last executing test programs: 6.639174351s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, &(0x7f00000021c0)=ANY=[], 0x1270}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000007c0)='^', 0x1}], 0x1}}, {{0xffffffffffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="11a1e6476aee310e7125a9b4286b1a55124caf7ec2fce93346aa3e6338c957ec6e86912864d5357a0d1a264c632a04c87a11cc31d5817d229e54b7c5902bc832cc6d93bff0e46c6be8064854e877347420a4e8cc47e5c4e63588902cd00c9501e2a03eb5ff30a82f8e951cf0317cad7200af7dcf17107e48f5d57987fd266263", 0x80}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 6.406575179s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="01", 0x1}], 0x1}, 0x0) 5.494023019s ago: executing program 3: syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x2a065000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x12) 5.371711249s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x1b, 0x0, &(0x7f00000001c0)=0x37) 5.170485634s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) cachestat(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x114, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x114}}, 0x40000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mlock(&(0x7f000028e000/0x4000)=nil, 0x4000) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x55aa, &(0x7f000000ac40)="$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") write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 5.067457777s ago: executing program 2: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x96ef) 3.966676654s ago: executing program 3: syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000580)={[{@dmask={'dmask', 0x3d, 0x7}}, {@fmask={'fmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x3e70ea1}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x1508, &(0x7f0000002c80)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 3.754792407s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000000], 0x1, 0x0, 0x0, [{}]}, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 3.046190685s ago: executing program 0: syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f0000005180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r1, 0x20cf01) mkdir(&(0x7f0000003200)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 2.66367577s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x554) 2.583043874s ago: executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x210100, 0x0) fchmod(r1, 0x128) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {}, 0x0, 0x4}) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0xff68, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002000000"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @timestamp, @mss, @timestamp, @mss={0x2, 0x3}, @mss], 0x6) r2 = userfaultfd(0x80801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000d}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7d}) ppoll(&(0x7f0000000140)=[{r2, 0x25}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000152000/0x2000)=nil, 0x2000}, 0x1}) munmap(&(0x7f0000151000/0x4000)=nil, 0x4000) 2.445869844s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="00c3ff", 0x7ffff000}, {&(0x7f0000000000)='G', 0x1}], 0x2) 2.209320058s ago: executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 2.082969335s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) 2.011811841s ago: executing program 3: syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x2a065000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x12) 1.67967237s ago: executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) preadv2(r0, &(0x7f0000002000)=[{&(0x7f0000000140)=""/174, 0xae}], 0x1, 0x0, 0x0, 0x8) 1.678305213s ago: executing program 2: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0xa0001011}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.586470269s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000dd850000003100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.066618215s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@dax}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") 819.681115ms ago: executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) write(r0, 0x0, 0x0) 673.473114ms ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002940)='./file0/file0\x00', 0x101c08a, &(0x7f0000000400)=ANY=[@ANYBLOB='g=', @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,uni_xlate=0,uni_xlate=1,uni_xlate=0,iocharset=iso8859-2,uni_xlate=1,shortname=lower,nonumtail=0,check=strict,utf8=0,utf8=0,utf8=1,rodir,codepage=1255,nnonumtail=1,rodir,\x00'], 0x26, 0x2b9, &(0x7f0000000640)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"}) 565.360623ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, &(0x7f0000001300)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x8, 0x0, 0x0, 0x10}, 0x143, &(0x7f0000001580)={0x5, 0xf, 0x143, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x8, 0xb, 0x2, 0x9}, @generic={0x93, 0x10, 0x2, "c02bc8f4d346f46e297264065a2e60dfb39f8af0b1516bc734740b53de8471736c7896ce363a4b321b5a2b7255f74f592f70976fe0356cf1487229e92caa65e95396e7291c410f2abbdd57064a984d125c32bd700498b9b18ade8121ae2aed9251465bc841a7d31dd5a84180c011e708293967c862f563bfa68430af976a620132d4b80fcdc62e0fee91c2593bf42e9e"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "746a1b6cde4e09988c0cd88b41b3ca9c"}, @ptm_cap={0x3}, @generic={0x7e, 0x10, 0x2, "639bdde62d0f70f955e985b6922d13cdea0a9224eac33a3087332361e66537e93c9313e8905b66f0abd8fdc38c1ca369d3cb3b4e9a94d5120adedca4f3ec50a0a290f669d649687349fdc53b3c6c06350b32a0a7101e98b8274d76fea691a2b4ef05ffab53cb3fa944106e8dc184775dd4907a5ad500e31c139219"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x3, 0x7f, 0x6, 0xa7}]}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, &(0x7f0000000740)={0x0, 0x0, 0xf5, {0xf5, 0x4, "22752cb751bb781bd91a53eb7596af16e415f7ca258173b6416314bb2a5c3ded2c18db430d1eff2d9e86239f253020af5c6d85ea68dd8071c1225272878310de87d2d94b50284b81c8669707103ab13cf33bd0a68a08d5a6c2ff4078fc7e86aafef55d5709fa64be700bf6ba11032685614b55a4817094cd0c96ebdcbb5ab260676bf8985886250678053b12b0453c0a4cf9b54c5e67d01e73cca06da0d7c5ad1f69ade36968740ba6b34288c3c43b0467dbf74059652de66d5d13fdfb8e2ca8f2ac929417fd3a750918a75168ba057559cd4d0918633128127ed9af5da4cc497d7caca887609826ffad94148bad7b30f2df10"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000880)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "01bbfeab"}]}}, 0x0}, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0x0, 0xe, "8c09290fbfb5de7c0a07b10cba94"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000a00)={0x20, 0x1, 0xce, "b21e66500d271788ad13fce9975536d815aebf43f5e559df850246c703a2bdd439582376ec441ee322932cf8db48bf57141e75ab29f1630ae12449a0e328989ba517a894b7f5cb71ff884a14f4b05676cd3b77892d733379f89550518f4a6778776e2736c07af5a9edfdbfe4fa2cbc3282b6ae9cb150d9a7493706e25232c3cb31d491e2730edb2951caecc9d9502c58956ff0dcb6d71c80fd8d0ed5d05cb918184895043d9aaeb82e3555c0b815db3c77b73caf3b5aec953487061ed648bdd753c8bc037c4d19ba0c23a9990c48"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x2e, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x97b5a2c9e882cc20, 0x0, 0x9, 0x2, 0x40, 0x40}, 0x8, &(0x7f0000000c00)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}, 0x3, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d40)=@string={0x2}}, {0x0, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 437.941181ms ago: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) 356.000335ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="00c3ff", 0x7ffff000}, {&(0x7f0000000000)='G', 0x1}], 0x2) 341.809824ms ago: executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x82, 0x0) write$sequencer(r0, &(0x7f0000000200)=[@t={0x81, 0x2}], 0x8) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) 298.838051ms ago: executing program 2: syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f0000005180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r1, 0x20cf01) mkdir(&(0x7f0000003200)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 254.352408ms ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2c96}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 173.211278ms ago: executing program 1: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 95.506457ms ago: executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0001000000000000", @ANYRES64=r1, @ANYBLOB='\a'], 0x100) 0s ago: executing program 1: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0xa0001011}) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.163399][ T5159] usb 4-1: USB disconnect, device number 2 [ 75.183728][ T5472] loop4: detected capacity change from 0 to 32768 [ 75.221175][ T5493] loop2: detected capacity change from 0 to 32768 [ 75.232108][ T5493] btrfs: Deprecated parameter 'usebackuproot' [ 75.239567][ T5493] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 75.263968][ T5493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5493) [ 75.267746][ T5487] loop1: detected capacity change from 0 to 32768 [ 75.314102][ T5493] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.335145][ T50] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 75.382101][ T5472] find_entry called with index = 0 [ 75.390170][ T5493] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 75.400516][ T50] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 75.418267][ T5472] find_entry called with index = 0 [ 75.430728][ T50] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 75.442145][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.442292][ T5487] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.487657][ T50] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 75.497233][ T29] audit: type=1800 audit(1717399855.586:2): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 75.578541][ T5493] BTRFS info (device loop2): rebuilding free space tree [ 75.594808][ T29] audit: type=1800 audit(1717399855.696:3): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=8 res=0 errno=0 [ 75.623779][ T5472] find_entry called with index >= next_index [ 75.624906][ T5487] XFS (loop1): Ending clean mount [ 75.633406][ T5493] BTRFS info (device loop2): disabling free space tree [ 75.633535][ T5493] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.633651][ T5493] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.655322][ T5472] find_entry called with index >= next_index [ 75.676496][ T5472] find_entry called with index >= next_index [ 75.687385][ T5487] XFS (loop1): Quotacheck needed: Please wait. [ 75.809565][ T5487] XFS (loop1): Quotacheck: Done. [ 75.886074][ T50] gspca_sn9c2028: read1 error -71 [ 75.896071][ T5109] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.904711][ T50] gspca_sn9c2028: read1 error -71 [ 75.940932][ T50] sn9c2028 1-1:220.0: probe with driver sn9c2028 failed with error -71 [ 75.980547][ T50] usb 1-1: USB disconnect, device number 4 [ 76.005968][ T5527] loop3: detected capacity change from 0 to 2048 [ 76.103542][ T5527] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 76.166498][ T5527] UDF-fs: Scanning with blocksize 512 failed [ 76.231531][ T5527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.653168][ T5536] veth0_vlan: entered allmulticast mode [ 77.306858][ T5540] i2c i2c-0: Invalid block write size 34 [ 77.324557][ T8] cfg80211: failed to load regulatory.db [ 77.437186][ T5112] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.682809][ T25] libceph: connect (1)[c::]:6789 error -101 [ 77.706976][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 77.807721][ T5547] ceph: No mds server is up or the cluster is laggy [ 78.133610][ T5561] loop1: detected capacity change from 0 to 16 [ 78.141629][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.147345][ T5561] ======================================================= [ 78.147345][ T5561] WARNING: The mand mount option has been deprecated and [ 78.147345][ T5561] and is ignored by this kernel. Remove the mand [ 78.147345][ T5561] option from the mount to silence this warning. [ 78.147345][ T5561] ======================================================= [ 78.294803][ T5565] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 78.297099][ T5565] CPU: 0 PID: 5565 Comm: syz-executor.3 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller #0 [ 78.297132][ T5565] Tainted: [W]=WARN [ 78.297141][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 78.297161][ T5565] Call Trace: [ 78.297174][ T5565] [ 78.297184][ T5565] dump_stack_lvl+0x241/0x360 [ 78.297237][ T5565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.297263][ T5565] ? __pfx__printk+0x10/0x10 [ 78.297293][ T5565] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 78.297316][ T5565] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 78.297341][ T5565] warn_alloc+0x278/0x410 [ 78.297365][ T5565] ? stack_depot_save_flags+0x6e4/0x830 [ 78.297397][ T5565] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 78.297424][ T5565] ? __pfx_warn_alloc+0x10/0x10 [ 78.297448][ T5565] ? kasan_save_track+0x3f/0x80 [ 78.297472][ T5565] ? __kasan_kmalloc+0x98/0xb0 [ 78.297498][ T5565] ? xsk_setsockopt+0x598/0x950 [ 78.297518][ T5565] ? do_sock_setsockopt+0x3af/0x720 [ 78.297545][ T5565] ? __sys_setsockopt+0x1ae/0x250 [ 78.297571][ T5565] ? __x64_sys_setsockopt+0xb5/0xd0 [ 78.297597][ T5565] ? do_syscall_64+0xf3/0x230 [ 78.297619][ T5565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.297655][ T5565] __vmalloc_node_range_noprof+0x130/0x1460 [ 78.297718][ T5565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.297750][ T5565] ? __kasan_kmalloc+0x98/0xb0 [ 78.297777][ T5565] ? xskq_create+0x54/0x170 [ 78.297805][ T5565] vmalloc_user_noprof+0x74/0x80 [ 78.297831][ T5565] ? xskq_create+0xb6/0x170 [ 78.297854][ T5565] xskq_create+0xb6/0x170 [ 78.297879][ T5565] xsk_init_queue+0xa1/0x100 [ 78.297905][ T5565] xsk_setsockopt+0x598/0x950 [ 78.297930][ T5565] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.297956][ T5565] ? __pfx_lock_acquire+0x10/0x10 [ 78.297979][ T5565] ? aa_sock_opt_perm+0x79/0x120 [ 78.298001][ T5565] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 78.298023][ T5565] ? security_socket_setsockopt+0x87/0xb0 [ 78.298049][ T5565] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.298070][ T5565] do_sock_setsockopt+0x3af/0x720 [ 78.298104][ T5565] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 78.298131][ T5565] ? __fget_files+0x29/0x470 [ 78.298152][ T5565] ? __fget_files+0x3f6/0x470 [ 78.298184][ T5565] __sys_setsockopt+0x1ae/0x250 [ 78.298216][ T5565] __x64_sys_setsockopt+0xb5/0xd0 [ 78.298246][ T5565] do_syscall_64+0xf3/0x230 [ 78.298270][ T5565] ? clear_bhb_loop+0x35/0x90 [ 78.298298][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.298330][ T5565] RIP: 0033:0x7f2801c7cee9 [ 78.298353][ T5565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 78.298370][ T5565] RSP: 002b:00007f28017de0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.298392][ T5565] RAX: ffffffffffffffda RBX: 00007f2801db4070 RCX: 00007f2801c7cee9 [ 78.298408][ T5565] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 78.298421][ T5565] RBP: 00007f2801cc947f R08: 0000000000000020 R09: 