last executing test programs: 4.739946576s ago: executing program 2 (id=755): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x8}, r1, 0x10007}}, 0x48) 4.604047261s ago: executing program 2 (id=757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xa19, &(0x7f00000003c0)={0x0, 0x5065, 0x40, 0x0, 0x13c}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0xa) 4.500989698s ago: executing program 2 (id=758): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmod(0xffffffffffffffff, 0x38) 3.831042877s ago: executing program 1 (id=766): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000100), 0x4) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 3.7788827s ago: executing program 0 (id=767): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000000)={&(0x7f0000000080)=[{0x5, 0x1, 0x0, {0xfffffffffffeffff, 0x3, 0x1}}, {0xffffffffffffffff, 0x1, 0x0, {0x8, 0x3}}], 0x2, 0x20, 0x7ff, 0xc}) 3.709583668s ago: executing program 4 (id=768): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.529370753s ago: executing program 1 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x20080, 0x10) read(r0, &(0x7f0000000a00)=""/100, 0x64) 3.497277476s ago: executing program 1 (id=771): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 3.416176873s ago: executing program 4 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020003000008020000000002000000000200000000020000000008", 0x52) 3.283787174s ago: executing program 4 (id=773): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") setgroups(0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) 3.279084055s ago: executing program 0 (id=774): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4c24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 3.062999136s ago: executing program 2 (id=775): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e27, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 2.537367708s ago: executing program 0 (id=777): socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 2.16140114s ago: executing program 0 (id=779): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 2.160464595s ago: executing program 1 (id=780): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.900778422s ago: executing program 4 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.546256002s ago: executing program 2 (id=783): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x49041, 0x1dc) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='p', 0x1}], 0x1, 0x80000000, 0x0, 0x9) 1.311421403s ago: executing program 3 (id=784): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 1.201088389s ago: executing program 0 (id=785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 992.946194ms ago: executing program 3 (id=786): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg(r0, &(0x7f0000003d00)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000002a00)=[{0x0}, {&(0x7f00000006c0)="8e9c", 0x2}], 0x2}, 0x48004) 902.99323ms ago: executing program 1 (id=787): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4c24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 901.671792ms ago: executing program 0 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 802.58671ms ago: executing program 3 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e650962", 0x6, 0x2) 715.326803ms ago: executing program 4 (id=790): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 563.549652ms ago: executing program 3 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa7a8239b346a48f8a5e4f7397"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x44}}, 0x40014) 502.987313ms ago: executing program 4 (id=792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) 255.157068ms ago: executing program 2 (id=793): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 254.873532ms ago: executing program 3 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff0218ef00", @ANYRES32=r1, @ANYBLOB="08000100ac14141d0800040064000100080002007f00"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0) 148.194452ms ago: executing program 1 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=796): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a40)={[{@filestreams}]}, 0x7, 0x9864, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x128) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xae, 0x2, 0x0, &(0x7f00000099c0)=[{0x8, 0x1ff, 0xffffffff}, {0x6, 0x101}]}) kernel console output (not intermixed with test programs): sim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.069286][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.069781][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.070099][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184693][ T5816] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.184724][ T5816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.198488][ T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.198507][ T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.325712][ T5613] Bluetooth: hci0: command tx timeout [ 77.334436][ T30] kernel read not supported for file /vcs (pid: 30 comm: kworker/1:1) [ 77.405780][ T5613] Bluetooth: hci1: command tx timeout [ 77.486208][ T5613] Bluetooth: hci2: command tx timeout [ 77.565425][ T5613] Bluetooth: hci3: command tx timeout [ 77.645507][ T5613] Bluetooth: hci4: command tx timeout [ 77.755888][ T5830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.838562][ T5825] loop3: detected capacity change from 0 to 32768 [ 77.839803][ T5825] ======================================================= [ 77.839803][ T5825] WARNING: The mand mount option has been deprecated and [ 77.839803][ T5825] and is ignored by this kernel. Remove the mand [ 77.839803][ T5825] option from the mount to silence this warning. [ 77.839803][ T5825] ======================================================= [ 77.958002][ T5825] JBD2: Ignoring recovery information on journal [ 78.037766][ T5837] loop4: detected capacity change from 0 to 512 [ 78.082053][ T5825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.134984][ T5837] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.135005][ T5837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.211570][ T5837] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.17: bad orphan inode 131083 [ 78.211762][ T5837] loop4: lost filesystem error report for type 5 error -117 [ 78.215523][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.215546][ C1] EXT4-fs (loop4): initial error at time 1788795555: ext4_orphan_get:1429 [ 78.215590][ C1] EXT4-fs (loop4): last error at time 1788795555: ext4_orphan_get:1429 [ 78.267382][ T5837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.354817][ T5826] loop0: detected capacity change from 0 to 40427 [ 78.395468][ T5826] F2FS-fs (loop0): build fault injection rate: 174 [ 78.395491][ T5826] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 78.399755][ T5826] F2FS-fs (loop0): invalid crc value [ 78.523684][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.577949][ T5826] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 78.597425][ T5826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 78.720314][ T5842] loop2: detected capacity change from 0 to 4096 [ 78.739446][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 78.792447][ T5826] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 78.807503][ T5842] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 78.864117][ T5842] ntfs3(loop2): ino=3, mi_enum_attr [ 78.871101][ T5826] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8ba/0xd90 [ 78.871160][ T5826] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 78.968528][ T5842] ntfs3(loop2): mft corrupted [ 78.981195][ T5842] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 78.996539][ T5842] ntfs3(loop2): Failed to load $Bitmap (-22). [ 79.025822][ T5826] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8e0 [ 79.053710][ T5836] loop1: detected capacity change from 0 to 32768 [ 79.257192][ T5612] syz-executor: attempt to access beyond end of device [ 79.257192][ T5612] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.265144][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 79.265173][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.265191][ T5612] Call Trace: [ 79.265202][ T5612] [ 79.265211][ T5612] dump_stack_lvl+0xe8/0x150 [ 79.265243][ T5612] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 79.265274][ T5612] f2fs_write_end_bio+0x1211/0x16e0 [ 79.265298][ T5612] ? blkg_put+0x22/0x240 [ 79.265338][ T5612] __submit_merged_bio+0x258/0x6a0 [ 79.265362][ T5612] ? rcu_is_watching+0x16/0xb0 [ 79.265388][ T5612] __submit_merged_write_cond+0x3c9/0x4e0 [ 79.265422][ T5612] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 79.265479][ T5612] f2fs_write_data_pages+0x2a1d/0x36f0 [ 79.265499][ T5612] ? __lock_acquire+0x747/0x2de0 [ 79.265552][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 79.265616][ T5612] ? __bfs+0x153/0x290 [ 79.265634][ T5612] ? __pfx_hlock_conflict+0x10/0x10 [ 79.265673][ T5612] ? lockdep_unlock+0x5c/0xd0 [ 79.265699][ T5612] ? __lock_acquire+0x1511/0x2de0 [ 79.265744][ T5612] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 79.265765][ T5612] do_writepages+0x338/0x560 [ 79.265796][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 79.265826][ T5612] filemap_fdatawrite+0x1e9/0x2f0 [ 79.265851][ T5612] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 79.265915][ T5612] ? do_raw_spin_unlock+0xf5/0x200 [ 79.265945][ T5612] f2fs_sync_dirty_inodes+0x30e/0x830 [ 79.265981][ T5612] f2fs_write_checkpoint+0xa38/0x2710 [ 79.266001][ T5612] ? __lock_acquire+0x747/0x2de0 [ 79.266050][ T5612] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 79.266117][ T5612] kill_f2fs_super+0x2dd/0x700 [ 79.266145][ T5612] ? __pfx_kill_f2fs_super+0x10/0x10 [ 79.266176][ T5612] ? call_rcu+0x64d/0x8b0 [ 79.266198][ T5612] ? lockdep_hardirqs_on+0x7b/0x110 [ 79.266237][ T5612] deactivate_locked_super+0xbc/0x110 [ 79.266266][ T5612] cleanup_mnt+0x3d3/0x460 [ 79.266289][ T5612] task_work_run+0x1d9/0x260 [ 79.266313][ T5612] ? __pfx_task_work_run+0x10/0x10 [ 79.266344][ T5612] exit_to_user_mode_loop+0x204/0x770 [ 79.266365][ T5612] ? rcu_is_watching+0x16/0xb0 [ 79.266391][ T5612] do_syscall_64+0x328/0x520 [ 79.266415][ T5612] ? trace_irq_disable+0x3b/0x140 [ 79.266433][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.266461][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 79.266485][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.266504][ T5612] RIP: 0033:0x7f09ab79f397 [ 79.266529][ T5612] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.266544][ T5612] RSP: 002b:00007ffdd9040c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.266565][ T5612] RAX: 0000000000000000 RBX: 00007f09ab834474 RCX: 00007f09ab79f397 [ 79.266579][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd9040d30 [ 79.266591][ T5612] RBP: 00007ffdd9040d30 R08: 00007ffdd9041d30 R09: 00000000ffffffff [ 79.266604][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd9041dc0 [ 79.266616][ T5612] R13: 00007f09ab834474 R14: 00000000000134c0 R15: 00007ffdd9041e00 [ 79.266648][ T5612] [ 79.285511][ T5836] add_index: next_index = 0. Resetting! [ 79.285540][ T5836] find_entry called with index >= next_index [ 79.285549][ T5836] find_entry called with index >= next_index [ 79.285556][ T5836] find_entry called with index >= next_index [ 79.285564][ T5836] find_entry called with index >= next_index [ 79.353115][ T5612] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 79.384097][ T5851] non-latin1 character 0x3ff found in JFS file name [ 79.384115][ T5851] mount with iocharset=utf8 to access [ 79.818009][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.231055][ T5849] loop4: detected capacity change from 0 to 32768 [ 80.742285][ T5874] loop2: detected capacity change from 0 to 1024 [ 80.764674][ T5874] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 81.287332][ T5872] loop4: detected capacity change from 0 to 32768 [ 81.348575][ T5872] JBD2: Ignoring recovery information on journal [ 81.525266][ T5872] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.831931][ T5621] ocfs2: Unmounting device (7,4) on (node local) [ 81.839129][ T5895] loop1: detected capacity change from 0 to 1024 [ 81.871141][ T5895] EXT4-fs: Ignoring removed orlov option [ 81.982682][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.475515][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 82.794110][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.250062][ T5912] loop4: detected capacity change from 0 to 32768 [ 83.409415][ T5912] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 83.456194][ T31] audit: type=1400 audit(1788795560.384:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5935 comm="syz.2.54" name="p" offset=53 [ 83.541488][ T31] audit: type=1400 audit(1788795560.474:3): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5939 comm="syz.1.55" [ 83.563126][ T5945] Zero length message leads to an empty skb [ 83.569208][ T5912] XFS (loop4): Ending clean mount [ 83.832202][ T5947] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 84.008515][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 84.091034][ T5955] loop2: detected capacity change from 0 to 8192 [ 84.164348][ T5955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.274808][ T5949] loop3: detected capacity change from 0 to 32768 [ 84.330320][ T5949] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.58 (5949) [ 84.533461][ T5949] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 84.533513][ T5949] BTRFS info (device loop3): using blake2b checksum algorithm [ 84.690309][ T31] audit: type=1400 audit(1788795561.624:4): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5971 comm="syz.0.66" name="p" offset=79 [ 84.834062][ T5949] BTRFS info (device loop3): enabling ssd optimizations [ 84.834093][ T5949] BTRFS info (device loop3): turning on async discard [ 84.834110][ T5949] BTRFS info (device loop3): enabling free space tree [ 84.839845][ T5949] BTRFS info (device loop3): use zlib compression, level 3 [ 85.021349][ T5627] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.304826][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 85.973905][ T6011] loop3: detected capacity change from 0 to 512 [ 85.994001][ T6011] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.994025][ T6011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.032993][ T6011] EXT4-fs (loop3): 1 truncate cleaned up [ 86.066909][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.166533][ T5987] loop1: detected capacity change from 0 to 32768 [ 86.223623][ T6011] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 86.231314][ T5987] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 86.305089][ T6025] netlink: 'syz.0.80': attribute type 12 has an invalid length. [ 86.305114][ T6025] netlink: 'syz.0.80': attribute type 29 has an invalid length. [ 86.305127][ T6025] netlink: 148 bytes leftover after parsing attributes in process `syz.0.80'. [ 86.305176][ T6025] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 86.305189][ T6025] netlink: 'syz.0.80': attribute type 2 has an invalid length. [ 86.356494][ T5987] XFS (loop1): Ending clean mount [ 86.444707][ T5623] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 86.679676][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.816455][ T991] cfg80211: failed to load regulatory.db [ 87.248175][ T6009] loop2: detected capacity change from 0 to 32768 [ 87.264429][ T6009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.76 (6009) [ 87.307716][ T6009] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.307770][ T6009] BTRFS info (device loop2): using crc32c checksum algorithm [ 87.312578][ T6046] loop3: detected capacity change from 0 to 512 [ 87.323308][ T6046] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.342929][ T6046] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 87.391783][ T6046] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.392209][ T6046] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.480585][ T6046] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.89: Invalid block bitmap block 0 in block_group 0 [ 87.480620][ T6046] loop3: lost filesystem error report for type 5 error -117 [ 87.485539][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 87.485561][ C1] EXT4-fs (loop3): last error at time 1788795564: ext4_read_block_bitmap_nowait:487 [ 87.543568][ T6046] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.89: Invalid block bitmap block 0 in block_group 0 [ 87.543602][ T6046] loop3: lost filesystem error report for type 5 error -117 [ 87.567734][ T6046] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.89: Invalid block bitmap block 0 in block_group 0 [ 87.567768][ T6046] loop3: lost filesystem error report for type 5 error -117 [ 87.571796][ T6046] Quota error (device loop3): write_blk: dquota write failed [ 87.571903][ T6046] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 87.571939][ T6046] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.89: Failed to acquire dquot type 1 [ 87.571960][ T6046] loop3: lost filesystem error report for type 5 error -28 [ 87.641232][ T6046] EXT4-fs (loop3): 1 orphan inode deleted [ 87.653833][ T331] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 87.653947][ T331] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 87.653968][ T331] loop3: lost filesystem error report for type 5 error -117 [ 87.680712][ T6009] BTRFS info (device loop2): enabling ssd