last executing test programs: 3.453474517s ago: executing program 0 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x800) 3.356139924s ago: executing program 0 (id=806): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x143042, 0x8c) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) 3.072454316s ago: executing program 1 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f00000005c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x75, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x61, 0x0, @wg=@data={0x4, 0x9, 0x8000, "b8c5c404724f7316e625306c3090284c291aed4b243cdbd83f0c22fde7551ba420e0c6e4bb9656748a3a86cfff2ae3a14128a21aba6a0171464e91508be49bec4409a9740ddccd53f9"}}}}}}, 0x0) 2.851870418s ago: executing program 1 (id=812): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.617003792s ago: executing program 0 (id=814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 2.615673974s ago: executing program 1 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.364016677s ago: executing program 1 (id=817): socket$inet6(0xa, 0x2, 0x20000000) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") pselect6(0x40, &(0x7f0000000080)={0x2, 0x7, 0x7fff, 0x3, 0x9, 0x6, 0x8c95, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000080)={0x1, 0x300}) 2.221395844s ago: executing program 0 (id=819): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='shortname=mixed,usefree,iocharset=cp737,codepage=1250,check=normal,shortname=win95,rodir,shortname=winnt,ufi_xlate=0,iocharset=macromanian,codepage=932,utf8=1,shortname=mixed,nonumtail=0,uni_xlate=1,utf8=0,shortname=lower,\x00'], 0xfd, 0x2a8, &(0x7f0000000240)="$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") syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.122085391s ago: executing program 4 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x6}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 2.057642583s ago: executing program 4 (id=823): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)='\b', 0x1}, {&(0x7f0000001480)="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", 0x101}], 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.93587545s ago: executing program 4 (id=825): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 1.752336791s ago: executing program 4 (id=829): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r0, &(0x7f0000000000), 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 1.484325418s ago: executing program 2 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.483188998s ago: executing program 4 (id=832): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x8, 0xc, 0x0, 0x0, 0x80000000, 0x4}) 1.387523042s ago: executing program 3 (id=833): io_setup(0x7, &(0x7f0000000280)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT]) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x42, 0x216) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 1.275941753s ago: executing program 2 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000580)={0x7, 0x6000, 0x9, 0x9}) 1.055246228s ago: executing program 1 (id=835): r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000b00)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000b40)=0x40000018) 923.98095ms ago: executing program 3 (id=836): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 920.478618ms ago: executing program 2 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1000000000000029, 0x0, [{0x40000093, 0x0, 0x4002}]}) 699.381824ms ago: executing program 3 (id=838): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000001540)=[{&(0x7f00000004c0)="3751f02b82f73ccfc7c43161c4ff26fa3893119fd147a1576d9456136ab5f15493", 0x21}, {&(0x7f0000000500)="d3e8a24fba584651e415a77c020235", 0xf}], 0x2) 695.539361ms ago: executing program 2 (id=839): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0xb, 0x8, 0x6, 0x8, 0x100802, 0x5}) 493.588921ms ago: executing program 3 (id=840): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @remote, 0x80000001}, 0x1c) 427.767775ms ago: executing program 2 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x483, 0x0, 0x8000000000000001}]}) 422.238557ms ago: executing program 0 (id=842): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="060000"], 0x50) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00), 0x6000}, {&(0x7f0000001cc0)="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", 0x192}, {0x0}, {0x0}, {&(0x7f0000001e80)="1679c98357b6294679b45dac19ffee9a12bec86bf722e0f5fe8109dedde67afa6fb2c50395312b4b14b9a3e357cf93f4958ba63aab925daef4a74f1ab0f984a9e5c3ff2d5fff0d90f60cdcbb5793cff25656584db85d70e52e9a0b1b4ca37c99ce544b8e0bf72cdb3d8abf22bd0c21120b9be60f59ae0d111d56b9a65fda31ba8bde49d572efc8e4f901700f13d785dc4b873195a9b873846067134950acc84d608c7aa118778e0c37159045350895d99088504fc46d32ede3d82f1d0683f0fb51af28a3d0066869dd853fe91bbe45da1c4a", 0xd2}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 349.132252ms ago: executing program 0 (id=843): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x3, 0xfffe}, {0x4, 0x8}], 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r0, 0x3, 0xe, 0x0) 347.629244ms ago: executing program 3 (id=844): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000080)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@fat=@debug}, {@shortname_winnt}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@shortname_win95}, {@fat=@quiet}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") read$rfkill(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 301.995564ms ago: executing program 4 (id=845): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 255.123608ms ago: executing program 3 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010}) close(r1) 191.144821ms ago: executing program 2 (id=847): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x255, &(0x7f0000000580)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b431e1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec118b233cce7e4a1e49738d9679d33610ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6762c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8542e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8508002e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928ff0100000000000095adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b6ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c303cf786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) 0s ago: executing program 1 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-# 3 -4\n', 0x9) kernel console output (not intermixed with test programs): ? reacquire_held_locks+0x117/0x1a0 [ 85.536280][ T1022] ? writeback_sb_inodes+0x450/0x1af0 [ 85.536311][ T1022] __writeback_single_inode+0x136/0x1220 [ 85.536340][ T1022] ? do_raw_spin_unlock+0xf5/0x200 [ 85.536370][ T1022] writeback_sb_inodes+0x9de/0x1af0 [ 85.536394][ T1022] ? __lock_acquire+0x747/0x2de0 [ 85.536436][ T1022] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 85.536503][ T1022] ? rcu_is_watching+0x16/0xb0 [ 85.536526][ T1022] ? queue_io+0x2d3/0x470 [ 85.536561][ T1022] wb_writeback+0x41c/0xad0 [ 85.536589][ T1022] ? queue_io+0x1f1/0x470 [ 85.536620][ T1022] ? __pfx_wb_writeback+0x10/0x10 [ 85.536642][ T1022] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.536688][ T1022] wb_workfn+0x431/0x10f0 [ 85.536728][ T1022] ? __pfx_wb_workfn+0x10/0x10 [ 85.536755][ T1022] ? trace_hrtimer_start+0x82/0x200 [ 85.536779][ T1022] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.536813][ T1022] ? lock_acquire+0x115/0x350 [ 85.536841][ T1022] ? rcu_is_watching+0x16/0xb0 [ 85.536865][ T1022] ? process_scheduled_works+0x97a/0x1630 [ 85.536890][ T1022] process_scheduled_works+0xc3d/0x1630 [ 85.536944][ T1022] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.536973][ T1022] ? assign_work+0x3cf/0x5d0 [ 85.537002][ T1022] worker_thread+0xa47/0xfb0 [ 85.537039][ T1022] ? __kthread_parkme+0x71/0x1f0 [ 85.537073][ T1022] kthread+0x38b/0x480 [ 85.537091][ T1022] ? __pfx_worker_thread+0x10/0x10 [ 85.537114][ T1022] ? __pfx_kthread+0x10/0x10 [ 85.537133][ T1022] ret_from_fork+0x514/0xb70 [ 85.537154][ T1022] ? __pfx_ret_from_fork+0x10/0x10 [ 85.537172][ T1022] ? __switch_to+0xc78/0x1410 [ 85.537199][ T1022] ? __pfx_kthread+0x10/0x10 [ 85.537218][ T1022] ret_from_fork_asm+0x1a/0x30 [ 85.537251][ T1022] [ 85.548161][ T1022] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 85.617640][ T5612] usb 4-1: Using ep0 maxpacket: 16 [ 85.625197][ T5612] usb 4-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 85.635320][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 85.647313][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.647338][ T5612] usb 4-1: Product: syz [ 85.647351][ T5612] usb 4-1: Manufacturer: syz [ 85.647364][ T5612] usb 4-1: SerialNumber: syz [ 85.667949][ T5612] usb 4-1: config 0 descriptor?? [ 85.688213][ T5612] hub 4-1:0.0: bad descriptor, ignoring hub [ 85.688238][ T5612] hub 4-1:0.0: probe with driver hub failed with error -5 [ 85.804876][ T5940] loop4: detected capacity change from 0 to 32768 [ 85.819751][ T5612] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.834642][ T5940] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.30 (5940) [ 85.921754][ T5940] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.921787][ T5940] BTRFS info (device loop4): using blake2b checksum algorithm [ 86.095468][ T5940] BTRFS info (device loop4): enabling ssd optimizations [ 86.095501][ T5940] BTRFS info (device loop4): turning on async discard [ 86.095517][ T5940] BTRFS info (device loop4): enabling free space tree [ 86.095549][ T5940] BTRFS info (device loop4): use zstd compression, level 3 [ 86.205579][ T5940] ======================================================= [ 86.205579][ T5940] WARNING: The mand mount option has been deprecated and [ 86.205579][ T5940] and is ignored by this kernel. Remove the mand [ 86.205579][ T5940] option from the mount to silence this warning. [ 86.205579][ T5940] ======================================================= [ 86.270759][ T5612] usb 4-1: USB disconnect, device number 6 [ 86.394108][ T5605] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.855174][ T193] cfg80211: failed to load regulatory.db [ 86.910122][ T6002] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.039301][ T5974] loop0: detected capacity change from 0 to 40427 [ 87.042287][ T5974] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 87.042314][ T5974] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.072146][ T5974] F2FS-fs (loop0): build fault injection rate: 2 [ 87.072167][ T5974] F2FS-fs (loop0): build fault injection type: 0x1f8 [ 87.095068][ T5974] F2FS-fs (loop0): invalid crc value [ 87.443446][ T5974] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 87.464705][ T5974] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.464733][ T5974] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.477305][ T6015] loop4: detected capacity change from 0 to 1024 [ 87.534636][ T6015] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 87.534835][ T6015] System zones: 0-1, 3-12 [ 87.576146][ T6015] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.630705][ T6015] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 87.688112][ T6012] loop3: detected capacity change from 0 to 32768 [ 87.780996][ T6012] JBD2: Ignoring recovery information on journal [ 87.833333][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 88.027331][ T6012] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.535627][ T5603] ocfs2: Unmounting device (7,3) on (node local) [ 88.823757][ T6037] mmap: syz.2.52 (6037) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.847151][ T6028] loop4: detected capacity change from 0 to 32768 [ 88.994601][ T6028] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 89.119353][ T6028] XFS (loop4): Ending clean mount [ 89.351989][ T5605] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 90.087102][ T6069] loop2: detected capacity change from 0 to 256 [ 90.094408][ T6069] exfat: Deprecated parameter 'namecase' [ 90.138575][ T6069] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 90.505931][ T6071] loop4: detected capacity change from 0 to 32768 [ 90.569204][ T6071] JBD2: Ignoring recovery information on journal [ 90.701340][ T6071] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.829150][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 90.892527][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.983555][ T5605] ocfs2: Unmounting device (7,4) on (node local) [ 91.345335][ T6102] loop0: detected capacity change from 0 to 512 [ 91.350141][ T6102] EXT4-fs: Ignoring removed bh option [ 91.388632][ T6102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002] [ 91.398520][ T6102] System zones: 1-12 [ 91.423046][ T6102] EXT4-fs (loop0): 1 truncate cleaned up [ 91.438772][ T6102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.561124][ T6102] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz.0.72: invalid fast symlink length 39 [ 91.592888][ T6102] EXT4-fs (loop0): Remounting filesystem read-only [ 91.726264][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.747495][ T6093] loop4: detected capacity change from 0 to 32768 [ 91.814136][ T6093] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.932593][ T6093] XFS (loop4): Ending clean mount [ 92.026538][ T6115] loop2: detected capacity change from 0 to 4096 [ 92.028072][ T6115] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.033418][ T6115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.033440][ T6115] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.096515][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 92.109774][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.235723][ T5605] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.399625][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.497100][ T6128] ip_tables: iptables: counters copy to user failed while replacing table [ 92.530009][ T6128] ip_tables: iptables: counters copy to user failed while replacing table [ 92.723302][ T6136] loop4: detected capacity change from 0 to 512 [ 92.740170][ T6136] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 92.740189][ T6136] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.842316][ T6136] EXT4-fs (loop4): 1 orphan inode deleted [ 92.863153][ T84] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.863315][ T84] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1 [ 92.863335][ T84] loop4: lost filesystem error report for type 5 error -117 [ 92.892869][ T6136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.895432][ T6136] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.927823][ T6136] EXT4-fs (loop4): shut down requested (2) [ 92.984795][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.196167][ T6147] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.338599][ T6143] loop0: detected capacity change from 0 to 40427 [ 93.346656][ T6143] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 93.346680][ T6143] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.352568][ T6143] F2FS-fs (loop0): invalid crc value [ 93.353182][ T6143] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 93.424831][ T6126] loop3: detected capacity change from 0 to 32768 [ 93.430136][ T6126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.80 (6126) [ 93.490678][ T6126] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.490711][ T6126] BTRFS info (device loop3): using crc32c checksum algorithm [ 93.513861][ T33] audit: type=1807 audit(1792092160.376:2): func=FILE_CHECK res=0 [ 93.538696][ T33] audit: type=1802 audit(1792092160.406:3): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.91" res=0 errno=-22 [ 93.541198][ T6156] ima: policy update failed [ 93.542555][ T33] audit: type=1802 audit(1792092160.406:4): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.91" res=0 errno=-22 [ 93.543670][ T6159] kAFS: bad VL server IP address [ 93.574416][ T6143] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 93.608997][ T6143] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.609025][ T6143] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.663864][ T6126] BTRFS info (device loop3): setting nodatasum [ 93.663890][ T6126] BTRFS info (device loop3): enabling ssd optimizations [ 93.663906][ T6126] BTRFS info (device loop3): disabling tree log [ 93.663921][ T6126] BTRFS info (device loop3): enabling free space tree [ 93.663936][ T6126] BTRFS info (device loop3): enabling auto defrag [ 93.663952][ T6126] BTRFS info (device loop3): use zlib compression, level 3 [ 93.739693][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739732][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739756][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739780][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739805][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739828][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739853][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739876][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739898][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.739921][ T5754] logitech-hidpp-device 0003:046D:C082.0002: unknown main item tag 0x0 [ 93.757290][ T5754] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 93.760628][ T33] audit: type=1800 audit(1792092160.626:5): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="file1" dev="loop3" ino=260 res=0 errno=-22 [ 93.771602][ T5617] syz-executor: attempt to access beyond end of device [ 93.771602][ T5617] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.793804][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 93.793835][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.793846][ T5617] Call Trace: [ 93.793854][ T5617] [ 93.793861][ T5617] dump_stack_lvl+0xe8/0x150 [ 93.793898][ T5617] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 93.793933][ T5617] f2fs_write_end_bio+0x118e/0x15d0 [ 93.793974][ T5617] __submit_merged_bio+0x258/0x6a0 [ 93.794000][ T5617] ? rcu_is_watching+0x16/0xb0 [ 93.794028][ T5617] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 93.794058][ T5617] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 93.794107][ T5617] f2fs_write_data_pages+0x2a13/0x36e0 [ 93.794163][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 93.794181][ T5617] ? is_bpf_text_address+0x26/0x2b0 [ 93.794218][ T5617] ? arch_stack_walk+0xfb/0x150 [ 93.794267][ T5617] ? add_lock_to_list+0xc7/0x100 [ 93.794292][ T5617] ? lockdep_unlock+0x5c/0xd0 [ 93.794307][ T5617] ? __lock_acquire+0x1511/0x2de0 [ 93.794353][ T5617] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.794389][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 93.794413][ T5617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 93.794434][ T5617] do_writepages+0x338/0x560 [ 93.794469][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 93.794498][ T5617] filemap_fdatawrite+0x1e9/0x2f0 [ 93.794533][ T5617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 93.794602][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 93.794631][ T5617] f2fs_sync_dirty_inodes+0x471/0x970 [ 93.794668][ T5617] f2fs_write_checkpoint+0x860/0x24d0 [ 93.794724][ T5617] kill_f2fs_super+0x2dc/0x700 [ 93.794750][ T5617] ? rcu_do_enqueue+0x616/0x870 [ 93.794769][ T5617] ? lockdep_hardirqs_on+0x7b/0x110 [ 93.794790][ T5617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 93.794827][ T5617] ? __pfx_call_rcu+0x10/0x10 [ 93.794855][ T5617] ? shrinker_free+0x2a7/0x3b0 [ 93.794883][ T5617] deactivate_locked_super+0xbe/0x110 [ 93.794913][ T5617] cleanup_mnt+0x204/0x2a0 [ 93.794939][ T5617] task_work_run+0x1d9/0x260 [ 93.794962][ T5617] ? __pfx_task_work_run+0x10/0x10 [ 93.794991][ T5617] exit_to_user_mode_loop+0x204/0x770 [ 93.795014][ T5617] ? rcu_is_watching+0x16/0xb0 [ 93.795041][ T5617] do_syscall_64+0x328/0x520 [ 93.795060][ T5617] ? trace_irq_disable+0x3b/0x140 [ 93.795080][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.795098][ T5617] ? clear_bhb_loop+0x70/0xc0 [ 93.795120][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.795138][ T5617] RIP: 0033:0x7f3df7f9f797 [ 93.795177][ T5617] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 93.795193][ T5617] RSP: 002b:00007ffefe91b158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.795212][ T5617] RAX: 0000000000000000 RBX: 00007f3df8034cf3 RCX: 00007f3df7f9f797 [ 93.795225][ T5617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefe91b210 [ 93.795236][ T5617] RBP: 00007ffefe91b210 R08: 00007ffefe91c210 R09: 00000000ffffffff [ 93.795248][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffefe91c2a0 [ 93.795259][ T5617] R13: 00007f3df8034cf3 R14: 0000000000016dfd R15: 00007ffefe91c2e0 [ 93.795289][ T5617] [ 93.807237][ T5617] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 93.867043][ T2251] loop0: lost filesystem error report for type 5 error -108 [ 94.176233][ T6177] fido_id[6177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.480116][ T5603] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.884137][ T6202] ip_tables: iptables: counters copy to user failed while replacing table [ 95.072476][ T6208] tun0: tun_chr_ioctl cmd 1074025680 [ 95.228752][ T6214] input: syz1 as /devices/virtual/input/input7 [ 95.328086][ T6197] loop2: detected capacity change from 0 to 32768 [ 95.353870][ T6197] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.471230][ T6197] XFS (loop2): Ending clean mount [ 95.635678][ T5602] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.922764][ T6241] kAFS: Invalid Command on /proc/fs/afs/cells file [ 96.235836][ T6233] loop3: detected capacity change from 0 to 32768 [ 96.298968][ T6233] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.426654][ T6233] XFS (loop3): Ending clean mount [ 96.492486][ T6236] loop4: detected capacity change from 0 to 32768 [ 96.515107][ T6236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.116 (6236) [ 96.561991][ T6236] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.562026][ T6236] BTRFS info (device loop4): using crc32c checksum algorithm [ 96.706204][ T5603] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.744795][ T6236] BTRFS info (device loop4): enabling ssd optimizations [ 96.744823][ T6236] BTRFS info (device loop4): turning on async discard [ 96.744839][ T6236] BTRFS info (device loop4): enabling free space tree [ 96.761483][ T10] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 96.860724][ T6236] BTRFS critical (device loop4 state EH): emergency shutdown [ 96.949666][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.022631][ T5605] BTRFS info (device loop4 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.435307][ T6288] loop2: detected capacity change from 0 to 256 [ 97.511531][ T6288] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 97.596818][ T6288] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 97.640010][ T6298] i2c i2c-0: new_device: Can't parse I2C address [ 98.049633][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 98.174352][ T6319] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 98.253056][ T6318] loop1: detected capacity change from 0 to 2048 [ 98.361696][ T6318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.547973][ T6327] loop0: detected capacity change from 0 to 1024 [ 98.692917][ T6327] hfsplus: invalid length 1280 has been corrected to 255 [ 98.763561][ T6332] nfsd: exp_rootfh path not found \ [ 99.202688][ T6346] loop2: detected capacity change from 0 to 512 [ 99.209138][ T1022] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.212020][ T1022] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.277494][ T6346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 99.277646][ T6346] System zones: 1-12 [ 99.283229][ T6346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.153: missing EA_INODE flag [ 99.283459][ T6346] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 99.294992][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.295015][ C0] EXT4-fs (loop2): initial error at time 1792092166: ext4_xattr_inode_iget:437: inode 12 [ 99.295043][ C0] EXT4-fs (loop2): last error at time 1792092166: ext4_xattr_inode_iget:437: inode 12 [ 99.297736][ T6346] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.153: error while reading EA inode 12 err=-117 [ 99.297762][ T6346] loop2: lost filesystem error report for type 5 error -117 [ 99.299003][ T6346] EXT4-fs (loop2): 1 orphan inode deleted [ 99.306896][ T6346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.336597][ T6346] fscrypt (loop2, inode 15): Mutually exclusive encryption flags (0x1a) [ 99.426288][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.567569][ T6354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.766912][ T6365] process 'syz.3.161' launched './file2' with NULL argv: empty string added [ 100.252989][ T6382] loop4: detected capacity change from 0 to 4096 [ 100.297008][ T6382] ntfs3(loop4): ino=0, mi_enum_attr [ 100.341305][ T6382] ntfs3(loop4): ino=0, mi_enum_attr [ 100.341353][ T6382] ntfs3(loop4): ino=0, mi_enum_attr [ 100.472998][ T6382] ntfs3(loop4): failed to convert "0080" to cp864 [ 100.501528][ T6382] ntfs3(loop4): ino=1e, mi_enum_attr [ 100.501907][ T6382] ntfs3(loop4): ino=1f, mi_enum_attr [ 100.502123][ T6382] ntfs3(loop4): ino=1f, mi_enum_attr [ 100.540108][ T6378] loop2: detected capacity change from 0 to 32768 [ 100.685597][ T33] audit: type=1800 audit(1792092167.546:6): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.167" name="bus" dev="loop2" ino=7 res=0 errno=-22 [ 100.687231][ T5606] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.837949][ T5606] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.847662][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.854114][ T5606] usb 4-1: config 0 descriptor?? [ 100.864647][ T5606] cp210x 4-1:0.0: cp210x converter detected [ 100.998068][ T6398] loop4: detected capacity change from 0 to 32768 [ 101.011757][ T6398] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.177 (6398) [ 101.035249][ T6398] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.035280][ T6398] BTRFS info (device loop4): using crc32c checksum algorithm [ 101.149684][ T6398] BTRFS info (device loop4): setting nodatasum [ 101.149710][ T6398] BTRFS info (device loop4): setting nodatacow [ 101.149725][ T6398] BTRFS info (device loop4): enabling ssd optimizations [ 101.149740][ T6398] BTRFS info (device loop4): turning on flush-on-commit [ 101.149755][ T6398] BTRFS info (device loop4): turning on async discard [ 101.149793][ T6398] BTRFS info (device loop4): enabling free space tree [ 101.225146][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 101.225260][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.456663][ T6423] ublk_ctrl_add_dev: dev id not match 4294967295 65536 [ 101.497344][ T5606] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 101.497407][ T5606] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 101.583787][ T5606] usb 4-1: cp210x converter now attached to ttyUSB0 [ 101.593361][ T6400] loop0: detected capacity change from 0 to 32768 [ 101.605916][ T5606] usb 4-1: USB disconnect, device number 7 [ 101.606744][ T5605] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.927434][ T5606] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.959668][ T5606] cp210x 4-1:0.0: device disconnected [ 102.030406][ T6433] tipc: Started in network mode [ 102.030440][ T6433] tipc: Node identity ac14140f, cluster identity 4711 [ 102.032174][ T6433] tipc: New replicast peer: 255.255.255.255 [ 102.034356][ T6433] tipc: Enabled bearer , priority 10 [ 102.324360][ T6439] loop0: detected capacity change from 0 to 1024 [ 102.383098][ T6439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.402320][ T5610] Bluetooth: hci4: hardware error 0x04 [ 103.157338][ T193] tipc: Node number set to 2886997007 [ 103.808821][ T6478] loop4: detected capacity change from 0 to 256 [ 103.812467][ T6478] exfat: Deprecated parameter 'namecase' [ 103.843912][ T6478] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 103.927172][ T6473] loop3: detected capacity change from 0 to 32768 [ 103.932263][ T6473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.201 (6473) [ 103.980100][ T6473] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.980137][ T6473] BTRFS info (device loop3): using crc32c checksum algorithm [ 103.988132][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.020454][ T6471] loop1: detected capacity change from 0 to 32768 [ 104.101671][ T6471] JBD2: Ignoring recovery information on journal [ 104.156623][ T6473] BTRFS info (device loop3): enabling ssd optimizations [ 104.156651][ T6473] BTRFS info (device loop3): turning on async discard [ 104.156665][ T6473] BTRFS info (device loop3): enabling free space tree [ 104.224125][ T6471] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.292147][ T6473] capability: warning: `syz.3.201' uses deprecated v2 capabilities in a way that may be insecure [ 104.362247][ T5603] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.459891][ T5604] ocfs2: Unmounting device (7,1) on (node local) [ 104.507330][ T5610] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 105.015190][ T6522] netlink: 104 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.665091][ T973] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.821558][ T973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.821611][ T973] usb 4-1: New USB device found: idVendor=17ef, idProduct=60b5, bcdDevice=0.40 [ 105.822669][ T973] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.854655][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.854682][ T973] usb 4-1: Product: syz [ 105.854695][ T973] usb 4-1: Manufacturer: syz [ 105.854709][ T973] usb 4-1: SerialNumber: syz [ 105.888358][ T6533] loop0: detected capacity change from 0 to 32768 [ 105.950685][ T6533] JBD2: Ignoring recovery information on journal [ 106.101179][ T6533] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.182934][ T973] usbhid 4-1:1.0: can't add hid device: -71 [ 106.183046][ T973] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 106.204579][ T973] usb 4-1: USB disconnect, device number 8 [ 106.209751][ T6540] loop4: detected capacity change from 0 to 40427 [ 106.300098][ T6540] F2FS-fs (loop4): invalid crc value [ 106.594289][ T6540] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.598838][ T6540] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 106.598863][ T6540] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 106.598887][ T6540] F2FS-fs (loop4): Start checkpoint disabled! [ 106.603487][ T6540] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 106.608812][ T6540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 106.651528][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 106.659388][ T5606] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.815793][ T5606] usb 3-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 106.818558][ T5606] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 106.821754][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.821779][ T5606] usb 3-1: Product: syz [ 106.821792][ T5606] usb 3-1: Manufacturer: syz [ 106.821805][ T5606] usb 3-1: SerialNumber: syz [ 106.875170][ T6547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.899119][ T51] kworker/u8:3: attempt to access beyond end of device [ 106.899119][ T51] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 106.899189][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 106.899210][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.899221][ T51] Workqueue: writeback wb_workfn (flush-7:4) [ 106.899245][ T51] Call Trace: [ 106.899250][ T51] [ 106.899255][ T51] dump_stack_lvl+0xe8/0x150 [ 106.899272][ T51] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 106.899297][ T51] f2fs_write_end_bio+0x118e/0x15d0 [ 106.899337][ T51] __submit_merged_bio+0x258/0x6a0 [ 106.899364][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.899394][ T51] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 106.899411][ T51] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 106.899440][ T51] f2fs_write_data_pages+0x2a13/0x36e0 [ 106.899498][ T51] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.899531][ T51] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 106.899560][ T51] ? lockdep_unlock+0x5c/0xd0 [ 106.899581][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.899616][ T51] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.899639][ T51] do_writepages+0x338/0x560 [ 106.899666][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.899684][ T51] ? reacquire_held_locks+0x117/0x1a0 [ 106.899696][ T51] ? writeback_sb_inodes+0x450/0x1af0 [ 106.899714][ T51] __writeback_single_inode+0x136/0x1220 [ 106.899730][ T51] ? do_raw_spin_unlock+0xf5/0x200 [ 106.899754][ T51] writeback_sb_inodes+0x9de/0x1af0 [ 106.899780][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.899826][ T51] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 106.899864][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.899876][ T51] ? queue_io+0x2d3/0x470 [ 106.899897][ T51] wb_writeback+0x41c/0xad0 [ 106.899927][ T51] ? queue_io+0x1f1/0x470 [ 106.899959][ T51] ? __pfx_wb_writeback+0x10/0x10 [ 106.899980][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.900003][ T51] wb_workfn+0x431/0x10f0 [ 106.900025][ T51] ? __pfx_wb_workfn+0x10/0x10 [ 106.900043][ T51] ? trace_hrtimer_start+0x82/0x200 [ 106.900069][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.900104][ T51] ? lock_acquire+0x115/0x350 [ 106.900130][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.900144][ T51] ? process_scheduled_works+0x97a/0x1630 [ 106.900158][ T51] process_scheduled_works+0xc3d/0x1630 [ 106.900189][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.900219][ T51] ? assign_work+0x3cf/0x5d0 [ 106.900252][ T51] worker_thread+0xa47/0xfb0 [ 106.900292][ T51] kthread+0x38b/0x480 [ 106.900302][ T51] ? __pfx_worker_thread+0x10/0x10 [ 106.900314][ T51] ? __pfx_kthread+0x10/0x10 [ 106.900325][ T51] ret_from_fork+0x514/0xb70 [ 106.900338][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 106.900355][ T51] ? __switch_to+0xc78/0x1410 [ 106.900384][ T51] ? __pfx_kthread+0x10/0x10 [ 106.900411][ T51] ret_from_fork_asm+0x1a/0x30 [ 106.900437][ T51] [ 106.915895][ T51] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 106.916212][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 106.916234][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.916245][ T51] Workqueue: writeback wb_workfn (flush-7:4) [ 106.916277][ T51] Call Trace: [ 106.916284][ T51] [ 106.916291][ T51] dump_stack_lvl+0xe8/0x150 [ 106.916321][ T51] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 106.916373][ T51] f2fs_write_end_bio+0x118e/0x15d0 [ 106.916420][ T51] __submit_merged_bio+0x258/0x6a0 [ 106.916446][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.916476][ T51] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 106.916505][ T51] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 106.916555][ T51] f2fs_write_data_pages+0x2a13/0x36e0 [ 106.916611][ T51] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.916645][ T51] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 106.916696][ T51] ? lockdep_unlock+0x5c/0xd0 [ 106.916733][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.916774][ T51] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.916796][ T51] do_writepages+0x338/0x560 [ 106.916822][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.916844][ T51] ? reacquire_held_locks+0x117/0x1a0 [ 106.916866][ T51] ? writeback_sb_inodes+0x450/0x1af0 [ 106.916897][ T51] __writeback_single_inode+0x136/0x1220 [ 106.916923][ T51] ? do_raw_spin_unlock+0xf5/0x200 [ 106.916948][ T51] writeback_sb_inodes+0x9de/0x1af0 [ 106.916970][ T51] ? __lock_acquire+0x747/0x2de0 [ 106.917008][ T51] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 106.917069][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.917093][ T51] ? queue_io+0x2d3/0x470 [ 106.917122][ T51] wb_writeback+0x41c/0xad0 [ 106.917151][ T51] ? queue_io+0x1f1/0x470 [ 106.917180][ T51] ? __pfx_wb_writeback+0x10/0x10 [ 106.917203][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.917245][ T51] wb_workfn+0x431/0x10f0 [ 106.917286][ T51] ? __pfx_wb_workfn+0x10/0x10 [ 106.917313][ T51] ? trace_hrtimer_start+0x82/0x200 [ 106.917339][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.917373][ T51] ? lock_acquire+0x115/0x350 [ 106.917412][ T51] ? rcu_is_watching+0x16/0xb0 [ 106.917437][ T51] ? process_scheduled_works+0x97a/0x1630 [ 106.917462][ T51] process_scheduled_works+0xc3d/0x1630 [ 106.917516][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.917546][ T51] ? assign_work+0x3cf/0x5d0 [ 106.917575][ T51] worker_thread+0xa47/0xfb0 [ 106.917626][ T51] kthread+0x38b/0x480 [ 106.917644][ T51] ? __pfx_worker_thread+0x10/0x10 [ 106.917666][ T51] ? __pfx_kthread+0x10/0x10 [ 106.917686][ T51] ret_from_fork+0x514/0xb70 [ 106.917707][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 106.917725][ T51] ? __switch_to+0xc78/0x1410 [ 106.917753][ T51] ? __pfx_kthread+0x10/0x10 [ 106.917772][ T51] ret_from_fork_asm+0x1a/0x30 [ 106.917806][ T51] [ 106.931360][ T51] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 107.002448][ T193] loop4: lost filesystem error report for type 5 error -108 [ 107.004852][ T193] loop4: lost filesystem error report for type 5 error -108 [ 107.330633][ T5606] usb 3-1: USB disconnect, device number 2 [ 108.135972][ T6588] loop1: detected capacity change from 0 to 512 [ 108.162609][ T6588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 108.165001][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 108.165020][ C0] EXT4-fs (loop1): initial error at time 1792092175: ext4_mb_generate_buddy:1315 [ 108.165040][ C0] EXT4-fs (loop1): last error at time 1792092175: ext4_mb_generate_buddy:1315 [ 108.218912][ T6588] EXT4-fs (loop1): Remounting filesystem read-only [ 108.227655][ T6588] EXT4-fs (loop1): 1 truncate cleaned up [ 108.232958][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.323447][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.426434][ T6600] loop1: detected capacity change from 0 to 16 [ 108.472768][ T6600] erofs (device loop1): mounted with root inode @ nid 36. [ 108.591781][ T6604] loop0: detected capacity change from 0 to 512 [ 108.592514][ T6604] EXT4-fs: Ignoring removed nobh option [ 108.642949][ T6609] loop1: detected capacity change from 0 to 8 [ 108.644207][ T6604] EXT4-fs (loop0): 1 truncate cleaned up [ 108.660812][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.864823][ T6574] loop3: detected capacity change from 0 to 65536 [ 108.900481][ T6574] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 108.904323][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.974733][ T6574] XFS (loop3): Ending clean mount [ 109.031466][ T6574] XFS (loop3): Quotacheck needed: Please wait. [ 109.211300][ T6574] XFS (loop3): Quotacheck: Done. [ 109.249301][ T6633] Bluetooth: MGMT ver 1.23 [ 109.381053][ T33] audit: type=1400 audit(1792092176.246:7): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=6635 comm="syz.4.261" name="p" offset=79 [ 109.469929][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.262'. [ 109.488545][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 109.488592][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 109.665722][ T5603] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 109.669654][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 109.684011][ T6648] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 109.881331][ T6654] capability: warning: `syz.2.269' uses 32-bit capabilities (legacy support in use) [ 109.948364][ T6654] program syz.2.