last executing test programs: 40.872973148s ago: executing program 3 (id=952): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000000)=""/79, 0x4f) 40.519037218s ago: executing program 3 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) 40.333809669s ago: executing program 3 (id=959): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 40.007471115s ago: executing program 3 (id=964): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 38.798552009s ago: executing program 3 (id=976): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x2}) 37.444558777s ago: executing program 3 (id=989): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 36.804438185s ago: executing program 32 (id=989): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 2.631965356s ago: executing program 0 (id=1225): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb"], 0x0, 0x8e, 0x0, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, &(0x7f0000000100)=0x8) 2.444365478s ago: executing program 0 (id=1229): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r2}) 2.294348213s ago: executing program 0 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000f705000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.154064686s ago: executing program 0 (id=1234): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000440)=""/137, 0x89}], 0x1, &(0x7f0000000280)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff9, 0xea93}}], 0x30}, 0x4000000) 2.008219381s ago: executing program 4 (id=1236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) writev(r0, &(0x7f0000001400)=[{0x0}, {0x0}], 0x2) 1.854601497s ago: executing program 4 (id=1237): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x8}]}}}]}, 0x3c}}, 0x4) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1.638439994s ago: executing program 4 (id=1240): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) rt_tgsigqueueinfo(r0, r0, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000}) 1.383589946s ago: executing program 4 (id=1243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x6, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 1.248833009s ago: executing program 1 (id=1245): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 1.115198442s ago: executing program 0 (id=1247): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000180), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/76, 0x4c}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.088618696s ago: executing program 4 (id=1248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x6000) 1.019728898s ago: executing program 2 (id=1249): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x38}, 0x300, 0x0, 0x0, 0x4000001}, 0x40010) 893.837439ms ago: executing program 0 (id=1250): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x80000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 893.6804ms ago: executing program 4 (id=1251): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 804.077694ms ago: executing program 2 (id=1252): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYBLOB="9ab5cac9219b9742064142415951540c137a2136299e432f6f1f489ca7a201662eaab1752ef8119d8509a4c1086f5d50fa7a92b841710a7d2729031db4063cd27068a970066d19a2910d399baf54c94d232f617a49be6251e94a1b06171ad72ecd5c2f37060d8a57dbe808118b937d266bfbc9d78362227362ccd8f7ddaf8816bd82a12773edb6dc0da3f2564e669257db80db24f433b5cddcc0d9c36785320eb2454e3290020de993a43389a2b0079591052dcd4d7d6a1718e19c6a1e407eca696fc6b67b9cb3f0c13922c1e98c1f621b1b1267f475bc986fdd36ee674df0191ae00288b1dcd481be855431168c78ed2af9e632aa316a78472ae17b18d509fe6640c4d74294db270eafe48e1d1e50c6054a694b2c549699e30913e357a81bcdaa18bd2485402fc5f02ea551dfddb45f43cf7cc64885e25c81530911ee9343c9bb3f0131a044c31313527363c07565b40a5f393b0b40e87a87a0cba5c0439fde2e79f69834a4801933d57de13004f21ed2eb2cc698322db97f832ddedb924a4b75fb6d43293158877b565dcfeaf57b2015428f08e3b75107fef28ab6fc6f9b997d7f280acbbd3f6072413c07a6674c7219bb22e7ddda75c89ad0eb54e12c4b3e3694fd6fd13d73a43123c7e75dd80297809c3a414ca33f59ccb0958e873c14f0f8a60d23ba9c21ef4a16f02ac2f71e73cc341196a7c47f4dff3acc199698f171c0ea2d024605c9f6976aba6f3d23837c23abfe082b1a9fdfd97dc605909f2946ab219cfd9e2fb88b70723e1952f7a37cd40bf0167b124e04f71895105231d59db73d12873c008b3c39365a18841291ac70cd47e6c479"], 0xfb, 0x21f, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4000, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) fadvise64(r0, 0x8c, 0xff36, 0x3) 677.590586ms ago: executing program 1 (id=1253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)=""/12, &(0x7f0000000080)=0xc) 613.270567ms ago: executing program 2 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 587.507601ms ago: executing program 1 (id=1255): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffffcb, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 448.859435ms ago: executing program 2 (id=1256): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100840, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x1, 0x2b6, &(0x7f0000000ac0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0xca, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "f722e79b271ec7e0d765444ab64fb31f"}]}}}}}}}, 0x0) 444.961785ms ago: executing program 1 (id=1257): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 224.076702ms ago: executing program 1 (id=1258): unshare(0xc020680) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d40)={r1, 0x0, 0x0}, 0x20) 184.484349ms ago: executing program 2 (id=1259): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a01010008000400010000000600150005000000240016002000010001000000000204", @ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x10040044}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 104.984622ms ago: executing program 1 (id=1260): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 0s ago: executing program 2 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32=r1], 0x44}}, 0x20000000) kernel console output (not intermixed with test programs): 7][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.845400][ T6506] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 115.856085][ T6506] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 115.874737][ T6506] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 115.883163][ T6506] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 116.083219][ T5823] kernel write not supported for file /sequencer2 (pid: 5823 comm: kworker/1:4) [ 116.113563][ T56] wacom 0003:056A:033B.0004: unknown main item tag 0x0 [ 116.128931][ T56] wacom 0003:056A:033B.0004: unknown main item tag 0x0 [ 116.138768][ T56] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 116.173730][ T56] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 116.218489][ T56] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0004/input/input6 [ 116.409428][ T56] usb 3-1: USB disconnect, device number 3 [ 116.973597][ T6533] loop3: detected capacity change from 0 to 512 [ 116.985042][ T6533] EXT4-fs: inline encryption not supported [ 117.070197][ T6533] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.288: corrupted in-inode xattr: invalid ea_ino [ 117.120707][ T6533] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.288: couldn't read orphan inode 15 (err -117) [ 117.163692][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.209800][ T6543] autofs4:pid:6543:autofs_fill_super: could not open pipe file descriptor [ 117.274227][ T6533] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.288: invalid indirect mapped block 234881024 (level 0) [ 117.389356][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.574112][ T6558] loop0: detected capacity change from 0 to 256 [ 117.587168][ T6558] exfat: Deprecated parameter 'utf8' [ 117.597921][ T6559] vivid-000: disconnect [ 117.605177][ T6558] exfat: Deprecated parameter 'namecase' [ 117.618137][ T6555] vivid-000: reconnect [ 117.621860][ T6558] exfat: Deprecated parameter 'namecase' [ 117.628739][ T5818] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.666299][ T6558] exfat: Deprecated parameter 'utf8' [ 117.710808][ T6558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 117.770430][ T6561] process 'syz.3.298' launched './file0' with NULL argv: empty string added [ 117.854187][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.877446][ T5818] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 117.890883][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.922298][ T5818] usb 2-1: selecting invalid altsetting 1 [ 117.949426][ T5818] dvb_ttusb_budget: ttusb_init_controller: error [ 117.959768][ T5818] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 118.146751][ T5818] DVB: Unable to find symbol stv0299_attach() [ 118.241643][ T5818] DVB: Unable to find symbol tda8083_attach() [ 118.256304][ T5818] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 118.738410][ T5818] usb 2-1: USB disconnect, device number 3 [ 119.124333][ T6591] loop2: detected capacity change from 0 to 32768 [ 119.166873][ T6591] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.311 (6591) [ 119.262719][ T6591] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.295239][ T6591] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 119.326759][ T6591] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.366227][ T6591] BTRFS info (device loop2): use zstd compression, level 3 [ 119.373541][ T6591] BTRFS info (device loop2): using free space tree [ 119.477324][ T6625] loop0: detected capacity change from 0 to 512 [ 119.555938][ T6631] loop1: detected capacity change from 0 to 512 [ 119.572916][ T6591] BTRFS info (device loop2): enabling ssd optimizations [ 119.602490][ T6625] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 119.613654][ T6591] BTRFS info (device loop2): auto enabling async discard [ 119.668297][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.693105][ T6625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.322: bg 0: block 104: invalid block bitmap [ 119.741004][ T6631] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.796561][ T6625] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 119.847246][ T6625] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.322: invalid indirect mapped block 1 (level 1) [ 119.917584][ T6625] EXT4-fs (loop0): 1 truncate cleaned up [ 119.925499][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.972328][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.042589][ T6625] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.143568][ T6625] overlayfs: failed to look up (fi) for ino (-13) [ 120.193277][ T5778] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.421712][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.678238][ T6657] loop0: detected capacity change from 0 to 256 [ 120.753718][ T6657] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 120.931984][ T6661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.057128][ T2959] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 121.244000][ T6671] loop1: detected capacity change from 0 to 2048 [ 121.306380][ T6672] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.425046][ T28] audit: type=1800 audit(1790912251.775:7): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 121.970867][ T6696] loop0: detected capacity change from 0 to 128 [ 122.022655][ T6696] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 122.064222][ T6696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.508402][ T6698] loop1: detected capacity change from 0 to 32768 [ 122.586624][ T6698] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 122.744324][ T6698] XFS (loop1): Ending clean mount [ 122.929218][ T6725] loop0: detected capacity change from 0 to 256 [ 123.032949][ T6725] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 123.048426][ T6709] loop2: detected capacity change from 0 to 32768 [ 123.116865][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 123.141424][ T6709] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 123.203938][ T6709] JBD2: Ignoring recovery information on journal [ 123.407676][ T6709] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.624878][ T6737] loop3: detected capacity change from 0 to 2048 [ 123.670232][ T6740] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.682250][ T6739] loop1: detected capacity change from 0 to 512 [ 123.771325][ T6737] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 123.823906][ T6737] Remounting filesystem read-only [ 123.858607][ T28] audit: type=1800 audit(1790912254.215:8): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 123.903495][ T6709] syz.2.362 (6709) used greatest stack depth: 19288 bytes left [ 124.074048][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 124.229792][ T6750] loop1: detected capacity change from 0 to 1024 [ 124.242429][ T6750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.308163][ T6750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.429654][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.802669][ T6771] loop1: detected capacity change from 0 to 512 [ 124.827594][ T6771] EXT4-fs: Ignoring removed nobh option [ 124.920193][ T6771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.374: invalid indirect mapped block 256 (level 2) [ 124.972540][ T6771] EXT4-fs (loop1): 2 truncates cleaned up [ 124.979834][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.047354][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 125.097758][ T6758] JBD2: Ignoring recovery information on journal [ 125.109952][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.160666][ T6758] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.395295][ T6784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.487382][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.532727][ T6784] fs-verity: sha256 using implementation "sha256-avx2" [ 125.564213][ T6788] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.581197][ T6784] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.387: verity is only allowed on extent-based files [ 125.610472][ T6784] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.387: verity is only allowed on extent-based files [ 125.651797][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 125.675319][ T6788] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.381: Freeing blocks not in datazone - block = 0, count = 16 [ 125.691174][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.841000][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.415213][ T6812] set_capacity_and_notify: 3 callbacks suppressed [ 126.415231][ T6812] loop0: detected capacity change from 0 to 4096 [ 126.560976][ T6817] loop3: detected capacity change from 0 to 128 [ 126.623514][ T6817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.703902][ T28] audit: type=1800 audit(1790912257.055:9): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.390" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 126.740286][ T6817] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.049115][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.172492][ T6823] loop1: detected capacity change from 0 to 1024 [ 127.274279][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.311361][ T6823] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.353570][ T6819] loop2: detected capacity change from 0 to 32768 [ 127.418643][ T6823] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.395: Freeing blocks not in datazone - block = 0, count = 16 [ 127.464500][ T6819] JBD2: Ignoring recovery information on journal [ 127.500435][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.559407][ T6819] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.937792][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 128.358580][ T6850] loop2: detected capacity change from 0 to 2048 [ 128.430597][ T6852] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.455937][ T6842] loop1: detected capacity change from 0 to 32768 [ 128.486672][ T6850] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 128.501924][ T6850] Remounting filesystem read-only [ 128.539473][ T6842] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 128.563556][ T6842] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.669965][ T6842] XFS (loop1): Ending clean mount [ 128.980162][ T28] audit: type=1400 audit(1790912259.335:10): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6872 comm="syz.2.409" name="unknown" offset=16 [ 129.386625][ T56] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.541926][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.586560][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 129.598056][ T56] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.623659][ T56] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.659928][ T56] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 129.706223][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.726238][ T56] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.745160][ T6878] loop0: detected capacity change from 0 to 40427 [ 129.762201][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.795563][ T56] usb 3-1: config 0 descriptor?? [ 129.816645][ T6878] F2FS-fs (loop0): invalid crc value [ 129.867773][ T6878] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.104292][ T6878] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.255449][ T56] hid (null): report_id 0 is invalid [ 130.268210][ T56] hid (null): report_id 0 is invalid [ 130.273728][ T6878] syz.0.410: attempt to access beyond end of device [ 130.273728][ T6878] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.417458][ T5783] syz-executor: attempt to access beyond end of device [ 130.417458][ T5783] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 130.444208][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 130.504089][ T56] usb 3-1: USB disconnect, device number 4 [ 130.872476][ T6895] loop1: detected capacity change from 0 to 32768 [ 130.931741][ T6895] JBD2: Ignoring recovery information on journal [ 130.963645][ T6900] loop0: detected capacity change from 0 to 512 [ 131.011264][ T6895] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.044754][ T6900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.092304][ T6900] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.326962][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 131.334395][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.378777][ T6913] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 131.564823][ T28] audit: type=1400 audit(1790912261.915:11): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6914 comm="syz.1.419" name="unknown" offset=16 [ 131.930945][ T6934] mmap: syz.2.424 (6934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.036308][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.132182][ T6942] 9pnet_fd: p9_fd_create_unix (6942): problem connecting socket: ./file0: -111 [ 132.217122][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 132.234141][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.254636][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.276264][ T27] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 132.285363][ T6947] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 132.294008][ T27] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.295185][ T6947] netlink: 17 bytes leftover after parsing attributes in process `syz.0.431'. [ 132.346842][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.360223][ T27] usb 4-1: config 1 interface 1 has no altsetting 0 [ 132.371358][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 132.384612][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.394854][ T27] usb 4-1: Product: syz [ 132.401301][ T27] usb 4-1: Manufacturer: syz [ 132.406052][ T27] usb 4-1: SerialNumber: syz [ 132.609176][ T6953] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 132.661065][ T27] usb 4-1: selecting invalid altsetting 0 [ 132.869740][ T27] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 132.958413][ T6962] loop2: detected capacity change from 0 to 512 [ 132.977315][ T6962] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.079295][ T27] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 133.142102][ T27] usb 4-1: USB disconnect, device number 3 [ 133.161724][ T6962] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 133.200912][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207750][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249651][ T6962] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 133.664439][ T6976] loop0: detected capacity change from 0 to 512 [ 133.682467][ T6976] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.815568][ T6976] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 133.848528][ T6976] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 134.077105][ T6978] loop1: detected capacity change from 0 to 32768 [ 134.132170][ T6978] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 134.171724][ T6978] JBD2: Ignoring recovery information on journal [ 134.250828][ T6978] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.484490][ T28] audit: type=1800 audit(1790912264.835:12): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.442" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 134.529865][ T6997] loop2: detected capacity change from 0 to 512 [ 134.569737][ T6997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.623288][ T6997] EXT4-fs (loop2): 1 truncate cleaned up [ 134.627848][ T5780] Bluetooth: hci0: command 0x080f tx timeout [ 134.636247][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 134.653742][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.854743][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.105262][ T7002] loop1: detected capacity change from 0 to 40427 [ 135.131481][ T7002] F2FS-fs (loop1): invalid crc value [ 135.143369][ T7002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.218421][ T7002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.271919][ T7002] syz.1.450: attempt to access beyond end of device [ 135.271919][ T7002] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.351781][ T5775] syz-executor: attempt to access beyond end of device [ 135.351781][ T5775] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 135.391818][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.422435][ T7008] loop0: detected capacity change from 0 to 256 [ 135.434093][ T7008] exfat: Deprecated parameter 'utf8' [ 135.456338][ T7008] exfat: Deprecated parameter 'utf8' [ 135.480363][ T7008] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 136.290401][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.299703][ T7035] loop3: detected capacity change from 0 to 4096 [ 136.383634][ T7035] ntfs: volume version 3.1. [ 136.403214][ T7034] loop2: detected capacity change from 0 to 4096 [ 136.459094][ T7037] loop1: detected capacity change from 0 to 512 [ 136.477078][ T7037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.502601][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 136.530304][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.547825][ T7034] ntfs3: loop2: ino=19, mi_enum_attr [ 136.557486][ T7034] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 136.563821][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.620527][ T7037] EXT4-fs (loop1): 1 truncate cleaned up [ 136.622163][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 136.667888][ T7037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.721874][ T9] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 136.779343][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.805337][ T2954] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 136.817054][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 136.823956][ T7034] ntfs3: loop2: ino=5, "/" mi_enum_attr [ 136.837428][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 136.849842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.859109][ T9] usb 1-1: Product: syz [ 136.863319][ T9] usb 1-1: Manufacturer: syz [ 136.868370][ T9] usb 1-1: SerialNumber: syz [ 136.885345][ T7034] ntfs3: loop2: ino=5, mi_enum_attr [ 136.891854][ T7034] ntfs3: loop2: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to update [ 136.906371][ T7034] ntfs3: loop2: ino=5, mi_enum_attr [ 136.913499][ T7034] ntfs3: loop2: ino=21, "blkio.bfq.group_wait_time" failed to open parent directory r=5 to write [ 137.064715][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.139586][ T9] usb 1-1: selecting invalid altsetting 0 [ 137.356318][ T9] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 137.565141][ T7042] loop3: detected capacity change from 0 to 40427 [ 137.572828][ T9] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 137.603240][ T7042] F2FS-fs (loop3): invalid crc value [ 137.630464][ T9] usb 1-1: USB disconnect, device number 3 [ 137.651781][ T7042] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.745925][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.858432][ T7042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.907263][ T7048] JBD2: Ignoring recovery information on journal [ 137.949752][ T7042] syz.3.464: attempt to access beyond end of device [ 137.949752][ T7042] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.968609][ T7048] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.129229][ T5782] syz-executor: attempt to access beyond end of device [ 138.129229][ T5782] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 138.148265][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.155307][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 138.394969][ T7064] set_capacity_and_notify: 1 callbacks suppressed [ 138.394985][ T7064] loop0: detected capacity change from 0 to 1024 [ 138.613738][ T7066] loop2: detected capacity change from 0 to 2048 [ 138.680877][ T7067] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.745209][ T28] audit: type=1800 audit(1790912269.095:13): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.471" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 138.971877][ T7078] loop3: detected capacity change from 0 to 512 [ 138.973182][ T7077] loop2: detected capacity change from 0 to 512 [ 139.001020][ T7078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.025630][ T7077] EXT4-fs (loop2): 1 truncate cleaned up [ 139.028798][ T7078] EXT4-fs (loop3): 1 truncate cleaned up [ 139.058196][ T7078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.072547][ T7077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.167480][ T7077] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.485: invalid indirect mapped block 234881024 (level 0) [ 139.181839][ T28] audit: type=1800 audit(1790912269.515:14): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.485" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 139.218918][ T7077] EXT4-fs (loop2): Remounting filesystem read-only [ 139.274229][ T7088] loop0: detected capacity change from 0 to 128 [ 139.287332][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.343014][ T7088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 139.406356][ T7088] System zones: 1-3, 19-19, 35-36 [ 139.413068][ T7088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.429016][ T7088] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.521936][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.642874][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.742230][ T7095] vxcan2: entered allmulticast mode [ 139.831612][ T7092] loop1: detected capacity change from 0 to 32768 [ 139.865363][ T7092] JBD2: Ignoring recovery information on journal [ 139.933415][ T7100] pimreg: tun_chr_ioctl cmd 1074025677 [ 139.956124][ T7104] loop3: detected capacity change from 0 to 512 [ 139.966462][ T7092] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.971075][ T7104] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 139.986389][ T7100] pimreg: linktype set to 270 [ 140.031718][ T7104] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.488: bg 0: block 104: invalid block bitmap [ 140.111103][ T7104] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.171363][ T7104] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.488: invalid indirect mapped block 1 (level 1) [ 140.228600][ T7104] EXT4-fs (loop3): 1 truncate cleaned up [ 140.248608][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.297820][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 140.348815][ T7104] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.400227][ T7104] overlayfs: failed to look up (fi) for ino (-13) [ 140.569465][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.835122][ T7117] loop0: detected capacity change from 0 to 2048 [ 140.890764][ T7118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.983945][ T28] audit: type=1800 audit(1790912271.335:15): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.492" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 141.008924][ T56] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.115738][ T7120] loop1: detected capacity change from 0 to 8192 [ 141.216787][ T56] usb 4-1: Using ep0 maxpacket: 16 [ 141.225589][ T56] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.260358][ T56] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.286237][ T56] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 141.336338][ T56] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.343054][ T56] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 141.376237][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.395749][ T56] usb 4-1: config 0 descriptor?? [ 141.419428][ T7126] loop0: detected capacity change from 0 to 4096 [ 141.476575][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.561530][ T7128] hfsplus: bad catalog entry type [ 141.586837][ T7126] ntfs: volume version 3.1. [ 141.653154][ T2987] hfsplus: b-tree write err: -5, ino 25 [ 141.666277][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 141.676631][ T2987] hfsplus: b-tree write err: -5, ino 4 [ 141.682249][ T2987] hfsplus: b-tree write err: -5, ino 2 [ 141.700163][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 141.728279][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.763434][ T9] usb 3-1: Product: syz [ 141.773835][ T9] usb 3-1: Manufacturer: syz [ 141.797494][ T9] usb 3-1: SerialNumber: syz [ 141.823907][ T9] usb 3-1: config 0 descriptor?? [ 141.833567][ T56] hid (null): report_id 0 is invalid [ 141.862400][ T56] hid (null): report_id 0 is invalid [ 141.889206][ T7131] pimreg: tun_chr_ioctl cmd 1074025677 [ 141.895158][ T7131] pimreg: linktype set to 270 [ 142.066682][ T56] usb 4-1: USB disconnect, device number 4 [ 142.126389][ T7133] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 142.159349][ T7133] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.500: bg 0: block 104: invalid block bitmap [ 142.189732][ T7133] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 142.205240][ T7133] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.500: invalid indirect mapped block 1 (level 1) [ 142.225843][ T7133] EXT4-fs (loop1): 1 truncate cleaned up [ 142.237189][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.265477][ T9] airspy 3-1:0.0: Board ID: 00 [ 142.273958][ T7133] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.282561][ T9] airspy 3-1:0.0: Firmware version: [ 142.297157][ T7133] overlayfs: failed to look up (fi) for ino (-13) [ 142.343640][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.484686][ T9] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 142.504814][ T9] airspy 3-1:0.0: Registered as swradio24 [ 142.520857][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 142.565291][ T9] usb 3-1: USB disconnect, device number 5 [ 142.756276][ T7146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.809793][ T7146] EXT4-fs (loop3): 1 truncate cleaned up [ 142.830842][ T7146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.984045][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.215333][ T7155] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.297306][ T28] audit: type=1800 audit(1790912273.655:16): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 143.471146][ T7158] set_capacity_and_notify: 4 callbacks suppressed [ 143.471162][ T7158] loop1: detected capacity change from 0 to 4096 [ 143.534405][ T7162] loop0: detected capacity change from 0 to 16 [ 143.568032][ T7162] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.638963][ T7158] ntfs: volume version 3.1. [ 144.106465][ T5818] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 144.141770][ T7165] loop3: detected capacity change from 0 to 40427 [ 144.163948][ T7165] F2FS-fs (loop3): invalid crc value [ 144.182542][ T7165] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.247956][ T7165] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.300205][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.304916][ T7165] syz.3.511: attempt to access beyond end of device [ 144.304916][ T7165] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.324823][ T5818] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 144.347331][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.387958][ T5818] usb 3-1: selecting invalid altsetting 1 [ 144.395118][ T5818] dvb_ttusb_budget: ttusb_init_controller: error [ 144.407059][ T5818] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.488208][ T5782] syz-executor: attempt to access beyond end of device [ 144.488208][ T5782] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 144.511552][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.520967][ T5818] DVB: Unable to find symbol stv0299_attach() [ 144.569732][ T5818] DVB: Unable to find symbol tda8083_attach() [ 144.583347][ T5818] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 145.154177][ T5823] usb 3-1: USB disconnect, device number 6 [ 145.312509][ T5818] kernel write not supported for file /314/clear_refs (pid: 5818 comm: kworker/0:4) [ 145.446460][ T7184] loop0: detected capacity change from 0 to 4096 [ 145.464298][ T7184] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 145.612489][ T7184] ntfs: volume version 3.1. [ 146.247174][ T7209] loop0: detected capacity change from 0 to 16 [ 146.278240][ T7209] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 146.776239][ T5823] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 146.974100][ T5823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.995839][ T5823] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 147.016674][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.055268][ T5823] usb 1-1: selecting invalid altsetting 1 [ 147.082907][ T5823] dvb_ttusb_budget: ttusb_init_controller: error [ 147.096716][ T5823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 147.211619][ T7223] loop1: detected capacity change from 0 to 4096 [ 147.243660][ T7223] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 147.276796][ T5823] DVB: Unable to find symbol stv0299_attach() [ 147.325692][ T7223] ntfs: volume version 3.1. [ 147.331688][ T7228] loop2: detected capacity change from 0 to 512 [ 147.372062][ T7228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.432415][ T7228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.445485][ T5823] DVB: Unable to find symbol tda8083_attach() [ 147.455171][ T5823] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 147.483131][ T7228] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.644364][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.986754][ T9] usb 1-1: USB disconnect, device number 4 [ 148.671512][ T7236] loop1: detected capacity change from 0 to 131072 [ 148.728189][ T7236] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 148.736086][ T7236] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 148.744428][ T7236] F2FS-fs (loop1): Test dummy encryption mode enabled [ 148.758254][ T7236] F2FS-fs (loop1): invalid crc value [ 148.777052][ T7236] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.823738][ T7236] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 148.843532][ T7236] F2FS-fs (loop1): Start checkpoint disabled! [ 148.894311][ T7236] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 148.901531][ T7236] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 149.141173][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 149.487888][ T7226] loop3: detected capacity change from 0 to 65536 [ 149.595312][ T7266] loop0: detected capacity change from 0 to 128 [ 149.603618][ T7265] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 149.628647][ T7226] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 149.787090][ T6431] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.867406][ T7226] XFS (loop3): Ending clean mount [ 149.967382][ T7226] XFS (loop3): Quotacheck needed: Please wait. [ 150.052546][ T7226] XFS (loop3): Quotacheck: Done. [ 150.105150][ T28] audit: type=1800 audit(1790912280.455:17): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file1" dev="loop3" ino=70 res=0 errno=0 [ 150.166452][ T7273] kAFS: Invalid Command on /proc/fs/afs/cells file [ 150.280766][ T5782] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 150.867267][ T7288] netlink: 76 bytes leftover after parsing attributes in process `syz.0.551'. [ 151.088519][ T7299] loop0: detected capacity change from 0 to 64 [ 151.204696][ T7298] loop2: detected capacity change from 0 to 4096 [ 151.247860][ T7298] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 151.383989][ T7298] ntfs: volume version 3.1. [ 151.629817][ T7305] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 151.687653][ T7307] netlink: 116 bytes leftover after parsing attributes in process `syz.1.559'. [ 152.205746][ T5823] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0007/input/input9 [ 152.281236][ T5823] hid-generic 0005:0576:0306.0007: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 152.303009][ T7322] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 152.390818][ T7312] loop1: detected capacity change from 0 to 40427 [ 152.430828][ T7312] F2FS-fs (loop1): invalid crc value [ 152.478278][ T7312] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.486539][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.590900][ T7312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.662050][ T7312] syz.1.562: attempt to access beyond end of device [ 152.662050][ T7312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.686674][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 152.705431][ T56] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 152.730427][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.745013][ T56] usb 1-1: Product: syz [ 152.757272][ T56] usb 1-1: Manufacturer: syz [ 152.762573][ T56] usb 1-1: SerialNumber: syz [ 152.845792][ T5775] syz-executor: attempt to access beyond end of device [ 152.845792][ T5775] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 152.868976][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 153.012346][ T56] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 153.031304][ T56] usb 1-1: MIDIStreaming interface descriptor not found [ 153.096405][ T56] usb 1-1: USB disconnect, device number 5 [ 153.199036][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.390147][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 153.507925][ T5818] kernel write not supported for file /sequencer2 (pid: 5818 comm: kworker/0:4) [ 153.589058][ T5818] kernel write not supported for file /309/clear_refs (pid: 5818 comm: kworker/0:4) [ 154.213515][ T7359] loop0: detected capacity change from 0 to 32768 [ 154.232731][ T7356] loop2: detected capacity change from 0 to 32768 [ 154.259271][ T7359] JBD2: Ignoring recovery information on journal [ 154.301034][ T7356] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.339616][ T7359] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.393598][ T7356] XFS (loop2): Ending clean mount [ 154.598896][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 154.607991][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 154.647790][ T7376] loop1: detected capacity change from 0 to 256 [ 154.976801][ T23] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0008/input/input10 [ 155.046933][ T23] hid-generic 0005:0576:0306.0008: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 155.136365][ T8] kernel write not supported for file /sequencer2 (pid: 8 comm: kworker/0:0) [ 155.286414][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.428712][ T7397] Bluetooth: MGMT ver 1.22 [ 155.486289][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 155.500998][ T56] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 155.518037][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.536242][ T56] usb 2-1: Product: syz [ 155.545927][ T7401] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 155.551794][ T56] usb 2-1: Manufacturer: syz [ 155.571115][ T56] usb 2-1: SerialNumber: syz [ 155.794602][ T7391] loop0: detected capacity change from 0 to 40427 [ 155.803757][ T7391] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 155.817818][ T7391] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.832859][ T7391] F2FS-fs (loop0): invalid crc value [ 155.864465][ T56] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 155.884614][ T56] usb 2-1: MIDIStreaming interface descriptor not found [ 155.953480][ T56] usb 2-1: USB disconnect, device number 4 [ 156.071040][ T7391] F2FS-fs (loop0): Start checkpoint disabled! [ 156.101496][ T7391] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.117763][ T7391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.155976][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.269271][ T2954] kworker/u4:8: attempt to access beyond end of device [ 156.269271][ T2954] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 156.295594][ T2954] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.305981][ T2954] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.697757][ T7422] vhci_hcd vhci_hcd.0: failed to lookup sock [ 156.792143][ T7419] loop3: detected capacity change from 0 to 32768 [ 156.864279][ T7419] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 156.923738][ T7435] program syz.1.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.105000][ T7419] XFS (loop3): Ending clean mount [ 157.126408][ T7445] Format for deleting device is "id" (uint). [ 157.185769][ T7419] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 157.221943][ T7442] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [205] [ 157.240208][ T7442] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 157.257815][ T7442] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 157.278109][ T7442] One or more global auth toks could not properly register; rc = [-22] [ 157.306417][ T7442] Error parsing options; rc = [-22] [ 157.351315][ T5782] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 157.430008][ T28] audit: type=1326 audit(1790912287.785:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.501657][ T28] audit: type=1326 audit(1790912287.785:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.548706][ T28] audit: type=1326 audit(1790912287.805:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.640591][ T28] audit: type=1326 audit(1790912287.825:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.681616][ T28] audit: type=1326 audit(1790912287.825:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.745699][ T28] audit: type=1326 audit(1790912287.825:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.778569][ T28] audit: type=1326 audit(1790912287.825:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.844062][ T28] audit: type=1326 audit(1790912287.825:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.876851][ T28] audit: type=1326 audit(1790912287.825:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.920477][ T28] audit: type=1326 audit(1790912287.825:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.0.617" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810819e159 code=0x7ffc0000 [ 157.946759][ T7461] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 158.052266][ T5818] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0009/input/input11 [ 158.109665][ T5818] hid-generic 0005:0576:0306.0009: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 158.336233][ T5765] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.531514][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 158.553596][ T5765] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 158.573214][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.602324][ T5765] usb 4-1: Product: syz [ 158.610882][ T5765] usb 4-1: Manufacturer: syz [ 158.626334][ T5765] usb 4-1: SerialNumber: syz [ 158.635759][ T7477] netlink: 96 bytes leftover after parsing attributes in process `syz.2.625'. [ 158.891665][ T5765] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 158.924713][ T5765] usb 4-1: MIDIStreaming interface descriptor not found [ 158.997889][ T5765] usb 4-1: USB disconnect, device number 5 [ 159.080750][ T7487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.138944][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.168504][ T7491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.676781][ T7508] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 159.863980][ T7495] loop1: detected capacity change from 0 to 40427 [ 159.891180][ T7495] F2FS-fs (loop1): invalid crc value [ 159.917817][ T7495] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.026833][ T7495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.056755][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.079429][ T7495] syz.1.632: attempt to access beyond end of device [ 160.079429][ T7495] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.213734][ T5775] syz-executor: attempt to access beyond end of device [ 160.213734][ T5775] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 160.231876][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 160.246322][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 160.258026][ T5818] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 160.272472][ T5818] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.286353][ T5818] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.313460][ T5818] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.323553][ T5818] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.340779][ T5818] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.351076][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.575996][ T5818] usb 4-1: GET_CAPABILITIES returned 0 [ 160.588322][ T5818] usbtmc 4-1:16.0: can't read capabilities [ 160.838001][ T5818] usb 4-1: USB disconnect, device number 6 [ 160.875575][ T7530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.955347][ T7533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.134942][ T7537] loop0: detected capacity change from 0 to 4096 [ 161.177096][ T7537] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 161.194626][ T7537] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 161.348373][ T2987] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 161.380973][ T5783] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 161.400042][ T5783] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 161.415024][ T5783] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 161.438236][ T49] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 161.549201][ T7552] vhci_hcd: not connected 4 [ 161.576261][ T5780] Bluetooth: hci3: command tx timeout [ 161.874828][ T7565] loop1: detected capacity change from 0 to 764 [ 162.385339][ T7567] loop0: detected capacity change from 0 to 32768 [ 162.450264][ T7567] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.581071][ T7567] XFS (loop0): Ending clean mount [ 162.744860][ T5818] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.000A/input/input12 [ 162.822796][ T7586] loop3: detected capacity change from 0 to 32768 [ 162.832712][ T5818] hid-generic 0005:0576:0306.000A: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 162.879188][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.933878][ T7586] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 162.994598][ T7586] JBD2: Ignoring recovery information on journal [ 163.006271][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.130358][ T7586] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.200023][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 163.220460][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 163.260478][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.286372][ T8] usb 3-1: Product: syz [ 163.290586][ T8] usb 3-1: Manufacturer: syz [ 163.305525][ T8] usb 3-1: SerialNumber: syz [ 163.381998][ T7586] (syz.3.669,7586,1):ocfs2_file_write_iter:2445 ERROR: status = -27 [ 163.573976][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 163.597763][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 163.670943][ T8] usb 3-1: USB disconnect, device number 7 [ 163.686880][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 163.768272][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.073819][ T7611] loop1: detected capacity change from 0 to 128 [ 164.199380][ T7613] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 164.433555][ T7619] block2mtd: error: cannot open device [ 164.455327][ T7607] loop0: detected capacity change from 0 to 40427 [ 164.485665][ T7607] F2FS-fs (loop0): invalid crc value [ 164.512389][ T7607] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.590960][ T7607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.702216][ T7607] syz.0.675: attempt to access beyond end of device [ 164.702216][ T7607] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.988564][ T5783] syz-executor: attempt to access beyond end of device [ 164.988564][ T5783] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 165.009300][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 165.123534][ T56] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.000B/input/input13 [ 165.154918][ T56] hid-generic 0005:0576:0306.000B: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 165.204391][ T7642] loop1: detected capacity change from 0 to 4096 [ 165.271490][ T7642] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 165.289644][ T7642] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 165.366426][ T5823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.554788][ T49] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 165.563982][ T5775] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 165.571388][ T5775] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 165.579405][ T5775] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 165.586038][ T2987] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 