optimizations [ 87.680738][ T6009] BTRFS info (device loop2): turning on flush-on-commit [ 87.680752][ T6009] BTRFS info (device loop2): enabling free space tree [ 87.680766][ T6009] BTRFS info (device loop2): enabling auto defrag [ 87.680781][ T6009] BTRFS info (device loop2): use lzo compression, level 1 [ 87.680798][ T6009] BTRFS info (device loop2): max_inline set to 4096 [ 87.749771][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.770545][ T6009] BTRFS critical (device loop2 state E): emergency shutdown [ 87.809641][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 87.985268][ T5616] BTRFS info (device loop2 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.061934][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.476880][ T6083] loop2: detected capacity change from 0 to 1024 [ 88.544216][ T6085] loop4: detected capacity change from 0 to 2048 [ 88.582092][ T6085] NILFS (loop4): invalid segment: Magic number mismatch [ 88.582118][ T6085] NILFS (loop4): trying rollback from an earlier position [ 88.775187][ T6085] NILFS (loop4): recovery complete [ 88.813289][ T6092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.219640][ T6102] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.592999][ T6119] loop4: detected capacity change from 0 to 1024 [ 89.643165][ T31] audit: type=1800 audit(1788795566.574:5): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.109" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 90.029812][ T5728] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.301175][ T5728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.301311][ T5728] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 90.309731][ T5801] kernel read not supported for file /newroot/19 (pid: 5801 comm: kworker/0:8) [ 90.342176][ T5728] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.342217][ T5728] usb 2-1: can't read configurations, error -71 [ 90.463793][ T6154] loop4: detected capacity change from 0 to 256 [ 90.469244][ T6155] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 90.469244][ T6155] The task syz.3.127 (6155) triggered the difference, watch for misbehavior. [ 90.533964][ T6154] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 90.698347][ T6160] loop2: detected capacity change from 0 to 2048 [ 90.748912][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.796052][ T6160] EXT4-fs (loop2): shut down requested (1) [ 90.816576][ T6165] bond0: no command found in slaves file - use +ifname or -ifname [ 90.867608][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.918623][ T5801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.065450][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 91.073933][ T5801] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 91.075129][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.153561][ T5801] pvrusb2: Hardware description: Terratec Grabster AV400 [ 91.153584][ T5801] pvrusb2: ********** [ 91.153592][ T5801] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 91.153604][ T5801] pvrusb2: Important functionality might not be entirely working. [ 91.153612][ T5801] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 91.153622][ T5801] pvrusb2: ********** [ 91.338232][ T6168] loop1: detected capacity change from 0 to 32768 [ 91.396304][ T2352] pvrusb2: Invalid write control endpoint [ 91.520456][ T2352] pvrusb2: Invalid write control endpoint [ 91.520903][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 91.520914][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 91.520922][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 91.520936][ T2352] pvrusb2: Device being rendered inoperable [ 91.525161][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 91.525248][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 91.598831][ T2352] pvrusb2: Attached sub-driver cx25840 [ 91.598847][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.598856][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.671358][ T30] usb 1-1: USB disconnect, device number 2 [ 92.542357][ T6207] input: syz1 as /devices/virtual/input/input5 [ 92.630308][ T6214] loop4: detected capacity change from 0 to 1024 [ 92.700885][ T6216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.710806][ T6208] loop1: detected capacity change from 0 to 4096 [ 92.822561][ T6208] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 92.822591][ T6208] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 93.116330][ T331] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 93.140929][ T31] audit: type=1400 audit(1788795570.074:6): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6224 comm="syz.0.161" name="p" offset=53 [ 93.141540][ T5623] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 93.141567][ T5623] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 93.141583][ T5623] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 93.144391][ T154] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 93.181296][ T6228] loop4: detected capacity change from 0 to 64 [ 93.369038][ T6228] MINIX-fs: mounting file system with errors, running fsck is recommended [ 93.608528][ T6237] loop2: detected capacity change from 0 to 1024 [ 93.612043][ T6237] EXT4-fs: Ignoring removed nobh option [ 93.612170][ T6237] EXT4-fs: Ignoring removed bh option [ 93.612215][ T6237] EXT4-fs: Ignoring removed nobh option [ 93.613072][ T6237] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 93.644846][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.692029][ T31] audit: type=1800 audit(1788795570.624:7): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.165" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 93.695100][ T6244] loop3: detected capacity change from 0 to 256 [ 93.742910][ T6237] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.773058][ T6240] loop4: detected capacity change from 0 to 4096 [ 93.792060][ T6244] FAT-fs (loop3): Directory bread(block 1285) failed [ 93.792095][ T6244] FAT-fs (loop3): Directory bread(block 1286) failed [ 93.792116][ T6244] FAT-fs (loop3): Directory bread(block 1287) failed [ 93.792298][ T6244] FAT-fs (loop3): Directory bread(block 1288) failed [ 93.877674][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.884488][ T6231] loop1: detected capacity change from 0 to 40427 [ 93.908731][ T6244] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 93.921014][ T6231] F2FS-fs (loop1): build fault injection rate: 174 [ 93.921039][ T6231] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 93.941214][ T6231] F2FS-fs (loop1): invalid crc value [ 93.954179][ T6249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.185291][ T6231] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 94.246480][ T6231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.559168][ T5623] syz-executor: attempt to access beyond end of device [ 94.559168][ T5623] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.559417][ T5623] CPU: 0 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 94.559441][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.559453][ T5623] Call Trace: [ 94.559460][ T5623] [ 94.559468][ T5623] dump_stack_lvl+0xe8/0x150 [ 94.559503][ T5623] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 94.559533][ T5623] f2fs_write_end_bio+0x1211/0x16e0 [ 94.559557][ T5623] ? blkg_put+0x22/0x240 [ 94.559600][ T5623] __submit_merged_bio+0x258/0x6a0 [ 94.559628][ T5623] ? rcu_is_watching+0x16/0xb0 [ 94.559657][ T5623] __submit_merged_write_cond+0x3c9/0x4e0 [ 94.559693][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 94.559753][ T5623] f2fs_write_data_pages+0x2a1d/0x36f0 [ 94.559772][ T5623] ? __lock_acquire+0x747/0x2de0 [ 94.559822][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 94.559840][ T5623] ? is_bpf_text_address+0x26/0x2b0 [ 94.559876][ T5623] ? arch_stack_walk+0xfb/0x150 [ 94.559927][ T5623] ? add_lock_to_list+0xc7/0x100 [ 94.559953][ T5623] ? lockdep_unlock+0x5c/0xd0 [ 94.559979][ T5623] ? __lock_acquire+0x1511/0x2de0 [ 94.560027][ T5623] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.560064][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 94.560090][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 94.560112][ T5623] do_writepages+0x338/0x560 [ 94.560144][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 94.560177][ T5623] filemap_fdatawrite+0x1e9/0x2f0 [ 94.560202][ T5623] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 94.560269][ T5623] ? do_raw_spin_unlock+0xf5/0x200 [ 94.560299][ T5623] f2fs_sync_dirty_inodes+0x30e/0x830 [ 94.560337][ T5623] f2fs_write_checkpoint+0xa38/0x2710 [ 94.560358][ T5623] ? __lock_acquire+0x747/0x2de0 [ 94.560407][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 94.560484][ T5623] kill_f2fs_super+0x2dd/0x700 [ 94.560515][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 94.560549][ T5623] ? call_rcu+0x64d/0x8b0 [ 94.560571][ T5623] ? lockdep_hardirqs_on+0x7b/0x110 [ 94.560611][ T5623] deactivate_locked_super+0xbc/0x110 [ 94.560642][ T5623] cleanup_mnt+0x3d3/0x460 [ 94.560667][ T5623] task_work_run+0x1d9/0x260 [ 94.560692][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 94.560729][ T5623] exit_to_user_mode_loop+0x204/0x770 [ 94.560750][ T5623] ? rcu_is_watching+0x16/0xb0 [ 94.560777][ T5623] do_syscall_64+0x328/0x520 [ 94.560802][ T5623] ? trace_irq_disable+0x3b/0x140 [ 94.560821][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.560841][ T5623] ? clear_bhb_loop+0x70/0xc0 [ 94.560866][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.560885][ T5623] RIP: 0033:0x7ff8eed9f397 [ 94.560904][ T5623] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.560920][ T5623] RSP: 002b:00007fff4e1cb698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.560941][ T5623] RAX: 0000000000000000 RBX: 00007ff8eee34474 RCX: 00007ff8eed9f397 [ 94.560955][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4e1cb750 [ 94.560967][ T5623] RBP: 00007fff4e1cb750 R08: 00007fff4e1cc750 R09: 00000000ffffffff [ 94.560981][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4e1cc7e0 [ 94.560994][ T5623] R13: 00007ff8eee34474 R14: 00000000000170ea R15: 00007fff4e1cc820 [ 94.561027][ T5623] [ 94.598677][ T6267] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 94.705902][ T5623] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 94.940159][ T991] kernel read not supported for file /vcs (pid: 991 comm: kworker/0:2) [ 95.004360][ T6273] loop0: detected capacity change from 0 to 2048 [ 95.074145][ T6273] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 95.074167][ T6273] UDF-fs: Scanning with blocksize 512 failed [ 95.156707][ T6273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.315970][ T31] audit: type=1800 audit(1788795572.244:8): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.178" name="file1" dev="loop0" ino=818 res=0 errno=0 [ 95.318855][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.423203][ T6284] warning: `syz.2.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.440182][ T6287] loop3: detected capacity change from 0 to 1024 [ 95.484701][ T6287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.583414][ T6293] netlink: 76 bytes leftover after parsing attributes in process `syz.4.184'. [ 95.583444][ T6293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.184'. [ 95.664938][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.727835][ T5801] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.776184][ T6299] loop0: detected capacity change from 0 to 512 [ 95.822401][ T6299] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.185: Unrecognised inode hash code 255 [ 95.822431][ T6299] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.185: Corrupt directory, running e2fsck is recommended [ 95.876789][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 95.878013][ T5801] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.884714][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.936546][ T5801] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.936559][ T5801] pvrusb2: ********** [ 95.936562][ T5801] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.936569][ T5801] pvrusb2: Important functionality might not be entirely working. [ 95.936574][ T5801] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.936582][ T5801] pvrusb2: ********** [ 95.950822][ T6299] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 95.962009][ T6299] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.185: corrupted in-inode xattr: invalid ea_ino [ 95.962253][ T6299] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.965389][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 95.965409][ C0] EXT4-fs (loop0): initial error at time 1788795572: ext4_iget_extra_inode:5210: inode 15 [ 95.965949][ C0] EXT4-fs (loop0): last error at time 1788795572: ext4_iget_extra_inode:5210: inode 15 [ 95.979634][ T6299] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.185: couldn't read orphan inode 15 (err -117) [ 95.979664][ T6299] loop0: lost filesystem error report for type 5 error -117 [ 95.996869][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.109291][ T2352] pvrusb2: Invalid write control endpoint [ 96.196562][ T6299] EXT4-fs error (device loop0): __ext4_remount:6872: comm syz.0.185: Abort forced by user [ 96.196957][ T6299] EXT4-fs (loop0): Remounting filesystem read-only [ 96.196974][ T6299] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.279298][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.311861][ T25] usb 2-1: USB disconnect, device number 4 [ 96.324658][ T2352] pvrusb2: Invalid write control endpoint [ 96.324668][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.324672][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.324676][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.324681][ T2352] pvrusb2: Device being rendered inoperable [ 96.324705][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.324729][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.336502][ T2352] pvrusb2: Attached sub-driver cx25840 [ 96.336518][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.336527][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 97.083030][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 97.438591][ T6357] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 97.605133][ T6363] ntfs3(loop1): Failed to load $Extend (-22). [ 97.605161][ T6363] ntfs3(loop1): Failed to initialize $Extend. [ 97.861801][ T6359] set_capacity_and_notify: 2 callbacks suppressed [ 97.861822][ T6359] loop4: detected capacity change from 0 to 32768 [ 97.914753][ T6359] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.981778][ T6359] XFS (loop4): Ending clean mount [ 98.059623][ T31] audit: type=1800 audit(1788795574.994:9): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.214" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 98.253191][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.426611][ T31] audit: type=1326 audit(1788795575.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.470670][ T31] audit: type=1326 audit(1788795575.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.478896][ T31] audit: type=1326 audit(1788795575.404:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.478948][ T31] audit: type=1326 audit(1788795575.404:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.478987][ T31] audit: type=1326 audit(1788795575.404:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.479027][ T31] audit: type=1326 audit(1788795575.404:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.479066][ T31] audit: type=1326 audit(1788795575.404:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.479104][ T31] audit: type=1326 audit(1788795575.404:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.3.222" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3019e159 code=0x7ffc0000 [ 98.988513][ T6402] loop2: detected capacity change from 0 to 256 [ 98.989819][ T6402] vfat: Deprecated parameter 'posix' [ 98.989838][ T6402] FAT-fs: "posix" option is obsolete, not supported now [ 99.047006][ T6393] loop0: detected capacity change from 0 to 32768 [ 99.074398][ T6393] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.113728][ T6403] loop4: detected capacity change from 0 to 164 [ 99.181416][ T6393] XFS (loop0): Ending clean mount [ 99.352986][ T5612] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.508369][ T6423] loop4: detected capacity change from 0 to 1024 [ 99.513914][ T6420] loop3: detected capacity change from 0 to 1024 [ 99.622696][ T6420] hfsplus: small dir entry [ 99.899058][ T6431] loop3: detected capacity change from 0 to 128 [ 99.931944][ T6431] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.941857][ T6431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.032083][ T6440] loop0: detected capacity change from 0 to 1024 [ 100.044231][ T6440] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.058436][ T6440] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 100.058752][ T6440] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.058815][ T6440] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 100.058853][ T6440] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.064429][ T6440] EXT4-fs error (device loop0): ext4_quota_enable:7263: comm syz.0.236: Bad quota inode: 3, type: 0 [ 100.064458][ T6440] loop0: lost filesystem error report for type 5 error -117 [ 100.064722][ T6440] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.064749][ T6440] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 100.130644][ T6437] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 100.142511][ T6440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.146349][ T6443] loop2: detected capacity change from 0 to 256 [ 100.274375][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.528730][ T6451] loop1: detected capacity change from 0 to 1024 [ 100.661407][ T6451] gfs2: path_lookup on c::: returned error -2 [ 100.826016][ T6461] capability: warning: `syz.3.251' uses 32-bit capabilities (legacy support in use) [ 100.917005][ T6461] program syz.3.