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.227689][ T6664] loop3: detected capacity change from 0 to 4096 [ 110.805639][ T973] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.955091][ T193] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.959319][ T973] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.977754][ T973] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.977782][ T973] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.977840][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.061873][ T6695] loop3: detected capacity change from 0 to 32768 [ 111.102712][ T6695] JBD2: Ignoring recovery information on journal [ 111.109569][ T193] usb 3-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 111.112162][ T193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 111.112205][ T193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.199321][ T6695] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.240104][ T973] usb 2-1: GET_CAPABILITIES returned 0 [ 111.240156][ T973] usbtmc 2-1:16.0: can't read capabilities [ 111.412346][ T5603] ocfs2: Unmounting device (7,3) on (node local) [ 111.491665][ T10] usb 2-1: USB disconnect, device number 3 [ 111.568665][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 111.568829][ T6719] Zero length message leads to an empty skb [ 111.686817][ T193] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 111.774629][ T193] lg-g15 0003:046D:C222.0004: Error getting LED brightness: -71 [ 111.822303][ T193] lg-g15 0003:046D:C222.0004: probe with driver lg-g15 failed with error -71 [ 111.834264][ T193] usb 3-1: USB disconnect, device number 3 [ 111.852902][ T6724] fido_id[6724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 111.885765][ T973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.929460][ T6731] loop3: detected capacity change from 0 to 256 [ 112.035743][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 112.036309][ T973] usb 1-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 112.037399][ T973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 112.039475][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.039498][ T973] usb 1-1: Product: syz [ 112.039512][ T973] usb 1-1: Manufacturer: syz [ 112.039526][ T973] usb 1-1: SerialNumber: syz [ 112.044714][ T973] usb 1-1: config 0 descriptor?? [ 112.050475][ T6721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.107896][ T973] hub 1-1:0.0: bad descriptor, ignoring hub [ 112.107922][ T973] hub 1-1:0.0: probe with driver hub failed with error -5 [ 112.134058][ T973] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 112.278563][ T6743] phram: parameter too long [ 112.337635][ T10] usb 1-1: USB disconnect, device number 2 [ 112.337673][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 112.521904][ T6753] loop4: detected capacity change from 0 to 1024 [ 112.522778][ T6753] EXT4-fs: Ignoring removed bh option [ 112.577844][ T6753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.624902][ T6753] EXT4-fs error (device loop4): __ext4_remount:6923: comm syz.4.314: Abort forced by user [ 112.626426][ T6753] EXT4-fs (loop4): Remounting filesystem read-only [ 112.626445][ T6753] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.630549][ T6753] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.656513][ T193] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.713446][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.810897][ T193] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.810946][ T193] usb 2-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 112.812202][ T193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.812225][ T193] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.814146][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.814170][ T193] usb 2-1: Product: syz [ 112.814184][ T193] usb 2-1: Manufacturer: syz [ 112.814197][ T193] usb 2-1: SerialNumber: syz [ 112.886739][ T6767] loop2: detected capacity change from 0 to 128 [ 112.978522][ T6764] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.018913][ T6767] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.018951][ T6767] hpfs: filesystem error: improperly stopped [ 113.018964][ T6767] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.018978][ T6767] hpfs: You really don't want any checks? You are crazy... [ 113.018994][ T6767] hpfs: Code page index out of array [ 113.019023][ T6767] hpfs: code page support is disabled [ 113.020192][ T6767] hpfs: hpfs_map_4sectors(): unaligned read [ 113.028726][ T6767] hpfs: hpfs_map_4sectors(): unaligned read [ 113.028744][ T6767] hpfs: filesystem error: unable to find root dir [ 113.082523][ T193] usb 2-1: selecting invalid altsetting 1 [ 113.088013][ T193] usb 2-1: unit 3 not found! [ 113.088035][ T193] usb 2-1: unit 6 not found! [ 113.113982][ T6767] hpfs: hpfs_map_4sectors(): unaligned read [ 113.275816][ T5722] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.404427][ T193] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.425665][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 113.426330][ T5722] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.427415][ T5722] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.427438][ T5722] usb 1-1: config 0 has no interface number 0 [ 113.427479][ T5722] usb 1-1: config 0 interface 184 has no altsetting 0 [ 113.429740][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.429763][ T5722] usb 1-1: Product: syz [ 113.429776][ T5722] usb 1-1: Manufacturer: syz [ 113.429787][ T5722] usb 1-1: SerialNumber: syz [ 113.448205][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.518738][ T5722] usb 1-1: config 0 descriptor?? [ 113.544472][ T193] usb 2-1: USB disconnect, device number 4 [ 113.552837][ T973] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.707967][ T973] usb 4-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 113.709469][ T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.709518][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 113.709566][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.709589][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 113.709611][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 113.709632][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 113.709654][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 113.709675][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 113.709720][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 113.709741][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 113.709763][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 113.709784][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 113.709805][ T973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 113.709826][ T973] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 113.862223][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.862247][ T973] usb 4-1: Product: syz [ 113.862258][ T973] usb 4-1: Manufacturer: syz [ 113.862269][ T973] usb 4-1: SerialNumber: syz [ 113.913040][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913139][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913173][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913204][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913272][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913308][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913341][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913408][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913442][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913477][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913513][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.913570][ T6781] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 114.041726][ T973] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 114.060861][ T973] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 114.143572][ T973] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 114.157004][ T973] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 114.206898][ T973] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 114.308364][ T973] usb 4-1: USB disconnect, device number 9 [ 114.417811][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 114.417866][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.420669][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 114.420696][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 114.420713][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 114.420729][ T5722] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 114.421219][ T5722] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 114.501077][ T5722] usb 1-1: USB disconnect, device number 3 [ 114.575495][ T973] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 114.623113][ T973] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 114.637974][ T973] keyspan 4-1:1.0: device disconnected [ 114.972155][ T6808] loop1: detected capacity change from 0 to 64 [ 115.056269][ T6803] loop4: detected capacity change from 0 to 32768 [ 115.062396][ T6808] MINIX-fs: mounting file system with errors, running fsck is recommended [ 115.100717][ T6803] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.100738][ T6803] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.193714][ T6803] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 115.206696][ T5606] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.206716][ T5606] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.287333][ T6814] loop3: detected capacity change from 0 to 164 [ 115.490133][ T5606] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 283ms [ 115.508721][ T5606] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.509676][ T6803] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.665406][ T5612] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.815282][ T5612] usb 2-1: Using ep0 maxpacket: 16 [ 115.823421][ T5612] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 115.835586][ T5612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.835635][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.835680][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.835700][ T5612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.835721][ T5612] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.836810][ T5612] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 115.836831][ T5612] usb 2-1: Manufacturer: syz [ 115.840776][ T5612] usb 2-1: config 0 descriptor?? [ 116.075587][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 116.076001][ T6833] macvlan0: entered promiscuous mode [ 116.080002][ T6833] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 116.080021][ T6833] netlink: 'syz.2.346': attribute type 2 has an invalid length. [ 116.080033][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 116.165298][ T5612] rc_core: IR keymap rc-hauppauge not found [ 116.165317][ T5612] Registered IR keymap rc-empty [ 116.166368][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.195933][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.233171][ T5612] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 116.252075][ T5612] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 116.274806][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.295401][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.315801][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.335466][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.355109][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.377989][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.395124][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.415213][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.445101][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.465604][ T5612] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 116.502659][ T5612] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 116.502687][ T5612] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 116.606760][ T5612] usb 2-1: USB disconnect, device number 5 [ 116.681202][ T6849] syz.0.353 uses obsolete (PF_INET,SOCK_PACKET) [ 116.701384][ T6849] netlink: 'syz.0.353': attribute type 8 has an invalid length. [ 116.763739][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.354'. [ 117.007613][ T6866] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 117.131072][ T33] audit: type=1400 audit(1792092183.996:8): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6870 comm="syz.4.362" name="unknown" offset=28 [ 117.465883][ T6893] blkio.reset_stats is deprecated [ 117.618973][ T6871] loop2: detected capacity change from 0 to 32768 [ 117.635251][ T6871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.365 (6871) [ 117.658450][ T6871] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.658482][ T6871] BTRFS info (device loop2): using crc32c checksum algorithm [ 117.733857][ T6871] BTRFS info (device loop2): enabling ssd optimizations [ 117.733884][ T6871] BTRFS info (device loop2): turning on flush-on-commit [ 117.733899][ T6871] BTRFS info (device loop2): enabling free space tree [ 117.733912][ T6871] BTRFS info (device loop2): enabling auto defrag [ 117.733927][ T6871] BTRFS info (device loop2): max_inline set to 4096 [ 117.781355][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.781436][ T6917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.816290][ T5602] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.034477][ T6923] loop3: detected capacity change from 0 to 512 [ 118.172857][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.403815][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.574134][ T6927] loop2: detected capacity change from 0 to 32768 [ 118.582175][ T6927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.379 (6927) [ 118.603293][ T6927] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.603327][ T6927] BTRFS info (device loop2): using crc32c checksum algorithm [ 118.688187][ T6927] BTRFS info (device loop2): setting nodatasum [ 118.688215][ T6927] BTRFS info (device loop2): enabling ssd optimizations [ 118.688231][ T6927] BTRFS info (device loop2): disabling tree log [ 118.688246][ T6927] BTRFS info (device loop2): turning on async discard [ 118.688261][ T6927] BTRFS info (device loop2): enabling free space tree [ 118.688289][ T6927] BTRFS info (device loop2): enabling auto defrag [ 118.731237][ T6927] BTRFS critical (device loop2 state EH): emergency shutdown [ 118.787881][ T6928] loop4: detected capacity change from 0 to 40427 [ 118.797388][ T5602] BTRFS info (device loop2 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.818192][ T6928] F2FS-fs (loop4): invalid crc value [ 118.957151][ T6928] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.996785][ T6928] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 119.283165][ T5605] syz-executor: attempt to access beyond end of device [ 119.283165][ T5605] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.298170][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 119.298198][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.298209][ T5605] Call Trace: [ 119.298216][ T5605] [ 119.298224][ T5605] dump_stack_lvl+0xe8/0x150 [ 119.298267][ T5605] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 119.298299][ T5605] f2fs_write_end_bio+0x118e/0x15d0 [ 119.298339][ T5605] __submit_merged_bio+0x258/0x6a0 [ 119.298365][ T5605] ? rcu_is_watching+0x16/0xb0 [ 119.298395][ T5605] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 119.298424][ T5605] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 119.298473][ T5605] f2fs_write_data_pages+0x2a13/0x36e0 [ 119.298528][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.298546][ T5605] ? is_bpf_text_address+0x26/0x2b0 [ 119.298583][ T5605] ? arch_stack_walk+0xfb/0x150 [ 119.298632][ T5605] ? add_lock_to_list+0xc7/0x100 [ 119.298658][ T5605] ? lockdep_unlock+0x5c/0xd0 [ 119.298673][ T5605] ? __lock_acquire+0x1511/0x2de0 [ 119.298761][ T5605] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.298799][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 119.298825][ T5605] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 119.298847][ T5605] do_writepages+0x338/0x560 [ 119.298882][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 119.298911][ T5605] filemap_fdatawrite+0x1e9/0x2f0 [ 119.298940][ T5605] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 119.299016][ T5605] ? do_raw_spin_unlock+0xf5/0x200 [ 119.299045][ T5605] f2fs_sync_dirty_inodes+0x471/0x970 [ 119.299082][ T5605] f2fs_write_checkpoint+0x860/0x24d0 [ 119.299139][ T5605] kill_f2fs_super+0x2dc/0x700 [ 119.299164][ T5605] ? rcu_do_enqueue+0x616/0x870 [ 119.299184][ T5605] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.299205][ T5605] ? __pfx_kill_f2fs_super+0x10/0x10 [ 119.299242][ T5605] ? __pfx_call_rcu+0x10/0x10 [ 119.299271][ T5605] ? shrinker_free+0x2a7/0x3b0 [ 119.299299][ T5605] deactivate_locked_super+0xbe/0x110 [ 119.299329][ T5605] cleanup_mnt+0x204/0x2a0 [ 119.299355][ T5605] task_work_run+0x1d9/0x260 [ 119.299378][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 119.299410][ T5605] exit_to_user_mode_loop+0x204/0x770 [ 119.299431][ T5605] ? rcu_is_watching+0x16/0xb0 [ 119.299459][ T5605] do_syscall_64+0x328/0x520 [ 119.299478][ T5605] ? trace_irq_disable+0x3b/0x140 [ 119.299498][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.299516][ T5605] ? clear_bhb_loop+0x70/0xc0 [ 119.299538][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.299556][ T5605] RIP: 0033:0x7fb31bf9f797 [ 119.299579][ T5605] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 119.299594][ T5605] RSP: 002b:00007ffcc278cd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 119.299618][ T5605] RAX: 0000000000000000 