165.586544][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 165.608370][ T5823] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 165.627964][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.635977][ T5823] usb 4-1: Product: syz [ 165.640553][ T5823] usb 4-1: Manufacturer: syz [ 165.645196][ T5823] usb 4-1: SerialNumber: syz [ 165.876377][ T5823] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 165.889349][ T5823] usb 4-1: MIDIStreaming interface descriptor not found [ 165.923628][ T5823] usb 4-1: USB disconnect, device number 7 [ 165.974607][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.555459][ T7650] loop2: detected capacity change from 0 to 764 [ 167.074741][ T7654] loop1: detected capacity change from 0 to 32768 [ 167.270122][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.697'. [ 167.926362][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.147456][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 168.155710][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 168.167469][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 168.190713][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.212885][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.228490][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.243262][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.252783][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.470958][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 168.476709][ T8] usbtmc 1-1:16.0: can't read capabilities [ 168.599994][ T7708] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 168.713594][ T56] usb 1-1: USB disconnect, device number 6 [ 168.904319][ T7721] loop2: detected capacity change from 0 to 512 [ 168.924765][ T7721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.945362][ T7721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.016034][ T7721] EXT4-fs (loop2): 1 truncate cleaned up [ 169.023469][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.087092][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.176542][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.266846][ T7718] loop1: detected capacity change from 0 to 32768 [ 169.321687][ T7718] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.366618][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 169.378025][ T8] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.387700][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.399363][ T8] usb 4-1: config 0 descriptor?? [ 169.497957][ T7718] XFS (loop1): Ending clean mount [ 169.629532][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 169.658302][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.704181][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 169.715850][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.728397][ T8] usb 4-1: media controller created [ 169.765780][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.840067][ T8] az6027: usb out operation failed. (-71) [ 169.874740][ T8] az6027: usb out operation failed. (-71) [ 169.882092][ T8] stb0899_attach: Driver disabled by Kconfig [ 169.895389][ T8] az6027: no front-end attached [ 169.895389][ T8] [ 169.911010][ T8] az6027: usb out operation failed. (-71) [ 169.917534][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.931308][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 169.987953][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 170.021731][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.063287][ T8] usb 4-1: USB disconnect, device number 8 [ 170.172020][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.257090][ T7742] loop0: detected capacity change from 0 to 32768 [ 170.294394][ T7742] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 170.342465][ T7742] JBD2: Ignoring recovery information on journal [ 170.375860][ T7742] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 170.492984][ T7758] team0: No ports can be present during mode change [ 170.575065][ T7742] (syz.0.728,7742,1):ocfs2_file_write_iter:2445 ERROR: status = -27 [ 170.704656][ T7766] rnbd_client L127: Can't parse path ip: -93 [ 170.756355][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.785340][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 170.813183][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.740'. [ 170.976491][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 170.984016][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 171.005326][ T8] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 171.022687][ T7774] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 171.048494][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.055504][ T8] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 171.086079][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.110747][ T8] usb 2-1: config 0 descriptor?? [ 171.283269][ T7783] loop0: detected capacity change from 0 to 1024 [ 171.295923][ T7782] loop3: detected capacity change from 0 to 2048 [ 171.388881][ T7784] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.447843][ T2987] hfsplus: b-tree write err: -5, ino 8 [ 171.528988][ T8] zydacron 0003:13EC:0006.000C: item fetching failed at offset 0/40 [ 171.546945][ T8] zydacron 0003:13EC:0006.000C: parse failed [ 171.563239][ T8] zydacron: probe of 0003:13EC:0006.000C failed with error -22 [ 171.734927][ T7790] typec_fusb302 0-0002: I2C/SMBus block functionality not supported! [ 171.745093][ T7790] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 171.795934][ T8] usb 2-1: USB disconnect, device number 5 [ 171.883270][ T7779] loop2: detected capacity change from 0 to 40427 [ 171.896279][ T7779] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 171.902655][ T7779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 171.927530][ T7779] F2FS-fs (loop2): invalid crc value [ 172.114783][ T7779] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 172.122565][ T7779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.274564][ T7806] loop3: detected capacity change from 0 to 16 [ 172.297313][ T7806] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.506493][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 172.708095][ T8] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 172.725888][ T8] usb 1-1: config 0 has no interface number 0 [ 172.743029][ T8] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 172.758232][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.768377][ T8] usb 1-1: Product: syz [ 172.772589][ T8] usb 1-1: Manufacturer: syz [ 172.781751][ T8] usb 1-1: SerialNumber: syz [ 172.794373][ T8] usb 1-1: config 0 descriptor?? [ 173.412750][ T7832] loop2: detected capacity change from 0 to 2048 [ 173.434510][ T8] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 173.466326][ T8] asix: probe of 1-1:0.251 failed with error -524 [ 173.521656][ T7835] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.628796][ T7827] loop3: detected capacity change from 0 to 40427 [ 173.641080][ T7827] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 173.661938][ T7827] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 173.694800][ T7827] F2FS-fs (loop3): invalid crc value [ 173.726658][ T8] usb 1-1: USB disconnect, device number 7 [ 173.858435][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 173.883270][ T7844] netlink: 'syz.2.770': attribute type 21 has an invalid length. [ 173.948654][ T7827] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 173.966228][ T7827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.281955][ T7856] loop1: detected capacity change from 0 to 1024 [ 174.445852][ T7859] batman_adv: batadv0: Adding interface: macsec1 [ 174.486388][ T7859] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.536887][ T7859] batman_adv: batadv0: Interface activated: macsec1 [ 174.538078][ T2954] hfsplus: b-tree write err: -5, ino 8 [ 174.719468][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 174.850097][ T7869] loop1: detected capacity change from 0 to 164 [ 175.167808][ T7878] loop1: detected capacity change from 0 to 1024 [ 175.216023][ T7878] hfsplus: keylen 65060 too large [ 175.226530][ T7878] hfsplus: xattr searching failed [ 175.262345][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 175.262357][ T28] audit: type=1800 audit(1790912305.615:36): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.787" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 175.343660][ T7884] loop0: detected capacity change from 0 to 164 [ 175.366395][ T7883] loop3: detected capacity change from 0 to 2048 [ 175.420628][ T7886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.469435][ T7884] isofs: Unable to find the ".." directory for NFS. [ 175.494531][ T28] audit: type=1800 audit(1790912305.845:37): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.790" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 175.868777][ T7901] netlink: 'syz.0.798': attribute type 2 has an invalid length. [ 175.885889][ T7901] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 175.893703][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 175.902853][ T7901] netlink: 'syz.0.798': attribute type 2 has an invalid length. [ 175.915331][ T7901] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 175.924886][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 175.938940][ T7901] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 176.066765][ T28] audit: type=1400 audit(1790912306.425:38): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7906 comm="syz.3.801" [ 176.120095][ T7911] loop1: detected capacity change from 0 to 164 [ 176.211854][ T7911] isofs: Unable to find the ".." directory for NFS. [ 176.411360][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 176.540608][ T7924] loop2: detected capacity change from 0 to 512 [ 176.576745][ T7924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.621156][ T7928] sd 0:0:1:0: PR command failed: 1026 [ 176.627774][ T7928] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 176.634530][ T7928] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 176.659530][ T7930] loop3: detected capacity change from 0 to 1024 [ 176.673759][ T7924] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.810: invalid indirect mapped block 32768 (level 2) [ 176.779276][ T7924] EXT4-fs (loop2): 1 orphan inode deleted [ 176.785089][ T7924] EXT4-fs (loop2): 1 truncate cleaned up [ 176.844655][ T7924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.958879][ T2959] hfsplus: b-tree write err: -5, ino 8 [ 176.983686][ T7936] EXT4-fs error (device loop2): ext4_search_dir:1551: inode #12: block 7: comm syz.2.810: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 177.027380][ T7929] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 177.409015][ T7947] tap0: tun_chr_ioctl cmd 1074025677 [ 177.418158][ T7947] tap0: linktype set to 823 [ 177.466606][ T7951] netlink: 284 bytes leftover after parsing attributes in process `syz.1.819'. [ 177.485958][ T7951] ip6tnl0: Caught tx_queue_len zero misconfig [ 177.562725][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.727571][ T7942] loop3: detected capacity change from 0 to 32768 [ 177.779924][ T7957] loop0: detected capacity change from 0 to 2048 [ 177.850872][ T7957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.111446][ T7965] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.412834][ T7978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.799401][ T28] audit: type=1400 audit(1790912309.155:39): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=7991 comm="syz.0.840" name="/" offset=53 [ 178.922211][ T7976] loop1: detected capacity change from 0 to 32768 [ 179.004676][ T7999] loop0: detected capacity change from 0 to 256 [ 179.017527][ T7998] loop2: detected capacity change from 0 to 2048 [ 179.077064][ T7999] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 179.140112][ T7998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.224329][ T7999] 9pnet_fd: p9_fd_create_unix (7999): problem connecting socket: ./file0: -13 [ 179.319029][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.826710][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 179.873988][ T8026] Zero length message leads to an empty skb [ 180.026225][ T8029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.093397][ T8029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.176401][ T8029] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.218286][ T2987] wlan1: Trigger new scan to find an IBSS to join [ 180.308795][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.590155][ T8050] sd 0:0:1:0: PR command failed: 1026 [ 180.595652][ T8050] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 180.622771][ T8050] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 180.843026][ T8061] set_capacity_and_notify: 2 callbacks suppressed [ 180.843041][ T8061] loop3: detected capacity change from 0 to 4096 [ 181.034217][ T8061] ntfs3: loop3: failed to convert "0080" to koi8-ru [ 181.085328][ T8061] ntfs3: loop3: failed to convert name for inode 1e. [ 181.119976][ T8061] ntfs3: loop3: ino=1f, mi_enum_attr [ 181.125655][ T8061] ntfs3: loop3: failed to convert "256c" to koi8-ru [ 181.196020][ T8071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 181.696520][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.778020][ T8091] loop1: detected capacity change from 0 to 1024 [ 181.786013][ T8091] EXT4-fs: Ignoring removed orlov option [ 181.848024][ T8091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.926773][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 181.956931][ T5818] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.984111][ T8097] WARNING! power/level is deprecated; use power/control instead [ 182.006740][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.057143][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 182.086200][ T5818] pvrusb2: ********** [ 182.090262][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 182.112067][ T5818] pvrusb2: Important functionality might not be entirely working. [ 182.120224][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 182.132611][ T5818] pvrusb2: ********** [ 182.150461][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.223376][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 182.268523][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 182.280629][ T2322] pvrusb2: Invalid write control endpoint [ 182.398396][ T2322] pvrusb2: Invalid write control endpoint [ 182.404479][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 182.430636][ T8106] loop2: detected capacity change from 0 to 128 [ 182.436281][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 182.455774][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 182.487396][ T2322] pvrusb2: Device being rendered inoperable [ 182.520698][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 182.523553][ T5823] usb 4-1: USB disconnect, device number 9 [ 182.554227][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 182.593926][ T2322] pvrusb2: Attached sub-driver cx25840 [ 182.626199][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 182.641730][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 182.657273][ T8106] EXT4-fs (loop2): Test dummy encryption mode enabled [ 182.670348][ T8106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.718388][ T8106] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.761076][ T8115] loop0: detected capacity change from 0 to 1024 [ 182.768924][ T8115] hfsplus: unable to find HFS+ superblock [ 182.808294][ T6430] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.929160][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.342276][ T8119] loop1: detected capacity change from 0 to 32768 [ 183.355331][ T8119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.890 (8119) [ 183.429802][ T8119] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.467815][ T8119] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.488840][ T8119] BTRFS info (device loop1): using free space tree [ 183.546431][ T56] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.597664][ T8119] BTRFS info (device loop1): enabling ssd optimizations [ 183.605500][ T8119] BTRFS info (device loop1): auto enabling async discard [ 183.766382][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 183.790981][ T56] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.808957][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.826290][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.853361][ T56] usb 3-1: config 0 descriptor?? [ 184.098511][ T5788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5788) [ 184.114158][ T8133] loop0: detected capacity change from 0 to 32768 [ 184.120952][ T56] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 184.163405][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.215571][ T56] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 