541][ T7614] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.854397][ T7614] EXT4-fs (loop4): 1 truncate cleaned up [ 282.940465][ T7614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.304139][ T7629] loop3: detected capacity change from 0 to 2048 [ 283.335353][ T7631] loop5: detected capacity change from 0 to 2048 [ 283.371324][ T7629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.431056][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.465934][ T7631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.515914][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 283.615535][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.694982][ T30] audit: type=1800 audit(1787183995.165:5): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.625" name=2E02 dev="loop5" ino=1367 res=0 errno=0 [ 284.174417][ T7647] loop5: detected capacity change from 0 to 512 [ 284.351211][ T7647] EXT4-fs (loop5): Test dummy encryption mode enabled [ 284.525058][ T7647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 285.124569][ T7647] EXT4-fs (loop5): 1 truncate cleaned up [ 285.132725][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.183748][ T7659] ip6t_rpfilter: unknown options [ 285.412625][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.427767][ T7664] loop2: detected capacity change from 0 to 512 [ 285.541046][ T7664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.554298][ T7665] loop1: detected capacity change from 0 to 2048 [ 285.568126][ T7664] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.641491][ T7665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.643014][ T7664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.637: bg 0: block 217: padding at end of block bitmap is not set [ 285.684225][ T7664] Quota error (device loop2): write_blk: dquota write failed [ 285.734814][ T7664] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 285.806372][ T7664] EXT4-fs error (device loop2): ext4_acquire_dquot:7047: comm syz.2.637: Failed to acquire dquot type 1 [ 286.127040][ T5613] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 286.134909][ T5613] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 286.156293][ T7684] jffs2: notice: (7684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 286.309327][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.438661][ T7691] loop3: detected capacity change from 0 to 24 [ 286.474192][ T7691] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 286.512361][ T7691] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 287.566356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 288.379747][ T7710] loop0: detected capacity change from 0 to 512 [ 288.423504][ T7710] EXT4-fs (loop0): Test dummy encryption mode enabled [ 288.474853][ T7710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 288.758023][ T7710] EXT4-fs (loop0): 1 truncate cleaned up [ 288.769023][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.854587][ T7717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 290.077169][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.657'. [ 290.526273][ T7727] loop2: detected capacity change from 0 to 512 [ 290.593072][ T7727] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 290.624342][ T5613] Bluetooth: hci5: Unable to find connection for big 0x00 [ 290.646981][ T7727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 290.734260][ T7727] EXT4-fs (loop2): orphan cleanup on readonly fs [ 290.789832][ T7727] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.659: iget: bad i_size value: 12154761577498 [ 290.973469][ T7727] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.976040][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 290.991717][ C0] EXT4-fs (loop2): initial error at time 1787184002: ext4_orphan_get:1399: inode 13 [ 291.001135][ C0] EXT4-fs (loop2): last error at time 1787184002: ext4_orphan_get:1399: inode 13 [ 291.010457][ T7727] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.659: couldn't read orphan inode 13 (err -117) [ 291.046450][ T7727] loop2: lost filesystem error report for type 5 error -117 [ 291.069067][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.110037][ T7727] EXT4-fs warning (device loop2): dx_probe:859: inode #2: comm syz.2.659: dx entry: limit 65535 != root limit 120 [ 291.185354][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.189411][ T7727] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.659: Corrupt directory, running e2fsck is recommended [ 291.207958][ T7734] jffs2: notice: (7734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.311533][ T5613] Bluetooth: hci0: Invalid handle: 0x70bc > 0x0eff [ 291.464882][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.478275][ T7742] loop1: detected capacity change from 