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.956813][ T6464] netlink: 256 bytes leftover after parsing attributes in process `syz.1.253'. [ 100.956841][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.253'. [ 101.073132][ T6467] hfsplus: invalid length 1280 has been corrected to 255 [ 101.073242][ T6467] hfsplus: invalid length 1280 has been corrected to 255 [ 101.240876][ T6462] zswap: compressor _ not available [ 101.881265][ T6501] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 101.962536][ T6507] xt_socket: unknown flags 0x4 [ 102.162932][ T6514] binder: 6512:6514 ioctl c018620c 200000000000 returned -22 [ 102.534084][ T6495] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.616236][ T6495] XFS (loop2): Ending clean mount [ 102.682544][ T5616] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.826395][ T6547] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.288'. [ 103.092036][ T6556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.291'. [ 103.409307][ T6568] set_capacity_and_notify: 2 callbacks suppressed [ 103.409324][ T6568] loop0: detected capacity change from 0 to 1024 [ 103.436387][ T6568] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.467291][ T6568] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.467641][ T6568] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.469784][ T6568] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.297: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.469815][ T6568] loop0: lost filesystem error report for type 5 error -117 [ 103.475368][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 103.475389][ C1] EXT4-fs (loop0): initial error at time 1788795580: ext4_free_blocks:6719 [ 103.475410][ C1] EXT4-fs (loop0): last error at time 1788795580: ext4_free_blocks:6719 [ 103.519228][ T6568] EXT4-fs (loop0): Remounting filesystem read-only [ 103.519338][ T6568] EXT4-fs (loop0): 1 orphan inode deleted [ 103.537852][ T6568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.616685][ T6568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.297'. [ 103.616738][ T6568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.297'. [ 103.619158][ T6569] loop3: detected capacity change from 0 to 4096 [ 103.740729][ T6569] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 103.924399][ T6569] ntfs3(loop3): Failed to load $Extend (-22). [ 103.924425][ T6569] ntfs3(loop3): Failed to initialize $Extend. [ 104.067327][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.526986][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.308'. [ 104.625955][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.206723][ T6604] loop4: detected capacity change from 0 to 32768 [ 106.271599][ T6634] capability: warning: `syz.3.328' uses deprecated v2 capabilities in a way that may be insecure [ 106.352334][ T6616] loop0: detected capacity change from 0 to 32768 [ 106.362899][ T6616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.319 (6616) [ 106.399223][ T6616] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.399256][ T6616] BTRFS info (device loop0): using crc32c checksum algorithm [ 106.424560][ T1808] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.547389][ T6616] BTRFS info (device loop0): enabling ssd optimizations [ 106.547418][ T6616] BTRFS info (device loop0): turning on flush-on-commit [ 106.547433][ T6616] BTRFS info (device loop0): enabling free space tree [ 106.547450][ T6616] BTRFS info (device loop0): enabling auto defrag [ 106.547468][ T6616] BTRFS info (device loop0): use lzo compression, level 1 [ 106.547487][ T6616] BTRFS info (device loop0): max_inline set to 4096 [ 106.622334][ T1808] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 106.636323][ T1808] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.636353][ T1808] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.636374][ T1808] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.636398][ T1808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.636431][ T1808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.640872][ T6653] use of bytesused == 0 is deprecated and will be removed in the future, [ 106.640886][ T6653] use the actual size instead. [ 106.721818][ T1808] usb 2-1: config 0 descriptor?? [ 106.859242][ T5612] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.045270][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 107.271572][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 107.271632][ T6677] netlink: 80 bytes leftover after parsing attributes in process `syz.2.339'. [ 107.324896][ T1808] input: HID 1532:011d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1532:011D.0001/input/input7 [ 107.449684][ T1808] hid-rmi 0003:1532:011D.0001: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 107.470228][ T1808] usb 2-1: USB disconnect, device number 5 [ 107.794658][ T6679] fido_id[6679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 108.175451][ T5728] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.327672][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.327722][ T5728] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 108.328648][ T5728] usb 4-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 108.328694][ T5728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 108.328717][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 27911, setting to 1024 [ 108.328743][ T5728] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 108.332831][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.332855][ T5728] usb 4-1: Product: syz [ 108.332870][ T5728] usb 4-1: Manufacturer: syz [ 108.332884][ T5728] usb 4-1: SerialNumber: syz [ 108.442021][ T5728] usb 4-1: config 0 descriptor?? [ 108.443862][ T6691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.444013][ T6691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.474997][ C1] usb 4-1: NFC: Urb failure (status -71) [ 108.475559][ C1] usb 4-1: NFC: Urb failure (status -71) [ 108.487986][ T5728] usb 4-1: NFC: Unable to get FW version [ 108.516883][ T6701] loop1: detected capacity change from 0 to 1024 [ 108.520733][ T5728] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 108.697776][ T991] usb 4-1: USB disconnect, device number 2 [ 108.740889][ T6703] loop0: detected capacity change from 0 to 1024 [ 108.852096][ T6705] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 109.010747][ T6709] loop0: detected capacity change from 0 to 1024 [ 109.013101][ T6699] loop4: detected capacity change from 0 to 32768 [ 109.058472][ T6699] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.134397][ T6699] XFS (loop4): Ending clean mount [ 109.222912][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.488369][ T6724] sctp: [Deprecated]: syz.2.358 (pid 6724) Use of int in max_burst socket option deprecated. [ 109.488369][ T6724] Use struct sctp_assoc_value instead [ 109.778446][ T6735] loop0: detected capacity change from 0 to 1024 [ 109.779458][ T6735] EXT4-fs: Ignoring removed orlov option [ 109.825751][ T6735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.926813][ T6742] loop4: detected capacity change from 0 to 64 [ 109.935096][ T6741] nlmon0: entered promiscuous mode [ 109.958654][ T6739] nlmon0: left promiscuous mode [ 110.022697][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.160018][ T6747] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 110.160041][ T6747] netlink: 232 bytes leftover after parsing attributes in process `syz.2.365'. [ 110.160064][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 110.522072][ T30] kernel read not supported for file /vcs (pid: 30 comm: kworker/1:1) [ 110.751303][ T6765] loop2: detected capacity change from 0 to 256 [ 110.911356][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 111.288728][ T6780] loop1: detected capacity change from 0 to 512 [ 111.319246][ T6780] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 111.325855][ T6780] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.381: corrupted in-inode xattr: e_value size too large [ 111.325889][ T6780] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.335143][ T6780] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.381: couldn't read orphan inode 15 (err -117) [ 111.335176][ T6780] loop1: lost filesystem error report for type 5 error -117 [ 111.335355][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 111.335372][ C0] EXT4-fs (loop1): initial error at time 1788795588: ext4_iget_extra_inode:5210: inode 15 [ 111.335397][ C0] EXT4-fs (loop1): last error at time 1788795588: ext4_orphan_get:1408 [ 111.364077][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.463551][ T6758] loop4: detected capacity change from 0 to 32768 [ 111.480463][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.516040][ T6758] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.603444][ T6758] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 111.628363][ T6758] XFS (loop4): Starting recovery (logdev: internal) [ 111.692676][ T6758] XFS (loop4): Ending recovery (logdev: internal) [ 111.804420][ T6800] loop7: detected capacity change from 0 to 7 [ 111.817038][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.817200][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.823844][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.823919][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.828626][ T5621] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.830210][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.830279][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.832937][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.833076][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.833484][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.833543][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.833902][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.833966][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.834216][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.834271][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.835530][ T6800] ldm_validate_partition_table(): Disk read failed. [ 111.835901][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.835980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.836595][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.836667][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.839520][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.839587][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.854709][ T6800] Dev loop7: unable to read RDB block 0 [ 111.857254][ T6800] loop7: unable to read partition table [ 111.857456][ T6800] loop7: partition table beyond EOD, truncated [ 111.857485][ T6800] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 111.894775][ T6800] ldm_validate_partition_table(): Disk read failed. [ 111.898443][ T6800] Dev loop7: unable to read RDB block 0 [ 111.902494][ T6800] loop7: unable to read partition table [ 111.902701][ T6800] loop7: partition table beyond EOD, truncated [ 112.163299][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 112.163867][ T31] audit: type=1400 audit(1788795589.094:32): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6801 comm="syz.1.388" name="p" offset=48 [ 112.313042][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 112.365081][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.967999][ T6810] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.389 (6810) [ 113.006745][ T6810] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 113.006780][ T6810] BTRFS info (device loop3): using crc32c checksum algorithm [ 113.161870][ T6810] BTRFS info (device loop3): enabling ssd optimizations [ 113.161899][ T6810] BTRFS info (device loop3): turning on async discard [ 113.161914][ T6810] BTRFS info (device loop3): enabling free space tree [ 113.168907][ T1808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.356981][ T1808] usb 2-1: Using ep0 maxpacket: 16 [ 113.378506][ T1808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.378553][ T1808] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 113.380623][ T1808] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 113.380647][ T1808] usb 2-1: config 1 has no interface number 0 [ 113.380673][ T1808] usb 2-1: config 1 interface 151 has no altsetting 0 [ 113.425720][ T5728] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.428542][ T1808] usb 2-1: string descriptor 0 read error: -22 [ 113.428661][ T1808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.463049][ T1808] gspca_main: pac7311-2.14.0 probing 093a:260e [ 113.515686][ T6819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.394 (6819) [ 113.586130][ T5728] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.588959][ T5728] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.588988][ T5728] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.589008][ T5728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.593328][ T6819] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.593359][ T6819] BTRFS info (device loop2): using sha256 checksum algorithm [ 113.608690][ T5627] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 113.661638][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.661670][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 113.712886][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.712916][ T5728] usb 5-1: Product: syz [ 113.712930][ T5728] usb 5-1: Manufacturer: syz [ 113.763881][ T5728] cdc_wdm 5-1:1.0: skipping garbage [ 113.763903][ T5728] cdc_wdm 5-1:1.0: skipping garbage [ 113.807625][ T5728] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 113.807658][ T5728] cdc_wdm 5-1:1.0: Unknown control protocol [ 113.937621][ T1808] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 113.937706][ T1808] pac7311 2-1:1.151: probe with driver pac7311 failed with error -71 [ 113.946463][ T6819] BTRFS info (device loop2): enabling ssd optimizations [ 113.946488][ T6819] BTRFS info (device loop2): turning on async discard [ 113.946503][ T6819] BTRFS info (device loop2): enabling free space tree [ 113.985797][ T1808] usb 2-1: USB disconnect, device number 6 [ 114.158364][ T1808] usb 5-1: USB disconnect, device number 2 [ 114.187952][ T5616] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.249281][ T6850] set_capacity_and_notify: 2 callbacks suppressed [ 114.249300][ T6850] loop0: detected capacity change from 0 to 32768 [ 114.278814][ T6868] loop3: detected capacity change from 0 to 4096 [ 114.308546][ T6850] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.424655][ T6850] XFS (loop0): Ending clean mount [ 114.654380][ T5612] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.741656][ T6882] loop1: detected capacity change from 0 to 128 [ 114.967231][ T6882] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 115.002154][ T6882] hpfs: filesystem error: improperly stopped [ 115.002180][ T6882] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 115.002195][ T6882] hpfs: You really don't want any checks? You are crazy... [ 115.002229][ T6882] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 115.002241][ T6882] hpfs: code page support is disabled [ 115.018372][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 115.018584][ T6882] hpfs: hpfs_map_4sectors(): unaligned read [ 115.018595][ T6882] hpfs: filesystem error: unable to find root dir [ 115.056466][ T6889] loop4: detected capacity change from 0 to 256 [ 115.185251][ T6882] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 115.202454][ T6889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 115.243837][ T6889] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 115.712648][ T6903] loop4: detected capacity change from 0 to 2048 [ 115.835466][ T5735] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.990054][ T5735] usb 1-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=77.7d [ 116.002640][ T5735] usb 1-1: config 49 has an invalid interface number: 167 but max is 0 [ 116.002667][ T5735] usb 1-1: config 49 has no interface number 0 [ 116.002695][ T5735] usb 1-1: config 49 interface 167 has no altsetting 0 [ 116.008833][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.008859][ T5735] usb 1-1: Product: syz [ 116.008872][ T5735] usb 1-1: Manufacturer: syz [ 116.008885][ T5735] usb 1-1: SerialNumber: syz [ 116.274855][ T6920] batman_adv: batadv0: Adding interface: gretap1 [ 116.274872][ T6920] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.274900][ T6920] batman_adv: batadv0: Interface activated: gretap1 [ 116.312703][ T6900] loop0: detected capacity change from 0 to 512 [ 116.323266][ T6900] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.495884][ T25] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 116.658535][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 116.658605][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 116.659630][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.659675][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 116.659700][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 