0000000000000000 [ 78.298434][ T5565] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 78.298447][ T5565] R13: 000000000000006e R14: 00007f2801db4070 R15: 00007ffed5c21908 [ 78.298479][ T5565] [ 78.301429][ T5565] Mem-Info: [ 78.301453][ T5565] active_anon:20922 inactive_anon:0 isolated_anon:0 [ 78.301453][ T5565] active_file:0 inactive_file:46262 isolated_file:0 [ 78.301453][ T5565] unevictable:3476 dirty:42 writeback:0 [ 78.301453][ T5565] slab_reclaimable:9335 slab_unreclaimable:95029 [ 78.301453][ T5565] mapped:93765 shmem:2822 pagetables:817 [ 78.301453][ T5565] sec_pagetables:0 bounce:0 [ 78.301453][ T5565] kernel_misc_reclaimable:0 [ 78.301453][ T5565] free:1379792 free_pcp:1089 free_cma:0 [ 78.301515][ T5565] Node 0 active_anon:83688kB inactive_anon:0kB active_file:0kB inactive_file:184972kB unevictable:12368kB isolated(anon):0kB isolated(file):0kB mapped:375060kB dirty:164kB writeback:0kB shmem:9752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:36864kB writeback_tmp:0kB kernel_stack:10484kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no [ 78.301566][ T5565] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 78.301612][ T5565] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.301678][ T5565] lowmem_reserve[]: 0 2571 2571 0 0 [ 78.301725][ T5565] Node 0 DMA32 free:1559288kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:83636kB inactive_anon:0kB active_file:0kB inactive_file:184664kB unevictable:12368kB writepending:164kB present:3129332kB managed:2659888kB mlocked:10788kB bounce:0kB free_pcp:1028kB local_pcp:568kB free_cma:0kB [ 78.301791][ T5565] lowmem_reserve[]: 0 0 0 0 0 [ 78.301837][ T5565] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.301891][ T5565] lowmem_reserve[]: 0 0 0 0 0 [ 78.301937][ T5565] Node 1 Normal free:3944520kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3328kB local_pcp:3328kB free_cma:0kB [ 78.302000][ T5565] lowmem_reserve[]: 0 0 0 0 0 [ 78.302046][ T5565] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.302236][ T5565] Node 0 DMA32: 291*4kB (UME) 604*8kB (UE) 406*16kB (UME) 7*32kB (UME) 123*64kB (UME) 81*128kB (UME) 26*256kB (UME) 14*512kB (UME) 7*1024kB (UM) 2*2048kB (ME) 367*4096kB (UM) = 1559276kB [ 78.302452][ T5565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 78.302612][ T5565] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 7*16kB (U) 10*32kB (U) 6*64kB (UM) 4*128kB (U) 5*256kB (U) 5*512kB (UM) 5*1024kB (U) 1*2048kB (U) 960*4096kB (M) = 3944520kB [ 78.302816][ T5565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.302833][ T5565] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.302856][ T5565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.302873][ T5565] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.302890][ T5565] 49267 total pagecache pages [ 78.302899][ T5565] 0 pages in swap cache [ 78.302908][ T5565] Free swap = 124984kB [ 78.302917][ T5565] Total swap = 124996kB [ 78.302930][ T5565] 2097051 pages RAM [ 78.302939][ T5565] 0 pages HighMem/MovableOnly [ 78.302948][ T5565] 400869 pages reserved [ 78.302956][ T5565] 0 pages cma reserved [ 78.807054][ T5577] loop1: detected capacity change from 0 to 2048 [ 78.848124][ T5543] loop4: detected capacity change from 0 to 32768 [ 78.936403][ T5117] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.035307][ T5577] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 79.279659][ T5117] usb 3-1: config 176 has too many interfaces: 44, using maximum allowed: 32 [ 79.341271][ T5577] UDF-fs: Scanning with blocksize 512 failed [ 79.368359][ T5117] usb 3-1: config 176 contains an unexpected descriptor of type 0x1, skipping [ 79.502460][ T5117] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 79.502488][ T5117] usb 3-1: config 176 has 0 interfaces, different from the descriptor's value: 44 [ 79.505054][ T5117] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.517000][ T5543] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.557273][ T5577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.605337][ T5117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.616744][ T5117] usb 3-1: Product: syz [ 79.620997][ T5117] usb 3-1: Manufacturer: syz [ 79.625621][ T5117] usb 3-1: SerialNumber: syz [ 79.667777][ T5543] XFS (loop4): Ending clean mount [ 79.695706][ T5543] XFS (loop4): Quotacheck needed: Please wait. [ 79.778019][ T5543] XFS (loop4): Quotacheck: Done. [ 79.863814][ T5117] usb 3-1: USB disconnect, device number 2 [ 80.075831][ T5108] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.613416][ T5607] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.627820][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.901240][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.960276][ T5615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.118925][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.118963][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.119002][ T50] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 81.119026][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.122282][ T50] usb 5-1: config 0 descriptor?? [ 81.288231][ T5620] loop2: detected capacity change from 0 to 2048 [ 81.300813][ T5620] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 81.300838][ T5620] UDF-fs: Scanning with blocksize 512 failed [ 81.347858][ T5620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.600537][ T50] itetech 0003:06CB:73F5.0002: unknown main item tag 0x0 [ 81.616518][ T50] itetech 0003:06CB:73F5.0002: item fetching failed at offset 10/11 [ 81.645024][ T50] itetech 0003:06CB:73F5.0002: probe with driver itetech failed with error -22 [ 81.723290][ T5628] wireguard0: entered promiscuous mode [ 81.756399][ T5628] wireguard0: entered allmulticast mode [ 82.162299][ T5639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.330311][ T50] usb 5-1: USB disconnect, device number 3 [ 82.690144][ T5651] loop4: detected capacity change from 0 to 2048 [ 82.740759][ T5651] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 82.761670][ T5651] UDF-fs: Scanning with blocksize 512 failed [ 82.806749][ T5651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.847659][ T5629] loop1: detected capacity change from 0 to 32768 [ 82.914003][ T5656] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6• [ 82.945119][ T5629] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 82.945119][ T5629] [ 82.980051][ T5657] loop2: detected capacity change from 0 to 64 [ 83.033721][ T5657] hfs: keylen 9474 too large [ 83.064864][ T5657] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 83.090465][ T5657] hfs: get root inode failed [ 83.300026][ T5641] loop3: detected capacity change from 0 to 32768 [ 83.344006][ T5641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5641) [ 83.422986][ T5641] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.471244][ T5641] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 83.513553][ T5641] BTRFS info (device loop3): using free-space-tree [ 83.614180][ T5678] loop2: detected capacity change from 0 to 512 [ 83.659710][ T5678] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 4 in block_group 0 [ 83.676575][ T5117] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.685795][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.722565][ T5685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.842521][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.881546][ T5117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.881582][ T5117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.881619][ T5117] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 83.881643][ T5117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.884876][ T5117] usb 5-1: config 0 descriptor?? [ 84.055505][ T5641] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 84.157162][ T5691] loop0: detected capacity change from 0 to 2048 [ 84.219957][ T5107] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.293767][ T5698] loop2: detected capacity change from 0 to 256 [ 84.335055][ T5698] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x6842f4db, utbl_chksum : 0xe619d30d) [ 84.350639][ T5117] itetech 0003:06CB:73F5.0003: unknown main item tag 0x0 [ 84.370629][ T5117] itetech 0003:06CB:73F5.0003: item fetching failed at offset 10/11 [ 84.391619][ T5117] itetech 0003:06CB:73F5.0003: probe with driver itetech failed with error -22 [ 84.554322][ T5695] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (393216 ns). Using initial count to start timer. [ 84.796096][ T5705] loop3: detected capacity change from 0 to 512 [ 84.885764][ T29] audit: type=1800 audit(1717399864.986:4): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 84.918521][ T5705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.956579][ T5705] ext4 filesystem being mounted at /root/syzkaller-testdir436065296/syzkaller.KQa1CC/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.123167][ T5107] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.151901][ T8] usb 5-1: USB disconnect, device number 4 [ 86.270604][ T5701] loop1: detected capacity change from 0 to 32768 [ 86.429292][ T5701] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 86.429292][ T5701] [ 87.270707][ T5703] loop0: detected capacity change from 0 to 32768 [ 87.328626][ T5703] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5703) [ 87.380908][ T5703] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 87.402398][ T5703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 87.415519][ T5731] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 87.434597][ T5703] BTRFS info (device loop0): using free-space-tree [ 87.557443][ T5703] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 87.593338][ T5703] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 87.641393][ T5748] loop4: detected capacity change from 0 to 2048 [ 87.654894][ T5703] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 87.690178][ T5703] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 87.711598][ T5751] loop2: detected capacity change from 0 to 256 [ 87.751706][ T5703] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 87.803172][ T5751] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x6842f4db, utbl_chksum : 0xe619d30d) [ 87.853005][ T5703] BTRFS error (device loop0): open_ctree failed [ 88.049393][ T5759] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 88.320026][ T29] audit: type=1326 audit(1717399868.426:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.423331][ T29] audit: type=1326 audit(1717399868.446:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.506195][ T29] audit: type=1326 audit(1717399868.446:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.516587][ T5768] veth2: entered promiscuous mode [ 88.561260][ T29] audit: type=1326 audit(1717399868.446:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.571104][ T5768] veth2: entered allmulticast mode [ 88.613716][ T29] audit: type=1326 audit(1717399868.456:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.668261][ T5770] loop0: detected capacity change from 0 to 4096 [ 88.676608][ T29] audit: type=1326 audit(1717399868.456:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2801c7cee9 code=0x7ffc0000 [ 88.700288][ T29] audit: type=1326 audit(1717399868.456:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2801c7a667 code=0x7ffc0000 [ 88.801674][ T5771] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.805479][ T29] audit: type=1326 audit(1717399868.456:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2801c40329 code=0x7ffc0000 [ 88.875471][ T29] audit: type=1326 audit(1717399868.456:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2801c7a667 code=0x7ffc0000 [ 88.959721][ T5745] loop1: detected capacity change from 0 to 32768 [ 88.969845][ T5745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5745) [ 89.028127][ T5745] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.065981][ T5745] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.093228][ T5745] BTRFS info (device loop1): using free-space-tree [ 89.106948][ T5780] loop4: detected capacity change from 0 to 1024 [ 89.128960][ T5781] loop3: detected capacity change from 0 to 256 [ 89.248831][ T5780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.268490][ T5780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.295588][ T5780] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.306529][ T5745] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 89.359572][ T5780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003] [ 89.397740][ T5780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.421758][ T5807] loop0: detected capacity change from 0 to 256 [ 89.490874][ T5112] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.524478][ T5807] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6842f4db, utbl_chksum : 0xe619d30d) [ 89.654722][ T5780] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 89.763227][ T5803] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (393216 ns). Using initial count to start timer. [ 89.872738][ T5780] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 89.994059][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.258762][ T5838] loop1: detected capacity change from 0 to 256 [ 90.304669][ T5838] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.479054][ T5775] loop2: detected capacity change from 0 to 32768 [ 90.512985][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.527170][ T5775] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 90.547486][ T5838] loop1: detected capacity change from 256 to 0 [ 90.568990][ T5855] syz-executor.1: attempt to access beyond end of device [ 90.568990][ T5855] loop1: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 90.571887][ T5775] dlm: no local IP address has been set [ 90.599407][ T5858] loop4: detected capacity change from 0 to 256 [ 90.607270][ T5855] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 90.612449][ T5857] loop0: detected capacity change from 0 to 128 [ 90.627599][ T5775] dlm: cannot start dlm midcomms -107 [ 90.633022][ T5775] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 90.671222][ T5857] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.692630][ T5857] ext4 filesystem being mounted at /root/syzkaller-testdir3978874253/syzkaller.pOqgTc/43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.695734][ T5112] syz-executor.1: attempt to access beyond end of device [ 90.695734][ T5112] loop1: rw=0, sector=128, nr_sectors = 1 limit=0 [ 90.750304][ T5858] FAT-fs (loop4): Directory bread(block 64) failed [ 90.759070][ T5112] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 90.775416][ T5112] exFAT-fs (loop1): Filesystem has been set read-only [ 90.782546][ T5858] FAT-fs (loop4): Directory bread(block 65) failed [ 90.807706][ T5858] FAT-fs (loop4): Directory bread(block 66) failed [ 90.817000][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.825130][ T5112] syz-executor.1: attempt to access beyond end of device [ 90.825130][ T5112] loop1: rw=0, sector=128, nr_sectors = 1 limit=0 [ 90.848028][ T5858] FAT-fs (loop4): Directory bread(block 67) failed [ 90.856756][ T5858] FAT-fs (loop4): Directory bread(block 68) failed [ 90.871719][ T5858] FAT-fs (loop4): Directory bread(block 69) failed [ 90.878333][ T5112] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 90.901967][ T5858] FAT-fs (loop4): Directory bread(block 70) failed [ 90.902465][ T5124] Bluetooth: Unexpected continuation frame (len 18) [ 90.923657][ T5858] FAT-fs (loop4): Directory bread(block 71) failed [ 90.942885][ T5858] FAT-fs (loop4): Directory bread(block 72) failed [ 90.949629][ T5858] FAT-fs (loop4): Directory bread(block 73) failed [ 90.995106][ T5116] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.009404][ T25] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 91.025391][ T25] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 91.047590][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 91.060910][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.102577][ T25] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 91.110593][ T5863] loop1: detected capacity change from 0 to 256 [ 91.118554][ T5863] exfat: Deprecated parameter 'utf8' [ 91.131410][ T5863] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 91.377435][ T5117] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.493150][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.519951][ T25] gspca_sn9c2028: read1 error -71 [ 91.534443][ T25] gspca_sn9c2028: read1 error -71 [ 91.552068][ T25] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 91.579120][ T25] usb 4-1: USB disconnect, device number 3 [ 91.587953][ T5117] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.637403][ T5117] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 91.661706][ T5117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.707550][ T5117] usb 3-1: config 0 descriptor?? [ 91.718359][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.798108][ T5117] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 91.839281][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.019842][ T5117] usb 3-1: USB disconnect, device number 3 [ 92.029760][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.314881][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.337365][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.345840][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.353644][ T35] bridge_slave_1: left allmulticast mode [ 92.361499][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.369677][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.377958][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.405816][ T35] bridge_slave_1: left promiscuous mode [ 92.406702][ T5161] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.417977][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.464966][ T5873] loop1: detected capacity change from 0 to 32768 [ 92.474815][ T35] bridge_slave_0: left allmulticast mode [ 92.486710][ T35] bridge_slave_0: left promiscuous mode [ 92.492684][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.507299][ T5873] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 92.524607][ T5873] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 92.608950][ T5873] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 92.633043][ T5161] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.656594][ T5161] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 92.656623][ T50] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 92.665660][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.671251][ T5161] usb 4-1: config 0 descriptor?? [ 92.715699][ T50] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 92.743724][ T5161] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 92.891403][ T50] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 175ms [ 92.913886][ T50] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 92.931181][ T5873] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 92.995539][ T8] usb 4-1: USB disconnect, device number 4 [ 93.032879][ T5898] loop2: detected capacity change from 0 to 256 [ 93.215765][ T5882] loop4: detected capacity change from 0 to 32768 [ 93.239214][ T5882] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 93.250912][ T5882] dlm: no local IP address has been set [ 93.264192][ T5882] dlm: cannot start dlm midcomms -107 [ 93.275187][ T5882] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 93.576861][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.614425][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.650565][ T35] bond0 (unregistering): Released all slaves [ 94.174445][ T5912] loop1: detected capacity change from 0 to 512 [ 94.203860][ T5912] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.223546][ T5912] EXT4-fs (loop1): 1 truncate cleaned up [ 94.240300][ T5912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.437600][ T5113] Bluetooth: hci4: command tx timeout [ 94.528790][ T35] hsr_slave_0: left promiscuous mode [ 94.587229][ T35] hsr_slave_1: left promiscuous mode [ 94.599475][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.619894][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.642198][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.666654][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.734223][ T35] veth1_macvtap: left promiscuous mode [ 94.743791][ T35] veth0_macvtap: left promiscuous mode [ 94.770158][ T35] veth1_vlan: left promiscuous mode [ 94.775797][ T35] veth0_vlan: left promiscuous mode [ 94.793720][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.804602][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.821473][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.846359][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.861735][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.870646][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.983747][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.003460][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.014195][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.024328][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.034702][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.042071][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.111840][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.114934][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.135042][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.150134][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.163887][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.175181][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.184548][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.521559][ T35] team0 (unregistering): Port device team_slave_1 removed [ 95.573544][ T35] team0 (unregistering): Port device team_slave_0 removed [ 96.902146][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.094248][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.137505][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.151379][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.159630][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.168637][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.176753][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.184094][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.238252][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 97.238270][ T29] audit: type=1326 audit(1717399877.346:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.300265][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.310949][ T29] audit: type=1326 audit(1717399877.386:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.310999][ T29] audit: type=1326 audit(1717399877.386:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.311040][ T29] audit: type=1326 audit(1717399877.406:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.311080][ T29] audit: type=1326 audit(1717399877.406:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.311121][ T29] audit: type=1326 audit(1717399877.406:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.311161][ T29] audit: type=1326 audit(1717399877.406:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 97.311200][ T29] audit: type=1326 audit(1717399877.406:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2ac47a667 code=0x7ffc0000 [ 97.311239][ T29] audit: type=1326 audit(1717399877.406:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2ac440329 code=0x7ffc0000 [ 97.311278][ T29] audit: type=1326 audit(1717399877.406:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2ac47a667 code=0x7ffc0000 [ 97.427882][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.534876][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.542908][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.551642][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.559482][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.569425][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.610365][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.632176][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.641876][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.653263][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.663956][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.671870][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.684801][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.695215][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.707646][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.723397][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.741159][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.754896][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.760697][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.222025][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.401768][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.416550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 98.454355][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 98.512962][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.571501][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.677271][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 98.934068][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 98.974366][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.982281][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.993964][ T5955] bridge_slave_0: entered allmulticast mode [ 99.015354][ T5955] bridge_slave_0: entered promiscuous mode [ 99.075150][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.085721][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.093786][ T5958] bridge_slave_0: entered allmulticast mode [ 99.110718][ T5958] bridge_slave_0: entered promiscuous mode [ 99.132223][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 99.182366][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.190149][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.198411][ T5955] bridge_slave_1: entered allmulticast mode [ 99.212128][ T5955] bridge_slave_1: entered promiscuous mode [ 99.226639][ T5111] Bluetooth: hci0: command tx timeout [ 99.242830][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.272947][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.281587][ T5958] bridge_slave_1: entered allmulticast mode [ 99.292493][ T5958] bridge_slave_1: entered promiscuous mode [ 99.448033][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.593768][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.621991][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.631166][ T5111] Bluetooth: hci1: command tx timeout [ 99.640239][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.675946][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.760413][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.784184][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.789799][ T5995] loop1: detected capacity change from 0 to 1024 [ 99.794443][ T5111] Bluetooth: hci4: command tx timeout [ 99.799954][ T5120] Bluetooth: hci2: command tx timeout [ 99.816673][ T5995] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 99.883082][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.918753][ T5995] loop1: detected capacity change from 0 to 512 [ 99.931821][ T5955] team0: Port device team_slave_0 added [ 99.943946][ T5958] team0: Port device team_slave_0 added [ 99.970910][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.978812][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.986047][ T5963] bridge_slave_0: entered allmulticast mode [ 99.993843][ T5963] bridge_slave_0: entered promiscuous mode [ 100.025306][ T5955] team0: Port device team_slave_1 added [ 100.070517][ T5958] team0: Port device team_slave_1 added [ 100.087233][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.094464][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.101972][ T5963] bridge_slave_1: entered allmulticast mode [ 100.110028][ T5963] bridge_slave_1: entered promiscuous mode [ 100.141181][ T5998] loop1: detected capacity change from 0 to 4096 [ 100.150151][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.159991][ T5998] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 100.162683][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.185060][ T5961] bridge_slave_0: entered allmulticast mode [ 100.193171][ T5961] bridge_slave_0: entered promiscuous mode [ 100.202222][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.210372][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.239564][ T5998] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 100.244294][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.262190][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.269632][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.299585][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.345744][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.353160][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.360776][ T5961] bridge_slave_1: entered allmulticast mode [ 100.368244][ T5961] bridge_slave_1: entered promiscuous mode [ 100.403745][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.480073][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.488970][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.516097][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.539473][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.562064][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.601322][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.608524][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.635250][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.709990][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.737792][ T5955] hsr_slave_0: entered promiscuous mode [ 100.744762][ T5955] hsr_slave_1: entered promiscuous mode [ 100.751719][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.759599][ T5955] Cannot create hsr debugfs directory [ 100.776032][ T5963] team0: Port device team_slave_0 added [ 100.786201][ T5963] team0: Port device team_slave_1 added [ 100.827103][ T5961] team0: Port device team_slave_0 added [ 100.913922][ T6000] loop1: detected capacity change from 0 