0 to 2048 [ 291.545366][ T7742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.621563][ T7746] netlink: 400 bytes leftover after parsing attributes in process `syz.4.667'. [ 292.029582][ T7754] loop2: detected capacity change from 0 to 64 [ 292.452788][ T7754] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 293.934184][ T7760] loop1: detected capacity change from 0 to 16 [ 293.972640][ T7760] erofs (device loop1): mounted with root inode @ nid 36. [ 294.555423][ T7779] ip_tables: iptables: counters copy to user failed while replacing table [ 295.525561][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 296.946263][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.687'. [ 298.086216][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.688'. [ 298.325082][ T7810] loop1: detected capacity change from 0 to 256 [ 298.343484][ T7810] exfat: Deprecated parameter 'utf8' [ 298.384698][ T7810] exfat: Deprecated parameter 'namecase' [ 298.403773][ T7810] exfat: Deprecated parameter 'namecase' [ 298.442309][ T7810] exfat: Deprecated parameter 'utf8' [ 298.478160][ T7810] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 298.536290][ T7810] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 298.828265][ T7816] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 300.158128][ T5615] Bluetooth: hci4: unexpected event for opcode 0x203c [ 300.562280][ T7841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.703'. [ 301.186013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 302.170986][ T7857] o2cb: This node has not been configured. [ 302.237419][ T7857] o2cb: Cluster check failed. Fix errors before retrying. [ 302.308000][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.1.710'. [ 302.425552][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 302.680652][ T7857] (syz.3.713,7857,1):user_dlm_register:674 ERROR: status = -22 [ 302.767003][ T7857] (syz.3.713,7857,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 302.826396][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 302.836606][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.859632][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.891844][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.934541][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.034556][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.140018][ T24] usb 1-1: config 0 descriptor?? [ 303.567470][ T7867] loop1: detected capacity change from 0 to 512 [ 303.608543][ T7867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 303.615102][ T7867] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 303.701834][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 304.335618][ T7867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 304.365995][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 304.372495][ C1] EXT4-fs (loop1): initial error at time 1787184015: ext4_mb_generate_buddy:1314 [ 304.381695][ C1] EXT4-fs (loop1): last error at time 1787184015: ext4_mb_generate_buddy:1314 [ 304.391545][ T7867] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.716: attempt to clear invalid blocks 2 len 1 [ 304.594796][ T7867] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 304.602486][ T7867] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.716: invalid indirect mapped block 1819239214 (level 0) [ 304.760325][ T7873] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 304.775915][ T7867] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 304.779975][ T7867] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.716: invalid indirect mapped block 1819239214 (level 1) [ 304.878085][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 304.884121][ T7867] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 304.893117][ T7867] EXT4-fs (loop1): 1 truncate cleaned up [ 304.906113][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 304.936115][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 304.952781][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 305.060990][ T7867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.198740][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 305.216422][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 305.238183][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 305.335132][ T7883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 306.036833][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 306.143186][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 306.263477][ T24] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 306.563502][ T7886] loop4: detected capacity change from 0 to 136 [ 306.934865][ T7886] Attempt to read inode for relocated directory [ 307.006115][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.050487][ T7891] loop0: detected capacity change from 0 to 512 [ 307.056437][ T7887] loop5: detected capacity change from 0 to 16 [ 307.065433][ T7891] EXT4-fs (loop0): Test dummy encryption mode enabled [ 307.078543][ T7891] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.084666][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 307.126607][ T7887] erofs (device loop5): invalid sb_extslots 4176 (more than a fs block) [ 307.170898][ T7891] EXT4-fs (loop0): 1 truncate cleaned up [ 307.196563][ T7891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.572644][ T7898] loop1: detected capacity change from 0 to 512 [ 307.605242][ T24] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 307.622111][ T7898] EXT4-fs: Ignoring removed oldalloc option [ 307.691036][ T7898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.729724][ T24] usb 1-1: USB disconnect, device number 2 [ 307.897239][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.130014][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.728'. [ 308.858566][ T30] audit: type=1800 audit(1787184020.335:6): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.725" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 309.155537][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.181334][ T7915] loop0: detected capacity change from 0 to 2048 [ 309.215383][ T7915] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 309.300343][ T7915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.634406][ T7924] netlink: 32 bytes leftover after parsing attributes in process `syz.5.734'. [ 310.322129][ T7905] loop4: detected capacity change from 0 to 32768 [ 310.545294][ T7926] loop1: detected capacity change from 0 to 256 [ 310.631447][ T7926] exfat: Deprecated parameter 'utf8' [ 310.676143][ T7926] exfat: Deprecated parameter 'namecase' [ 310.725108][ T7926] exfat: Deprecated parameter 'namecase' [ 310.773474][ T7926] exfat: Deprecated parameter 'utf8' [ 310.812315][ T7918] fido_id[7918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 311.003181][ T7926] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 311.092390][ T7926] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 311.609170][ T7934] loop5: detected capacity change from 0 to 256 [ 311.684409][ T7934] exfat: Deprecated parameter 'namecase' [ 311.862640][ T7934] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 311.912659][ T5615] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 312.520658][ T7933] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.974404][ T7943] loop5: detected capacity change from 0 to 512 [ 313.056321][ T7943] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.742: invalid indirect mapped block 256 (level 2) [ 313.064559][ T7947] loop2: detected capacity change from 0 to 512 [ 313.076742][ T7943] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 313.085642][ T7943] EXT4-fs (loop5): 2 truncates cleaned up [ 313.094901][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 313.094935][ C1] EXT4-fs (loop5): initial error at time 1787184024: ext4_free_branches:1020: inode 11 [ 313.094989][ C1] EXT4-fs (loop5): last error at time 1787184024: ext4_free_branches:1020: inode 11 [ 313.137170][ T7943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.188514][ T7952] loop0: detected capacity change from 0 to 512 [ 313.209663][ T7952] EXT4-fs (loop0): Test dummy encryption mode enabled [ 313.225103][ T7952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 313.273068][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.308511][ T7952] EXT4-fs (loop0): 1 truncate cleaned up [ 313.345332][ T7952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.613100][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.927811][ T7970] loop1: detected capacity change from 0 to 512 [ 313.937552][ T7970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.969978][ T7970] EXT4-fs (loop1): 1 truncate cleaned up [ 314.004019][ T7970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.026447][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 314.124097][ T7970] EXT4-fs: Cannot specify journal on remount [ 314.253211][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.420785][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.5.754'. [ 315.146109][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 315.207872][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 315.253692][ T7984] loop0: detected capacity change from 0 to 512 [ 315.269046][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.291344][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.301490][ T7984] EXT4-fs (loop0): Test dummy encryption mode enabled [ 315.332873][ T7984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 315.370815][ T24] usb 3-1: config 0 descriptor?? [ 315.447355][ T7984] EXT4-fs (loop0): 1 truncate cleaned up [ 315.513123][ T7984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.726733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 316.479660][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.717078][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.164969][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 318.211990][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 318.572888][ T24] usb 3-1: USB disconnect, device number 2 [ 319.038816][ T8001] loop1: detected capacity change from 0 to 2048 [ 319.122164][ T8008] loop3: detected capacity change from 0 to 64 [ 319.130399][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.181482][ T8001] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 319.203445][ T8011] loop2: detected capacity change from 0 to 512 [ 319.215335][ T8011] EXT4-fs (loop2): Test dummy encryption mode enabled [ 319.222300][ T8011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 319.279864][ T8011] EXT4-fs (loop2): 1 truncate cleaned up [ 319.300150][ T8001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.329513][ T8011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.391703][ T30] audit: type=1800 audit(1787184030.865:7): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 320.438642][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 320.617255][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 320.681637][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 320.709531][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.728444][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.750371][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.798506][ T9] usb 2-1: config 0 descriptor?? [ 320.821291][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.838175][ T8037] loop5: detected capacity change from 0 to 64 [ 321.348519][ T9] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 321.597546][ T9] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 321.653948][ T9] usb 2-1: USB disconnect, device number 3 [ 321.699169][ T8044] fido_id[8044]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1B02.0002/report_descriptor': No such device [ 321.727436][ T9] ------------[ cut here ]------------ [ 321.733023][ T9] ODEBUG: free active (active state 0) object: ffff88802c719ac8 object type: work_struct hint: k90_record_led_work+0x0/0x1f0 [ 321.746278][ T9] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:0/9 [ 321.756418][ T9] Modules linked in: [ 321.760508][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.772056][ T9] Tainted: [L]=SOFTLOCKUP [ 321.776925][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 321.787023][ T9] Workqueue: usb_hub_wq hub_event [ 321.792064][ T9] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 321.797995][ T9] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 18 7b 25 0c 41 56 48 8b 14 ed 40 37 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 22 72 1a 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 321.817843][ T9] RSP: 0018:ffffc900000e7208 EFLAGS: 00010246 [ 321.823952][ T9] RAX: dffffc0000000000 RBX: ffffc900000e72f0 RCX: 0000000000000000 [ 321.832216][ T9] RDX: ffffffff8c603680 RSI: ffffffff8c603220 RDI: ffffffff914db850 [ 321.840221][ T9] RBP: 0000000000000003 R08: ffff88802c719ac8 R09: ffffffff8bee2560 [ 321.848240][ T9] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c603220 [ 321.856292][ T9] R13: ffffffff8bee25a0 R14: ffffffff88f92270 R15: ffffc900000e7308 [ 321.864302][ T9] FS: 0000000000000000(0000) GS:ffff888123bcc000(0000) knlGS:0000000000000000 [ 321.874108][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.881185][ T9] CR2: 0000200000000380 CR3: 0000000075b83000 CR4: 0000000000350ef0 [ 321.889188][ T9] Call Trace: [ 321.892481][ T9] [ 321.895399][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 321.901069][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.907011][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.912708][ T9] debug_check_no_obj_freed+0x4da/0x630 [ 321.918528][ T9] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 321.924645][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.930316][ T9] ? kasan_quarantine_put+0x104/0x240 [ 321.935692][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.941424][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.946674][ T9] ? corsair_remove+0xfa/0x2f0 [ 321.951461][ T9] ? corsair_remove+0x50/0x2f0 [ 321.956326][ T9] kfree+0x3d6/0x6c0 [ 321.960254][ T9] ? mutex_is_locked+0x17/0x60 [ 321.965036][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.970746][ T9] corsair_remove+0xfa/0x2f0 [ 321.976308][ T9] ? __pfx_corsair_remove+0x10/0x10 [ 321.981535][ T9] hid_device_remove+0xd1/0x200 [ 321.986943][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 