last executing test programs: 20.706256176s ago: executing program 1 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@remote]}) 20.235609274s ago: executing program 1 (id=291): r0 = socket(0x2, 0x3, 0x80000000002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2005, 0x1, 0xd7, 0x6}, {0x5, 0x1, 0x0, 0x7fff}]}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @initdev, 0x0}, &(0x7f0000000040)=0xc) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x20}, 0x44010) 19.966003536s ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='^@-!#:,(&\x00', 0xa, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 19.632557132s ago: executing program 1 (id=296): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000e40)={0x0, 0xb, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0x17, 0x28, "fe104be5f4213592d0b5da5c3ff1ce9e6bc4cb8633c264fe8e25028acba1a8ffa8a5d786ab86d9b6"}, 0x0, 0x0}) 18.016680123s ago: executing program 0 (id=301): mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 17.501436135s ago: executing program 0 (id=304): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvmmsg$unix(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) 17.337664468s ago: executing program 0 (id=307): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) 17.244876746s ago: executing program 1 (id=308): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 17.159918433s ago: executing program 0 (id=310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) 16.986409967s ago: executing program 0 (id=312): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x311, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6976a11002db21"], 0x0) 16.844792868s ago: executing program 0 (id=313): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 16.784672743s ago: executing program 1 (id=314): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$rfkill(r0, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1}, 0x8) 2.657104335s ago: executing program 3 (id=426): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x11, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)='./file1\x00') write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 2.382451138s ago: executing program 3 (id=429): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.795460185s ago: executing program 32 (id=313): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.48661765s ago: executing program 33 (id=314): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$rfkill(r0, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1}, 0x8) 880.239519ms ago: executing program 2 (id=443): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) 710.202133ms ago: executing program 3 (id=444): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)="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", 0x184}], 0x1, 0x0, 0x0, 0x4008004}, 0x20000001) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 597.394282ms ago: executing program 3 (id=445): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 493.22787ms ago: executing program 3 (id=446): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, r1, 0x0, 0x0, 0xc}]) 280.148018ms ago: executing program 2 (id=447): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x200008, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 225.904512ms ago: executing program 2 (id=448): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0xffffffffffffffc9, 0x1, {0x0, 0x0, 0x5, 0xfd, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xe}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 150.687558ms ago: executing program 2 (id=449): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 137.190919ms ago: executing program 3 (id=450): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) fallocate(r0, 0x0, 0x5, 0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 68.261605ms ago: executing program 2 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) 0s ago: executing program 2 (id=452): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010103}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000540)="b1", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)="11", 0x1}], 0x1}}], 0x2, 0x8004804) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xd}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. [ 83.705857][ T5775] cgroup: Unknown subsys name 'net' [ 83.849597][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.620364][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.321960][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.358899][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.368973][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.382483][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.396674][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.404597][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.405431][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.414222][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.427795][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.436189][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.444317][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.452127][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.460133][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.469563][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.477188][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.485509][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.487071][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.495392][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.508053][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.509382][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.522661][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.523335][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.538993][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.547618][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.226161][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.336631][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.378211][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.407838][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.545501][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.553207][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.562614][ T5788] bridge_slave_0: entered allmulticast mode [ 88.570965][ T5788] bridge_slave_0: entered promiscuous mode [ 88.581337][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.588706][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.596137][ T5788] bridge_slave_1: entered allmulticast mode [ 88.604236][ T5788] bridge_slave_1: entered promiscuous mode [ 88.695144][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.702680][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.711101][ T5785] bridge_slave_0: entered allmulticast mode [ 88.719299][ T5785] bridge_slave_0: entered promiscuous mode [ 88.740988][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.754136][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.786952][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.794708][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.802727][ T5785] bridge_slave_1: entered allmulticast mode [ 88.811399][ T5785] bridge_slave_1: entered promiscuous mode [ 88.818811][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.825976][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834245][ T5789] bridge_slave_0: entered allmulticast mode [ 88.841563][ T5789] bridge_slave_0: entered promiscuous mode [ 88.850408][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.857861][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.865483][ T5789] bridge_slave_1: entered allmulticast mode [ 88.872616][ T5789] bridge_slave_1: entered promiscuous mode [ 88.903359][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.910997][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.919183][ T5786] bridge_slave_0: entered allmulticast mode [ 88.926396][ T5786] bridge_slave_0: entered promiscuous mode [ 88.967077][ T5788] team0: Port device team_slave_0 added [ 88.974178][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.981945][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.989835][ T5786] bridge_slave_1: entered allmulticast mode [ 88.996841][ T5786] bridge_slave_1: entered promiscuous mode [ 89.032620][ T5788] team0: Port device team_slave_1 added [ 89.066069][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.080372][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.092690][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.105993][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.189715][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.197291][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.224873][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.242382][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.267468][ T5789] team0: Port device team_slave_0 added [ 89.276597][ T5789] team0: Port device team_slave_1 added [ 89.283553][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.290950][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.317044][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.331367][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.343527][ T5785] team0: Port device team_slave_0 added [ 89.353764][ T5785] team0: Port device team_slave_1 added [ 89.434503][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.442277][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.469419][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.495635][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.502822][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.530119][ T5798] Bluetooth: hci0: command tx timeout [ 89.530663][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.549685][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.556879][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.583461][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.593785][ T5798] Bluetooth: hci1: command tx timeout [ 89.594278][ T5790] Bluetooth: hci3: command tx timeout [ 89.601194][ T5795] Bluetooth: hci2: command tx timeout [ 