to 32768 [ 100.919143][ T5961] team0: Port device team_slave_1 added [ 100.922965][ T6000] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6000) [ 100.945357][ T6000] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.955843][ T6000] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 100.965465][ T6000] BTRFS info (device loop1): disk space caching is enabled [ 100.977198][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.984239][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.009613][ T6000] BTRFS info (device loop1): rebuilding free space tree [ 101.020822][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.030660][ T6000] BTRFS info (device loop1): disabling free space tree [ 101.047610][ T6000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.052871][ T35] bridge_slave_1: left allmulticast mode [ 101.058313][ T6000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.064100][ T35] bridge_slave_1: left promiscuous mode [ 101.079673][ T6000] BTRFS info (device loop1): checking UUID tree [ 101.087682][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.102884][ T35] bridge_slave_0: left allmulticast mode [ 101.113958][ T35] bridge_slave_0: left promiscuous mode [ 101.119950][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.142237][ T35] bridge_slave_1: left allmulticast mode [ 101.150603][ T35] bridge_slave_1: left promiscuous mode [ 101.156717][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.169726][ T35] bridge_slave_0: left allmulticast mode [ 101.175400][ T35] bridge_slave_0: left promiscuous mode [ 101.192717][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.200159][ T5112] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.216134][ T35] bridge_slave_1: left allmulticast mode [ 101.222203][ T35] bridge_slave_1: left promiscuous mode [ 101.229445][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.252629][ T35] bridge_slave_0: left allmulticast mode [ 101.263549][ T35] bridge_slave_0: left promiscuous mode [ 101.273715][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.306543][ T5120] Bluetooth: hci0: command tx timeout [ 101.718085][ T5120] Bluetooth: hci1: command tx timeout [ 101.810292][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.868406][ T5120] Bluetooth: hci2: command tx timeout [ 101.883496][ T5120] Bluetooth: hci4: command tx timeout [ 102.451319][ T35] bond0 (unregistering): Released all slaves [ 102.551664][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.562503][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.573517][ T35] bond0 (unregistering): Released all slaves [ 102.672186][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.684474][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.694981][ T35] bond0 (unregistering): Released all slaves [ 102.800189][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.811452][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.821848][ T35] bond0 (unregistering): Released all slaves [ 102.845197][ T5958] hsr_slave_0: entered promiscuous mode [ 102.854022][ T5958] hsr_slave_1: entered promiscuous mode [ 102.860426][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.868271][ T5958] Cannot create hsr debugfs directory [ 102.877423][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.884474][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.912467][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.111632][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.119309][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.145543][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.203909][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.211418][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.238546][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.344616][ T5963] hsr_slave_0: entered promiscuous mode [ 103.355828][ T5963] hsr_slave_1: entered promiscuous mode [ 103.364894][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.373286][ T5963] Cannot create hsr debugfs directory [ 103.386583][ T5120] Bluetooth: hci0: command tx timeout [ 103.542549][ T5961] hsr_slave_0: entered promiscuous mode [ 103.552198][ T5961] hsr_slave_1: entered promiscuous mode [ 103.561973][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.569920][ T5961] Cannot create hsr debugfs directory [ 103.786701][ T5120] Bluetooth: hci1: command tx timeout [ 103.946856][ T5120] Bluetooth: hci4: command tx timeout [ 103.952308][ T5120] Bluetooth: hci2: command tx timeout [ 104.204750][ T35] hsr_slave_0: left promiscuous mode [ 104.218346][ T35] hsr_slave_1: left promiscuous mode [ 104.227880][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.235405][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.250985][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.262043][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.297889][ T35] hsr_slave_0: left promiscuous mode [ 104.303718][ T35] hsr_slave_1: left promiscuous mode [ 104.312270][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.319811][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.328645][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.336077][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.675892][ T35] hsr_slave_0: left promiscuous mode [ 104.715222][ T35] hsr_slave_1: left promiscuous mode [ 104.752944][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.794775][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.884034][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.141404][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.251798][ T35] veth1_macvtap: left promiscuous mode [ 105.265915][ T35] veth0_macvtap: left promiscuous mode [ 105.272587][ T35] veth1_vlan: left promiscuous mode [ 105.278198][ T35] veth0_vlan: left promiscuous mode [ 105.286174][ T35] veth1_macvtap: left promiscuous mode [ 105.291879][ T35] veth0_macvtap: left promiscuous mode [ 105.297673][ T35] veth1_vlan: left promiscuous mode [ 105.303002][ T35] veth0_vlan: left promiscuous mode [ 105.317227][ T35] veth1_macvtap: left promiscuous mode [ 105.322778][ T35] veth0_macvtap: left promiscuous mode [ 105.328534][ T35] veth1_vlan: left promiscuous mode [ 105.333909][ T35] veth0_vlan: left promiscuous mode [ 105.344448][ T6029] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 105.409159][ T6031] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 105.466515][ T5120] Bluetooth: hci0: command tx timeout [ 105.869367][ T5120] Bluetooth: hci1: command tx timeout [ 106.017934][ T35] team0 (unregistering): Port device team_slave_1 removed [ 106.026618][ T5120] Bluetooth: hci2: command tx timeout [ 106.039719][ T5120] Bluetooth: hci4: command tx timeout [ 106.063537][ T35] team0 (unregistering): Port device team_slave_0 removed [ 106.917888][ T35] team0 (unregistering): Port device team_slave_1 removed [ 106.971329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 106.998023][ T35] team0 (unregistering): Port device team_slave_0 removed [ 107.832780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.860482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.166115][ T6043] loop1: detected capacity change from 0 to 1024 [ 108.177188][ T6043] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 108.177405][ T35] team0 (unregistering): Port device team_slave_1 removed [ 108.224613][ T35] team0 (unregistering): Port device team_slave_0 removed [ 108.271429][ T6043] loop1: detected capacity change from 0 to 512 [ 108.410574][ T6045] loop1: detected capacity change from 0 to 512 [ 108.418178][ T6045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.427808][ T6045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.465556][ T6045] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 108.484287][ T6045] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 108.492491][ T6045] System zones: 0-2, 18-18, 34-35 [ 108.501817][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.560467][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 108.711950][ T6051] Bluetooth: MGMT ver 1.23 [ 108.759262][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.772496][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.792579][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.825342][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.051985][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.070841][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.084755][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.091867][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.146197][ T5955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.169551][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.281498][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.288705][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.169738][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.242673][ T5955] veth0_vlan: entered promiscuous mode [ 111.275547][ T5955] veth1_vlan: entered promiscuous mode [ 111.305555][ T5955] veth0_macvtap: entered promiscuous mode [ 111.317308][ T5955] veth1_macvtap: entered promiscuous mode [ 111.348333][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.365824][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.405043][ T5955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.415767][ T5955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.424639][ T5955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.433950][ T5955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.528578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.538217][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.564761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.575982][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.675189][ T5117] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 111.795646][ T5958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.816197][ T5958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.843823][ T5958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.854477][ T5958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.934938][ T5963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.950843][ T5963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.979751][ T5963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.999537][ T5963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.174907][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.184566][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.195273][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.205365][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.224391][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.260788][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.289442][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.296618][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.314903][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.322065][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.405985][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.434499][ T5958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.445635][ T5164] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.455936][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.550556][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.600828][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.608016][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.643073][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.644221][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 112.665504][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.672683][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.692984][ T5164] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 112.713115][ T5164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.732119][ T5164] usb 2-1: config 0 has no interface number 0 [ 112.739773][ T5164] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 112.745331][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.761982][ T5164] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.776172][ T5164] usb 2-1: config 0 interface 52 has no altsetting 0 [ 112.788348][ T5164] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 112.791601][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.799892][ T5164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.820507][ T5164] usb 2-1: config 0 descriptor?? [ 112.858204][ T5209] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.865434][ T5209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.922291][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.929492][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.045454][ T5164] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input9 [ 113.257386][ T5165] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.301259][ T9] usb 2-1: USB disconnect, device number 3 [ 113.325663][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.425860][ T5958] veth0_vlan: entered promiscuous mode [ 113.443656][ T5958] veth1_vlan: entered promiscuous mode [ 113.462484][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.475039][ T5165] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 113.487618][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.496945][ T5165] usb 1-1: Product: syz [ 113.502408][ T5165] usb 1-1: Manufacturer: syz [ 113.512611][ T5165] usb 1-1: SerialNumber: syz [ 113.518519][ T5963] veth0_vlan: entered promiscuous mode [ 113.528524][ T5165] usb 1-1: config 0 descriptor?? [ 113.541628][ T5963] veth1_vlan: entered promiscuous mode [ 113.595139][ T5958] veth0_macvtap: entered promiscuous mode [ 113.606491][ T5958] veth1_macvtap: entered promiscuous mode [ 113.648641][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.662979][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.674547][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.702078][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.715064][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.726858][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.747875][ T5958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.756751][ T5958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.765461][ T5958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.774381][ T5958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.785230][ T5961] veth0_vlan: entered promiscuous mode [ 113.792172][ T5159] usb 1-1: USB disconnect, device number 5 [ 113.844822][ T5961] veth1_vlan: entered promiscuous mode [ 113.854089][ T5963] veth0_macvtap: entered promiscuous mode [ 113.877994][ T5963] veth1_macvtap: entered promiscuous mode [ 113.959932][ T5961] veth0_macvtap: entered promiscuous mode [ 113.988251][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.002042][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.012622][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.024236][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.037072][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.052308][ T5961] veth1_macvtap: entered promiscuous mode [ 114.061854][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.085545][ T6103] bond1: entered promiscuous mode [ 114.097710][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.120870][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.139221][ T6103] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 114.151811][ T6103] bond1: (slave gre1): Error -95 calling set_mac_address [ 114.181356][ T6105] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 114.192771][ T6105] bond1: (slave vti0): Error -95 calling set_mac_address [ 114.212163][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.223580][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.233519][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.245347][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.257648][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.283023][ T5963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.292162][ T5963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.309297][ T5963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.321528][ T5963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.373145][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.381826][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.393288][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.400824][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.405196][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 114.405210][ T29] audit: type=1326 audit(1717399894.516:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.445594][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.456072][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.466076][ T29] audit: type=1326 audit(1717399894.516:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.488994][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.489014][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.490679][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.519322][ T29] audit: type=1326 audit(1717399894.556:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.549792][ T29] audit: type=1326 audit(1717399894.576:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.593560][ T29] audit: type=1326 audit(1717399894.576:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.599194][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.630786][ T29] audit: type=1326 audit(1717399894.626:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac47cee9 code=0x7ffc0000 [ 114.659209][ T29] audit: type=1326 audit(1717399894.626:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2ac47a667 code=0x7ffc0000 [ 114.665288][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.683345][ T29] audit: type=1326 audit(1717399894.626:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2ac440329 code=0x7ffc0000 [ 114.697129][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.735343][ T29] audit: type=1326 audit(1717399894.626:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2ac47a667 code=0x7ffc0000 [ 114.760109][ T29] audit: type=1326 audit(1717399894.626:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2ac440329 code=0x7ffc0000 [ 114.777285][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.810745][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.821894][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.833183][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.849055][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.862377][ T6120] loop4: detected capacity change from 0 to 128 [ 114.902991][ T6120] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.928833][ T6120] ext4 filesystem being mounted at /root/syzkaller-testdir2833629188/syzkaller.YT3BnV/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.936933][ T6124] input: syz0 as /devices/virtual/input/input10 [ 115.041071][ T5961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.064052][ T5961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.073089][ T5961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.090707][ T5961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.099702][ T5120] Bluetooth: Unexpected continuation frame (len 18) [ 115.255662][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.277872][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.333602][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.347369][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.357363][ T6135] loop1: detected capacity change from 0 to 2048 [ 115.399711][ T6135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.425983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.447513][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.504466][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.518207][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.565750][ T6139] loop1: detected capacity change from 0 to 256 [ 115.579676][ T6139] exfat: Deprecated parameter 'namecase' [ 115.599922][ T6139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 115.726761][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.758501][ T6147] loop2: detected capacity change from 0 to 512 [ 115.780784][ T6149] loop1: detected capacity change from 0 to 8 [ 115.786223][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.800386][ T6147] ext4 filesystem being mounted at /root/syzkaller-testdir3137536167/syzkaller.5Mk5Yx/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.938870][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.975690][ T8] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 116.002353][ T6153] MTD: Couldn't look up './file0': -15 [ 116.011517][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.013769][ T6147] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 116.031907][ T8] usb 4-1: config 0 descriptor?? [ 116.042104][ T6147] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 116.123189][ T6155] SQUASHFS error: Failed to read block 0x4e8: -5 [ 116.165105][ T6155] SQUASHFS error: Failed to read block 0x6e6: -5 [ 116.171773][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.179206][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.186224][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.193720][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.201357][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.208851][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.215307][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.222712][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.229994][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.236411][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.243728][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.250767][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.258517][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.265859][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.275568][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.282657][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.290041][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.297118][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.303564][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.310952][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.318026][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.324471][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.331859][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.339131][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.345598][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.353143][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.361512][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.368971][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.376374][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.383383][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.389875][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.397258][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.404248][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.410707][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.418189][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.425159][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.432046][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.439625][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.447728][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.453976][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.464790][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.471672][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.477959][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.485688][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.492667][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.499006][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.507263][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.514104][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.520392][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.527722][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.534821][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.541208][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.548558][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.555386][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.564043][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.571405][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.573666][ T6147] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 116.578259][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.578367][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.578381][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.578441][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.578510][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.578523][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.578631][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.593531][ T8] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 116.597581][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.653901][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.661080][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.669382][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.673190][ T6147] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 116.676700][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.676772][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.701577][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.708913][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.715731][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.722243][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.729573][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.736473][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.744327][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.756504][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.764028][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.771343][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.778932][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.785767][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.792041][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.799393][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.806232][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.812779][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.820135][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.829612][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.835872][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.843673][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.850947][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.856609][ T5961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.857183][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.874760][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.881672][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.888031][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.895344][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.901765][ T5165] usb 4-1: USB disconnect, device number 5 [ 116.902425][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.914158][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.921538][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.928633][ T6155] SQUASHFS error: Failed to read block 0x0: -5 [ 116.935144][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.942510][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 116.949534][ T6155] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 116.957129][ T6155] SQUASHFS error: read_indexes: reading block [6e4:0] [ 117.096053][ T6160] loop0: detected capacity change from 0 to 64 [ 117.104981][ T6160] hfs: unable to parse mount options [ 117.144930][ T6164] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 117.162282][ T6164] netlink: 184248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.369866][ T6172] loop2: detected capacity change from 0 to 256 [ 117.379148][ T6172] exfat: Deprecated parameter 'namecase' [ 117.386694][ T782] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.412116][ T6172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 117.493099][ T6174] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 117.582978][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 117.603282][ T5958] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.614377][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 117.641948][ T782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.690743][ T782] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.720419][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.753231][ T782] usb 2-1: config 0 descriptor?? [ 118.047325][ T6197] loop2: detected capacity change from 0 to 8 [ 118.230199][ T782] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 118.268982][ T782] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 118.328638][ T782] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.405033][ T6202] SQUASHFS error: Failed to read block 0x4e8: -5 [ 118.445528][ T6202] SQUASHFS error: Failed to read block 0x6e6: -5 [ 