RBX: 00007fb31c034cf3 RCX: 00007fb31bf9f797 [ 119.299630][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc278ce40 [ 119.299641][ T5605] RBP: 00007ffcc278ce40 R08: 00007ffcc278de40 R09: 00000000ffffffff [ 119.299653][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc278ded0 [ 119.299664][ T5605] R13: 00007fb31c034cf3 R14: 000000000001d15c R15: 00007ffcc278df10 [ 119.299694][ T5605] [ 119.308338][ T5605] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 119.510450][ T6977] loop0: detected capacity change from 0 to 128 [ 119.565076][ T6977] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.869217][ T271] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.013683][ T6986] sd 0:0:1:0: PR command failed: 1026 [ 120.013736][ T6986] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 120.013828][ T6986] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.122371][ T6981] loop2: detected capacity change from 0 to 32768 [ 120.207762][ T6981] [ 120.207762][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.207762][ T6981] [ 120.263942][ T6981] [ 120.263942][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.263942][ T6981] [ 120.263970][ T6981] [ 120.263970][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.263970][ T6981] [ 120.263980][ T6981] [ 120.263980][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.263980][ T6981] [ 120.264004][ T6981] [ 120.264004][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.264004][ T6981] [ 120.264015][ T6981] [ 120.264015][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.264015][ T6981] [ 120.377615][ T124] [ 120.377615][ T124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.377615][ T124] [ 120.412769][ T6981] [ 120.412769][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.412769][ T6981] [ 120.424561][ T6981] [ 120.424561][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.424561][ T6981] [ 120.424582][ T6981] [ 120.424582][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.424582][ T6981] [ 120.424594][ T6981] [ 120.424594][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.424594][ T6981] [ 120.424606][ T6981] [ 120.424606][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.424606][ T6981] [ 120.424618][ T6981] [ 120.424618][ T6981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.424618][ T6981] [ 120.482279][ T124] [ 120.482279][ T124] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.482279][ T124] [ 120.495961][ T6997] [ 120.495961][ T6997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.495961][ T6997] [ 120.495985][ T6997] [ 120.495985][ T6997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.495985][ T6997] [ 120.495997][ T6997] [ 120.495997][ T6997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.495997][ T6997] [ 120.496009][ T6997] [ 120.496009][ T6997] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.496009][ T6997] [ 120.497339][ T125] [ 120.497339][ T125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.497339][ T125] [ 120.619311][ T51] [ 120.619311][ T51] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.619311][ T51] [ 120.619338][ T51] [ 120.619338][ T51] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.619338][ T51] [ 120.620624][ T5602] [ 120.620624][ T5602] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.620624][ T5602] [ 120.622307][ T125] [ 120.622307][ T125] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.622307][ T125] [ 120.630695][ T5602] [ 120.630695][ T5602] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.630695][ T5602] [ 120.946035][ T7010] loop4: detected capacity change from 0 to 16 [ 120.947357][ T6984] loop1: detected capacity change from 0 to 40427 [ 120.979472][ T6984] F2FS-fs (loop1): invalid crc value [ 121.051896][ T7010] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 121.052144][ T7010] erofs (device loop4): mounted with root inode @ nid 36. [ 121.113572][ T7010] erofs (device loop4): invalid de[0].nameoff 0 @ nid 36 [ 121.235136][ T5606] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.389372][ T5606] usb 4-1: Using ep0 maxpacket: 32 [ 121.393441][ T5606] usb 4-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 121.402757][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.402784][ T5606] usb 4-1: Product: syz [ 121.402797][ T5606] usb 4-1: Manufacturer: syz [ 121.402810][ T5606] usb 4-1: SerialNumber: syz [ 121.423887][ T6984] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.427161][ T5606] usb 4-1: config 0 descriptor?? [ 121.469064][ T6984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 121.562745][ T7004] loop0: detected capacity change from 0 to 32768 [ 121.646587][ T7004] JBD2: Ignoring recovery information on journal [ 121.666968][ T6984] syz.1.397: attempt to access beyond end of device [ 121.666968][ T6984] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 121.671124][ T6984] CPU: 1 UID: 0 PID: 6984 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 121.671155][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.671167][ T6984] Call Trace: [ 121.671175][ T6984] [ 121.671184][ T6984] dump_stack_lvl+0xe8/0x150 [ 121.671222][ T6984] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 121.671259][ T6984] f2fs_write_end_bio+0x2b5/0x15d0 [ 121.671294][ T6984] ? blkg_put+0x22/0x240 [ 121.671318][ T6984] ? blkg_put+0x18d/0x240 [ 121.671342][ T6984] ? bio_endio+0x984/0xac0 [ 121.671366][ T6984] ? f2fs_write_end_io+0x258/0x300 [ 121.671392][ T6984] __submit_merged_bio+0x258/0x6a0 [ 121.671422][ T6984] ? rcu_is_watching+0x16/0xb0 [ 121.671453][ T6984] f2fs_submit_merged_write+0x2cc/0x610 [ 121.671487][ T6984] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 121.671524][ T6984] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.671545][ T6984] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 121.671581][ T6984] f2fs_writeback_node_caches+0xf46/0x1100 [ 121.671634][ T6984] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 121.671694][ T6984] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 121.671722][ T6984] ? up_write+0x19d/0x4a0 [ 121.671752][ T6984] f2fs_write_checkpoint+0xe54/0x24d0 [ 121.671812][ T6984] f2fs_issue_checkpoint+0x424/0x6f0 [ 121.671848][ T6984] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 121.671873][ T6984] ? __pfx_from_kgid+0x10/0x10 [ 121.671905][ T6984] ? rcu_is_watching+0x16/0xb0 [ 121.671931][ T6984] ? __up_read+0x29c/0x930 [ 121.672002][ T6984] ? f2fs_sync_fs+0x1f2/0x3c0 [ 121.672034][ T6984] f2fs_unlink+0x225/0x600 [ 121.672063][ T6984] vfs_rmdir+0x3e6/0x6a0 [ 121.672086][ T6984] ? bpf_lsm_path_rmdir+0x9/0x20 [ 121.672117][ T6984] filename_rmdir+0x292/0x520 [ 121.672150][ T6984] ? __pfx_filename_rmdir+0x10/0x10 [ 121.672183][ T6984] ? do_getname+0x151/0x250 [ 121.672214][ T6984] __se_sys_rmdir+0x2e/0x140 [ 121.672242][ T6984] do_syscall_64+0x166/0x520 [ 121.672309][ T6984] ? trace_irq_disable+0x3b/0x140 [ 121.672334][ T6984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.672354][ T6984] ? clear_bhb_loop+0x70/0xc0 [ 121.672378][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.672398][ T6984] RIP: 0033:0x7fe57119e559 [ 121.672417][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.672433][ T6984] RSP: 002b:00007fe5720fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 121.672454][ T6984] RAX: ffffffffffffffda RBX: 00007fe571425fa0 RCX: 00007fe57119e559 [ 121.672467][ T6984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 121.672479][ T6984] RBP: 00007fe5712358b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.672491][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.672502][ T6984] R13: 00007fe571426038 R14: 00007fe571425fa0 R15: 00007fff838d9ef8 [ 121.672538][ T6984] [ 121.674313][ T6984] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 121.736905][ T7022] loop4: detected capacity change from 0 to 8 [ 121.850909][ T5606] airspy 4-1:0.0: Board ID: 00 [ 121.850932][ T5606] airspy 4-1:0.0: Firmware version: [ 121.872521][ T7004] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 122.067295][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 122.263117][ T5606] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 122.323998][ T5606] airspy 4-1:0.0: Registered as swradio24 [ 122.324022][ T5606] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 122.331481][ T5606] usb 4-1: USB disconnect, device number 10 [ 122.673324][ T7029] loop2: detected capacity change from 0 to 32768 [ 122.706373][ T7029] XFS (loop2): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 122.726299][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.418'. [ 122.759835][ T7029] XFS (loop2): Ending clean mount [ 122.777467][ T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.848278][ T7051] loop4: detected capacity change from 0 to 4096 [ 122.862135][ T7051] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.882209][ T7051] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.915656][ T7051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.926511][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 122.927913][ T973] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 122.930341][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.944042][ T973] usb 2-1: config 0 descriptor?? [ 122.984139][ T5602] XFS (loop2): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 123.004260][ T7058] loop3: detected capacity change from 0 to 1024 [ 123.085605][ T7058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.132415][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.167766][ T973] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.238559][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.247664][ T973] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.247722][ T973] usb 2-1: media controller created [ 123.365588][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.382376][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.539065][ T7056] loop0: detected capacity change from 0 to 32768 [ 123.552392][ T7056] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.420 (7056) [ 123.579546][ T973] az6027: usb out operation failed. (-71) [ 123.589272][ T7056] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 123.589304][ T7056] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 123.590888][ T973] az6027: usb out operation failed. (-71) [ 123.590902][ T973] stb0899_attach: Driver disabled by Kconfig [ 123.590910][ T973] az6027: no front-end attached [ 123.590910][ T973] [ 123.591749][ T973] az6027: usb out operation failed. (-71) [ 123.591762][ T973] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 123.605057][ T973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 123.637833][ T973] dvb-usb: schedule remote query interval to 400 msecs. [ 123.637856][ T973] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 123.648870][ T973] usb 2-1: USB disconnect, device number 6 [ 123.741619][ T7056] BTRFS info (device loop0): enabling ssd optimizations [ 123.741646][ T7056] BTRFS info (device loop0): turning on async discard [ 123.741661][ T7056] BTRFS info (device loop0): enabling free space tree [ 123.839037][ T973] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 123.970702][ T7088] sd 0:0:1:0: PR command failed: 1026 [ 123.970746][ T7088] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 123.970782][ T7088] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 124.005048][ T193] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.088042][ T5617] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 124.165700][ T193] usb 4-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00 [ 124.166265][ T193] usb 4-1: config 0 has no interfaces? [ 124.166294][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.173896][ T193] usb 4-1: config 0 descriptor?? [ 124.397642][ T193] usb 4-1: USB disconnect, device number 11 [ 124.482576][ T7065] loop4: detected capacity change from 0 to 32768 [ 124.520855][ T7065] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.652799][ T7065] XFS (loop4): Ending clean mount [ 124.723881][ T7108] loop1: detected capacity change from 0 to 512 [ 124.735102][ T7108] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 124.735121][ T7108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.772886][ T7108] EXT4-fs (loop1): 1 truncate cleaned up [ 124.781787][ T7108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.813502][ T7108] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.432: Logical block already allocated [ 124.830211][ T7108] EXT4-fs (loop1): Remounting filesystem read-only [ 124.931429][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.128136][ T5605] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.565075][ T973] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.668613][ T7130] loop3: detected capacity change from 0 to 1024 [ 125.669852][ T7130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.716330][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 125.716958][ T973] usb 2-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 125.717528][ T973] usb 2-1: config 0 has no interfaces? [ 125.719582][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.719604][ T973] usb 2-1: Product: syz [ 125.719617][ T973] usb 2-1: Manufacturer: syz [ 125.719630][ T973] usb 2-1: SerialNumber: syz [ 125.765879][ T7130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.765993][ T7130] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.781008][ T7130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.440: bg 0: block 112: padding at end of block bitmap is not set [ 125.786316][ T7130] EXT4-fs (loop3): Remounting filesystem read-only [ 125.793248][ T7138] loop4: detected capacity change from 0 to 64 [ 125.834608][ T973] usb 2-1: config 0 descriptor?? [ 125.951690][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.050989][ T973] usb 2-1: USB disconnect, device number 7 [ 126.174373][ T7144] loop4: detected capacity change from 0 to 4096 [ 126.233497][ T7144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.348376][ T7144] EXT4-fs: Cannot change journaled quota options when quota turned on [ 126.364477][ T7150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.366400][ T7150] netlink: 'syz.2.447': attribute type 12 has an invalid length. [ 126.390136][ T7148] sctp: [Deprecated]: syz.3.446 (pid 7148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.390136][ T7148] Use struct sctp_sack_info instead [ 126.443725][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.563046][ T7152] loop8: detected capacity change from 0 to 7 [ 126.596267][ T7152] Dev loop8: unable to read RDB block 7 [ 126.596313][ T7152] loop8: unable to read partition table [ 126.596512][ T7152] loop8: partition table beyond EOD, truncated [ 126.596543][ T7152] loop_reread_partitions: partition scan of loop8 (ţ袍xü^>ŕ– ) failed (rc=-5) [ 126.889088][ T7166] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 127.317016][ T7190] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 127.317134][ T7190] pim6reg0: linktype set to 823 [ 128.069288][ T7223] loop2: detected capacity change from 0 to 256 [ 128.071639][ T7223] exfat: Deprecated parameter 'utf8' [ 128.088225][ T7223] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 128.221008][ T7199] loop4: detected capacity change from 0 to 40427 [ 128.244567][ T7199] F2FS-fs (loop4): invalid crc value [ 128.472264][ T7199] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.502533][ T7199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.549804][ T33] audit: type=1400 audit(1792092195.416:9): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7238 comm="syz.0.488" [ 128.706552][ T193] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.759337][ T5605] syz-executor: attempt to access beyond end of device [ 128.759337][ T5605] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 128.768968][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 128.768995][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.769006][ T5605] Call Trace: [ 128.769013][ T5605] [ 128.769020][ T5605] dump_stack_lvl+0xe8/0x150 [ 128.769052][ T5605] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 128.769086][ T5605] f2fs_write_end_bio+0x2b5/0x15d0 [ 128.769109][ T5605] ? blkg_put+0x22/0x240 [ 128.769131][ T5605] ? blkg_put+0x18d/0x240 [ 128.769152][ T5605] ? bio_endio+0x984/0xac0 [ 128.769173][ T5605] ? f2fs_write_end_io+0x258/0x300 [ 128.769197][ T5605] __submit_merged_bio+0x258/0x6a0 [ 128.769223][ T5605] ? rcu_is_watching+0x16/0xb0 [ 128.769252][ T5605] f2fs_submit_merged_write+0x2cc/0x610 [ 128.769286][ T5605] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 128.769324][ T5605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 128.769343][ T5605] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 128.769381][ T5605] f2fs_writeback_node_caches+0xf46/0x1100 [ 128.769432][ T5605] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 128.769487][ T5605] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 128.769514][ T5605] ? up_write+0x19d/0x4a0 [ 128.769544][ T5605] f2fs_write_checkpoint+0xe54/0x24d0 [ 128.769603][ T5605] kill_f2fs_super+0x2dc/0x700 [ 128.769629][ T5605] ? rcu_do_enqueue+0x616/0x870 [ 128.769649][ T5605] ? lockdep_hardirqs_on+0x7b/0x110 [ 128.769669][ T5605] ? __pfx_kill_f2fs_super+0x10/0x10 [ 128.769707][ T5605] ? __pfx_call_rcu+0x10/0x10 [ 128.769737][ T5605] ? shrinker_free+0x2a7/0x3b0 [ 128.769772][ T5605] deactivate_locked_super+0xbe/0x110 [ 128.769802][ T5605] cleanup_mnt+0x204/0x2a0 [ 128.769828][ T5605] task_work_run+0x1d9/0x260 [ 128.769852][ T5605] ? __pfx_task_work_run+0x10/0x10 [ 128.769882][ T5605] exit_to_user_mode_loop+0x204/0x770 [ 128.769903][ T5605] ? rcu_is_watching+0x16/0xb0 [ 128.769934][ T5605] do_syscall_64+0x328/0x520 [ 128.769953][ T5605] ? trace_irq_disable+0x3b/0x140 [ 128.769974][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.769992][ T5605] ? clear_bhb_loop+0x70/0xc0 [ 128.770014][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.770032][ T5605] RIP: 0033:0x7fb31bf9f797 [ 128.770049][ T5605] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.770065][ T5605] RSP: 002b:00007ffcc278cd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.770084][ T5605] RAX: 0000000000000000 RBX: 00007fb31c034cf3 RCX: 00007fb31bf9f797 [ 128.770096][ T5605] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc278ce40 [ 128.770107][ T5605] RBP: 00007ffcc278ce40 R08: 00007ffcc278de40 R09: 00000000ffffffff [ 128.770118][ T5605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc278ded0 [ 128.770130][ T5605] R13: 00007fb31c034cf3 R14: 000000000001f65d R15: 00007ffcc278df10 [ 128.770161][ T5605] [ 128.771916][ T5605] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 128.877584][ T193] usb 2-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 128.880534][ T193] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.880563][ T193] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.886120][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.886144][ T193] usb 2-1: Product: syz [ 128.886157][ T193] usb 2-1: Manufacturer: syz [ 128.886170][ T193] usb 2-1: SerialNumber: syz [ 128.991006][ T7247] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 129.042014][ T7247] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 129.249117][ T193] kaweth 2-1:1.0: Firmware present in device. [ 129.377024][ T193] kaweth 2-1:1.0: Statistics collection: 0 [ 129.377047][ T193] kaweth 2-1:1.0: Multicast filter limit: 0 [ 129.377058][ T193] kaweth 2-1:1.0: MTU: 0 [ 129.377068][ T193] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 129.606166][ T7269] loop4: detected capacity change from 0 to 1024 [ 129.783821][ T193] kaweth 2-1:1.0: Error setting SOFS wait [ 129.784044][ T193] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 129.819410][ T193] usb 2-1: USB disconnect, device number 8 [ 129.914082][ T5996] udevd[5996]: setting mode of /dev/bus/usb/002/008 to 020664 failed: No such file or directory [ 129.914230][ T5996] udevd[5996]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 129.987812][ T7277] loop3: detected capacity change from 0 to 512 [ 130.001461][ T5606] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.034324][ T7277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.072362][ T7281] loop4: detected capacity change from 0 to 512 [ 130.102341][ T33] audit: type=1804 audit(1792092196.966:10): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.505" name="/newroot/92/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 130.104063][ T7281] EXT4-fs error (device loop4): ext4_iget_extra_inode:6003: inode #15: comm syz.4.506: corrupted in-inode xattr: invalid ea_ino [ 130.104092][ T7281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.105635][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 130.105653][ C0] EXT4-fs (loop4): initial error at time 1792092196: ext4_iget_extra_inode:6003: inode 15 [ 130.105679][ C0] EXT4-fs (loop4): last error at time 1792092196: ext4_iget_extra_inode:6003: inode 15 [ 130.109128][ T7281] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.506: couldn't read orphan inode 15 (err -117) [ 130.109156][ T7281] loop4: lost filesystem error report for type 5 error -117 [ 130.111311][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.178280][ T5606] usb 1-1: Using ep0 maxpacket: 16 [ 130.209656][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.213780][ T5606] usb 1-1: New USB device found: idVendor=1e71, idProduct=170e, bcdDevice=0.00 [ 130.229647][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.247809][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 130.247857][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.254768][ T5606] usb 1-1: config 0 descriptor?? [ 130.740255][ T5606] hid_parser_main: 26 callbacks suppressed [ 130.740280][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740307][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740330][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740354][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740377][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740399][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740423][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740447][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740472][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.740496][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unknown main item tag 0x0 [ 130.835886][ T5606] nzxt-kraken2 0003:1E71:170E.0005: unbalanced collection at end of report description [ 130.849437][ T5606] nzxt-kraken2 0003:1E71:170E.0005: hid parse failed with -22 [ 130.849549][ T5606] nzxt-kraken2 0003:1E71:170E.0005: probe with driver nzxt-kraken2 failed with error -22 [ 130.962592][ T193] usb 1-1: USB disconnect, device number 4 [ 131.286802][ T7317] loop3: detected capacity change from 0 to 128 [ 131.402143][ T7320] netlink: 72 bytes leftover after parsing attributes in process `syz.1.522'. [ 131.763801][ T7323] loop2: detected capacity change from 0 to 32768 [ 131.801722][ T7323] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 131.839919][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'. [ 131.876299][ T7323] JBD2: Ignoring recovery information on journal [ 131.920968][ T7340] loop3: detected capacity change from 0 to 128 [ 131.955655][ T7323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.974044][ T7340] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.974098][ T7340] hpfs: filesystem error: improperly stopped [ 131.974110][ T7340] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.974122][ T7340] hpfs: You really don't want any checks? You are crazy... [ 131.985089][ T7340] hpfs: hpfs_map_sector(): read error [ 131.985107][ T7340] hpfs: code page support is disabled [ 131.985203][ T7340] hpfs: hpfs_map_4sectors(): unaligned read [ 131.985264][ T7340] hpfs: hpfs_map_4sectors(): unaligned read [ 131.985273][ T7340] hpfs: filesystem error: unable to find root dir [ 132.324306][ T5602] ocfs2: Unmounting device (7,2) on (node local) [ 132.495078][ T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.538228][ T7358] loop4: detected capacity change from 0 to 2048 [ 132.552883][ T7362] kernel read not supported for file /eth0 (pid: 7362 comm: syz.3.543) [ 132.554207][ T33] audit: type=1800 audit(1792092199.416:11): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.543" name="eth0" dev="mqueue" ino=14377 res=0 errno=-22 [ 132.554812][ T5606] kernel read not supported for file /vcs (pid: 5606 comm: kworker/1:3) [ 132.619882][ T7358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 132.657017][ T973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.657067][ T973] usb 1-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 132.658091][ T973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.658113][ T973] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.658155][ T973] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 132.658190][ T973] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 132.658226][ T973] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 132.658249][ T973] usb 1-1: config 1 interface 1 has no altsetting 0 [ 132.661238][ T973] usb 1-1: string descriptor 0 read error: -22 [ 132.661368][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.666099][ T7358] EXT4-fs (loop4): shut down requested (2) [ 132.771199][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 132.808683][ T7371] loop1: detected capacity change from 0 to 2048 [ 132.901562][ T7377] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.907882][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907945][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.101618][ T7384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.138953][ T7381] hfsplus: invalid length 1280 has been corrected to 255 [ 133.140149][ T7381] hfsplus: invalid length 1280 has been corrected to 255 [ 133.140169][ T7381] hfsplus: invalid length 1280 has been corrected to 255 [ 133.140179][ T7381] hfsplus: invalid length 1280 has been corrected to 255 [ 133.140191][ T7381] hfsplus: invalid length 1280 has been corrected to 255 [ 133.217526][ T973] usb 1-1: 2:0: cannot get RANGE values for control 2 (id 2) [ 133.217556][ T973] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 133.217571][ T973] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 133.338881][ T7386] set_capacity_and_notify: 1 callbacks suppressed [ 133.338899][ T7386] loop3: detected capacity change from 0 to 512 [ 133.346232][ T7386] EXT4-fs: Ignoring removed orlov option [ 133.349064][ T7386] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 133.349081][ T7386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.359593][ T7386] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.551: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 133.359639][ T7386] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.363250][ T7386] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.551: couldn't read orphan inode 16 (err -117) [ 133.363284][ T7386] loop3: lost filesystem error report for type 5 error -117 [ 133.363670][ T7386] EXT4-fs (loop3): 1 orphan inode deleted [ 133.370139][ T7391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.405545][ T7386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.515818][ T5722] usb 1-1: USB disconnect, device number 5 [ 133.541741][ T7384] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 133.553460][ T7384] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 133.576634][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.599019][ T7384] Remounting filesystem read-only [ 133.616664][ T5604] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 133.759297][ T7396] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 133.759665][ T7396] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 133.854410][ T7406] program syz.4.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.935642][ T7409] loop3: detected capacity change from 0 to 164 [ 134.174491][ T7420] loop2: detected capacity change from 0 to 128 [ 134.210551][ T7417] loop1: detected capacity change from 0 to 4096 [ 134.240304][ T7420] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.258214][ T7420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.259804][ T7424] loop0: detected capacity change from 0 to 512 [ 134.290946][ T7424] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.290988][ T7424] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 134.292939][ T7424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 134.314981][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 134.315005][ C0] EXT4-fs (loop0): initial error at time 1792092201: ext4_mb_generate_buddy:1315 [ 134.315028][ C0] EXT4-fs (loop0): last error at time 1792092201: ext4_mb_generate_buddy:1315 [ 134.349099][ T7424] EXT4-fs error (device loop0): ext4_clear_blocks:893: inode #13: comm syz.0.569: attempt to clear invalid blocks 2 len 1 [ 134.349137][ T7424] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.349961][ T7424] EXT4-fs error (device loop0): ext4_free_branches:1040: inode #13: comm syz.0.569: invalid indirect mapped block 1819239214 (level 0) [ 134.349992][ T7424] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.353974][ T7424] EXT4-fs error (device loop0): ext4_free_branches:1040: inode #13: comm syz.0.569: invalid indirect mapped block 1819239214 (level 1) [ 134.354007][ T7424] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 134.359664][ T7424] EXT4-fs (loop0): 1 truncate cleaned up [ 134.371650][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.402140][ T7417] ntfs3(loop1): Failed to load $Extend (-22). [ 134.402167][ T7417] ntfs3(loop1): Failed to initialize $Extend. [ 134.454083][ T7424] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 134.455410][ T7424] EXT4-fs error (device loop0): __ext4_remount:6923: comm syz.0.569: Abort forced by user [ 134.457841][ T7424] EXT4-fs (loop0): Remounting filesystem read-only [ 134.457860][ T7424] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 134.620581][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.656554][ T7418] loop4: detected capacity change from 0 to 32768 [ 134.698649][ T7418] [ 134.698649][ T7418] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.698649][ T7418] [ 134.738131][ T7417] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 134.739911][ T7430] loop2: detected capacity change from 0 to 4096 [ 134.897841][ T7436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.907430][ T1022] ERROR: (device loop4): diWrite: ixpxd invalid [ 134.907430][ T1022] [ 134.931728][ T1022] ERROR: (device loop4): txCommit: [ 134.931728][ T1022] [ 134.931794][ T1022] jfs_write_inode: jfs_commit_inode failed! [ 134.933146][ T5605] [ 134.933146][ T5605] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.933146][ T5605] [ 134.933360][ T5605] [ 134.933360][ T5605] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.933360][ T5605] [ 134.993092][ T7430] NILFS (loop2): Segment number 13903790157999918 to be freed is out of range [ 135.276759][ T193] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.426379][ T193] usb 4-1: Using ep0 maxpacket: 32 [ 135.427202][ T193] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.432119][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.451346][ T193] usb 4-1: config 0 descriptor?? [ 135.661826][ T193] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 135.675899][ T193] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.680284][ T193] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 135.680374][ T193] usb 4-1: media controller created [ 135.734005][ T193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.864618][ T193] az6027: usb out operation failed. (-71) [ 135.868280][ T193] az6027: usb out operation failed. (-71) [ 135.868294][ T193] stb0899_attach: Driver disabled by Kconfig [ 135.868303][ T193] az6027: no front-end attached [ 135.868303][ T193] [ 135.869738][ T193] az6027: usb out operation failed. (-71) [ 135.869752][ T193] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.897124][ T193] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 135.919212][ T193] dvb-usb: schedule remote query interval to 400 msecs. [ 135.919234][ T193] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.935767][ T193] usb 4-1: USB disconnect, device number 12 [ 136.117916][ T7485] block nbd0: server does not support multiple connections per device. [ 136.153574][ T193] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.197496][ T7485] block nbd0: shutting down sockets [ 136.571648][ T7504] loop2: detected capacity change from 0 to 256 [ 136.645386][ T973] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.772742][ T193] hid_parser_main: 449 callbacks suppressed [ 136.772768][ T193] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.796002][ T193] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.810092][ T973] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 136.812637][ T973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.812666][ T973] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 136.812705][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.883170][ T973] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 137.059874][ T7521] loop1: detected capacity change from 0 to 16 [ 137.060943][ T7521] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 137.256963][ T7524] loop1: detected capacity change from 0 to 4096 [ 137.326428][ T7527] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.817295][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 137.835629][ T973] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.894785][ T7548] scsi_dev_info_list_add_str: bad dev info string '‰' '' '' [ 137.961395][ T7552] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 137.961414][ T7552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.993255][ T7552] EXT4-fs (loop2): 1 truncate cleaned up [ 138.003123][ T7552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.006673][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 138.020515][ T973] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 138.044022][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.044074][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.044100][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.044120][ T973] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.044141][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.056087][ T973] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.056111][ T973] usb 4-1: Manufacturer: syz [ 138.121414][ T973] usb 4-1: config 0 descriptor?? [ 138.179203][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.433527][ T5722] usb 5-1: USB disconnect, device number 2 [ 138.445113][ T973] rc_core: IR keymap rc-hauppauge not found [ 138.445132][ T973] Registered IR keymap rc-empty [ 138.445273][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.476514][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.493307][ T5722] idmouse 5-1:1.0: disconnected [ 138.503738][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 138.532555][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 138.560180][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.576028][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.596949][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.615273][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.635372][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.655181][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.681498][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.695118][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.715825][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.729274][ T7566] set_capacity_and_notify: 1 callbacks suppressed [ 138.729294][ T7566] loop1: detected capacity change from 0 to 8192 [ 138.750265][ T973] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.771245][ T973] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 138.771271][ T973] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.903284][ T2251] usb 4-1: USB disconnect, device number 13 [ 139.567139][ T7588] loop0: detected capacity change from 0 to 16 [ 139.567842][ T7588] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 139.618676][ T5996] udevd[5996]: incorrect cramfs checksum on /dev/loop0 [ 139.659398][ T7584] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.670088][ T5996] udevd[5996]: incorrect cramfs checksum on /dev/loop0 [ 140.314364][ T7607] loop1: detected capacity change from 0 to 4096 [ 140.329240][ T7607] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 140.461905][ T7607] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 140.493521][ T7607] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 141.022373][ T7632] sg_write: data in/out 389083/136 bytes for SCSI command 0x0-- guessing data in; [ 141.022373][ T7632] program syz.2.661 not setting count and/or reply_len properly [ 141.392727][ T7641] loop1: detected capacity change from 0 to 2048 [ 141.414800][ T7641] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.424665][ T7641] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 141.424689][ T7641] UDF-fs: Scanning with blocksize 512 failed [ 141.526777][ T7641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.776742][ T7656] loop2: detected capacity change from 0 to 512 [ 141.803709][ T7656] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.671: iget: bad i_size value: 38620345925642 [ 141.803746][ T7656] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.816772][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.816800][ C1] EXT4-fs (loop2): initial error at time 1792092208: ext4_orphan_get:1404: inode 15 [ 141.816830][ C1] EXT4-fs (loop2): last error at time 1792092208: ext4_orphan_get:1404: inode 15 [ 141.817661][ T7656] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.671: couldn't read orphan inode 15 (err -117) [ 141.817692][ T7656] loop2: lost filesystem error report for type 5 error -117 [ 141.829145][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.011074][ T7659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.671: bg 0: block 5: invalid block bitmap [ 142.056446][ T7659] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 