89.612532][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.619603][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.646962][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.685884][ T5786] team0: Port device team_slave_0 added [ 89.699742][ T5786] team0: Port device team_slave_1 added [ 89.730895][ T5788] hsr_slave_0: entered promiscuous mode [ 89.738022][ T5788] hsr_slave_1: entered promiscuous mode [ 89.765074][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.772472][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.800106][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.813856][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.821230][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.848054][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.941411][ T5785] hsr_slave_0: entered promiscuous mode [ 89.948335][ T5785] hsr_slave_1: entered promiscuous mode [ 89.955285][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.963889][ T5785] Cannot create hsr debugfs directory [ 90.015767][ T5789] hsr_slave_0: entered promiscuous mode [ 90.022570][ T5789] hsr_slave_1: entered promiscuous mode [ 90.030003][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.037620][ T5789] Cannot create hsr debugfs directory [ 90.135972][ T5786] hsr_slave_0: entered promiscuous mode [ 90.143066][ T5786] hsr_slave_1: entered promiscuous mode [ 90.149805][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.157552][ T5786] Cannot create hsr debugfs directory [ 90.521267][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.537343][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.548921][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.560468][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.639917][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.655061][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.674136][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.685462][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.779031][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.802296][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.814676][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.847671][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.912962][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.941852][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.952795][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.966950][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.068894][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.121024][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.155917][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.167925][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.175415][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.204779][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.212135][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.256831][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.296904][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.325886][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.359897][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.367288][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.407268][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.422737][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.429981][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.457250][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.464710][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.531759][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.538997][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.576647][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.591833][ T5795] Bluetooth: hci0: command tx timeout [ 91.636867][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.644301][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.666378][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.673940][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.678880][ T5795] Bluetooth: hci2: command tx timeout [ 91.687054][ T5795] Bluetooth: hci1: command tx timeout [ 91.690723][ T5790] Bluetooth: hci3: command tx timeout [ 91.757568][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.776877][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.909830][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.030142][ T5788] veth0_vlan: entered promiscuous mode [ 92.077356][ T5788] veth1_vlan: entered promiscuous mode [ 92.181761][ T5788] veth0_macvtap: entered promiscuous mode [ 92.204205][ T5788] veth1_macvtap: entered promiscuous mode [ 92.282223][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.333658][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.382260][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394745][ T8] cfg80211: failed to load regulatory.db [ 92.401696][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.411018][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.422909][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.475791][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.513136][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.617213][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.658602][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.673978][ T5786] veth0_vlan: entered promiscuous mode [ 92.679417][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703023][ T5786] veth1_vlan: entered promiscuous mode [ 92.760522][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.772569][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.837770][ T5786] veth0_macvtap: entered promiscuous mode [ 92.851803][ T5789] veth0_vlan: entered promiscuous mode [ 92.876073][ T5786] veth1_macvtap: entered promiscuous mode [ 92.891410][ T5785] veth0_vlan: entered promiscuous mode [ 92.915043][ T5789] veth1_vlan: entered promiscuous mode [ 92.940618][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.954488][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.967876][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.999059][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.010587][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.024907][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.043587][ T5785] veth1_vlan: entered promiscuous mode [ 93.073313][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118588][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127665][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.137430][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.217207][ T5789] veth0_macvtap: entered promiscuous mode [ 93.245353][ T5789] veth1_macvtap: entered promiscuous mode [ 93.284609][ T5785] veth0_macvtap: entered promiscuous mode [ 93.308242][ T5785] veth1_macvtap: entered promiscuous mode [ 93.393949][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.418388][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.443849][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.454842][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.467621][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.479375][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.507667][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.519111][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.531347][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.541685][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.558297][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.577193][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.594412][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.608336][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.631071][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.642499][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.658295][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.670522][ T5790] Bluetooth: hci0: command tx timeout [ 93.696230][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.712024][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.725259][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.737055][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.748691][ T5790] Bluetooth: hci3: command tx timeout [ 93.751970][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.766783][ T5790] Bluetooth: hci1: command tx timeout [ 93.766831][ T5790] Bluetooth: hci2: command tx timeout [ 93.781503][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.793812][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.805230][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.831279][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.848342][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.868612][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.966312][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988092][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999648][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.009957][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060857][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.075438][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.227099][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.240499][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.259782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.268311][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.405472][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.432856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.434016][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.459452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.598365][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.611568][ T5899] syz.2.3[5899]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.622012][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.721565][ T5899] loop2: detected capacity change from 0 to 764 [ 95.437233][ T5911] fuse: Invalid user_id [ 95.749975][ T5798] Bluetooth: hci0: command tx timeout [ 95.758455][ T5917] loop0: detected capacity change from 0 to 764 [ 95.769926][ T5917] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 95.829434][ T5798] Bluetooth: hci2: command tx timeout [ 95.835940][ T5798] Bluetooth: hci1: command tx timeout [ 95.841771][ T5790] Bluetooth: hci3: command tx timeout [ 95.898791][ T5787] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.921703][ T5917] ======================================================= [ 95.921703][ T5917] WARNING: The mand mount option has been deprecated and [ 95.921703][ T5917] and is ignored by this kernel. Remove the mand [ 95.921703][ T5917] option from the mount to silence this warning. [ 95.921703][ T5917] ======================================================= [ 95.981621][ T5917] syz.0.17: attempt to access beyond end of device [ 95.981621][ T5917] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 96.033786][ T5917] syz.0.17: attempt to access beyond end of device [ 96.033786][ T5917] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 96.087262][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.136418][ T5917] syz.0.17: attempt to access beyond end of device [ 96.136418][ T5917] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 96.183188][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 96.213916][ T5917] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 96.243468][ T5917] UDF-fs: Scanning with blocksize 512 failed [ 96.265152][ T5917] syz.0.17: attempt to access beyond end of device [ 96.265152][ T5917] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 96.296591][ T5917] syz.0.17: attempt to access beyond end of device [ 96.296591][ T5917] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 96.339155][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.373543][ T5917] syz.0.17: attempt to access beyond end of device [ 96.373543][ T5917] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 96.412551][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 96.439962][ T5917] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 96.465570][ T5917] UDF-fs: Scanning with blocksize 1024 failed [ 96.484027][ T5917] syz.0.17: attempt to access beyond end of device [ 96.484027][ T5917] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 96.517881][ T5917] syz.0.17: attempt to access beyond end of device [ 96.517881][ T5917] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 96.553778][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.577742][ T5917] syz.0.17: attempt to access beyond end of device [ 96.577742][ T5917] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 96.591790][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 96.606090][ T5917] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 96.614235][ T5917] UDF-fs: Scanning with blocksize 2048 failed [ 96.625033][ T5909] loop2: detected capacity change from 0 to 40427 [ 96.643622][ T5917] syz.0.17: attempt to access beyond end of device [ 96.643622][ T5917] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 96.669623][ T5909] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 96.691361][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.711021][ T5909] F2FS-fs (loop2): invalid crc value [ 96.720305][ T5917] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 96.738789][ T5909] F2FS-fs (loop2): invalid crc value [ 96.777220][ T5917] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 96.778646][ T5909] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 96.799872][ T5917] UDF-fs: Scanning with blocksize 4096 failed [ 96.806119][ T5917] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 97.340785][ T5925] loop1: detected capacity change from 0 to 40427 [ 97.379178][ T5925] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.387526][ T5925] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.466051][ T5925] F2FS-fs (loop1): invalid crc value [ 97.505338][ T5925] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.645510][ T5942] use of bytesused == 0 is deprecated and will be removed in the future, [ 97.661279][ T5942] use the actual size instead. [ 97.738806][ T5925] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.746978][ T5925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.067075][ T1094] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.093078][ T1094] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 98.349469][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.564155][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 98.586116][ T55] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 98.614271][ T55] usb 1-1: config 0 has no interface number 0 [ 98.643669][ T5956] loop2: detected capacity change from 0 to 4096 [ 98.651187][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 98.668647][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.688848][ T55] usb 1-1: Product: syz [ 98.693221][ T55] usb 1-1: Manufacturer: syz [ 98.712317][ T55] usb 1-1: SerialNumber: syz [ 98.742510][ T55] usb 1-1: config 0 descriptor?? [ 98.744799][ T5956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.801095][ T55] smsc95xx v2.0.0 [ 98.821185][ T5956] ntfs3: loop2: Failed to load $Extend (-22). [ 98.827713][ T5956] ntfs3: loop2: Failed to initialize $Extend. [ 99.134495][ T5954] loop3: detected capacity change from 0 to 32768 [ 99.192591][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.247687][ T5954] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 99.320771][ T5954] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.364808][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 99.423515][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 99.454308][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.463921][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.479158][ T27] usb 2-1: config 0 has no interface number 0 [ 99.487484][ T27] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.501081][ T27] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.513388][ T27] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.525510][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.538921][ T27] usb 2-1: config 0 descriptor?? [ 99.578027][ T5965] program syz.2.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.626137][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 99.642468][ T55] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 99.686116][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 99.700343][ T55] usb 1-1: USB disconnect, device number 2 [ 99.901485][ T5968] loop2: detected capacity change from 0 to 4096 [ 99.933761][ T5968] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 100.012999][ T27] uclogic 0003:256C:006D.0001: No inputs registered, leaving [ 100.048106][ T5968] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.050731][ T27] uclogic 0003:256C:006D.0001: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 100.089667][ T5968] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 100.249135][ T27] usb 2-1: USB disconnect, device number 2 [ 100.289826][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 100.813065][ T5988] loop0: detected capacity change from 0 to 2048 [ 100.950020][ T5989] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.059797][ T5993] loop1: detected capacity change from 0 to 128 [ 101.078216][ T5993] EXT4-fs: Ignoring removed nobh option [ 101.147347][ T5993] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.154285][ T5989] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 101.181010][ T5993] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.192021][ T5989] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 101.257220][ T5989] Remounting filesystem read-only [ 101.304589][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 101.317557][ T5785] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 101.352326][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.370013][ T5993] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 101.394176][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.413232][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.436255][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 101.453048][ T5785] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 101.471497][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.495319][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.504803][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.521566][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.530194][ T5984] loop3: detected capacity change from 0 to 32768 [ 101.655603][ T5984] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.767629][ T5984] XFS (loop3): Ending clean mount [ 101.792499][ T6008] loop0: detected capacity change from 0 to 512 [ 101.844622][ T5984] XFS (loop3): Quotacheck needed: Please wait. [ 101.921905][ T6008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.948838][ T6008] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.031564][ T5984] XFS (loop3): Quotacheck: Done. [ 102.148762][ T28] audit: type=1800 audit(1754339828.063:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.49" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 102.207763][ T28] audit: type=1800 audit(1754339828.073:3): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.49" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 102.263905][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.325000][ T6013] cifs: Unknown parameter 'f,' [ 102.336670][ T5788] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.795727][ T6009] loop1: detected capacity change from 0 to 40427 [ 102.829577][ T6009] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 102.838284][ T6009] F2FS-fs (loop1): Image doesn't support compression [ 102.863157][ T6009] F2FS-fs (loop1): heap/no_heap options were deprecated [ 102.882724][ T6009] F2FS-fs (loop1): Image doesn't support compression [ 102.928567][ T6009] F2FS-fs (loop1): invalid crc value [ 102.952281][ T6009] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.015480][ T5856] IPVS: starting estimator thread 0... [ 103.069718][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.095251][ T6009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.129115][ T6028] IPVS: using max 20 ests per chain, 48000 per kthread [ 103.186993][ T6009] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_collapse_range+0x291/0x3d0 [ 103.259466][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 103.281194][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.308620][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.316071][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 103.332804][ T5789] bio_check_eod: 2 callbacks suppressed [ 103.332821][ T5789] syz-executor: attempt to access beyond end of device [ 103.332821][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.356497][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.371154][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 103.390875][ T27] usb 3-1: config 0 descriptor?? [ 103.744614][ T6027] loop0: detected capacity change from 0 to 32768 [ 103.767005][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.852596][ T27] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 103.869080][ T6027] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 103.950200][ T6027] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.246243][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 104.335311][ T9] usb 3-1: USB disconnect, device number 2 [ 104.438022][ T6043] process 'syz.1.59' launched './file2' with NULL argv: empty string added [ 104.717588][ T6049] Bluetooth: MGMT ver 1.22 [ 104.732091][ T6050] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.078455][ T28] audit: type=1326 audit(1754339831.