last executing test programs: 7m55.569428437s ago: executing program 3 (id=745): openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7m55.300535734s ago: executing program 3 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001940)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) 7m54.766050628s ago: executing program 3 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 7m54.421466923s ago: executing program 3 (id=752): syz_mount_image$ext4(&(0x7f0000007380)='ext4\x00', &(0x7f00000073c0)='./file0\x00', 0x1008002, &(0x7f0000007400)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000007440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000007a40)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000007a80)='./file0\x00', &(0x7f0000007ac0), &(0x7f0000007b00), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80), 0x8, &(0x7f0000007bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 7m52.847961244s ago: executing program 3 (id=756): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000200)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x487, &(0x7f0000000380)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) setsockopt(r0, 0x0, 0x487, &(0x7f0000000400)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100510000000000000100"/68, 0x44) 7m51.744982887s ago: executing program 3 (id=762): r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat2(r1, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x8100, 0x0, 0x21}, 0x18) 7m51.211883081s ago: executing program 32 (id=762): r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat2(r1, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x8100, 0x0, 0x21}, 0x18) 3m34.156414807s ago: executing program 1 (id=2376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m33.795355274s ago: executing program 1 (id=2380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={r1, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) 3m33.53503257s ago: executing program 1 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0xc]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x8040) 3m33.260391239s ago: executing program 1 (id=2385): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 3m32.981021327s ago: executing program 1 (id=2389): syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010fa4020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x40) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) 3m32.608390535s ago: executing program 1 (id=2391): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x17, &(0x7f0000000640)={[{@inline_xattr}, {@nobarrier}, {@gc_merge}, {@alloc_mode_reuse}, {@gc_merge}, {@nogc_merge}, {@discard_unit_section}, {@norecovery}, {@checkpoint_enable}, {@user_xattr}, {@block_mode}, {@noextent_cache}, {@background_gc_off}, {@segment_mode}]}, 0x1, 0x5517, &(0x7f00000079c0)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='mounts\x00') read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 3m32.377247228s ago: executing program 33 (id=2391): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x17, &(0x7f0000000640)={[{@inline_xattr}, {@nobarrier}, {@gc_merge}, {@alloc_mode_reuse}, {@gc_merge}, {@nogc_merge}, {@discard_unit_section}, {@norecovery}, {@checkpoint_enable}, {@user_xattr}, {@block_mode}, {@noextent_cache}, {@background_gc_off}, {@segment_mode}]}, 0x1, 0x5517, &(0x7f00000079c0)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='mounts\x00') read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 3m21.774728189s ago: executing program 4 (id=2440): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) connect$x25(r0, &(0x7f0000000a80), 0x12) 3m21.452642362s ago: executing program 4 (id=2443): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040da059a000001010203010902270001010080320904000003ff000000070501024000000705820240000007058302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)) syz_usb_disconnect(r0) 3m18.161000768s ago: executing program 4 (id=2449): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f00000006c0)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,nodots,nodots,dots,nodots,nodots,check=relaxed,fmask=00000000000000000177777,nodots,quiet,showexec,nodots,nodots,dots,umask=00000000000000000076645,check=s|ristale_rw,nodots,\x00'/204], 0x1, 0x206, &(0x7f0000000480)="$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") syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4010, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8=0x0, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a7) 3m17.15910059s ago: executing program 4 (id=2454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x2263}}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid}, {@discard}, {@utf8}, {@discard}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@time_offset={'time_offset', 0x3d, 0x7}}]}, 0x2, 0x1536, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) 3m16.454968172s ago: executing program 4 (id=2457): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x4004, &(0x7f0000000140)={[{@adaptive_mode}, {@jqfmt_vfsold}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@flush_merge}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@noinline_xattr}, {@discard_unit_segment}, {@inline_xattr}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5544, &(0x7f000000f400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000014980)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000149c0)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000014a80)='./bus\x00', &(0x7f0000014ac0), 0x8, &(0x7f0000014b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m15.796014619s ago: executing program 4 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 3m14.871197163s ago: executing program 34 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2m49.957108153s ago: executing program 6 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x38, r1, 0x1, 0x70bd30, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "aae9"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 2m49.770592182s ago: executing program 6 (id=2554): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0137ff"], 0x27) 2m49.435904107s ago: executing program 6 (id=2556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x99, 0x0, 0x0, 0x0}, {0xffff, 0x0, 0x0, 0x0}, {0x5, 0xa00, 0x0, 0x0}], 0x3}) 2m47.396735394s ago: executing program 6 (id=2567): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000008c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) removexattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', 'syz_tun\x00'}) 2m46.022318034s ago: executing program 6 (id=2572): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x381040, 0x0) 2m44.338983746s ago: executing program 6 (id=2578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) 2m43.281865114s ago: executing program 35 (id=2578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="043e130100c900", @ANYRES32=r0], 0x16) 5.795638569s ago: executing program 0 (id=3521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x4bc}], 0x1}, 0x3e8) 5.463196903s ago: executing program 0 (id=3523): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x0, 0xe, 0x7}, 0x9, 0x1) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.489047244s ago: executing program 0 (id=3539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x6e20, 0x6, @remote, 0x7}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1}, &(0x7f0000000180)=0x8) 2.167199879s ago: executing program 2 (id=3549): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x47) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r1, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 1.999520386s ago: executing program 5 (id=3550): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000480)={0x0}) 1.952726341s ago: executing program 2 (id=3551): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800006, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) copy_file_range(r0, 0x0, r0, &(0x7f0000000140)=0x101, 0x5, 0x0) 1.853225721s ago: executing program 0 (id=3552): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000540)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.686421248s ago: executing program 2 (id=3554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='- 1 3 0 1 1', 0xb) 1.597954547s ago: executing program 7 (id=3555): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) 1.521160115s ago: executing program 0 (id=3556): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000002d00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRES64], 0x3, 0x306, &(0x7f0000000400)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 1.484770219s ago: executing program 5 (id=3557): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4555, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1.452276322s ago: executing program 2 (id=3558): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000200)) 1.357352551s ago: executing program 7 (id=3559): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)='1', 0x1}, {&(0x7f0000000640)="da", 0x1}], 0x2) 1.210271797s ago: executing program 0 (id=3560): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.105144097s ago: executing program 5 (id=3561): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000240)=""/168, 0xa8, 0x8e) 1.007341317s ago: executing program 7 (id=3562): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800094, &(0x7f0000000240)={[{@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}]}, 0x41, 0x31f, &(0x7f0000000280)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='./bus\x00', 0x27841e, 0x0, 0x4, 0x0, &(0x7f0000000f00)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f80)='.\x00', 0x1a5a438, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="7e38586ccb5053", @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000001040)) rmdir(&(0x7f0000001080)='./bus\x00') 784.99799ms ago: executing program 5 (id=3563): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 544.813834ms ago: executing program 7 (id=3564): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) 453.189264ms ago: executing program 5 (id=3565): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 316.618837ms ago: executing program 2 (id=3566): syz_io_uring_setup(0x123e, &(0x7f0000000140)={0x0, 0xf8f3, 0x600, 0x1, 0x125}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 214.000288ms ago: executing program 7 (id=3567): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f00000005c0)="68695693fbdd93d9c8eabea2223ec0879f76007982a78708dd6653864139c546a4459363a02922e8", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 168.381613ms ago: executing program 5 (id=3568): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0) 49.176815ms ago: executing program 2 (id=3569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 0s ago: executing program 7 (id=3570): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): .050:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 539.772623][ T4067] hsr_slave_1: left promiscuous mode [ 539.865942][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.890683][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.911619][ T28] audit: type=1326 audit(1793251050.050:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 539.935684][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.949284][T13564] loop5: detected capacity change from 0 to 256 [ 539.989077][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.996531][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.115991][ T28] audit: type=1326 audit(1793251050.070:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.140045][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.173291][ T4067] bridge_slave_1: left allmulticast mode [ 540.192897][ T5098] Bluetooth: hci2: command tx timeout [ 540.201964][ T4067] bridge_slave_1: left promiscuous mode [ 540.229242][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.260009][ T28] audit: type=1326 audit(1793251050.070:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.287444][ T4067] bridge_slave_0: left allmulticast mode [ 540.315097][ T4067] bridge_slave_0: left promiscuous mode [ 540.342002][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.409967][ T28] audit: type=1326 audit(1793251050.070:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.537941][ T4067] veth1_macvtap: left promiscuous mode [ 540.551356][ T28] audit: type=1326 audit(1793251050.070:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.590811][ T4067] veth0_macvtap: left promiscuous mode [ 540.617205][ T4067] veth1_vlan: left promiscuous mode [ 540.636859][ T4067] veth0_vlan: left promiscuous mode [ 540.654543][T13572] ip_tables: iptables: counters copy to user failed while replacing table [ 540.679717][ T28] audit: type=1326 audit(1793251050.070:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.703829][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.738024][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 540.860665][ T28] audit: type=1326 audit(1793251050.070:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 540.884761][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.030622][ T28] audit: type=1326 audit(1793251050.070:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.2602" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd75f9f559 code=0x7ffc0000 [ 541.054660][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.076704][T13577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 541.919775][T13580] loop5: detected capacity change from 0 to 32768 [ 542.270561][ T5098] Bluetooth: hci2: command tx timeout [ 543.216534][T13599] loop0: detected capacity change from 0 to 256 [ 543.598249][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 543.621280][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 543.655481][T13597] loop5: detected capacity change from 0 to 32768 [ 543.752482][T13597] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 543.894973][T13597] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 543.969054][T13597] XFS (loop5): Starting recovery (logdev: internal) [ 544.026435][T13597] XFS (loop5): Ending recovery (logdev: internal) [ 544.081969][T13597] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 544.129668][T13597] XFS (loop5): Unmount and run xfs_repair [ 544.290813][T12790] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 544.352899][ T5098] Bluetooth: hci2: command tx timeout [ 544.488762][ T4067] team0 (unregistering): Port device team_slave_1 removed [ 544.810295][ T4067] team0 (unregistering): Port device team_slave_0 removed [ 545.106509][ T4067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.347305][ T4067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.359378][T13634] loop5: detected capacity change from 0 to 256 [ 545.411994][T13634] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 545.674098][T13637] loop5: detected capacity change from 0 to 256 [ 545.713392][T13637] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.376938][ T4067] bond0 (unregistering): Released all slaves [ 546.753574][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.860515][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.901777][T13486] bridge_slave_0: entered allmulticast mode [ 546.967372][T13486] bridge_slave_0: entered promiscuous mode [ 547.014654][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.060237][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.101353][T13486] bridge_slave_1: entered allmulticast mode [ 547.138971][T13486] bridge_slave_1: entered promiscuous mode [ 547.285748][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.384855][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.652909][T13486] team0: Port device team_slave_0 added [ 547.699230][T13486] team0: Port device team_slave_1 added [ 547.759506][ T5876] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 547.876403][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.919374][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.012317][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.033719][ T5876] usb 3-1: config 0 has no interface number 0 [ 548.052517][T13652] loop0: detected capacity change from 0 to 32768 [ 548.072546][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.087523][ T5876] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 548.110922][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.172537][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.191302][ T5876] usb 3-1: Product: syz [ 548.199982][T13652] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 548.230011][ T5876] usb 3-1: Manufacturer: syz [ 548.244511][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.276683][ T5876] usb 3-1: SerialNumber: syz [ 548.287713][T13652] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 548.316750][ T5876] usb 3-1: config 0 descriptor?? [ 548.410905][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.562520][ T5876] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 548.602648][T13652] XFS (loop0): Ending clean mount [ 548.641460][ T5876] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 548.654938][T13652] XFS (loop0): Quotacheck needed: Please wait. [ 548.724187][ T5876] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 548.762984][T13658] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 548.797135][ T5876] usb 3-1: media controller created [ 548.845227][T13486] hsr_slave_0: entered promiscuous mode [ 548.877197][T13652] XFS (loop0): Quotacheck: Done. [ 548.892667][T13486] hsr_slave_1: entered promiscuous mode [ 548.912072][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.077443][ T5876] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 549.185299][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 549.342594][ T5876] usb 3-1: USB disconnect, device number 25 [ 550.093934][T13486] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 550.203729][T13486] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.262327][T13486] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.293651][T13693] device-mapper: raid: Choosing default region size of 4MiB [ 550.327643][T13486] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 550.344057][T13693] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 550.496345][T13697] loop0: detected capacity change from 0 to 4096 [ 550.699420][T13693] md/raid10:mdX: unsupported raid10 layout: 0x 0 [ 550.709047][T13700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.746336][T13683] loop5: detected capacity change from 0 to 32768 [ 550.770728][T13693] md: pers->run() failed ... [ 550.865232][T13683] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 550.920402][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.062869][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.074008][T13693] device-mapper: table: 248:5: raid: Failed to run raid array (-EINVAL) [ 551.157223][T13693] device-mapper: ioctl: error adding target to table [ 551.200611][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.207899][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.244512][ T5803] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 551.268583][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.275765][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.609092][T13708] macvtap1: entered promiscuous mode [ 551.614468][T13708] macvtap1: entered allmulticast mode [ 551.671016][T13708] veth0_to_batadv: entered promiscuous mode [ 551.697983][T13708] veth0_to_batadv: entered allmulticast mode [ 551.775941][T13708] team0: Device macvtap1 failed to register rx_handler [ 551.831721][T13708] veth0_to_batadv: left allmulticast mode [ 551.860893][T13708] veth0_to_batadv: left promiscuous mode [ 552.498113][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 552.731528][T13736] loop5: detected capacity change from 0 to 512 [ 552.806925][T13736] FAT-fs (loop5): bogus logical sector size 1 [ 552.823038][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.861246][T13736] FAT-fs (loop5): Can't find a valid FAT filesystem [ 552.939487][T13042] kernel write not supported for file /input/event0 (pid: 13042 comm: kworker/0:7) [ 554.007444][T13042] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 554.159762][T13486] veth0_vlan: entered promiscuous mode [ 554.230868][T13042] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 554.242582][T13486] veth1_vlan: entered promiscuous mode [ 554.278155][T13042] usb 6-1: config 0 has no interface number 0 [ 554.316527][T13042] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.397486][T13042] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 554.423729][T13486] veth0_macvtap: entered promiscuous mode [ 554.447547][T13042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.486305][T13486] veth1_macvtap: entered promiscuous mode [ 554.502574][T13042] usb 6-1: Product: syz [ 554.506790][T13042] usb 6-1: Manufacturer: syz [ 554.545962][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.572280][T13042] usb 6-1: SerialNumber: syz [ 554.610765][T13042] usb 6-1: config 0 descriptor?? [ 554.636295][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.657440][T13042] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 554.701841][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.766971][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.810531][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.866035][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.888909][ T5876] usb 6-1: USB disconnect, device number 4 [ 554.915793][ T5876] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 554.943579][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.011300][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.053183][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.098545][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.125966][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.145226][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.163100][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.190861][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.238623][T13486] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.262617][T13795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2676'. [ 555.275678][T13486] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.290406][T13486] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.312968][T13486] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.664412][ T4067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.737252][ T4067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.844652][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.928830][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.490350][T13821] program syz.7.2579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.897303][T13834] tun0: tun_chr_ioctl cmd 35111 [ 556.960153][T13837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.142800][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2691'. [ 557.433351][T13851] loop0: detected capacity change from 0 to 16 [ 557.478403][T13851] erofs: Bad value for 'cache_strategy' [ 557.783429][T13860] netlink: 'syz.7.2698': attribute type 12 has an invalid length. [ 557.830556][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2698'. [ 558.490640][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2708'. [ 558.521336][T13885] macvlan0: entered promiscuous mode [ 558.545911][T13885] netlink: 'syz.7.2708': attribute type 2 has an invalid length. [ 559.415652][T13908] loop5: detected capacity change from 0 to 1024 [ 559.495370][ T5876] IPVS: starting estimator thread 0... [ 559.513992][T13908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 559.601671][T13908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 559.638089][T13914] IPVS: using max 26 ests per chain, 62400 per kthread [ 559.700212][T13908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 559.779069][T13908] System zones: 0-1, 3-36 [ 559.829562][T13908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.929402][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 560.000719][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 560.155925][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.805634][T13943] loop5: detected capacity change from 0 to 32768 [ 561.995968][T13943] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 562.203698][T13943] XFS (loop5): Ending clean mount [ 562.297288][ T5876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 562.462792][T13979] loop0: detected capacity change from 0 to 164 [ 562.519509][T13981] binder: 13980:13981 ioctl 40046205 0 returned -22 [ 562.551245][ T5876] usb 8-1: unable to get BOS descriptor or descriptor too short [ 562.594639][ T5876] usb 8-1: too many configurations: 170, using maximum allowed: 8 [ 562.615725][T12790] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 562.667281][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.716451][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.773187][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.822860][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.889575][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.929769][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.973444][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 563.006646][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 563.049148][ T5876] usb 8-1: New USB device found, idVendor=0499, idProduct=c169, bcdDevice=9f.32 [ 563.073121][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.100074][ T5876] usb 8-1: New USB device strings: Mfr=203, Product=85, SerialNumber=198 [ 563.131417][ T5876] usb 8-1: Product: syz [ 563.146820][ T5876] usb 8-1: Manufacturer: syz [ 563.180046][ T5876] usb 8-1: SerialNumber: syz [ 563.454780][ T5876] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 563.586770][ T5876] usb 8-1: USB disconnect, device number 2 [ 563.676611][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.799729][T14007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2742'. [ 563.875182][T14007] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 564.993809][T14033] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2751'. [ 565.044799][T14033] netlink: 'syz.7.2751': attribute type 9 has an invalid length. [ 565.089341][T14033] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2751'. [ 565.136087][T14033] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2751'. [ 565.621439][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'. [ 565.953492][T14061] loop0: detected capacity change from 0 to 1024 [ 566.078735][T14061] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 566.123236][T14061] hfsplus: xattr search failed [ 566.276600][ T4545] hfsplus: b-tree write err: -5, ino 25 [ 566.308819][ T4545] hfsplus: b-tree write err: -5, ino 4 [ 566.366123][ T4545] hfsplus: b-tree write err: -5, ino 2 [ 566.385877][ T4545] hfsplus: b-tree write err: -5, ino 28 [ 566.624690][T14045] loop7: detected capacity change from 0 to 32768 [ 566.828417][T14045] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 567.046284][T14045] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 567.192607][T14045] XFS (loop7): Starting recovery (logdev: internal) [ 567.395743][T14045] XFS (loop7): Ending recovery (logdev: internal) [ 567.443532][T14100] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2770'. [ 567.611475][T14045] XFS (loop7): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 567.703400][T14045] XFS (loop7): Unmount and run xfs_repair [ 567.973168][T13486] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 568.390593][T14123] loop0: detected capacity change from 0 to 1024 [ 568.518487][T14123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 568.628403][T14123] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.775735][T14123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2778: bg 0: block 112: padding at end of block bitmap is not set [ 569.017712][T14123] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 569.107361][T14123] EXT4-fs (loop0): This should not happen!! Data will be lost [ 569.107361][T14123] [ 569.178533][T14123] EXT4-fs (loop0): Total free blocks count 0 [ 569.184589][T14123] EXT4-fs (loop0): Free/Dirty block details [ 569.246550][T14123] EXT4-fs (loop0): free_blocks=0 [ 569.291234][T14123] EXT4-fs (loop0): dirty_blocks=16 [ 569.296460][T14123] EXT4-fs (loop0): Block reservation details [ 569.380058][T14123] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 569.553791][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 570.442019][T14171] loop0: detected capacity change from 0 to 1024 [ 571.095505][T14181] loop7: detected capacity change from 0 to 2048 [ 571.205537][T14181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.926997][T14202] rxe_eth0 speed is unknown, defaulting to 1000 [ 571.943579][T14207] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„¾q6•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 572.498928][T14205] loop0: detected capacity change from 0 to 8192 [ 574.233436][T14255] loop5: detected capacity change from 0 to 512 [ 574.430814][T14255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.538078][T14255] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.255397][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.425530][T14250] loop0: detected capacity change from 0 to 32768 [ 575.527864][T14250] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 575.747245][ T5876] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 575.778438][T14276] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 575.844596][ T6601] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 575.978484][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 576.032435][T14282] loop0: detected capacity change from 0 to 512 [ 576.067241][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.167125][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 576.186018][T14282] EXT4-fs (loop0): orphan cleanup on readonly fs [ 576.251134][T14282] __quota_error: 9 callbacks suppressed [ 576.251146][T14282] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 576.295073][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 576.384029][ T5876] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 576.403620][T14282] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 576.468445][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.501519][T14282] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2827: Failed to acquire dquot type 0 [ 576.563609][ T5876] usb 3-1: Product: syz [ 576.597877][ T5876] usb 3-1: Manufacturer: syz [ 576.633109][T14282] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 576.653295][ T5876] usb 3-1: SerialNumber: syz [ 576.706450][ T5876] usb 3-1: config 0 descriptor?? [ 576.721814][T14282] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 576.832238][T14282] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2827: Failed to acquire dquot type 0 [ 576.950974][T14282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2827: bg 0: block 64: padding at end of block bitmap is not set [ 577.031512][ T5876] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 577.075438][T14282] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 577.177488][T14282] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 577.233076][T14273] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 577.264051][T14282] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 577.306652][ T9] usb 3-1: USB disconnect, device number 26 [ 577.329520][T14282] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2827: Failed to acquire dquot type 0 [ 577.408382][T14282] EXT4-fs (loop0): 1 orphan inode deleted [ 577.463541][T14282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 577.550645][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.567724][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 577.575404][ T5851] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 577.781005][ T5851] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 577.803706][ T5876] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 577.842721][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 577.852154][ T5876] usb 6-1: config 0 has no interface number 0 [ 577.888040][ T5876] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.904392][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 577.958735][T14307] cgroup: fork rejected by pids controller in /syz0 [ 577.966877][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 577.988583][ T5876] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 578.012584][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.030752][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.061176][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.083378][ T5876] usb 6-1: Product: syz [ 578.104076][ T5876] usb 6-1: Manufacturer: syz [ 578.133058][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 578.144545][ T5876] usb 6-1: SerialNumber: syz [ 578.184793][ T5876] usb 6-1: config 0 descriptor?? [ 578.195596][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.259112][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.291069][ T5876] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 578.321574][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 578.384605][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.464472][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.546803][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 578.593183][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.647414][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.704936][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 578.754023][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 578.798140][ T5791] batman_adv: batadv0: Interface deactivated: syz_tun [ 578.825382][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 578.912673][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 578.942233][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.032451][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.106017][ T5791] batman_adv: batadv0: Removing interface: syz_tun [ 579.122614][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 579.167992][ T5851] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.201218][ T5851] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.279582][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 579.341193][ T5851] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 579.391917][ T5851] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 579.459457][ T5851] usb 8-1: Product: syz [ 579.491306][ T5851] usb 8-1: Manufacturer: syz [ 579.533116][ T5851] usb 8-1: SerialNumber: syz [ 579.600878][ T5851] usb 8-1: config 0 descriptor?? [ 579.685592][ T5851] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 579.952949][ T5851] usb 8-1: USB disconnect, device number 3 [ 580.000581][T10182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.250253][ T5851] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 580.547516][ T9] usb 6-1: USB disconnect, device number 5 [ 580.591481][ T9] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 581.023113][T10182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.261644][T14337] bond0: entered promiscuous mode [ 581.291561][T14337] bond_slave_0: entered promiscuous mode [ 581.324051][T14337] bond_slave_1: entered promiscuous mode [ 581.758974][T10182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.122195][T10182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.186025][T14350] loop5: detected capacity change from 0 to 8192 [ 582.248872][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 582.264941][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 582.275889][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 582.284235][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.306191][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 582.315876][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.535601][T14359] rxe_eth0 speed is unknown, defaulting to 1000 [ 582.837258][T14370] loop7: detected capacity change from 0 to 164 [ 583.059379][T14370] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 583.864310][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2855'. [ 584.116577][T14395] loop7: detected capacity change from 0 to 512 [ 584.191913][T14395] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 584.217212][ T5851] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 584.347891][ T5797] Bluetooth: hci1: command tx timeout [ 584.443233][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.499310][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.564215][ T5851] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 584.630182][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.710355][ T5851] usb 3-1: config 0 descriptor?? [ 585.145176][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.199884][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.258667][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.296384][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.352987][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.404496][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.436307][ T5851] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 585.505462][ T5851] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 585.716383][T14425] loop5: detected capacity change from 0 to 164 [ 585.832816][T14429] loop7: detected capacity change from 0 to 512 [ 585.891299][T14425] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 585.925934][ T5876] usb 3-1: USB disconnect, device number 27 [ 585.977417][T14429] EXT4-fs (loop7): Test dummy encryption mode enabled [ 585.984372][T14429] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 586.090467][T14425] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 586.178533][T14425] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 586.186537][T14429] EXT4-fs (loop7): 1 truncate cleaned up [ 586.214839][T14429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.311232][T14359] chnl_net:caif_netlink_parms(): no params data found [ 586.428405][ T5797] Bluetooth: hci1: command tx timeout [ 586.511028][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.150838][T14451] loop7: detected capacity change from 0 to 512 [ 587.287833][T14451] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 587.355430][T10182] geneve1: left promiscuous mode [ 587.414665][T10182] batadv_slave_0: left promiscuous mode [ 587.473273][T14451] EXT4-fs (loop7): 1 truncate cleaned up [ 587.492933][T14445] device-mapper: table: 248:6: crypt: Error decoding and setting key (-EINVAL) [ 587.523720][T14451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.538309][T10182] hsr_slave_0: left promiscuous mode [ 587.574334][T14445] device-mapper: ioctl: error adding target to table [ 587.590781][T10182] hsr_slave_1: left promiscuous mode [ 587.649279][T10182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.688219][T10182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.727144][ T28] audit: type=1800 audit(1793251098.190:92): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2873" name="file3" dev="loop7" ino=16 res=0 errno=0 [ 587.788488][T10182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.795973][T10182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.861387][T10182] bridge_slave_1: left promiscuous mode [ 587.902804][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.991135][T10182] bridge_slave_0: left allmulticast mode [ 587.996845][T10182] bridge_slave_0: left promiscuous mode [ 588.081686][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.261181][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.328223][T10182] veth1_macvtap: left promiscuous mode [ 588.333807][T10182] veth0_macvtap: left promiscuous mode [ 588.394317][T10182] veth1_vlan: left promiscuous mode [ 588.425478][T10182] veth0_vlan: left promiscuous mode [ 588.508013][ T5797] Bluetooth: hci1: command tx timeout [ 588.817152][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 589.054121][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.081753][T10182] bond1 (unregistering): Released all slaves [ 589.101934][ T9] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.150765][ T9] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 589.204831][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.232448][ T9] usb 8-1: Product: syz [ 589.252444][ T9] usb 8-1: Manufacturer: syz [ 589.287433][ T9] usb 8-1: SerialNumber: syz [ 589.306870][T14475] loop5: detected capacity change from 0 to 32768 [ 589.321846][ T9] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 589.411900][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 589.429066][T14475] JBD2: Ignoring recovery information on journal [ 589.484702][ T9] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 589.577786][T14475] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 589.856179][T14475] (syz.5.2879,14475,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 589.919191][T14475] (syz.5.2879,14475,0):update_backups:188 ERROR: status = -12 [ 589.962797][T14475] ocfs2: Failed to update super blocks on 7,5 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 590.047475][T14483] vhci_hcd vhci_hcd.0: failed to lookup sock [ 590.349882][T12790] ocfs2: Unmounting device (7,5) on (node local) [ 590.589717][ T5797] Bluetooth: hci1: command tx timeout [ 590.673784][T14477] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 590.711878][T14477] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 590.765078][T14477] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 590.811210][T14477] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 590.989412][ T9] usb 8-1: USB disconnect, device number 4 [ 591.027859][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 591.105772][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 591.159558][ T9] ti_usb_3410_5052 8-1:2.0: device disconnected [ 592.391777][T10182] veth1_to_hsr (unregistering): left allmulticast mode [ 593.162275][T14501] loop5: detected capacity change from 0 to 32768 [ 593.221023][T14501] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2890 (14501) [ 593.336250][T14501] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 593.407117][T14501] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 593.416406][T14501] BTRFS info (device loop5): using free space tree [ 593.633121][T10182] team0 (unregistering): Port device team_slave_1 removed [ 593.699572][T14511] loop7: detected capacity change from 0 to 32768 [ 593.706329][T14501] BTRFS info (device loop5): enabling ssd optimizations [ 593.756434][T14501] BTRFS info (device loop5): auto enabling async discard [ 593.824289][T14511] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.046293][T14511] XFS (loop7): Ending clean mount [ 594.070922][T14511] XFS (loop7): Quotacheck needed: Please wait. [ 594.179461][T12790] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 594.222798][T10182] team0 (unregistering): Port device team_slave_0 removed [ 594.347430][T14511] XFS (loop7): Quotacheck: Done. [ 594.758449][ T6601] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop5 scanned by udevd (6601) [ 594.820566][T13486] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 594.875482][T10182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.314312][T10182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.534551][T14553] loop7: detected capacity change from 0 to 512 [ 596.553383][T14553] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 596.677930][T14553] EXT4-fs (loop7): 1 truncate cleaned up [ 596.688867][T14553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.019969][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.438223][T14562] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 597.451709][T10182] bond0 (unregistering): Released all slaves [ 