118.452014][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.459622][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.466730][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.473173][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.480560][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.487840][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.494323][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.501963][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.510280][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.517638][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.524988][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.532290][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.538849][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.546188][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.553860][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.560404][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.567830][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.574829][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.581556][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.589149][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.596273][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.602781][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.611046][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.618532][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.624990][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.632558][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.639846][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.646265][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.653648][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.660681][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.667530][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.674870][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.681893][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.688397][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.695732][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.702966][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.709453][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.717430][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.724433][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.731808][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.739281][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.746115][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.753307][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.760987][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.767891][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.774129][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.781451][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.788539][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.794869][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.802235][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.809097][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.816404][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.823706][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.831704][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.837996][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.845294][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.852176][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.858684][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.865982][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.872898][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.879179][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.886749][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.893585][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.899897][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.907885][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.915212][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.922715][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.930071][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.936965][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.943197][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.950541][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.957905][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.964142][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.971572][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.978462][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 118.985116][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 118.992801][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 118.999688][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.003454][ T5161] usb 2-1: USB disconnect, device number 4 [ 119.005898][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.021461][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.028342][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.034595][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.041953][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.048839][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.055076][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.062428][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.070269][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.076577][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.083874][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.090756][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.098112][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.105417][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.112319][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.118609][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.127271][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.134102][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.141463][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.156676][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.163533][ T6202] SQUASHFS error: Failed to read block 0x0: -5 [ 119.169857][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.177201][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.184051][ T6202] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 119.191414][ T6202] SQUASHFS error: read_indexes: reading block [6e4:0] [ 119.364497][ T6176] loop3: detected capacity change from 0 to 40427 [ 119.383786][ T6176] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 119.403156][ T6176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.415766][ T6176] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 119.481172][ T6210] loop2: detected capacity change from 0 to 256 [ 119.519418][ T6210] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 119.651679][ T6214] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 119.688080][ T6214] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 119.724090][ T6215] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 119.778380][ T6214] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 120.922167][ T6237] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 121.157048][ T6243] syz-executor.0 (pid 6243) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 121.189235][ T6254] syz-executor.4[6254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.189393][ T6254] syz-executor.4[6254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.607661][ T6243] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 122.627313][ T6281] loop4: detected capacity change from 0 to 8 [ 122.634947][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 122.634963][ T29] audit: type=1326 audit(1717399902.736:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 122.722271][ T29] audit: type=1326 audit(1717399902.736:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 122.774571][ T29] audit: type=1326 audit(1717399902.746:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 122.839317][ T29] audit: type=1326 audit(1717399902.746:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 122.889834][ T6287] loop0: detected capacity change from 0 to 164 [ 122.929289][ T6251] loop2: detected capacity change from 0 to 32768 [ 122.934149][ T6289] loop4: detected capacity change from 0 to 256 [ 122.935801][ T29] audit: type=1326 audit(1717399902.746:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 122.969530][ T6251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6251) [ 123.014550][ T29] audit: type=1326 audit(1717399902.746:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 123.046657][ T6251] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.066730][ T6251] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 123.077752][ T6251] BTRFS info (device loop2): using free-space-tree [ 123.084591][ T29] audit: type=1326 audit(1717399902.766:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d0a7cee9 code=0x7ffc0000 [ 123.109026][ T29] audit: type=1326 audit(1717399902.766:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3d0a7a667 code=0x7ffc0000 [ 123.187304][ T29] audit: type=1326 audit(1717399902.766:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3d0a40329 code=0x7ffc0000 [ 123.210716][ T29] audit: type=1326 audit(1717399902.766:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3d0a7a667 code=0x7ffc0000 [ 123.637424][ T5961] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.665481][ T6328] loop4: detected capacity change from 0 to 8 [ 123.936530][ T6334] loop3: detected capacity change from 0 to 256 [ 124.013343][ T6336] SQUASHFS error: Failed to read block 0x4e8: -5 [ 124.056441][ T6336] SQUASHFS error: Failed to read block 0x6e6: -5 [ 124.062855][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.070245][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.077316][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.084072][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.091492][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.098559][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.105027][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.112720][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.119757][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.126369][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.133688][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.142221][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.149742][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.157135][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.164161][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.170827][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.178195][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.185203][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.191773][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.199219][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.206243][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.212896][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.220270][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.227341][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.233786][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.242622][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.257625][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.264220][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.292276][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.300713][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.307205][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.314544][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.321602][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.328222][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.335565][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.342696][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.351080][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.359679][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.366738][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.375078][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.382454][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.389343][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.395588][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.402927][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.409842][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.416123][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.423470][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.430360][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.436641][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.443939][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.452096][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.459851][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.467400][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.474243][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.480553][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.489506][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.496394][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.502668][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.510450][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.517332][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.523626][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.531242][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.540476][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.546799][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.555177][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.562290][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.568873][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.576174][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.583376][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.590521][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.598039][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.604874][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.611159][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.619032][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.625867][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.632173][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.639495][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.646636][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.653873][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.661275][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.668185][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.674420][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.682007][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.688895][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.695144][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.702524][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.709679][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.715923][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.723280][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.730135][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.736654][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.743971][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.750921][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.758177][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.765476][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.772598][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.778901][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.786198][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.794896][ T6336] SQUASHFS error: Failed to read block 0x0: -5 [ 124.801429][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.808757][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.815673][ T6336] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 124.823025][ T6336] SQUASHFS error: read_indexes: reading block [6e4:0] [ 124.941101][ T6340] loop1: detected capacity change from 0 to 256 [ 124.987416][ T6345] loop3: detected capacity change from 0 to 8 [ 125.346533][ T6357] SQUASHFS error: Failed to read block 0x4e8: -5 [ 125.384190][ T6357] SQUASHFS error: Failed to read block 0x6e6: -5 [ 125.390668][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.398067][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.405086][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.411857][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.419228][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.426376][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.435796][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.443475][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.450566][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.457066][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.464404][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.472367][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.479558][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.486995][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.494044][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.500822][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.508215][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.515247][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.521745][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.529382][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.536405][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.542868][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.554500][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.562917][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.569519][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.577480][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.584479][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.591832][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.599278][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.606329][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.612778][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.620392][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.627343][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.633793][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.641202][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.648487][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.654934][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.662354][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.669381][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.677057][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.684401][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.691357][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.697623][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.704920][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.711859][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.718146][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.725440][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.732324][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.738816][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.746119][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.753106][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.759428][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.766990][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.773829][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.781099][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.788723][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.795561][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.798632][ T6358] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 125.801996][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.816436][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.823274][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.829798][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.837134][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.843963][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.850315][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.857669][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.864500][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.870809][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.878138][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.887374][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.893618][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.903407][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.910374][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.916687][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.923987][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.930869][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.937171][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.944467][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.951629][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.957921][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.965219][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.972090][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 125.978381][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 125.987086][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 125.995384][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.001690][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.009043][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.015867][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.022174][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.029534][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.036421][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.042662][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.050037][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.056915][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.063164][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.070518][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.077408][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.086099][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.094200][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.101927][ T6357] SQUASHFS error: Failed to read block 0x0: -5 [ 126.108253][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.115550][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.122478][ T6357] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 126.129811][ T6357] SQUASHFS error: read_indexes: reading block [6e4:0] [ 126.311022][ T6364] loop1: detected capacity change from 0 to 64 [ 126.351909][ T6367] loop3: detected capacity change from 0 to 256 [ 126.357550][ T6364] hfs: unable to parse mount options [ 126.368984][ T6367] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 126.660699][ T6349] loop0: detected capacity change from 0 to 32768 [ 126.670692][ T6349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6349) [ 126.689011][ T6349] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.700055][ T6349] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 126.708844][ T6349] BTRFS error (device loop0): superblock checksum mismatch [ 126.718942][ T6349] BTRFS error (device loop0): open_ctree failed [ 127.089636][ T6355] loop2: detected capacity change from 0 to 32768 [ 127.137003][ T6355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6355) [ 127.189644][ T6355] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.226544][ T6355] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 127.235404][ T6355] BTRFS info (device loop2): using free-space-tree [ 127.657899][ T5961] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.812933][ T6401] loop1: detected capacity change from 0 to 764 [ 127.883586][ T6401] rock: directory entry would overflow storage [ 127.900380][ T6401] rock: sig=0x4654, size=5, remaining=4 [ 127.998474][ T6383] loop0: detected capacity change from 0 to 32768 [ 128.016648][ T6383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6383) [ 128.099544][ T6383] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.154438][ T6383] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.166722][ T6383] BTRFS info (device loop0): using free-space-tree [ 128.177718][ T6408] loop2: detected capacity change from 0 to 512 [ 128.210630][ T6413] loop4: detected capacity change from 0 to 1024 [ 128.230381][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.258667][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.261672][ T6413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.271542][ T6408] ext4 filesystem being mounted at /root/syzkaller-testdir3137536167/syzkaller.5Mk5Yx/17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.301397][ T6430] loop3: detected capacity change from 0 to 8 [ 128.330296][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 128.330311][ T29] audit: type=1800 audit(1717399908.436:487): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 128.351201][ T6413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 128.378313][ T6413] System zones: 0-1, 3-36 [ 128.385789][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.427165][ T6408] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 128.558296][ T5961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.587545][ T5955] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.618901][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.699298][ T6433] SQUASHFS error: Failed to read block 0x4e8: -5 [ 128.739854][ T6433] SQUASHFS error: Failed to read block 0x6e6: -5 [ 128.746914][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.754234][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.764696][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.772108][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.779731][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.787124][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.793617][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.801033][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.808311][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.814816][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.822489][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.829690][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.836187][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.843695][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.851582][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.858578][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.865925][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.873033][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.879807][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.887349][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.894413][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.901001][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.908967][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.916030][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.922599][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.929989][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.937285][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.943766][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.951749][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.959220][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.965667][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.973284][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 128.980403][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 128.986903][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 128.994252][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.001573][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.008317][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.015688][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.022749][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.029517][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.036917][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.043855][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.050166][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.058802][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.065654][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.075067][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.077587][ T29] audit: type=1800 audit(1717399908.816:488): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 129.084869][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.109404][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.115655][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.123112][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.130187][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.136464][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.143774][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.150653][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.158185][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.165619][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.172531][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.178851][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.186157][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.194429][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.200718][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.208082][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.214908][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.221204][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.228539][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.235365][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.241740][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.249081][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.255910][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.264497][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.271900][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.278808][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.285934][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.293310][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.300198][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.307109][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.314416][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.322040][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.329714][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.337104][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.343952][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.350256][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.357602][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.366776][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.373034][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.380476][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.392564][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.398881][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.406179][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.413074][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.419360][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.426794][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.433659][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.439972][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.447348][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.454179][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.460479][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.468029][ T6437] loop1: detected capacity change from 0 to 512 [ 129.477271][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.477931][ T6437] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.484080][ T6433] SQUASHFS error: Failed to read block 0x0: -5 [ 129.497273][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.504606][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.511523][ T6433] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 129.518870][ T6433] SQUASHFS error: read_indexes: reading block [6e4:0] [ 129.553251][ T6437] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 129.578477][ T6437] EXT4-fs (loop1): DAX unsupported by block device. [ 129.620109][ T6441] loop2: detected capacity change from 0 to 256 [ 129.772248][ T29] audit: type=1800 audit(1717399909.876:489): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 130.056443][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.152967][ T5120] ================================================================== [ 130.161070][ T5120] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x299/0x370 [ 130.168898][ T5120] Read of size 4 at addr ffff88801832d104 by task kworker/u9:5/5120 [ 130.176885][ T5120] [ 130.179222][ T5120] CPU: 1 PID: 5120 Comm: kworker/u9:5 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller #0 [ 130.190428][ T5120] Tainted: [W]=WARN [ 130.194239][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 130.204312][ T5120] Workqueue: hci3 hci_rx_work [ 130.209013][ T5120] Call Trace: [ 130.212300][ T5120] [ 130.215242][ T5120] dump_stack_lvl+0x241/0x360 [ 130.219947][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.225167][ T5120] ? __pfx__printk+0x10/0x10 [ 130.229777][ T5120] ? _printk+0xd5/0x120 [ 130.233951][ T5120] ? __virt_addr_valid+0x183/0x520 [ 130.239081][ T5120] ? __virt_addr_valid+0x183/0x520 [ 130.244193][ T5120] print_report+0x169/0x550 [ 130.248684][ T5120] ? __virt_addr_valid+0x183/0x520 [ 130.253788][ T5120] ? __virt_addr_valid+0x183/0x520 [ 130.258890][ T5120] ? __virt_addr_valid+0x44e/0x520 [ 130.263992][ T5120] ? __phys_addr+0xba/0x170 [ 130.268488][ T5120] ? do_raw_spin_lock+0x299/0x370 [ 130.273502][ T5120] kasan_report+0x143/0x180 [ 130.277996][ T5120] ? do_raw_spin_lock+0x299/0x370 [ 130.283016][ T5120] do_raw_spin_lock+0x299/0x370 [ 130.287860][ T5120] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.293225][ T5120] _raw_spin_lock_irqsave+0xe1/0x120 [ 130.298508][ T5120] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 130.304395][ T5120] ? __local_bh_enable_ip+0x168/0x200 [ 130.309760][ T5120] ? skb_dst_force+0x52/0x370 [ 130.314426][ T5120] ? __sock_queue_rcv_skb+0x3ee/0x9b0 [ 130.319796][ T5120] __sock_queue_rcv_skb+0x408/0x9b0 [ 130.324993][ T5120] l2cap_sock_recv_cb+0x177/0x4f0 [ 130.330015][ T5120] l2cap_recv_frame+0x8b6d/0x105f0 [ 130.335116][ T5120] ? validate_chain+0x11e/0x5920 [ 130.340045][ T5120] ? validate_chain+0x11e/0x5920 [ 130.344974][ T5120] ? validate_chain+0x11e/0x5920 [ 130.349902][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 130.355091][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 130.360281][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 130.365470][ T5120] ? validate_chain+0x11e/0x5920 [ 130.370400][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 130.375594][ T5120] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 130.380952][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 130.386143][ T5120] ? mark_lock+0x9a/0x360 [ 130.390468][ T5120] ? __lock_acquire+0x1359/0x2000 [ 130.395490][ T5120] ? mark_lock+0x9a/0x360 [ 130.399815][ T5120] ? hci_rx_work+0x4e7/0xca0 [ 130.404392][ T5120] ? __pfx_lock_release+0x10/0x10 [ 130.409414][ T5120] ? __mutex_unlock_slowpath+0x21d/0x750 [ 130.415036][ T5120] ? __pfx_lock_release+0x10/0x10 [ 130.420051][ T5120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.426016][ T5120] ? hci_conn_enter_active_mode+0x260/0x370 [ 130.431902][ T5120] ? l2cap_recv_acldata+0x48e/0x1550 [ 130.437180][ T5120] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 130.443066][ T5120] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 130.449038][ T5120] hci_rx_work+0x50f/0xca0 [ 130.453453][ T5120] ? process_scheduled_works+0x945/0x1830 [ 130.459162][ T5120] process_scheduled_works+0xa2c/0x1830 [ 130.464703][ T5120] ? __pfx_process_scheduled_works+0x10/0x10 [ 130.470675][ T5120] ? assign_work+0x364/0x3d0 [ 130.475262][ T5120] worker_thread+0x86d/0xd50 [ 130.479850][ T5120] ? __kthread_parkme+0x169/0x1d0 [ 130.484870][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 130.489977][ T5120] kthread+0x2f0/0x390 [ 130.494040][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 130.499143][ T5120] ? __pfx_kthread+0x10/0x10 [ 130.503725][ T5120] ret_from_fork+0x4b/0x80 [ 130.508132][ T5120] ? __pfx_kthread+0x10/0x10 [ 130.512712][ T5120] ret_from_fork_asm+0x1a/0x30 [ 130.517473][ T5120] [ 130.520479][ T5120] [ 130.522786][ T5120] Allocated by task 6462: [ 130.527093][ T5120] kasan_save_track+0x3f/0x80 [ 130.531761][ T5120] __kasan_kmalloc+0x98/0xb0 [ 130.536343][ T5120] __kmalloc_noprof+0x1f9/0x400 [ 130.541190][ T5120] sk_prot_alloc+0xe0/0x210 [ 130.545678][ T5120] sk_alloc+0x38/0x370 [ 130.549744][ T5120] bt_sock_alloc+0x3c/0x340 [ 130.554237][ T5120] l2cap_sock_create+0x13f/0x2d0 [ 130.559163][ T5120] bt_sock_create+0x161/0x230 [ 130.563825][ T5120] __sock_create+0x490/0x920 [ 130.568402][ T5120] __sys_socket+0x150/0x3c0 [ 130.572897][ T5120] __x64_sys_socket+0x7a/0x90 [ 130.577565][ T5120] do_syscall_64+0xf3/0x230 [ 130.582056][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.587938][ T5120] [ 130.590248][ T5120] Freed by task 6461: [ 130.594207][ T5120] kasan_save_track+0x3f/0x80 [ 130.598875][ T5120] kasan_save_free_info+0x40/0x50 [ 130.603886][ T5120] poison_slab_object+0xe0/0x150 [ 130.608813][ T5120] __kasan_slab_free+0x37/0x60 [ 130.613565][ T5120] kfree+0x149/0x360 [ 130.617446][ T5120] __sk_destruct+0x476/0x5f0 [ 130.622020][ T5120] l2cap_sock_release+0x15b/0x1d0 [ 130.627033][ T5120] sock_close+0xbc/0x240 [ 130.631263][ T5120] __fput+0x406/0x8b0 [ 130.635232][ T5120] __x64_sys_close+0x7f/0x110 [ 130.639897][ T5120] do_syscall_64+0xf3/0x230 [ 130.644385][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.650271][ T5120] [ 130.652581][ T5120] The buggy address belongs to the object at ffff88801832d000 [ 130.652581][ T5120] which belongs to the cache kmalloc-2k of size 2048 [ 130.666626][ T5120] The buggy address is located 260 bytes inside of [ 130.666626][ T5120] freed 2048-byte region [ffff88801832d000, ffff88801832d800) [ 130.680505][ T5120] [ 130.682815][ T5120] The buggy address belongs to the physical page: [ 130.689216][ T5120] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18328 [ 130.697972][ T5120] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.706456][ T5120] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 130.714421][ T5120] page_type: 0xfdffffff(slab) [ 130.719082][ T5120] raw: 00fff00000000040 ffff888015042000 0000000000000000 0000000000000001 [ 130.727653][ T5120] raw: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 130.736223][ T5120] head: 00fff00000000040 ffff888015042000 0000000000000000 0000000000000001 [ 130.744875][ T5120] head: 0000000000000000 0000000080080008 00000001fdffffff 0000000000000000 [ 130.753531][ T5120] head: 00fff00000000003 ffffea000060ca01 ffffffffffffffff 0000000000000000 [ 130.762197][ T5120] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 130.770851][ T5120] page dumped because: kasan: bad access detected [ 130.777255][ T5120] page_owner tracks the page as allocated [ 130.782953][ T5120] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, tgid 9 (kworker/0:1), ts 112459260881, free_ts 111775655835 [ 130.805259][ T5120] post_alloc_hook+0x1f3/0x230 [ 130.810021][ T5120] get_page_from_freelist+0x2cbd/0x2d70 [ 130.815563][ T5120] __alloc_pages_noprof+0x256/0x6c0 [ 130.820767][ T5120] alloc_slab_page+0x5f/0x120 [ 130.825437][ T5120] allocate_slab+0x5a/0x2f0 [ 130.829930][ T5120] ___slab_alloc+0xcd1/0x14b0 [ 130.834613][ T5120] __slab_alloc+0x58/0xa0 [ 130.838953][ T5120] kmalloc_node_track_caller_noprof+0x281/0x440 [ 130.845193][ T5120] kmalloc_reserve+0x111/0x2a0 [ 130.849957][ T5120] __alloc_skb+0x1f3/0x440 [ 130.854363][ T5120] alloc_skb_with_frags+0xc3/0x770 [ 130.859474][ T5120] sock_alloc_send_pskb+0x91a/0xa60 [ 130.864665][ T5120] mld_newpack+0x1c3/0xa90 [ 130.869087][ T5120] add_grec+0x1492/0x19a0 [ 130.873418][ T5120] mld_ifc_work+0x68e/0xd90 [ 130.877911][ T5120] process_scheduled_works+0xa2c/0x1830 [ 130.883446][ T5120] page last free pid 5958 tgid 5958 stack trace: [ 130.889766][ T5120] free_unref_page+0xd22/0xea0 [ 130.894526][ T5120] __put_partials+0xeb/0x130 [ 130.899107][ T5120] put_cpu_partial+0x17c/0x250 [ 130.903863][ T5120] __slab_free+0x2ea/0x3d0 [ 130.908276][ T5120] qlist_free_all+0x9e/0x140 [ 130.912870][ T5120] kasan_quarantine_reduce+0x14f/0x170 [ 130.918333][ T5120] __kasan_slab_alloc+0x23/0x80 [ 130.923182][ T5120] kmem_cache_alloc_noprof+0x135/0x2a0 [ 130.928635][ T5120] __kernfs_new_node+0xd8/0x870 [ 130.933491][ T5120] kernfs_new_node+0x137/0x240 [ 130.938255][ T5120] __kernfs_create_file+0x49/0x2e0 [ 130.943353][ T5120] sysfs_add_file_mode_ns+0x24a/0x310 [ 130.948805][ T5120] internal_create_group+0x7a7/0x11d0 [ 130.954169][ T5120] sysfs_create_groups+0x56/0x120 [ 130.959183][ T5120] device_add_attrs+0x199/0x600 [ 130.964023][ T5120] device_add+0x576/0xbf0 [ 130.968341][ T5120] [ 130.970650][ T5120] Memory state around the buggy address: [ 130.976265][ T5120] ffff88801832d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.984318][ T5120] ffff88801832d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.992362][ T5120] >ffff88801832d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.000427][ T5120] ^ [ 131.004478][ T5120] ffff88801832d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.012528][ T5120] ffff88801832d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.020575][ T5120] ================================================================== [ 131.028622][ T5120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.035801][ T5120] CPU: 1 PID: 5120 Comm: kworker/u9:5 Tainted: G W 6.10.0-rc1-next-20240603-syzkaller #0 [ 131.046982][ T5120] Tainted: [W]=WARN [ 131.050766][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 131.060808][ T5120] Workqueue: hci3 hci_rx_work [ 131.065482][ T5120] Call Trace: [ 131.068751][ T5120] [ 131.071671][ T5120] dump_stack_lvl+0x241/0x360 [ 131.076346][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.081551][ T5120] ? __pfx__printk+0x10/0x10 [ 131.086127][ T5120] ? rcu_is_watching+0x15/0xb0 [ 131.090881][ T5120] ? lock_release+0xbf/0x9f0 [ 131.095461][ T5120] ? vscnprintf+0x5d/0x90 [ 131.099785][ T5120] panic+0x349/0x870 [ 131.103673][ T5120] ? check_panic_on_warn+0x21/0xb0 [ 131.108780][ T5120] ? __pfx_panic+0x10/0x10 [ 131.113186][ T5120] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.118375][ T5120] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 131.124271][ T5120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.130590][ T5120] ? print_report+0x502/0x550 [ 131.135258][ T5120] check_panic_on_warn+0x86/0xb0 [ 131.140188][ T5120] ? do_raw_spin_lock+0x299/0x370 [ 131.145198][ T5120] end_report+0x77/0x160 [ 131.149427][ T5120] kasan_report+0x154/0x180 [ 131.153918][ T5120] ? do_raw_spin_lock+0x299/0x370 [ 131.158932][ T5120] do_raw_spin_lock+0x299/0x370 [ 131.163771][ T5120] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 131.169130][ T5120] _raw_spin_lock_irqsave+0xe1/0x120 [ 131.174407][ T5120] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 131.180291][ T5120] ? __local_bh_enable_ip+0x168/0x200 [ 131.185650][ T5120] ? skb_dst_force+0x52/0x370 [ 131.190315][ T5120] ? __sock_queue_rcv_skb+0x3ee/0x9b0 [ 131.195681][ T5120] __sock_queue_rcv_skb+0x408/0x9b0 [ 131.200872][ T5120] l2cap_sock_recv_cb+0x177/0x4f0 [ 131.205893][ T5120] l2cap_recv_frame+0x8b6d/0x105f0 [ 131.210997][ T5120] ? validate_chain+0x11e/0x5920 [ 131.215942][ T5120] ? validate_chain+0x11e/0x5920 [ 131.220874][ T5120] ? validate_chain+0x11e/0x5920 [ 131.225802][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 131.230991][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 131.236191][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 131.241381][ T5120] ? validate_chain+0x11e/0x5920 [ 131.246315][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 131.251511][ T5120] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 131.256874][ T5120] ? __pfx_validate_chain+0x10/0x10 [ 131.262063][ T5120] ? mark_lock+0x9a/0x360 [ 131.266382][ T5120] ? __lock_acquire+0x1359/0x2000 [ 131.271401][ T5120] ? mark_lock+0x9a/0x360 [ 131.275725][ T5120] ? hci_rx_work+0x4e7/0xca0 [ 131.280305][ T5120] ? __pfx_lock_release+0x10/0x10 [ 131.285325][ T5120] ? __mutex_unlock_slowpath+0x21d/0x750 [ 131.290949][ T5120] ? __pfx_lock_release+0x10/0x10 [ 131.295961][ T5120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.301928][ T5120] ? hci_conn_enter_active_mode+0x260/0x370 [ 131.307820][ T5120] ? l2cap_recv_acldata+0x48e/0x1550 [ 131.313096][ T5120] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 131.318985][ T5120] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 131.324962][ T5120] hci_rx_work+0x50f/0xca0 [ 131.329369][ T5120] ? process_scheduled_works+0x945/0x1830 [ 131.335077][ T5120] process_scheduled_works+0xa2c/0x1830 [ 131.340711][ T5120] ? __pfx_process_scheduled_works+0x10/0x10 [ 131.346683][ T5120] ? assign_work+0x364/0x3d0 [ 131.351261][ T5120] worker_thread+0x86d/0xd50 [ 131.355844][ T5120] ? __kthread_parkme+0x169/0x1d0 [ 131.360858][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 131.365958][ T5120] kthread+0x2f0/0x390 [ 131.370018][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 131.375115][ T5120] ? __pfx_kthread+0x10/0x10 [ 131.379696][ T5120] ret_from_fork+0x4b/0x80 [ 131.384102][ T5120] ? __pfx_kthread+0x10/0x10 [ 131.388681][ T5120] ret_from_fork_asm+0x1a/0x30 [ 131.393442][ T5120] [ 131.396566][ T5120] Kernel Offset: disabled [ 131.400879][ T5120] Rebooting in 86400 seconds..