last executing test programs: 6.648051908s ago: executing program 1 (id=1777): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "6a4da751434fd7f4a4331cbdbfe693a5babcdf3aa54bce5d926ef908d52773fa7f"}}) 6.226571569s ago: executing program 1 (id=1781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x27}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.742831204s ago: executing program 1 (id=1787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 5.234764802s ago: executing program 0 (id=1790): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) 5.163299608s ago: executing program 2 (id=1791): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 5.13872438s ago: executing program 1 (id=1792): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) 4.99172789s ago: executing program 0 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4.772210657s ago: executing program 0 (id=1795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, 0x0, 0x3a99c56f) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0x1f4}) 4.612416278s ago: executing program 0 (id=1796): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="4016e6"], 0x0, 0x0, 0x0, 0x0}) 4.578724701s ago: executing program 2 (id=1798): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc004500a, 0xffffffffffffffff) 4.206398198s ago: executing program 2 (id=1800): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x0, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x40) 3.78529803s ago: executing program 4 (id=1802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6652f890"}]}}, 0x0}, 0x0) 3.784427509s ago: executing program 2 (id=1803): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x6, "6f5056379b6f"}, 0x0, 0x0, 0x0, 0x0}) 3.031635915s ago: executing program 1 (id=1807): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xa, 't|'}, @local=@item_4={0x3, 0x2, 0xa, "2e81ac5d"}]}}, 0x0}, 0x0) 2.768181265s ago: executing program 3 (id=1808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}}, 0x0) 2.577498549s ago: executing program 0 (id=1809): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x2000040, &(0x7f0000000240)={[{@discard}, {@logbsize={'logbsize', 0x3d, [0x38, 0x67]}}, {@logbufs={'logbufs', 0x3d, 0x2}}, {@filestreams}, {@inode32}]}, 0x45, 0x9706, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000400)=@xfs={0x1c, 0x81, {0x100000000000000}}, 0x0) 2.496272015s ago: executing program 3 (id=1810): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xf1ba, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 1.862009762s ago: executing program 3 (id=1811): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc962d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a79ada613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a6532e17e122ee5b19b783a9a93108b53ffe55040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315759d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eea339c91d442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bd6674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade340900000000000000770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d078b66b3a4aedee59df4238808fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804522cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015cb6e11c3bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1421], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f80)="dd7e7bc2300823a04347f02db2c6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.514177048s ago: executing program 3 (id=1812): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r0, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 1.35536324s ago: executing program 4 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd5e1aa8eda1ef15e}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 1.092045539s ago: executing program 3 (id=1814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x24}}, 0x0) 1.049675142s ago: executing program 4 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x1000007c, 0xfe4d) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}}, 0x0) 988.176847ms ago: executing program 4 (id=1816): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}) 815.881599ms ago: executing program 0 (id=1817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) 723.454086ms ago: executing program 4 (id=1818): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x3, 0x10, 0x10, &(0x7f00000002c0)="00002f0014000000", &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 615.557145ms ago: executing program 2 (id=1819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x27}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 475.952484ms ago: executing program 3 (id=1820): r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "84fed93e"}]}}, 0x0}, 0x0) 324.976526ms ago: executing program 1 (id=1821): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x20}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 140.22799ms ago: executing program 4 (id=1822): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) 0s ago: executing program 2 (id=1823): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1421], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f80)="dd7e7bc2300823a04347f02db2c6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 186.136830][ T6346] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 186.144099][ T5801] syz.4.736: attempt to access beyond end of device [ 186.144099][ T5801] loop4: rw=3, sector=4047273007808, nr_sectors = 8388600 limit=2048 [ 186.168748][ T6346] cramfs: bad data blocksize 503315823 [ 186.192063][ T6342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.195881][ T6346] cramfs: bad data blocksize 271293305 [ 186.259287][ T6346] cramfs: bad data blocksize 4176613145 [ 186.264923][ T6346] cramfs: bad data blocksize 503315823 [ 186.305964][ T27] audit: type=1800 audit(1725458235.725:46): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.960" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 186.443896][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 186.857295][ T6352] loop0: detected capacity change from 0 to 1024 [ 186.921293][ T6352] hfsplus: bad catalog entry type [ 187.053715][ T102] hfsplus: b-tree write err: -5, ino 4 [ 187.095905][ T3685] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 187.186295][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 187.398236][ T6366] xt_bpf: check failed: parse error [ 187.466039][ T3685] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 187.473517][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 187.507649][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.552097][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 187.575785][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 187.695971][ T3685] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 187.703477][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 187.795771][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.805643][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 187.842434][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 187.975978][ T3685] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 187.983471][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 188.016027][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.046808][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 188.096237][ T3685] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.356583][ T3685] usb 2-1: string descriptor 0 read error: -22 [ 188.383480][ T3685] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.418976][ T3685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.533221][ T3685] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.769726][ T3685] usb 2-1: USB disconnect, device number 7 [ 189.653196][ T27] audit: type=1326 audit(1725458239.065:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 189.735947][ T27] audit: type=1326 audit(1725458239.095:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 189.821947][ T27] audit: type=1326 audit(1725458239.095:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 