184.229145][ T56] usb 3-1: media controller created [ 184.276755][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.366302][ T56] az6027: usb out operation failed. (-71) [ 184.382654][ T56] az6027: usb out operation failed. (-71) [ 184.388776][ T56] stb0899_attach: Driver disabled by Kconfig [ 184.394927][ T56] az6027: no front-end attached [ 184.394927][ T56] [ 184.416917][ T56] az6027: usb out operation failed. (-71) [ 184.423982][ T56] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 184.455103][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 184.478886][ T56] dvb-usb: schedule remote query interval to 400 msecs. [ 184.485868][ T56] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 184.509460][ T56] usb 3-1: USB disconnect, device number 8 [ 184.630754][ T56] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.736491][ T5855] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.878473][ T8168] block nbd0: not configured, cannot reconfigure [ 184.926438][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 184.935175][ T5855] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 184.944911][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.957444][ T5855] usb 4-1: config 0 descriptor?? [ 184.980247][ T5855] as10x_usb: device has been detected [ 184.993384][ T5855] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 185.022478][ T5855] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 185.044221][ T8172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.115884][ T5855] as10x_usb: error during firmware upload part1 [ 185.123257][ T5855] Registered device nBox DVB-T Dongle [ 185.180458][ T2954] wlan1: Trigger new scan to find an IBSS to join [ 185.196222][ T5765] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.241265][ T5823] usb 4-1: USB disconnect, device number 10 [ 185.275898][ T8176] loop1: detected capacity change from 0 to 2048 [ 185.293557][ T5823] Unregistered device nBox DVB-T Dongle [ 185.299498][ T5823] as10x_usb: device has been disconnected [ 185.343723][ T8179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.426409][ T5765] usb 1-1: Using ep0 maxpacket: 8 [ 185.434138][ T5765] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 185.454207][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.482525][ T5765] pvrusb2: Hardware description: Terratec Grabster AV400 [ 185.496149][ T5765] pvrusb2: ********** [ 185.507958][ T5765] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 185.534620][ T5765] pvrusb2: Important functionality might not be entirely working. [ 185.554506][ T5765] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 185.586177][ T5765] pvrusb2: ********** [ 185.622717][ T8185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.701316][ T2322] pvrusb2: Invalid write control endpoint [ 185.793384][ T2322] pvrusb2: Invalid write control endpoint [ 185.817188][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.836160][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.843954][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.856298][ T2322] pvrusb2: Device being rendered inoperable [ 185.862282][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.870081][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 185.885321][ T2322] pvrusb2: Attached sub-driver cx25840 [ 185.894590][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.940153][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.956277][ T8] usb 1-1: USB disconnect, device number 8 [ 186.009412][ T8190] loop7: detected capacity change from 0 to 7 [ 186.032773][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.042233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.054116][ T8183] loop1: detected capacity change from 0 to 32768 [ 186.056956][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.069812][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.079872][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.089125][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.098495][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.107731][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.123292][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.132574][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.141570][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.150851][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.161736][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.170975][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.181215][ T8190] ldm_validate_partition_table(): Disk read failed. [ 186.192377][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.201667][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.210848][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.220109][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.228663][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 186.240269][ T8190] Dev loop7: unable to read RDB block 0 [ 186.249454][ T8190] loop7: unable to read partition table [ 186.267650][ T8190] loop7: partition table beyond EOD, truncated [ 186.291075][ T2959] wlan1: Creating new IBSS network, BSSID 9a:fb:9c:70:62:ca [ 186.302225][ T8190] loop_reread_partitions: partition scan of loop7 (śłƒå”™‰ü¾CźjĢ–ć¢P=Ć½?ć}X‹ŗŠ œėÜ%õ«`Éęրł…cåę©Ö˜Čµ4FLQkŻŠ) failed (rc=-5) [ 186.359605][ T5142] ldm_validate_partition_table(): Disk read failed. [ 186.393258][ T5142] Dev loop7: unable to read RDB block 0 [ 186.406991][ T5142] loop7: unable to read partition table [ 186.409314][ T8196] loop3: detected capacity change from 0 to 512 [ 186.413211][ T5142] loop7: partition table beyond EOD, [ 186.425140][ T8196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.438226][ T5142] truncated [ 186.454198][ T8196] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.918: invalid indirect mapped block 32768 (level 2) [ 186.484380][ T8196] EXT4-fs (loop3): 1 orphan inode deleted [ 186.494405][ T8196] EXT4-fs (loop3): 1 truncate cleaned up [ 186.501972][ T8196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.577328][ T8199] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #12: block 7: comm syz.3.918: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 186.798663][ T8206] kAFS: bad VL server IP address [ 187.038506][ T8214] sctp: Trying to GSO but underlying device doesn't support it. [ 187.135037][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.337328][ T5823] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 187.467596][ T8229] loop3: detected capacity change from 0 to 4096 [ 187.504037][ T8229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.538433][ T5823] usb 1-1: config 1 has an invalid interface number: 36 but max is 1 [ 187.556246][ T5823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.576846][ T5823] usb 1-1: config 1 has no interface number 1 [ 187.583018][ T5823] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.597332][ T5823] usb 1-1: config 1 interface 36 has no altsetting 0 [ 187.607140][ T5823] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.617182][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.625226][ T5823] usb 1-1: Product: syz [ 187.629806][ T5823] usb 1-1: Manufacturer: syz [ 187.634443][ T5823] usb 1-1: SerialNumber: syz [ 187.644677][ T5823] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 187.667822][ T5823] cdc_ncm 1-1:1.0: bind() failure [ 187.716483][ T8229] Quota error (device loop3): do_check_range: Getting block 3573547013 out of range 1-5 [ 187.746363][ T8229] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 187.755886][ T8229] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.931: Failed to acquire dquot type 1 [ 187.874026][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.105387][ T5823] usb 1-1: USB disconnect, device number 9 [ 188.242813][ T8246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.311932][ T8246] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.553088][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 188.574726][ T8244] loop3: detected capacity change from 0 to 32768 [ 188.590939][ T8244] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 188.729532][ T5788] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 188.840162][ T8261] loop3: detected capacity change from 0 to 512 [ 188.877369][ T8261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.907931][ T8261] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 188.973241][ T8261] EXT4-fs (loop3): 1 truncate cleaned up [ 188.998557][ T8261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.324496][ T8277] loop1: detected capacity change from 0 to 128 [ 189.342276][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.418392][ T8277] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.464089][ T8277] hpfs: filesystem error: improperly stopped [ 189.499471][ T8277] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.556606][ T8277] hpfs: You really don't want any checks? You are crazy... [ 189.565762][ T8277] hpfs: hpfs_map_sector(): read error [ 189.571786][ T8277] hpfs: code page support is disabled [ 189.583155][ T8277] hpfs: hpfs_map_4sectors(): unaligned read [ 189.600940][ T8277] hpfs: hpfs_map_4sectors(): unaligned read [ 189.608145][ T8277] hpfs: filesystem error: unable to find root dir [ 190.345395][ T8312] input: syz0 as /devices/virtual/input/input16 [ 190.806881][ T8308] loop3: detected capacity change from 0 to 40427 [ 190.832754][ T8308] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 190.849038][ T8308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 190.873405][ T8308] F2FS-fs (loop3): invalid crc value [ 190.988904][ T8314] loop1: detected capacity change from 0 to 32768 [ 191.050472][ T8314] [ 191.050472][ T8314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.050472][ T8314] [ 191.052836][ T8308] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 191.088660][ T8308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.161331][ T8314] JFS: metapage_get_blocks failed [ 191.179907][ T8314] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 191.179907][ T8314] [ 191.236624][ T8314] ERROR: (device loop1): diWrite: ixpxd invalid [ 191.236624][ T8314] [ 191.256554][ T8314] ERROR: (device loop1): txCommit: [ 191.256554][ T8314] [ 191.349764][ T5782] syz-executor: attempt to access beyond end of device [ 191.349764][ T5782] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 191.379198][ T5775] [ 191.379198][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.379198][ T5775] [ 191.410661][ T5782] syz-executor: attempt to access beyond end of device [ 191.410661][ T5782] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 191.438986][ T8334] lo: Caught tx_queue_len zero misconfig [ 191.444765][ T8334] netlink: 'syz.2.974': attribute type 14 has an invalid length. [ 191.469695][ T5775] [ 191.469695][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.469695][ T5775] [ 191.517433][ T5782] syz-executor: attempt to access beyond end of device [ 191.517433][ T5782] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.574729][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 191.627154][ T8337] loop0: detected capacity change from 0 to 2048 [ 191.683740][ T8337] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 191.728182][ T8337] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 191.735907][ T8337] UDF-fs: Scanning with blocksize 512 failed [ 191.812599][ T8337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.014597][ T8345] loop1: detected capacity change from 0 to 2048 [ 192.069617][ T8346] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.147742][ T28] audit: type=1800 audit(1790912322.505:40): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.977" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 192.196047][ T28] audit: type=1800 audit(1790912322.505:41): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.977" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 192.287316][ T8346] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 192.336432][ T8346] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 192.377053][ T8346] Remounting filesystem read-only [ 192.382240][ T2954] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 192.407641][ T2954] NILFS (loop1): discard dirty block: blocknr=22, size=1024 [ 192.415001][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.426871][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.435781][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.455346][ T2959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.473734][ T2954] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 192.491780][ T2954] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 192.500688][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.510715][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.550272][ T2954] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.622190][ T5775] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 192.638137][ T2959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.656777][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 192.687271][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.707838][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.726355][ T5775] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 192.733749][ T5775] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 192.759234][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 192.790249][ T2959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.798564][ T5775] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 192.816426][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.836218][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.856438][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.865606][ T5775] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 192.907169][ T5775] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 192.914509][ T5775] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 192.950521][ T5775] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 192.962739][ T2959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.966279][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.016160][ T5775] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 193.023865][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.052876][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.076168][ T5775] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 193.083536][ T5775] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 194.262049][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.272637][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.280739][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.298520][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.306242][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.313629][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.623167][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629616][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.098304][ T8417] ip_tables: iptables: counters copy to user failed while replacing table [ 195.420603][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 195.456322][ T5765] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.631525][ T2959] hsr_slave_0: left promiscuous mode [ 195.638403][ T2959] hsr_slave_1: left promiscuous mode [ 195.654788][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.666669][ T5765] usb 3-1: Using ep0 maxpacket: 32 [ 195.676359][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.680807][ T5765] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 195.703411][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.713102][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.724879][ T5765] usb 3-1: config 0 descriptor?? [ 195.730344][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.752780][ T5765] as10x_usb: device has been detected [ 195.758998][ T2959] bridge_slave_1: left allmulticast mode [ 195.764673][ T2959] bridge_slave_1: left promiscuous mode [ 195.771165][ T5765] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 195.782769][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.815020][ T5765] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 195.837955][ T2959] bridge_slave_0: left allmulticast mode [ 195.843646][ T2959] bridge_slave_0: left promiscuous mode [ 195.856850][ T5765] as10x_usb: error during firmware upload part1 [ 195.874664][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.883837][ T5765] Registered device nBox DVB-T Dongle [ 195.934014][ T2959] veth1_macvtap: left promiscuous mode [ 195.966402][ T2959] veth0_macvtap: left promiscuous mode [ 195.972177][ T2959] veth1_vlan: left promiscuous mode [ 195.986597][ T2959] veth0_vlan: left promiscuous mode [ 196.035868][ T56] usb 3-1: USB disconnect, device number 9 [ 196.071834][ T56] Unregistered device nBox