680 with error 28 [ 142.056481][ T7659] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.056481][ T7659] [ 142.056511][ T7659] EXT4-fs (loop2): Total free blocks count 0 [ 142.056524][ T7659] EXT4-fs (loop2): Free/Dirty block details [ 142.056564][ T7659] EXT4-fs (loop2): free_blocks=0 [ 142.056594][ T7659] EXT4-fs (loop2): dirty_blocks=752 [ 142.056606][ T7659] EXT4-fs (loop2): Block reservation details [ 142.056639][ T7659] EXT4-fs (loop2): i_reserved_data_blocks=752 [ 142.202998][ T33] audit: type=1807 audit(1792092209.066:12): action=measure func=FÉLE_CHECK res=0 [ 142.203042][ T33] audit: type=1802 audit(1792092209.066:13): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.673" res=0 errno=-22 [ 142.203314][ T7664] ima: policy update failed [ 142.203438][ T33] audit: type=1802 audit(1792092209.066:14): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.673" res=0 errno=-22 [ 142.268207][ T7669] loop4: detected capacity change from 0 to 256 [ 142.271254][ T7669] exfat: Deprecated parameter 'utf8' [ 142.271275][ T7669] exfat: Deprecated parameter 'utf8' [ 142.295911][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 142.319435][ T1022] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 680 with max blocks 72 with error 28 [ 142.340162][ T7669] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 142.627676][ T193] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.688972][ T7690] loop1: detected capacity change from 0 to 128 [ 142.721536][ T7690] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.723740][ T7690] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.778045][ T193] usb 5-1: Using ep0 maxpacket: 16 [ 142.780423][ T193] usb 5-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 142.783297][ T193] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.783327][ T193] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.783347][ T193] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 142.783371][ T193] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.783402][ T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.799914][ T193] usb 5-1: config 0 descriptor?? [ 142.868739][ T5604] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.988865][ T7706] loop0: detected capacity change from 0 to 256 [ 142.991812][ T7706] exfat: Deprecated parameter 'utf8' [ 142.991831][ T7706] exfat: Deprecated parameter 'utf8' [ 142.991946][ T7706] exfat: Deprecated parameter 'utf8' [ 143.031509][ T7706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 143.105458][ T7708] loop1: detected capacity change from 0 to 256 [ 143.156756][ T7708] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 143.187686][ T7708] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 143.230058][ T193] hid (null): invalid report_count 2075921239 [ 143.230095][ T193] hid (null): unknown global tag 0xd [ 143.230127][ T193] hid (null): invalid report_count 38340 [ 143.232713][ T193] hid (null): invalid report_size 48260 [ 143.232736][ T193] hid (null): unknown global tag 0xe [ 143.248935][ T193] hid (null): unknown global tag 0xc [ 143.251279][ T193] hid (null): unknown global tag 0xe [ 143.256283][ T193] hid (null): unknown global tag 0x55 [ 143.484152][ T33] audit: type=1400 audit(1792092210.346:15): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/oo" pid=7713 comm="syz.1.696" [ 143.488384][ T2251] usb 5-1: USB disconnect, device number 3 [ 143.771250][ T7722] loop2: detected capacity change from 0 to 2048 [ 143.817118][ T7722] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.850223][ T7723] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.901392][ T7719] loop1: detected capacity change from 0 to 32768 [ 143.944263][ T7719] JBD2: Ignoring recovery information on journal [ 144.053062][ T7719] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.251830][ T7729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.289309][ T5604] ocfs2: Unmounting device (7,1) on (node local) [ 144.470067][ T7737] loop4: detected capacity change from 0 to 512 [ 144.515120][ T7737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.515259][ T7737] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.658369][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.737951][ T7751] batadv_slave_0: entered promiscuous mode [ 144.738455][ T7750] batadv_slave_0: left promiscuous mode [ 145.378159][ T7785] netlink: 596 bytes leftover after parsing attributes in process `syz.3.726'. [ 145.636234][ T7798] loop1: detected capacity change from 0 to 2048 [ 145.660074][ T7798] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 145.824233][ T7783] loop0: detected capacity change from 0 to 32768 [ 145.856990][ T7783] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.989670][ T7783] XFS (loop0): Ending clean mount [ 146.143383][ T33] audit: type=1800 audit(1792092213.006:16): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.724" name="file1" dev="loop0" ino=9286 res=0 errno=-22 [ 146.187121][ T5617] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.346342][ T5606] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.495123][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 146.496952][ T5606] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 146.497969][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.497996][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.498018][ T5606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.498056][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.501256][ T5606] usb 2-1: config 0 descriptor?? [ 146.709113][ T4926] block nbd0: Receive control failed (result -32) [ 146.709259][ T5610] block nbd0: Receive control failed (result -32) [ 146.867880][ T7847] netlink: 72 bytes leftover after parsing attributes in process `syz.4.749'. [ 146.937803][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.938293][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.969484][ T5606] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 146.969521][ T5606] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 146.969547][ T5606] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 146.969574][ T5606] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 147.010888][ T5606] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input14 [ 147.041569][ T5606] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 147.220167][ T193] usb 2-1: USB disconnect, device number 9 [ 147.245966][ T7858] HugeTLB: PID 7858 killed due to inadequate hugepage pool [ 147.301065][ T7854] fido_id[7854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 147.609637][ T7874] loop2: detected capacity change from 0 to 1024 [ 147.916807][ T7851] loop3: detected capacity change from 0 to 32768 [ 147.995544][ T7851] find_entry called with index >= next_index [ 147.995562][ T7851] find_entry called with index >= next_index [ 147.995571][ T7851] find_entry called with index >= next_index [ 147.995578][ T7851] find_entry called with index >= next_index [ 147.995586][ T7851] find_entry called with index >= next_index [ 147.995595][ T7851] add_index: next_index = 0. Resetting! [ 147.995611][ T7851] find_entry called with index >= next_index [ 147.995619][ T7851] find_entry called with index >= next_index [ 147.995626][ T7851] find_entry called with index >= next_index [ 148.025706][ T7851] non-latin1 character 0x3ff found in JFS file name [ 148.025726][ T7851] mount with iocharset=utf8 to access [ 148.861801][ T7887] loop0: detected capacity change from 0 to 32768 [ 148.896898][ T7887] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.896919][ T7887] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 149.012654][ T7887] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 149.012699][ T7887] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 149.012729][ T7887] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 149.012769][ T7887] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 149.012796][ T7887] CPU: 0 UID: 0 PID: 7887 Comm: syz.0.768 Not tainted syzkaller #0 PREEMPT(full) [ 149.012815][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.012827][ T7887] Call Trace: [ 149.012835][ T7887] [ 149.012843][ T7887] dump_stack_lvl+0xe8/0x150 [ 149.012871][ T7887] gfs2_withdraw+0xc3/0x1b0 [ 149.012893][ T7887] gfs2_jdesc_check+0x17d/0x2f0 [ 149.012922][ T7887] init_journal+0xcc8/0x2390 [ 149.012958][ T7887] ? init_inodes+0xdb/0x320 [ 149.012986][ T7887] ? __pfx_init_journal+0x10/0x10 [ 149.013013][ T7887] ? vsnprintf+0xe42/0xef0 [ 149.013054][ T7887] ? snprintf+0xe8/0x140 [ 149.013103][ T7887] ? init_inodes+0xdb/0x320 [ 149.013125][ T7887] ? __pfx_snprintf+0x10/0x10 [ 149.013153][ T7887] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 149.013187][ T7887] init_inodes+0xdb/0x320 [ 149.013212][ T7887] gfs2_fill_super+0x193f/0x20b0 [ 149.013244][ T7887] ? __pfx_gfs2_fill_super+0x10/0x10 [ 149.013271][ T7887] ? init_locking+0xb8/0x210 [ 149.013292][ T7887] ? sb_set_blocksize+0x155/0x240 [ 149.013322][ T7887] ? setup_bdev_super+0x586/0x680 [ 149.013349][ T7887] get_tree_bdev_flags+0x430/0x4f0 [ 149.013373][ T7887] ? __pfx_gfs2_fill_super+0x10/0x10 [ 149.013396][ T7887] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 149.013429][ T7887] gfs2_get_tree+0x51/0x1e0 [ 149.013457][ T7887] vfs_get_tree+0x92/0x2a0 [ 149.013481][ T7887] do_new_mount+0x325/0xb00 [ 149.013516][ T7887] ? __pfx_do_new_mount+0x10/0x10 [ 149.013547][ T7887] ? ns_capable+0x84/0xe0 [ 149.013572][ T7887] ? path_mount+0x647/0x1050 [ 149.013612][ T7887] ? user_path_at+0xd4/0x160 [ 149.013636][ T7887] __se_sys_mount+0x31d/0x420 [ 149.013661][ T7887] ? __pfx___se_sys_mount+0x10/0x10 [ 149.013685][ T7887] ? __x64_sys_mount+0x20/0xc0 [ 149.013704][ T7887] do_syscall_64+0x166/0x520 [ 149.013722][ T7887] ? trace_irq_disable+0x3b/0x140 [ 149.013742][ T7887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.013761][ T7887] ? clear_bhb_loop+0x70/0xc0 [ 149.013785][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.013805][ T7887] RIP: 0033:0x7f3df7f9f7ca [ 149.013823][ T7887] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.013841][ T7887] RSP: 002b:00007f3df8dbbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.013862][ T7887] RAX: ffffffffffffffda RBX: 00007f3df8dbbee0 RCX: 00007f3df7f9f7ca [ 149.013877][ T7887] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f3df8dbbea0 [ 149.013891][ T7887] RBP: 00002000000124c0 R08: 00007f3df8dbbee0 R09: 0000000000000000 [ 149.013905][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 149.013918][ T7887] R13: 00007f3df8dbbea0 R14: 00000000000125f4 R15: 00002000000000c0 [ 149.013949][ T7887] [ 149.019553][ T7887] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 149.194337][ T7907] loop4: detected capacity change from 0 to 32768 [ 149.204471][ T7907] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.777 (7907) [ 149.257861][ T7926] hugetlbfs: syz.2.784 (7926): Using mlock ulimits for SHM_HUGETLB is obsolete [ 149.357015][ T7907] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 149.357047][ T7907] BTRFS info (device loop4): using blake2b checksum algorithm [ 149.492164][ T7907] BTRFS info (device loop4): enabling ssd optimizations [ 149.492195][ T7907] BTRFS info (device loop4): turning on async discard [ 149.492212][ T7907] BTRFS info (device loop4): enabling free space tree [ 149.603528][ T33] audit: type=1400 audit(1792092216.466:17): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=7945 comm="syz.1.786" name="p" offset=33 [ 149.625596][ T7944] loop2: detected capacity change from 0 to 2048 [ 149.672458][ T7948] loop3: detected capacity change from 0 to 1024 [ 149.702236][ T7948] hfsplus: invalid length 1280 has been corrected to 255 [ 149.736070][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.736182][ T7944] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.895503][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 149.944540][ T7953] bond0: entered promiscuous mode [ 149.944564][ T7953] bond_slave_0: entered promiscuous mode [ 149.944756][ T7953] bond_slave_1: entered promiscuous mode [ 150.102792][ T5605] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 150.112347][ T7953] bond0: left promiscuous mode [ 150.112371][ T7953] bond_slave_0: left promiscuous mode [ 150.112609][ T7953] bond_slave_1: left promiscuous mode [ 150.218899][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.804386][ T7981] loop1: detected capacity change from 0 to 512 [ 150.818945][ T7981] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 150.856584][ T7984] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 150.882214][ T7981] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 150.883469][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:6677: inode #11: comm syz.1.800: corrupted inode contents [ 150.883497][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.885301][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 150.885320][ C1] EXT4-fs (loop1): initial error at time 1792092217: mb_free_blocks:2047: inode 11: block 64 [ 150.885352][ C1] EXT4-fs (loop1): last error at time 1792092217: ext4_do_update_inode:6677: inode 11 [ 150.933282][ T271] rtrs_client L2031: : CM error (CM event: address error, err: -ENODEV) [ 150.936727][ T7984] rtrs_client L2656: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 150.990883][ T7981] EXT4-fs error (device loop1): ext4_dirty_inode:7649: inode #11: comm syz.1.800: mark_inode_dirty error [ 150.990907][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.995262][ T7981] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #11: comm syz.1.800: invalid indirect mapped block 1 (level 1) [ 150.995297][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.018466][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:6677: inode #11: comm syz.1.800: corrupted inode contents [ 151.018501][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.056615][ T7981] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 151.056642][ T7981] loop1: lost filesystem error report for type 5 error -117 [ 151.057085][ T7981] EXT4-fs error (device loop1): ext4_do_update_inode:6677: inode #11: comm syz.1.800: corrupted inode contents [ 151.057113][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.057458][ T7981] EXT4-fs error (device loop1): ext4_truncate:5514: inode #11: comm syz.1.800: mark_inode_dirty error [ 151.057482][ T7981] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.057847][ T7981] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 151.057893][ T7981] loop1: lost filesystem error report for type 5 error -117 [ 151.058284][ T7981] EXT4-fs (loop1): 1 truncate cleaned up [ 151.061819][ T7981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.222202][ T7970] loop3: detected capacity change from 0 to 32768 [ 151.239756][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.296602][ T7970] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.399602][ T7970] XFS (loop3): Ending clean mount [ 151.407487][ T7970] XFS (loop3): Quotacheck needed: Please wait. [ 151.462290][ T7970] XFS (loop3): Quotacheck: Done. [ 151.633462][ T8004] loop0: detected capacity change from 0 to 1024 [ 151.634294][ T8004] EXT4-fs: Ignoring removed bh option [ 151.660058][ T5603] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.671220][ T8004] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.717660][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.153607][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.194196][ T8022] loop3: detected capacity change from 0 to 2048 [ 152.259366][ T8022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.668730][ T8038] netlink: 'syz.4.820': attribute type 9 has an invalid length. [ 152.726559][ T8041] netlink: 'syz.2.821': attribute type 2 has an invalid length. [ 152.776473][ T8044] i2c i2c-0: new_device: Extra parameters [ 152.865108][ T2251] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.866359][ T8048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 153.016262][ T2251] usb 1-1: Using ep0 maxpacket: 16 [ 153.016855][ T2251] usb 1-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00 [ 153.017916][ T2251] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.017946][ T2251] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.017967][ T2251] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.017997][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.028499][ T2251] usb 1-1: config 0 descriptor?? [ 153.130760][ T8032] loop1: detected capacity change from 0 to 32768 [ 153.159669][ T8032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.817 (8032) [ 153.172032][ T8032] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.172065][ T8032] BTRFS info (device loop1): using sha256 checksum algorithm [ 153.263923][ T8052] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 153.302359][ T8032] BTRFS info (device loop1): enabling ssd optimizations [ 153.302390][ T8032] BTRFS info (device loop1): turning on async discard [ 153.302407][ T8032] BTRFS info (device loop1): enabling free space tree [ 153.404469][ T8082] BTRFS info (device loop1): device stats zeroed by syz.1.817 (8082) [ 153.443297][ T8036] loop0: detected capacity change from 0 to 256 [ 153.444354][ T8036] vfat: Unknown parameter 'ufi_xlate' [ 153.548796][ T2251] hid (null): invalid report_size 842551670 [ 153.548843][ T2251] hid (null): unknown global tag 0x9c [ 153.548869][ T2251] hid (null): unknown global tag 0xe [ 153.548882][ T2251] hid (null): unknown global tag 0xd [ 153.548906][ T2251] hid (null): report_id 665511908 is invalid [ 153.548921][ T2251] hid (null): unknown global tag 0xd [ 153.548935][ T2251] hid (null): unknown global tag 0x68 [ 153.582643][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582681][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582708][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582734][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582760][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582784][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582811][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582836][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582862][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.582887][ T2251] cougar 0003:060B:500A.0009: unknown main item tag 0x0 [ 153.624541][ T2251] cougar 0003:060B:500A.0009: unexpected long global item [ 153.625693][ T2251] cougar 0003:060B:500A.0009: parse failed [ 153.625792][ T2251] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 153.647339][ T5604] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.729706][ T2251] usb 1-1: USB disconnect, device number 6 [ 154.138961][ T8097] loop2: detected capacity change from 0 to 512 [ 154.200867][ T8097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.224250][ T8097] EXT4-fs warning (device loop2): ext4_group_add:1738: No reserved GDT blocks, can't resize [ 154.298321][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.462070][ T8110] loop3: detected capacity change from 0 to 256 [ 154.540798][ T8114] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 154.540798][ T8114] The task syz.0.843 (8114) triggered the