189.916288][ T27] audit: type=1326 audit(1725458239.095:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 190.000321][ T27] audit: type=1326 audit(1725458239.095:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 190.064864][ T6404] loop1: detected capacity change from 0 to 2048 [ 190.106245][ T27] audit: type=1326 audit(1725458239.095:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 190.164134][ T6404] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 190.182850][ T27] audit: type=1326 audit(1725458239.095:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa77cef9 code=0x7ffc0000 [ 190.228150][ T6404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.770407][ T6414] loop1: detected capacity change from 0 to 256 [ 190.806794][ T6414] exfat: Deprecated parameter 'namecase' [ 190.893424][ T6414] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 190.975843][ T3890] bio_check_eod: 201509 callbacks suppressed [ 190.975862][ T3890] syz.3.49: attempt to access beyond end of device [ 190.975862][ T3890] loop3: rw=3, sector=12689602992008, nr_sectors = 8388600 limit=2048 [ 190.991678][ T5801] syz.4.736: attempt to access beyond end of device [ 190.991678][ T5801] loop4: rw=3, sector=4526119461608, nr_sectors = 8388600 limit=2048 [ 190.999801][ T6246] syz.2.911: attempt to access beyond end of device [ 190.999801][ T6246] loop2: rw=3, sector=1518152050808, nr_sectors = 8388600 limit=2048 [ 191.064455][ T5801] syz.4.736: attempt to access beyond end of device [ 191.064455][ T5801] loop4: rw=3, sector=4526127850208, nr_sectors = 8388600 limit=2048 [ 191.098947][ T6246] syz.2.911: attempt to access beyond end of device [ 191.098947][ T6246] loop2: rw=3, sector=1518160439408, nr_sectors = 8388600 limit=2048 [ 191.151147][ T3890] syz.3.49: attempt to access beyond end of device [ 191.151147][ T3890] loop3: rw=3, sector=12689611380608, nr_sectors = 8388600 limit=2048 [ 191.170927][ T6246] syz.2.911: attempt to access beyond end of device [ 191.170927][ T6246] loop2: rw=3, sector=1518168828008, nr_sectors = 8388600 limit=2048 [ 191.245999][ T5801] syz.4.736: attempt to access beyond end of device [ 191.245999][ T5801] loop4: rw=3, sector=4526136238808, nr_sectors = 8388600 limit=2048 [ 191.255628][ T6246] syz.2.911: attempt to access beyond end of device [ 191.255628][ T6246] loop2: rw=3, sector=1518177216608, nr_sectors = 8388600 limit=2048 [ 191.266499][ T3655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.276964][ T3890] syz.3.49: attempt to access beyond end of device [ 191.276964][ T3890] loop3: rw=3, sector=12689619769208, nr_sectors = 8388600 limit=2048 [ 191.299023][ T3655] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.308511][ T3655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.320351][ T3655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.333382][ T3655] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 191.345997][ T3655] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.735903][ T3685] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 192.115867][ T3685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.123343][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 192.153474][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 192.195787][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.220302][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 192.263081][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.365889][ T3685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.376924][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 192.415772][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.428633][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 192.440328][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.585915][ T3685] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.593374][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 192.628682][ T6412] loop0: detected capacity change from 0 to 32768 [ 192.655725][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.682787][ T6412] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 192.707050][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 192.718483][ T6412] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 192.740916][ T6412] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 192.748875][ T3685] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.848065][ T3683] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 192.854886][ T3683] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 193.019724][ T3683] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 193.048057][ T3683] gfs2: fsid=syz:syz.0: jid=0: Done [ 193.053334][ T6412] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 193.063347][ T6442] loop1: detected capacity change from 0 to 2048 [ 193.094397][ T6412] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 193.094637][ T6442] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.105605][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.140370][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.148251][ T3685] usb 5-1: string descriptor 0 read error: -22 [ 193.154547][ T3685] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.164088][ T6443] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 193.173935][ T6412] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 193.173935][ T6412] inode = 12 2341 [ 193.173935][ T6412] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 193.216756][ T6443] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 193.216756][ T6443] inode = 12 2341 [ 193.216756][ T6443] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 193.223109][ T6418] device bridge_slave_0 entered promiscuous mode [ 193.255755][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.277297][ T6444] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.330786][ T3685] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.339044][ T6412] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 193.349518][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.377758][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.387755][ T3652] Bluetooth: hci7: command tx timeout [ 193.405788][ T6443] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 193.406375][ T6418] device bridge_slave_1 entered promiscuous mode [ 193.414851][ T6443] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6412 [syz.0.992] __gfs2_lookup+0xa0/0x270 [ 193.425920][ T6412] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6412 [syz.0.992] __gfs2_lookup+0xa0/0x270 [ 193.430914][ T6443] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6443 [syz.0.992] __gfs2_lookup+0xa0/0x270 [ 193.452074][ T6443] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 193.460605][ T6443] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 193.504251][ T6443] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 193.544098][ T6412] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6443 [syz.0.992] __gfs2_lookup+0xa0/0x270 [ 193.578908][ T6443] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 193.600228][ T6412] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 193.637795][ T6443] gfs2: fsid=syz:syz.0: File system withdrawn [ 193.654685][ T6443] CPU: 1 PID: 6443 Comm: syz.0.992 Not tainted 6.1.108-syzkaller #0 [ 193.662718][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 193.672791][ T6443] Call Trace: [ 193.676086][ T6443] [ 193.679032][ T6443] dump_stack_lvl+0x1e3/0x2cb [ 193.683746][ T6443] ? nf_tcp_handle_invalid+0x642/0x642 [ 193.689240][ T6443] ? panic+0x764/0x764 [ 193.693331][ T6443] ? kobject_uevent_env+0x54a/0x8c0 [ 193.698569][ T6443] gfs2_withdraw+0xfcb/0x1550 [ 193.703295][ T6443] ? gfs2_lm+0x230/0x230 [ 193.706969][ T7] usb 5-1: USB disconnect, device number 10 [ 193.707549][ T6443] ? gfs2_dirent_scan+0x276/0x640 [ 193.718496][ T6443] ? panic+0x764/0x764 [ 193.722602][ T6443] ? gfs2_consist_inode_i+0xf1/0x110 [ 193.727923][ T6443] gfs2_dirent_scan+0x512/0x640 [ 193.732807][ T6443] ? gfs2_dirent_search+0x8c0/0x8c0 [ 193.738033][ T6443] gfs2_dirent_search+0x30a/0x8c0 [ 193.743087][ T6443] ? gfs2_dirent_search+0x8c0/0x8c0 [ 193.748321][ T6443] ? inode_dio_wait+0x2a9/0x340 [ 193.753207][ T6443] ? generic_permission+0x21c/0x4f0 [ 193.758438][ T6443] ? gfs2_dir_search+0x2f0/0x2f0 [ 193.763404][ T6443] ? gfs2_permission+0x401/0x4d0 [ 193.768381][ T6443] gfs2_dir_search+0xae/0x2f0 [ 193.773085][ T6443] ? do_filldir_main+0x520/0x520 [ 193.778044][ T6443] ? inode_go_held+0xe6/0x1f0 [ 193.782747][ T6443] ? gfs2_glock_wait+0x216/0x2a0 [ 193.787716][ T6443] gfs2_lookupi+0x45f/0x5e0 [ 193.792259][ T6443] ? gfs2_lookup_simple+0x170/0x170 [ 193.797493][ T6443] ? __gfs2_lookup+0xa0/0x270 [ 193.802206][ T6443] ? d_alloc_parallel+0x31a/0x1590 [ 193.807347][ T6443] __gfs2_lookup+0xa0/0x270 [ 193.811880][ T6443] ? lockdep_softirqs_off+0x420/0x420 [ 193.817284][ T6443] ? gfs2_atomic_open+0x220/0x220 [ 193.822365][ T6443] ? __init_waitqueue_head+0xaa/0x140 [ 193.827875][ T6443] __lookup_slow+0x27e/0x3d0 [ 193.832507][ T6443] ? lookup_one_len+0x2d0/0x2d0 [ 193.837421][ T6443] lookup_slow+0x53/0x70 [ 193.841695][ T6443] walk_component+0x2d0/0x400 [ 193.846410][ T6443] path_lookupat+0x16f/0x450 [ 193.851039][ T6443] filename_lookup+0x251/0x600 [ 193.855844][ T6443] ? hashlen_string+0x110/0x110 [ 193.860756][ T6443] ? strncpy_from_user+0x1f9/0x360 [ 193.865885][ T6443] ? getname_flags+0x1f9/0x4f0 [ 193.870657][ T6443] user_path_at_empty+0x3e/0x60 [ 193.875522][ T6443] do_sys_truncate+0xa3/0x190 [ 193.880216][ T6443] ? break_lease+0xd0/0xd0 [ 193.884661][ T6443] ? syscall_enter_from_user_mode+0x2e/0x230 [ 193.890655][ T6443] ? lockdep_hardirqs_on+0x94/0x130 [ 193.895866][ T6443] ? syscall_enter_from_user_mode+0x2e/0x230 [ 193.901857][ T6443] do_syscall_64+0x3b/0xb0 [ 193.906288][ T6443] ? clear_bhb_loop+0x45/0xa0 [ 193.910982][ T6443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.916884][ T6443] RIP: 0033:0x7f6cfa77cef9 [ 193.921303][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.940935][ T6443] RSP: 002b:00007f6cfb4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 193.949355][ T6443] RAX: ffffffffffffffda RBX: 00007f6cfa936058 RCX: 00007f6cfa77cef9 [ 193.957329][ T6443] RDX: 0000000000000000 RSI: 1000000000005e02 RDI: 0000000020000280 [ 193.965301][ T6443] RBP: 00007f6cfa7ef01e R08: 0000000000000000 R09: 0000000000000000 [ 193.973274][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.981248][ T6443] R13: 0000000000000001 R14: 00007f6cfa936058 R15: 00007ffc7f8c96e8 [ 193.989235][ T6443] [ 194.000952][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.034150][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.040573][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.045254][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.212166][ T6418] team0: Port device team_slave_0 added [ 194.243052][ T6418] team0: Port device team_slave_1 added [ 194.334781][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.354400][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.515721][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.631745][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.677746][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.776296][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.306274][ T3683] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.476069][ T3652] Bluetooth: hci7: command tx timeout [ 195.504536][ T6418] device hsr_slave_0 entered promiscuous mode [ 195.636215][ T6418] device hsr_slave_1 entered promiscuous mode [ 195.665741][ T6418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.673370][ T6418] Cannot create hsr debugfs directory [ 195.676602][ T3683] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.720824][ T3683] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.751345][ T3683] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.774791][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.828277][ T6452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.986889][ T6442] bio_check_eod: 219799 callbacks suppressed [ 195.986907][ T6442] syz.1.995: attempt to access beyond end of device [ 195.986907][ T6442] loop1: rw=3, sector=345534822608, nr_sectors = 8388600 limit=2048 [ 196.006964][ T6246] syz.2.911: attempt to access beyond end of device [ 196.006964][ T6246] loop2: rw=3, sector=2224497336608, nr_sectors = 8388600 limit=2048 [ 196.009520][ T5801] syz.4.736: attempt to access beyond end of device [ 196.009520][ T5801] loop4: rw=3, sector=5014101100808, nr_sectors = 8388600 limit=2048 [ 196.032888][ T3890] syz.3.49: attempt to access beyond end of device [ 196.032888][ T3890] loop3: rw=3, sector=13138485366608, nr_sectors = 8388600 limit=2048 [ 196.055553][ T6246] syz.2.911: attempt to access beyond end of device [ 196.055553][ T6246] loop2: rw=3, sector=2224505725208, nr_sectors = 8388600 limit=2048 [ 196.061798][ T6442] syz.1.995: attempt to access beyond end of device [ 196.061798][ T6442] loop1: rw=3, sector=345543211208, nr_sectors = 8388600 limit=2048 [ 196.105458][ T6246] syz.2.911: attempt to access beyond end of device [ 196.105458][ T6246] loop2: rw=3, sector=2224514113808, nr_sectors = 8388600 limit=2048 [ 196.134295][ T6246] syz.2.911: attempt to access beyond end of device [ 196.134295][ T6246] loop2: rw=3, sector=2224522502408, nr_sectors = 8388600 limit=2048 [ 196.145292][ T5801] syz.4.736: attempt to access beyond end of device [ 196.145292][ T5801] loop4: rw=3, sector=5014109489408, nr_sectors = 8388600 limit=2048 [ 196.150531][ T6246] syz.2.911: attempt to access beyond end of device [ 196.150531][ T6246] loop2: rw=3, sector=2224530891008, nr_sectors = 8388600 limit=2048 [ 196.417951][ T6418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.693557][ T3829] usb 1-1: USB disconnect, device number 8 [ 196.773978][ T6418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.051025][ T6418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.298242][ T6418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.546223][ T3652] Bluetooth: hci7: command tx timeout [ 197.756650][ T6462] loop0: detected capacity change from 0 to 8192 [ 197.800274][ T6462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.824810][ T6418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.918944][ T6418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.955800][ T6462] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 197.969655][ T6462] REISERFS (device loop0): using ordered data mode [ 197.983152][ T6462] reiserfs: using flush barriers [ 198.010266][ T6418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.022512][ T6462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 8388382, max trans age 30 [ 198.059793][ T6418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.096128][ T6462] REISERFS (device loop0): checking transaction log (loop0) [ 198.136355][ T6462] REISERFS (device loop0): Using r5 hash to sort names [ 198.446506][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.508819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.556767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.589647][ T6472] loop0: detected capacity change from 0 to 16 [ 198.601297][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.630334][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.656702][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.665587][ T6472] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.676422][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.683726][ T4754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.749756][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.776725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.797485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.853672][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.860909][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.946457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.968132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.016976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.057018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.094820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.136976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.166682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.205530][ T6418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.295809][ T6418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.366507][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.396658][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.427308][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.476742][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.537164][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.627028][ T3652] Bluetooth: hci7: command tx timeout [ 199.960693][ T6489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.028673][ T6489] vhci_hcd: invalid port number 246 [ 200.096773][ T6489] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 200.351917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.361580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.407912][ T6418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.522946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.547264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.609782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.658236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.666878][ T3683] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.718977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.739362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.799813][ T6418] device veth0_vlan entered promiscuous mode [ 200.862061][ T6418] device veth1_vlan entered promiscuous mode [ 200.907459][ T3683] usb 1-1: Using ep0 maxpacket: 16 [ 200.988168][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.997518][ T6246] bio_check_eod: 219608 callbacks suppressed [ 200.997533][ T6246] syz.2.911: attempt to access beyond end of device [ 200.997533][ T6246] loop2: rw=3, sector=2933065601408, nr_sectors = 8388600 limit=2048 [ 201.003882][ T6442] syz.1.995: attempt to access beyond end of device [ 201.003882][ T6442] loop1: rw=3, sector=914709721208, nr_sectors = 8388600 limit=2048 [ 201.019573][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.035973][ T3683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.043782][ T6246] syz.2.911: attempt to access beyond end of device [ 201.043782][ T6246] loop2: rw=3, sector=2933073990008, nr_sectors = 8388600 limit=2048 [ 201.075721][ T3890] syz.3.49: attempt to access beyond end of device [ 201.075721][ T3890] loop3: rw=3, sector=13507969642208, nr_sectors = 8388600 limit=2048 [ 201.090403][ T5801] syz.4.736: attempt to access beyond end of device [ 201.090403][ T5801] loop4: rw=3, sector=5377319092208, nr_sectors = 8388600 limit=2048 [ 201.110183][ T6442] syz.1.995: attempt to access beyond end of device [ 201.110183][ T6442] loop1: rw=3, sector=914718109808, nr_sectors = 8388600 limit=2048 [ 201.116867][ T6418] device veth0_macvtap entered promiscuous mode [ 201.139326][ T6442] syz.1.995: attempt to access beyond end of device [ 201.139326][ T6442] loop1: rw=3, sector=914726498408, nr_sectors = 8388600 limit=2048 [ 201.139505][ T6418] device veth1_macvtap entered promiscuous mode [ 201.161017][ T5801] syz.4.736: attempt to access beyond end of device [ 201.161017][ T5801] loop4: rw=3, sector=5377327480808, nr_sectors = 8388600 limit=2048 [ 201.170453][ T6442] syz.1.995: attempt to access beyond end of device [ 201.170453][ T6442] loop1: rw=3, sector=914734887008, nr_sectors = 8388600 limit=2048 [ 201.176019][ T3890] syz.3.49: attempt to access beyond end of device [ 201.176019][ T3890] loop3: rw=3, sector=13507978030808, nr_sectors = 8388600 limit=2048 [ 201.237853][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.265757][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.266056][ T3683] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 201.295725][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.315836][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.335518][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.355832][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.367257][ T3683] usb 1-1: Product: syz [ 201.371518][ T3683] usb 1-1: Manufacturer: syz [ 201.386538][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.405715][ T3683] usb 1-1: SerialNumber: syz [ 201.425933][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.430273][ T3683] usb 1-1: config 0 descriptor?? [ 201.486038][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.497962][ T3683] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 201.524994][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.558589][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.594780][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.624895][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.664766][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.694621][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.728449][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.765230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.774829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.804346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.845159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.867186][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.901415][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.931366][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.972538][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.005803][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.039332][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.068965][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.115030][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.140448][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.155824][ T3683] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 202.172870][ T3683] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 202.175730][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.215956][ T3683] usb 1-1: USB disconnect, device number 9 [ 202.253919][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.285717][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.325770][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.365702][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.395591][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.447435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.466568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.508293][ T6418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.517178][ T6418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.545722][ T6418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.554462][ T6418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.769456][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.808825][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.839712][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.874719][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.905944][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.928468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.272802][ T6506] loop0: detected capacity change from 0 to 2048 [ 203.396715][ T6506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.405958][ T6506] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038 (0x7fffffff) [ 203.456520][ T6511] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1023'. [ 203.653239][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 204.091194][ T3652] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 204.102034][ T3652] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 204.135293][ T3652] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 204.145385][ T3652] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 204.153975][ T3652] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 204.162098][ T3652] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 204.756464][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 205.124095][ T6540] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1033'. [ 205.236452][ T6546] mkiss: ax0: crc mode is auto. [ 205.496149][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.503824][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.548075][ T6520] device bridge_slave_0 entered promiscuous mode [ 205.579808][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.607524][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.636669][ T6518] loop0: detected capacity change from 0 to 40427 [ 205.638173][ T6520] device bridge_slave_1 entered promiscuous mode [ 205.672617][ T6518] F2FS-fs (loop0): invalid crc value [ 205.775644][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.785355][ T6518] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.788723][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.972373][ T6520] team0: Port device team_slave_0 added [ 206.006368][ T6246] bio_check_eod: 230428 callbacks suppressed [ 206.006385][ T6246] syz.2.911: attempt to access beyond end of device [ 206.006385][ T6246] loop2: rw=3, sector=3411853335008, nr_sectors = 8388600 limit=2048 [ 206.017125][ T6520] team0: Port device team_slave_1 added [ 206.027218][ T6518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.045578][ T3890] syz.3.49: attempt to access beyond end of device [ 206.045578][ T3890] loop3: rw=3, sector=14012887864808, nr_sectors = 8388600 limit=2048 [ 206.060224][ T5801] syz.4.736: attempt to access beyond end of device [ 206.060224][ T5801] loop4: rw=3, sector=5732383364408, nr_sectors = 8388600 limit=2048 [ 206.076386][ T6246] syz.2.911: attempt to access beyond end of device [ 206.076386][ T6246] loop2: rw=3, sector=3411861723608, nr_sectors = 8388600 limit=2048 [ 206.084897][ T6442] syz.1.995: attempt to access beyond end of device [ 206.084897][ T6442] loop1: rw=3, sector=1655741868008, nr_sectors = 8388600 limit=2048 [ 206.118043][ T6442] syz.1.995: attempt to access beyond end of device [ 206.118043][ T6442] loop1: rw=3, sector=1655750256608, nr_sectors = 8388600 limit=2048 [ 206.142616][ T3890] syz.3.49: attempt to access beyond end of device [ 206.142616][ T3890] loop3: rw=3, sector=14012896253408, nr_sectors = 8388600 limit=2048 [ 206.168630][ T6442] syz.1.995: attempt to access beyond end of device [ 206.168630][ T6442] loop1: rw=3, sector=1655758645208, nr_sectors = 8388600 limit=2048 [ 206.186206][ T3652] Bluetooth: hci8: command tx timeout [ 206.187771][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.215856][ T5801] syz.4.736: attempt to access beyond end of device [ 206.215856][ T5801] loop4: rw=3, sector=5732391753008, nr_sectors = 8388600 limit=2048 [ 206.241717][ T6442] syz.1.995: attempt to access beyond end of device [ 206.241717][ T6442] loop1: rw=3, sector=1655767033808, nr_sectors = 8388600 limit=2048 [ 206.291943][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.345789][ T3652] Bluetooth: hci4: command 0x0406 tx timeout [ 206.405766][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.458197][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.465182][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.618289][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.810388][ T6520] device hsr_slave_0 entered promiscuous mode [ 206.883079][ T6520] device hsr_slave_1 entered promiscuous mode [ 206.935963][ T6520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.943590][ T6520] Cannot create hsr debugfs directory [ 207.770959][ T6520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.001054][ T6587] vhci_hcd: invalid port number 0 [ 208.128183][ T6520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.265967][ T3641] Bluetooth: hci8: command tx timeout [ 208.478717][ T6520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.856790][ T6520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.292861][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 209.312067][ T6520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.373389][ T6520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.442847][ T6520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.499458][ T6520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.866385][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.918877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.949544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.997853][ T6520] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.057845][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.082696][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.084156][ T6626] loop0: detected capacity change from 0 to 512 [ 210.112906][ T3945] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.120136][ T3945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.175260][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.219225][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.276433][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.306282][ T6626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.315273][ T6626] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038 (0x7fffffff) [ 210.315448][ T3945] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.332355][ T3945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.345888][ T3652] Bluetooth: hci8: command tx timeout [ 210.453957][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.502925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.528744][ T6626] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.1077: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 210.550536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.602566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.610614][ T6626] EXT4-fs (loop0): Remounting filesystem read-only [ 210.621675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.677748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.707496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.743254][ T6520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.759222][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 210.808916][ T6520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.887829][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.920477][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.958326][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.993613][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.015975][ T3890] bio_check_eod: 174999 callbacks suppressed [ 211.015993][ T3890] syz.3.49: attempt to access beyond end of device [ 211.015993][ T3890] loop3: rw=3, sector=14302151958608, nr_sectors = 8388600 limit=2048 [ 211.025288][ T6442] syz.1.995: attempt to access beyond end of device [ 211.025288][ T6442] loop1: rw=3, sector=2255677762808, nr_sectors = 8388600 limit=2048 [ 211.062103][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.076367][ T5801] syz.4.736: attempt to access beyond end of device [ 211.076367][ T5801] loop4: rw=3, sector=6088169056208, nr_sectors = 8388600 limit=2048 [ 211.115848][ T6246] syz.2.911: attempt to access beyond end of device [ 211.115848][ T6246] loop2: rw=3, sector=3701444584208, nr_sectors = 8388600 limit=2048 [ 211.126014][ T6442] syz.1.995: attempt to access beyond end of device [ 211.126014][ T6442] loop1: rw=3, sector=2255686151408, nr_sectors = 8388600 limit=2048 [ 211.149261][ T5801] syz.4.736: attempt to access beyond end of device [ 211.149261][ T5801] loop4: rw=3, sector=6088177444808, nr_sectors = 8388600 limit=2048 [ 211.185983][ T6442] syz.1.995: attempt to access beyond end of device [ 211.185983][ T6442] loop1: rw=3, sector=2255694540008, nr_sectors = 8388600 limit=2048 [ 211.214302][ T6442] syz.1.995: attempt to access beyond end of device [ 211.214302][ T6442] loop1: rw=3, sector=2255702928608, nr_sectors = 8388600 limit=2048 [ 211.230418][ T5801] syz.4.736: attempt to access beyond end of device [ 211.230418][ T5801] loop4: rw=3, sector=6088185833408, nr_sectors = 8388600 limit=2048 [ 211.245995][ T6246] syz.2.911: attempt to access beyond end of device [ 211.245995][ T6246] loop2: rw=3, sector=3701452972808, nr_sectors = 8388600 limit=2048 [ 211.466372][ T3652] Bluetooth: hci5: command 0x0406 tx timeout [ 211.696491][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.703968][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.742107][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.869657][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.897155][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.959650][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.977209][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.019122][ T6520] device veth0_vlan entered promiscuous mode [ 212.028275][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.052713][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.084201][ T6520] device veth1_vlan entered promiscuous mode [ 212.103781][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.178121][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.207335][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.232647][ T6644] loop0: detected capacity change from 0 to 32768 [ 212.247457][ T6520] device veth0_macvtap entered promiscuous mode [ 212.278304][ T6520] device veth1_macvtap entered promiscuous mode [ 212.425976][ T3652] Bluetooth: hci8: command tx timeout [ 212.470930][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.495747][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.505880][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.535782][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.595967][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.619603][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.635721][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.697655][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.735134][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.759283][ T27] audit: type=1326 audit(1725458262.175:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 212.785952][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.826046][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.839985][ T27] audit: type=1326 audit(1725458262.205:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 212.862474][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.903986][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.955986][ T27] audit: type=1326 audit(1725458262.205:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 212.966209][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.058248][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.067421][ T27] audit: type=1326 audit(1725458262.205:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 213.105033][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.157642][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.179062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.208035][ T27] audit: type=1326 audit(1725458262.215:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 213.236634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.266752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.301686][ T27] audit: type=1326 audit(1725458262.225:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 213.307664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.424782][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.448245][ T27] audit: type=1326 audit(1725458262.225:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9317cef9 code=0x7ffc0000 [ 213.475688][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.485535][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.565749][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.575613][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.650215][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.675201][ T6678] loop0: detected capacity change from 0 to 1024 [ 213.685665][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.728731][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.757652][ T6678] hfsplus: bad catalog entry type [ 213.775761][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.815797][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.867398][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.899063][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.927547][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.975700][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.005720][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.048899][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.076668][ T46] hfsplus: b-tree write err: -5, ino 4 [ 214.079511][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.116627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.166791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.211040][ T6520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.246524][ T6520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.268370][ T6520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.305740][ T6520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.820122][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.864249][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.946696][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.974497][ T3665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.006928][ T3665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.008916][ T6701] loop0: detected capacity change from 0 to 8 [ 215.070361][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.177222][ T6701] SQUASHFS error: Failed to read block 0x1ec: -5 [ 215.228819][ T6701] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 215.229120][ T6702] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 215.682146][ T3683] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 215.975948][ T4101] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.026456][ T6442] bio_check_eod: 167493 callbacks suppressed [ 216.026471][ T6442] syz.1.995: attempt to access beyond end of device [ 216.026471][ T6442] loop1: rw=3, sector=2832209463608, nr_sectors = 8388600 limit=2048 [ 216.033941][ T6246] syz.2.911: attempt to access beyond end of device [ 216.033941][ T6246] loop2: rw=3, sector=4012007333408, nr_sectors = 8388600 limit=2048 [ 216.048224][ T5801] syz.4.736: attempt to access beyond end of device [ 216.048224][ T5801] loop4: rw=3, sector=6406231213808, nr_sectors = 8388600 limit=2048 [ 216.063525][ T3890] syz.3.49: attempt to access beyond end of device [ 216.063525][ T3890] loop3: rw=3, sector=14591374109408, nr_sectors = 8388600 limit=2048 [ 216.090424][ T6442] syz.1.995: attempt to access beyond end of device [ 216.090424][ T6442] loop1: rw=3, sector=2832217852208, nr_sectors = 8388600 limit=2048 [ 216.115745][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.130348][ T3890] syz.3.49: attempt to access beyond end of device [ 216.130348][ T3890] loop3: rw=3, sector=14591382498008, nr_sectors = 8388600 limit=2048 [ 216.146145][ T6442] syz.1.995: attempt to access beyond end of device [ 216.146145][ T6442] loop1: rw=3, sector=2832226240808, nr_sectors = 8388600 limit=2048 [ 216.160948][ T5801] syz.4.736: attempt to access beyond end of device [ 216.160948][ T5801] loop4: rw=3, sector=6406239602408, nr_sectors = 8388600 limit=2048 [ 216.161122][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.175890][ T4097] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.194561][ T6246] syz.2.911: attempt to access beyond end of device [ 216.194561][ T6246] loop2: rw=3, sector=4012015722008, nr_sectors = 8388600 limit=2048 [ 216.215982][ T3683] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 216.219749][ T5801] syz.4.736: attempt to access beyond end of device [ 216.219749][ T5801] loop4: rw=3, sector=6406247991008, nr_sectors = 8388600 limit=2048 [ 216.225122][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.266279][ T4101] usb 5-1: Using ep0 maxpacket: 8 [ 216.291080][ T3683] usb 2-1: config 0 descriptor?? [ 216.486627][ T4097] usb 1-1: Using ep0 maxpacket: 8 [ 216.576002][ T4101] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.595404][ T4101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.616669][ T4097] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.636481][ T4097] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 216.645551][ T4097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.670966][ T4101] usb 5-1: Product: syz [ 216.675168][ T4101] usb 5-1: Manufacturer: syz [ 216.685709][ T4101] usb 5-1: SerialNumber: syz [ 216.697274][ T4097] usb 1-1: config 0 descriptor?? [ 216.708286][ T4101] usb 5-1: config 0 descriptor?? [ 216.749431][ T4097] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 216.837924][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 216.844986][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x6 [ 216.881357][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x5 [ 216.911411][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x4 [ 216.934110][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 216.956933][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 216.988826][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 217.015576][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 217.039604][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 217.056970][ T4101] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.067033][ T3683] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 217.094559][ T3683] elecom 0003:056E:00FE.0019: unknown global tag 0xd [ 217.130294][ T3683] elecom 0003:056E:00FE.0019: item 0 4 1 13 parsing failed [ 217.172093][ T3683] elecom: probe of 0003:056E:00FE.0019 failed with error -22 [ 217.219244][ T3683] usb 2-1: USB disconnect, device number 8 [ 217.426041][ T4097] gspca_vc032x: reg_r err -71 [ 217.430827][ T4097] vc032x: probe of 1-1:0.0 failed with error -71 [ 217.462876][ T4097] usb 1-1: USB disconnect, device number 10 [ 217.605877][ T4101] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 217.646934][ T4101] usb 5-1: USB disconnect, device number 11 [ 218.250741][ T6753] sctp: [Deprecated]: syz.3.1117 (pid 6753) Use of int in maxseg socket option. [ 218.250741][ T6753] Use struct sctp_assoc_value instead [ 218.266755][ T6751] loop0: detected capacity change from 0 to 4096 [ 218.371245][ T6751] ntfs: volume version 3.1. [ 218.417578][ T6751] ntfs: (device loop0): parse_options(): Unrecognized mount option ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ184467440737095516150000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿÿqý¿ú?¼þïïþ» /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.533143][ T28] task:segctord state:D stack:28248 pid:3893 ppid:2 flags:0x00004000 [ 303.562873][ T28] Call Trace: [ 303.584250][ T28] [ 303.598552][ T28] __schedule+0x143f/0x4570 [ 303.613528][ T28] ? release_firmware_map_entry+0x186/0x186 [ 303.625852][ T3641] Bluetooth: hci6: command 0x0406 tx timeout [ 303.662416][ T28] ? print_irqtrace_events+0x210/0x210 [ 303.684844][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 303.722630][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 303.756090][ T28] schedule+0xbf/0x180 [ 303.768963][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 303.774750][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 303.808735][ T28] ? down_write_killable_nested+0x90/0x90 [ 303.824836][ T28] ? read_lock_is_recursive+0x10/0x10 [ 303.835970][ T3883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.866025][ T28] ? rcu_is_watching+0x11/0xb0 [ 303.870932][ T3883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.887463][ T28] nilfs_transaction_lock+0x25c/0x4f0 [ 303.905749][ T28] nilfs_segctor_thread+0x547/0x11a0 [ 303.911117][ T28] ? print_irqtrace_events+0x210/0x210 [ 303.917090][ T3883] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 303.955656][ T3883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.963764][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 303.983985][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 303.996585][ T3883] usb 4-1: config 0 descriptor?? [ 304.004204][ T28] ? release_firmware_map_entry+0x186/0x186 [ 304.034520][ T28] ? wake_bit_function+0x210/0x210 [ 304.055750][ T28] ? _raw_spin_unlock+0x40/0x40 [ 304.067945][ T28] ? __kthread_parkme+0x168/0x1c0 [ 304.085704][ T28] kthread+0x28d/0x320 [ 304.089820][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 304.115349][ T28] ? kthread_blkcg+0xd0/0xd0 [ 304.125470][ T28] ret_from_fork+0x1f/0x30 [ 304.142521][ T28] [ 304.165768][ T28] [ 304.165768][ T28] Showing all locks held in the system: [ 304.183804][ T28] 3 locks held by kworker/u4:0/9: [ 304.195731][ T28] 1 lock held by rcu_tasks_kthre/12: [ 304.201087][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 304.256789][ T28] 1 lock held by rcu_tasks_trace/13: [ 304.262227][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 304.314668][ T28] 1 lock held by khungtaskd/28: [ 304.347710][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 304.395824][ T28] 2 locks held by getty/3399: [ 304.400558][ T28] #0: ffff88802e4db098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 304.446506][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 304.485976][ T28] 3 locks held by kworker/u4:5/3665: [ 304.491328][ T28] 5 locks held by kworker/0:15/3883: [ 304.515943][ T28] #0: ffff88801e2a2538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 304.552150][ T28] #1: ffffc90005347d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 304.585099][ T28] #2: ffff888027f85190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 304.615690][ T28] #3: ffff88804c339190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 304.625161][ T28] #4: ffff88807bc2c118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 304.685730][ T28] 3 locks held by syz.3.49/3890: [ 304.690717][ T28] 1 lock held by segctord/3893: [ 304.695582][ T28] #0: ffff8880589c22a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 304.746538][ T3883] hid-led: probe of 0003:1D34:000A.002D failed with error -71 [ 304.776501][ T28] 4 locks held by kworker/1:13/4098: [ 304.781924][ T28] #0: ffff8880b8f3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 304.795340][ T3883] usb 4-1: USB disconnect, device number 16 [ 304.825696][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 304.855670][ T28] #2: ffffffff97600570 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0xd8/0x4e0 [ 304.875721][ T28] #3: ffff8880b8f28358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x62d/0xee0 [ 304.884799][ T28] 2 locks held by syz.4.736/5801: [ 304.906045][ T28] 1 lock held by segctord/5804: [ 304.910949][ T28] #0: ffff888027f682a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 304.945735][ T28] 2 locks held by syz.2.911/6246: [ 304.950813][ T28] 1 lock held by segctord/6249: [ 304.985754][ T28] #0: ffff88802d5f12a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 305.016583][ T28] 5 locks held by syz.1.995/6442: [ 305.021659][ T28] 1 lock held by segctord/6444: [ 305.055719][ T28] #0: ffff8881417832a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 305.085728][ T28] 1 lock held by syz.3.1820/8374: [ 305.090804][ T28] #0: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 305.135722][ T28] [ 305.146196][ T28] ============================================= [ 305.146196][ T28] [ 305.154645][ T28] NMI backtrace for cpu 0 [ 305.159003][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.108-syzkaller #0 [ 305.166924][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.177016][ T28] Call Trace: [ 305.180319][ T28] [ 305.183276][ T28] dump_stack_lvl+0x1e3/0x2cb [ 305.187999][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 305.193505][ T28] ? panic+0x764/0x764 [ 305.197607][ T28] ? vprintk_emit+0x622/0x740 [ 305.202331][ T28] ? printk_sprint+0x490/0x490 [ 305.207131][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 305.212278][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 305.217257][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 305.223447][ T28] ? _printk+0xd1/0x111 [ 305.227630][ T28] ? panic+0x764/0x764 [ 305.231724][ T28] ? __wake_up_klogd+0xcc/0x100 [ 305.236607][ T28] ? panic+0x764/0x764 [ 