321.992426][ T9] device_remove+0xcb/0x180 [ 321.996983][ T9] device_release_driver_internal+0x44e/0x620 [ 322.003108][ T9] ? __entry_text_end+0x102035/0x102039 [ 322.008751][ T9] bus_remove_device+0x2bc/0x560 [ 322.013709][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 322.019220][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 322.025043][ T9] device_del+0x376/0x9b0 [ 322.029418][ T9] ? __pfx_device_del+0x10/0x10 [ 322.034275][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.040525][ T9] ? do_raw_spin_lock+0x128/0x260 [ 322.045576][ T9] ? find_held_lock+0x2b/0x80 [ 322.050286][ T9] hid_destroy_device+0x19c/0x240 [ 322.055326][ T9] usbhid_disconnect+0xa0/0xe0 [ 322.060221][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 322.065441][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.071108][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 322.077651][ T9] device_remove+0x12a/0x180 [ 322.082261][ T9] device_release_driver_internal+0x44e/0x620 [ 322.088873][ T9] ? __entry_text_end+0x102035/0x102039 [ 322.094455][ T9] bus_remove_device+0x2bc/0x560 [ 322.099422][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 322.104886][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 322.110578][ T9] device_del+0x376/0x9b0 [ 322.114919][ T9] ? __pfx_device_del+0x10/0x10 [ 322.119810][ T9] ? kobject_put+0xb9/0x640 [ 322.124318][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.130004][ T9] usb_disable_device+0x367/0x810 [ 322.135074][ T9] usb_disconnect+0x2e2/0x9a0 [ 322.139801][ T9] hub_event+0x1bb1/0x4420 [ 322.144341][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.150057][ T9] ? __lock_acquire+0x4c5/0x1ec0 [ 322.155045][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.160864][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.166119][ T9] ? __pfx_hub_event+0x10/0x10 [ 322.170895][ T9] ? __entry_text_end+0xfdf35/0x102039 [ 322.177383][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 322.183059][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.189203][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.194879][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.200571][ T9] ? rcu_is_watching+0x13/0xc0 [ 322.205385][ T9] process_one_work+0xa23/0x1940 [ 322.210392][ T9] ? __pfx_process_one_work+0x10/0x10 [ 322.215771][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.221466][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.227166][ T9] worker_thread+0x5ef/0xe50 [ 322.231778][ T9] ? kthread+0x13a/0x450 [ 322.236109][ T9] ? __pfx_worker_thread+0x10/0x10 [ 322.241245][ T9] kthread+0x373/0x450 [ 322.245330][ T9] ? __pfx_kthread+0x10/0x10 [ 322.249972][ T9] ret_from_fork+0x730/0xd60 [ 322.254614][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 322.259772][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.265430][ T9] ? __switch_to+0x800/0x10f0 [ 322.270150][ T9] ? __switch_to_asm+0x39/0x70 [ 322.274940][ T9] ? __pfx_kthread+0x10/0x10 [ 322.280511][ T9] ret_from_fork_asm+0x1a/0x30 [ 322.285316][ T9] [ 322.288853][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.296153][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.306917][ T9] Tainted: [L]=SOFTLOCKUP [ 322.311229][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 322.321281][ T9] Workqueue: usb_hub_wq hub_event [ 322.326324][ T9] Call Trace: [ 322.329598][ T9] [ 322.332522][ T9] dump_stack_lvl+0x100/0x190 [ 322.337232][ T9] vpanic+0x553/0x970 [ 322.341217][ T9] ? __pfx_vpanic+0x10/0x10 [ 322.345729][ T9] panic+0xd1/0xe0 [ 322.349447][ T9] ? __pfx_panic+0x10/0x10 [ 322.353881][ T9] check_panic_on_warn.cold+0x19/0x34 [ 322.359256][ T9] ? debug_print_object+0x198/0x2b0 [ 322.364464][ T9] __warn.cold+0x191/0x318 [ 322.368895][ T9] __report_bug+0x30f/0x440 [ 322.373408][ T9] ? debug_print_object+0x198/0x2b0 [ 322.378616][ T9] ? __pfx___report_bug+0x10/0x10 [ 322.383652][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.389302][ T9] ? lock_acquire+0x1b9/0x370 [ 322.393998][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.399635][ T9] ? mark_held_locks+0x40/0x70 [ 322.404410][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.410229][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.415870][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.421085][ T9] report_bug_entry+0xe2/0x290 [ 322.425881][ T9] ? debug_print_object+0x1a5/0x2b0 [ 322.431087][ T9] handle_bug+0x1cd/0x2a0 [ 322.435455][ T9] exc_invalid_op+0x17/0x50 [ 322.439984][ T9] asm_exc_invalid_op+0x1a/0x20 [ 322.444835][ T9] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 322.450650][ T9] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 18 7b 25 0c 41 56 48 8b 14 ed 40 37 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 22 72 1a 