597.772133][T14359] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.833406][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.883242][T14359] bridge_slave_0: entered allmulticast mode [ 597.929977][T14359] bridge_slave_0: entered promiscuous mode [ 597.954458][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.002834][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.064127][T14359] bridge_slave_1: entered allmulticast mode [ 598.099959][T14359] bridge_slave_1: entered promiscuous mode [ 598.289387][T14359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.360072][T14359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.572432][T14359] team0: Port device team_slave_0 added [ 598.699215][T14359] team0: Port device team_slave_1 added [ 598.921554][T14359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.947408][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.057103][T14359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.110980][T14359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.141991][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.252747][T14359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.418450][T14359] hsr_slave_0: entered promiscuous mode [ 599.437872][T14359] hsr_slave_1: entered promiscuous mode [ 599.460019][T14359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.497126][T14359] Cannot create hsr debugfs directory [ 599.766293][T14587] loop5: detected capacity change from 0 to 40427 [ 599.839506][T14587] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 599.846031][T14587] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 599.921675][T14587] F2FS-fs (loop5): invalid crc value [ 600.235995][T14587] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 600.274160][T14587] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 600.490057][T12790] syz-executor: attempt to access beyond end of device [ 600.490057][T12790] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 600.533837][T14607] tipc: New replicast peer: 127.0.0.1 [ 600.560107][T14607] tipc: Enabled bearer , priority 10 [ 600.588388][T12790] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 601.182986][T14359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 601.276252][T14359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 601.380775][T14359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 601.439681][T14359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 601.842419][T14359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.996376][T14359] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.108559][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.115711][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.238809][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.245968][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.630019][T14359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.302707][T14655] loop5: detected capacity change from 0 to 64 [ 603.324292][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2931'. [ 603.410357][T14655] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 603.615993][T14359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.890147][T14663] loop5: detected capacity change from 0 to 256 [ 603.901923][T14359] veth0_vlan: entered promiscuous mode [ 603.955989][T14663] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 604.066768][T14359] veth1_vlan: entered promiscuous mode [ 604.241836][T14359] veth0_macvtap: entered promiscuous mode [ 604.322519][T14359] veth1_macvtap: entered promiscuous mode [ 604.463148][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.513875][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.562427][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.607367][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.639893][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.697226][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.744341][T14359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.791794][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.837109][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.873075][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.917160][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.957094][T14359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.997111][T14359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.039328][T14359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.089946][T14359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.127204][T14359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.135963][T14359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.189264][T14359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.473985][T10182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.520908][T10182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.608626][T10182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.631586][T10182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.876717][ T28] audit: type=1400 audit(1793251116.340:93): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=14689 comm="syz.0.2839" name=":" offset=33 [ 606.051910][T14693] loop5: detected capacity change from 0 to 128 [ 606.129993][T14696] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2941'. [ 606.303138][T14700] loop7: detected capacity change from 0 to 128 [ 606.833582][T14700] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.125136][T14700] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.747992][T13486] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.310564][T14744] loop0: detected capacity change from 0 to 64 [ 608.432961][ T28] audit: type=1800 audit(1793251118.900:94): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2953" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 609.706007][T14764] loop5: detected capacity change from 0 to 4096 [ 609.777290][T14764] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 610.357388][ T5851] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 610.614812][ T5851] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.706117][ T5851] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 610.757754][T14785] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.775868][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.865307][ T5851] as10x_usb: device has been detected [ 610.913937][ T5851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 611.059422][ T5851] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 611.234522][ T5098] Bluetooth: hci0: command 0x0406 tx timeout [ 611.326844][ T5851] as10x_usb: error during firmware upload part1 [ 611.397579][ T5851] Registered device Abilis Systems DVB-Titan [ 611.657216][T13042] usb 1-1: USB disconnect, device number 23 [ 611.824501][T13042] Unregistered device Abilis Systems DVB-Titan [ 611.830724][T13042] as10x_usb: device has been disconnected [ 612.257326][ T5876] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 612.487305][ T5876] usb 8-1: Using ep0 maxpacket: 32 [ 612.520231][ T5876] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 612.541832][T14790] loop5: detected capacity change from 0 to 40427 [ 612.568890][ T5876] usb 8-1: config 0 has no interface number 0 [ 612.606091][T14790] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 612.620894][ T5876] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 612.671844][T14790] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 612.689492][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.734755][T14790] F2FS-fs (loop5): invalid crc value [ 612.741180][ T5876] usb 8-1: Product: syz [ 612.770493][T14790] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 612.779605][ T5876] usb 8-1: Manufacturer: syz [ 612.808773][ T5876] usb 8-1: SerialNumber: syz [ 612.852361][ T5876] usb 8-1: config 0 descriptor?? [ 612.883730][T14790] F2FS-fs (loop5): Found nat_bits in checkpoint [ 612.894471][ T5876] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 613.123886][ T5876] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 613.223400][T14790] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 613.239182][ T5876] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 613.299985][T14790] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 613.315584][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 114 [ 613.612330][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 613.628025][T13042] usb 8-1: USB disconnect, device number 5 [ 613.676446][T13042] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 613.700285][T12790] syz-executor: attempt to access beyond end of device [ 613.700285][T12790] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.770045][T13042] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 613.824665][T12790] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 613.846508][T13042] quatech2 8-1:0.51: device disconnected [ 613.942959][T14804] loop0: detected capacity change from 0 to 32768 [ 614.025803][T14804] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 614.399272][ T6601] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 614.579737][T14831] ip_tables: iptables: counters copy to user failed while replacing table [ 615.480234][T14852] gadgetfs: bound to dummy_udc driver [ 615.948124][ T5851] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 616.168536][ T5851] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 616.189900][ T5851] usb 6-1: config 127 has no interface number 0 [ 616.225846][ T5851] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 616.292614][ T5851] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 616.336211][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.380210][ T5851] usb 6-1: Product: syz [ 616.384434][ T5851] usb 6-1: Manufacturer: syz [ 616.424095][ T5851] usb 6-1: SerialNumber: syz [ 616.463159][T14856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 616.483282][ T28] audit: type=1326 audit(1793251126.950:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ffc0000 [ 616.537280][ T5876] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 616.611563][ T28] audit: type=1326 audit(1793251126.950:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ffc0000 [ 616.693047][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2991'. [ 616.733845][ T28] audit: type=1326 audit(1793251126.990:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ffc0000 [ 616.758355][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 616.809570][ T5876] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 616.855278][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.923143][ T5876] usb 1-1: Product: syz [ 616.928082][T14856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 616.940431][ T28] audit: type=1326 audit(1793251126.990:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1196d9f559 code=0x7ffc0000 [ 616.976397][ T5876] usb 1-1: Manufacturer: syz [ 616.996315][ T5876] usb 1-1: SerialNumber: syz [ 617.034125][ T5876] usb 1-1: config 0 descriptor?? [ 617.070962][ T5876] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 617.091982][ T28] audit: type=1326 audit(1793251126.990:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.186080][ T5851] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 617.223550][ T28] audit: type=1326 audit(1793251126.990:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.308241][ T28] audit: type=1326 audit(1793251126.990:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.387595][ T5851] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 617.407607][ T28] audit: type=1326 audit(1793251126.990:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.440808][ T5851] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 617.460146][ T5851] asix: probe of 6-1:127.57 failed with error -71 [ 617.491567][ T5851] usb 6-1: USB disconnect, device number 6 [ 617.523899][ T28] audit: type=1326 audit(1793251126.990:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.573915][T13042] usb 1-1: USB disconnect, device number 24 [ 617.648149][ T28] audit: type=1326 audit(1793251126.990:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14876 comm="syz.7.2990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1196d9f559 code=0x7ff00000 [ 617.863344][T14900] gadgetfs: bound to dummy_udc driver [ 618.057170][ T5851] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 618.267712][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 618.293361][ T5851] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 618.317886][ T5851] usb 3-1: config 0 has no interface number 0 [ 618.344315][ T5851] usb 3-1: config 0 interface 12 has no altsetting 0 [ 618.357185][ T5876] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 618.411004][ T5851] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 618.450735][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.509001][ T5851] usb 3-1: Product: syz [ 618.513225][ T5851] usb 3-1: Manufacturer: syz [ 618.552040][ T5851] usb 3-1: SerialNumber: syz [ 618.579234][ T5876] usb 8-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.598340][ T5851] usb 3-1: config 0 descriptor?? [ 618.665940][ T5876] usb 8-1: config 0 interface 0 has no altsetting 0 [ 618.713677][ T5876] usb 8-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 618.765124][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.829099][ T5876] usb 8-1: config 0 descriptor?? [ 619.265662][ T5876] wacom 0003:056A:033C.000D: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 619.311365][T14909] loop0: detected capacity change from 0 to 32768 [ 619.390254][ T5876] wacom 0003:056A:033C.000D: hidraw0: USB HID v0.00 Joystick [HID 056a:033c] on usb-dummy_hcd.7-1/input0 [ 619.448255][T14909] JBD2: Ignoring recovery information on journal [ 619.470390][ T5851] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 619.527498][ T5876] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:033C.000D/input/input19 [ 619.558409][ T5851] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 619.612687][ T5851] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 619.687162][ T5851] f81534: probe of 3-1:0.12 failed with error -71 [ 619.704834][T14909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 619.787843][ T5876] usb 8-1: USB disconnect, device number 6 [ 619.844100][ T5851] usb 3-1: USB disconnect, device number 28 [ 619.921504][T14931] fido_id[14931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 620.384113][T14935] loop5: detected capacity change from 0 to 8192 [ 620.417229][T14940] program syz.2.