last executing test programs: 41.962913585s ago: executing program 1 (id=266): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000040)=0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) shutdown(r0, 0x2) 41.793876102s ago: executing program 1 (id=271): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r2, 0x0, r3}) 41.72418747s ago: executing program 1 (id=275): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\xf4\xcf\x88\xd6\x85\xae\x1f\xfc;\xb8m\xb8\xe9Q\x9eG\xd9\xcav\xe3\xa4\x83\xc4&\xe0\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\r\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\x92\x9a\x86\xa1\xb0\x0e\xe0X\xb2\xad\x9b\xf3\a\x11\xa9\xa5^\xff\xf5\x95\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01', 0x6) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$usbmon(&(0x7f0000e81000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x7f) fcntl$setstatus(r0, 0x4, 0x7c00) 41.487738504s ago: executing program 1 (id=279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 41.073974345s ago: executing program 1 (id=286): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 40.565689486s ago: executing program 1 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24", 0x2a}], 0x1}, 0x30008b08) 40.283969604s ago: executing program 32 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24", 0x2a}], 0x1}, 0x30008b08) 18.633154009s ago: executing program 4 (id=475): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 18.454707177s ago: executing program 4 (id=470): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x2) 17.72464447s ago: executing program 4 (id=480): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.470413126s ago: executing program 4 (id=484): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@utf8}, {}, {@fmask={'fmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@gid}, {@discard}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_continue}, {@utf8}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) 17.213304222s ago: executing program 4 (id=488): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 16.780674975s ago: executing program 4 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0x20000508) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}]) 16.486212595s ago: executing program 33 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000001c0)='./file1\x00', 0x20000508) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}]) 4.548451744s ago: executing program 2 (id=574): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.365546033s ago: executing program 5 (id=593): unshare(0x22020600) r0 = fsopen(&(0x7f0000006180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2040400) fsmount(r0, 0x0, 0x80) 2.224541597s ago: executing program 0 (id=586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d", 0x4e}, {&(0x7f0000000000)="080d4100000000000062e77cd7dcde85b3391f1de77b1e7db5e840065c4b1483a2c052544b1a7100c3663dfbae115b5f3e2d83875e96cce6485a00756e0d6bf8a5a192d2347651e99c18dbd41a9e7181066e26e7fc32e29302f79b67d6aacd236d7be2b9a7d212d270def8d59c92c09872536cccf3b72edfe01be38dc5", 0x7d}, {&(0x7f0000002340)="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", 0xe63}], 0x4}, 0x40000) 2.09492172s ago: executing program 2 (id=588): syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r1 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r1, 0x9) syz_io_uring_complete(r0, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.940872536s ago: executing program 5 (id=590): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x500) write$ppp(r0, &(0x7f0000000040)='\nr', 0x2) 1.745289556s ago: executing program 0 (id=591): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc90, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd48557896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 1.591920461s ago: executing program 3 (id=594): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.527718677s ago: executing program 2 (id=595): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 1.526660587s ago: executing program 5 (id=603): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040)) 1.372715273s ago: executing program 0 (id=596): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.278838142s ago: executing program 5 (id=597): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x7, 0x4e3, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000a80)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000b00)=""/4095, 0xfff) 1.262737724s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0, 0x24b0}, {0xffffffffffffffff, 0x522}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x9) 1.163157874s ago: executing program 2 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) keyctl$restrict_keyring(0x1e, 0xfffffffffffffffd, 0x0, 0x0) 938.332377ms ago: executing program 3 (id=600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{}, "fbcca74f42b2b800", "491f304ba9972b4c42f80b2b3dec245a", "ebbaddc0", "919123b60bde99f2"}, 0x2) 568.958583ms ago: executing program 0 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) removexattr(&(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)=@random={'user.', 'devtmpfs\x00'}) 537.859797ms ago: executing program 5 (id=602): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 485.694642ms ago: executing program 0 (id=604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000480)) 424.012548ms ago: executing program 2 (id=605): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffe7}, {0xe, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 401.383211ms ago: executing program 3 (id=606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108) close(r0) 218.876579ms ago: executing program 0 (id=607): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440), 0x4) 204.53486ms ago: executing program 3 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='lz4', 0x3) 166.367754ms ago: executing program 2 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000240)='1', 0x1) 894.7µs ago: executing program 3 (id=610): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 5 (id=618): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@orlov}, {@dioread_nolock}]}, 0x1, 0xbe4, &(0x7f0000003c00)="$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") r0 = creat(&(0x7f0000001180)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000011c0)={0x17c04, 0xffffffffffffffff, 0xb776, 0x1df7, 0xa, 0xffffffffffffffb9}) lseek(r0, 0x3ff, 0x3) kernel console output (not intermixed with test programs): ulticast mode [ 67.984955][ T5781] bridge_slave_1: entered promiscuous mode [ 68.020125][ T5783] team0: Port device team_slave_0 added [ 68.038623][ T5782] team0: Port device team_slave_0 added [ 68.054725][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.067257][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.078556][ T5783] team0: Port device team_slave_1 added [ 68.095143][ T5782] team0: Port device team_slave_1 added [ 68.113311][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.120283][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.146331][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.197659][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.204919][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.230940][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.250649][ T5781] team0: Port device team_slave_0 added [ 68.263777][ T5781] team0: Port device team_slave_1 added [ 68.270166][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.277333][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.303581][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.316332][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.323471][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.337697][ T52] Bluetooth: hci1: command tx timeout [ 68.357335][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.413092][ T52] Bluetooth: hci3: command tx timeout [ 68.413229][ T5788] Bluetooth: hci0: command tx timeout [ 68.424564][ T5795] Bluetooth: hci2: command tx timeout [ 68.438705][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.446120][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.472135][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.503322][ T5783] hsr_slave_0: entered promiscuous mode [ 68.509695][ T5783] hsr_slave_1: entered promiscuous mode [ 68.520146][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.527425][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.555089][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.566442][ T5446] infiniband rxe0: set active [ 68.597056][ T5782] hsr_slave_0: entered promiscuous mode [ 68.603808][ T5782] hsr_slave_1: entered promiscuous mode [ 68.611082][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.620555][ T5782] Cannot create hsr debugfs directory [ 68.647791][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.766198][ T5781] hsr_slave_0: entered promiscuous mode [ 68.774622][ T5781] hsr_slave_1: entered promiscuous mode [ 68.780856][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.788678][ T5781] Cannot create hsr debugfs directory [ 68.952242][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 69.120431][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.150610][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.177808][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.185377][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.193064][ T5780] bridge_slave_0: entered allmulticast mode [ 69.199796][ T5780] bridge_slave_0: entered promiscuous mode [ 69.206869][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.219308][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.236776][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.244708][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.251854][ T5780] bridge_slave_1: entered allmulticast mode [ 69.260512][ T5780] bridge_slave_1: entered promiscuous mode [ 69.300478][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.315128][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.327345][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.339169][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.366269][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.381809][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.402056][ T5780] team0: Port device team_slave_0 added [ 69.410857][ T5780] team0: Port device team_slave_1 added [ 69.464416][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.471394][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.499410][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.523238][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.530199][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.557320][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.601894][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.611846][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.640094][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.649337][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.666111][ T5780] hsr_slave_0: entered promiscuous mode [ 69.672452][ T5780] hsr_slave_1: entered promiscuous mode [ 69.679600][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.687725][ T5780] Cannot create hsr debugfs directory [ 69.862892][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.903378][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.954968][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.970177][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.977416][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.009174][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.016631][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.037748][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.051710][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.061824][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.073713][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.084902][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.099860][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.106972][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.138638][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.145754][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.172010][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.274998][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.306415][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.320553][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.327771][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.361507][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.368718][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.399143][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.421609][ T5788] Bluetooth: hci1: command tx timeout [ 70.459940][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.467120][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.504332][ T5788] Bluetooth: hci3: command tx timeout [ 70.508823][ T5795] Bluetooth: hci0: command tx timeout [ 70.509821][ T5788] Bluetooth: hci2: command tx timeout [ 70.525857][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.533035][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.640464][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.655844][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.754420][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.879223][ T5782] veth0_vlan: entered promiscuous mode [ 70.902024][ T5782] veth1_vlan: entered promiscuous mode [ 70.934461][ T5783] veth0_vlan: entered promiscuous mode [ 70.980209][ T5783] veth1_vlan: entered promiscuous mode [ 71.029979][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.067837][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.076304][ T5782] veth0_macvtap: entered promiscuous mode [ 71.091706][ T5782] veth1_macvtap: entered promiscuous mode [ 71.127214][ T5783] veth0_macvtap: entered promiscuous mode [ 71.145211][ T5783] veth1_macvtap: entered promiscuous mode [ 71.162492][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.182073][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.193960][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.206789][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.221873][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.237054][ T5781] veth0_vlan: entered promiscuous mode [ 71.245238][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.256655][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.270021][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.287245][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.297349][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.307769][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.316766][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.336194][ T5781] veth1_vlan: entered promiscuous mode [ 71.349295][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.359301][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.368058][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378201][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.466815][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.475957][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.481113][ T5780] veth0_vlan: entered promiscuous mode [ 71.499185][ T5780] veth1_vlan: entered promiscuous mode [ 71.537838][ T5781] veth0_macvtap: entered promiscuous mode [ 71.572093][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.577271][ T5781] veth1_macvtap: entered promiscuous mode [ 71.586360][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.638149][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.639329][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.657533][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.657610][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676762][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.687924][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.700039][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.741588][ T5780] veth0_macvtap: entered promiscuous mode [ 71.759816][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.760125][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.775359][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.789117][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.789412][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.800277][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.818517][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.839932][ T5780] veth1_macvtap: entered promiscuous mode [ 71.851306][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861608][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871594][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880483][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.912035][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.925182][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.937408][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.951513][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.962710][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.973278][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.983127][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.994436][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.006147][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.022212][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.056212][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.067229][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.077889][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.088814][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.099422][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.110028][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.121394][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.152432][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.171071][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.180965][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.189882][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334526][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.360096][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.391724][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.407814][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.440252][ T5879] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.482199][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.493893][ T5788] Bluetooth: hci1: command tx timeout [ 72.519720][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.543576][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.562165][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.572895][ T5788] Bluetooth: hci2: command tx timeout [ 72.575782][ T52] Bluetooth: hci0: command tx timeout [ 72.578284][ T5788] Bluetooth: hci3: command tx timeout [ 72.630463][ T5883] hsr0: entered promiscuous mode [ 72.637546][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 72.647841][ T5883] hsr_slave_0: left promiscuous mode [ 72.655813][ T5883] hsr_slave_1: left promiscuous mode [ 72.690931][ T5883] hsr0 (unregistering): left promiscuous mode [ 72.800201][ T5885] syz.1.2[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.030517][ T5889] loop3: detected capacity change from 0 to 2048 [ 73.037473][ T5891] loop2: detected capacity change from 0 to 128 [ 73.065426][ T5891] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.128042][ T5889] NILFS (loop3): invalid segment: Magic number mismatch [ 73.169434][ T5889] NILFS (loop3): trying rollback from an earlier position [ 73.265836][ T5889] NILFS (loop3): recovery complete [ 73.336372][ T27] audit: type=1800 audit(1792744300.436:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 73.369254][ T5892] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.746841][ T5885] loop1: detected capacity change from 0 to 131072 [ 73.777327][ T5885] F2FS-fs (loop1): invalid crc value [ 73.816474][ T5885] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.868708][ T5885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.321106][ T5895] loop2: detected capacity change from 0 to 32768 [ 74.343049][ T5895] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9 (5895) [ 74.374176][ T5895] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.388209][ T5895] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 74.397486][ T5895] BTRFS info (device loop2): force clearing of disk cache [ 74.405266][ T5895] BTRFS info (device loop2): use zlib compression, level 3 [ 74.414144][ T5895] BTRFS info (device loop2): enabling ssd optimizations [ 74.421120][ T5895] BTRFS info (device loop2): using spread ssd allocation scheme [ 74.429480][ T5895] BTRFS info (device loop2): using free space tree [ 74.443380][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.542734][ T5895] BTRFS info (device loop2): auto enabling async discard [ 74.570936][ T5895] BTRFS info (device loop2): rebuilding free space tree [ 74.580565][ T52] Bluetooth: hci1: command tx timeout [ 74.652698][ T52] Bluetooth: hci3: command tx timeout [ 74.653811][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 74.658437][ T5795] Bluetooth: hci2: command tx timeout [ 74.663504][ T5788] Bluetooth: hci0: command tx timeout [ 74.705679][ T5895] BTRFS info (device loop2): checking UUID tree [ 74.722356][ T5875] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 74.751876][ T5875] usb 4-1: config 0 has no interface number 0 [ 74.784497][ T5875] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 74.807902][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.841217][ T5875] usb 4-1: Product: syz [ 74.856478][ T5875] usb 4-1: Manufacturer: syz [ 74.871632][ T5875] usb 4-1: SerialNumber: syz [ 74.905596][ T5875] usb 4-1: config 0 descriptor?? [ 74.955760][ T5875] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 75.234395][ T5875] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 75.247658][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.282028][ T5875] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 75.309569][ T5782] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.518298][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.543574][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.808655][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 75.810229][ T9] usb 4-1: USB disconnect, device number 2 [ 75.834450][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 75.854950][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 75.874050][ T9] quatech2 4-1:0.51: device disconnected [ 76.350779][ T5950] loop0: detected capacity change from 0 to 1024 [ 76.400129][ T5950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.591356][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.748458][ T5962] pim6reg: entered allmulticast mode [ 76.765062][ T5962] pim6reg: left allmulticast mode [ 77.268292][ T5982] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 77.772683][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.774466][ T5933] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 78.217692][ T5933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.228193][ T5933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.237440][ T5933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.244100][ T5933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.250766][ T5933] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.259110][ T5933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.265224][ T5933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.272944][ T5933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.279626][ T5933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.286737][ T5933] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.295970][ T5933] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.716861][ T6007] loop0: detected capacity change from 0 to 256 [ 78.728872][ T6007] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.771564][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 78.782887][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 78.985011][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.074332][ T6021] Zero length message leads to an empty skb [ 79.458163][ T6029] loop3: detected capacity change from 0 to 32768 [ 79.466216][ T6029] ======================================================= [ 79.466216][ T6029] WARNING: The mand mount option has been deprecated and [ 79.466216][ T6029] and is ignored by this kernel. Remove the mand [ 79.466216][ T6029] option from the mount to silence this warning. [ 79.466216][ T6029] ======================================================= [ 79.588694][ T27] audit: type=1326 audit(1792744306.704:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.0.50" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f919f99f559 code=0x0 [ 79.613089][ T6029] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.708529][ T6029] XFS (loop3): Ending clean mount [ 79.730305][ T6029] XFS (loop3): Quotacheck needed: Please wait. [ 79.819401][ T6029] XFS (loop3): Quotacheck: Done. [ 79.852784][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.854034][ T27] audit: type=1800 audit(1792744306.964:4): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.47" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 79.966997][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.107964][ T6063] loop2: detected capacity change from 0 to 512 [ 80.201005][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.239553][ T6063] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.252873][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.333698][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.333709][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.563471][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.594677][ T6085] jffs2: notice: (6085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.834161][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.880549][ T6100] capability: warning: `syz.2.64' uses 32-bit capabilities (legacy support in use) [ 80.885686][ T6099] loop0: detected capacity change from 0 to 64 [ 81.036883][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 81.055909][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 81.070581][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.081036][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.106281][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.117894][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.134568][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.156712][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.382264][ T9] usb 4-1: usb_control_msg returned -32 [ 81.395139][ T9] usbtmc 4-1:16.0: can't read capabilities [ 81.420444][ T6118] loop1: detected capacity change from 0 to 512 [ 81.447383][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 81.464713][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 81.482817][ T6118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.519475][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.546937][ T6118] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.576801][ T27] audit: type=1800 audit(1792744308.684:5): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 81.624575][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.649803][ T6125] loop0: detected capacity change from 0 to 1024 [ 81.682008][ T6125] EXT4-fs: Ignoring removed orlov option [ 81.763632][ T6125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.933876][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.945819][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.333534][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.380695][ T6148] loop1: detected capacity change from 0 to 64 [ 82.412616][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.412804][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.671378][ T6156] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 83.044839][ T5784] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.130145][ T6166] Bluetooth: MGMT ver 1.22 [ 83.132651][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.263501][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 83.269931][ T5784] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 83.278285][ T5784] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.288142][ T5784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.300299][ T5784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.311751][ T5784] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.325013][ T5784] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.334140][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 83.339318][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.361873][ T5855] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 83.370204][ T5855] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 83.381661][ T5855] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 83.397917][ T5855] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 83.411210][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.421693][ T5855] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 83.430853][ T5855] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 83.440099][ T5855] usb 2-1: Product: syz [ 83.444370][ T5855] usb 2-1: Manufacturer: syz [ 83.448992][ T5855] usb 2-1: SerialNumber: syz [ 83.456578][ T5855] usb 2-1: config 0 descriptor?? [ 83.468004][ T5855] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 83.480082][ T5855] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 83.582887][ T174] usb 4-1: USB disconnect, device number 3 [ 83.675335][ T9] usb 2-1: USB disconnect, device number 2 [ 83.686735][ T9] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 83.697966][ T6177] sctp: [Deprecated]: syz.3.95 (pid 6177) Use of int in max_burst socket option. [ 83.697966][ T6177] Use struct sctp_assoc_value instead [ 84.203517][ T6184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 84.268436][ T6186] loop0: detected capacity change from 0 to 2048 [ 84.304640][ T6186] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 84.336752][ T6186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.422602][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.492633][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.503687][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.615350][ T6194] Illegal XDP return value 120 on prog (id 7) dev syz_tun, expect packet loss! [ 85.047467][ T6202] loop3: detected capacity change from 0 to 2048 [ 85.105602][ T6202] loop3: p2 p3 < > p4 < p5 > [ 85.111694][ T6202] loop3: partition table partially beyond EOD, truncated [ 85.131126][ T6202] loop3: p2 start 53543428 is beyond EOD, truncated [ 85.142804][ T6202] loop3: p3 start 4284289 is beyond EOD, truncated [ 85.173092][ T6202] loop3: p5 start 53543428 is beyond EOD, truncated [ 85.240056][ T6199] loop0: detected capacity change from 0 to 32768 [ 85.277520][ T6199] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 85.350230][ T6199] XFS (loop0): Ending clean mount [ 85.418360][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 85.428964][ T27] audit: type=1800 audit(1792744312.544:6): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.104" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 85.525292][ T5783] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 85.797191][ T9] usb 3-1: USB disconnect, device number 2 [ 85.906974][ T27] audit: type=1804 audit(1792744313.024:7): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.112" name="/newroot/41/debug/tracing/options/context-info" dev="tracefs" ino=78 res=1 errno=0 [ 85.962664][ T174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.994145][ T6233] loop2: detected capacity change from 0 to 256 [ 86.028172][ T6233] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 86.112257][ T6227] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input5 [ 86.113236][ T6237] process 'syz.0.119' launched './file0' with NULL argv: empty string added [ 86.131893][ T6237] Invalid argument reading file caps for ./file0 [ 86.164807][ T174] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.207033][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.273633][ T174] usb 2-1: config 0 descriptor?? [ 86.304162][ T174] cp210x 2-1:0.0: cp210x converter detected [ 86.542606][ T5855] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.717155][ T174] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 86.731293][ T174] usb 2-1: cp210x converter now attached to ttyUSB0 [ 86.737932][ T5855] usb 1-1: not running at top speed; connect to a high speed hub [ 86.740420][ T5855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.762487][ T5855] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 86.771832][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.802141][ T5855] usb 1-1: Found UVC 1.00 device (046d:0825) [ 86.811267][ T5855] usb 1-1: No streaming interface found for terminal 2. [ 86.832176][ T3071] cfg80211: failed to load regulatory.db [ 86.930885][ T5855] usb 2-1: USB disconnect, device number 3 [ 86.965998][ T5855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 86.975972][ T5855] cp210x 2-1:0.0: device disconnected [ 86.998722][ T5875] usb 1-1: USB disconnect, device number 2 [ 87.198619][ T6254] loop2: detected capacity change from 0 to 128 [ 87.231543][ T6254] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.319770][ T6256] loop2: detected capacity change from 0 to 16 [ 87.349379][ T6256] erofs: (device loop2): mounted with root inode @ nid 36. [ 87.533312][ T6252] loop3: detected capacity change from 0 to 40427 [ 87.597816][ T6252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.725502][ T6252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.857937][ T6265] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input6 [ 87.924561][ T5780] syz-executor: attempt to access beyond end of device [ 87.924561][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.965286][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 88.036425][ T27] audit: type=1326 audit(1792744315.154:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbf839f559 code=0x0 [ 88.415091][ T6285] loop3: detected capacity change from 0 to 64 [ 88.481837][ T6285] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 89.402879][ T6292] loop3: detected capacity change from 0 to 131072 [ 89.418011][ T6292] F2FS-fs (loop3): invalid crc value [ 89.441652][ T6292] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.491452][ T6292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 89.927554][ T27] audit: type=1326 audit(1792744317.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 89.954205][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.987718][ T27] audit: type=1326 audit(1792744317.044:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 90.015199][ T6317] tap0: tun_chr_ioctl cmd 1074025680 [ 90.043299][ T6317] tap0: tun_chr_ioctl cmd 2147767520 [ 90.052870][ T27] audit: type=1326 audit(1792744317.044:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 90.131300][ T27] audit: type=1326 audit(1792744317.044:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 90.155168][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.192116][ T27] audit: type=1326 audit(1792744317.054:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7207b5fd8e code=0x7ffc0000 [ 90.252577][ T27] audit: type=1326 audit(1792744317.054:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 90.314350][ T27] audit: type=1326 audit(1792744317.054:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6314 comm="syz.1.151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7207b9f559 code=0x7ffc0000 [ 90.321797][ T6322] loop1: detected capacity change from 0 to 1024 [ 90.338208][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.922027][ T6335] ip_tables: iptables: counters copy to user failed while replacing table [ 90.995497][ T6338] loop8: detected capacity change from 0 to 8 [ 91.024525][ T6341] FAULT_INJECTION: forcing a failure. [ 91.024525][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 91.025632][ T6338] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 91.049165][ T6338] loop8: partition table partially beyond EOD, truncated [ 91.060971][ T6338] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 91.062946][ T6341] CPU: 0 PID: 6341 Comm: syz.1.161 Not tainted syzkaller #0 [ 91.075414][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.085511][ T6341] Call Trace: [ 91.088810][ T6341] [ 91.091754][ T6341] dump_stack_lvl+0x18c/0x250 [ 91.096459][ T6341] ? show_regs_print_info+0x20/0x20 [ 91.101685][ T6341] ? load_image+0x420/0x420 [ 91.106210][ T6341] ? __might_sleep+0xe0/0xe0 [ 91.110825][ T6341] ? __lock_acquire+0x7eb0/0x7eb0 [ 91.115880][ T6341] should_fail_ex+0x394/0x4c0 [ 91.120588][ T6341] should_failslab+0x9/0x20 [ 91.125113][ T6341] slab_pre_alloc_hook+0x59/0x300 [ 91.130155][ T6341] ? ife_init_net+0x65/0x190 [ 91.134753][ T6341] __kmem_cache_alloc_node+0x53/0x260 [ 91.140216][ T6341] ? ife_init_net+0x65/0x190 [ 91.144802][ T6341] kmalloc_trace+0x2a/0xe0 [ 91.149223][ T6341] ife_init_net+0x65/0x190 [ 91.153635][ T6341] ops_init+0x391/0x640 [ 91.157792][ T6341] setup_net+0x3b6/0xa20 [ 91.162032][ T6341] ? copy_net_ns+0x530/0x530 [ 91.166636][ T6341] ? copy_net_ns+0x347/0x530 [ 91.171234][ T6341] ? down_read_killable+0x1d0/0x340 [ 91.176433][ T6341] copy_net_ns+0x361/0x530 [ 91.180863][ T6341] create_new_namespaces+0x3ce/0x700 [ 91.186161][ T6341] unshare_nsproxy_namespaces+0x11a/0x160 [ 91.191883][ T6341] ksys_unshare+0x4fa/0x8f0 [ 91.196391][ T6341] ? sighand_ctor+0x50/0x50 [ 91.200891][ T6341] ? lock_chain_count+0x20/0x20 [ 91.205743][ T6341] ? syscall_enter_from_user_mode+0x25/0x80 [ 91.211717][ T6341] __x64_sys_unshare+0x38/0x40 [ 91.216476][ T6341] do_syscall_64+0x55/0xb0 [ 91.220886][ T6341] ? clear_bhb_loop+0x40/0x90 [ 91.225562][ T6341] ? clear_bhb_loop+0x40/0x90 [ 91.230235][ T6341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.236138][ T6341] RIP: 0033:0x7f7207b9f559 [ 91.240559][ T6341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.260165][ T6341] RSP: 002b:00007f7208a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.268576][ T6341] RAX: ffffffffffffffda RBX: 00007f7207e25fa0 RCX: 00007f7207b9f559 [ 91.276543][ T6341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 91.284504][ T6341] RBP: 00007f7207c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.292485][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.300474][ T6341] R13: 00007f7207e26038 R14: 00007f7207e25fa0 R15: 00007ffee07259d8 [ 91.308464][ T6341] [ 91.374774][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 91.543478][ T6347] loop0: detected capacity change from 0 to 8192 [ 91.781942][ T6360] overlayfs: failed to verify origin (/syz2, ino=36, err=-116) [ 91.812642][ T6360] overlayfs: failed to verify upper root origin [ 91.998118][ T6368] FAULT_INJECTION: forcing a failure. [ 91.998118][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 92.022637][ T6368] CPU: 0 PID: 6368 Comm: syz.1.172 Not tainted syzkaller #0 [ 92.029992][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.040071][ T6368] Call Trace: [ 92.043377][ T6368] [ 92.046333][ T6368] dump_stack_lvl+0x18c/0x250 [ 92.051043][ T6368] ? show_regs_print_info+0x20/0x20 [ 92.054118][ T6372] loop2: detected capacity change from 0 to 164 [ 92.056253][ T6368] ? load_image+0x420/0x420 [ 92.067035][ T6368] ? __might_sleep+0xe0/0xe0 [ 92.071654][ T6368] ? __lock_acquire+0x7eb0/0x7eb0 [ 92.076684][ T6368] should_fail_ex+0x394/0x4c0 [ 92.081364][ T6368] should_failslab+0x9/0x20 [ 92.085878][ T6368] slab_pre_alloc_hook+0x59/0x300 [ 92.090933][ T6368] kmem_cache_alloc+0x5a/0x2d0 [ 92.095722][ T6368] ? dup_fd+0x56/0xa20 [ 92.099837][ T6368] dup_fd+0x56/0xa20 [ 92.103756][ T6368] ? __ia32_sys_get_robust_list+0x110/0x110 [ 92.109671][ T6368] __close_range+0x19d/0x690 [ 92.114277][ T6368] ? pick_file+0x1e0/0x1e0 [ 92.118703][ T6368] __x64_sys_close_range+0x7a/0x90 [ 92.123823][ T6368] do_syscall_64+0x55/0xb0 [ 92.128240][ T6368] ? clear_bhb_loop+0x40/0x90 [ 92.132916][ T6368] ? clear_bhb_loop+0x40/0x90 [ 92.137592][ T6368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.143515][ T6368] RIP: 0033:0x7f7207b9f559 [ 92.147926][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.167537][ T6368] RSP: 002b:00007f7208a81028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 92.175955][ T6368] RAX: ffffffffffffffda RBX: 00007f7207e25fa0 RCX: 00007f7207b9f559 [ 92.183929][ T6368] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 92.191899][ T6368] RBP: 00007f7207c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.199867][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.207837][ T6368] R13: 00007f7207e26038 R14: 00007f7207e25fa0 R15: 00007ffee07259d8 [ 92.215926][ T6368] [ 92.489326][ T6376] loop3: detected capacity change from 0 to 2048 [ 92.544628][ T6376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.775430][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.122861][ T5770] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 93.212845][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.334984][ T5770] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 93.356004][ T5770] usb 3-1: config 0 has no interface number 0 [ 93.379679][ T5770] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 93.403280][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 93.408263][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.424208][ T5770] usb 3-1: Product: syz [ 93.424416][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.428694][ T5770] usb 3-1: Manufacturer: syz [ 93.441941][ T5770] usb 3-1: SerialNumber: syz [ 93.445130][ T9] usb 1-1: config 0 has no interface number 0 [ 93.453060][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.464385][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.475576][ T5770] usb 3-1: config 0 descriptor?? [ 93.486965][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.507775][ T9] usb 1-1: config 0 descriptor?? [ 93.543809][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 94.121457][ T6454] loop3: detected capacity change from 0 to 512 [ 94.181987][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.203028][ T6454] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.318324][ T5770] asix 3-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 227 [ 94.385541][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.531965][ T8] usb 3-1: USB disconnect, device number 3 [ 94.596915][ T6469] loop3: detected capacity change from 0 to 2048 [ 94.646531][ T6469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.771837][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.837034][ T5875] usb 1-1: USB disconnect, device number 3 [ 95.288203][ T6494] loop3: detected capacity change from 0 to 4096 [ 95.327811][ T6494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.417026][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.637898][ T6488] loop1: detected capacity change from 0 to 40427 [ 95.675642][ T6488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.719846][ T6509] loop3: detected capacity change from 0 to 512 [ 95.745847][ T6509] EXT4-fs: Ignoring removed nobh option [ 95.758949][ T6509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.802859][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.836201][ T6509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.868214][ T6488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.916727][ T6509] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.920166][ T6488] syz.1.212: attempt to access beyond end of device [ 95.920166][ T6488] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 96.025467][ T5855] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 96.040733][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 96.049252][ T5855] usb 1-1: Product: syz [ 96.055965][ T5781] syz-executor: attempt to access beyond end of device [ 96.055965][ T5781] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 96.074361][ T5855] usb 1-1: config 0 descriptor?? [ 96.081229][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.094295][ T5855] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 96.107142][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.115914][ T5855] usb 1-1: Detected FT232H [ 96.222697][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 96.222711][ T27] audit: type=1326 audit(1792744323.334:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.270088][ T27] audit: type=1326 audit(1792744323.334:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.322693][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 96.330330][ T6522] loop3: detected capacity change from 0 to 512 [ 96.352716][ T27] audit: type=1326 audit(1792744323.344:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.442602][ T27] audit: type=1326 audit(1792744323.344:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.479414][ T27] audit: type=1326 audit(1792744323.344:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.546021][ T27] audit: type=1326 audit(1792744323.344:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.632795][ T27] audit: type=1326 audit(1792744323.344:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.723382][ T27] audit: type=1326 audit(1792744323.344:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.760586][ T5855] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.769871][ T27] audit: type=1326 audit(1792744323.344:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.824497][ T6531] loop3: detected capacity change from 0 to 128 [ 96.831645][ T27] audit: type=1326 audit(1792744323.344:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.3.223" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 96.933357][ T6531] syz.3.229: attempt to access beyond end of device [ 96.933357][ T6531] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 96.956127][ T9] usb 1-1: USB disconnect, device number 4 [ 96.966700][ T6531] FAT-fs (loop3): unable to read boot sector [ 97.001525][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.027488][ T9] ftdi_sio 1-1:0.0: device disconnected [ 97.231829][ T6548] 9pnet: p9_errstr2errno: server reported unknown error [ 97.292780][ T174] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.325180][ T6554] loop3: detected capacity change from 0 to 8 [ 97.351326][ T6554] SQUASHFS error: lzo decompression failed, data probably corrupt [ 97.361187][ T6554] SQUASHFS error: Failed to read block 0x144: -5 [ 97.369285][ T6554] SQUASHFS error: Unable to read metadata cache entry [142] [ 97.379843][ T6554] SQUASHFS error: Unable to read inode 0x11f [ 97.492945][ T174] usb 2-1: Using ep0 maxpacket: 32 [ 97.500355][ T174] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.527259][ T174] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.552581][ T174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.561611][ T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.582677][ T174] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.600328][ T174] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.621112][ T174] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.630337][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.641903][ T174] usb 2-1: config 0 descriptor?? [ 97.763581][ T5875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.864549][ T174] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.962651][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 97.976689][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.985437][ T6564] loop0: detected capacity change from 0 to 32768 [ 98.000623][ T5875] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.006983][ T6564] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (6564) [ 98.024952][ T5875] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.044647][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.072623][ T5875] usb 3-1: Product: syz [ 98.078375][ T6564] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.086392][ T5875] usb 3-1: Manufacturer: syz [ 98.096714][ T5855] usb 2-1: USB disconnect, device number 4 [ 98.098958][ T6564] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 98.111928][ T5855] usblp0: removed [ 98.121388][ T5875] usb 3-1: SerialNumber: syz [ 98.144199][ T6564] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.169339][ T6564] BTRFS info (device loop0): use zstd compression, level 3 [ 98.188327][ T6564] BTRFS info (device loop0): using free space tree [ 98.282310][ T6564] BTRFS info (device loop0): enabling ssd optimizations [ 98.302834][ T6564] BTRFS info (device loop0): auto enabling async discard [ 98.381479][ T5875] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.391973][ T5875] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 98.402426][ T5875] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 98.424230][ T5875] usb 3-1: unit 6 not found! [ 98.473811][ T5875] usb 3-1: USB disconnect, device number 4 [ 98.496589][ T5783] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.565483][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.789599][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 98.832629][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 99.193743][ T6625] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 99.690176][ T6654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 99.983737][ T6667] loop1: detected capacity change from 0 to 512 [ 100.032717][ T6667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.078319][ T6667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.117687][ T6667] EXT4-fs (loop1): 1 truncate cleaned up [ 100.149520][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.337934][ T5781] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 100.572136][ T6689] loop2: detected capacity change from 0 to 128 [ 100.792382][ T6056] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.946174][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.004798][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 101.023802][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 101.100586][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.202008][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.305098][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.339636][ T6709] loop3: detected capacity change from 0 to 128 [ 101.398024][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 101.398041][ T27] audit: type=1800 audit(1792744328.514:55): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="loop3" ino=1048638 res=0 errno=0 [ 101.447566][ T6709] syz.3.297: attempt to access beyond end of device [ 101.447566][ T6709] loop3: rw=2049, sector=145, nr_sectors = 28 limit=128 [ 101.622030][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.639282][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.648797][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.679122][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.689172][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.699467][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.896714][ T6713] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.241484][ T27] audit: type=1326 audit(1792744329.354:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.0.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f99f559 code=0x7fc00000 [ 102.744046][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 102.894386][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.900772][ T27] audit: type=1326 audit(1792744330.004:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.0.304" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f919f99f559 code=0x7fc00000 [ 103.230651][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.248581][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.262801][ T6713] bridge_slave_0: entered allmulticast mode [ 103.270078][ T6713] bridge_slave_0: entered promiscuous mode [ 103.291535][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.309763][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.324674][ T6713] bridge_slave_1: entered allmulticast mode [ 103.331903][ T6713] bridge_slave_1: entered promiscuous mode [ 103.504528][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.579716][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.745242][ T6713] team0: Port device team_slave_0 added [ 103.771591][ T6713] team0: Port device team_slave_1 added [ 103.791121][ T5795] Bluetooth: hci2: command tx timeout [ 103.832735][ T5855] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.919753][ T12] hsr_slave_0: left promiscuous mode [ 103.939550][ T12] hsr_slave_1: left promiscuous mode [ 103.951392][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.961106][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.973693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.981123][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.004796][ T12] bridge_slave_1: left allmulticast mode [ 104.010651][ T12] bridge_slave_1: left promiscuous mode [ 104.031561][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.047253][ T5855] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.071571][ T12] bridge_slave_0: left allmulticast mode [ 104.073634][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.079138][ T12] bridge_slave_0: left promiscuous mode [ 104.099168][ T5855] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 104.100871][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.124013][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.141241][ T5855] usb 4-1: config 0 descriptor?? [ 104.166559][ T12] veth1_macvtap: left promiscuous mode [ 104.183500][ T12] veth0_macvtap: left promiscuous mode [ 104.189229][ T12] veth1_vlan: left promiscuous mode [ 104.203524][ T12] veth0_vlan: left promiscuous mode [ 104.598361][ T5855] ortek 0003:05A4:2000.0001: unbalanced collection at end of report description [ 104.610758][ T5855] ortek: probe of 0003:05A4:2000.0001 failed with error -22 [ 104.787094][ T5855] usb 4-1: USB disconnect, device number 4 [ 104.978979][ T12] team0 (unregistering): Port device team_slave_1 removed [ 105.022824][ T12] team0 (unregistering): Port device team_slave_0 removed [ 105.075541][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.116100][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.466288][ T12] bond0 (unregistering): Released all slaves [ 105.526747][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.534146][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.560651][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.575035][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.587126][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.614382][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.719859][ T6713] hsr_slave_0: entered promiscuous mode [ 105.729856][ T6713] hsr_slave_1: entered promiscuous mode [ 105.853550][ T5795] Bluetooth: hci2: command tx timeout [ 105.894400][ T6829] tun0: tun_chr_ioctl cmd 2147767511 [ 105.906003][ T6829] tun0: tun_chr_ioctl cmd 35108 [ 106.150525][ T27] audit: type=1326 audit(1792744333.264:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.207837][ T27] audit: type=1326 audit(1792744333.264:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.274184][ T27] audit: type=1326 audit(1792744333.304:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.297522][ T6713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.320468][ T6713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.346043][ T27] audit: type=1326 audit(1792744333.304:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.347182][ T6713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.388790][ T27] audit: type=1326 audit(1792744333.304:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.418443][ T6849] loop3: detected capacity change from 0 to 256 [ 106.419654][ T27] audit: type=1326 audit(1792744333.304:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.461116][ T27] audit: type=1326 audit(1792744333.304:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.488922][ T6850] ip6erspan0: entered allmulticast mode [ 106.490786][ T27] audit: type=1326 audit(1792744333.314:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.529104][ T27] audit: type=1326 audit(1792744333.314:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.537404][ T6713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.559796][ T27] audit: type=1326 audit(1792744333.314:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbf83992d7 code=0x7ffc0000 [ 106.596694][ T27] audit: type=1326 audit(1792744333.314:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbf83408d9 code=0x7ffc0000 [ 106.675656][ T27] audit: type=1326 audit(1792744333.314:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.774452][ T27] audit: type=1326 audit(1792744333.314:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.786075][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.857231][ T27] audit: type=1326 audit(1792744333.314:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbbf839f559 code=0x7ffc0000 [ 106.863010][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.900773][ T27] audit: type=1326 audit(1792744333.324:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.2.339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbf83992d7 code=0x7ffc0000 [ 106.956143][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.963320][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.986910][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.994094][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.302140][ T6871] loop2: detected capacity change from 0 to 256 [ 107.367923][ T6871] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 107.412615][ T5875] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.446522][ T6871] syz.2.341: attempt to access beyond end of device [ 107.446522][ T6871] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 107.504208][ T6871] syz.2.341: attempt to access beyond end of device [ 107.504208][ T6871] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 107.505411][ T6877] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 107.544297][ T6858] loop3: detected capacity change from 0 to 32768 [ 107.560579][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.584916][ T6858] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.336 (6858) [ 107.615047][ T6871] syz.2.341: attempt to access beyond end of device [ 107.615047][ T6871] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 107.629789][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 107.635964][ T6858] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.645449][ T5875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.678758][ T6858] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 107.696488][ T5875] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 107.709418][ T6858] BTRFS info (device loop3): setting nodatacow, compression disabled [ 107.729934][ T6858] BTRFS info (device loop3): setting datasum, datacow enabled [ 107.751978][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.752950][ T6858] BTRFS info (device loop3): force clearing of disk cache [ 107.789836][ T6858] BTRFS info (device loop3): enabling ssd optimizations [ 107.822998][ T6858] BTRFS info (device loop3): using spread ssd allocation scheme [ 107.842893][ T6858] BTRFS info (device loop3): turning on sync discard [ 107.849643][ T6858] BTRFS info (device loop3): turning on flush-on-commit [ 107.873036][ T6858] BTRFS info (device loop3): not using ssd optimizations [ 107.880129][ T6858] BTRFS info (device loop3): not using spread ssd allocation scheme [ 107.932835][ T5795] Bluetooth: hci2: command tx timeout [ 107.977118][ T6858] BTRFS info (device loop3): using free space tree [ 108.143837][ T6858] BTRFS info (device loop3): rebuilding free space tree [ 108.340008][ T6713] veth0_vlan: entered promiscuous mode [ 108.408076][ T6713] veth1_vlan: entered promiscuous mode [ 108.420144][ T6913] FAULT_INJECTION: forcing a failure. [ 108.420144][ T6913] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.455604][ T6913] CPU: 1 PID: 6913 Comm: syz.2.344 Not tainted syzkaller #0 [ 