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 322.470267][ T9] RSP: 0018:ffffc900000e7208 EFLAGS: 00010246 [ 322.476339][ T9] RAX: dffffc0000000000 RBX: ffffc900000e72f0 RCX: 0000000000000000 [ 322.484310][ T9] RDX: ffffffff8c603680 RSI: ffffffff8c603220 RDI: ffffffff914db850 [ 322.492299][ T9] RBP: 0000000000000003 R08: ffff88802c719ac8 R09: ffffffff8bee2560 [ 322.500272][ T9] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c603220 [ 322.508240][ T9] R13: ffffffff8bee25a0 R14: ffffffff88f92270 R15: ffffc900000e7308 [ 322.516212][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 322.521868][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.527508][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 322.533144][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 322.538957][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.544612][ T9] debug_check_no_obj_freed+0x4da/0x630 [ 322.550177][ T9] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 322.556268][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.561939][ T9] ? kasan_quarantine_put+0x104/0x240 [ 322.567316][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.572955][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 322.578229][ T9] ? corsair_remove+0xfa/0x2f0 [ 322.583011][ T9] ? corsair_remove+0x50/0x2f0 [ 322.587793][ T9] kfree+0x3d6/0x6c0 [ 322.591731][ T9] ? mutex_is_locked+0x17/0x60 [ 322.596507][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.602157][ T9] corsair_remove+0xfa/0x2f0 [ 322.606770][ T9] ? __pfx_corsair_remove+0x10/0x10 [ 322.611991][ T9] hid_device_remove+0xd1/0x200 [ 322.616849][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 322.622318][ T9] device_remove+0xcb/0x180 [ 322.626830][ T9] device_release_driver_internal+0x44e/0x620 [ 322.632906][ T9] ? __entry_text_end+0x102035/0x102039 [ 322.638473][ T9] bus_remove_device+0x2bc/0x560 [ 322.643468][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 322.648931][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 322.654609][ T9] device_del+0x376/0x9b0 [ 322.658954][ T9] ? __pfx_device_del+0x10/0x10 [ 322.663816][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.669454][ T9] ? do_raw_spin_lock+0x128/0x260 [ 322.674500][ T9] ? find_held_lock+0x2b/0x80 [ 322.679184][ T9] hid_destroy_device+0x19c/0x240 [ 322.684219][ T9] usbhid_disconnect+0xa0/0xe0 [ 322.688995][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 322.694237][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.699878][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 322.705608][ T9] device_remove+0x12a/0x180 [ 322.710209][ T9] device_release_driver_internal+0x44e/0x620 [ 322.716301][ T9] ? __entry_text_end+0x102035/0x102039 [ 322.721884][ T9] bus_remove_device+0x2bc/0x560 [ 322.726826][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 322.732286][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 322.737942][ T9] device_del+0x376/0x9b0 [ 322.742283][ T9] ? __pfx_device_del+0x10/0x10 [ 322.747133][ T9] ? kobject_put+0xb9/0x640 [ 322.751646][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.757386][ T9] usb_disable_device+0x367/0x810 [ 322.762428][ T9] usb_disconnect+0x2e2/0x9a0 [ 322.767120][ T9] hub_event+0x1bb1/0x4420 [ 322.771665][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.777327][ T9] ? __lock_acquire+0x4c5/0x1ec0 [ 322.782274][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.787915][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 322.793134][ T9] ? __pfx_hub_event+0x10/0x10 [ 322.797932][ T9] ? __entry_text_end+0xfdf35/0x102039 [ 322.803407][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 322.809054][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.814695][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.820367][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.826017][ T9] ? rcu_is_watching+0x13/0xc0 [ 322.830809][ T9] process_one_work+0xa23/0x1940 [ 322.835786][ T9] ? __pfx_process_one_work+0x10/0x10 [ 322.841170][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.846820][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.852463][ T9] worker_thread+0x5ef/0xe50 [ 322.857242][ T9] ? kthread+0x13a/0x450 [ 322.861482][ T9] ? __pfx_worker_thread+0x10/0x10 [ 322.866613][ T9] kthread+0x373/0x450 [ 322.870684][ T9] ? __pfx_kthread+0x10/0x10 [ 322.875277][ T9] ret_from_fork+0x730/0xd60 [ 322.879881][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 322.885005][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.890659][ T9] ? __switch_to+0x800/0x10f0 [ 322.895355][ T9] ? __switch_to_asm+0x39/0x70 [ 322.900136][ T9] ? __pfx_kthread+0x10/0x10 [ 322.904731][ T9] ret_from_fork_asm+0x1a/0x30 [ 322.909527][ T9] [ 322.912908][ T9] Kernel Offset: disabled [ 322.917227][ T9] Rebooting in 86400 seconds..