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.442496][T14359] ocfs2: Unmounting device (7,0) on (node local) [ 620.473760][T14935] Dev loop5: RDB in block 1 has bad checksum [ 621.349749][T14958] loop7: detected capacity change from 0 to 2048 [ 621.556662][T14958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.269895][T14988] loop0: detected capacity change from 0 to 256 [ 624.052277][T15042] syz.0.3034 (15042): drop_caches: 0 [ 624.514265][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.567524][ T6541] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 624.671250][T15060] loop7: detected capacity change from 0 to 512 [ 624.696541][T15060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.764342][T15060] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.788310][ T6541] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.811312][ T6541] usb 1-1: config 0 has no interface number 0 [ 624.874670][ T6541] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 624.910902][T15060] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:106: comm syz.7.3037: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 624.927783][ T6541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.966706][ T6541] usb 1-1: Product: syz [ 624.986946][ T6541] usb 1-1: Manufacturer: syz [ 625.023024][ T6541] usb 1-1: SerialNumber: syz [ 625.047960][ T6541] usb 1-1: config 0 descriptor?? [ 625.098877][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.183776][T15067] GUP no longer grows the stack in syz.5.3039 (15067): 200000009000-20000000a000 (200000005000) [ 625.242724][T15067] CPU: 0 PID: 15067 Comm: syz.5.3039 Not tainted syzkaller #0 [ 625.250247][T15067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 625.260311][T15067] Call Trace: [ 625.263598][T15067] [ 625.266551][T15067] dump_stack_lvl+0x18c/0x250 [ 625.271262][T15067] ? show_regs_print_info+0x20/0x20 [ 625.276476][T15067] ? load_image+0x420/0x420 [ 625.280996][T15067] ? find_vma+0x134/0x1b0 [ 625.285382][T15067] __get_user_pages+0xfe7/0x1580 [ 625.290357][T15067] ? populate_vma_page_range+0x380/0x380 [ 625.296007][T15067] ? __gup_longterm_locked+0x21d8/0x2cb0 [ 625.301655][T15067] ? down_read_killable+0x1d0/0x340 [ 625.306873][T15067] __gup_longterm_locked+0x2345/0x2cb0 [ 625.312361][T15067] ? pin_user_pages_remote+0x220/0x220 [ 625.317830][T15067] ? mark_lock+0x94/0x320 [ 625.322173][T15067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.328163][T15067] ? __lock_acquire+0x7eb0/0x7eb0 [ 625.333196][T15067] ? lock_chain_count+0x20/0x20 [ 625.338060][T15067] ? internal_get_user_pages_fast+0x1f8e/0x27a0 [ 625.344317][T15067] internal_get_user_pages_fast+0x2174/0x27a0 [ 625.350431][T15067] ? get_user_pages_fast_only+0xa0/0xa0 [ 625.356007][T15067] ? trace_contention_end+0x39/0xe0 [ 625.361241][T15067] ? __mutex_lock+0x30d/0xc80 [ 625.366010][T15067] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.372178][T15067] ? iov_iter_iovec_advance+0x1ef/0x290 [ 625.377753][T15067] __iov_iter_get_pages_alloc+0x380/0xac0 [ 625.383492][T15067] iov_iter_get_pages2+0x5f/0xa0 [ 625.388444][T15067] __se_sys_vmsplice+0x5e5/0x11f0 [ 625.393534][T15067] ? __x64_sys_vmsplice+0xb0/0xb0 [ 625.398567][T15067] ? futex_wake_mark+0x150/0x150 [ 625.403545][T15067] ? fd_install+0x60/0x4e0 [ 625.408005][T15067] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.414023][T15067] ? lockdep_hardirqs_on+0x98/0x150 [ 625.419255][T15067] do_syscall_64+0x55/0xb0 [ 625.423681][T15067] ? clear_bhb_loop+0x40/0x90 [ 625.428368][T15067] ? clear_bhb_loop+0x40/0x90 [ 625.433074][T15067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.438984][T15067] RIP: 0033:0x7f179999f559 [ 625.443409][T15067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.463021][T15067] RSP: 002b:00007f179a92b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 625.471443][T15067] RAX: ffffffffffffffda RBX: 00007f1799c25fa0 RCX: 00007f179999f559 [ 625.479421][T15067] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 625.487426][T15067] RBP: 00007f1799a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 625.495399][T15067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.503384][T15067] R13: 00007f1799c26038 R14: 00007f1799c25fa0 R15: 00007ffc800538d8 [ 625.511372][T15067] [ 625.551282][T15070] vlan2: entered promiscuous mode [ 625.556407][T15070] team0: entered promiscuous mode [ 625.561588][T15070] team_slave_0: entered promiscuous mode [ 625.567547][T15070] team_slave_1: entered promiscuous mode [ 625.674599][ T6541] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 625.724013][ T6541] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 625.755417][T15075] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary [ 625.765372][ T6541] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 625.787409][ T6541] usb 1-1: media controller created [ 625.844119][ T6541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.972952][ T6541] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 626.155565][ T6541] usb 1-1: USB disconnect, device number 25 [ 627.768927][ T5851] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 627.997240][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 628.024896][ T5851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 628.071115][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 628.147172][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 628.209725][ T5851] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.295632][ T5851] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 628.365666][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.642096][ T5851] usb 1-1: GET_CAPABILITIES returned 0 [ 628.662304][ T5851] usbtmc 1-1:16.0: can't read capabilities [ 628.846544][ T5851] usb 1-1: USB disconnect, device number 26 [ 629.443289][T15165] vxcan0: tx address claim with dest, not broadcast [ 629.721006][T15172] autofs4:pid:15172:autofs_fill_super: could not open pipe file descriptor [ 630.111940][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 630.228133][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 630.447373][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 630.482209][ T5876] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 630.542521][ T5876] usb 1-1: config 0 has no interface number 0 [ 630.602299][ T5876] usb 1-1: config 0 interface 12 has no altsetting 0 [ 630.680180][ T5876] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 630.745758][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.820598][ T5876] usb 1-1: Product: syz [ 630.856153][ T5876] usb 1-1: Manufacturer: syz [ 630.904778][ T5876] usb 1-1: SerialNumber: syz [ 630.965921][ T5876] usb 1-1: config 0 descriptor?? [ 631.299330][T15205] loop5: detected capacity change from 0 to 1024 [ 631.387394][ T5098] Bluetooth: hci1: command 0x0405 tx timeout [ 631.857930][ T5876] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 631.900868][ T5876] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 631.950728][ T5876] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 631.981425][T15217] page:ffffea0000400000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 632.007145][ T5876] f81534: probe of 1-1:0.12 failed with error -71 [ 632.047970][T15217] flags: 0xfff00000004000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 632.069957][ T5876] usb 1-1: USB disconnect, device number 27 [ 632.098118][T15217] page_type: 0xffffffff() [ 632.121318][T15217] raw: 00fff00000004000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 632.168333][T15217] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 632.224572][T15217] page dumped because: unmovable page [ 632.244779][T15217] page_owner info is not present (never set?) [ 632.387826][ T5851] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 632.543688][T15228] loop5: detected capacity change from 0 to 4096 [ 632.625381][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.685913][ T5851] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 632.752060][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.852477][ T5851] as10x_usb: device has been detected [ 632.905779][ T5851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 632.934472][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 632.934485][ T28] audit: type=1800 audit(1793251143.400:165): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3088" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 633.077213][ T5851] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 633.179330][ T5851] as10x_usb: error during firmware upload part1 [ 633.228505][ T5851] Registered device Abilis Systems DVB-Titan [ 633.722428][ T9] usb 3-1: USB disconnect, device number 29 [ 633.784348][ T9] Unregistered device Abilis Systems DVB-Titan [ 633.798123][ T9] as10x_usb: device has been disconnected [ 633.917719][ T5851] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 634.128489][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 634.180847][ T5851] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 634.224048][ T5851] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 634.253716][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.309049][ T5851] usb 6-1: Product: syz [ 634.313266][ T5851] usb 6-1: Manufacturer: syz [ 634.364443][ T5851] usb 6-1: SerialNumber: syz [ 634.417704][ T5851] usb 6-1: config 0 descriptor?? [ 634.458951][ T5851] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 634.517958][ T5851] usb 6-1: Detected FT232R [ 634.639826][ T5851] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 634.928578][ T5851] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 635.084150][ T5851] usb 6-1: USB disconnect, device number 7 [ 635.124187][ T5851] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 635.219910][ T5851] ftdi_sio 6-1:0.0: device disconnected [ 635.557330][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 635.767096][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 635.788701][ T8] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 635.827535][ T8] usb 8-1: config 0 has no interface number 0 [ 635.863940][ T8] usb 8-1: config 0 interface 12 has no altsetting 0 [ 635.950868][ T8] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 635.997443][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.066172][ T8] usb 8-1: Product: syz [ 636.088510][ T8] usb 8-1: Manufacturer: syz [ 636.093160][ T8] usb 8-1: SerialNumber: syz [ 636.165176][ T8] usb 8-1: config 0 descriptor?? [ 636.737184][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 636.965113][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.005388][ T9] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 637.065398][ T8] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 637.077096][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.106611][ T8] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 637.151912][ T9] as10x_usb: device has been detected [ 637.177642][ T8] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 637.198733][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 637.224809][ T8] f81534: probe of 8-1:0.12 failed with error -71 [ 637.304942][ T8] usb 8-1: USB disconnect, device number 7 [ 637.330283][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 637.439189][ T9] as10x_usb: error during firmware upload part1 [ 637.482499][ T9] Registered device Abilis Systems DVB-Titan [ 638.087662][ T9] usb 6-1: USB disconnect, device number 8 [ 638.218937][ T9] Unregistered device Abilis Systems DVB-Titan [ 638.229269][ T9] as10x_usb: device has been disconnected [ 638.313032][T15308] loop0: detected capacity change from 0 to 40427 [ 638.391378][T15308] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 638.441607][T15308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 638.520658][T15308] F2FS-fs (loop0): invalid crc value [ 638.568915][T15308] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 638.764836][T15308] F2FS-fs (loop0): Found nat_bits in checkpoint [ 639.063393][T15349] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3120'. [ 639.114126][T15308] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 639.179384][T15308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 639.511091][T14359] syz-executor: attempt to access beyond end of device [ 639.511091][T14359] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 639.645297][T14359] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 640.605617][T15380] loop5: detected capacity change from 0 to 8192 [ 640.750331][T15380] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 640.859288][T15380] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 640.916819][T15380] REISERFS (device loop5): using ordered data mode [ 640.989652][T15380] reiserfs: using flush barriers [ 641.036788][T15380] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 641.156765][T15380] REISERFS (device loop5): checking transaction log (loop5) [ 641.222195][T15380] REISERFS (device loop5): Using rupasov hash to sort names [ 641.277706][T15380] REISERFS (device loop5): using 3.5.x disk format [ 641.335673][T15380] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 641.409220][T15380] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 641.540451][T15380] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 641.637350][T15380] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 641.763881][T15380] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 641.921548][T15380] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 642.016020][T15380] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 642.980478][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 643.142435][T15444] loop0: detected capacity change from 0 to 256 [ 643.180993][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.222268][ T9] usb 3-1: config 0 has no interface number 0 [ 643.272098][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.343062][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.411967][ T9] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.488752][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 643.531867][ T9] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 643.583272][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.628162][ T9] usb 3-1: config 0 descriptor?? [ 644.268241][T15470] bonding: no command found in bonding_masters - use +ifname or -ifname [ 644.302155][ T9] uclogic 0003:145F:0212.000E: pen parameters not found [ 644.329369][ T9] uclogic 0003:145F:0212.000E: interface is invalid, ignoring [ 644.506930][ T9] usb 3-1: USB disconnect, device number 30 [ 644.678285][T15479] loop5: detected capacity change from 0 to 1024 [ 644.722887][T15479] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 644.838529][T15479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 