difference, watch for misbehavior. [ 194.371365][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.371422][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.427849][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 196.431197][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 196.435071][ T4926] Bluetooth: hci1: command 0x0406 tx timeout [ 214.533612][ T4975] udevd[4975]: worker [5870] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 255.786413][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.786472][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.465161][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 311.465187][ T34] INFO: task kworker/u8:7:271 blocked in I/O wait for more than 143 seconds. [ 311.465217][ T34] Not tainted syzkaller #0 [ 311.465227][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.465237][ T34] task:kworker/u8:7 state:D stack:21544 pid:271 tgid:271 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 311.465295][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 311.465333][ T34] Call Trace: [ 311.465340][ T34] [ 311.465353][ T34] __schedule+0x17dd/0x5820 [ 311.465376][ T34] ? blk_mq_flush_plug_list+0x415/0x540 [ 311.465409][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 311.465437][ ** replaying previous printk message ** [ 311.465437][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 311.465457][ T34] ? __pfx___schedule+0x10/0x10 [ 311.465486][ T34] ? schedule+0x90/0x2b0 [ 311.465510][ T34] schedule+0x164/0x2b0 [ 311.465528][ T34] io_schedule+0x7f/0xd0 [ 311.465545][ T34] rq_qos_wait+0x266/0x360 [ 311.465571][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 311.465589][ T34] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 311.465608][ T34] ? __pfx_rq_qos_wait+0x10/0x10 [ 311.465631][ T34] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 311.465656][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 311.465689][ T34] wbt_wait+0x326/0x550 [ 311.465720][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 311.465747][ T34] ? __pfx_dd_bio_merge+0x10/0x10 [ 311.465774][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 311.465797][ T34] __rq_qos_throttle+0x6b/0xb0 [ 311.465819][ T34] blk_mq_submit_bio+0x1697/0x2c40 [ 311.465841][ T34] ? blk_mq_submit_bio+0x490/0x2c40 [ 311.465868][ T34] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 311.465884][ T34] ? blk_cgroup_bio_start+0x5d7/0x670 [ 311.465907][ T34] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 311.465928][ T34] ? __submit_bio+0x7e/0x340 [ 311.465941][ T34] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 311.465960][ T34] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 311.465986][ T34] ext4_bio_write_folio+0x101a/0x18c0 [ 311.466007][ T34] mpage_process_page_bufs+0x6bd/0x8a0 [ 311.466034][ T34] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 311.466047][ T34] ? process_scheduled_works+0xc3d/0x1630 [ 311.466072][ T34] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 311.466098][ T34] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 311.466113][ T34] ? ext4_init_io_end+0x29/0x130 [ 311.466124][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 311.466138][ T34] ? ext4_init_io_end+0x29/0x130 [ 311.466155][ T34] ext4_do_writepages+0xc08/0x44c0 [ 311.466178][ T34] ? kfree+0x1c5/0x650 [ 311.466191][ T34] ? ieee80211_inform_bss+0xc59/0x1150 [ 311.466211][ T34] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 311.466223][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 311.466233][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.466247][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.466261][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.466281][ T34] ? lock_acquire+0x115/0x350 [ 311.466302][ T34] ext4_writepages+0x1fe/0x4e0 [ 311.466318][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 311.466339][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 311.466354][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 311.466368][ T34] do_writepages+0x338/0x560 [ 311.466388][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 311.466400][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 311.466418][ T34] __writeback_single_inode+0x136/0x1220 [ 311.466435][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 311.466452][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 311.466467][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.466491][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 311.466543][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 311.466567][ T34] __writeback_inodes_wb+0x114/0x240 [ 311.466586][ T34] wb_writeback+0x42f/0xad0 [ 311.466602][ T34] ? queue_io+0x1f1/0x470 [ 311.466620][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 311.466633][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.466655][ T34] wb_workfn+0xc92/0x10f0 [ 311.466678][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 311.466699][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.466718][ T34] ? lock_acquire+0x115/0x350 [ 311.466734][ T34] ? rcu_is_watching+0x16/0xb0 [ 311.466748][ T34] ? process_scheduled_works+0x97a/0x1630 [ 311.466762][ T34] process_scheduled_works+0xc3d/0x1630 [ 311.466791][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 311.466808][ T34] ? assign_work+0x3cf/0x5d0 [ 311.466824][ T34] worker_thread+0xa47/0xfb0 [ 311.466852][ T34] kthread+0x38b/0x480 [ 311.466862][ T34] ? __pfx_worker_thread+0x10/0x10 [ 311.466875][ T34] ? __pfx_kthread+0x10/0x10 [ 311.466885][ T34] ret_from_fork+0x514/0xb70 [ 311.466898][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 311.466908][ T34] ? __switch_to+0xc78/0x1410 [ 311.466924][ T34] ? __pfx_kthread+0x10/0x10 [ 311.466935][ T34] ret_from_fork_asm+0x1a/0x30 [ 311.466954][ T34] [ 311.467006][ T34] INFO: task jbd2/sda1-8:4938 blocked in I/O wait for more than 143 seconds. [ 311.467020][ T34] Not tainted syzkaller #0 [ 311.467026][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.467030][ T34] task:jbd2/sda1-8 state:D stack:26280 pid:4938 tgid:4938 ppid:2 task_flags:0x240040 flags:0x00080000 [ 311.467062][ T34] Call Trace: [ 311.467065][ T34] [ 311.467072][ T34] __schedule+0x17dd/0x5820 [ 311.467091][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 311.467104][ T34] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 311.467118][ T34] ? __pfx___schedule+0x10/0x10 [ 311.467134][ T34] ? schedule+0x90/0x2b0 [ 311.467146][ T34] schedule+0x164/0x2b0 [ 311.467158][ T34] io_schedule+0x7f/0xd0 [ 311.467169][ T34] bit_wait_io+0x13/0x110 [ 311.467182][ T34] __wait_on_bit+0xac/0x300 [ 311.467193][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.467206][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.467219][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.467230][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.467243][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.467258][ T34] ? __wait_on_buffer+0xe/0x80 [ 311.467274][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 311.467307][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 311.467324][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.467351][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.467363][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.467373][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 311.467388][ T34] kjournald2+0x3bc/0x740 [ 311.467411][ T34] ? __pfx_kjournald2+0x10/0x10 [ 311.467424][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 311.467438][ T34] ? __kthread_parkme+0x71/0x1f0 [ 311.467454][ T34] ? __kthread_parkme+0x199/0x1f0 [ 311.467470][ T34] kthread+0x38b/0x480 [ 311.467481][ T34] ? __pfx_kjournald2+0x10/0x10 [ 311.467493][ T34] ? __pfx_kthread+0x10/0x10 [ 311.467504][ T34] ret_from_fork+0x514/0xb70 [ 311.467518][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 311.467528][ T34] ? __switch_to+0xc78/0x1410 [ 311.467544][ T34] ? __pfx_kthread+0x10/0x10 [ 311.467554][ T34] ret_from_fork_asm+0x1a/0x30 [ 311.467573][ T34] [ 311.467583][ T34] INFO: task syz-executor:5592 blocked in I/O wait for more than 143 seconds. [ 311.467591][ T34] Not tainted syzkaller #0 [ 311.467596][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.467601][ T34] task:syz-executor state:D stack:22088 pid:5592 tgid:5592 ppid:5591 task_flags:0x440100 flags:0x00080000 [ 311.467625][ T34] Call Trace: [ 311.467629][ T34] [ 311.467635][ T34] __schedule+0x17dd/0x5820 [ 311.467653][ T34] ? lock_acquire+0x115/0x350 [ 311.467670][ T34] ? __pfx___schedule+0x10/0x10 [ 311.467686][ T34] ? schedule+0x90/0x2b0 [ 311.467698][ T34] schedule+0x164/0x2b0 [ 311.467709][ T34] io_schedule+0x7f/0xd0 [ 311.467721][ T34] bit_wait_io+0x13/0x110 [ 311.467733][ T34] __wait_on_bit+0xac/0x300 [ 311.467744][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.467757][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.467770][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.467781][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.467794][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.467812][ T34] do_get_write_access+0x658/0x10c0 [ 311.467837][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.467854][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.467871][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.467882][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 311.467896][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 311.467915][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.467932][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.467953][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.467965][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.467977][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.467994][ T34] file_update_time_flags+0x399/0x440 [ 311.468009][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 311.468034][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 311.468045][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.468061][ T34] do_page_mkwrite+0x147/0x310 [ 311.468079][ T34] do_wp_page+0x1a85/0x4b60 [ 311.468100][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 311.468111][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.468127][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.468146][ T34] handle_mm_fault+0x15c1/0x3540 [ 311.468164][ T34] ? handle_mm_fault+0xee/0x3540 [ 311.468183][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 311.468194][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 311.468207][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 311.468233][ T34] do_user_addr_fault+0xb35/0x1480 [ 311.468250][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 311.468263][ T34] exc_page_fault+0x6a/0xc0 [ 311.468275][ T34] asm_exc_page_fault+0x26/0x30 [ 311.468286][ T34] RIP: 0033:0x7ff688e7cae2 [ 311.468296][ T34] RSP: 002b:00007ffc4c5038f0 EFLAGS: 00010202 [ 311.468305][ T34] RAX: 00007ff686e10000 RBX: 0000555560908720 RCX: 0000000000000005 [ 311.468312][ T34] RDX: 0000000000002326 RSI: 0000555560896548 RDI: 0000000000000020 [ 311.468319][ T34] RBP: 00007ffc4c503df0 R08: 00005555608968f0 R09: 00000000000000a3 [ 311.468326][ T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc4c503c30 [ 311.468332][ T34] R13: 00007ffc4c503a20 R14: 585858582e7a7973 R15: 00007ffc4c503970 [ 311.468349][ T34] [ 311.468377][ T34] INFO: task syz.0.843:8107 blocked in I/O wait for more than 143 seconds. [ 311.468385][ T34] Not tainted syzkaller #0 [ 311.468389][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.468394][ T34] task:syz.0.843 state:D stack:25576 pid:8107 tgid:8107 ppid:5617 task_flags:0x440040 flags:0x00080002 [ 311.468420][ T34] Call Trace: [ 311.468424][ T34] [ 311.468430][ T34] __schedule+0x17dd/0x5820 [ 311.468448][ T34] ? lock_acquire+0x115/0x350 [ 311.468465][ T34] ? __pfx___schedule+0x10/0x10 [ 311.468481][ T34] ? schedule+0x90/0x2b0 [ 311.468493][ T34] schedule+0x164/0x2b0 [ 311.468505][ T34] io_schedule+0x7f/0xd0 [ 311.468519][ T34] bit_wait_io+0x13/0x110 [ 311.468532][ T34] __wait_on_bit+0xac/0x300 [ 311.468543][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.468556][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.468568][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.468579][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.468592][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.468611][ T34] do_get_write_access+0x658/0x10c0 [ 311.468635][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.468652][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.468668][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.468679][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 311.468693][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 311.468711][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.468728][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.468749][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.468761][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.468773][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.468789][ T34] file_update_time_flags+0x399/0x440 [ 311.468804][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 311.468821][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 311.468835][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 311.468853][ T34] do_page_mkwrite+0x147/0x310 [ 311.468870][ T34] do_pte_missing+0x70f/0x3570 [ 311.468890][ T34] ? handle_mm_fault+0xee/0x3540 [ 311.468904][ T34] handle_mm_fault+0x1a2a/0x3540 [ 311.468931][ T34] ? handle_mm_fault+0xee/0x3540 [ 311.468954][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 311.468966][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 311.468978][ T34] ? __pfx_do_futex+0x10/0x10 [ 311.469004][ T34] do_user_addr_fault+0xb35/0x1480 [ 311.469026][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 311.469038][ T34] exc_page_fault+0x6a/0xc0 [ 311.469050][ T34] asm_exc_page_fault+0x26/0x30 [ 311.469060][ T34] RIP: 0033:0x7f3df7e73332 [ 311.469069][ T34] RSP: 002b:00007ffefe91bf40 EFLAGS: 00010202 [ 311.469077][ T34] RAX: 0000000000001008 RBX: 00007f3df8d55720 RCX: 0000000000000000 [ 311.469084][ T34] RDX: 0000001b32f23000 RSI: 0000000000000008 RDI: 00007f3df8d55720 [ 311.469090][ T34] RBP: 0000000000000105 R08: 00007f3df8210000 R09: 00007f3df8226218 [ 311.469097][ T34] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff84928e97 [ 311.469104][ T34] R13: 00007f3df8226218 R14: 0000000000000079 R15: fffffffffffff000 [ 311.469112][ T34] ? sem_lock+0x17/0x3b0 [ 311.469132][ T34] [ 311.469136][ T34] INFO: task syz.4.845:8112 blocked in I/O wait for more than 143 seconds. [ 311.469144][ T34] Not tainted syzkaller #0 [ 311.469149][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.469153][ T34] task:syz.4.845 state:D stack:25576 pid:8112 tgid:8112 ppid:5605 task_flags:0x440040 flags:0x00080002 [ 311.469180][ T34] Call Trace: [ 311.469183][ T34] [ 311.469189][ T34] __schedule+0x17dd/0x5820 [ 311.469206][ T34] ? __lock_acquire+0x747/0x2de0 [ 311.469224][ T34] ? __pfx___schedule+0x10/0x10 [ 311.469240][ T34] ? schedule+0x90/0x2b0 [ 311.469252][ T34] schedule+0x164/0x2b0 [ 311.469264][ T34] io_schedule+0x7f/0xd0 [ 311.469275][ T34] bit_wait_io+0x13/0x110 [ 311.469288][ T34] __wait_on_bit+0xac/0x300 [ 311.469299][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.469312][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.469324][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.469335][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.469348][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.469367][ T34] do_get_write_access+0x658/0x10c0 [ 311.469391][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.469408][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.469423][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.469435][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 311.469448][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 311.469467][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.469484][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.469504][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.469519][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.469531][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.469546][ T34] file_update_time_flags+0x399/0x440 [ 311.469561][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 311.469578][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 311.469591][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 311.469604][ T34] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 311.469623][ T34] do_page_mkwrite+0x147/0x310 [ 311.469640][ T34] do_pte_missing+0x70f/0x3570 [ 311.469664][ T34] handle_mm_fault+0x1a2a/0x3540 [ 311.469680][ T34] ? handle_mm_fault+0xee/0x3540 [ 311.469700][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 311.469711][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 311.469724][ T34] ? __pfx_do_futex+0x10/0x10 [ 311.469749][ T34] do_user_addr_fault+0xb35/0x1480 [ 311.469766][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 311.469779][ T34] exc_page_fault+0x6a/0xc0 [ 311.469790][ T34] asm_exc_page_fault+0x26/0x30 [ 311.469800][ T34] RIP: 0033:0x7fb31be72c09 [ 311.469808][ T34] RSP: 002b:00007ffcc278db60 EFLAGS: 00010202 [ 311.469816][ T34] RAX: 0000001b33124000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 311.469823][ T34] RDX: 0000001b33123ffc RSI: 00000000003ffde8 RDI: 00007fb31cd55700 [ 311.469830][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fb31c212000 [ 311.469836][ T34] R10: 00007fb31cd55700 R11: 0000000000000000 R12: 0000000000000000 [ 311.469842][ T34] R13: 0000000000000179 R14: ffffffff816db6ae R15: 00007fb31cd55720 [ 311.469850][ T34] ? fpregs_assert_state_consistent+0xee/0x150 [ 311.469872][ T34] [ 311.469876][ T34] INFO: task syz.3.846:8115 blocked in I/O wait for more than 143 seconds. [ 311.469883][ T34] Not tainted syzkaller #0 [ 311.469894][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.469898][ T34] task:syz.3.846 state:D stack:26936 pid:8115 tgid:8115 ppid:5603 task_flags:0x440040 flags:0x00080002 [ 311.469924][ T34] Call Trace: [ 311.469927][ T34] [ 311.469933][ T34] __schedule+0x17dd/0x5820 [ 311.469958][ T34] ? __pfx___schedule+0x10/0x10 [ 311.469974][ T34] ? schedule+0x90/0x2b0 [ 311.469986][ T34] schedule+0x164/0x2b0 [ 311.469998][ T34] io_schedule+0x7f/0xd0 [ 311.470009][ T34] bit_wait_io+0x13/0x110 [ 311.470026][ T34] __wait_on_bit+0xac/0x300 [ 311.470038][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.470051][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.470063][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.470074][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.470087][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.470106][ T34] do_get_write_access+0x658/0x10c0 [ 311.470130][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.470147][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.470163][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.470180][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.470197][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.470217][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.470229][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.470241][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.470253][ T34] ? mnt_get_write_access+0x216/0x280 [ 311.470266][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.470277][ T34] touch_atime+0x568/0x670 [ 311.470288][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.470301][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 311.470314][ T34] mmap_region+0xef7/0x2840 [ 311.470327][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.470341][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.470357][ T34] ? lock_acquire+0x115/0x350 [ 311.470368][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.470381][ T34] ? __pfx_mmap_region+0x10/0x10 [ 311.470394][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.470407][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.470418][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 311.470429][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.470454][ T34] ? lock_acquire+0x115/0x350 [ 311.470502][ T34] ? mt_find+0x186/0x630 [ 311.470520][ T34] ? mt_find+0x5ff/0x630 [ 311.470534][ T34] ? mt_find+0x186/0x630 [ 311.470547][ T34] ? __pfx_mt_find+0x10/0x10 [ 311.470563][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 311.470574][ T34] ? security_mmap_addr+0x71/0x240 [ 311.470588][ T34] ? shmem_mapping+0xd/0x50 [ 311.470602][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 311.470619][ T34] do_mmap+0xe0a/0x1300 [ 311.470636][ T34] ? __pfx_do_mmap+0x10/0x10 [ 311.470654][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 311.470668][ T34] ? down_write_killable+0x179/0x230 [ 311.470681][ T34] ? lock_acquire+0x115/0x350 [ 311.470692][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 311.470710][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 311.470727][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 311.470743][ T34] ? lock_acquire+0x115/0x350 [ 311.470756][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.470772][ T34] ? __fget_files+0x2a/0x420 [ 311.470784][ T34] ? __fget_files+0x3a2/0x420 [ 311.470794][ T34] ? __fget_files+0x2a/0x420 [ 311.470805][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 311.470822][ T34] do_syscall_64+0x166/0x520 [ 311.470833][ T34] ? trace_irq_disable+0x3b/0x140 [ 311.470845][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.470855][ T34] ? clear_bhb_loop+0x70/0xc0 [ 311.470868][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.470886][ T34] RIP: 0033:0x7f231df9e2c2 [ 311.470894][ T34] RSP: 002b:00007ffe8dd9ddb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 311.470904][ T34] RAX: ffffffffffffffda RBX: 0000001b32c64000 RCX: 00007f231df9e2c2 [ 311.470911][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32c64000 [ 311.470918][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 311.470924][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000009e [ 311.470931][ T34] R13: 00000000000927c0 R14: 0000000000025b5a R15: 00007ffe8dd9e090 [ 311.470947][ T34] [ 311.470951][ T34] INFO: task syz.2.847:8116 blocked in I/O wait for more than 143 seconds. [ 311.470959][ T34] Not tainted syzkaller #0 [ 311.470963][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.470968][ T34] task:syz.2.847 state:D stack:26952 pid:8116 tgid:8116 ppid:5602 task_flags:0x440040 flags:0x00080002 [ 311.470994][ T34] Call Trace: [ 311.470997][ T34] [ 311.471003][ T34] __schedule+0x17dd/0x5820 [ 311.471034][ T34] ? __pfx___schedule+0x10/0x10 [ 311.471050][ T34] ? schedule+0x90/0x2b0 [ 311.471062][ T34] schedule+0x164/0x2b0 [ 311.471076][ T34] io_schedule+0x7f/0xd0 [ 311.471088][ T34] bit_wait_io+0x13/0x110 [ 311.471101][ T34] __wait_on_bit+0xac/0x300 [ 311.471112][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.471124][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.471137][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.471148][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.471161][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.471180][ T34] do_get_write_access+0x658/0x10c0 [ 311.471204][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.471221][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.471237][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.471254][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.471271][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.471291][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.471304][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.471315][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.471328][ T34] ? mnt_get_write_access+0x216/0x280 [ 311.471340][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.471351][ T34] touch_atime+0x568/0x670 [ 311.471362][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.471375][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 311.471388][ T34] mmap_region+0xef7/0x2840 [ 311.471400][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.471414][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.471429][ T34] ? lock_acquire+0x115/0x350 [ 311.471441][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.471454][ T34] ? __pfx_mmap_region+0x10/0x10 [ 311.471466][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.471479][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.471491][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 311.471501][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.471531][ T34] ? lock_acquire+0x115/0x350 [ 311.471581][ T34] ? mt_find+0x186/0x630 [ 311.471596][ T34] ? mt_find+0x5ff/0x630 [ 311.471610][ T34] ? mt_find+0x186/0x630 [ 311.471622][ T34] ? __pfx_mt_find+0x10/0x10 [ 311.471639][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 311.471649][ T34] ? security_mmap_addr+0x71/0x240 [ 311.471663][ T34] ? shmem_mapping+0xd/0x50 [ 311.471676][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 311.471691][ T34] do_mmap+0xe0a/0x1300 [ 311.471708][ T34] ? __pfx_do_mmap+0x10/0x10 [ 311.471726][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 311.471740][ T34] ? down_write_killable+0x179/0x230 [ 311.471753][ T34] ? lock_acquire+0x115/0x350 [ 311.471763][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 311.471776][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 311.471792][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 311.471807][ T34] ? lock_acquire+0x115/0x350 [ 311.471820][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.471836][ T34] ? __fget_files+0x2a/0x420 [ 311.471848][ T34] ? __fget_files+0x3a2/0x420 [ 311.471857][ T34] ? __fget_files+0x2a/0x420 [ 311.471869][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 311.471885][ T34] do_syscall_64+0x166/0x520 [ 311.471896][ T34] ? trace_irq_disable+0x3b/0x140 [ 311.471907][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.471917][ T34] ? clear_bhb_loop+0x70/0xc0 [ 311.471930][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.471939][ T34] RIP: 0033:0x7f39b139e2c2 [ 311.471948][ T34] RSP: 002b:00007ffdc8b91a68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 311.471958][ T34] RAX: ffffffffffffffda RBX: 0000001b32b64000 RCX: 00007f39b139e2c2 [ 311.471966][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32b64000 [ 311.471972][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 311.471978][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000b8 [ 311.471985][ T34] R13: 00000000000927c0 R14: 0000000000025b43 R15: 00007ffdc8b91d40 [ 311.472001][ T34] [ 311.472005][ T34] INFO: task syz.1.848:8117 blocked in I/O wait for more than 143 seconds. [ 311.472016][ T34] Not tainted syzkaller #0 [ 311.472021][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.472025][ T34] task:syz.1.848 state:D stack:26344 pid:8117 tgid:8117 ppid:5604 task_flags:0x440040 flags:0x00080002 [ 311.472052][ T34] Call Trace: [ 311.472055][ T34] [ 311.472061][ T34] __schedule+0x17dd/0x5820 [ 311.472086][ T34] ? __pfx___schedule+0x10/0x10 [ 311.472102][ T34] ? schedule+0x90/0x2b0 [ 311.472114][ T34] schedule+0x164/0x2b0 [ 311.472126][ T34] io_schedule+0x7f/0xd0 [ 311.472137][ T34] bit_wait_io+0x13/0x110 [ 311.472150][ T34] __wait_on_bit+0xac/0x300 [ 311.472161][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.472174][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 311.472186][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 311.472197][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 311.472211][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 311.472229][ T34] do_get_write_access+0x658/0x10c0 [ 311.472254][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 311.472271][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 311.472286][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 311.472303][ T34] ext4_reserve_inode_write+0x294/0x360 [ 311.472321][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 311.472341][ T34] ext4_dirty_inode+0xd0/0x110 [ 311.472354][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 311.472366][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 311.472378][ T34] ? mnt_get_write_access+0x216/0x280 [ 311.472390][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.472401][ T34] touch_atime+0x568/0x670 [ 311.472412][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 311.472425][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 311.472438][ T34] mmap_region+0xef7/0x2840 [ 311.472450][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.472464][ T34] ? __update_page_owner_handle+0x5a/0x580 [ 311.472479][ T34] ? lock_acquire+0x115/0x350 [ 311.472491][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.472504][ T34] ? __pfx_mmap_region+0x10/0x10 [ 311.472516][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.472529][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.472541][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 311.472552][ T34] ? __page_table_check_zero+0x6c/0x430 [ 311.472577][ T34] ? lock_acquire+0x115/0x350 [ 311.472625][ T34] ? mt_find+0x186/0x630 [ 311.472640][ T34] ? mt_find+0x5ff/0x630 [ 311.472653][ T34] ? mt_find+0x186/0x630 [ 311.472666][ T34] ? __pfx_mt_find+0x10/0x10 [ 311.472682][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 311.472692][ T34] ? security_mmap_addr+0x71/0x240 [ 311.472706][ T34] ? shmem_mapping+0xd/0x50 [ 311.472719][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 311.472735][ T34] do_mmap+0xe0a/0x1300 [ 311.472751][ T34] ? __pfx_do_mmap+0x10/0x10 [ 311.472769][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 311.472783][ T34] ? down_write_killable+0x179/0x230 [ 311.472796][ T34] ? lock_acquire+0x115/0x350 [ 311.472807][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 311.472820][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 311.472836][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 311.472856][ T34] ? lock_acquire+0x115/0x350 [ 311.472869][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.472885][ T34] ? __fget_files+0x2a/0x420 [ 311.472897][ T34] ? __fget_files+0x3a2/0x420 [ 311.472906][ T34] ? __fget_files+0x2a/0x420 [ 311.472918][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 311.472934][ T34] do_syscall_64+0x166/0x520 [ 311.472954][ T34] ? trace_irq_disable+0x3b/0x140 [ 311.472966][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.472976][ T34] ? clear_bhb_loop+0x70/0xc0 [ 311.472988][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.472998][ T34] RIP: 0033:0x7fe57119e2c2 [ 311.473007][ T34] RSP: 002b:00007fff838da018 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 311.473021][ T34] RAX: ffffffffffffffda RBX: 0000001b32a64000 RCX: 00007fe57119e2c2 [ 311.473028][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32a64000 [ 311.473035][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 311.473041][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000a7 [ 311.473047][ T34] R13: 00000000000927c0 R14: 0000000000025a33 R15: 00007fff838da2f0 [ 311.473063][ T34] [ 311.473078][ T34] [ 311.473078][ T34] Showing all locks held in the system: [ 311.473086][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 311.473094][ T34] #0: ffffffff8fd5a2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 311.473128][ T34] locks held by kworker/u8:7/271: 4, on CPU#0: [ 311.473135][ T34] #0: ffff888020ee2948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 311.473163][ T34] #1: ffffc90003167c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 311.473189][ T34] #2: ffff888033b5a0e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 311.473220][ T34] #3: ffff888033b50cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 311.473262][ T34] locks held by getty/5361: 2, on CPU#0: [ 311.473269][ T34] #0: ffff8880298f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.473295][ T34] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 311.473323][ T34] locks held by syz-executor/5592: 3, on CPU#1: [ 311.473330][ T34] #0: ffff888027ed7088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 311.473355][ T34] #1: ffff888033b5a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 311.473381][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473414][ T34] locks held by syz.0.843/8107: 3, on CPU#0: [ 311.473421][ T34] #0: ffff888077576808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 311.473446][ T34] #1: ffff888033b5a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 311.473474][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473501][ T34] locks held by syz.4.845/8112: 3, on CPU#0: [ 311.473508][ T34] #0: ffff888074478448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 311.473533][ T34] #1: ffff888033b5a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 311.473558][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473584][ T34] locks held by syz.3.846/8115: 3, on CPU#0: [ 311.473591][ T34] #0: ffff88807d987180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 311.473619][ T34] #1: ffff888033b5a460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 311.473644][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473670][ T34] locks held by syz.2.847/8116: 3, on CPU#0: [ 311.473677][ T34] #0: ffff88807d984cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 311.473704][ T34] #1: ffff888033b5a460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 311.473728][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473755][ T34] locks held by syz.1.848/8117: 3, on CPU#1: [ 311.473762][ T34] #0: ffff88802cfce540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 311.473789][ T34] #1: ffff888033b5a460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 311.473814][ T34] #2: ffff888033b58950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 311.473840][ T34] [ 311.473843][ T34] ============================================= [ 311.473843][ T34] [ 311.473857][ T34] NMI backtrace for cpu 1 [ 311.473866][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 311.473886][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.473897][ T34] Call Trace: [ 311.473905][ T34] [ 311.473913][ T34] dump_stack_lvl+0xe8/0x150 [ 311.473941][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 311.473970][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 311.473987][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 311.474003][ T34] sys_info+0x135/0x170 [ 311.474020][ T34] watchdog+0x1073/0x10f0 [ 311.474036][ T34] ? watchdog+0x209/0x10f0 [ 311.474051][ T34] kthread+0x38b/0x480 [ 311.474061][ T34] ? __pfx_watchdog+0x10/0x10 [ 311.474071][ T34] ? __pfx_kthread+0x10/0x10 [ 311.474081][ T34] ret_from_fork+0x514/0xb70 [ 311.474093][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 311.474103][ T34] ? __switch_to+0xc78/0x1410 [ 311.474118][ T34] ? __pfx_kthread+0x10/0x10 [ 311.474128][ T34] ret_from_fork_asm+0x1a/0x30 [ 311.474145][ T34] [ 311.474148][ T34] Sending NMI from CPU 1 to CPUs 0: [ 311.474259][ C0] NMI backtrace for cpu 0 [ 311.474272][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 311.474291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.474302][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 311.474324][ C0] Code: 7b 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 1b 15 00 fb f4 cc 16 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 311.474340][ C0] RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000242 [ 311.474356][ C0] RAX: 000000000017e6cd RBX: ffffffff819c66d0 RCX: 8000000000000001 [ 311.474370][ C0] RDX: 0000000000000001 RSI: ffffffff8e46f6a2 RDI: ffffffff8c6e5980 [ 311.474383][ C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433d5b R09: 1ffff110170867ab [ 311.474396][ C0] R10: dffffc0000000000 R11: ffffed10170867ac R12: 0000000000000000 [ 311.474409][ C0] R13: 1ffffffff1f51df8 R14: 1ffffffff1f40f9c R15: dffffc0000000000 [ 311.474423][ C0] FS: 0000000000000000(0000) GS:ffff888123a8f000(0000) knlGS:0000000000000000 [ 311.474438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.474451][ C0] CR2: 000055b780639168 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 311.474468][ C0] Call Trace: [ 311.474475][ C0] [ 311.474481][ C0] default_idle+0x9/0x20 [ 311.474502][ C0] default_idle_call+0x72/0xb0 [ 311.474531][ C0] do_idle+0x2e0/0x540 [ 311.474551][ C0] ? __pfx_do_idle+0x10/0x10 [ 311.474573][ C0] cpu_startup_entry+0x43/0x60 [ 311.474591][ C0] rest_init+0x378/0x3a0 [ 311.474614][ C0] ? __pfx_rest_init+0x10/0x10 [ 311.474641][ C0] ? __pfx_kernel_init+0x10/0x10 [ 311.474665][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 311.474684][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 311.474708][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 311.474732][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 311.474753][ C0] start_kernel+0x392/0x3e0 [ 311.474772][ C0] x86_64_start_reservations+0x24/0x30 [ 311.474796][ C0] x86_64_start_kernel+0x137/0x1b0 [ 311.474818][ C0] common_startup_64+0x13e/0x157 [ 311.474849][ C0] [ 311.540967][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 314.951300][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 314.960394][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.970433][ T34] Call Trace: [ 314.973714][ T34] [ 314.976645][ T34] vpanic+0x26f/0x710 [ 314.980624][ T34] panic+0xc5/0xd0 [ 314.984325][ T34] ? __pfx_panic+0x10/0x10 [ 314.988723][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 314.994180][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 314.999544][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 315.005696][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 315.011889][ T34] watchdog+0x10e7/0x10f0 [ 315.016209][ T34] ? watchdog+0x209/0x10f0 [ 315.020640][ T34] kthread+0x38b/0x480 [ 315.024696][ T34] ? __pfx_watchdog+0x10/0x10 [ 315.029356][ T34] ? __pfx_kthread+0x10/0x10 [ 315.033925][ T34] ret_from_fork+0x514/0xb70 [ 315.038510][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 315.043616][ T34] ? __switch_to+0xc78/0x1410 [ 315.048280][ T34] ? __pfx_kthread+0x10/0x10 [ 315.052850][ T34] ret_from_fork_asm+0x1a/0x30 [ 315.057602][ T34] [ 315.060894][ T34] Kernel Offset: disabled [ 315.065219][ T34] Rebooting in 86400 seconds..