108.462954][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.473124][ T6913] Call Trace: [ 108.476423][ T6913] [ 108.479374][ T6913] dump_stack_lvl+0x18c/0x250 [ 108.484082][ T6913] ? show_regs_print_info+0x20/0x20 [ 108.489303][ T6913] ? load_image+0x420/0x420 [ 108.493832][ T6913] ? __lock_acquire+0x7eb0/0x7eb0 [ 108.498877][ T6913] ? sort+0xaf/0xf0 [ 108.502715][ T6913] ? __virt_addr_valid+0x10c/0x380 [ 108.507862][ T6913] should_fail_ex+0x394/0x4c0 [ 108.512567][ T6913] _copy_from_user+0x2f/0xe0 [ 108.517188][ T6913] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 108.522505][ T6913] bpf_vlog_finalize+0x1b3/0x3e0 [ 108.527469][ T6913] btf_new_fd+0x4ca/0x9e0 [ 108.531837][ T6913] ? bpf_btf_show_fdinfo+0x80/0x80 [ 108.536997][ T6913] ? capable+0x88/0xe0 [ 108.541112][ T6913] __sys_bpf+0x670/0x890 [ 108.545378][ T6913] ? bpf_link_show_fdinfo+0x560/0x560 [ 108.550797][ T6913] ? lock_chain_count+0x20/0x20 [ 108.555682][ T6913] __x64_sys_bpf+0x7c/0x90 [ 108.560123][ T6913] do_syscall_64+0x55/0xb0 [ 108.564564][ T6913] ? clear_bhb_loop+0x40/0x90 [ 108.569266][ T6913] ? clear_bhb_loop+0x40/0x90 [ 108.573962][ T6913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.579877][ T6913] RIP: 0033:0x7fbbf839f559 [ 108.584313][ T6913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.603949][ T6913] RSP: 002b:00007fbbf9349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.612390][ T6913] RAX: ffffffffffffffda RBX: 00007fbbf8625fa0 RCX: 00007fbbf839f559 [ 108.620385][ T6913] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 108.628381][ T6913] RBP: 00007fbbf8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 108.636381][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.644368][ T6913] R13: 00007fbbf8626038 R14: 00007fbbf8625fa0 R15: 00007ffd4d69be08 [ 108.652374][ T6913] [ 108.740965][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.793305][ T6713] veth0_macvtap: entered promiscuous mode [ 108.839916][ T6713] veth1_macvtap: entered promiscuous mode [ 108.894515][ T5875] pegasus: probe of 1-1:1.0 failed with error -71 [ 108.898142][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.911543][ T5875] usb 1-1: USB disconnect, device number 5 [ 108.937896][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.967471][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.996324][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.007828][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.019104][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.032261][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.088622][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.104545][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.116322][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.127479][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.153843][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.171491][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.191413][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.206844][ T6713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.224052][ T6713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.236715][ T6713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.256383][ T6713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.507610][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.542896][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.587825][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.598702][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.629049][ T6939] loop3: detected capacity change from 0 to 1024 [ 110.015580][ T5795] Bluetooth: hci2: command tx timeout [ 110.272873][ T6965] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 110.479735][ T6971] loop4: detected capacity change from 0 to 128 [ 110.505093][ T6973] loop3: detected capacity change from 0 to 512 [ 110.519712][ T6973] EXT4-fs: Ignoring removed bh option [ 110.532101][ T6971] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 110.570338][ T6973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.645629][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.674225][ T6950] loop2: detected capacity change from 0 to 32768 [ 110.685451][ T6973] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.706162][ T6950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.353 (6950) [ 110.732338][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 110.808995][ T6950] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.859466][ T6950] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.878888][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.883202][ T6950] BTRFS info (device loop2): setting nodatacow, compression disabled [ 110.912616][ T6950] BTRFS info (device loop2): setting datasum, datacow enabled [ 110.930041][ T6950] BTRFS info (device loop2): force clearing of disk cache [ 110.946223][ T6950] BTRFS info (device loop2): enabling ssd optimizations [ 110.959489][ T6950] BTRFS info (device loop2): using spread ssd allocation scheme [ 110.969947][ T6950] BTRFS info (device loop2): turning on sync discard [ 110.980910][ T6950] BTRFS info (device loop2): turning on flush-on-commit [ 110.988401][ T6950] BTRFS info (device loop2): not using ssd optimizations [ 111.003733][ T6950] BTRFS info (device loop2): not using spread ssd allocation scheme [ 111.011796][ T6950] BTRFS info (device loop2): using free space tree [ 111.057529][ T6989] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 111.057529][ T6989] The task syz.4.361 (6989) triggered the difference, watch for misbehavior. [ 111.094767][ T6993] ALSA: mixer_oss: invalid OSS volume '' [ 111.265766][ T6950] BTRFS info (device loop2): rebuilding free space tree [ 111.628324][ T7022] loop0: detected capacity change from 0 to 1024 [ 111.672168][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.735658][ T27] kauditd_printk_skb: 70 callbacks suppressed [ 111.735673][ T27] audit: type=1800 audit(1792744338.854:143): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.366" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 112.439160][ T7046] loop4: detected capacity change from 0 to 512 [ 112.459735][ T7046] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.696063][ T7031] loop0: detected capacity change from 0 to 32768 [ 112.787222][ T7031] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.945038][ T7031] XFS (loop0): Ending clean mount [ 112.982999][ T7031] XFS (loop0): User initiated shutdown received. [ 112.994252][ T7031] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 113.025324][ T7031] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 113.072915][ T5783] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.400690][ T7078] loop2: detected capacity change from 0 to 1024 [ 113.510931][ T27] audit: type=1800 audit(1792744340.624:144): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.379" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 113.650453][ T7088] loop0: detected capacity change from 0 to 1024 [ 113.683749][ T7088] EXT4-fs: Ignoring removed oldalloc option [ 113.689711][ T7088] EXT4-fs: Ignoring removed orlov option [ 113.725423][ T7068] loop4: detected capacity change from 0 to 32768 [ 113.737353][ T7068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.377 (7068) [ 113.861056][ T7088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.894719][ T7068] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.955399][ T7068] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.972079][ T7088] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.017518][ T7068] BTRFS info (device loop4): setting nodatacow, compression disabled [ 114.061512][ T7088] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.381: lblock 0 mapped to illegal pblock 0 (length 6) [ 114.077049][ T7068] BTRFS info (device loop4): setting datasum, datacow enabled [ 114.097734][ T7068] BTRFS info (device loop4): force clearing of disk cache [ 114.129798][ T7068] BTRFS info (device loop4): enabling ssd optimizations [ 114.162843][ T7068] BTRFS info (device loop4): using spread ssd allocation scheme [ 114.181925][ T7068] BTRFS info (device loop4): turning on sync discard [ 114.184190][ T170] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 6) [ 114.195353][ T7068] BTRFS info (device loop4): turning on flush-on-commit [ 114.248873][ T170] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 114.261272][ T7068] BTRFS info (device loop4): not using ssd optimizations [ 114.261293][ T7068] BTRFS info (device loop4): not using spread ssd allocation scheme [ 114.261309][ T7068] BTRFS info (device loop4): using free space tree [ 114.327410][ T170] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.327410][ T170] [ 114.397513][ T11] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 114.483136][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 114.523048][ T7068] BTRFS info (device loop4): rebuilding free space tree [ 114.541264][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.541264][ T11] [ 114.577314][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.822466][ T7145] size and base must be multiples of 4 kiB [ 114.855452][ T7145] CPU: 0 PID: 7145 Comm: syz.3.392 Not tainted syzkaller #0 [ 114.862809][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.872887][ T7145] Call Trace: [ 114.876186][ T7145] [ 114.879135][ T7145] dump_stack_lvl+0x18c/0x250 [ 114.883848][ T7145] ? show_regs_print_info+0x20/0x20 [ 114.889074][ T7145] ? load_image+0x420/0x420 [ 114.893620][ T7145] ? __might_fault+0xaa/0x120 [ 114.898327][ T7145] ? __might_fault+0xc6/0x120 [ 114.903031][ T7145] mtrr_add+0xd0/0x100 [ 114.907127][ T7145] mtrr_ioctl+0xc96/0x13a0 [ 114.911656][ T7145] ? mtrr_close+0x200/0x200 [ 114.916205][ T7145] ? __fget_files+0x28/0x460 [ 114.920828][ T7145] ? mtrr_close+0x200/0x200 [ 114.925353][ T7145] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 114.930841][ T7145] ? proc_reg_poll+0x290/0x290 [ 114.935628][ T7145] __se_sys_ioctl+0xfd/0x170 [ 114.940251][ T7145] do_syscall_64+0x55/0xb0 [ 114.944689][ T7145] ? clear_bhb_loop+0x40/0x90 [ 114.949393][ T7145] ? clear_bhb_loop+0x40/0x90 [ 114.954104][ T7145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.960022][ T7145] RIP: 0033:0x7fde9059f559 [ 114.964459][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.984088][ T7145] RSP: 002b:00007fde913a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.992572][ T7145] RAX: ffffffffffffffda RBX: 00007fde90825fa0 RCX: 00007fde9059f559 [ 115.000658][ T7145] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 115.008660][ T7145] RBP: 00007fde90636b20 R08: 0000000000000000 R09: 0000000000000000 [ 115.016652][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.021509][ T6713] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.024620][ T7145] R13: 00007fde90826038 R14: 00007fde90825fa0 R15: 00007ffd6449bbb8 [ 115.024652][ T7145] [ 115.332644][ T5770] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.359344][ T7158] binder: 7157:7158 ioctl c0306201 2000000001c0 returned -14 [ 115.462847][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.514640][ T5770] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.533247][ T5770] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 115.550190][ T5770] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 115.561865][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.572431][ T5770] usb 1-1: Product: syz [ 115.581768][ T5770] usb 1-1: Manufacturer: syz [ 115.593763][ T5770] usb 1-1: SerialNumber: syz [ 115.614503][ T7150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.621806][ T7150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.650719][ T5770] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 115.673286][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 115.694311][ T5875] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 115.712641][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.721608][ T5770] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 115.733056][ T5875] usb 3-1: Product: syz [ 115.737242][ T5875] usb 3-1: Manufacturer: syz [ 115.741843][ T5875] usb 3-1: SerialNumber: syz [ 115.758068][ T5770] usbserial_generic 1-1:1.0: generic converter detected [ 115.769623][ T5770] usb 1-1: generic converter now attached to ttyUSB0 [ 115.876603][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.888998][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.899271][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.912436][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.925225][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.935794][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.946245][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.955734][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.966131][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.975832][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 115.993832][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.005920][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.016356][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.027622][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.037123][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.047351][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.056886][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.066568][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.072309][ T7166] loop3: detected capacity change from 0 to 32768 [ 116.076733][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.095701][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.105232][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.108434][ T7166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.401 (7166) [ 116.114981][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.136548][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.150669][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.160172][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.173128][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.182670][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.193510][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.203001][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 116.217297][ T9] usb 1-1: USB disconnect, device number 6 [ 116.223317][ T7166] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.236246][ T7166] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.257142][ T7166] BTRFS info (device loop3): force clearing of disk cache [ 116.261433][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 116.264635][ T7166] BTRFS info (device loop3): use zlib compression, level 3 [ 116.279978][ T7166] BTRFS info (device loop3): enabling ssd optimizations [ 116.283959][ T9] usbserial_generic 1-1:1.0: device disconnected [ 116.299504][ T7166] BTRFS info (device loop3): using spread ssd allocation scheme [ 116.308764][ T7166] BTRFS info (device loop3): using free space tree [ 116.379835][ T7166] BTRFS info (device loop3): auto enabling async discard [ 116.390149][ T7166] BTRFS info (device loop3): rebuilding free space tree [ 