644.918605][T15479] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.016146][T15479] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 3: comm syz.5.3162: lblock 3 mapped to illegal pblock 3 (length 3) [ 645.163340][T15479] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 645.184218][T15487] ima: policy update failed [ 645.219133][ T28] audit: type=1802 audit(1793251155.680:166): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3163" res=0 errno=0 [ 645.262339][T15479] EXT4-fs (loop5): This should not happen!! Data will be lost [ 645.262339][T15479] [ 645.433122][ T4545] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 645.524452][ T4545] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 645.597275][ T4545] EXT4-fs (loop5): This should not happen!! Data will be lost [ 645.597275][ T4545] [ 645.643079][T15500] loop0: detected capacity change from 0 to 512 [ 645.661678][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 645.698670][T15500] EXT4-fs: Ignoring removed orlov option [ 645.782627][T15500] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 645.913362][T15500] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.3175: Allocating blocks 41-42 which overlap fs metadata [ 646.051436][T15509] loop5: detected capacity change from 0 to 128 [ 646.077390][T15500] Quota error (device loop0): write_blk: dquota write failed [ 646.084834][T15500] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 646.145479][T15509] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.203879][T15500] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.3175: Allocating blocks 41-42 which overlap fs metadata [ 646.254019][T15509] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 646.320923][T15500] Quota error (device loop0): write_blk: dquota write failed [ 646.374831][T15500] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 646.427341][T15500] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3175: Failed to acquire dquot type 1 [ 646.510364][T15500] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 646.548840][T12790] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.677465][T15500] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.3175: corrupted inode contents [ 646.746253][T15500] EXT4-fs error (device loop0): ext4_dirty_inode:6188: inode #12: comm syz.0.3175: mark_inode_dirty error [ 646.821265][T15500] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.3175: corrupted inode contents [ 646.899284][T15500] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #12: comm syz.0.3175: mark_inode_dirty error [ 646.981418][T15500] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.3175: corrupted inode contents [ 647.071387][T15500] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 647.118140][T15500] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #12: comm syz.0.3175: corrupted inode contents [ 647.202788][T15500] EXT4-fs error (device loop0): ext4_truncate:4314: inode #12: comm syz.0.3175: mark_inode_dirty error [ 647.264637][T15500] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 647.331507][T15500] EXT4-fs (loop0): 1 truncate cleaned up [ 647.361983][T15500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.537172][T15500] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.3175: Abort forced by user [ 647.599901][T15500] EXT4-fs (loop0): Remounting filesystem read-only [ 647.606467][T15500] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 647.856164][T14359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.782358][T15569] loop7: detected capacity change from 0 to 40427 [ 650.855931][T15569] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 650.863636][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3196'. [ 650.898345][T15608] loop0: detected capacity change from 0 to 1024 [ 650.918147][T15569] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 650.966695][T15608] EXT4-fs: Ignoring removed oldalloc option [ 651.009167][T15569] F2FS-fs (loop7): invalid crc value [ 651.032050][T15608] EXT4-fs: Ignoring removed orlov option [ 651.123041][T15608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.265734][T15621] macvlan2: entered promiscuous mode [ 651.315300][T15621] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 651.446733][T14359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.541903][T15569] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 651.606646][T15569] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 651.637874][T15625] Bluetooth: MGMT ver 1.22 [ 651.869425][T15569] syz.7.3182: attempt to access beyond end of device [ 651.869425][T15569] loop7: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 651.995042][T15635] syz.7.3182: attempt to access beyond end of device [ 651.995042][T15635] loop7: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 652.365723][T13486] syz-executor: attempt to access beyond end of device [ 652.365723][T13486] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 652.470395][T13486] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 652.846199][T15659] phram: parameter too long [ 653.208076][T13042] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 653.398130][T15673] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3216'. [ 653.437139][T13042] usb 6-1: Using ep0 maxpacket: 16 [ 653.458368][T13042] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.557190][T13042] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.632059][T13042] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 653.740944][T13042] usb 6-1: config 0 interface 0 has no altsetting 0 [ 653.771102][T13042] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 653.835952][T13042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.866343][T15681] loop7: detected capacity change from 0 to 1024 [ 653.896317][T13042] usb 6-1: config 0 descriptor?? [ 653.917811][T15681] EXT4-fs: Ignoring removed oldalloc option [ 653.989924][T15681] EXT4-fs: Ignoring removed orlov option [ 654.086328][T15681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.352914][T13042] hid (null): report_id 0 is invalid [ 654.381860][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.454682][T13042] hid (null): invalid report_size 25964 [ 654.467159][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 654.521027][T13042] hid (null): invalid report_size 27745 [ 654.588398][T13042] usb 6-1: USB disconnect, device number 9 [ 654.711187][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 654.735320][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.781804][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.834842][ T8] usb 3-1: string descriptor 0 read error: -22 [ 654.860575][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 654.910446][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.969304][ T8] usb 3-1: selecting invalid altsetting 1 [ 655.027156][ T8] usb 3-1: unit 6 not found! [ 655.222370][T15676] loop0: detected capacity change from 0 to 40427 [ 655.287204][T15676] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 655.295864][T15705] tap0: tun_chr_ioctl cmd 1074025673 [ 655.333958][T15676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 655.409068][T15676] F2FS-fs (loop0): invalid crc value [ 655.697369][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3224'. [ 655.780606][ T8] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 655.797190][T15716] netlink: 'syz.5.3224': attribute type 12 has an invalid length. [ 655.865390][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3224'. [ 655.929354][T15676] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 655.957832][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 656.013728][T15676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 656.039487][ T8] usb 3-1: USB disconnect, device number 31 [ 656.156078][T15722] loop7: detected capacity change from 0 to 2048 [ 656.234110][T15676] syz.0.3217: attempt to access beyond end of device [ 656.234110][T15676] loop0: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 656.281982][T15722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.363480][T15729] syz.0.3217: attempt to access beyond end of device [ 656.363480][T15729] loop0: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 656.473720][T15721] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 656.503793][T15729] syz.0.3217: attempt to access beyond end of device [ 656.503793][T15729] loop0: rw=2049, sector=53472, nr_sectors = 8 limit=40427 [ 656.753486][T14359] syz-executor: attempt to access beyond end of device [ 656.753486][T14359] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 656.795570][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.870259][T14359] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 657.183991][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3234'. [ 657.788716][ T4558] rpcbind: server 127.0.0.1 not responding, timed out [ 657.969120][T15768] loop5: detected capacity change from 0 to 512 [ 658.064245][T15768] EXT4-fs (loop5): 1 truncate cleaned up [ 658.114116][T15768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.262367][ T28] audit: type=1800 audit(1793251168.730:167): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3248" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 658.288605][T15768] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3248: invalid indirect mapped block 234881024 (level 0) [ 658.399651][T15768] EXT4-fs (loop5): Remounting filesystem read-only [ 658.582621][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.614635][T15783] program syz.0.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.107144][T13042] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 659.307454][T13042] usb 6-1: Using ep0 maxpacket: 8 [ 659.340207][T13042] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 659.384827][T13042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.493709][T13042] pvrusb2: Hardware description: Terratec Grabster AV400 [ 659.562682][T13042] pvrusb2: ********** [ 659.604209][T13042] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 659.653425][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3247'. [ 659.687136][T13042] pvrusb2: Important functionality might not be entirely working. [ 659.733400][T13042] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 659.782516][T13042] pvrusb2: ********** [ 659.826003][ T2326] pvrusb2: Invalid write control endpoint [ 660.071941][T15813] loop7: detected capacity change from 0 to 1024 [ 660.081135][T13042] usb 6-1: USB disconnect, device number 10 [ 660.136724][ T2326] pvrusb2: Invalid write control endpoint [ 660.196191][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 660.239992][T15813] hfsplus: keylen 65060 too large [ 660.245594][T15813] hfsplus: xattr searching failed [ 660.267740][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 660.308738][T15818] hfsplus: keylen 65060 too large [ 660.314539][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 660.369706][T15818] hfsplus: xattr searching failed [ 660.385880][ T2326] pvrusb2: Device being rendered inoperable [ 660.445409][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 660.485247][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 660.572025][ T2326] pvrusb2: Attached sub-driver cx25840 [ 660.639985][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 660.694826][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 661.731971][T15860] loop7: detected capacity change from 0 to 512 [ 661.792486][T15860] EXT4-fs: Ignoring removed orlov option [ 661.844924][T15860] EXT4-fs: Ignoring removed mblk_io_submit option [ 661.970334][T15860] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.3272: corrupted in-inode xattr: e_value size too large [ 662.088898][T15860] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.3272: couldn't read orphan inode 15 (err -117) [ 662.156112][T15860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.246802][T15860] EXT4-fs (loop7): shut down requested (1) [ 662.360887][T15874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3278'. [ 662.403322][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.441987][ T8] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 662.507634][ T8] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 662.906480][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 662.977451][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 663.187128][T13042] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 663.197179][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 663.221327][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 663.250133][ T8] usb 1-1: config 0 has no interface number 0 [ 663.281191][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 663.303378][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.342143][ T8] usb 1-1: Product: syz [ 663.346355][ T8] usb 1-1: Manufacturer: syz [ 663.375446][ T8] usb 1-1: SerialNumber: syz [ 663.387311][T13042] usb 8-1: Using ep0 maxpacket: 8 [ 663.406919][ T8] usb 1-1: config 0 descriptor?? [ 663.423141][T13042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.456328][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 663.470195][T13042] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 663.506314][T13042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.562024][T13042] usb 8-1: config 0 descriptor?? [ 663.674402][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 663.717794][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 663.796238][T13042] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 663.967335][ T5851] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 664.009052][T13042] usb 8-1: USB disconnect, device number 8 [ 664.072168][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 664.082539][ T8] usb 1-1: USB disconnect, device number 28 [ 664.102969][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 664.134450][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 664.153269][ T8] quatech2 1-1:0.51: device disconnected [ 664.159324][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 664.170473][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.193642][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.211560][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 664.223917][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 664.241200][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.256932][ T5851] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 664.272651][ T5851] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 664.281109][ T5851] usb 3-1: Manufacturer: syz [ 664.296441][ T5851] usb 3-1: config 0 