116.659720][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 116.659781][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.677204][ T5735] imon 1-1:49.167: unable to register, err -19 [ 116.692788][ T5735] usb 1-1: USB disconnect, device number 3 [ 116.766060][ T25] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 116.768876][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 116.864940][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.881907][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 116.882019][ T25] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 116.930068][ T25] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.076198][ T6926] loop4: detected capacity change from 0 to 32768 [ 117.085990][ T5715] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.106954][ T6926] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.106975][ T6926] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.158872][ T6926] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 117.246667][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 117.248704][ T5715] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 117.253322][ T5715] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 117.253347][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.253365][ T5715] usb 4-1: config 0 has no interface number 0 [ 117.253403][ T5715] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 117.253427][ T5715] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.253448][ T5715] usb 4-1: config 0 interface 98 has no altsetting 0 [ 117.272013][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.272038][ T5715] usb 4-1: Product: syz [ 117.272052][ T5715] usb 4-1: Manufacturer: syz [ 117.272066][ T5715] usb 4-1: SerialNumber: syz [ 117.291201][ T5715] usb 4-1: config 0 descriptor?? [ 117.291903][ T6924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.292032][ T6924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.350264][ T5735] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.350282][ T5735] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.440046][ T991] usb 2-1: USB disconnect, device number 7 [ 117.560395][ T6924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.560534][ T6924] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.575137][ T991] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.600889][ T991] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.636725][ T991] keyspan 2-1:1.0: device disconnected [ 117.868900][ T5735] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 518ms [ 117.876090][ T5735] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.877048][ T6926] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.991767][ T5715] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.992308][ T5715] asix 4-1:0.98: probe with driver asix failed with error -71 [ 118.094988][ T5715] usb 4-1: USB disconnect, device number 3 [ 118.245513][ T5728] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.279693][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.361776][ T6944] loop2: detected capacity change from 0 to 1024 [ 118.410495][ T5728] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 118.414495][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.414520][ T5728] usb 2-1: Product: syz [ 118.414534][ T5728] usb 2-1: Manufacturer: syz [ 118.414548][ T5728] usb 2-1: SerialNumber: syz [ 118.448853][ T25] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 118.449904][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.449932][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.454440][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.454464][ T25] usb 1-1: Product: syz [ 118.454477][ T25] usb 1-1: Manufacturer: syz [ 118.454490][ T25] usb 1-1: SerialNumber: syz [ 118.476048][ T5728] usb 2-1: config 0 descriptor?? [ 118.530025][ T25] symbolserial 1-1:1.0: symbol converter detected [ 118.537903][ T5728] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 118.567380][ T25] usb 1-1: symbol converter now attached to ttyUSB0 [ 118.588831][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.591061][ T5728] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 118.591114][ T5728] usb 2-1: media controller created [ 118.642710][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.747742][ T5728] DVB: Unable to find symbol mt352_attach() [ 118.801695][ T5728] DVB: Unable to find symbol nxt6000_attach() [ 118.801711][ T5728] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 118.823396][ T6942] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 118.829362][ T5715] usb 1-1: USB disconnect, device number 4 [ 118.852028][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 118.871989][ T5728] dvb-usb: schedule remote query interval to 1000 msecs. [ 118.872012][ T5728] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 118.872294][ T5728] dvb-usb: bulk message failed: -22 (7/0) [ 118.872312][ T5728] dvb-usb: bulk message failed: -22 (7/0) [ 118.875189][ T5728] usb 2-1: USB disconnect, device number 8 [ 118.886103][ T5715] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 118.927662][ T5715] symbolserial 1-1:1.0: device disconnected [ 119.042630][ T5728] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 119.096722][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.246224][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 119.247009][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.247934][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.247973][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.252730][ T25] usb 3-1: config 0 descriptor?? [ 119.365561][ T6954] loop4: detected capacity change from 0 to 32768 [ 119.371690][ T6954] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.431 (6954) [ 119.416628][ T6954] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 119.416660][ T6954] BTRFS info (device loop4): using crc32c checksum algorithm [ 119.482640][ T25] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.567815][ T6954] BTRFS info (device loop4): enabling ssd optimizations [ 119.567842][ T6954] BTRFS info (device loop4): turning on async discard [ 119.567860][ T6954] BTRFS info (device loop4): enabling free space tree [ 119.687374][ T5621] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 119.767857][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.789592][ T30] usb 3-1: USB disconnect, device number 3 [ 119.925461][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 119.926129][ T25] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 119.927030][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 119.928991][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.929014][ T25] usb 2-1: Product: syz [ 119.929027][ T25] usb 2-1: Manufacturer: syz [ 119.929040][ T25] usb 2-1: SerialNumber: syz [ 119.934041][ T25] usb 2-1: config 0 descriptor?? [ 119.934773][ T6971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 120.058346][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.161069][ T6992] loop4: detected capacity change from 0 to 256 [ 120.242270][ T25] usb 2-1: USB disconnect, device number 9 [ 120.262384][ T6992] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 120.262411][ T6992] FAT-fs (loop4): Filesystem has been set read-only [ 120.432924][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.875066][ T7006] loop0: detected capacity change from 0 to 512 [ 121.317972][ T7002] loop2: detected capacity change from 0 to 32768 [ 121.354479][ T7002] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.400430][ T7002] XFS (loop2): Ending clean mount [ 121.425970][ T7031] kAFS: Invalid Command on /proc/fs/afs/cells file [ 121.466875][ T31] audit: type=1800 audit(1788795598.384:33): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.450" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 121.516278][ T7002] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 121.688027][ T5715] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.725132][ T5616] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.846557][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 121.847304][ T5715] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.848291][ T5715] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.848319][ T5715] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.848340][ T5715] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 121.848365][ T5715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.848397][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.871428][ T5715] usb 4-1: config 0 descriptor?? [ 122.270474][ T7052] loop2: detected capacity change from 0 to 256 [ 122.295153][ T7052] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 122.368269][ T5715] hid (null): bogus close delimiter [ 122.388455][ T7054] loop4: detected capacity change from 0 to 64 [ 122.392679][ T7052] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 122.526262][ T1808] usb 4-1: USB disconnect, device number 4 [ 122.586833][ T7058] loop1: detected capacity change from 0 to 1024 [ 122.616149][ T7058] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 122.932600][ T7068] program syz.0.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.155484][ T7072] Format for deleting device is "id" (uint). [ 123.306218][ T7065] loop1: detected capacity change from 0 to 32768 [ 123.558490][ T7085] loop3: detected capacity change from 0 to 8 [ 123.716461][ T7085] SQUASHFS error: lzo decompression failed, data probably corrupt [ 123.716501][ T7085] SQUASHFS error: Failed to read block 0x91: -5 [ 123.716517][ T7085] SQUASHFS error: Unable to read metadata cache entry [8f] [ 123.716536][ T7085] SQUASHFS error: Unable to read inode 0x11f [ 124.051658][ T7074] loop4: detected capacity change from 0 to 32768 [ 124.079380][ T7074] [ 124.079380][ T7074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.079380][ T7074] [ 124.134564][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.232123][ T13] ERROR: (device loop4): diWrite: ixpxd invalid [ 124.232123][ T13] [ 124.266752][ T13] ERROR: (device loop4): txCommit: [ 124.266752][ T13] [ 124.266818][ T13] jfs_write_inode: jfs_commit_inode failed! [ 124.268552][ T5621] [ 124.268552][ T5621] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.268552][ T5621] [ 124.279293][ T5621] [ 124.279293][ T5621] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.279293][ T5621] [ 124.558775][ T7116] netlink: 76 bytes leftover after parsing attributes in process `syz.4.494'. [ 124.559007][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.796286][ T1808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.850698][ T7125] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 124.912710][ T7124] netlink: 'syz.3.502': attribute type 3 has an invalid length. [ 124.946986][ T1808] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.947995][ T1808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.952785][ T1808] usb 3-1: config 0 descriptor?? [ 125.073953][ T7132] gretap0: entered promiscuous mode [ 125.119934][ T7135] Bluetooth: MGMT ver 1.23 [ 125.120974][ T7132] gretap0: left promiscuous mode [ 125.165453][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.172166][ T1808] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 125.279451][ T7140] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.316188][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 125.321758][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.322993][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.360681][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 125.360740][ T25] pvrusb2: ********** [ 125.360748][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 125.360760][ T25] pvrusb2: Important functionality might not be entirely working. [ 125.360768][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 125.360787][ T25] pvrusb2: ********** [ 125.377420][ T5728] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 125.448606][ T1808] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 125.448633][ T1808] [drm] Initialized udl on minor 1 [ 125.565201][ T2352] pvrusb2: Invalid write control endpoint [ 125.576150][ T5728] usb 2-1: device descriptor read/64, error -71 [ 125.600024][ T1808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 125.601904][ T1808] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 125.709076][ T2352] pvrusb2: Invalid write control endpoint [ 125.709092][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 125.709101][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 125.709109][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 125.709118][ T2352] pvrusb2: Device being rendered inoperable [ 125.709194][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 125.709233][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 125.710159][ T2352] pvrusb2: Attached sub-driver cx25840 [ 125.710172][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 125.710180][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 125.822975][ T7130] pvrusb2: Killing an I2C write to 5 that is too large (desired=8192 limit=61) [ 125.827171][ T5735] usb 1-1: USB disconnect, device number 5 [ 125.853984][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.864485][ T5728] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 125.880066][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.880567][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 125.905020][ T5801] usb 3-1: USB disconnect, device number 4 [ 126.015571][ T5728] usb 2-1: device descriptor read/64, error -71 [ 126.099306][ T7152] set_capacity_and_notify: 1 callbacks suppressed [ 126.099327][ T7152] loop3: detected capacity change from 0 to 1024 [ 126.125901][ T5728] usb usb2-port1: attempt power cycle [ 126.238548][ T31] audit: type=1800 audit(1788795603.174:34): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.515" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 126.467874][ T5728] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 126.487242][ T5728] usb 2-1: device descriptor read/8, error -71 [ 126.725913][ T5728] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 126.748767][ T5728] usb 2-1: device descriptor read/8, error -71 [ 126.750272][ T1808] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 126.777445][ T1808] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 126.859714][ T5728] usb usb2-port1: unable to enumerate USB device [ 126.879373][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'. [ 126.879614][ T7178] block nbd0: Unsupported socket: should be TCP or UNIX. [ 127.039420][ T5728] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 127.100433][ T31] audit: type=1326 audit(1788795604.034:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c539e159 code=0x7ffc0000 [ 127.100660][ T31] audit: type=1326 audit(1788795604.034:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c539e159 code=0x7ffc0000 [ 127.103468][ T31] audit: type=1326 audit(1788795604.034:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c539e159 code=0x7ffc0000 [ 127.103696][ T31] audit: type=1326 audit(1788795604.034:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0c539e159 code=0x7ffc0000 [ 127.103858][ T31] audit: type=1326 audit(1788795604.034:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c539e159 code=0x7ffc0000 [ 127.104160][ T31] audit: type=1326 audit(1788795604.034:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0c539dec2 code=0x7ffc0000 [ 127.245282][ T7189] loop2: detected capacity change from 0 to 256 [ 127.255533][ T31] audit: type=1326 audit(1788795604.164:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0c535e98e code=0x7ffc0000 [ 127.255594][ T31] audit: type=1326 audit(1788795604.164:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0c539df87 code=0x7ffc0000 [ 127.255646][ T31] audit: type=1326 audit(1788795604.