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 105.112053][ T28] audit: type=1326 audit(1754339831.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 105.136591][ T28] audit: type=1326 audit(1754339831.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 105.484475][ T6065] loop2: detected capacity change from 0 to 4096 [ 106.018992][ T28] audit: type=1326 audit(1754339831.943:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 106.119892][ T28] audit: type=1326 audit(1754339831.943:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 106.216324][ T28] audit: type=1326 audit(1754339831.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 106.281173][ T28] audit: type=1326 audit(1754339832.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 106.305295][ T28] audit: type=1326 audit(1754339832.033:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308518eb69 code=0x7ffc0000 [ 106.476333][ T6102] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.500465][ T6102] team0: Port device batadv1 added [ 106.688344][ T6105] team0: Device gtp0 is of different type [ 106.740409][ T6107] loop0: detected capacity change from 0 to 764 [ 106.770179][ T6107] rock: directory entry would overflow storage [ 106.777591][ T6107] rock: sig=0x4654, size=5, remaining=4 [ 106.903007][ T6113] loop1: detected capacity change from 0 to 256 [ 107.515496][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 107.929288][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.143209][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 108.159258][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.171079][ T5883] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 108.198914][ T5883] usb 3-1: config 0 has no interface number 0 [ 108.208562][ T5883] usb 3-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 108.251011][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.264322][ T5883] usb 3-1: config 0 descriptor?? [ 108.346238][ T6162] loop3: detected capacity change from 0 to 1024 [ 108.375692][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 108.384925][ T5893] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 108.407306][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.418716][ T5893] usb 1-1: config 0 descriptor?? [ 108.488785][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 108.488804][ T28] audit: type=1800 audit(1754340602.418:46): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 108.546139][ T12] hfsplus: b-tree write err: -5, ino 4 [ 108.611581][ T6152] loop1: detected capacity change from 0 to 32768 [ 108.680513][ T6137] netlink: 96 bytes leftover after parsing attributes in process `syz.2.102'. [ 108.698412][ T9] usb 3-1: USB disconnect, device number 3 [ 108.699122][ T6152] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.799089][ T6152] XFS (loop1): Ending clean mount [ 108.805489][ T6174] netlink: 45 bytes leftover after parsing attributes in process `syz.3.115'. [ 108.814425][ T6152] XFS (loop1): Quotacheck needed: Please wait. [ 108.867501][ T6152] XFS (loop1): Quotacheck: Done. [ 108.924633][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 108.941946][ T28] audit: type=1800 audit(1754340602.878:47): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.108" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 108.943550][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 108.979969][ T6176] 8021q: VLANs not supported on wg1 [ 109.061648][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.265128][ T5893] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.299080][ T5893] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 109.349395][ T5893] asix: probe of 1-1:0.0 failed with error -71 [ 109.369487][ T5893] usb 1-1: USB disconnect, device number 3 [ 109.591012][ T6189] loop2: detected capacity change from 0 to 1024 [ 110.039004][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.249034][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 110.261306][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.299335][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.329403][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.339447][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.352814][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.362412][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.597321][ T5893] usb 3-1: GET_CAPABILITIES returned 0 [ 110.619081][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 110.727251][ T6199] loop1: detected capacity change from 0 to 32768 [ 110.752739][ T6199] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.126 (6199) [ 110.823173][ T6199] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.834256][ T5856] usb 3-1: USB disconnect, device number 4 [ 110.844987][ T6199] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 110.859518][ T6199] BTRFS info (device loop1): setting nodatacow, compression disabled [ 110.878087][ T6199] BTRFS info (device loop1): max_inline at 0 [ 110.893366][ T6199] BTRFS info (device loop1): enabling disk space caching [ 110.909162][ T6199] BTRFS info (device loop1): turning off barriers [ 110.919417][ T6199] BTRFS info (device loop1): turning on flush-on-commit [ 110.928760][ T6221] mmap: syz.3.137 (6221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.941312][ T6199] BTRFS info (device loop1): doing ref verification [ 110.948153][ T6199] BTRFS info (device loop1): force clearing of disk cache [ 110.959145][ T6199] BTRFS info (device loop1): enabling ssd optimizations [ 110.966226][ T6199] BTRFS info (device loop1): max_inline at 4096 [ 110.979378][ T6199] BTRFS info (device loop1): disk space caching is enabled [ 111.049773][ T6199] BTRFS info (device loop1): auto enabling async discard [ 111.102182][ T6199] BTRFS info (device loop1): rebuilding free space tree [ 111.168220][ T6199] BTRFS info (device loop1): disabling free space tree [ 111.190332][ T6199] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.208317][ T6199] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.668192][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.776726][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 111.802284][ T6254] loop2: detected capacity change from 0 to 1024 [ 111.900603][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.919583][ T6254] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.038294][ T6254] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.146: lblock 3 mapped to illegal pblock 3 (length 13) [ 112.069239][ T6254] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 112.082685][ T6254] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.082685][ T6254] [ 112.114170][ T6260] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 112.154883][ T6260] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 112.184245][ T6262] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.283887][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.898095][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 113.258260][ T6280] loop0: detected capacity change from 0 to 32768 [ 113.265401][ T6301] loop2: detected capacity change from 0 to 4096 [ 113.416930][ T6303] ialloc: diAlloc returned -17! [ 113.712124][ T6305] macvlan2: entered allmulticast mode [ 113.735301][ T6305] veth1_vlan: entered allmulticast mode [ 113.799735][ T6305] veth1_vlan: left allmulticast mode [ 114.242817][ T6324] capability: warning: `syz.0.174' uses deprecated v2 capabilities in a way that may be insecure [ 114.257784][ T6325] loop1: detected capacity change from 0 to 512 [ 114.314110][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.390009][ T6325] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.568810][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.820024][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.019874][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 115.038627][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.056512][ T5883] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 115.085628][ T5883] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 115.119662][ T5883] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 115.139432][ T5883] usb 3-1: config 128 has no interface number 0 [ 115.156489][ T5883] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 115.178777][ T5883] usb 3-1: config 128 interface 127 has no altsetting 0 [ 115.199969][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 115.231126][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.239243][ T5883] usb 3-1: Product: syz [ 115.263051][ T5883] usb 3-1: Manufacturer: syz [ 115.267943][ T5883] usb 3-1: SerialNumber: syz [ 115.292896][ T6339] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.595313][ T5883] usb 3-1: USB disconnect, device number 5 [ 115.682632][ T6358] loop3: detected capacity change from 0 to 32768 [ 