descriptor?? [ 664.677229][ T5851] rc_core: IR keymap rc-hauppauge not found [ 664.683181][ T5851] Registered IR keymap rc-empty [ 664.725506][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 664.787208][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 664.800189][T15909] loop0: detected capacity change from 0 to 512 [ 664.864802][ T5851] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 664.911344][T15909] EXT4-fs (loop0): invalid journal inode [ 664.938378][T15909] EXT4-fs (loop0): can't get journal size [ 664.975993][ T5851] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 665.021157][T15909] EXT4-fs (loop0): 1 truncate cleaned up [ 665.055637][T15909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.100959][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.158702][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.217743][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.287694][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.305672][T14359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.356046][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.418399][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.471106][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.513558][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.521211][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 665.587311][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.637781][ T5851] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.700772][ T5851] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 665.735185][ T5851] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 665.755150][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.794909][ T8] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 665.814748][ T5851] usb 3-1: USB disconnect, device number 32 [ 665.825187][T15930] loop7: detected capacity change from 0 to 2048 [ 665.847425][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.916056][T15930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.943965][ T8] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 666.036339][ T8] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 666.275947][ T8] usb 6-1: USB disconnect, device number 11 [ 666.312994][ T8] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 666.378501][ T8] metro_usb 6-1:1.0: device disconnected [ 666.571957][ T28] audit: type=1400 audit(1793251177.040:168): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=15939 comm="syz.7.3308" name="unknown" offset=28 [ 667.626013][T15974] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 667.852798][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3325'. [ 667.864458][T15979] loop7: detected capacity change from 0 to 1024 [ 667.998787][T15979] hfsplus: request for non-existent node 33423360 in B*Tree [ 668.057144][T15979] hfsplus: request for non-existent node 33423360 in B*Tree [ 668.113835][T15979] hfsplus: request for non-existent node 33423360 in B*Tree [ 668.167102][T15979] hfsplus: request for non-existent node 33423360 in B*Tree [ 668.511981][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3333'. [ 668.567306][T15997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 668.900611][T16005] syz.0.3337: attempt to access beyond end of device [ 668.900611][T16005] md0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 668.983759][T16005] EXT4-fs (md0): unable to read superblock [ 669.289209][T16016] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-16) [ 669.722595][T16028] loop0: detected capacity change from 0 to 128 [ 669.926556][T14359] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 669.991585][T14359] FAT-fs (loop0): Filesystem has been set read-only [ 670.479978][T16051] loop5: detected capacity change from 0 to 1024 [ 670.593357][T16051] hfsplus: keylen 65060 too large [ 670.629974][T16051] hfsplus: xattr searching failed [ 670.727578][T16058] hfsplus: keylen 65060 too large [ 670.732670][T16058] hfsplus: xattr searching failed [ 670.789092][T16061] loop0: detected capacity change from 0 to 256 [ 671.126961][T16070] ieee802154 phy1 wpan1: encryption failed: -22 [ 671.522125][T16081] program syz.5.3367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.622434][T16085] bond0: option arp_interval: invalid value ( ) [ 671.653201][T16085] bond0: option arp_interval: allowed values 0 - 2147483647 [ 671.730028][T16087] loop5: detected capacity change from 0 to 512 [ 671.765037][T16087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.841706][T16087] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.923674][T16087] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.3370: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 672.012571][T16096] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 672.023004][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 672.208393][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.248006][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 672.264829][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 672.338860][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 672.397183][ T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 672.454678][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.481727][ T8] usb 1-1: Product: syz [ 672.504312][ T8] usb 1-1: Manufacturer: syz [ 672.539048][ T8] usb 1-1: SerialNumber: syz [ 672.560743][ T8] usb 1-1: config 0 descriptor?? [ 672.579518][ T8] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 672.785973][ T8] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 672.830711][ T8] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 672.999166][ T5851] usb 1-1: USB disconnect, device number 29 [ 673.192479][T16098] loop7: detected capacity change from 0 to 40427 [ 673.257801][T16098] F2FS-fs (loop7): invalid crc value [ 673.298116][T16098] F2FS-fs (loop7): Found nat_bits in checkpoint [ 673.429562][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 673.477396][T16098] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 673.655672][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.673319][T13486] syz-executor: attempt to access beyond end of device [ 673.673319][T13486] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 673.704603][ T8] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 673.718858][T16127] loop0: detected capacity change from 0 to 64 [ 673.741555][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.763296][T13486] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 673.828967][T16127] hfs: request for non-existent node 131072 in B*Tree [ 673.890424][T16127] hfs: request for non-existent node 131072 in B*Tree [ 673.961373][ T8] rtsx_usb: probe of 6-1:1.0 failed with error -22 [ 674.130045][ T8] usb 6-1: USB disconnect, device number 12 [ 674.534898][T16142] loop0: detected capacity change from 0 to 164 [ 675.058597][T16154] netlink: 'syz.7.3388': attribute type 11 has an invalid length. [ 675.126576][T16154] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3388'. [ 675.148403][T16157] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 675.649670][T16169] loop0: detected capacity change from 0 to 2048 [ 675.747126][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 675.756964][T16172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 675.827230][ T28] audit: type=1800 audit(1793251186.290:169): pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3405" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 675.993210][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.019627][T16172] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 676.037645][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.064003][T16172] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 676.089126][ T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 676.143353][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.159705][T16172] Remounting filesystem read-only [ 676.176914][ T50] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 676.202431][ T50] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 676.220232][ T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 676.242826][ T50] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 676.257410][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.267298][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.302882][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.330643][ T50] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 676.366847][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.390435][ T50] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 676.412520][ T50] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 676.438252][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.460330][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.483418][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.521459][ T50] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 676.542283][ T50] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 676.562113][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.584662][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.607226][ T50] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.635492][T14359] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 676.663822][T14359] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 676.683281][T14359] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 676.703425][T14359] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.723729][ T8] gud 6-1:1.0: Unexpected status OK for failed transfer [ 676.741676][T14359] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.763995][ T8] gud: probe of 6-1:1.0 failed with error -32 [ 676.803560][T14359] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.969881][ T8] usb 6-1: USB disconnect, device number 13 [ 677.034255][T16186] loop0: detected capacity change from 0 to 512 [ 677.089946][T16186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 677.185572][T16186] EXT4-fs (loop0): 1 truncate cleaned up [ 677.233588][T16186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.333524][T16186] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5994: inode #12: comm syz.0.3411: bad extra_isize 62 (inode size 256) [ 677.411466][T16186] EXT4-fs (loop0): Remounting filesystem read-only [ 677.532933][T14359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.713146][T16197] loop5: detected capacity change from 0 to 1024 [ 678.066050][T16205] loop0: detected capacity change from 0 to 256 [ 678.101667][T16205] exfat: Deprecated parameter 'utf8' [ 678.182793][T16205] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 678.195896][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3423'. [ 679.253789][T16231] rnbd_client L127: Can't parse path i: -93 [ 679.349702][T16235] loop7: detected capacity change from 0 to 2048 [ 679.446097][T16237] loop5: detected capacity change from 0 to 256 [ 679.475758][T16235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.515302][T16237] exfat: Deprecated parameter 'utf8' [ 679.606089][T16237] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 679.784543][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.352164][T16263] loop5: detected capacity change from 0 to 164 [ 680.998201][T16282] loop7: detected capacity change from 0 to 512 [ 681.082162][T16282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.152373][T16282] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.234474][ T28] audit: type=1800 audit(1793251191.700:170): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3456" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 681.346153][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.373757][T16288] loop5: detected capacity change from 0 to 164 [ 681.491513][T16288] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 681.780027][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 681.891097][T16278] loop0: detected capacity change from 0 to 32768 [ 682.035065][T16278] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 682.320720][T16278] XFS (loop0): Ending clean mount [ 682.336279][T16312] loop5: detected capacity change from 0 to 512 [ 682.392118][T16278] XFS (loop0): Quotacheck needed: Please wait. [ 682.409033][T16312] EXT4-fs: Ignoring removed bh option [ 682.495474][T16312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 682.568293][T16312] System zones: 1-12 [ 682.650490][T16278] XFS (loop0): Quotacheck: Done. [ 682.670460][T16312] EXT4-fs (loop5): 1 truncate cleaned up [ 682.713431][T16312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.918637][T12790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.958363][T14359] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 683.725089][T16342] loop5: detected capacity change from 0 to 128 [ 683.800124][T16342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 683.845678][T16342] hpfs: filesystem error: improperly stopped [ 683.873534][T16342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 683.900959][T16342] hpfs: You really don't want any checks? You are crazy... [ 683.920676][T16342] hpfs: Code page index out of array [ 683.934623][T16342] hpfs: code page support is disabled [ 683.954565][T16342] hpfs: hpfs_map_4sectors(): unaligned read [ 683.978687][T16342] hpfs: hpfs_map_4sectors(): unaligned read [ 683.994816][T16342] hpfs: filesystem error: unable to find root dir [ 684.036743][T16342] hpfs: hpfs_map_sector(): read error [ 684.050397][T16342] hpfs: hpfs_map_sector(): read error [ 684.328686][T16346] loop5: detected capacity change from 0 to 128 [ 684.373671][T16346] EXT4-fs (loop5): Test dummy encryption mode enabled [ 684.469206][T16346] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 684.567578][T16346] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 684.664575][T16348] __sock_release: fasync list not empty! [ 684.795062][T12790] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.447112][T13042] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 685.667436][T13042] usb 8-1: Using ep0 maxpacket: 16 [ 685.683120][T13042] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 685.713295][T13042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.748487][T13042] usb 8-1: Product: syz [ 685.752698][T13042] usb 8-1: Manufacturer: syz [ 685.784315][T13042] usb 8-1: SerialNumber: syz [ 685.867878][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 685.961632][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.021983][T13042] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 686.071610][ T8] usb 6-1: config 1 has an invalid interface number: 27 but max is 1 [ 686.093172][T13042] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 