116.412385][ T7166] BTRFS info (device loop3): checking UUID tree [ 116.590380][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.629420][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.661586][ T5797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5797) [ 116.804790][ T5875] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 116.832605][ T5875] usb 3-1: USB disconnect, device number 5 [ 116.859186][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.883714][ T5856] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 116.927197][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.970356][ T5856] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 117.005966][ T5856] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 117.062083][ T7205] loop3: detected capacity change from 0 to 1024 [ 117.078843][ T7205] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 117.090258][ T7205] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 117.103127][ T7205] EXT4-fs (loop3): invalid journal inode [ 117.167771][ T5797] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.192651][ T5770] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.213050][ T5856] usb 5-1: USB disconnect, device number 2 [ 117.233360][ T5856] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 117.263117][ T5856] metro_usb 5-1:1.0: device disconnected [ 117.374644][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.391855][ T27] audit: type=1326 audit(1792744344.504:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.416188][ T5770] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.421296][ T27] audit: type=1326 audit(1792744344.504:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.449233][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.451490][ T5770] usb 1-1: config 0 descriptor?? [ 117.459908][ T27] audit: type=1326 audit(1792744344.514:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.489197][ T27] audit: type=1326 audit(1792744344.514:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.526525][ T27] audit: type=1326 audit(1792744344.514:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.562631][ T27] audit: type=1326 audit(1792744344.514:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.587169][ T27] audit: type=1326 audit(1792744344.514:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.611244][ T27] audit: type=1326 audit(1792744344.514:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.635728][ T27] audit: type=1326 audit(1792744344.514:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.661225][ T27] audit: type=1326 audit(1792744344.514:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.3.410" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9059f559 code=0x7ffc0000 [ 117.787771][ T7216] : renamed from vlan0 (while UP) [ 117.901503][ T5770] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 117.919276][ T5770] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input7 [ 118.057093][ T5770] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 118.126688][ C1] keytouch 0003:0926:3333.0002: Event data for report 0 was too short (8 vs 5) [ 118.340149][ T5770] usb 1-1: USB disconnect, device number 7 [ 119.140351][ T7226] loop4: detected capacity change from 0 to 32768 [ 119.174433][ T7226] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 119.277818][ T5797] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 119.352244][ T7234] loop2: detected capacity change from 0 to 32768 [ 119.539556][ T7242] loop0: detected capacity change from 0 to 2048 [ 119.587098][ T7242] NILFS (loop0): invalid segment: Magic number mismatch [ 119.612168][ T7242] NILFS (loop0): trying rollback from an earlier position [ 119.708060][ T7242] NILFS (loop0): recovery complete [ 119.721570][ T7246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.850065][ T7250] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 120.050727][ T7257] overlay: Unexpected value for 'default_permissions' [ 120.143653][ T7260] loop0: detected capacity change from 0 to 512 [ 120.156891][ T7260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.176144][ T7260] EXT4-fs: Ignoring removed nobh option [ 120.197003][ T7260] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 120.233064][ T7260] EXT4-fs (loop0): 1 truncate cleaned up [ 120.240427][ T7260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.417672][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.581793][ T7279] loop4: detected capacity change from 0 to 128 [ 120.602319][ T7279] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.627525][ T7279] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.701206][ T7279] EXT4-fs (loop4): shut down requested (2) [ 120.725162][ T6713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.784153][ T7286] syz.0.447: attempt to access beyond end of device [ 120.784153][ T7286] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 120.819616][ T7286] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 120.840741][ T7289] loop4: detected capacity change from 0 to 2048 [ 120.861533][ T7289] NILFS (loop4): invalid segment: Magic number mismatch [ 120.871915][ T7289] NILFS (loop4): trying rollback from an earlier position [ 120.890184][ T7289] NILFS (loop4): recovery complete [ 120.899078][ T7290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.500816][ T7318] loop2: detected capacity change from 0 to 16 [ 121.531881][ T7318] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.534126][ T7319] loop0: detected capacity change from 0 to 2048 [ 121.573809][ T7319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.589427][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.623889][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.635890][ T7318] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 121.645018][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.657403][ T7318] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 121.666669][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.678170][ T7318] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 121.688382][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.700334][ T7318] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 121.709499][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.724330][ T7318] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 121.735166][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.742631][ T7318] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 0 of nid 89 [ 121.934228][ T7329] loop2: detected capacity change from 0 to 2048 [ 121.965902][ T7329] NILFS (loop2): invalid segment: Magic number mismatch [ 121.976666][ T7329] NILFS (loop2): trying rollback from an earlier position [ 122.010897][ T7329] NILFS (loop2): recovery complete [ 122.028345][ T7335] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.460276][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 122.488825][ T7352] loop2: detected capacity change from 0 to 1024 [ 122.537034][ T7352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.577621][ T4840] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 122.747758][ T7356] loop0: detected capacity change from 0 to 8192 [ 122.763148][ T7356] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.910572][ T7362] loop3: detected capacity change from 0 to 4096 [ 122.928258][ T7362] EXT4-fs: Ignoring removed nobh option [ 123.154004][ T7370] loop4: detected capacity change from 0 to 2048 [ 123.210269][ T7362] EXT4-fs: Ignoring removed bh option [ 123.223733][ T7370] NILFS (loop4): invalid segment: Magic number mismatch [ 123.234936][ T7370] NILFS (loop4): trying rollback from an earlier position [ 123.247229][ T7362] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.258942][ T7370] NILFS (loop4): recovery complete [ 123.270885][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.321178][ T7380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.568881][ T7391] loop0: detected capacity change from 0 to 16 [ 123.582018][ T7362] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 123.614664][ T7391] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 123.640636][ T5797] udevd[5797]: incorrect cramfs checksum on /dev/loop0 [ 123.715428][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.021047][ T7408] loop4: detected capacity change from 0 to 256 [ 124.050469][ T7408] exfat: Deprecated parameter 'utf8' [ 124.067915][ T7408] exfat: Deprecated parameter 'namecase' [ 124.075631][ T7408] exfat: Deprecated parameter 'utf8' [ 124.118855][ T7408] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 124.302184][ T7419] loop3: detected capacity change from 0 to 256 [ 124.535885][ T7421] loop6: detected capacity change from 0 to 1 [ 124.554566][ T7421] Dev loop6: unable to read RDB block 1 [ 124.561844][ T7421] loop6: unable to read partition table [ 124.583293][ T7421] loop6: partition table beyond EOD, truncated [ 124.617333][ T7421] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 124.629593][ T7425] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 124.678944][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.715096][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 124.740376][ T5151] Dev loop6: unable to read RDB block 1 [ 124.746620][ T5151] loop6: unable to read partition table [ 124.753600][ T5151] loop6: partition table beyond EOD, truncated [ 124.842481][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.926490][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.004859][ T7433] loop3: detected capacity change from 0 to 64 [ 125.141589][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.502968][ T7448] loop3: detected capacity change from 0 to 512 [ 125.566740][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.590830][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.602124][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.607219][ T7448] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.619902][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.628152][ T7457] cifs: Unknown parameter '0,' [ 125.637064][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.645716][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.655383][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.739500][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.743636][ T7455] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.139244][ T7455] chnl_net:caif_netlink_parms(): no params data found [ 126.251455][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.259362][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.281023][ T7455] bridge_slave_0: entered allmulticast mode [ 126.302007][ T7455] bridge_slave_0: entered promiscuous mode [ 126.319134][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.327522][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.341455][ T7455] bridge_slave_1: entered allmulticast mode [ 126.349282][ T7455] bridge_slave_1: entered promiscuous mode [ 126.411324][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.451152][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.524475][ T7455] team0: Port device team_slave_0 added [ 126.539666][ T7455] team0: Port device team_slave_1 added [ 126.563685][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.571144][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.597410][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.610123][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.617236][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.643259][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.718867][ T7455] hsr_slave_0: entered promiscuous mode [ 126.725629][ T7455] hsr_slave_1: entered promiscuous mode [ 126.732073][ T7455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.746747][ T7455] Cannot create hsr debugfs directory [ 127.197858][ T7455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.209548][ T7455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.222208][ T7455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.274745][ T7455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.449055][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.517157][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.534691][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.541869][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.597960][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.605184][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.696424][ T5788] Bluetooth: hci2: command tx timeout [ 127.708997][ T7455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.020879][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.204011][ T11] hsr_slave_0: left promiscuous mode [ 128.210560][ T11] hsr_slave_1: left promiscuous mode [ 128.216726][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.224408][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.232332][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.240157][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.248059][ T11] bridge_slave_1: left allmulticast mode [ 128.262109][ T11] bridge_slave_1: left promiscuous mode [ 128.268440][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.280136][ T11] bridge_slave_0: left allmulticast mode [ 128.286563][ T11] bridge_slave_0: left promiscuous mode [ 128.292316][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.325894][ T11] veth1_macvtap: left promiscuous mode [ 128.331470][ T11] veth0_macvtap: left promiscuous mode [ 128.339021][ T11] veth1_vlan: left promiscuous mode [ 128.344663][ T11] veth0_vlan: left promiscuous mode [ 128.972185][ T11] team0 (unregistering): Port device team_slave_1 removed [ 129.020790][ T11] team0 (unregistering): Port device team_slave_0 removed [ 129.069991][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.111048][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.431868][ T11] bond0 (unregistering): Released all slaves [ 129.773443][ T5788] Bluetooth: hci2: command tx timeout [ 129.858343][ T7455] veth0_vlan: entered promiscuous mode [ 129.886808][ T7455] veth1_vlan: entered promiscuous mode [ 129.919774][ T7455] veth0_macvtap: entered promiscuous mode [ 129.932440][ T7455] veth1_macvtap: entered promiscuous mode [ 129.962363][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.973514][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.984494][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.995549][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.005697][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.018480][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.030455][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.054346][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.065778][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.075667][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.086502][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.097901][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.108844][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.120790][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.135236][ T7455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.144346][ T7455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.156803][ T7455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.165614][ T7455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.257258][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.277665][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.310695][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.319386][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.702275][ T7575] loop0: detected capacity change from 0 to 2048 [ 130.771803][ T7575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.967060][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 131.001893][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.014565][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.014565][ T11] [ 131.027709][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 131.033788][ T11] EXT4-fs (loop0): Free/Dirty block details [ 131.039705][ T11] EXT4-fs (loop0): free_blocks=2415919504 [ 131.045813][ T11] EXT4-fs (loop0): dirty_blocks=16 [ 131.050960][ T11] EXT4-fs (loop0): Block reservation details [ 131.057511][ T11] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 131.071583][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 131.854872][ T5788] Bluetooth: hci2: command tx timeout [ 131.907231][ T7631] syzkaller1: entered promiscuous mode [ 131.929830][ T7631] syzkaller1: entered allmulticast mode [ 132.230077][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 132.272662][ T5788] Bluetooth: hci0: unexpected event for opcode 0x202a [ 132.353340][ T5770] kernel write not supported for file bpf-prog (pid: 5770 comm: kworker/1:3) [ 132.593720][ T7668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.612007][ T7666] loop0: detected capacity change from 0 to 8192 [ 132.626149][ T7666] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.639925][ T7666] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 132.650969][ T7666] REISERFS (device loop0): using ordered data mode [ 132.657825][ T7666] reiserfs: using flush barriers [ 132.680868][ T7666] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 132.701943][ T7666] REISERFS (device loop0): checking transaction log (loop0) [ 132.731977][ T7666] REISERFS (device loop0): Using r5 hash to sort names [ 132.745432][ T7666] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.759870][ T7666] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 132.922079][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939102][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.515202][ T7702] loop5: detected capacity change from 0 to 164 [ 133.721854][ T7711] loop2: detected capacity change from 0 to 1024 [ 133.783184][ T7711] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.846239][ T7711] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 133.909172][ T7711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.932728][ T5788] Bluetooth: hci2: command tx timeout [ 134.047132][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.456407][ T7736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.852720][ T5874] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.056765][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.108524][ T5874] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.185250][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.227179][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.284630][ T5874] usb 3-1: SerialNumber: syz [ 135.318234][ T7767] binder: 7766:7767 ioctl c0306201 0 returned -14 [ 135.345790][ T7767] binder: 7766:7767 ioctl c0046209 0 returned -22 [ 135.414122][ T5874] usb 3-1: bad CDC descriptors [ 135.620000][ T5874] usb 3-1: USB disconnect, device number 6 [ 135.629552][ T7755] loop0: detected capacity change from 0 to 131072 [ 135.662675][ T7755] F2FS-fs (loop0): invalid crc value [ 135.718686][ T7755] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.776807][ T7755] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 136.241652][ T7774] loop3: detected capacity change from 0 to 32768 [ 136.387830][ T7774] JBD2: Ignoring recovery information on journal [ 136.411456][ T7793] loop2: detected capacity change from 0 to 512 [ 136.453289][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.608366][ T7774] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 136.690881][ T5874] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 136.733825][ T5874] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 136.772673][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.822125][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 136.822139][ T27] audit: type=1800 audit(1792744363.934:169): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.567" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 136.822358][ T5874] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 136.929135][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.959348][ T7787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 136.991563][ T7787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 137.004881][ T5874] pl2303 6-1:1.0: pl2303 converter detected [ 137.033698][ T5874] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 137.067313][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 137.172792][ T5770] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.362653][ T5770] usb 3-1: Using ep0 maxpacket: 16 [ 137.374057][ T7787] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 137.402403][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.413146][ T7787] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 137.434884][ T7787] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 137.446246][ T5770] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.461232][ T7787] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 137.470271][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.494559][ T7815] loop0: detected capacity change from 0 to 128 [ 137.522800][ T5770] usb 3-1: Product: syz [ 137.530824][ T5770] usb 3-1: Manufacturer: syz [ 137.541113][ T5770] usb 3-1: SerialNumber: syz [ 137.578172][ T5770] usb 3-1: config 0 descriptor?? [ 137.614550][ T5770] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.621842][ T7815] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.624581][ T5770] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 137.664196][ T7815] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.780657][ T7786] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 137.807157][ T7786] pl2303 ttyUSB0: error sending break = -32 [ 137.819924][ T5856] usb 6-1: USB disconnect, device number 2 [ 137.852741][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.878153][ T5856] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 137.924269][ T5856] pl2303 6-1:1.0: device disconnected [ 138.224878][ T5770] em28xx 3-1:0.0: chip ID is em2874 [ 138.553033][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 138.589682][ T7851] netlink: 104 bytes leftover after parsing attributes in process `syz.5.583'. [ 138.681962][ T7856] loop0: detected capacity change from 0 to 2048 [ 138.727325][ T5770] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 138.768360][ T5770] em28xx 3-1:0.0: board has no eeprom [ 138.821379][ T7856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.863046][ T5770] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 138.870923][ T5770] em28xx 3-1:0.0: dvb set to bulk mode. [ 138.883164][ T5875] em28xx 3-1:0.0: Binding DVB extension [ 138.899392][ T5770] usb 3-1: USB disconnect, device number 7 [ 138.910514][ T5770] em28xx 3-1:0.0: Disconnecting em28xx [ 138.997649][ T5875] em28xx 3-1:0.0: Registering input extension [ 139.063076][ T7856] EXT4-fs error (device loop0): ext4_find_extent:911: inode #2: comm syz.0.584: inode has invalid extent depth: 8 [ 139.130025][ T7856] EXT4-fs (loop0): Remounting filesystem read-only [ 139.174906][ T5875] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 139.203898][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.212397][ T5875] Registered IR keymap rc-empty [ 139.234578][ T5875] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 139.256499][ T5875] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 139.324934][ T5875] em28xx 3-1:0.0: Input extension successfully initialized [ 139.354521][ T5770] em28xx 3-1:0.0: Closing input extension [ 139.552017][ T5770] em28xx 3-1:0.0: Freeing device [ 139.577488][ T7883] synth uevent: /bus/acpi: unknown uevent action string [ 140.192364][ T7908] loop5: detected capacity change from 0 to 512 [ 140.301223][ T7908] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.597: bg 0: block 5: invalid block bitmap [ 140.352362][ T7908] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.386997][ T7908] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.597: invalid indirect mapped block 3 (level 2) [ 140.421366][ T7918] FAULT_INJECTION: forcing a failure. [ 140.421366][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 140.455231][ T7908] EXT4-fs (loop5): 1 orphan inode deleted [ 140.461597][ T7908] EXT4-fs (loop5): 1 truncate cleaned up [ 140.482645][ T7918] CPU: 0 PID: 7918 Comm: syz.2.599 Not tainted syzkaller #0 [ 140.484195][ T7908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.489974][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.489989][ T7918] Call Trace: [ 140.489997][ T7918] [ 140.490004][ T7918] dump_stack_lvl+0x18c/0x250 [ 140.523413][ T7918] ? show_regs_print_info+0x20/0x20 [ 140.528639][ T7918] ? load_image+0x420/0x420 [ 140.533171][ T7918] ? __might_sleep+0xe0/0xe0 [ 140.537792][ T7918] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.542848][ T7918] should_fail_ex+0x394/0x4c0 [ 140.547556][ T7918] should_failslab+0x9/0x20 [ 140.552084][ T7918] slab_pre_alloc_hook+0x59/0x300 [ 140.557222][ T7918] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.562277][ T7918] ? security_prepare_creds+0x4b/0x130 [ 140.567777][ T7918] ? security_prepare_creds+0x4b/0x130 [ 140.573274][ T7918] __kmem_cache_alloc_node+0x53/0x260 [ 140.578671][ T7918] ? security_prepare_creds+0x4b/0x130 [ 140.584132][ T7918] __kmalloc+0xa7/0x240 [ 140.588311][ T7918] security_prepare_creds+0x4b/0x130 [ 140.593614][ T7918] prepare_creds+0x427/0x5d0 [ 140.598221][ T7918] join_session_keyring+0x1b/0x440 [ 140.603344][ T7918] lookup_user_key+0x4e6/0x1140 [ 140.608194][ T7918] ? try_to_wake_up+0x6f5/0x10e0 [ 140.613132][ T7918] ? lookup_user_key_possessed+0x40/0x40 [ 140.618767][ T7918] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 140.624748][ T7918] ? futex_wake_mark+0x150/0x150 [ 140.629679][ T7918] keyctl_keyring_move+0x3d/0x110 [ 140.634733][ T7918] __se_sys_keyctl+0x84a/0xb50 [ 140.639496][ T7918] ? __x64_sys_keyctl+0xc0/0xc0 [ 140.644339][ T7918] ? do_futex+0x35d/0x3e0 [ 140.648664][ T7918] ? __ia32_sys_get_robust_list+0x110/0x110 [ 140.654559][ T7918] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 140.660544][ T7918] ? lock_chain_count+0x20/0x20 [ 140.665393][ T7918] ? lockdep_hardirqs_on+0x98/0x150 [ 140.670590][ T7918] ? __x64_sys_keyctl+0x20/0xc0 [ 140.675442][ T7918] do_syscall_64+0x55/0xb0 [ 140.679855][ T7918] ? clear_bhb_loop+0x40/0x90 [ 140.684526][ T7918] ? clear_bhb_loop+0x40/0x90 [ 140.689197][ T7918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.695086][ T7918] RIP: 0033:0x7fbbf839f559 [ 140.699513][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.719120][ T7918] RSP: 002b:00007fbbf9349028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 140.727528][ T7918] RAX: ffffffffffffffda RBX: 00007fbbf8625fa0 RCX: 00007fbbf839f559 [ 140.735499][ T7918] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 000000000000001e [ 140.743463][ T7918] RBP: 00007fbbf8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 140.751443][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.759436][ T7918] R13: 00007fbbf8626038 R14: 00007fbbf8625fa0 R15: 00007ffd4d69be08 [ 140.767461][ T7918] [ 140.945608][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.454710][ T7944] [ 141.457092][ T7944] ====================================================== [ 141.464120][ T7944] WARNING: possible circular locking dependency detected [ 141.471156][ T7944] syzkaller #0 Not tainted [ 141.475578][ T7944] ------------------------------------------------------ [ 141.482602][ T7944] syz.2.609/7944 is trying to acquire lock: [ 141.488500][ T7944] ffff88814d5880e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 141.497927][ T7944] [ 141.497927][ T7944] but task is already holding lock: [ 141.505300][ T7944] ffff8880210d4788 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 141.514904][ T7944] [ 141.514904][ T7944] which lock already depends on the new lock. [ 141.514904][ T7944] [ 141.523091][ T7952] loop5: detected capacity change from 0 to 4096 [ 141.525295][ T7944] [ 141.525295][ T7944] the existing dependency chain (in reverse order) is: [ 141.525303][ T7944] [ 141.525303][ T7944] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 141.544697][ T7952] EXT4-fs: Ignoring removed orlov option [ 141.548787][ T7944] __mutex_lock+0x135/0xc80 [ 141.548816][ T7944] bd_finish_claiming+0x229/0x3f0 [ 141.564999][ T7944] blkdev_get_by_dev+0x469/0x610 [ 141.570478][ T7944] bdev_open_by_dev+0x77/0x100 [ 141.575774][ T7944] setup_bdev_super+0x59/0x660 [ 141.581060][ T7944] mount_bdev+0x1ce/0x2c0 [ 141.585924][ T7944] legacy_get_tree+0xea/0x180 [ 141.591114][ T7944] vfs_get_tree+0x8c/0x280 [ 141.596040][ T7944] do_new_mount+0x24a/0xa60 [ 141.601052][ T7944] init_mount+0xde/0x130 [ 141.605800][ T7944] do_mount_root+0x97/0x230 [ 141.610818][ T7944] mount_root_generic+0x1a6/0x3e0 [ 141.616352][ T7944] prepare_namespace+0xc2/0x100 [ 141.621707][ T7944] kernel_init_freeable+0x41a/0x560 [ 141.627423][ T7944] kernel_init+0x1d/0x1c0 [ 141.632260][ T7944] ret_from_fork+0x48/0x80 [ 141.637183][ T7944] ret_from_fork_asm+0x11/0x20 [ 141.642455][ T7944] [ 141.642455][ T7944] -> #3 (bdev_lock){+.+.