115.754189][ T6358] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.828908][ T6357] loop1: detected capacity change from 0 to 40427 [ 115.838795][ T6357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.876828][ T6357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.921000][ T6357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.937350][ T6358] syz.3.189 (6358) used greatest stack depth: 17680 bytes left [ 116.043859][ T6362] loop0: detected capacity change from 0 to 32768 [ 116.048973][ T6357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.054437][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 116.057800][ T6357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.088745][ T6362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (6362) [ 116.130522][ T6362] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.142553][ T6362] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 116.151507][ T6362] BTRFS info (device loop0): use zlib compression, level 3 [ 116.159230][ T6362] BTRFS info (device loop0): turning on sync discard [ 116.166231][ T6362] BTRFS info (device loop0): doing ref verification [ 116.174165][ T6362] BTRFS info (device loop0): disabling tree log [ 116.181595][ T6362] BTRFS info (device loop0): enabling tree log [ 116.188128][ T6362] BTRFS info (device loop0): enabling ssd optimizations [ 116.219798][ T6362] BTRFS info (device loop0): using spread ssd allocation scheme [ 116.227811][ T6362] BTRFS info (device loop0): not using ssd optimizations [ 116.280257][ T6362] BTRFS info (device loop0): not using spread ssd allocation scheme [ 116.298071][ T6362] BTRFS info (device loop0): using free space tree [ 116.471905][ T6385] loop3: detected capacity change from 0 to 8192 [ 116.501136][ T6385] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.530059][ T6385] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 116.539758][ T6385] REISERFS (device loop3): using ordered data mode [ 116.546499][ T6385] reiserfs: using flush barriers [ 116.576534][ T6390] loop2: detected capacity change from 0 to 1024 [ 116.581958][ T6385] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.603085][ T6385] REISERFS (device loop3): checking transaction log (loop3) [ 116.797672][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.835800][ T6385] REISERFS (device loop3): Using tea hash to sort names [ 116.853438][ T6385] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 117.246475][ T6394] warning: `syz.1.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.495965][ T6396] netlink: 'syz.1.200': attribute type 6 has an invalid length. [ 117.577375][ T6400] loop3: detected capacity change from 0 to 1024 [ 117.617404][ T6400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.826975][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.296302][ T6428] loop2: detected capacity change from 0 to 1024 [ 118.311152][ T6428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.348938][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.403450][ T5883] kernel read not supported for file /dsp1 (pid: 5883 comm: kworker/1:5) [ 118.584448][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.670191][ T6434] loop3: detected capacity change from 0 to 4096 [ 118.692474][ T6434] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 118.750726][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 118.765733][ T6434] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 119.308957][ T6446] loop0: detected capacity change from 0 to 4096 [ 119.447465][ T6452] loop1: detected capacity change from 0 to 4096 [ 119.479738][ T6457] mkiss: ax0: crc mode is auto. [ 119.761767][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 120.093977][ T6475] loop3: detected capacity change from 0 to 2048 [ 120.195172][ T6475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.313966][ T6465] loop0: detected capacity change from 0 to 32768 [ 120.340465][ T6475] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 120.386967][ T6465] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.411505][ T6475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 120.413806][ T6484] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.455005][ T48] (kworker/u4:3,48,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=648518346341351496, rec_len=0, name_len=0 [ 120.470532][ T6475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.470532][ T6475] [ 120.488034][ T6475] EXT4-fs (loop3): Total free blocks count 0 [ 120.494543][ T6475] EXT4-fs (loop3): Free/Dirty block details [ 120.506146][ T6475] EXT4-fs (loop3): free_blocks=4096 [ 120.514208][ T6475] EXT4-fs (loop3): dirty_blocks=64 [ 120.519706][ T6475] EXT4-fs (loop3): Block reservation details [ 120.526282][ T6475] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 120.580699][ T6465] (syz.0.228,6465,0):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 120.599096][ T6465] (syz.0.228,6465,0):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 120.687681][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 120.729094][ T6488] loop2: detected capacity change from 0 to 1024 [ 120.801902][ T6488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.400513][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.600670][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 121.622691][ T5883] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.641753][ T5883] usb 4-1: config 0 has no interface number 0 [ 121.668877][ T5883] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.690632][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.720628][ T5883] usb 4-1: Product: syz [ 121.724876][ T5883] usb 4-1: Manufacturer: syz [ 121.729593][ T5883] usb 4-1: SerialNumber: syz [ 121.773693][ T5883] usb 4-1: config 0 descriptor?? [ 121.792281][ T5883] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.021468][ T5883] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.060841][ T5883] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.071812][ T6506] loop0: detected capacity change from 0 to 32768 [ 122.101972][ T6504] loop2: detected capacity change from 0 to 40427 [ 122.131344][ T6504] F2FS-fs (loop2): invalid crc value [ 122.138814][ T6506] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.166047][ T6504] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.276113][ T6504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.412751][ T6506] XFS (loop0): Ending clean mount [ 122.439336][ T6506] XFS (loop0): Quotacheck needed: Please wait. [ 122.494697][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.495742][ T8] usb 4-1: USB disconnect, device number 2 [ 122.521810][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.547156][ T6529] loop1: detected capacity change from 0 to 8192 [ 122.584727][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.592313][ T6506] XFS (loop0): Quotacheck: Done. [ 122.610123][ T8] quatech2 4-1:0.51: device disconnected [ 122.614460][ T6529] loop1: p1 p3 p4 [ 122.626556][ T6529] loop1: p1 size 50333697 extends beyond EOD, truncated [ 122.637127][ T6529] loop1: p3 size 196608 extends beyond EOD, truncated [ 122.652130][ T6529] loop1: p4 size 524032 extends beyond EOD, truncated [ 122.819076][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.124479][ T6539] loop1: detected capacity change from 0 to 2048 [ 123.141091][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 123.171329][ T6542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.337146][ T6535] loop2: detected capacity change from 0 to 32768 [ 123.353981][ T6535] XFS: noikeep mount option is deprecated. [ 123.386375][ T6535] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.447371][ T6535] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 123.485606][ T6535] XFS (loop2): Starting recovery (logdev: internal) [ 123.516298][ T6535] XFS (loop2): Ending recovery (logdev: internal) [ 123.569121][ T28] audit: type=1800 audit(1754340617.496:48): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 123.672016][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.850089][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.864199][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 123.873820][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.882979][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 123.893953][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.906283][ T8] usb 2-1: config 0 descriptor?? [ 124.346737][ T6569] loop3: detected capacity change from 0 to 4096 [ 124.366488][ T6569] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.432282][ T8] hid (null): invalid report_size 41201 [ 124.439835][ T8] hid (null): unknown global tag 0xe [ 124.453033][ T8] hid (null): unknown global tag 0xe [ 124.475803][ T8] hid (null): bogus close delimiter [ 124.491834][ T6569] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 124.510728][ T6569] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 124.532906][ T6569] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 124.562085][ T6569] ntfs: volume version 3.1. [ 124.609015][ T8] usb 2-1: USB disconnect, device number 3 [ 124.708983][ T6576] loop0: detected capacity change from 0 to 8192 [ 124.743029][ T6576] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.771405][ T6576] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 124.782484][ T6576] REISERFS (device loop0): using ordered data mode [ 124.791891][ T6576] reiserfs: using flush barriers [ 124.799075][ T6576] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.817124][ T6576] REISERFS (device loop0): checking transaction log (loop0) [ 124.829665][ T6576] REISERFS (device loop0): Using r5 hash to sort names [ 124.837824][ T6576] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 124.862168][ T1083] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 124.895925][ T5788] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 125.218607][ T6590] sp0: Synchronizing with TNC [ 125.273680][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 125.408712][ T6598] loop0: detected capacity change from 0 to 128 [ 125.423620][ T6598] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 125.451552][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.570986][ T5883] kernel read not supported for file /dsp (pid: 5883 comm: kworker/1:5) [ 125.839071][ T6604] loop3: detected capacity change from 0 to 8192 [ 125.849474][ T6604] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.864460][ T6604] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 125.879757][ T6604] REISERFS (device loop3): using ordered data mode [ 125.887760][ T6604] reiserfs: using flush barriers [ 125.896093][ T6604] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.939489][ T6604] REISERFS (device loop3): checking transaction log (loop3) [ 125.967104][ T6604] REISERFS (device loop3): Using r5 hash to sort names [ 125.994889][ T6604] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 126.243833][ T6597] loop2: detected capacity change from 0 to 32768 [ 126.315281][ T6618] loop1: detected capacity change from 0 to 512 [ 126.327673][ T6597] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.374279][ T6597] XFS (loop2): Ending clean mount [ 126.382238][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.401257][ T6618] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.479569][ T6618] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 126.502110][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.838097][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.058909][ T6636] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 127.390382][ T6644] tap0: tun_chr_ioctl cmd 1074025681 [ 127.961042][ C1] sched: RT throttling activated [ 128.711524][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.870209][ T6666] loop0: detected capacity change from 0 to 4096 [ 128.911341][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 128.920074][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.949616][ T8] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 128.975186][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.988491][ T8] usb 2-1: Product: syz [ 128.992909][ T8] usb 2-1: Manufacturer: syz [ 128.997814][ T8] usb 2-1: SerialNumber: syz [ 129.027877][ T8] usb 2-1: config 0 descriptor?? [ 129.484644][ T6638] loop2: detected capacity change from 0 to 262144 [ 129.487315][ T8] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 129.512508][ T6638] F2FS-fs (loop2): invalid crc value [ 129.543790][ T6638] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.600066][ T6638] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.711074][ T6638] F2FS-fs (loop2): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 129.960807][ T5883] usb 2-1: USB disconnect, device number 4 [ 130.263740][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 130.963568][ T6701] loop3: detected capacity change from 0 to 2048 [ 131.043349][ T6702] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.418187][ T6702] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 131.454908][ T6702] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 131.492577][ T6702] Remounting filesystem read-only [ 131.511811][ T11] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 131.532659][ T11] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 131.553270][ T11] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 131.566556][ T11] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 131.576589][ T11] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 131.587593][ T11] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 131.597422][ T11] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 131.605440][ T11] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 131.620071][ T6716] loop2: detected capacity change from 0 to 128 [ 131.663409][ T11] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 131.670802][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.702023][ T6716] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.715159][ T11] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 131.722484][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.732210][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.732754][ T6716] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.741192][ T11] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 131.741250][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.771105][ T11] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 131.778526][ T11] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 131.786218][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.795462][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.804637][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.814261][ T11] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 131.821562][ T11] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 131.829033][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.838255][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.847766][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.857202][ T11] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 131.864111][ T11] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 131.871647][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.881241][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.890591][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.900139][ T5788] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 131.909286][ T5788] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 131.916544][ T5788] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 131.931033][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.954524][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.973265][ T5788] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 132.091284][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.196566][ T6726] loop6: detected capacity change from 0 to 524287999 [ 132.334265][ T6729] syzkaller0: tun_chr_ioctl cmd 35092 [ 133.260430][ T6767] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 133.358787][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.367230][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.419957][ T6773] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 134.494712][ T6801] loop2: detected capacity change from 0 to 64 [ 135.146260][ T6824] loop2: detected capacity change from 0 to 1024 [ 135.153904][ T6824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.214823][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.312229][ T6824] EXT4-fs (loop2): shut down requested (2) [ 135.411825][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.836151][ T6850] vivid-000: disconnect [ 135.856995][ T6848] vivid-000: reconnect [ 136.122120][ T28] audit: type=1326 audit(1754340630.045:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.2.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308518eb69 code=0x0 [ 136.337413][ T6847] loop3: detected capacity change from 0 to 32768 [ 136.353869][ T6847] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.362695][ T6847] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.389945][ T6847] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 136.434231][ T6847] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 137.131569][ T6880] netlink: 'syz.3.350': attribute type 9 has an invalid length. [ 137.148022][ T6880] bond_slave_0: entered promiscuous mode [ 137.154330][ T6880] bond_slave_1: entered promiscuous mode [ 137.160440][ T6880] macvlan2: entered promiscuous mode [ 137.166021][ T6880] bond0: entered promiscuous mode [ 137.173403][ T6880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.289609][ T6882] loop3: detected capacity change from 0 to 4096 [ 137.298070][ T6882] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 137.379341][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.574638][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.594958][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.605369][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.619345][ T27] usb 3-1: config 0 descriptor?? [ 137.629437][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 137.857011][ T6892] loop3: detected capacity change from 0 to 2048 [ 137.867240][ T6892] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 137.878085][ T6892] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 137.891185][ T6892] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 137.904716][ T6892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.044907][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.260410][ T27] pwc: recv_control_msg error -71 req 02 val 2c00 [ 138.273144][ T27] pwc: recv_control_msg error -71 req 04 val 1000 [ 138.283133][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 138.290186][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 138.298009][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 138.305822][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 138.321433][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.329077][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 138.336514][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 138.343711][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 138.352186][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 138.359395][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 138.368723][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 138.376064][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.387817][ T27] pwc: Registered as video103. [ 138.396861][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 138.415237][ T27] usb 3-1: USB disconnect, device number 6 [ 138.659877][ T6907] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.736715][ T6909] loop3: detected capacity change from 0 to 512 [ 138.759559][ T6909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.772704][ T6909] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.923411][ T6915] input: syz0 as /devices/virtual/input/input6 [ 138.978981][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.210840][ T6925] IPVS: length: 4096 != 8 [ 139.881434][ T6942] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 139.958911][ T6942] team0: Port device dummy0 added [ 140.119031][ T6940] loop3: detected capacity change from 0 to 40427 [ 140.135799][ T6940] F2FS-fs (loop3): invalid crc value [ 140.171387][ T6940] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.240576][ T6940] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.342592][ T5788] syz-executor: attempt to access beyond end of device [ 140.342592][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.366030][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 140.422321][ T6944] loop2: detected capacity change from 0 to 32768 [ 140.435594][ T6944] XFS: attr2 mount option is deprecated. [ 140.458852][ T6944] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 140.468350][ T6944] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.511201][ T6944] XFS (loop2): Ending clean mount [ 140.521836][ T6944] XFS (loop2): Quotacheck needed: Please wait. [ 140.577522][ T6944] XFS (loop2): Quotacheck: Done. [ 140.737991][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.960709][ T6960] loop2: detected capacity change from 0 to 256 [ 140.972534][ T6960] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.984657][ T6960] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 141.002211][ T6960] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 141.170966][ T6962] loop3: detected capacity change from 0 to 64 [ 141.235333][ T6962] syz.3.383: attempt to access beyond end of device [ 141.235333][ T6962] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 141.251489][ T6962] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 141.272007][ T6966] input: syz1 as /devices/virtual/input/input7 [ 141.472466][ T6972] loop3: detected capacity change from 0 to 1024 [ 141.508248][ T6974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.517767][ T6974] bond0: (slave bond1): Enslaving as an active interface with an up link [ 141.555335][ T6972] hfsplus: can't free extent [ 141.598564][ T6971] hfsplus: can't free extent [ 141.608477][ T6971] hfsplus: can't free extent [ 142.953303][ T55] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.134003][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 143.147206][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.158621][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.179705][ T55] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 143.189641][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.202573][ T55] usb 3-1: config 0 descriptor?? [ 143.370017][ T7012] loop3: detected capacity change from 0 to 2048 [ 143.387358][ T7012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.632595][ T55] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 143.862215][ T5856] usb 3-1: USB disconnect, device number 7 [ 144.277447][ T7029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 144.683450][ T7045] loop3: detected capacity change from 0 to 2048 [ 144.722477][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.751035][ T7045] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.835334][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.106296][ T7058] loop3: detected capacity change from 0 to 1024 [ 145.132552][ T7052] loop2: detected capacity change from 0 to 32768 [ 145.159760][ T7058] hfsplus: bad catalog entry type [ 145.202841][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 145.260729][ T7060] loop3: detected capacity change from 0 to 256 [ 145.270541][ T7060] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.281466][ T7060] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 145.321602][ T7060] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.657782][ T7070] loop2: detected capacity change from 0 to 512 [ 145.678421][ T7070] EXT4-fs: Ignoring removed orlov option [ 145.689596][ T7070] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 145.706942][ T7070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 145.722429][ T7070] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.431: corrupted in-inode xattr: e_value size too large [ 145.740602][ T7070] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.431: couldn't read orphan inode 15 (err -117) [ 145.759024][ T7070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.858757][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.917063][ T7074] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 146.013559][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.219774][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.234805][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.243016][ T5883] usb 4-1: Product: syz [ 146.252265][ T5883] usb 4-1: Manufacturer: syz [ 146.258674][ T5883] usb 4-1: SerialNumber: syz [ 146.279830][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.339862][ T55] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.564933][ T5856] usb 4-1: USB disconnect, device number 3 [ 147.445658][ T55] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 147.453302][ T55] ath9k_htc: Failed to initialize the device [ 147.480185][ T5856] usb 4-1: ath9k_htc: USB layer deinitialized [ 147.662759][ T7111] netlink: 884 bytes leftover after parsing attributes in process `syz.2.448'. [ 147.777069][ T7115] loop3: detected capacity change from 0 to 128 [ 147.794411][ T7115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.817870][ T7115] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.921505][ T5788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.802991][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.809495][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.250374][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.257464][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.250568][ T29] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 288.258246][ T29] Not tainted 6.6.101-syzkaller #0 [ 288.264924][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.273943][ T29] task:kworker/0:0 state:D stack:22416 pid:8 ppid:2 flags:0x00004000 [ 288.283327][ T29] Workqueue: events rfkill_global_led_trigger_worker [ 288.290415][ T29] Call Trace: [ 288.293848][ T29] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.296818][ T29] __schedule+0x14d2/0x44d0 [ 288.301518][ T29] ? lock_chain_count+0x20/0x20 [ 288.306828][ T29] ? preempt_schedule_common+0x82/0xc0 [ 288.315986][ T29] ? asan.module_dtor+0x20/0x20 [ 288.322004][ T29] ? preempt_schedule+0xab/0xc0 [ 288.326935][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.339019][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 288.361570][ T29] schedule+0xbd/0x170 [ 288.365834][ T29] schedule_preempt_disabled+0x13/0x20 [ 288.400224][ T29] __mutex_lock+0x6b7/0xcc0 [ 288.404862][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 288.409990][ T29] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 288.470165][ T29] ? mutex_lock_nested+0x20/0x20 [ 288.475482][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 288.509379][ T29] ? read_lock_is_recursive+0x20/0x20 [ 288.530219][ T29] ? process_scheduled_works+0x957/0x15b0 [ 288.536064][ T29] rfkill_global_led_trigger_worker+0x27/0xd0 [ 288.570232][ T29] ? process_scheduled_works+0x957/0x15b0 [ 288.576086][ T29] process_scheduled_works+0xa45/0x15b0 [ 288.610661][ T29] ? assign_work+0x400/0x400 [ 288.615657][ T29] ? assign_work+0x39e/0x400 [ 288.630254][ T29] worker_thread+0xa55/0xfc0 [ 288.635178][ T29] kthread+0x2fa/0x390 [ 288.639436][ T29] ? pr_cont_work+0x560/0x560 [ 288.660207][ T29] ? kthread_blkcg+0xd0/0xd0 [ 288.664913][ T29] ret_from_fork+0x48/0x80 [ 288.669394][ T29] ? kthread_blkcg+0xd0/0xd0 [ 288.690203][ T29] ret_from_fork_asm+0x11/0x20 [ 288.695277][ T29] [ 288.704229][ T29] INFO: task syz.0.313:6704 blocked for more than 143 seconds. [ 288.734520][ T29] Not tainted 6.6.101-syzkaller #0 [ 288.752885][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.770216][ T29] task:syz.0.313 state:D stack:25456 pid:6704 ppid:5785 flags:0x00004006 [ 288.800266][ T29] Call Trace: [ 288.803831][ T29] [ 288.806827][ T29] __schedule+0x14d2/0x44d0 [ 288.832677][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 288.838180][ T29] ? asan.module_dtor+0x20/0x20 [ 288.860340][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 288.865226][ T29] ? __mutex_trylock_common+0x84/0x250 [ 288.880229][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 288.888077][ T29] schedule+0xbd/0x170 [ 288.897043][ T29] schedule_preempt_disabled+0x13/0x20 [ 288.904575][ T29] __mutex_lock+0x6b7/0xcc0 [ 288.909522][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 288.919570][ T29] ? rfkill_unregister+0xc8/0x220 [ 288.926413][ T29] ? mutex_lock_nested+0x20/0x20 [ 288.936162][ T29] ? kill_device+0x160/0x160 [ 288.941185][ T29] ? nfc_genl_device_removed+0x22e/0x320 [ 288.946891][ T29] ? destroy_workqueue+0x898/0xf20 [ 288.959887][ T29] ? nfc_genl_setup_device_added+0x320/0x320 [ 288.966134][ T29] ? destroy_workqueue+0xd80/0xf20 [ 288.978028][ T29] ? destroy_workqueue+0x898/0xf20 [ 288.983454][ T29] rfkill_unregister+0xc8/0x220 [ 288.988392][ T29] nfc_unregister_device+0x96/0x2a0 [ 288.997709][ T29] ? virtual_ncidev_open+0x1a0/0x1a0 [ 289.003197][ T29] virtual_ncidev_close+0x59/0x90 [ 289.008360][ T29] __fput+0x234/0x970 [ 289.012741][ T29] task_work_run+0x1ce/0x250 [ 289.017425][ T29] ? task_work_cancel+0x240/0x240 [ 289.022646][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 289.028961][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 289.034577][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 289.039903][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 289.045945][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 289.051806][ T29] do_syscall_64+0x61/0xb0 [ 289.056618][ T29] ? clear_bhb_loop+0x40/0x90 [ 289.062767][ T29] ? clear_bhb_loop+0x40/0x90 [ 289.067821][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.073992][ T29] RIP: 0033:0x7f5feb58eb69 [ 289.078532][ T29] RSP: 002b:00007f5fec464038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.087195][ T29] RAX: ffffffffffffffea RBX: 00007f5feb7b5fa0 RCX: 00007f5feb58eb69 [ 289.095753][ T29] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 289.104090][ T29] RBP: 00007f5feb611df1 R08: 0000000000000000 R09: 0000000000000000 [ 289.112280][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.120603][ T29] R13: 0000000000000000 R14: 00007f5feb7b5fa0 R15: 00007ffd9e026368 [ 289.128836][ T29] [ 289.137839][ T29] INFO: task