305.240697][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 305.246812][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 305.252919][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 305.258931][ T28] watchdog+0xf88/0xfd0 [ 305.263099][ T28] ? watchdog+0x1f8/0xfd0 [ 305.267444][ T28] kthread+0x28d/0x320 [ 305.271511][ T28] ? hungtask_pm_notify+0x50/0x50 [ 305.276543][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.281153][ T28] ret_from_fork+0x1f/0x30 [ 305.285750][ T28] [ 305.289926][ T28] Sending NMI from CPU 0 to CPUs 1: [ 305.295181][ C1] NMI backtrace for cpu 1 [ 305.295192][ C1] CPU: 1 PID: 3890 Comm: syz.3.49 Not tainted 6.1.108-syzkaller #0 [ 305.295210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.295219][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3e/0x60 [ 305.295246][ C1] Code: e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 <48> 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 [ 305.295260][ C1] RSP: 0018:ffffc900051f6f38 EFLAGS: 00000246 [ 305.295275][ C1] RAX: ffffffff8176abbc RBX: 00007f043177cef9 RCX: ffff88805b0f8000 [ 305.295300][ C1] RDX: ffffc90005a12000 RSI: 000000000003ffff RDI: 0000000000040000 [ 305.295317][ C1] RBP: 0000000000000001 R08: ffffffff8176a844 R09: ffffc900051f70b0 [ 305.295328][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805b0f8000 [ 305.295338][ C1] R13: ffffffff81786b70 R14: 00007f043177cef9 R15: 1ffff92000a3ee01 [ 305.295350][ C1] FS: 00007f04326136c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 305.295364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.295375][ C1] CR2: 0000001b2c90fff8 CR3: 0000000079721000 CR4: 00000000003506e0 [ 305.295406][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.295415][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.295425][ C1] Call Trace: [ 305.295430][ C1] [ 305.295436][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 305.295463][ C1] ? read_lock_is_recursive+0x10/0x10 [ 305.295490][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 305.295517][ C1] ? nmi_handle+0x25/0x440 [ 305.295551][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 305.295576][ C1] ? nmi_handle+0x12e/0x440 [ 305.295601][ C1] ? nmi_handle+0x25/0x440 [ 305.295634][ C1] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 305.295656][ C1] ? default_do_nmi+0x62/0x150 [ 305.295674][ C1] ? exc_nmi+0xa8/0x100 [ 305.295690][ C1] ? end_repeat_nmi+0x16/0x31 [ 305.295716][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 305.295750][ C1] ? __module_address+0x24/0x2b0 [ 305.295769][ C1] ? is_module_text_address+0x8c/0x160 [ 305.295791][ C1] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 305.295815][ C1] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 305.295839][ C1] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 305.295863][ C1] [ 305.295868][ C1] [ 305.295873][ C1] is_module_text_address+0x8c/0x160 [ 305.295896][ C1] kernel_text_address+0x8e/0xd0 [ 305.295922][ C1] __kernel_text_address+0x9/0x40 [ 305.295943][ C1] unwind_get_return_address+0x49/0x80 [ 305.295963][ C1] arch_stack_walk+0xf3/0x140 [ 305.295988][ C1] stack_trace_save+0x113/0x1c0 [ 305.296011][ C1] ? mark_lock+0x9a/0x340 [ 305.296034][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 305.296058][ C1] ? __stack_depot_save+0x36/0x470 [ 305.296082][ C1] kasan_set_track+0x4b/0x70 [ 305.296106][ C1] ? kasan_set_track+0x4b/0x70 [ 305.296129][ C1] ? __kasan_slab_alloc+0x65/0x70 [ 305.296143][ C1] ? slab_post_alloc_hook+0x52/0x3a0 [ 305.296162][ C1] ? kmem_cache_alloc+0x10c/0x2d0 [ 305.296180][ C1] ? mempool_alloc+0x190/0x580 [ 305.296196][ C1] ? bio_alloc_bioset+0x404/0x11b0 [ 305.296215][ C1] ? blk_next_bio+0x35/0x150 [ 305.296233][ C1] ? __blkdev_issue_discard+0x377/0x570 [ 305.296256][ C1] ? blkdev_issue_discard+0xf0/0x1c0 [ 305.296278][ C1] ? nilfs_sufile_trim_fs+0x109e/0x1360 [ 305.296294][ C1] ? nilfs_ioctl+0x1188/0x24a0 [ 305.296309][ C1] ? __se_sys_ioctl+0xf1/0x160 [ 305.296333][ C1] ? do_syscall_64+0x3b/0xb0 [ 305.296357][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.296401][ C1] __kasan_slab_alloc+0x65/0x70 [ 305.296417][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 305.296441][ C1] kmem_cache_alloc+0x10c/0x2d0 [ 305.296460][ C1] ? mempool_alloc+0x190/0x580 [ 305.296477][ C1] ? mempool_free+0x360/0x360 [ 305.296501][ C1] mempool_alloc+0x190/0x580 [ 305.296517][ C1] ? bio_uninit+0x52/0x3b0 [ 305.296542][ C1] ? mempool_resize+0x850/0x850 [ 305.296563][ C1] ? kmem_cache_free+0x292/0x510 [ 305.296585][ C1] bio_alloc_bioset+0x404/0x11b0 [ 305.296609][ C1] blk_next_bio+0x35/0x150 [ 305.296630][ C1] __blkdev_issue_discard+0x377/0x570 [ 305.296659][ C1] blkdev_issue_discard+0xf0/0x1c0 [ 305.296684][ C1] ? __blkdev_issue_discard+0x570/0x570 [ 305.296711][ C1] ? __might_sleep+0xb0/0xb0 [ 305.296737][ C1] nilfs_sufile_trim_fs+0x109e/0x1360 [ 305.296767][ C1] ? nilfs_sufile_set_suinfo+0xf60/0xf60 [ 305.296783][ C1] ? __might_fault+0xbd/0x110 [ 305.296807][ C1] nilfs_ioctl+0x1188/0x24a0 [ 305.296830][ C1] ? nilfs_ioctl_prepare_clean_segments+0x880/0x880 [ 305.296854][ C1] ? do_vfs_ioctl+0xc55/0x2a90 [ 305.296872][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 305.296887][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 305.296909][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 305.296931][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 305.296952][ C1] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 305.296971][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 305.296990][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 305.297009][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 305.297036][ C1] ? __fget_files+0x28/0x4a0 [ 305.297062][ C1] ? __fget_files+0x28/0x4a0 [ 305.297078][ C1] ? __fget_files+0x435/0x4a0 [ 305.297094][ C1] ? __fget_files+0x28/0x4a0 [ 305.297113][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 305.297130][ C1] ? security_file_ioctl+0x7d/0xa0 [ 305.297147][ C1] ? nilfs_ioctl_prepare_clean_segments+0x880/0x880 [ 305.297167][ C1] __se_sys_ioctl+0xf1/0x160 [ 305.297194][ C1] do_syscall_64+0x3b/0xb0 [ 305.297217][ C1] ? clear_bhb_loop+0x45/0xa0 [ 305.297241][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.297263][ C1] RIP: 0033:0x7f043177cef9 [ 305.297278][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.297291][ C1] RSP: 002b:00007f0432613038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.297308][ C1] RAX: ffffffffffffffda RBX: 00007f0431935f80 RCX: 00007f043177cef9 [ 305.297320][ C1] RDX: 0000000020000680 RSI: 00000000c0185879 RDI: 0000000000000004 [ 305.297330][ C1] RBP: 00007f04317ef01e R08: 0000000000000000 R09: 0000000000000000 [ 305.297340][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.297350][ C1] R13: 0000000000000000 R14: 00007f0431935f80 R15: 00007ffd5a828048 [ 305.297370][ C1] [ 305.805714][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 305.805733][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.108-syzkaller #0 [ 305.805756][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.805768][ T28] Call Trace: [ 305.805787][ T28] [ 305.805795][ T28] dump_stack_lvl+0x1e3/0x2cb [ 305.805837][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 305.805871][ T28] ? panic+0x764/0x764 [ 305.805906][ T28] ? llist_add_batch+0x160/0x1d0 [ 305.805944][ T28] ? vscnprintf+0x59/0x80 [ 305.805973][ T28] panic+0x318/0x764 [ 305.805998][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 305.806055][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 305.806102][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 305.806137][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 305.806177][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 305.806216][ T28] watchdog+0xfc7/0xfd0 [ 305.806252][ T28] ? watchdog+0x1f8/0xfd0 [ 305.806287][ T28] kthread+0x28d/0x320 [ 305.806306][ T28] ? hungtask_pm_notify+0x50/0x50 [ 305.806335][ T28] ? kthread_blkcg+0xd0/0xd0 [ 305.806358][ T28] ret_from_fork+0x1f/0x30 [ 305.806402][ T28] [ 305.807423][ T28] Kernel Offset: disabled [ 306.049636][ T28] Rebooting in 86400 seconds..