}-{3:3}: [ 141.649567][ T7944] __mutex_lock+0x135/0xc80 [ 141.654583][ T7944] bd_prepare_to_claim+0x1d9/0x4a0 [ 141.660206][ T7944] truncate_bdev_range+0x4e/0x260 [ 141.665766][ T7944] blkdev_fallocate+0x428/0x6a0 [ 141.671127][ T7944] vfs_fallocate+0x585/0x6f0 [ 141.676227][ T7944] do_madvise+0x166b/0x3790 [ 141.681238][ T7944] __x64_sys_madvise+0xa6/0xc0 [ 141.686527][ T7944] do_syscall_64+0x55/0xb0 [ 141.691453][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.697856][ T7944] [ 141.697856][ T7944] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 141.706203][ T7944] down_write+0x97/0x200 [ 141.710949][ T7944] set_blocksize+0x247/0x4b0 [ 141.716047][ T7944] sb_min_blocksize+0xbe/0x190 [ 141.721317][ T7944] ext4_fill_super+0x6e7/0x6820 [ 141.726674][ T7944] get_tree_bdev+0x3e5/0x520 [ 141.731775][ T7944] vfs_get_tree+0x8c/0x280 [ 141.736696][ T7944] do_new_mount+0x24a/0xa60 [ 141.741707][ T7944] init_mount+0xde/0x130 [ 141.746454][ T7944] do_mount_root+0x97/0x230 [ 141.751495][ T7944] mount_root_generic+0x1a6/0x3e0 [ 141.757026][ T7944] prepare_namespace+0xc2/0x100 [ 141.762384][ T7944] kernel_init_freeable+0x41a/0x560 [ 141.768098][ T7944] kernel_init+0x1d/0x1c0 [ 141.772932][ T7944] ret_from_fork+0x48/0x80 [ 141.777856][ T7944] ret_from_fork_asm+0x11/0x20 [ 141.783129][ T7944] [ 141.783129][ T7944] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 141.791734][ T7944] down_write+0x97/0x200 [ 141.796485][ T7944] set_blocksize+0x1ff/0x4b0 [ 141.801585][ T7944] sb_min_blocksize+0xbe/0x190 [ 141.806855][ T7944] ext4_fill_super+0x6e7/0x6820 [ 141.812214][ T7944] get_tree_bdev+0x3e5/0x520 [ 141.817313][ T7944] vfs_get_tree+0x8c/0x280 [ 141.822242][ T7944] do_new_mount+0x24a/0xa60 [ 141.827254][ T7944] init_mount+0xde/0x130 [ 141.832001][ T7944] do_mount_root+0x97/0x230 [ 141.837012][ T7944] mount_root_generic+0x1a6/0x3e0 [ 141.842547][ T7944] prepare_namespace+0xc2/0x100 [ 141.847903][ T7944] kernel_init_freeable+0x41a/0x560 [ 141.853610][ T7944] kernel_init+0x1d/0x1c0 [ 141.858466][ T7944] ret_from_fork+0x48/0x80 [ 141.863398][ T7944] ret_from_fork_asm+0x11/0x20 [ 141.868675][ T7944] [ 141.868675][ T7944] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 141.876918][ T7944] __lock_acquire+0x3a07/0x7eb0 [ 141.882274][ T7944] lock_acquire+0x19e/0x420 [ 141.887281][ T7944] down_read+0x46/0x2e0 [ 141.891941][ T7944] super_lock+0x189/0x390 [ 141.896807][ T7944] fs_bdev_mark_dead+0xad/0x1f0 [ 141.902165][ T7944] bdev_mark_dead+0x83/0x1a0 [ 141.907263][ T7944] blk_report_disk_dead+0x21c/0x3e0 [ 141.912968][ T7944] del_gendisk+0x2cb/0x8f0 [ 141.917892][ T7944] sd_remove+0x8d/0x100 [ 141.922557][ T7944] device_release_driver_internal+0x458/0x6f0 [ 141.929136][ T7944] bus_remove_device+0x43b/0x520 [ 141.934608][ T7944] device_del+0x51f/0x910 [ 141.939446][ T7944] __scsi_remove_device+0x1a2/0x390 [ 141.945151][ T7944] scsi_forget_host+0xd0/0x110 [ 141.950445][ T7944] scsi_remove_host+0x1b3/0x730 [ 141.955799][ T7944] virtscsi_remove+0x130/0x1a0 [ 141.961071][ T7944] virtio_dev_remove+0x96/0x1a0 [ 141.966432][ T7944] device_release_driver_internal+0x408/0x6f0 [ 141.973007][ T7944] bus_remove_device+0x43b/0x520 [ 141.978536][ T7944] device_del+0x51f/0x910 [ 141.983370][ T7944] device_unregister+0x20/0xc0 [ 141.988644][ T7944] unregister_virtio_device+0x37/0x60 [ 141.994528][ T7944] virtio_pci_remove+0x7f/0xf0 [ 141.999802][ T7944] pci_device_remove+0x93/0x1b0 [ 142.005160][ T7944] device_release_driver_internal+0x408/0x6f0 [ 142.011736][ T7944] pci_stop_bus_device+0x108/0x140 [ 142.017354][ T7944] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 142.024368][ T7944] remove_store+0xe6/0x150 [ 142.029294][ T7944] kernfs_fop_write_iter+0x3a4/0x520 [ 142.035085][ T7944] vfs_write+0x474/0x9a0 [ 142.039838][ T7944] ksys_write+0x151/0x260 [ 142.044682][ T7944] do_syscall_64+0x55/0xb0 [ 142.049609][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.056013][ T7944] [ 142.056013][ T7944] other info that might help us debug this: [ 142.056013][ T7944] [ 142.066223][ T7944] Chain exists of: [ 142.066223][ T7944] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 142.066223][ T7944] [ 142.079853][ T7944] Possible unsafe locking scenario: [ 142.079853][ T7944] [ 142.087284][ T7944] CPU0 CPU1 [ 142.092633][ T7944] ---- ---- [ 142.097986][ T7944] lock(&bdev->bd_holder_lock); [ 142.102908][ T7944] lock(bdev_lock); [ 142.109310][ T7944] lock(&bdev->bd_holder_lock); [ 142.116750][ T7944] rlock(&type->s_umount_key#31); [ 142.121848][ T7944] [ 142.121848][ T7944] *** DEADLOCK *** [ 142.121848][ T7944] [ 142.129977][ T7944] 9 locks held by syz.2.609/7944: [ 142.134982][ T7944] #0: ffff888077dfd748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 142.144204][ T7944] #1: ffff888066818418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 142.153072][ T7944] #2: ffff88805d82c888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 142.162815][ T7944] #3: ffffffff8e80a588 (pci_rescan_remove_lock){+.+.}-{3:3}, at: pci_stop_and_remove_bus_device_locked+0x12/0x30 [ 142.174818][ T7944] #4: ffff888146a4e1f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 142.185356][ T7944] #5: ffff88801a3061b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 142.195896][ T7944] #6: ffff888022b0c0e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 142.205802][ T7944] #7: ffff8881413cc3b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 142.216315][ T7944] #8: ffff8880210d4788 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 142.226314][ T7944] [ 142.226314][ T7944] stack backtrace: [ 142.232205][ T7944] CPU: 1 PID: 7944 Comm: syz.2.609 Not tainted syzkaller #0 [ 142.239490][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.249530][ T7944] Call Trace: [ 142.252799][ T7944] [ 142.255719][ T7944] dump_stack_lvl+0x18c/0x250 [ 142.260391][ T7944] ? load_image+0x420/0x420 [ 142.264880][ T7944] ? show_regs_print_info+0x20/0x20 [ 142.270068][ T7944] ? print_circular_bug+0x12b/0x1a0 [ 142.275257][ T7944] check_noncircular+0x2fc/0x400 [ 142.280186][ T7944] ? print_deadlock_bug+0x5d0/0x5d0 [ 142.285391][ T7944] ? lockdep_lock+0xf5/0x230 [ 142.289973][ T7944] ? _find_first_zero_bit+0xd6/0x100 [ 142.295248][ T7944] __lock_acquire+0x3a07/0x7eb0 [ 142.300097][ T7944] ? __lock_acquire+0x135d/0x7eb0 [ 142.305107][ T7944] ? verify_lock_unused+0x140/0x140 [ 142.310291][ T7944] ? verify_lock_unused+0x140/0x140 [ 142.315484][ T7944] ? find_lock_entries+0x120/0x1020 [ 142.320671][ T7944] lock_acquire+0x19e/0x420 [ 142.325164][ T7944] ? super_lock+0x189/0x390 [ 142.329654][ T7944] ? __might_sleep+0xe0/0xe0 [ 142.334232][ T7944] ? read_lock_is_recursive+0x20/0x20 [ 142.339602][ T7944] ? __mutex_trylock_common+0x160/0x270 [ 142.345135][ T7944] ? trace_raw_output_contention_end+0xd0/0xd0 [ 142.351273][ T7944] ? mapping_try_invalidate+0x4bf/0x570 [ 142.356813][ T7944] down_read+0x46/0x2e0 [ 142.360995][ T7944] ? super_lock+0x189/0x390 [ 142.365532][ T7944] super_lock+0x189/0x390 [ 142.369864][ T7944] ? xa_find_after+0xaf/0x430 [ 142.374537][ T7944] ? user_get_super+0x180/0x180 [ 142.379377][ T7944] ? mutex_lock_nested+0x20/0x20 [ 142.384311][ T7944] fs_bdev_mark_dead+0xad/0x1f0 [ 142.389156][ T7944] ? super_s_dev_set+0xa0/0xa0 [ 142.393906][ T7944] bdev_mark_dead+0x83/0x1a0 [ 142.398487][ T7944] ? blk_report_disk_dead+0x88/0x3e0 [ 142.403779][ T7944] blk_report_disk_dead+0x21c/0x3e0 [ 142.408966][ T7944] ? __blk_mark_disk_dead+0x120/0x120 [ 142.414331][ T7944] ? xa_find_after+0xaf/0x430 [ 142.419003][ T7944] del_gendisk+0x2cb/0x8f0 [ 142.423413][ T7944] ? blk_report_disk_dead+0x3e0/0x3e0 [ 142.428787][ T7944] ? __pm_runtime_resume+0x129/0x170 [ 142.434082][ T7944] sd_remove+0x8d/0x100 [ 142.438241][ T7944] ? sd_probe+0x11c0/0x11c0 [ 142.442743][ T7944] device_release_driver_internal+0x458/0x6f0 [ 142.448820][ T7944] bus_remove_device+0x43b/0x520 [ 142.453753][ T7944] ? bus_probe_device+0x260/0x260 [ 142.458768][ T7944] ? up_write+0x1be/0x410 [ 142.463112][ T7944] ? kernfs_remove_by_name_ns+0x117/0x150 [ 142.468822][ T7944] device_del+0x51f/0x910 [ 142.473160][ T7944] ? kill_device+0x160/0x160 [ 142.477737][ T7944] ? kobject_put+0x421/0x450 [ 142.482333][ T7944] __scsi_remove_device+0x1a2/0x390 [ 142.487522][ T7944] scsi_forget_host+0xd0/0x110 [ 142.492293][ T7944] scsi_remove_host+0x1b3/0x730 [ 142.497130][ T7944] virtscsi_remove+0x130/0x1a0 [ 142.501881][ T7944] virtio_dev_remove+0x96/0x1a0 [ 142.506723][ T7944] ? virtio_dev_probe+0xae0/0xae0 [ 142.511736][ T7944] device_release_driver_internal+0x408/0x6f0 [ 142.517807][ T7944] bus_remove_device+0x43b/0x520 [ 142.522747][ T7944] ? bus_probe_device+0x260/0x260 [ 142.527766][ T7944] ? up_write+0x1be/0x410 [ 142.532088][ T7944] ? kernfs_remove_by_name_ns+0x117/0x150 [ 142.537793][ T7944] device_del+0x51f/0x910 [ 142.542127][ T7944] ? kill_device+0x160/0x160 [ 142.546712][ T7944] ? pci_device_is_present+0x175/0x240 [ 142.552155][ T7944] ? pci_real_dma_dev+0x20/0x20 [ 142.556993][ T7944] device_unregister+0x20/0xc0 [ 142.561772][ T7944] unregister_virtio_device+0x37/0x60 [ 142.567142][ T7944] virtio_pci_remove+0x7f/0xf0 [ 142.571895][ T7944] pci_device_remove+0x93/0x1b0 [ 142.576732][ T7944] ? pci_device_probe+0x990/0x990 [ 142.581742][ T7944] device_release_driver_internal+0x408/0x6f0 [ 142.587804][ T7944] pci_stop_bus_device+0x108/0x140 [ 142.592902][ T7944] pci_stop_and_remove_bus_device_locked+0x1a/0x30 [ 142.599391][ T7944] remove_store+0xe6/0x150 [ 142.603803][ T7944] ? pci_dev_hp_attrs_are_visible+0xe0/0xe0 [ 142.609682][ T7944] ? __virt_addr_valid+0x10c/0x380 [ 142.614783][ T7944] ? sysfs_kf_write+0x187/0x2a0 [ 142.619629][ T7944] ? sysfs_kf_read+0x360/0x360 [ 142.624376][ T7944] kernfs_fop_write_iter+0x3a4/0x520 [ 142.629647][ T7944] vfs_write+0x474/0x9a0 [ 142.633882][ T7944] ? file_end_write+0x250/0x250 [ 142.638726][ T7944] ? __fget_files+0x3fc/0x460 [ 142.643397][ T7944] ? __fdget_pos+0x2a3/0x330 [ 142.647976][ T7944] ? ksys_write+0x74/0x260 [ 142.652410][ T7944] ksys_write+0x151/0x260 [ 142.656730][ T7944] ? __ia32_sys_read+0x90/0x90 [ 142.661485][ T7944] ? lockdep_hardirqs_on+0x98/0x150 [ 142.666676][ T7944] do_syscall_64+0x55/0xb0 [ 142.671081][ T7944] ? clear_bhb_loop+0x40/0x90 [ 142.675747][ T7944] ? clear_bhb_loop+0x40/0x90 [ 142.680415][ T7944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.686302][ T7944] RIP: 0033:0x7fbbf839f559 [ 142.690702][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.710296][ T7944] RSP: 002b:00007fbbf9349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.718704][ T7944] RAX: ffffffffffffffda RBX: 00007fbbf8625fa0 RCX: 00007fbbf839f559 [ 142.726662][ T7944] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 142.734629][ T7944] RBP: 00007fbbf8436b20 R08: 0000000000000000 R09: 0000000000000000 [ 142.742588][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.750545][ T7944] R13: 00007fbbf8626038 R14: 00007fbbf8625fa0 R15: 00007ffd4d69be08 [ 142.758530][ T7944] [ 142.766293][ T10] device offline error, dev sda, sector 318 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 2 [ 142.777124][ T10] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 142.785579][ T10] device offline error, dev sda, sector 1342 op 0x1:(WRITE) flags 0x103000 phys_seg 4 prio class 2 [ 142.811744][ T10] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 142.818862][ T7943] sctp: failed to load transform for md5: -2 [ 142.820345][ T10] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 142.834787][ T10] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 142.843284][ T42] EXT4-fs error (device sda1): ext4_check_bdev_write_error:225: comm kworker/u4:2: Error while async write back metadata [ 142.856745][ T10] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 142.865255][ T10] device offline error, dev sda, sector 1406 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 2 [ 142.876169][ T10] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 142.884692][ T10] device offline error, dev sda, sector 2078 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 2 [ 142.895554][ T10] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 142.904143][ T10] device offline error, dev sda, sector 2102 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 2 [ 142.914944][ T10] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 142.923429][ T10] device offline error, dev sda, sector 65990 op 0x1:(WRITE) flags 0x103000 phys_seg 2 prio class 2 [ 142.934326][ T10] Buffer I/O error on dev sda1, logical block 8210, lost async page write [ 142.934750][ T42] EXT4-fs error (device sda1): ext4_check_bdev_write_error:225: comm kworker/u4:2: Error while async write back metadata [ 142.942858][ T10] Buffer I/O error on dev sda1, logical block 8211, lost async page write [ 142.970613][ T10] device offline error, dev sda, sector 190110 op 0x1:(WRITE) flags 0x103000 phys_seg 1 prio class 2 [ 142.982045][ T10] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 142.992696][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 96294) [ 143.004257][ T10] Buffer I/O error on device sda1, logical block 96256 [ 143.013993][ T7941] EXT4-fs error (device sda1): ext4_check_bdev_write_error:225: comm syz.2.609: Error while async write back metadata [ 143.030336][ T10] device offline error, dev sda, sector 778470 op 0x1:(WRITE) flags 0x0 phys_seg 10 prio class 2 [ 143.047960][ T7952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.052593][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 97308) [ 143.072695][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 97313) [ 143.073185][ T11] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 143.084184][ T10] Buffer I/O error on device sda1, logical block 97275 [ 143.084212][ T10] Buffer I/O error on device sda1, logical block 97276 [ 143.084226][ T10] Buffer I/O error on device sda1, logical block 97277 [ 143.084239][ T10] Buffer I/O error on device sda1, logical block 97278 [ 143.084252][ T10] Buffer I/O error on device sda1, logical block 97279 [ 143.084297][ T10] device offline error, dev sda, sector 782502 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 143.142644][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2030 starting block 97812) [ 143.154218][ T10] Buffer I/O error on device sda1, logical block 97774 [ 143.161708][ T10] Buffer I/O error on device sda1, logical block 97775 [ 143.168699][ T10] Buffer I/O error on device sda1, logical block 97776 [ 143.175647][ T10] Buffer I/O error on device sda1, logical block 97777 [ 143.182653][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 102438) [ 143.194343][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103461) [ 143.206017][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2035 starting block 103965) [ 143.207373][ T42] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90310) [ 143.217776][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90157) [ 143.240718][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90170) [ 143.346056][ T1329] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 143.385215][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.434986][ T5114] Aborting journal on device sda1-8. [ 143.447853][ T5114] JBD2: I/O error when updating journal superblock for sda1-8. [ 143.544311][ T27] audit: type=1800 audit(1792744370.664:170): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd-run-hook" name="dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 143.593427][ T27] audit: type=1800 audit(1792744370.664:171): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="dhcpcd.conf" dev="sda1" ino=125 res=0 errno=0 [ 143.597894][ T7944] EXT4-fs (sda1): shut down requested (2) [ 143.636630][ T27] audit: type=1800 audit(1792744370.684:172): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="dhcpcd.conf" dev="sda1" ino=125 res=0 errno=0 [ 143.681497][ T27] audit: type=1800 audit(1792744370.704:173): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="dhcpcd.conf" dev="sda1" ino=125 res=0 errno=0 [ 143.721182][ T7944] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 143.727923][ T27] audit: type=1800 audit(1792744370.744:174): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="dhcpcd.conf" dev="sda1" ino=125 res=0 errno=0