syz.1.314:6709 blocked for more than 144 seconds. [ 289.148187][ T29] Not tainted 6.6.101-syzkaller #0 [ 289.154547][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.164242][ T29] task:syz.1.314 state:D stack:25256 pid:6709 ppid:5789 flags:0x00004006 [ 289.174149][ T29] Call Trace: [ 289.177475][ T29] [ 289.180523][ T29] __schedule+0x14d2/0x44d0 [ 289.185255][ T29] ? asan.module_dtor+0x20/0x20 [ 289.190983][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 289.195822][ T29] ? __mutex_trylock_common+0x84/0x250 [ 289.201735][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.208300][ T29] schedule+0xbd/0x170 [ 289.212705][ T29] schedule_preempt_disabled+0x13/0x20 [ 289.219161][ T29] __mutex_lock+0x6b7/0xcc0 [ 289.224195][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 289.230373][ T29] ? nfc_rfkill_set_block+0x50/0x2e0 [ 289.237361][ T29] ? mutex_lock_nested+0x20/0x20 [ 289.243357][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 289.249365][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 289.255623][ T29] ? _raw_spin_unlock+0x40/0x40 [ 289.261158][ T29] ? nfc_unregister_device+0x2a0/0x2a0 [ 289.266745][ T29] nfc_rfkill_set_block+0x50/0x2e0 [ 289.272104][ T29] ? nfc_unregister_device+0x2a0/0x2a0 [ 289.277642][ T29] rfkill_set_block+0x1c6/0x420 [ 289.282662][ T29] rfkill_fop_write+0x45c/0x570 [ 289.288032][ T29] ? end_current_label_crit_section+0x149/0x170 [ 289.294499][ T29] ? rfkill_fop_read+0x4b0/0x4b0 [ 289.299718][ T29] ? fsnotify_perm+0x5d/0x5e0 [ 289.304625][ T29] ? security_file_permission+0x79/0xa0 [ 289.310466][ T29] ? rfkill_fop_read+0x4b0/0x4b0 [ 289.316275][ T29] vfs_write+0x288/0x940 [ 289.321121][ T29] ? file_end_write+0x250/0x250 [ 289.326090][ T29] ? __fget_files+0x28/0x4d0 [ 289.330868][ T29] ? __fget_files+0x44a/0x4d0 [ 289.336116][ T29] ? __fdget_pos+0x1d8/0x330 [ 289.341099][ T29] ? ksys_write+0x75/0x250 [ 289.345972][ T29] ksys_write+0x147/0x250 [ 289.350972][ T29] ? __ia32_sys_read+0x90/0x90 [ 289.356154][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 289.362001][ T29] do_syscall_64+0x55/0xb0 [ 289.366681][ T29] ? clear_bhb_loop+0x40/0x90 [ 289.372016][ T29] ? clear_bhb_loop+0x40/0x90 [ 289.377030][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.383334][ T29] RIP: 0033:0x7f27e158eb69 [ 289.387781][ T29] RSP: 002b:00007f27e2443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.396464][ T29] RAX: ffffffffffffffda RBX: 00007f27e17b5fa0 RCX: 00007f27e158eb69 [ 289.404642][ T29] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.412747][ T29] RBP: 00007f27e1611df1 R08: 0000000000000000 R09: 0000000000000000 [ 289.421108][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.429232][ T29] R13: 0000000000000000 R14: 00007f27e17b5fa0 R15: 00007ffc18686b88 [ 289.437468][ T29] [ 289.440809][ T29] [ 289.440809][ T29] Showing all locks held in the system: [ 289.448709][ T29] 3 locks held by kworker/0:0/8: [ 289.454155][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.465840][ T29] #1: ffffc900000d7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.479691][ T29] #2: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 289.491534][ T29] 1 lock held by khungtaskd/29: [ 289.496525][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 289.506777][ T29] 2 locks held by getty/5549: [ 289.511576][ T29] #0: ffff88802d84f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.521612][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 289.532444][ T29] 1 lock held by syz-executor/5786: [ 289.537804][ T29] #0: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc8/0x220 [ 289.548478][ T29] 1 lock held by syz.3.153/6278: [ 289.553595][ T29] #0: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc8/0x220 [ 289.564180][ T29] 2 locks held by syz.0.313/6704: [ 289.569465][ T29] #0: ffff888030d60100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 289.579485][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc8/0x220 [ 289.589870][ T29] 2 locks held by syz.1.314/6709: [ 289.595191][ T29] #0: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a2/0x570 [ 289.605794][ T29] #1: ffff888030d60100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 289.615771][ T29] 2 locks held by syz-executor/7086: [ 289.621146][ T29] #0: ffff88801e6e1918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.631922][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.642287][ T29] 2 locks held by syz-executor/7090: [ 289.648074][ T29] #0: ffff888024a03918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.659365][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.670304][ T29] 2 locks held by syz-executor/7126: [ 289.676173][ T29] #0: ffff88805cbbb118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.687165][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.697518][ T29] 2 locks held by syz-executor/7128: [ 289.703185][ T29] #0: ffff88807a35e118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.713791][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.724198][ T29] 2 locks held by syz-executor/7134: [ 289.729610][ T29] #0: ffff88807999d118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.739864][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.750570][ T29] 2 locks held by syz-executor/7136: [ 289.755891][ T29] #0: ffff88805c035118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 289.766986][ T29] #1: ffffffff8e296f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.777423][ T29] [ 289.779790][ T29] ============================================= [ 289.779790][ T29] [ 289.789698][ T29] NMI backtrace for cpu 0 [ 289.794106][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 289.802420][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.813381][ T29] Call Trace: [ 289.817381][ T29] [ 289.820679][ T29] dump_stack_lvl+0x16c/0x230 [ 289.825691][ T29] ? preempt_count_add+0x91/0x1a0 [ 289.830975][ T29] ? show_regs_print_info+0x20/0x20 [ 289.836477][ T29] ? load_image+0x3b0/0x3b0 [ 289.841255][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 289.846619][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 289.854589][ T29] ? _printk+0xd0/0x110 [ 289.859242][ T29] ? load_image+0x3b0/0x3b0 [ 289.863912][ T29] ? load_image+0x3b0/0x3b0 [ 289.868562][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 289.875349][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 289.881838][ T29] watchdog+0xf41/0xf80 [ 289.886460][ T29] ? watchdog+0x1e1/0xf80 [ 289.891003][ T29] kthread+0x2fa/0x390 [ 289.895449][ T29] ? hungtask_pm_notify+0x90/0x90 [ 289.901151][ T29] ? kthread_blkcg+0xd0/0xd0 [ 289.905758][ T29] ret_from_fork+0x48/0x80 [ 289.910314][ T29] ? kthread_blkcg+0xd0/0xd0 [ 289.915061][ T29] ret_from_fork_asm+0x11/0x20 [ 289.919970][ T29] [ 289.923377][ T29] Sending NMI from CPU 0 to CPUs 1: [ 289.928872][ C1] NMI backtrace for cpu 1 [ 289.928889][ C1] CPU: 1 PID: 1094 Comm: kworker/u4:7 Not tainted 6.6.101-syzkaller #0 [ 289.928905][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.928915][ C1] Workqueue: events_unbound toggle_allocation_gate [ 289.928946][ C1] RIP: 0010:static_key_disable+0x0/0x20 [ 289.928970][ C1] Code: e1 2a 00 e9 ee fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 ff ff ff 48 89 df e8 1a e1 2a 00 e9 46 ff ff ff 0f 1f 44 00 00 0f 1e fa 53 48 89 fb e8 23 9b d3 ff e8 0e 32 9e ff 48 89 df e8 [ 289.928984][ C1] RSP: 0018:ffffc900044ffad8 EFLAGS: 00000293 [ 289.928996][ C1] RAX: ffffffff81dd3309 RBX: 0000000000000001 RCX: ffff888023600000 [ 289.929008][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff96f104a0 [ 289.929018][ C1] RBP: ffffc900044ffbb0 R08: 0000000000000003 R09: 0000000000000004 [ 289.929028][ C1] R10: dffffc0000000000 R11: fffffbfff19c5a64 R12: 1ffff9200089ff5c [ 289.929039][ C1] R13: dffffc0000000000 R14: ffffffff8157c3c7 R15: dffffc0000000000 [ 289.929051][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 289.929064][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.929075][ C1] CR2: 00007fda810e4de0 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 289.929089][ C1] Call Trace: [ 289.929094][ C1] [ 289.929100][ C1] toggle_allocation_gate+0x1b0/0x250 [ 289.929127][ C1] ? show_object+0x70/0x70 [ 289.929150][ C1] ? read_lock_is_recursive+0x20/0x20 [ 289.929173][ C1] ? process_scheduled_works+0x957/0x15b0 [ 289.929194][ C1] ? process_scheduled_works+0x957/0x15b0 [ 289.929213][ C1] process_scheduled_works+0xa45/0x15b0 [ 289.929248][ C1] ? assign_work+0x400/0x400 [ 289.929270][ C1] ? assign_work+0x39e/0x400 [ 289.929292][ C1] worker_thread+0xa55/0xfc0 [ 289.929311][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 289.929337][ C1] ? _raw_spin_unlock+0x40/0x40 [ 289.929360][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 289.929396][ C1] kthread+0x2fa/0x390 [ 289.929410][ C1] ? pr_cont_work+0x560/0x560 [ 289.929429][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.929443][ C1] ret_from_fork+0x48/0x80 [ 289.929462][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.929477][ C1] ret_from_fork_asm+0x11/0x20 [ 289.929507][ C1] [ 289.931202][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 289.931218][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 289.931240][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.931254][ T29] Call Trace: [ 289.931263][ T29] [ 289.931273][ T29] dump_stack_lvl+0x16c/0x230 [ 289.931308][ T29] ? show_regs_print_info+0x20/0x20 [ 289.931335][ T29] ? load_image+0x3b0/0x3b0 [ 289.931385][ T29] panic+0x2c0/0x710 [ 289.931415][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 289.931449][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 289.931479][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 289.931510][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 289.931547][ T29] watchdog+0xf80/0xf80 [ 289.931576][ T29] ? watchdog+0x1e1/0xf80 [ 289.931612][ T29] kthread+0x2fa/0x390 [ 289.931633][ T29] ? hungtask_pm_notify+0x90/0x90 [ 289.931662][ T29] ? kthread_blkcg+0xd0/0xd0 [ 289.931683][ T29] ret_from_fork+0x48/0x80 [ 289.931709][ T29] ? kthread_blkcg+0xd0/0xd0 [ 289.931730][ T29] ret_from_fork_asm+0x11/0x20 [ 289.931775][ T29] [ 289.934997][ T29] Kernel Offset: disabled [ 290.275898][ T29] Rebooting in 86400 seconds..