DVB-T Dongle [ 196.075901][ T56] as10x_usb: device has been disconnected [ 196.261847][ T2959] bond1 (unregistering): Released all slaves [ 196.376245][ T5787] Bluetooth: hci3: command tx timeout [ 196.792348][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 196.834082][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 196.879677][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.925925][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.265182][ T2959] bond0 (unregistering): Released all slaves [ 197.385720][ T8443] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 197.455578][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.465193][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.477310][ T8393] bridge_slave_0: entered allmulticast mode [ 197.485772][ T8393] bridge_slave_0: entered promiscuous mode [ 197.517341][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.524513][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.556631][ T8393] bridge_slave_1: entered allmulticast mode [ 197.566249][ T8393] bridge_slave_1: entered promiscuous mode [ 197.627107][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.660178][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.704017][ T8393] team0: Port device team_slave_0 added [ 197.737381][ T8393] team0: Port device team_slave_1 added [ 197.807559][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.814564][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.855315][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.879534][ T2959] IPVS: stop unused estimator thread 0... [ 197.888303][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.895314][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.926930][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.995730][ T8393] hsr_slave_0: entered promiscuous mode [ 198.004849][ T8393] hsr_slave_1: entered promiscuous mode [ 198.013324][ T8393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.021228][ T8393] Cannot create hsr debugfs directory [ 198.282072][ T8393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.302093][ T8393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.312870][ T8393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.324829][ T8393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.356259][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.363756][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.435449][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.456524][ T5787] Bluetooth: hci3: command tx timeout [ 198.468958][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.480377][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.519641][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.526827][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.543815][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.551004][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.612566][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.858849][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.184881][ T8393] veth0_vlan: entered promiscuous mode [ 199.204119][ T8393] veth1_vlan: entered promiscuous mode [ 199.244662][ T8393] veth0_macvtap: entered promiscuous mode [ 199.255561][ T8393] veth1_macvtap: entered promiscuous mode [ 199.285365][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.297878][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.308187][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.320098][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.334474][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.352353][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.364307][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.382067][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.394473][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.407178][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.422034][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.436428][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.447223][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.458942][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.489461][ T8393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.504684][ T8393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.515767][ T8393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.525173][ T8393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.623509][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.648079][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.698276][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.707257][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.845268][ T8506] loop0: detected capacity change from 0 to 128 [ 199.891708][ T8506] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 199.917249][ T8506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.537534][ T5787] Bluetooth: hci3: command tx timeout [ 200.671168][ T8512] loop2: detected capacity change from 0 to 40427 [ 200.707945][ T8512] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 200.715487][ T8512] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 200.750734][ T8512] F2FS-fs (loop2): invalid crc value [ 200.774270][ T8512] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.971757][ T8536] hugetlbfs: syz.1.1017 (8536): Using mlock ulimits for SHM_HUGETLB is obsolete [ 200.996235][ T8512] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 201.003327][ T8512] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.238130][ T5778] syz-executor: attempt to access beyond end of device [ 201.238130][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.279010][ T28] audit: type=1400 audit(1790912331.635:42): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=8539 comm="syz.0.1018" name="//o" offset=35 [ 201.281329][ T5778] F2FS-fs (loop2): Remounting filesystem read-only [ 202.463886][ T8554] loop0: detected capacity change from 0 to 32768 [ 202.501128][ T8554] (syz.0.1026,8554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.544708][ T8554] (syz.0.1026,8554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 202.620529][ T8554] JBD2: Ignoring recovery information on journal [ 202.626890][ T5787] Bluetooth: hci3: command tx timeout [ 202.782389][ T8554] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 203.084516][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 203.386981][ T8595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1035'. [ 203.523386][ T8602] lo: Caught tx_queue_len zero misconfig [ 204.397931][ T2954] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.552044][ T2954] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.779909][ T2954] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.959853][ T2954] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.548335][ T8658] loop1: detected capacity change from 0 to 512 [ 205.609043][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.621688][ T8658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.638720][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.656493][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.669751][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.686680][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.705085][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.756269][ T8658] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.029278][ T8644] loop2: detected capacity change from 0 to 40427 [ 206.060620][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.086250][ T8644] F2FS-fs (loop2): invalid crc value [ 206.161994][ T8644] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.376850][ T8644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 206.555441][ T5778] syz-executor: attempt to access beyond end of device [ 206.555441][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.633815][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 207.261785][ T8659] chnl_net:caif_netlink_parms(): no params data found [ 207.539320][ T28] audit: type=1807 audit(1790912337.895:43): UNKNOWN=ĻIasure res=0 [ 207.561345][ T8717] ima: policy update failed [ 207.577656][ T28] audit: type=1802 audit(1790912337.895:44): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1074" res=0 errno=0 [ 207.595159][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.615973][ T28] audit: type=1802 audit(1790912337.915:45): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1074" res=0 errno=0 [ 207.712306][ T2954] hsr_slave_0: left promiscuous mode [ 207.795670][ T2954] hsr_slave_1: left promiscuous mode [ 207.808148][ T8732] loop0: detected capacity change from 0 to 64 [ 207.816421][ T5780] Bluetooth: hci3: command tx timeout [ 207.858391][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.881781][ T8734] ip_tables: iptables: counters copy to user failed while replacing table [ 207.897093][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.925558][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.943232][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.967353][ T2954] bridge_slave_1: left allmulticast mode [ 207.988861][ T2954] bridge_slave_1: left promiscuous mode [ 208.004919][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.032189][ T2954] bridge_slave_0: left allmulticast mode [ 208.043529][ T2954] bridge_slave_0: left promiscuous mode [ 208.054933][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.089173][ T28] audit: type=1800 audit(1790912338.445:46): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1076" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 208.180791][ T2954] veth1_macvtap: left promiscuous mode [ 208.189632][ T2954] veth0_macvtap: left promiscuous mode [ 208.195472][ T2954] veth1_vlan: left promiscuous mode [ 208.221695][ T2954] veth0_vlan: left promiscuous mode [ 209.231489][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 209.290354][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 209.342103][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.419295][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.687205][ T8765] loop0: detected capacity change from 0 to 40427 [ 209.704306][ T8765] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 209.720780][ T8765] F2FS-fs (loop0): invalid crc value [ 209.784905][ T8765] F2FS-fs (loop0): Found nat_bits in checkpoint [ 209.906636][ T5780] Bluetooth: hci3: command tx timeout [ 209.926260][ T8765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.035928][ T2954] bond0 (unregistering): Released all slaves [ 210.061479][ T5783] syz-executor: attempt to access beyond end of device [ 210.061479][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.104217][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.424528][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.442882][ T8770] program syz.1.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.462602][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.504876][ T8659] bridge_slave_0: entered allmulticast mode [ 210.533028][ T8659] bridge_slave_0: entered promiscuous mode [ 210.589530][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.622885][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.666465][ T8659] bridge_slave_1: entered allmulticast mode [ 210.674025][ T8659] bridge_slave_1: entered promiscuous mode [ 210.799580][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.816510][ T8784] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1090'. [ 210.854072][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.956410][ T8786] program syz.2.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.993390][ T8659] team0: Port device team_slave_0 added [ 211.018364][ T8784] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1090'. [ 211.043740][ T8659] team0: Port device team_slave_1 added [ 211.151359][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.175752][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.246149][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.485182][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.505167][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.560244][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.692624][ T8805] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 211.769098][ T8659] hsr_slave_0: entered promiscuous mode [ 211.796718][ T8659] hsr_slave_1: entered promiscuous mode [ 211.825534][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.835538][ T8659] Cannot create hsr debugfs directory [ 211.989337][ T5087] Bluetooth: hci3: command tx timeout [ 212.071735][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 212.071772][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 212.077934][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 212.257778][ T8826] loop2: detected capacity change from 0 to 8 [ 212.342308][ T8826] SQUASHFS error: Unable to read directory block [249:9] [ 212.930812][ T8659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.963732][ T8659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.981253][ T8659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.006847][ T8659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.311525][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.382387][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.417258][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.424540][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.459736][ T8846] loop5: detected capacity change from 0 to 6 [ 213.467941][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.475178][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.496399][ T8846] loop5: [POWERTEC] p1 p2 p3 [ 213.516998][ T8846] loop5: p1 start 2738982409 is beyond EOD, truncated [ 213.523944][ T8846] loop5: p2 start 3318134482 is beyond EOD, truncated [ 213.555977][ T8846] loop5: p3 start 3832978868 is beyond EOD, truncated [ 213.685349][ T8851] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 214.056355][ T51] Bluetooth: hci3: command tx timeout [ 214.220475][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.931700][ T8659] veth0_vlan: entered promiscuous mode [ 214.961768][ T8659] veth1_vlan: entered promiscuous mode [ 215.043569][ T8659] veth0_macvtap: entered promiscuous mode [ 215.069866][ T8659] veth1_macvtap: entered promiscuous mode [ 215.149331][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.163092][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.173717][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.184939][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.195194][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.226852][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.254103][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.283738][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.324912][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.348999][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.376374][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.412001][ T8659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.434126][ T8659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.458433][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.509933][ T8659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.529482][ T8912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1119'. [ 215.554173][ T8659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.566323][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 215.595299][ T8659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.616243][ T8659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.767458][ T8921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1121'. [ 215.877953][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.921227][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.994871][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.040411][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.060404][ T8933] loop1: detected capacity change from 0 to 128 [ 216.266313][ T8936] vivid-001: disconnect [ 216.297315][ T8935] vivid-001: reconnect [ 216.392577][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 216.737576][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1132'. [ 217.048099][ T2987] bond0: (slave bond_slave_0): interface is now down [ 217.055288][ T2987] bond0: (slave bond_slave_1): interface is now down [ 217.083152][ T2987] bond0: now running without any active interface! [ 217.453573][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 218.002683][ T8986] loop0: detected capacity change from 0 to 32768 [ 218.124817][ T8986] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.138286][ T9015] loop4: detected capacity change from 0 to 64 [ 218.349415][ T28] audit: type=1800 audit(1790912348.695:47): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1149" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 218.369842][ T8986] XFS (loop0): Ending clean mount [ 218.405766][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1150'. [ 218.643688][ T5783] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.644966][ T8993] loop1: detected capacity change from 0 to 32768 [ 218.797907][ T8993] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.983615][ T8993] XFS (loop1): Ending clean mount [ 219.037603][ T8993] XFS (loop1): Quotacheck needed: Please wait. [ 219.192102][ T8993] XFS (loop1): Quotacheck: Done. [ 219.334366][ T9037] loop4: detected capacity change from 0 to 32768 [ 219.401025][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.977005][ T9068] i2c i2c-0: new_device: Can't parse I2C address [ 220.195748][ T9076] loop0: detected capacity change from 0 to 1024 [ 220.238372][ T9076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.300051][ T9076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 220.322083][ T9076] System zones: 0-1, 3-12 [ 220.337295][ T9076] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.455893][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 220.613044][ T9088] loop0: detected capacity change from 0 to 256 [ 220.671662][ T9088] FAT-fs (loop0): Directory bread(block 64) failed [ 220.700254][ T9088] FAT-fs (loop0): Directory bread(block 65) failed [ 220.723809][ T9088] FAT-fs (loop0): Directory bread(block 66) failed [ 220.760851][ T9088] FAT-fs (loop0): Directory bread(block 67) failed [ 220.786320][ T9088] FAT-fs (loop0): Directory bread(block 68) failed [ 220.792900][ T9088] FAT-fs (loop0): Directory bread(block 69) failed [ 220.834549][ T9071] loop2: detected capacity change from 0 to 32768 [ 220.848654][ T9088] FAT-fs (loop0): Directory bread(block 70) failed [ 220.855226][ T9088] FAT-fs (loop0): Directory bread(block 71) failed [ 220.879387][ T9071] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1160 (9071) [ 220.901129][ T9088] FAT-fs (loop0): Directory bread(block 72) failed [ 220.933162][ T9088] FAT-fs (loop0): Directory bread(block 73) failed [ 220.948695][ T9091] loop4: detected capacity change from 0 to 256 [ 220.984318][ T9071] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 220.991717][ T9091] exfat: Bad value for 'uid' [ 221.029880][ T9071] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.083785][ T9071] BTRFS info (device loop2): enabling ssd optimizations [ 221.106228][ T9071] BTRFS info (device loop2): not using ssd optimizations [ 221.113346][ T9071] BTRFS info (device loop2): turning off barriers [ 221.135101][ T9071] BTRFS info (device loop2): use no compression [ 221.162701][ T9071] BTRFS info (device loop2): using free space tree [ 221.647114][ T5778] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 222.029159][ T5788] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (5788) [ 222.345779][ T9116] loop1: detected capacity change from 0 to 32768 [ 222.567764][ T9116] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.746635][ T9116] XFS (loop1): Ending clean mount [ 222.899540][ T9116] XFS (loop1): User initiated shutdown received. [ 222.946395][ T9116] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 222.995905][ T9116] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 223.196843][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 223.696202][ T49] bond0: (slave bond_slave_0): interface is now down [ 223.703394][ T49] bond0: (slave bond_slave_1): interface is now down [ 223.721501][ T9175] loop2: detected capacity change from 0 to 1024 [ 223.741033][ T49] bond0: now running without any active interface! [ 224.430067][ T9204] Falling back ldisc for ttyS3. [ 224.619446][ T9215] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 224.904827][ T9229] loop4: detected capacity change from 0 to 4096 [ 224.939857][ T9229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.976566][ T9229] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.242428][ T8659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.485345][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 225.734247][ T56] IPVS: starting estimator thread 0... [ 225.846219][ T9259] IPVS: using max 19 ests per chain, 45600 per kthread [ 226.135830][ T9278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1209'. [ 226.362205][ T9290] netlink: 'syz.4.1213': attribute type 63 has an invalid length. [ 226.370173][ T9290] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1213'. [ 226.577906][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1217'. [ 226.592207][ T9302] loop2: detected capacity change from 0 to 512 [ 226.598821][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 226.624703][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1217'. [ 226.633601][ T9302] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 226.670792][ T9302] EXT4-fs (loop2): invalid journal inode [ 226.692076][ T9302] EXT4-fs (loop2): can't get journal size [ 226.722289][ T9302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 226.743962][ T9302] System zones: 1-12, 13-13 [ 226.810292][ T9302] EXT4-fs (loop2): 1 truncate cleaned up [ 226.841177][ T9302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.888547][ T9311] kAFS: bad VL server IP address [ 227.091543][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.390931][ T9325] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 227.508267][ T9312] loop1: detected capacity change from 0 to 32768 [ 227.599824][ T9312] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 227.753202][ T9312] XFS (loop1): Ending clean mount [ 227.996443][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 229.384686][ T9420] loop2: detected capacity change from 0 to 16 [ 229.412367][ T9420] erofs: (device loop2): mounted with root inode @ nid 36. [ 229.449341][ T9420] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 229.465001][ T9420] erofs: (device loop2): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 229.651432][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 229.802232][ T9434] loop2: detected capacity change from 0 to 256 [ 229.850738][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 256.060252][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.070897][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.500179][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.506629][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.816278][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 378.940104][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.946641][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.178919][ T29] INFO: task khugepaged:36 blocked for more than 143 seconds. [ 389.191084][ T29] Not tainted syzkaller #0 [ 389.196122][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.204828][ T29] task:khugepaged state:D stack:27208 pid:36 ppid:2 flags:0x00004000 [ 389.220242][ T29] Call Trace: [ 389.223643][ T29] [ 389.227876][ T29] __schedule+0x15ae/0x4660 [ 389.232848][ T29] ? asan.module_dtor+0x20/0x20 [ 389.242140][ T29] ? mark_lock+0x94/0x320 [ 389.248748][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.254798][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 389.267189][ T29] schedule+0xbd/0x170 [ 389.271328][ T29] schedule_preempt_disabled+0x13/0x20 [ 389.279303][ T29] rwsem_down_write_slowpath+0xc3f/0x1020 [ 389.285087][ T29] ? rwsem_down_write_slowpath+0x81b/0x1020 [ 389.293454][ T29] ? rwsem_down_read_slowpath+0x880/0x880 [ 389.300947][ T29] ? mtree_destroy+0x30/0x30 [ 389.305625][ T29] ? read_lock_is_recursive+0x20/0x20 [ 389.312616][ T29] down_write+0x1b9/0x200 [ 389.317164][ T29] ? down_read_killable+0x340/0x340 [ 389.323497][ T29] ? hugepage_vma_revalidate+0x2ba/0x310 [ 389.329551][ T29] hpage_collapse_scan_pmd+0x216a/0x4050 [ 389.335282][ T29] ? hpage_collapse_scan_pmd+0x1631/0x4050 [ 389.341201][ T29] ? hpage_collapse_scan_pmd+0x16d6/0x4050 [ 389.347215][ T29] ? hpage_collapse_scan_file+0x5e40/0x5e40 [ 389.353166][ T29] ? mas_ascend+0x713/0x830 [ 389.357848][ T29] ? file_thp_enabled+0x9c/0x140 [ 389.362842][ T29] ? hugepage_vma_check+0x47d/0x560 [ 389.368260][ T29] khugepaged+0x8df/0x1520 [ 389.372750][ T29] ? start_stop_khugepaged+0x160/0x160 [ 389.378309][ T29] ? wake_bit_function+0x200/0x200 [ 389.383496][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.388699][ T29] ? wake_bit_function+0x200/0x200 [ 389.393905][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 389.400540][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 389.405865][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 389.413909][ T29] ? _raw_spin_unlock+0x40/0x40 [ 389.420632][ T29] ? __kthread_parkme+0x71/0x1c0 [ 389.426295][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 389.431384][ T29] kthread+0x2fa/0x390 [ 389.435497][ T29] ? start_stop_khugepaged+0x160/0x160 [ 389.441153][ T29] ? kthread_blkcg+0xd0/0xd0 [ 389.445800][ T29] ret_from_fork+0x48/0x80 [ 389.450344][ T29] ? kthread_blkcg+0xd0/0xd0 [ 389.454972][ T29] ret_from_fork_asm+0x11/0x20 [ 389.459995][ T29] [ 389.463220][ T29] INFO: task kworker/u4:8:2954 blocked for more than 143 seconds. [ 389.471218][ T29] Not tainted syzkaller #0 [ 389.476315][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.485026][ T29] task:kworker/u4:8 state:D stack:23496 pid:2954 ppid:2 flags:0x00004000 [ 389.494360][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 389.500521][ T29] Call Trace: [ 389.503824][ T29] [ 389.506858][ T29] __schedule+0x15ae/0x4660 [ 389.511434][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 389.518016][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 389.524318][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.530969][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.536130][ T29] ? asan.module_dtor+0x20/0x20 [ 389.541058][ T29] ? blk_check_plugged+0x250/0x250 [ 389.546283][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 389.551443][ T29] ? wq_worker_sleeping+0x63/0x240 [ 389.556680][ T29] schedule+0xbd/0x170 [ 389.560799][ T29] io_schedule+0x80/0xd0 [ 389.565065][ T29] rq_qos_wait+0x22b/0x360 [ 389.569712][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 389.574699][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 389.580116][ T29] ? rq_qos_wait+0x360/0x360 [ 389.584755][ T29] ? wbt_exit+0xb0/0xb0 [ 389.589016][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 389.594088][ T29] wbt_wait+0x34a/0x580 [ 389.598361][ T29] ? rwb_trace_step+0x320/0x320 [ 389.603265][ T29] ? dd_depth_updated+0x110/0x110 [ 389.609540][ T29] ? rwb_trace_step+0x320/0x320 [ 389.614461][ T29] __rq_qos_throttle+0x65/0xb0 [ 389.619340][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 389.624408][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.630629][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 389.636468][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 389.642759][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 389.648069][ T29] ? ktime_get+0x7f/0x280 [ 389.652449][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 389.659165][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 389.664518][ T29] __submit_bio+0x12b/0x260 [ 389.669233][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 389.674304][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 389.680070][ T29] ? should_fail_request+0x70/0x70 [ 389.685261][ T29] ext4_io_submit+0xdc/0x140 [ 389.690020][ T29] ext4_do_writepages+0xb5f/0x3990 [ 389.695252][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 389.702247][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 389.707799][ T29] ? __lock_acquire+0x1336/0x7d80 [ 389.712883][ T29] ext4_writepages+0x1dd/0x350 [ 389.717834][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 389.722814][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 389.728280][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 389.734294][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 389.739825][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 389.744810][ T29] do_writepages+0x351/0x590 [ 389.749563][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 389.755329][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 389.760805][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.765865][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 389.770982][ T29] __writeback_single_inode+0x14e/0xee0 [ 389.776645][ T29] writeback_sb_inodes+0x813/0x1020 [ 389.781932][ T29] ? queue_io+0x530/0x530 [ 389.786422][ T29] __writeback_inodes_wb+0x114/0x240 [ 389.791770][ T29] wb_writeback+0x472/0xbe0 [ 389.796379][ T29] ? queue_io+0x2d1/0x530 [ 389.800756][ T29] ? percpu_ref_tryget+0x250/0x250 [ 389.805880][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.811978][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.817302][ T29] wb_workfn+0xad7/0xe60 [ 389.821603][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 389.827411][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.833989][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.839679][ T29] ? read_lock_is_recursive+0x20/0x20 [ 389.845115][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.850651][ T29] ? process_scheduled_works+0x975/0x1600 [ 389.856736][ T29] ? process_scheduled_works+0x975/0x1600 [ 389.862517][ T29] process_scheduled_works+0xa60/0x1600 [ 389.868418][ T29] ? worker_attach_to_pool+0x370/0x370 [ 389.873924][ T29] ? assign_work+0x3cc/0x5d0 [ 389.878839][ T29] worker_thread+0xa5e/0xfe0 [ 389.883511][ T29] kthread+0x2fa/0x390 [ 389.887791][ T29] ? pr_cont_work+0x550/0x550 [ 389.892683][ T29] ? kthread_blkcg+0xd0/0xd0 [ 389.897574][ T29] ret_from_fork+0x48/0x80 [ 389.902049][ T29] ? kthread_blkcg+0xd0/0xd0 [ 389.906834][ T29] ret_from_fork_asm+0x11/0x20 [ 389.911816][ T29] [ 389.914891][ T29] INFO: task jbd2/sda1-8:5104 blocked for more than 144 seconds. [ 389.922778][ T29] Not tainted syzkaller #0 [ 389.927945][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.938388][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5104 ppid:2 flags:0x00004000 [ 389.947742][ T29] Call Trace: [ 389.951061][ T29] [ 389.954143][ T29] __schedule+0x15ae/0x4660 [ 389.958768][ T29] ? asan.module_dtor+0x20/0x20 [ 389.963802][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 389.968965][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 389.974899][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 389.980375][ T29] schedule+0xbd/0x170 [ 389.984509][ T29] io_schedule+0x80/0xd0 [ 389.988960][ T29] bit_wait_io+0x11/0xd0 [ 389.993446][ T29] __wait_on_bit+0x9f/0x2c0 [ 389.999125][ T29] ? bit_wait+0xd0/0xd0 [ 390.003335][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 390.009053][ T29] ? bit_wait+0xd0/0xd0 [ 390.013257][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 390.018151][ T29] ? do_raw_write_lock+0x11e/0x260 [ 390.023317][ T29] ? bit_waitqueue+0x30/0x30 [ 390.028015][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 390.033442][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 390.041341][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 390.048281][ T29] ? lock_chain_count+0x20/0x20 [ 390.053268][ T29] ? _raw_spin_unlock+0x40/0x40 [ 390.058280][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 390.063969][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 390.069520][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.074604][ T29] ? timer_delete_sync+0x20/0x20 [ 390.079616][ T29] ? do_raw_read_unlock+0x80/0x80 [ 390.084805][ T29] ? prepare_to_wait+0x1aa/0x200 [ 390.089865][ T29] kjournald2+0x40f/0x810 [ 390.094409][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 390.099932][ T29] ? wake_bit_function+0x200/0x200 [ 390.105126][ T29] ? _raw_spin_unlock+0x40/0x40 [ 390.110120][ T29] ? __kthread_parkme+0x71/0x1c0 [ 390.115101][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 390.120410][ T29] kthread+0x2fa/0x390 [ 390.124528][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 390.129833][ T29] ? kthread_blkcg+0xd0/0xd0 [ 390.134612][ T29] ret_from_fork+0x48/0x80 [ 390.140870][ T29] ? kthread_blkcg+0xd0/0xd0 [ 390.145534][ T29] ret_from_fork_asm+0x11/0x20 [ 390.150442][ T29] [ 390.153726][ T29] INFO: task syz-executor:5763 blocked for more than 144 seconds. [ 390.161647][ T29] Not tainted syzkaller #0 [ 390.167728][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.176563][ T29] task:syz-executor state:D stack:22888 pid:5763 ppid:5762 flags:0x00004002 [ 390.185812][ T29] Call Trace: [ 390.189182][ T29] [ 390.192157][ T29] __schedule+0x15ae/0x4660 [ 390.196809][ T29] ? mark_lock+0x94/0x320 [ 390.201183][ T29] ? asan.module_dtor+0x20/0x20 [ 390.206241][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.211334][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 390.217394][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 390.222653][ T29] schedule+0xbd/0x170 [ 390.229002][ T29] io_schedule+0x80/0xd0 [ 390.233319][ T29] bit_wait_io+0x11/0xd0 [ 390.238923][ T29] __wait_on_bit+0x9f/0x2c0 [ 390.245381][ T29] ? bit_wait+0xd0/0xd0 [ 390.249670][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 390.255345][ T29] ? bit_wait+0xd0/0xd0 [ 390.259640][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 390.264521][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 390.269651][ T29] ? bit_waitqueue+0x30/0x30 [ 390.274285][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 390.280577][ T29] do_get_write_access+0x5c9/0xe00 [ 390.285750][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 390.291854][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 390.298322][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 390.304561][ T29] ? __might_sleep+0xe0/0xe0 [ 390.309275][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 390.314899][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 390.320667][ T29] ext4_dirty_inode+0xcb/0x110 [ 390.325473][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 390.331371][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 390.336596][ T29] file_update_time+0x187/0x1a0 [ 390.341511][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 390.349867][ T29] ? do_wp_page+0x4ce/0x34d0 [ 390.354523][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 390.360866][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.365948][ T29] do_page_mkwrite+0x153/0x3f0 [ 390.370900][ T29] do_wp_page+0xd4d/0x34d0 [ 390.375402][ T29] ? folio_put+0xd0/0xd0 [ 390.379856][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 390.384946][ T29] ? __rwlock_init+0x150/0x150 [ 390.389876][ T29] handle_mm_fault+0x1306/0x4a50 [ 390.394869][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 390.399999][ T29] ? numa_migrate_prep+0x350/0x350 [ 390.405165][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 390.410557][ T29] do_user_addr_fault+0x736/0x12d0 [ 390.415724][ T29] exc_page_fault+0x64/0x100 [ 390.420460][ T29] ? clear_bhb_loop+0x40/0x90 [ 390.425327][ T29] asm_exc_page_fault+0x26/0x30 [ 390.430371][ T29] RIP: 0033:0x7efd916701e3 [ 390.434831][ T29] RSP: 002b:00007ffe9e641090 EFLAGS: 00010212 [ 390.440966][ T29] RAX: 00007efd8a1f9554 RBX: 00007ffe9e6411c0 RCX: 0000000000000000 [ 390.450013][ T29] RDX: 00007efd8a1f9550 RSI: 0000000000000008 RDI: 00007ffe9e6411c0 [ 390.459520][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 390.467645][ T29] R10: 00007ffe9e6411a0 R11: 0000000000000000 R12: 0000000000000000 [ 390.475665][ T29] R13: 0000000000006aac R14: ffffffffffff9554 R15: 0000000000000000 [ 390.486197][ T29] [ 390.489292][ T29] INFO: task syz.1.1260:9446 blocked for more than 144 seconds. [ 390.497283][ T29] Not tainted syzkaller #0 [ 390.502254][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.511181][ T29] task:syz.1.1260 state:D stack:27048 pid:9446 ppid:5775 flags:0x00004004 [ 390.520498][ T29] Call Trace: [ 390.523832][ T29] [ 390.526880][ T29] __schedule+0x15ae/0x4660 [ 390.531447][ T29] ? mark_lock+0x94/0x320 [ 390.535811][ T29] ? asan.module_dtor+0x20/0x20 [ 390.540793][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.546126][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 390.552674][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 390.559108][ T29] schedule+0xbd/0x170 [ 390.563236][ T29] io_schedule+0x80/0xd0 [ 390.568643][ T29] bit_wait_io+0x11/0xd0 [ 390.572930][ T29] __wait_on_bit+0x9f/0x2c0 [ 390.577521][ T29] ? bit_wait+0xd0/0xd0 [ 390.581725][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 390.587364][ T29] ? bit_wait+0xd0/0xd0 [ 390.591566][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 390.596419][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 390.601501][ T29] ? bit_waitqueue+0x30/0x30 [ 390.606190][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 390.611449][ T29] do_get_write_access+0x5c9/0xe00 [ 390.616900][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 390.622927][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 390.629197][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 390.635423][ T29] ? __might_sleep+0xe0/0xe0 [ 390.640147][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 390.645831][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 390.651982][ T29] ext4_dirty_inode+0xcb/0x110 [ 390.656904][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 390.662753][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 390.667938][ T29] file_update_time+0x187/0x1a0 [ 390.672837][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 390.678049][ T29] ? filemap_fault+0x103c/0x1540 [ 390.683057][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 390.688879][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 390.695172][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.700329][ T29] ? __pte_offset_map+0x20d/0x280 [ 390.705397][ T29] do_page_mkwrite+0x153/0x3f0 [ 390.710263][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 390.715240][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 390.720287][ T29] ? numa_migrate_prep+0x350/0x350 [ 390.725481][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 390.731082][ T29] do_user_addr_fault+0x736/0x12d0 [ 390.736528][ T29] exc_page_fault+0x64/0x100 [ 390.741189][ T29] ? clear_bhb_loop+0x40/0x90 [ 390.745916][ T29] asm_exc_page_fault+0x26/0x30 [ 390.750875][ T29] RIP: 0033:0x7feba7a727a9 [ 390.756563][ T29] RSP: 002b:00007ffe85f71e60 EFLAGS: 00010202 [ 390.762684][ T29] RAX: 0000001b2de22000 RBX: ffffffff894b9a16 RCX: 0000001b2de21ff8 [ 390.770787][ T29] RDX: 0000001b2d824220 RSI: 0000000000000008 RDI: 00007feba8955720 [ 390.778840][ T29] RBP: 000000000000007c R08: 00007feba7e10000 R09: 00007feba7e12000 [ 390.786877][ T29] R10: 00000000894b9a1a R11: 0000000000000002 R12: 00007feba7e26038 [ 390.794896][ T29] R13: 000000000000007e R14: ffffffff894b99bc R15: 00007feba8955720 [ 390.802981][ T29] ? fib6_node_lookup_1+0x31c/0x8b0 [ 390.808454][ T29] ? fib6_node_lookup_1+0x376/0x8b0 [ 390.813700][ T29] [ 390.816842][ T29] INFO: task syz.2.1261:9448 blocked for more than 145 seconds. [ 390.824517][ T29] Not tainted syzkaller #0 [ 390.830381][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.839375][ T29] task:syz.2.1261 state:D stack:27048 pid:9448 ppid:5778 flags:0x00004004 [ 390.848727][ T29] Call Trace: [ 390.852045][ T29] [ 390.855030][ T29] __schedule+0x15ae/0x4660 [ 390.860691][ T29] ? mark_lock+0x94/0x320 [ 390.865082][ T29] ? asan.module_dtor+0x20/0x20 [ 390.870100][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 390.875188][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 390.881214][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 390.886711][ T29] schedule+0xbd/0x170 [ 390.890830][ T29] io_schedule+0x80/0xd0 [ 390.895094][ T29] bit_wait_io+0x11/0xd0 [ 390.899439][ T29] __wait_on_bit+0x9f/0x2c0 [ 390.903978][ T29] ? bit_wait+0xd0/0xd0 [ 390.908271][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 390.913782][ T29] ? bit_wait+0xd0/0xd0 [ 390.918053][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 390.922856][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 390.927990][ T29] ? bit_waitqueue+0x30/0x30 [ 390.932647][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 390.937976][ T29] do_get_write_access+0x5c9/0xe00 [ 390.943151][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 390.949449][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 390.955671][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 390.962741][ T29] ? __might_sleep+0xe0/0xe0 [ 390.967466][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 390.973096][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 390.979284][ T29] ext4_dirty_inode+0xcb/0x110 [ 390.984094][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 390.990013][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 390.995196][ T29] file_update_time+0x187/0x1a0 [ 391.000189][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 391.005274][ T29] ? filemap_fault+0x103c/0x1540 [ 391.010519][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 391.018513][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 391.024882][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 391.030346][ T29] ? __pte_offset_map+0x20d/0x280 [ 391.035419][ T29] do_page_mkwrite+0x153/0x3f0 [ 391.041582][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 391.046661][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 391.051680][ T29] ? numa_migrate_prep+0x350/0x350 [ 391.057136][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 391.063389][ T29] do_user_addr_fault+0x736/0x12d0 [ 391.068641][ T29] exc_page_fault+0x64/0x100 [ 391.073392][ T29] asm_exc_page_fault+0x26/0x30 [ 391.078383][ T29] RIP: 0033:0x7f7d82a72f32 [ 391.082843][ T29] RSP: 002b:00007ffe2b79aea0 EFLAGS: 00010202 [ 391.089165][ T29] RAX: 0000000000001008 RBX: 00007f7d83955720 RCX: 0000000000000000 [ 391.097483][ T29] RDX: 0000001b2df23000 RSI: 0000000000000008 RDI: 00007f7d83955720 [ 391.105490][ T29] RBP: 000000000000055c R08: 00007f7d82e10000 R09: 00007f7d82e26038 [ 391.113669][ T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff8437d1da [ 391.121955][ T29] R13: 00007f7d82e26038 R14: 0000000000000094 R15: fffffffffffff000 [ 391.131156][ T29] ? sha1_transform+0xc2a/0x1390 [ 391.136309][ T29] [ 391.139377][ T29] [ 391.139377][ T29] Showing all locks held in the system: [ 391.147458][ T29] 1 lock held by khungtaskd/29: [ 391.152348][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 391.162353][ T29] 1 lock held by khugepaged/36: [ 391.168733][ T29] #0: ffff888079074da0 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x216a/0x4050 [ 391.179671][ T29] 4 locks held by kworker/u4:8/2954: [ 391.184969][ T29] #0: ffff88801a25f938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 391.196331][ T29] #1: ffffc9000bf3fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 391.209380][ T29] #2: ffff88802cbde0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 391.220399][ T29] #3: ffff88802cbe0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 391.231238][ T29] 2 locks held by getty/5533: [ 391.235952][ T29] #0: ffff8880316ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 391.245951][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 391.256321][ T29] 3 locks held by syz-executor/5763: [ 391.261645][ T29] #0: ffff88807db7e0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 391.272617][ T29] #1: ffff88802cbde510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 391.282712][ T29] #2: ffff88802cbe2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 391.295593][ T29] 3 locks held by syz.1.1260/9446: [ 391.300843][ T29] #0: ffff888079074da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 391.311090][ T29] #1: ffff88802cbde510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 391.321267][ T29] #2: ffff88802cbe2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 391.331068][ T29] 3 locks held by syz.2.1261/9448: [ 391.336560][ T29] #0: ffff888025f1c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 391.346634][ T29] #1: ffff88802cbde510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 391.356732][ T29] #2: ffff88802cbe2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 391.366668][ T29] [ 391.369994][ T29] ============================================= [ 391.369994][ T29] [ 391.378807][ T29] NMI backtrace for cpu 1 [ 391.383191][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 391.390427][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.400535][ T29] Call Trace: [ 391.403839][ T29] [ 391.406802][ T29] dump_stack_lvl+0x18c/0x250 [ 391.411527][ T29] ? __wake_up_klogd+0xd9/0x100 [ 391.416427][ T29] ? show_regs_print_info+0x20/0x20 [ 391.421684][ T29] ? load_image+0x420/0x420 [ 391.426233][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 391.431240][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 391.437437][ T29] ? load_image+0x420/0x420 [ 391.441990][ T29] ? wq_watchdog_touch+0xef/0x170 [ 391.447057][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 391.453158][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 391.459179][ T29] watchdog+0xf59/0xfa0 [ 391.463428][ T29] ? watchdog+0x1e1/0xfa0 [ 391.467801][ T29] kthread+0x2fa/0x390 [ 391.471897][ T29] ? hungtask_pm_notify+0x50/0x50 [ 391.476962][ T29] ? kthread_blkcg+0xd0/0xd0 [ 391.481579][ T29] ret_from_fork+0x48/0x80 [ 391.486027][ T29] ? kthread_blkcg+0xd0/0xd0 [ 391.490656][ T29] ret_from_fork_asm+0x11/0x20 [ 391.495475][ T29] [ 391.499594][ T29] Sending NMI from CPU 1 to CPUs 0: [ 391.504876][ C0] NMI backtrace for cpu 0 [ 391.504887][ C0] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 391.504903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.504914][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 391.504981][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 391.505008][ C0] Code: f0 28 7c 7e 65 8b 0d f1 28 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 00 74 52 8b 8a 00 16 00 00 <83> f9 03 75 47 48 8b 8a 08 16 00 00 44 8b 8a 04 16 00 00 49 c1 e1 [ 391.505076][ C0] RSP: 0018:ffffc90000b9f5b8 EFLAGS: 00000246 [ 391.505090][ C0] RAX: ffffffff813bb267 RBX: ffffc90000b9f5e8 RCX: 0000000000000000 [ 391.505103][ C0] RDX: ffff88801aab8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 391.505113][ C0] RBP: 0000000000000001 R08: ffff88801aab8000 R09: 0000000000000003 [ 391.505123][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff815950d0 [ 391.505134][ C0] R13: ffffc90000b9fa10 R14: dffffc0000000000 R15: ffffc90000b9f5e8 [ 391.505147][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 391.505161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.505172][ C0] CR2: 0000560e5b203660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 391.505187][ C0] Call Trace: [ 391.505193][ C0] [ 391.505198][ C0] unwind_get_return_address+0x37/0xc0 [ 391.505218][ C0] ? stack_trace_save+0x100/0x100 [ 391.505240][ C0] arch_stack_walk+0x11d/0x190 [ 391.505260][ C0] ? worker_thread+0xa5e/0xfe0 [ 391.505284][ C0] stack_trace_save+0xaa/0x100 [ 391.505305][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 391.505325][ C0] ? __asan_memset+0x22/0x40 [ 391.505349][ C0] ? chacha_block_generic+0x5ea/0xda0 [ 391.505378][ C0] kasan_set_track+0x4e/0x70 [ 391.505397][ C0] ? kasan_set_track+0x4e/0x70 [ 391.505415][ C0] ? kasan_save_free_info+0x28/0x40 [ 391.505437][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 391.505458][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 391.505475][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 391.505499][ C0] ? skb_release_data+0x609/0x7f0 [ 391.505547][ C0] ? consume_skb+0xb2/0x110 [ 391.505566][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 391.505585][ C0] ? process_scheduled_works+0xa60/0x1600 [ 391.505632][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 391.505656][ C0] kasan_save_free_info+0x28/0x40 [ 391.505679][ C0] ____kasan_slab_free+0x126/0x1f0 [ 391.505701][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 391.505721][ C0] ? skb_release_data+0x609/0x7f0 [ 391.505742][ C0] __kmem_cache_free+0xba/0x1f0 [ 391.505769][ C0] skb_release_data+0x609/0x7f0 [ 391.505796][ C0] consume_skb+0xb2/0x110 [ 391.505818][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 391.505844][ C0] ? process_scheduled_works+0x975/0x1600 [ 391.505868][ C0] process_scheduled_works+0xa60/0x1600 [ 391.505905][ C0] ? worker_attach_to_pool+0x370/0x370 [ 391.505930][ C0] ? assign_work+0x3cc/0x5d0 [ 391.505960][ C0] worker_thread+0xa5e/0xfe0 [ 391.505996][ C0] kthread+0x2fa/0x390 [ 391.506016][ C0] ? pr_cont_work+0x550/0x550 [ 391.506039][ C0] ? kthread_blkcg+0xd0/0xd0 [ 391.506058][ C0] ret_from_fork+0x48/0x80 [ 391.506080][ C0] ? kthread_blkcg+0xd0/0xd0 [ 391.506100][ C0] ret_from_fork_asm+0x11/0x20 [ 391.506135][ C0] [ 391.511201][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 391.511239][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 391.511294][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.511329][ T29] Call Trace: [ 391.511350][ T29] [ 391.511371][ T29] dump_stack_lvl+0x18c/0x250 [ 391.511469][ T29] ? show_regs_print_info+0x20/0x20 [ 391.511545][ T29] ? load_image+0x420/0x420 [ 391.511648][ T29] panic+0x2ca/0x720 [ 391.511714][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 391.511772][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 391.511864][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 391.511941][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 391.512037][ T29] watchdog+0xf98/0xfa0 [ 391.512143][ T29] ? watchdog+0x1e1/0xfa0 [ 391.512242][ T29] kthread+0x2fa/0x390 [ 391.512304][ T29] ? hungtask_pm_notify+0x50/0x50 [ 391.512380][ T29] ? kthread_blkcg+0xd0/0xd0 [ 391.512428][ T29] ret_from_fork+0x48/0x80 [ 391.512502][ T29] ? kthread_blkcg+0xd0/0xd0 [ 391.512558][ T29] ret_from_fork_asm+0x11/0x20 [ 391.512673][ T29] [ 391.518558][ T29] Kernel Offset: disabled [ 391.943534][ T29] Rebooting in 86400 seconds..