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0c535e98e code=0x7ffc0000 [ 127.255684][ T31] audit: type=1326 audit(1788795604.174:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0c539ddeb code=0x7ffc0000 [ 127.353250][ T7163] ceph: No mds server is up or the cluster is laggy [ 127.909227][ T7203] veth0: entered promiscuous mode [ 127.909966][ T7202] veth0: left promiscuous mode [ 128.020981][ T7209] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 128.021002][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'. [ 128.519341][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 128.567049][ T7226] ipvlan2: entered allmulticast mode [ 128.567071][ T7226] syz_tun: entered allmulticast mode [ 128.580590][ T7227] overlayfs: failed to resolve './file0/file0': -2 [ 129.009615][ T7245] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.009638][ T7245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.548879][ T7259] loop3: detected capacity change from 0 to 4096 [ 129.658715][ T7259] ntfs3(loop3): Failed to load $Extend (-22). [ 129.658739][ T7259] ntfs3(loop3): Failed to initialize $Extend. [ 130.171451][ T7264] loop0: detected capacity change from 0 to 32768 [ 130.355572][ T7264] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 130.355572][ T7264] [ 130.364145][ T7264] ERROR: (device loop0): remounting filesystem as read-only [ 130.364168][ T7264] ialloc: diAlloc returned -5! [ 130.655191][ T7283] loop3: detected capacity change from 0 to 64 [ 130.850213][ T7276] loop2: detected capacity change from 0 to 131072 [ 130.852210][ T7276] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 130.852233][ T7276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 130.854630][ T7276] F2FS-fs (loop2): invalid crc value [ 130.920920][ T7273] loop1: detected capacity change from 0 to 32768 [ 130.934725][ T7273] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.572 (7273) [ 130.956894][ T7276] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.976510][ T7273] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 130.976539][ T7273] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 130.976992][ T7276] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.977015][ T7276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 131.096276][ T5627] hfs: request for non-existent node 131072 in B*Tree [ 131.103702][ T7273] BTRFS info (device loop1): enabling ssd optimizations [ 131.103730][ T7273] BTRFS info (device loop1): turning on async discard [ 131.103745][ T7273] BTRFS info (device loop1): enabling free space tree [ 131.721631][ T7271] loop4: detected capacity change from 0 to 32768 [ 131.796979][ T7271] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 131.878031][ T5623] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 131.912849][ T7271] XFS (loop4): Ending clean mount [ 132.147143][ T5621] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.448406][ T7333] ip_tables: iptables: counters copy to user failed while replacing table [ 132.632825][ T7336] netlink: 76 bytes leftover after parsing attributes in process `syz.4.588'. [ 132.851272][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852801][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.237327][ T7343] loop0: detected capacity change from 0 to 2048 [ 133.383351][ T7343] loop0: p2 < > p3 < > [ 134.036741][ T7345] loop2: detected capacity change from 0 to 40427 [ 134.052180][ T7345] F2FS-fs (loop2): invalid crc value [ 134.132532][ T6320] udevd[6320]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 134.167846][ T7345] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 134.174254][ T7345] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 134.174283][ T7345] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 134.174351][ T7345] F2FS-fs (loop2): Start checkpoint disabled! [ 134.222960][ T7345] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 134.232841][ T7345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 134.663646][ T7359] loop0: detected capacity change from 0 to 32768 [ 134.681816][ T7359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.594 (7359) [ 134.747052][ T7359] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.747088][ T7359] BTRFS info (device loop0): using crc32c checksum algorithm [ 134.832826][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 134.832846][ T31] audit: type=1400 audit(1788795611.764:66): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=7388 comm="syz.1.602" name="p" offset=33 [ 134.882721][ T7359] BTRFS info (device loop0): enabling ssd optimizations [ 134.882748][ T7359] BTRFS info (device loop0): turning on flush-on-commit [ 134.882764][ T7359] BTRFS info (device loop0): enabling free space tree [ 134.882781][ T7359] BTRFS info (device loop0): enabling auto defrag [ 134.882798][ T7359] BTRFS info (device loop0): use lzo compression, level 1 [ 134.882817][ T7359] BTRFS info (device loop0): max_inline set to 4096 [ 134.953054][ T7359] BTRFS critical (device loop0 state E): emergency shutdown [ 134.990743][ T5612] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.129197][ T7396] netlink: 332 bytes leftover after parsing attributes in process `syz.1.603'. [ 135.129228][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 135.129271][ T7396] netlink: 332 bytes leftover after parsing attributes in process `syz.1.603'. [ 135.370470][ T7402] loop2: detected capacity change from 0 to 1024 [ 135.379640][ T7402] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 135.382880][ T7402] hfsplus: hfsplus: invalid btree header node [ 135.382892][ T7402] hfsplus: (loop2): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 135.382908][ T7402] hfsplus: Run fsck.hfsplus to repair. [ 135.623229][ T7404] loop3: detected capacity change from 0 to 1024 [ 135.632047][ T7404] EXT4-fs: Ignoring removed orlov option [ 135.704369][ T7404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.190878][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.245009][ T7419] loop1: detected capacity change from 0 to 32768 [ 136.264156][ T7419] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.264177][ T7419] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.314077][ T7419] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 136.319542][ T5715] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 136.319561][ T5715] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 136.404414][ T7425] loop3: detected capacity change from 0 to 4096 [ 136.639459][ T31] audit: type=1800 audit(1788795613.574:67): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.612" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 136.645822][ T5715] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 326ms [ 136.662001][ T5715] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.662053][ T7419] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.665796][ T5728] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.698663][ T7408] loop4: detected capacity change from 0 to 32768 [ 136.835823][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 136.837401][ T5728] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.840297][ T5728] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.840322][ T5728] usb 1-1: config 0 has no interface number 0 [ 136.840363][ T5728] usb 1-1: config 0 interface 184 has no altsetting 0 [ 136.875736][ T7408] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.901908][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.901936][ T5728] usb 1-1: Product: syz [ 136.901951][ T5728] usb 1-1: Manufacturer: syz [ 136.901964][ T5728] usb 1-1: SerialNumber: syz [ 136.929479][ T5728] usb 1-1: config 0 descriptor?? [ 137.017273][ T7408] XFS (loop4): Ending clean mount [ 137.105845][ T5621] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.259719][ T7444] sctp: [Deprecated]: syz.2.617 (pid 7444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.259719][ T7444] Use struct sctp_sack_info instead [ 137.795503][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 137.795533][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 137.796022][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 137.796045][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 137.796062][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 137.796079][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 137.796317][ T5728] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 137.886970][ T5728] usb 1-1: USB disconnect, device number 6 [ 137.960592][ T7459] loop4: detected capacity change from 0 to 1024 [ 138.137852][ T7464] loop1: detected capacity change from 0 to 512 [ 138.178745][ T7464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 138.178884][ T7464] System zones: 1-12 [ 138.225236][ T7464] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.620: missing EA_INODE flag [ 138.225270][ T7464] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 138.242941][ T7464] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.620: error while reading EA inode 12 err=-117 [ 138.242974][ T7464] loop1: lost filesystem error report for type 5 error -117 [ 138.244957][ T7464] EXT4-fs (loop1): 1 orphan inode deleted [ 138.250897][ T7464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.308244][ T7469] loop3: detected capacity change from 0 to 512 [ 138.344288][ T7469] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.628: iget: bad extended attribute block 134217728 [ 138.344323][ T7469] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.345355][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 138.345374][ C1] EXT4-fs (loop3): initial error at time 1788795615: ext4_orphan_get:1403: inode 15 [ 138.345434][ C1] EXT4-fs (loop3): last error at time 1788795615: ext4_orphan_get:1403: inode 15 [ 138.345594][ T7469] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.628: couldn't read orphan inode 15 (err -117) [ 138.345619][ T7469] loop3: lost filesystem error report for type 5 error -117 [ 138.408457][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.458824][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.624100][ T31] audit: type=1800 audit(1788795615.554:68): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 138.646340][ T7478] netlink: 'syz.2.631': attribute type 83 has an invalid length. [ 138.722986][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.021936][ T7494] tipc: Started in network mode [ 139.021965][ T7494] tipc: Node identity ac14140f, cluster identity 4711 [ 139.022938][ T7494] tipc: New replicast peer: 255.255.255.255 [ 139.045034][ T7494] tipc: Enabled bearer , priority 10 [ 139.128155][ T7499] loop2: detected capacity change from 0 to 256 [ 139.261188][ T7499] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 139.261318][ T7499] FAT-fs (loop2): Filesystem has been set read-only [ 139.610790][ T7507] netlink: 'syz.2.642': attribute type 14 has an invalid length. [ 139.734109][ T7501] loop3: detected capacity change from 0 to 40427 [ 139.758713][ T7501] F2FS-fs (loop3): invalid crc value [ 139.895640][ T5613] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 139.895678][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.895705][ T5613] Tainted: [L]=SOFTLOCKUP [ 139.895712][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.895725][ T5613] Workqueue: hci1 hci_rx_work [ 139.895753][ T5613] Call Trace: [ 139.895760][ T5613] [ 139.895769][ T5613] dump_stack_lvl+0xe8/0x150 [ 139.895799][ T5613] sysfs_create_dir_ns+0x271/0x2a0 [ 139.895832][ T5613] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.895864][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 139.895893][ T5613] kobject_add_internal+0x622/0xcd0 [ 139.895929][ T5613] kobject_add+0x163/0x240 [ 139.895963][ T5613] ? __pfx_kobject_add+0x10/0x10 [ 139.895997][ T5613] ? get_device_parent+0x366/0x3a0 [ 139.896026][ T5613] device_add+0x3fa/0xb80 [ 139.896052][ T5613] hci_conn_add_sysfs+0xd5/0x210 [ 139.896079][ T5613] le_conn_complete_evt+0x10b2/0x17a0 [ 139.896113][ T5613] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.896142][ T5613] ? __mutex_unlock_slowpath+0x731/0x900 [ 139.896175][ T5613] ? skb_pull_data+0xf0/0x200 [ 139.896200][ T5613] hci_le_enh_conn_complete_evt+0x189/0x490 [ 139.896228][ T5613] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.896262][ T5613] hci_event_packet+0x67a/0xf10 [ 139.896293][ T5613] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.896319][ T5613] ? __pfx_hci_event_packet+0x10/0x10 [ 139.896348][ T5613] ? audit_filter_rules+0x52f0/0x62e0 [ 139.896377][ T5613] ? hci_send_to_monitor+0xe2/0x590 [ 139.896411][ T5613] hci_rx_work+0x3ee/0x1020 [ 139.896442][ T5613] ? process_scheduled_works+0x97a/0x1630 [ 139.896468][ T5613] process_scheduled_works+0xc3d/0x1630 [ 139.896522][ T5613] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.896552][ T5613] ? assign_work+0x3cf/0x5d0 [ 139.896583][ T5613] worker_thread+0xa47/0xfb0 [ 139.896623][ T5613] ? __kthread_parkme+0x71/0x1f0 [ 139.896665][ T5613] kthread+0x38b/0x480 [ 139.896685][ T5613] ? __pfx_worker_thread+0x10/0x10 [ 139.896709][ T5613] ? __pfx_kthread+0x10/0x10 [ 139.896731][ T5613] ret_from_fork+0x514/0xb70 [ 139.896754][ T5613] ? __pfx_ret_from_fork+0x10/0x10 [ 139.896774][ T5613] ? __switch_to+0xc89/0x1420 [ 139.896804][ T5613] ? __pfx_kthread+0x10/0x10 [ 139.896831][ T5613] ret_from_fork_asm+0x1a/0x30 [ 139.896879][ T5613] [ 139.901994][ T5613] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.902040][ T5613] Bluetooth: hci1: failed to register connection device [ 140.141203][ T25] tipc: Node number set to 2886997007 [ 140.326946][ T7501] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 140.332357][ T7501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.397047][ T5627] syz-executor: attempt to access beyond end of device [ 140.397047][ T5627] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.412963][ T5627] CPU: 0 UID: 0 PID: 5627 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 140.412998][ T5627] Tainted: [L]=SOFTLOCKUP [ 140.413004][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.413016][ T5627] Call Trace: [ 140.413023][ T5627] [ 140.413031][ T5627] dump_stack_lvl+0xe8/0x150 [ 140.413063][ T5627] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 140.413096][ T5627] f2fs_write_end_bio+0x1211/0x16e0 [ 140.413120][ T5627] ? blkg_put+0x22/0x240 [ 140.413160][ T5627] __submit_merged_bio+0x258/0x6a0 [ 140.413187][ T5627] ? rcu_is_watching+0x16/0xb0 [ 140.413215][ T5627] __submit_merged_write_cond+0x3c9/0x4e0 [ 140.413249][ T5627] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 140.413298][ T5627] f2fs_write_data_pages+0x2a1d/0x36f0 [ 140.413352][ T5627] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 140.413384][ T5627] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.413441][ T5627] ? __bfs+0x153/0x290 [ 140.413458][ T5627] ? __pfx_hlock_conflict+0x10/0x10 [ 140.413497][ T5627] ? lockdep_unlock+0x5c/0xd0 [ 140.413522][ T5627] ? __lock_acquire+0x1511/0x2de0 [ 140.413565][ T5627] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 140.413585][ T5627] do_writepages+0x338/0x560 [ 140.413616][ T5627] ? do_raw_spin_unlock+0xf5/0x200 [ 140.413645][ T5627] filemap_fdatawrite+0x1e9/0x2f0 [ 140.413668][ T5627] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 140.413732][ T5627] ? do_raw_spin_unlock+0xf5/0x200 [ 140.413763][ T5627] f2fs_sync_dirty_inodes+0x30e/0x830 [ 140.413798][ T5627] f2fs_write_checkpoint+0xa38/0x2710 [ 140.413818][ T5627] ? __lock_acquire+0x747/0x2de0 [ 140.413870][ T5627] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 140.413941][ T5627] kill_f2fs_super+0x2dd/0x700 [ 140.413970][ T5627] ? __pfx_kill_f2fs_super+0x10/0x10 [ 140.414002][ T5627] ? call_rcu+0x64d/0x8b0 [ 140.414023][ T5627] ? lockdep_hardirqs_on+0x7b/0x110 [ 140.414060][ T5627] deactivate_locked_super+0xbc/0x110 [ 140.414089][ T5627] cleanup_mnt+0x3d3/0x460 [ 140.414114][ T5627] task_work_run+0x1d9/0x260 [ 140.414138][ T5627] ? __pfx_task_work_run+0x10/0x10 [ 140.414166][ T5627] exit_to_user_mode_loop+0x204/0x770 [ 140.414187][ T5627] ? rcu_is_watching+0x16/0xb0 [ 140.414212][ T5627] do_syscall_64+0x328/0x520 [ 140.414236][ T5627] ? trace_irq_disable+0x3b/0x140 [ 140.414255][ T5627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.414273][ T5627] ? clear_bhb_loop+0x70/0xc0 [ 140.414296][ T5627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.414315][ T5627] RIP: 0033:0x7fce3019f397 [ 140.414361][ T5627] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 140.414376][ T5627] RSP: 002b:00007fff13ffbb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 140.414396][ T5627] RAX: 0000000000000000 RBX: 00007fce30234474 RCX: 00007fce3019f397 [ 140.414409][ T5627] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff13ffbc10 [ 140.414421][ T5627] RBP: 00007fff13ffbc10 R08: 00007fff13ffcc10 R09: 00000000ffffffff [ 140.414434][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff13ffcca0 [ 140.414446][ T5627] R13: 00007fce30234474 R14: 0000000000022430 R15: 00007fff13ffcce0 [ 140.414476][ T5627] [ 140.418087][ T5627] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 140.737989][ T7518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.738121][ T7518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.925675][ T7518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.990897][ T7518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.991003][ T7518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.018768][ T7518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.028381][ T7533] loop0: detected capacity change from 0 to 512 [ 141.035969][ T7518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.037580][ T7533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.065088][ T7518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.065176][ T7518] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.104590][ T7518] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.114099][ T7533] EXT4-fs (loop0): 1 truncate cleaned up [ 141.118076][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.159877][ T7518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.159994][ T7518] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.171981][ T7518] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.223250][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.224108][ T7518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.224815][ T7518] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.251874][ T7518] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.378931][ T7525] loop4: detected capacity change from 0 to 40427 [ 141.396693][ T7525] F2FS-fs (loop4): invalid crc value [ 141.535439][ T25] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 141.605900][ T5801] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.648332][ T7525] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 141.679986][ T7525] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 141.680014][ T7525] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 141.680039][ T7525] F2FS-fs (loop4): Start checkpoint disabled! [ 141.706808][ T25] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 141.714330][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.722278][ T25] usb 2-1: config 0 descriptor?? [ 141.743834][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 141.756051][ T5801] usb 4-1: Using ep0 maxpacket: 16 [ 141.763068][ T5801] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.781590][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.800265][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.800294][ T5801] usb 4-1: Product: syz [ 141.800308][ T5801] usb 4-1: Manufacturer: syz [ 141.800323][ T5801] usb 4-1: SerialNumber: syz [ 141.833832][ T5801] usb 4-1: config 0 descriptor?? [ 141.846413][ T5801] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.846448][ T5801] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 141.879369][ T7525] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 141.880491][ T7552] loop2: detected capacity change from 0 to 2048 [ 141.882708][ T7525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 141.902448][ T7552] EXT4-fs (loop2): invalid inodes per group: 0 [ 142.016010][ T50] kworker/u8:3: attempt to access beyond end of device [ 142.016010][ T50] loop4: rw=1, sector=77824, nr_sectors = 408 limit=40427 [ 142.040734][ T50] kworker/u8:3: attempt to access beyond end of device [ 142.040734][ T50] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.041656][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.041686][ T50] Tainted: [L]=SOFTLOCKUP [ 142.041692][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.041704][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 142.041737][ T50] Call Trace: [ 142.041745][ T50] [ 142.041753][ T50] dump_stack_lvl+0xe8/0x150 [ 142.041794][ T50] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 142.041827][ T50] f2fs_write_end_bio+0x1211/0x16e0 [ 142.041851][ T50] ? blkg_put+0x22/0x240 [ 142.041891][ T50] __submit_merged_bio+0x258/0x6a0 [ 142.041916][ T50] ? rcu_is_watching+0x16/0xb0 [ 142.041943][ T50] __submit_merged_write_cond+0x3c9/0x4e0 [ 142.041978][ T50] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 142.042027][ T50] f2fs_write_data_pages+0x2a1d/0x36f0 [ 142.042082][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 142.042113][ T50] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 142.042168][ T50] ? unwind_next_frame+0x1baf/0x2550 [ 142.042203][ T50] ? __css_rstat_updated+0x237/0x540 [ 142.042222][ T50] ? lock_acquire+0x115/0x350 [ 142.042261][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 142.042282][ T50] do_writepages+0x338/0x560 [ 142.042311][ T50] ? reacquire_held_locks+0x117/0x1a0 [ 142.042333][ T50] ? writeback_sb_inodes+0x450/0x1af0 [ 142.042364][ T50] __writeback_single_inode+0x136/0x1220 [ 142.042393][ T50] ? do_raw_spin_unlock+0xf5/0x200 [ 142.042423][ T50] writeback_sb_inodes+0x9de/0x1af0 [ 142.042446][ T50] ? __lock_acquire+0x747/0x2de0 [ 142.042486][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 142.042551][ T50] ? rcu_is_watching+0x16/0xb0 [ 142.042575][ T50] ? queue_io+0x2d3/0x470 [ 142.042603][ T50] wb_writeback+0x41c/0xad0 [ 142.042632][ T50] ? queue_io+0x201/0x470 [ 142.042664][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 142.042687][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.042729][ T50] wb_workfn+0x431/0x10f0 [ 142.042755][ T50] ? update_se+0x90/0x1020 [ 142.042802][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 142.042831][ T50] ? update_protect_slice+0x128/0x210 [ 142.042874][ T50] ? lock_acquire+0x115/0x350 [ 142.042903][ T50] ? rcu_is_watching+0x16/0xb0 [ 142.042928][ T50] ? process_scheduled_works+0x97a/0x1630 [ 142.042954][ T50] process_scheduled_works+0xc3d/0x1630 [ 142.043010][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.043043][ T50] ? assign_work+0x3cf/0x5d0 [ 142.043073][ T50] worker_thread+0xa47/0xfb0 [ 142.043113][ T50] ? __kthread_parkme+0x71/0x1f0 [ 142.043151][ T50] kthread+0x38b/0x480 [ 142.043171][ T50] ? __pfx_worker_thread+0x10/0x10 [ 142.043193][ T50] ? __pfx_kthread+0x10/0x10 [ 142.043214][ T50] ret_from_fork+0x514/0xb70 [ 142.043237][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 142.043255][ T50] ? __switch_to+0xc89/0x1420 [ 142.043283][ T50] ? __pfx_kthread+0x10/0x10 [ 142.043302][ T50] ret_from_fork_asm+0x1a/0x30 [ 142.043348][ T50] [ 142.113267][ T50] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 142.194990][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 142.195048][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 142.208906][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.397185][ T5735] loop4: lost filesystem error report for type 5 error -108 [ 142.421186][ T30] usb 2-1: USB disconnect, device number 14 [ 142.457160][ T5801] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 142.549153][ T5801] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 142.549218][ T5801] em28xx 4-1:0.0: board has no eeprom [ 142.578783][ T7563] loop0: detected capacity change from 0 to 512 [ 142.580500][ T7563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.590770][ T7562] block nbd2: NBD_DISCONNECT [ 142.602169][ T7563] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.666: bad orphan inode 131083 [ 142.602198][ T7563] loop0: lost filesystem error report for type 5 error -117 [ 142.607228][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 142.607249][ C0] EXT4-fs (loop0): initial error at time 1788795619: ext4_orphan_get:1429 [ 142.607271][ C0] EXT4-fs (loop0): last error at time 1788795619: ext4_orphan_get:1429 [ 142.641604][ T5801] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.641637][ T5801] em28xx 4-1:0.0: dvb set to bulk mode. [ 142.658776][ T7563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.682436][ T5735] em28xx 4-1:0.0: Binding DVB extension [ 142.706944][ T5801] usb 4-1: USB disconnect, device number 5 [ 142.722687][ T5801] em28xx 4-1:0.0: Disconnecting em28xx [ 142.826874][ T5735] em28xx 4-1:0.0: Registering input extension [ 142.830044][ T5801] em28xx 4-1:0.0: Closing input extension [ 142.907304][ T5801] em28xx: Freeing device [ 143.005444][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.092328][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.108538][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.165392][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.245453][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.318995][ T7585] loop1: detected capacity change from 0 to 512 [ 143.320291][ T7585] EXT4-fs: Ignoring removed oldalloc option [ 143.352637][ T7585] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.676: bad orphan inode 32 [ 143.352669][ T7585] loop1: lost filesystem error report for type 5 error -117 [ 143.353029][ T7585] ext4_test_bit(bit=31, block=4) = 0 [ 143.353048][ T7585] EXT4-fs (loop1): 1 truncate cleaned up [ 143.410944][ T7585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.492434][ T7585] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.676: bg 0: block 5: invalid block bitmap [ 143.712653][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.044323][ T7589] loop3: detected capacity change from 0 to 32768 [ 144.051012][ T7589] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.674 (7589) [ 144.073434][ T7589] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.073473][ T7589] BTRFS info (device loop3): using crc32c checksum algorithm [ 144.125524][ T5735] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.249409][ T7589] BTRFS info (device loop3): enabling ssd optimizations [ 144.249439][ T7589] BTRFS info (device loop3): turning on flush-on-commit [ 144.249456][ T7589] BTRFS info (device loop3): enabling free space tree [ 144.251108][ T7589] BTRFS info (device loop3): enabling auto defrag [ 144.251130][ T7589] BTRFS info (device loop3): use lzo compression, level 1 [ 144.251149][ T7589] BTRFS info (device loop3): max_inline set to 4096 [ 144.286182][ T5735] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.287147][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.287175][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.287209][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.291158][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.295650][ T5735] usb 3-1: config 0 descriptor?? [ 144.451056][ T5627] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.566668][ T5735] usbhid 3-1:0.0: can't add hid device: -71 [ 144.566787][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 144.579153][ T5735] usb 3-1: USB disconnect, device number 5 [ 144.685017][ T7622] Format for deleting device is "id" (uint). [ 145.014445][ T7601] loop1: detected capacity change from 0 to 32768 [ 145.096127][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.105467][ T5735] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.113839][ T7601] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.175806][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.212233][ T5801] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.255862][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.261547][ T5735] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 145.262568][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.262598][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.262634][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.319345][ T5735] usb 3-1: config 0 descriptor?? [ 145.326634][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.407741][ T7601] (syz.1.680,7601,0):ocfs2_double_lock:1202 ERROR: status = -2 [ 145.407772][ T7601] (syz.1.680,7601,0):ocfs2_rename:1311 ERROR: status = -2 [ 145.407814][ T7601] (syz.1.680,7601,0):ocfs2_rename:1711 ERROR: status = -2 [ 145.437511][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 145.438385][ T5801] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 145.439622][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.442067][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.442090][ T5801] usb 1-1: Product: syz [ 145.442104][ T5801] usb 1-1: Manufacturer: syz [ 145.442142][ T5801] usb 1-1: SerialNumber: syz [ 145.496881][ T5801] usb 1-1: config 0 descriptor?? [ 145.533572][ T5735] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 145.581257][ T5735] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 145.616075][ T5801] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 145.631809][ T7634] loop3: detected capacity change from 0 to 32768 [ 145.661580][ T5735] input: failed to attach handler kbd to device input10, error: -5 [ 145.706662][ T13] usb 1-1: Failed to submit usb control message: -71 [ 145.706698][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 145.706716][ T13] usb 1-1: unable to get target info from device [ 145.706763][ T13] usb 1-1: could not get target info (-71) [ 145.706794][ T5801] usb 1-1: USB disconnect, device number 7 [ 145.707054][ T13] usb 1-1: could not probe fw (-71) [ 145.712689][ T7634] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.836933][ T5735] usb 3-1: USB disconnect, device number 6 [ 145.949657][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 146.002309][ T7634] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 146.113640][ T7634] XFS (loop3): Starting recovery (logdev: internal) [ 146.246934][ T7634] XFS (loop3): Ending recovery (logdev: internal) [ 146.376093][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.518626][ T7667] i2c i2c-0: delete_device: Can't find device in list [ 146.851203][ T5627] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.168501][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.245731][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.327426][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.393288][ T7670] loop4: detected capacity change from 0 to 131072 [ 147.405905][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.415022][ T7670] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 147.415044][ T7670] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.431638][ T7670] F2FS-fs (loop4): invalid crc value [ 147.516823][ T7670] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.533029][ T7670] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 147.533068][ T7670] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 148.056394][ T7695] loop0: detected capacity change from 0 to 512 [ 148.060992][ T7695] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.708: inode #2147418112: comm syz.0.708: iget: illegal inode # [ 148.061027][ T7695] loop0: lost filesystem error report for type 5 error -117 [ 148.061255][ T7695] EXT4-fs (loop0): no journal found [ 148.061271][ T7695] EXT4-fs (loop0): can't get journal size [ 148.065360][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 148.065380][ C1] EXT4-fs (loop0): initial error at time 1788795624: ext4_get_journal_inode:5927 [ 148.065401][ C1] EXT4-fs (loop0): last error at time 1788795624: ext4_get_journal_inode:5927 [ 148.113079][ T7695] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 148.125502][ T7695] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 148.143089][ T7695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.377796][ T7695] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.708: Invalid inode bitmap blk 4 in block_group 0 [ 148.448202][ T7695] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 148.505744][ T7695] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.708: Invalid inode bitmap blk 4 in block_group 0 [ 148.608800][ T7695] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 148.773815][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.958289][ T7727] loop1: detected capacity change from 0 to 256 [ 149.092660][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 149.245718][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.419814][ T7734] loop3: detected capacity change from 0 to 4096 [ 149.424411][ T7734] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 149.522241][ T7734] ntfs3(loop3): ino=19, mi_enum_attr [ 149.522273][ T7734] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 149.525515][ T7734] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 149.637185][ T7745] loop2: detected capacity change from 0 to 1024 [ 149.638120][ T7745] EXT4-fs: Ignoring removed nobh option [ 149.638237][ T7745] EXT4-fs: Ignoring removed bh option [ 149.638285][ T7745] EXT4-fs: Ignoring removed nobh option [ 149.639543][ T7745] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 149.692929][ T7734] ntfs3(loop3): ino=1f, "file3" ni_rename [ 149.714372][ T7745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.765445][ T31] audit: type=1800 audit(1788795626.694:69): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 149.851337][ T5616] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /152/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 149.895339][ T5616] EXT4-fs (loop2): Remounting filesystem read-only [ 149.947975][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.021300][ T7750] loop0: detected capacity change from 0 to 1024 [ 150.037233][ T7750] EXT4-fs: Ignoring removed i_version option [ 150.114256][ T7750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.431965][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.649687][ T25] kernel write not supported for file /input/event0 (pid: 25 comm: kworker/1:0) [ 150.855452][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 151.005760][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 151.047847][ T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 151.047889][ T30] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 151.049046][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.050053][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.050962][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.051917][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.053292][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.072413][ T7792] loop4: detected capacity change from 0 to 512 [ 151.137598][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.138862][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.139906][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.140914][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 151.140937][ T30] usb 2-1: SerialNumber: syz [ 151.144358][ T30] usb 2-1: config 0 descriptor?? [ 151.187823][ T7792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.187924][ T7792] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.228768][ T30] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 151.322934][ T7798] netlink: 'syz.3.752': attribute type 34 has an invalid length. [ 151.413096][ T4970] bcm5974 2-1:0.0: could not read from device [ 151.441236][ T30] usb 2-1: USB disconnect, device number 15 [ 151.463257][ T4970] bcm5974 2-1:0.0: could not read from device [ 151.505474][ T7778] bcm5974 2-1:0.0: could not read from device [ 151.662501][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.524546][ T7828] loop3: detected capacity change from 0 to 1024 [ 152.572487][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.721836][ T7836] loop0: detected capacity change from 0 to 4096 [ 152.791659][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 152.856791][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.861881][ T7841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.962747][ T31] audit: type=1400 audit(1788795629.894:70): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7842 comm="syz.4.772" [ 153.117160][ T7849] loop3: detected capacity change from 0 to 512 [ 153.122540][ T7849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.160224][ T7849] EXT4-fs (loop3): 1 truncate cleaned up [ 153.175158][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.247989][ T7849] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 153.288494][ T7849] EXT4-fs (loop3): Remounting filesystem read-only [ 153.418843][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.748336][ T7847] loop4: detected capacity change from 0 to 40427 [ 153.767811][ T7847] F2FS-fs (loop4): invalid crc value [ 154.146448][ T7847] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 154.321116][ T7847] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 154.321145][ T7847] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 154.321171][ T7847] F2FS-fs (loop4): Start checkpoint disabled! [ 154.386937][ T7847] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 154.388454][ T7847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 154.430942][ T7868] loop0: detected capacity change from 0 to 512 [ 154.449029][ T50] kworker/u8:3: attempt to access beyond end of device [ 154.449029][ T50] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.458634][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.458666][ T50] Tainted: [L]=SOFTLOCKUP [ 154.458673][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.458685][ T50] Workqueue: writeback wb_workfn (flush-7:4) [ 154.458717][ T50] Call Trace: [ 154.458726][ T50] [ 154.458733][ T50] dump_stack_lvl+0xe8/0x150 [ 154.458764][ T50] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 154.458797][ T50] f2fs_write_end_bio+0x1211/0x16e0 [ 154.458821][ T50] ? blkg_put+0x22/0x240 [ 154.458862][ T50] __submit_merged_bio+0x258/0x6a0 [ 154.458888][ T50] ? rcu_is_watching+0x16/0xb0 [ 154.458916][ T50] __submit_merged_write_cond+0x3c9/0x4e0 [ 154.458952][ T50] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 154.459002][ T50] f2fs_write_data_pages+0x2a1d/0x36f0 [ 154.459055][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.459087][ T50] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 154.459142][ T50] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 154.459186][ T50] ? __lock_acquire+0x747/0x2de0 [ 154.459225][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.459246][ T50] do_writepages+0x338/0x560 [ 154.459274][ T50] ? reacquire_held_locks+0x117/0x1a0 [ 154.459295][ T50] ? writeback_sb_inodes+0x450/0x1af0 [ 154.459325][ T50] __writeback_single_inode+0x136/0x1220 [ 154.459354][ T50] ? do_raw_spin_unlock+0xf5/0x200 [ 154.459384][ T50] writeback_sb_inodes+0x9de/0x1af0 [ 154.459409][ T50] ? __lock_acquire+0x747/0x2de0 [ 154.459441][ T50] ? lock_acquire+0x115/0x350 [ 154.459466][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 154.459538][ T50] ? rcu_is_watching+0x16/0xb0 [ 154.459560][ T50] ? queue_io+0x2d3/0x470 [ 154.459589][ T50] wb_writeback+0x41c/0xad0 [ 154.459616][ T50] ? queue_io+0x201/0x470 [ 154.459646][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 154.459669][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.459710][ T50] wb_workfn+0x431/0x10f0 [ 154.459752][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 154.459779][ T50] ? trace_hrtimer_start+0x82/0x200 [ 154.459811][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.459844][ T50] ? lock_acquire+0x115/0x350 [ 154.459871][ T50] ? rcu_is_watching+0x16/0xb0 [ 154.459895][ T50] ? process_scheduled_works+0x97a/0x1630 [ 154.459921][ T50] process_scheduled_works+0xc3d/0x1630 [ 154.459974][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.460006][ T50] ? assign_work+0x3cf/0x5d0 [ 154.460034][ T50] worker_thread+0xa47/0xfb0 [ 154.460073][ T50] ? __kthread_parkme+0x71/0x1f0 [ 154.460109][ T50] kthread+0x38b/0x480 [ 154.460127][ T50] ? __pfx_worker_thread+0x10/0x10 [ 154.460150][ T50] ? __pfx_kthread+0x10/0x10 [ 154.460169][ T50] ret_from_fork+0x514/0xb70 [ 154.460191][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 154.460209][ T50] ? __switch_to+0xc89/0x1420 [ 154.460238][ T50] ? __pfx_kthread+0x10/0x10 [ 154.460260][ T50] ret_from_fork_asm+0x1a/0x30 [ 154.460305][ T50] [ 154.460324][ T50] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 154.546095][ T7868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.546200][ T7868] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.714019][ T7871] loop3: detected capacity change from 0 to 4096 [ 154.729916][ T7871] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 154.843227][ T7871] ntfs3(loop3): ino=19, mi_enum_attr [ 154.843259][ T7871] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 154.862116][ T7871] ntfs3(loop3): ino=1a, mi_enum_attr [ 154.862244][ T7871] ntfs3(loop3): ino=1a, mi_enum_attr [ 154.862432][ T7871] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 155.179122][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.622352][ T7877] loop2: detected capacity change from 0 to 32768 [ 155.634133][ T7877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.783 (7877) [ 155.695770][ T7877] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.695802][ T7877] BTRFS info (device loop2): using sha256 checksum algorithm [ 155.882494][ T7877] BTRFS info (device loop2): enabling ssd optimizations [ 155.882524][ T7877] BTRFS info (device loop2): turning on async discard [ 155.882540][ T7877] BTRFS info (device loop2): enabling free space tree [ 156.042665][ T5616] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.210938][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.794'. [ 194.298748][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.298807][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.726982][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727044][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.765532][ T32] INFO: task kworker/u8:6:154 blocked in I/O wait for more than 143 seconds. [ 310.765607][ T32] Tainted: G L syzkaller #0 [ 310.765619][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.765627][ T32] task:kworker/u8:6 state:D stack:22568 pid:154 tgid:154 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 310.765682][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 310.765726][ T32] Call Trace: [ 310.765736][ T32] [ 310.765749][ T32] __schedule+0x17dd/0x5940 [ 310.765777][ T32] ? blk_mq_flush_plug_list+0x415/0x540 [ 310.765811][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 310.765843][ T32] ? __blk_flush_plug+0x416/0x4d0 [ 310.765868][ T32] ? __pfx___schedule+0x10/0x10 [ 310.765902][ T32] ? schedule+0x90/0x2b0 [ 310.765928][ T32] schedule+0x164/0x2b0 [ 310.765955][ T32] io_schedule+0x7f/0xd0 [ 310.765982][ T32] rq_qos_wait+0x266/0x360 [ 310.766013][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 310.766035][ T32] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 310.766059][ T32] ? __pfx_rq_qos_wait+0x10/0x10 [ 310.766089][ T32] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 310.766116][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 310.766149][ T32] wbt_wait+0x326/0x550 [ 310.766174][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 310.766194][ T32] ? __pfx_dd_bio_merge+0x10/0x10 [ 310.766235][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 310.766254][ T32] __rq_qos_throttle+0x6b/0xb0 [ 310.766290][ T32] blk_mq_submit_bio+0x1512/0x2a70 [ 310.766314][ T32] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 310.766342][ T32] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 310.766377][ T32] ? blk_cgroup_bio_start+0x5d7/0x670 [ 310.766406][ T32] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 310.766436][ T32] ? __submit_bio+0x7e/0x340 [ 310.766462][ T32] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 310.766490][ T32] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 310.766568][ T32] ? submit_bio_noacct+0x104a/0x1b80 [ 310.766596][ T32] ? blkcg_set_ioprio+0x16b/0x2a0 [ 310.766623][ T32] ext4_bio_write_folio+0x101a/0x18c0 [ 310.766659][ T32] mpage_process_page_bufs+0x6bd/0x8a0 [ 310.766677][ T32] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 310.766689][ T32] ? process_scheduled_works+0xc3d/0x1630 [ 310.766715][ T32] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 310.766739][ T32] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 310.766755][ T32] ? ext4_init_io_end+0x29/0x130 [ 310.766768][ T32] ? kmem_cache_alloc_noprof+0x151/0x600 [ 310.766791][ T32] ? ext4_init_io_end+0x29/0x130 [ 310.766810][ T32] ext4_do_writepages+0xb8a/0x4770 [ 310.766839][ T32] ? clockevents_program_event+0x491/0x630 [ 310.766864][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 310.766878][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.766892][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.766906][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.766924][ T32] ? lock_acquire+0x115/0x350 [ 310.766971][ T32] ext4_writepages+0x1fe/0x4e0 [ 310.766985][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 310.767005][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 310.767020][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 310.767032][ T32] do_writepages+0x338/0x560 [ 310.767044][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.767060][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 310.767072][ T32] ? writeback_sb_inodes+0x450/0x1af0 [ 310.767089][ T32] __writeback_single_inode+0x136/0x1220 [ 310.767106][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 310.767122][ T32] writeback_sb_inodes+0x9de/0x1af0 [ 310.767150][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 310.767182][ T32] ? __pfx_down_read_trylock+0x10/0x10 [ 310.767204][ T32] __writeback_inodes_wb+0x114/0x240 [ 310.767223][ T32] wb_writeback+0x42f/0xad0 [ 310.767243][ T32] ? queue_io+0x201/0x470 [ 310.767260][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 310.767272][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.767300][ T32] wb_workfn+0x980/0x10f0 [ 310.767322][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 310.767341][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.767359][ T32] ? lock_acquire+0x115/0x350 [ 310.767374][ T32] ? rcu_is_watching+0x16/0xb0 [ 310.767389][ T32] ? process_scheduled_works+0x97a/0x1630 [ 310.767403][ T32] process_scheduled_works+0xc3d/0x1630 [ 310.767433][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 310.767450][ T32] ? assign_work+0x3cf/0x5d0 [ 310.767466][ T32] worker_thread+0xa47/0xfb0 [ 310.767487][ T32] ? __kthread_parkme+0x71/0x1f0 [ 310.767507][ T32] kthread+0x38b/0x480 [ 310.767518][ T32] ? __pfx_worker_thread+0x10/0x10 [ 310.767531][ T32] ? __pfx_kthread+0x10/0x10 [ 310.767542][ T32] ret_from_fork+0x514/0xb70 [ 310.767554][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 310.767565][ T32] ? __switch_to+0xc89/0x1420 [ 310.767581][ T32] ? __pfx_kthread+0x10/0x10 [ 310.767592][ T32] ret_from_fork_asm+0x1a/0x30 [ 310.767616][ T32] [ 310.767667][ T32] INFO: task jbd2/sda1-8:4947 blocked in I/O wait for more than 143 seconds. [ 310.767677][ T32] Tainted: G L syzkaller #0 [ 310.767683][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.767688][ T32] task:jbd2/sda1-8 state:D stack:25288 pid:4947 tgid:4947 ppid:2 task_flags:0x240040 flags:0x00080000 [ 310.767722][ T32] Call Trace: [ 310.767725][ T32] [ 310.767732][ T32] __schedule+0x17dd/0x5940 [ 310.767754][ T32] ? percpu_ref_put_many+0x18e/0x240 [ 310.767771][ T32] ? blk_mq_dispatch_list+0xd2c/0xe10 [ 310.767795][ T32] ? __pfx___schedule+0x10/0x10 [ 310.767814][ T32] ? schedule+0x90/0x2b0 [ 310.767828][ T32] schedule+0x164/0x2b0 [ 310.767842][ T32] io_schedule+0x7f/0xd0 [ 310.767856][ T32] bit_wait_io+0x13/0x110 [ 310.767871][ T32] __wait_on_bit+0xac/0x300 [ 310.767884][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.767900][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 310.767914][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.767927][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 310.767943][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 310.767984][ T32] ? __wait_on_buffer+0xe/0x80 [ 310.768000][ T32] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 310.768014][ T32] ? trace_hrtimer_start+0x82/0x200 [ 310.768048][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 310.768066][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.768093][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.768107][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 310.768120][ T32] ? __timer_delete_sync+0x4a7/0x520 [ 310.768133][ T32] kjournald2+0x3bc/0x740 [ 310.768158][ T32] ? __pfx_kjournald2+0x10/0x10 [ 310.768176][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 310.768190][ T32] ? __kthread_parkme+0x71/0x1f0 [ 310.768206][ T32] ? __kthread_parkme+0x199/0x1f0 [ 310.768223][ T32] kthread+0x38b/0x480 [ 310.768234][ T32] ? __pfx_kjournald2+0x10/0x10 [ 310.768246][ T32] ? __pfx_kthread+0x10/0x10 [ 310.768257][ T32] ret_from_fork+0x514/0xb70 [ 310.768269][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 310.768279][ T32] ? __switch_to+0xc89/0x1420 [ 310.768297][ T32] ? __pfx_kthread+0x10/0x10 [ 310.768309][ T32] ret_from_fork_asm+0x1a/0x30 [ 310.768332][ T32] [ 310.768344][ T32] INFO: task syz-executor:5602 blocked in I/O wait for more than 143 seconds. [ 310.768354][ T32] Tainted: G L syzkaller #0 [ 310.768359][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.768364][ T32] task:syz-executor state:D stack:22568 pid:5602 tgid:5602 ppid:5601 task_flags:0x440100 flags:0x00080000 [ 310.768393][ T32] Call Trace: [ 310.768397][ T32] [ 310.768403][ T32] __schedule+0x17dd/0x5940 [ 310.768423][ T32] ? lock_acquire+0x115/0x350 [ 310.768440][ T32] ? __pfx___schedule+0x10/0x10 [ 310.768459][ T32] ? schedule+0x90/0x2b0 [ 310.768473][ T32] schedule+0x164/0x2b0 [ 310.768487][ T32] io_schedule+0x7f/0xd0 [ 310.768500][ T32] bit_wait_io+0x13/0x110 [ 310.768515][ T32] __wait_on_bit+0xac/0x300 [ 310.768528][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.768543][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 310.768569][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.768582][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 310.768598][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 310.768616][ T32] do_get_write_access+0x658/0x10c0 [ 310.768659][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 310.768678][ T32] __ext4_journal_get_write_access+0xec/0x620 [ 310.768699][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 310.768715][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 310.768731][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 310.768751][ T32] ext4_reserve_inode_write+0x294/0x360 [ 310.768767][ T32] __ext4_mark_inode_dirty+0x141/0x7b0 [ 310.768790][ T32] ext4_dirty_inode+0xd0/0x110 [ 310.768801][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 310.768811][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 310.768827][ T32] file_update_time_flags+0x399/0x440 [ 310.768842][ T32] ext4_page_mkwrite+0x21f/0x12c0 [ 310.768854][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 310.768873][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 310.768883][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.768898][ T32] do_page_mkwrite+0x147/0x310 [ 310.768912][ T32] do_wp_page+0x1a97/0x4b70 [ 310.768936][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 310.768948][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.768963][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.768983][ T32] handle_mm_fault+0x15d7/0x3750 [ 310.769003][ T32] ? handle_mm_fault+0xf1/0x3750 [ 310.769022][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 310.769035][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 310.769051][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 310.769077][ T32] do_user_addr_fault+0xb35/0x1480 [ 310.769095][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 310.769108][ T32] exc_page_fault+0x6a/0xc0 [ 310.769123][ T32] asm_exc_page_fault+0x26/0x30 [ 310.769135][ T32] RIP: 0033:0x7f177427c6e2 [ 310.769145][ T32] RSP: 002b:00007ffe20cb82d0 EFLAGS: 00010202 [ 310.769155][ T32] RAX: 00007f17722a4000 RBX: 00005555907f7e80 RCX: 0000000000000001 [ 310.769163][ T32] RDX: 0000000000002063 RSI: 00005555907f8c08 RDI: 0000000000000002 [ 310.769170][ T32] RBP: 00007ffe20cb87d0 R08: 00005555907f8d18 R09: 00000000000000a3 [ 310.769178][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe20cb8610 [ 310.769185][ T32] R13: 00007ffe20cb8400 R14: 585858582e7a7973 R15: 00007ffe20cb8350 [ 310.769202][ T32] [ 310.769227][ T32] INFO: task syz.1.795:7918 blocked in I/O wait for more than 143 seconds. [ 310.769236][ T32] Tainted: G L syzkaller #0 [ 310.769242][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.769246][ T32] task:syz.1.795 state:D stack:26952 pid:7918 tgid:7918 ppid:5623 task_flags:0x440040 flags:0x00080002 [ 310.769278][ T32] Call Trace: [ 310.769283][ T32] [ 310.769290][ T32] __schedule+0x17dd/0x5940 [ 310.769310][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.769327][ T32] ? __pfx___schedule+0x10/0x10 [ 310.769345][ T32] ? schedule+0x90/0x2b0 [ 310.769360][ T32] schedule+0x164/0x2b0 [ 310.769373][ T32] io_schedule+0x7f/0xd0 [ 310.769387][ T32] bit_wait_io+0x13/0x110 [ 310.769402][ T32] __wait_on_bit+0xac/0x300 [ 310.769415][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.769431][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 310.769445][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.769459][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 310.769474][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 310.769492][ T32] do_get_write_access+0x658/0x10c0 [ 310.769518][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 310.769536][ T32] __ext4_journal_get_write_access+0xec/0x620 [ 310.769555][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 310.769577][ T32] ext4_reserve_inode_write+0x294/0x360 [ 310.769592][ T32] __ext4_mark_inode_dirty+0x141/0x7b0 [ 310.769611][ T32] ext4_dirty_inode+0xd0/0x110 [ 310.769621][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 310.769631][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 310.769642][ T32] ? mnt_get_write_access+0x216/0x280 [ 310.769655][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 310.769670][ T32] touch_atime+0x568/0x670 [ 310.769680][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 310.769698][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 310.769715][ T32] mmap_region+0xe7e/0x2270 [ 310.769730][ T32] ? __page_table_check_zero+0x6c/0x430 [ 310.769749][ T32] ? __pfx_mmap_region+0x10/0x10 [ 310.769762][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.769786][ T32] ? lock_acquire+0x115/0x350 [ 310.769800][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.769842][ T32] ? mt_find+0x186/0x630 [ 310.769860][ T32] ? mt_find+0x5ff/0x630 [ 310.769875][ T32] ? mt_find+0x186/0x630 [ 310.769890][ T32] ? __pfx_mt_find+0x10/0x10 [ 310.769908][ T32] ? bpf_lsm_mmap_addr+0x9/0x50 [ 310.769922][ T32] ? security_mmap_addr+0x71/0x240 [ 310.769936][ T32] ? shmem_mapping+0xd/0x50 [ 310.769946][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 310.769962][ T32] do_mmap+0xe0a/0x1300 [ 310.769982][ T32] ? __pfx_do_mmap+0x10/0x10 [ 310.770001][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 310.770012][ T32] ? down_write_killable+0x179/0x230 [ 310.770030][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 310.770045][ T32] ? apparmor_mmap_file+0x2e7/0x390 [ 310.770060][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 310.770073][ T32] ? lock_acquire+0x115/0x350 [ 310.770086][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 310.770099][ T32] ? __fget_files+0x2a/0x420 [ 310.770116][ T32] ? __fget_files+0x3a2/0x420 [ 310.770130][ T32] ? __fget_files+0x2a/0x420 [ 310.770146][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 310.770164][ T32] do_syscall_64+0x166/0x520 [ 310.770178][ T32] ? trace_irq_disable+0x3b/0x140 [ 310.770189][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.770200][ T32] ? clear_bhb_loop+0x70/0xc0 [ 310.770214][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.770224][ T32] RIP: 0033:0x7ff8eed9dec2 [ 310.770234][ T32] RSP: 002b:00007fff4e1cc548 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 310.770244][ T32] RAX: ffffffffffffffda RBX: 0000001b33464000 RCX: 00007ff8eed9dec2 [ 310.770252][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33464000 [ 310.770259][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 310.770266][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000008f [ 310.770273][ T32] R13: 00000000000927c0 R14: 00000000000261ab R15: 00007fff4e1cc820 [ 310.770291][ T32] [ 310.770296][ T32] INFO: task syz.2.793:7919 blocked in I/O wait for more than 143 seconds. [ 310.770305][ T32] Tainted: G L syzkaller #0 [ 310.770311][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.770315][ T32] task:syz.2.793 state:D stack:24648 pid:7919 tgid:7919 ppid:5616 task_flags:0x440040 flags:0x00080002 [ 310.770345][ T32] Call Trace: [ 310.770348][ T32] [ 310.770354][ T32] __schedule+0x17dd/0x5940 [ 310.770375][ T32] ? lock_acquire+0x115/0x350 [ 310.770391][ T32] ? __pfx___schedule+0x10/0x10 [ 310.770410][ T32] ? schedule+0x90/0x2b0 [ 310.770424][ T32] schedule+0x164/0x2b0 [ 310.770438][ T32] io_schedule+0x7f/0xd0 [ 310.770452][ T32] bit_wait_io+0x13/0x110 [ 310.770466][ T32] __wait_on_bit+0xac/0x300 [ 310.770480][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.770495][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 310.770509][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.770523][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 310.770538][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 310.770556][ T32] do_get_write_access+0x658/0x10c0 [ 310.770581][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 310.770599][ T32] __ext4_journal_get_write_access+0xec/0x620 [ 310.770619][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 310.770635][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 310.770650][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 310.770669][ T32] ext4_reserve_inode_write+0x294/0x360 [ 310.770684][ T32] __ext4_mark_inode_dirty+0x141/0x7b0 [ 310.770703][ T32] ext4_dirty_inode+0xd0/0x110 [ 310.770714][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 310.770723][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 310.770739][ T32] file_update_time_flags+0x399/0x440 [ 310.770753][ T32] ext4_page_mkwrite+0x21f/0x12c0 [ 310.770768][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 310.770790][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 310.770806][ T32] do_page_mkwrite+0x147/0x310 [ 310.770820][ T32] do_pte_missing+0x757/0x34b0 [ 310.770836][ T32] ? handle_mm_fault+0xf1/0x3750 [ 310.770853][ T32] handle_mm_fault+0x1a53/0x3750 [ 310.770872][ T32] ? handle_mm_fault+0xf1/0x3750 [ 310.770892][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 310.770905][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 310.770920][ T32] ? __pfx_do_futex+0x10/0x10 [ 310.770944][ T32] do_user_addr_fault+0xb35/0x1480 [ 310.770961][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 310.770974][ T32] exc_page_fault+0x6a/0xc0 [ 310.770988][ T32] asm_exc_page_fault+0x26/0x30 [ 310.770998][ T32] RIP: 0033:0x7ff0c5272f32 [ 310.771007][ T32] RSP: 002b:00007fff2f8580d0 EFLAGS: 00010202 [ 310.771016][ T32] RAX: 0000000000005008 RBX: 00007ff0c6155720 RCX: 0000000000000000 [ 310.771023][ T32] RDX: 0000001b33b1f000 RSI: 0000000000000008 RDI: 00007ff0c6155720 [ 310.771030][ T32] RBP: 0000000000000228 R08: 00007ff0c5610000 R09: 00007ff0c5626038 [ 310.771037][ T32] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff82527081 [ 310.771044][ T32] R13: 00007ff0c5626038 R14: 0000000000000128 R15: ffffffffffffb000 [ 310.771053][ T32] ? dentry_free+0xb1/0x2e0 [ 310.771075][ T32] [ 310.771079][ T32] INFO: task syz.3.796:7921 blocked in I/O wait for more than 143 seconds. [ 310.771088][ T32] Tainted: G L syzkaller #0 [ 310.771094][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.771098][ T32] task:syz.3.796 state:D stack:27224 pid:7921 tgid:7921 ppid:5627 task_flags:0x440040 flags:0x00080002 [ 310.771129][ T32] Call Trace: [ 310.771133][ T32] [ 310.771139][ T32] __schedule+0x17dd/0x5940 [ 310.771166][ T32] ? __pfx___schedule+0x10/0x10 [ 310.771184][ T32] ? schedule+0x90/0x2b0 [ 310.771198][ T32] schedule+0x164/0x2b0 [ 310.771212][ T32] io_schedule+0x7f/0xd0 [ 310.771226][ T32] bit_wait_io+0x13/0x110 [ 310.771240][ T32] __wait_on_bit+0xac/0x300 [ 310.771254][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.771269][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 310.771286][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 310.771299][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 310.771314][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 310.771333][ T32] do_get_write_access+0x658/0x10c0 [ 310.771358][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 310.771382][ T32] __ext4_journal_get_write_access+0xec/0x620 [ 310.771402][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 310.771423][ T32] ext4_reserve_inode_write+0x294/0x360 [ 310.771439][ T32] __ext4_mark_inode_dirty+0x141/0x7b0 [ 310.771457][ T32] ext4_dirty_inode+0xd0/0x110 [ 310.771468][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 310.771478][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 310.771489][ T32] ? mnt_get_write_access+0x216/0x280 [ 310.771501][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 310.771516][ T32] touch_atime+0x568/0x670 [ 310.771526][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 310.771543][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 310.771560][ T32] mmap_region+0xe7e/0x2270 [ 310.771581][ T32] ? __pfx_mmap_region+0x10/0x10 [ 310.771594][ T32] ? __lock_acquire+0x747/0x2de0 [ 310.771611][ T32] ? __perf_event_task_sched_in+0x189b/0x1a90 [ 310.771626][ T32] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 310.771642][ T32] ? perf_cgroup_switch+0xe6/0x920 [ 310.771693][ T32] ? mt_find+0x186/0x630 [ 310.771710][ T32] ? mt_find+0x5ff/0x630 [ 310.771725][ T32] ? mt_find+0x186/0x630 [ 310.771740][ T32] ? __pfx_mt_find+0x10/0x10 [ 310.771758][ T32] ? bpf_lsm_mmap_addr+0x9/0x50 [ 310.771772][ T32] ? security_mmap_addr+0x71/0x240 [ 310.771789][ T32] ? shmem_mapping+0xd/0x50 [ 310.771799][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 310.771814][ T32] do_mmap+0xe0a/0x1300 [ 310.771832][ T32] ? __pfx_do_mmap+0x10/0x10 [ 310.771852][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 310.771863][ T32] ? down_write_killable+0x179/0x230 [ 310.771879][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 310.771895][ T32] ? apparmor_mmap_file+0x2e7/0x390 [ 310.771909][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 310.771922][ T32] ? lock_acquire+0x115/0x350 [ 310.771934][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 310.771948][ T32] ? __fget_files+0x2a/0x420 [ 310.771964][ T32] ? __fget_files+0x3a2/0x420 [ 310.771978][ T32] ? __fget_files+0x2a/0x420 [ 310.771995][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 310.772012][ T32] do_syscall_64+0x166/0x520 [ 310.772025][ T32] ? trace_irq_disable+0x3b/0x140 [ 310.772035][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.772046][ T32] ? clear_bhb_loop+0x70/0xc0 [ 310.772059][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.772069][ T32] RIP: 0033:0x7fce3019dec2 [ 310.772078][ T32] RSP: 002b:00007fff13ffca08 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 310.772088][ T32] RAX: ffffffffffffffda RBX: 0000001b33664000 RCX: 00007fce3019dec2 [ 310.772096][ T32] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b33664000 [ 310.772103][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 310.772109][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000af [ 310.772116][ T32] R13: 00000000000927c0 R14: 0000000000026217 R15: 00007fff13ffcce0 [ 310.772137][ T32] [ 310.772160][ T32] [ 310.772160][ T32] Showing all locks held in the system: [ 310.772168][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 310.772176][ T32] #0: ffffffff8ed5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 310.772210][ T32] locks held by kworker/u8:6/154: 4, on CPU#1: [ 310.772217][ T32] #0: ffff888020ae7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 310.772246][ T32] #1: ffffc90002ec7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 310.772279][ T32] #2: ffff88803514a0e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 310.772314][ T32] #3: ffff888035148c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 310.772359][ T32] locks held by getty/5372: 2, on CPU#0: [ 310.772366][ T32] #0: ffff88801c3e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 310.772392][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 310.772420][ T32] locks held by syz-executor/5602: 3, on CPU#0: [ 310.772428][ T32] #0: ffff888032aa8e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 310.772457][ T32] #1: ffff88803514a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 310.772481][ T32] #2: ffff888035156938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 310.772510][ T32] locks held by syz-executor/5612: 1, on CPU#1: [ 310.772518][ T32] #0: ffff88807651cd98 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa55/0x13b0 [ 310.772556][ T32] locks held by syz.0.788/7887: 1, on CPU#0: [ 310.772563][ T32] #0: ffff88807651cd98 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa55/0x13b0 [ 310.772594][ T32] locks held by syz.1.795/7918: 3, on CPU#0: [ 310.772601][ T32] #0: ffff88807f4469b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 310.772627][ T32] #1: ffff88803514a460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 310.772658][ T32] #2: ffff888035156938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 310.772686][ T32] locks held by syz.2.793/7919: 3, on CPU#1: [ 310.772693][ T32] #0: ffff88807d4f6d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 310.772722][ T32] #1: ffff88803514a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 310.772746][ T32] #2: ffff888035156938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 310.772775][ T32] locks held by syz.3.796/7921: 3, on CPU#1: [ 310.772787][ T32] #0: ffff888076997678 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 310.772813][ T32] #1: ffff88803514a460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 310.772843][ T32] #2: ffff888035156938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 310.772871][ T32] [ 310.772874][ T32] ============================================= [ 310.772874][ T32] [ 310.772884][ T32] NMI backtrace for cpu 1 [ 310.772897][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.772911][ T32] Tainted: [L]=SOFTLOCKUP [ 310.772914][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.772921][ T32] Call Trace: [ 310.772925][ T32] [ 310.772929][ T32] dump_stack_lvl+0xe8/0x150 [ 310.772945][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 310.772957][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.772975][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 310.772988][ T32] sys_info+0x135/0x170 [ 310.772998][ T32] watchdog+0x1058/0x10d0 [ 310.773012][ T32] ? watchdog+0x209/0x10d0 [ 310.773025][ T32] kthread+0x38b/0x480 [ 310.773035][ T32] ? __pfx_watchdog+0x10/0x10 [ 310.773044][ T32] ? __pfx_kthread+0x10/0x10 [ 310.773054][ T32] ret_from_fork+0x514/0xb70 [ 310.773066][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 310.773075][ T32] ? __switch_to+0xc89/0x1420 [ 310.773091][ T32] ? __pfx_kthread+0x10/0x10 [ 310.773102][ T32] ret_from_fork_asm+0x1a/0x30 [ 310.773124][ T32] [ 310.773128][ T32] Sending NMI from CPU 1 to CPUs 0: [ 310.773179][ C0] NMI backtrace for cpu 0 [ 310.773195][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.773219][ C0] Tainted: [L]=SOFTLOCKUP [ 310.773226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.773236][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 310.773261][ C0] Code: ac 8d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 51 22 00 fb f4 8c 10 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 310.773277][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000242 [ 310.773298][ C0] RAX: 00000000001539cd RBX: ffffffff819bae40 RCX: 8000000000000001 [ 310.773312][ C0] RDX: 0000000000000001 RSI: ffffffff8e4797e2 RDI: ffffffff8c6da580 [ 310.773325][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 310.773339][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 310.773352][ C0] R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 310.773366][ C0] FS: 0000000000000000(0000) GS:ffff888124cc0000(0000) knlGS:0000000000000000 [ 310.773381][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.773394][ C0] CR2: 000055d06b01f168 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 310.773411][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.773422][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 310.773434][ C0] Call Trace: [ 310.773440][ C0] [ 310.773447][ C0] default_idle+0x9/0x20 [ 310.773471][ C0] default_idle_call+0x72/0xb0 [ 310.773496][ C0] do_idle+0x2e0/0x540 [ 310.773523][ C0] ? __pfx_do_idle+0x10/0x10 [ 310.773552][ C0] cpu_startup_entry+0x43/0x60 [ 310.773577][ C0] rest_init+0x378/0x3a0 [ 310.773594][ C0] ? __pfx_rest_init+0x10/0x10 [ 310.773614][ C0] ? __pfx_kernel_init+0x10/0x10 [ 310.773632][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 310.773650][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 310.773672][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 310.773694][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 310.773717][ C0] start_kernel+0x392/0x3e0 [ 310.773738][ C0] x86_64_start_reservations+0x24/0x30 [ 310.773762][ C0] x86_64_start_kernel+0x137/0x1b0 [ 310.773786][ C0] common_startup_64+0x13e/0x157 [ 310.773833][ C0] [ 310.774156][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 313.488462][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 313.499132][ T32] Tainted: [L]=SOFTLOCKUP [ 313.503442][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.513482][ T32] Call Trace: [ 313.516749][ T32] [ 313.519693][ T32] vpanic+0x56d/0xa70 [ 313.523676][ T32] ? __pfx_vpanic+0x10/0x10 [ 313.528175][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 313.533715][ T32] panic+0xc5/0xd0 [ 313.537431][ T32] ? __pfx_panic+0x10/0x10 [ 313.541843][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 313.546858][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 313.553006][ T32] watchdog+0x10cc/0x10d0 [ 313.557335][ T32] ? watchdog+0x209/0x10d0 [ 313.561750][ T32] kthread+0x38b/0x480 [ 313.565811][ T32] ? __pfx_watchdog+0x10/0x10 [ 313.570488][ T32] ? __pfx_kthread+0x10/0x10 [ 313.575073][ T32] ret_from_fork+0x514/0xb70 [ 313.579653][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 313.584753][ T32] ? __switch_to+0xc89/0x1420 [ 313.589438][ T32] ? __pfx_kthread+0x10/0x10 [ 313.594025][ T32] ret_from_fork_asm+0x1a/0x30 [ 313.598798][ T32] [ 313.602104][ T32] Kernel Offset: disabled [ 313.606424][ T32] Rebooting in 86400 seconds..