686.123122][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.171872][T13042] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 686.181838][ T8] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 686.216823][T13042] usb 8-1: media controller created [ 686.231672][ T8] usb 6-1: config 1 has no interface number 2 [ 686.441038][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 686.520563][T13042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 686.533453][ T8] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.599523][ T8] usb 6-1: config 1 interface 1 has no altsetting 0 [ 686.617809][T13042] zl10353_read_register: readreg error (reg=127, ret==-71) [ 686.656930][ T8] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 686.666054][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.730843][ T8] usb 6-1: Product: syz [ 686.735058][ T8] usb 6-1: Manufacturer: syz [ 686.754116][T13042] dvb_usb_gl861: probe of 8-1:157.0 failed with error -5 [ 686.791076][ T8] usb 6-1: SerialNumber: syz [ 686.851263][T13042] usb 8-1: USB disconnect, device number 9 [ 687.018560][T16388] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 687.232072][T16374] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 687.576917][T16393] loop7: detected capacity change from 0 to 512 [ 687.701761][ T8] ATM dev 0: failed to start ADSL synchronisation: -71 [ 687.751539][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807ae53800 failed (-71)! [ 687.759606][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacec00 failed (-71)! [ 687.767545][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacef00 failed (-71)! [ 687.775484][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacea00 failed (-71)! [ 687.801211][T16393] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 687.813826][ T8] speedtch 6-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 687.857553][ T8] speedtch 6-1:1.27: usbatm_usb_probe: bind failed: -16! [ 687.857643][ C0] ATM dev 0: usbatm_complete: urb 0xffff88807ae53800 failed (-71)! [ 687.872661][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacec00 failed (-71)! [ 687.880604][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacef00 failed (-71)! [ 687.888539][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801cacea00 failed (-71)! [ 687.896573][ T8] speedtch: probe of 6-1:1.27 failed with error -16 [ 687.915061][T16384] loop0: detected capacity change from 0 to 32768 [ 687.924206][T16393] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 687.978499][T16384] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 687.993258][ T8] usb 6-1: USB disconnect, device number 14 [ 688.004165][T16393] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.3498: Failed to acquire dquot type 1 [ 688.137281][T16393] EXT4-fs error (device loop7): ext4_do_update_inode:5294: inode #16: comm syz.7.3498: corrupted inode contents [ 688.224106][T16393] EXT4-fs error (device loop7): ext4_dirty_inode:6188: inode #16: comm syz.7.3498: mark_inode_dirty error [ 688.275964][ T5800] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 688.303874][T16393] EXT4-fs error (device loop7): ext4_do_update_inode:5294: inode #16: comm syz.7.3498: corrupted inode contents [ 688.370156][T16393] EXT4-fs error (device loop7): __ext4_ext_dirty:208: inode #16: comm syz.7.3498: mark_inode_dirty error [ 688.440279][T16393] EXT4-fs error (device loop7): ext4_do_update_inode:5294: inode #16: comm syz.7.3498: corrupted inode contents [ 688.498174][T16393] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 688.544152][T16393] EXT4-fs error (device loop7): ext4_do_update_inode:5294: inode #16: comm syz.7.3498: corrupted inode contents [ 688.627625][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 688.645569][T16393] EXT4-fs error (device loop7): ext4_truncate:4314: inode #16: comm syz.7.3498: mark_inode_dirty error [ 688.689326][T16393] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 688.755434][T16393] EXT4-fs (loop7): 1 truncate cleaned up [ 688.781944][T16393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.862356][T16393] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.873326][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 688.939733][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 688.978610][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.024820][T16393] EXT4-fs error (device loop7): ext4_acquire_dquot:6949: comm syz.7.3498: Failed to acquire dquot type 1 [ 689.043320][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.089762][T16401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 689.125667][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 689.258452][T13486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.362013][ T5876] usb 1-1: USB disconnect, device number 30 [ 689.727641][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 689.937113][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 689.956284][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 689.976162][ T5876] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 689.989686][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.017888][ T8] usb 3-1: config 0 descriptor?? [ 690.050458][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 690.197291][ T5876] usb 8-1: config 1 has an invalid interface number: 27 but max is 1 [ 690.219815][ T5876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.271170][ T5876] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 690.314761][ T5876] usb 8-1: config 1 has no interface number 2 [ 690.342143][T16433] loop5: detected capacity change from 0 to 40427 [ 690.351783][ T5876] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 690.385506][T16433] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 690.401237][ T5876] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.437402][T16433] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 690.475703][ T5876] usb 8-1: config 1 interface 1 has no altsetting 0 [ 690.490030][T16433] F2FS-fs (loop5): invalid crc value [ 690.549436][ T5876] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 690.599651][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.660250][ T5876] usb 8-1: Product: syz [ 690.665380][ T8] gspca_sunplus: reg_r err -71 [ 690.689724][ T8] sunplus: probe of 3-1:0.0 failed with error -71 [ 690.704974][T16443] loop0: detected capacity change from 0 to 512 [ 690.711417][ T5876] usb 8-1: Manufacturer: syz [ 690.716020][ T5876] usb 8-1: SerialNumber: syz [ 690.747395][ T8] usb 3-1: USB disconnect, device number 33 [ 690.810716][T16443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 690.926607][T16433] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 690.946215][T16443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.987942][T16433] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 691.011495][T16443] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.039105][T16433] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 691.103200][T16443] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3515: bg 0: block 217: padding at end of block bitmap is not set [ 691.164259][T16443] EXT4-fs (loop0): Remounting filesystem read-only [ 691.206682][T16430] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 691.303936][T14359] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.536001][T16452] loop0: detected capacity change from 0 to 256 [ 691.645165][ T5876] ATM dev 0: failed to start ADSL synchronisation: -71 [ 691.725137][ T5876] speedtch 8-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 691.776309][ T5876] speedtch 8-1:1.27: usbatm_usb_probe: bind failed: -16! [ 691.836136][ T5876] speedtch: probe of 8-1:1.27 failed with error -16 [ 691.911086][ T5876] usb 8-1: USB disconnect, device number 10 [ 692.498866][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.584094][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.591377][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.154894][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 693.246264][T16462] loop0: detected capacity change from 0 to 40427 [ 693.264818][T16485] loop5: detected capacity change from 0 to 64 [ 693.344649][T16462] F2FS-fs (loop0): invalid crc value [ 693.431780][T16462] F2FS-fs (loop0): Found nat_bits in checkpoint [ 693.624340][T16487] __sock_release: fasync list not empty! [ 693.733526][T16462] F2FS-fs (loop0): Start checkpoint disabled! [ 693.741934][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3536'. [ 693.843655][T16462] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 693.904240][T16491] bond1: Unable to set up delay as MII monitoring is disabled [ 693.974327][T16491] bond1 (unregistering): Released all slaves [ 694.333327][ T4545] kworker/u4:10: attempt to access beyond end of device [ 694.333327][ T4545] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 694.413765][ T4545] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 694.423063][T16501] loop5: detected capacity change from 0 to 2048 [ 694.544088][T16501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.627239][T16501] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.830206][T16512] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3541: bg 0: block 345: padding at end of block bitmap is not set [ 694.976150][T16512] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 695.042561][T16512] EXT4-fs (loop5): This should not happen!! Data will be lost [ 695.042561][T16512] [ 695.166777][T16501] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 695.280462][T16501] EXT4-fs (loop5): This should not happen!! Data will be lost [ 695.280462][T16501] [ 695.321431][T16501] EXT4-fs (loop5): Total free blocks count 0 [ 695.362704][T16501] EXT4-fs (loop5): Free/Dirty block details [ 695.394183][T16501] EXT4-fs (loop5): free_blocks=0 [ 695.420246][T16501] EXT4-fs (loop5): dirty_blocks=64 [ 695.425478][T16501] EXT4-fs (loop5): Block reservation details [ 695.847120][T16534] program syz.0.3552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.124121][ T8] IPVS: starting estimator thread 0... [ 696.138651][T16545] loop0: detected capacity change from 0 to 64 [ 696.237136][T16544] IPVS: using max 26 ests per chain, 62400 per kthread [ 696.406892][T14359] hfs: node 4:3 still has 1 user(s)! [ 696.751838][T16558] loop7: detected capacity change from 0 to 64 [ 696.907333][T13042] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 697.112201][T13042] usb 1-1: Using ep0 maxpacket: 32 [ 697.133498][T13042] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 697.177294][T13042] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.199730][T16563] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3564'. [ 697.248307][T13042] usb 1-1: config 0 interface 0 has no altsetting 0 [ 697.269602][T13042] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 697.327433][T13042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.382878][T13042] usb 1-1: config 0 descriptor?? [ 702.439178][T13042] usbhid 1-1:0.0: can't add hid device: -32 [ 702.445231][T13042] usbhid: probe of 1-1:0.0 failed with error -32 [ 708.510547][ T5797] Bluetooth: hci1: command 0x0405 tx timeout [ 747.394672][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.835374][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 859.387198][ T29] INFO: task jbd2/sda1-8:5115 blocked for more than 143 seconds. [ 859.394974][ T29] Not tainted syzkaller #0 [ 859.411239][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.422912][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5115 ppid:2 flags:0x00004000 [ 859.442868][ T29] Call Trace: [ 859.446369][ T29] [ 859.449400][ T29] __schedule+0x15ae/0x4700 [ 859.453960][ T29] ? asan.module_dtor+0x20/0x20 [ 859.472641][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 859.486353][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.505215][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 859.513316][ T29] schedule+0xbd/0x170 [ 859.525913][ T29] io_schedule+0x80/0xd0 [ 859.534913][ T29] bit_wait_io+0x11/0xd0 [ 859.552351][ T29] __wait_on_bit+0x9f/0x2c0 [ 859.564616][ T29] ? bit_wait+0xd0/0xd0 [ 859.569113][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 859.574604][ T29] ? bit_wait+0xd0/0xd0 [ 859.581962][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 859.586758][ T29] ? do_raw_write_lock+0x11e/0x260 [ 859.592409][ T29] ? bit_waitqueue+0x30/0x30 [ 859.602974][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 859.612485][ T29] jbd2_journal_commit_transaction+0x2e90/0x5ad0 [ 859.622143][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 859.629662][ T29] ? lock_chain_count+0x20/0x20 [ 859.634665][ T29] ? _raw_spin_unlock+0x40/0x40 [ 859.642763][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 859.649431][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 859.654741][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 859.662901][ T29] ? timer_delete_sync+0x20/0x20 [ 859.668112][ T29] ? do_raw_read_unlock+0x80/0x80 [ 859.673162][ T29] ? prepare_to_wait+0x1aa/0x200 [ 859.678628][ T29] kjournald2+0x40f/0x810 [ 859.682998][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 859.691450][ T29] ? wake_bit_function+0x200/0x200 [ 859.696591][ T29] ? _raw_spin_unlock+0x40/0x40 [ 859.701813][ T29] ? __kthread_parkme+0x71/0x1c0 [ 859.714639][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 859.722677][ T29] kthread+0x2fa/0x390 [ 859.726778][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 859.735258][ T29] ? kthread_blkcg+0xd0/0xd0 [ 859.740214][ T29] ret_from_fork+0x48/0x80 [ 859.744688][ T29] ? kthread_blkcg+0xd0/0xd0 [ 859.752370][ T29] ret_from_fork_asm+0x11/0x20 [ 859.758790][ T29] [ 859.761843][ T29] INFO: task syz-executor:5775 blocked for more than 143 seconds. [ 859.770201][ T29] Not tainted syzkaller #0 [ 859.775148][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.786821][ T29] task:syz-executor state:D stack:22568 pid:5775 ppid:5774 flags:0x00004002 [ 859.796632][ T29] Call Trace: [ 859.803132][ T29] [ 859.806108][ T29] __schedule+0x15ae/0x4700 [ 859.812552][ T29] ? mark_lock+0x94/0x320 [ 859.822178][ T29] ? asan.module_dtor+0x20/0x20 [ 859.830848][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 859.835927][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.845202][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 859.850695][ T29] schedule+0xbd/0x170 [ 859.854804][ T29] io_schedule+0x80/0xd0 [ 859.859514][ T29] bit_wait_io+0x11/0xd0 [ 859.863803][ T29] __wait_on_bit+0x9f/0x2c0 [ 859.873096][ T29] ? bit_wait+0xd0/0xd0 [ 859.877578][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 859.883069][ T29] ? bit_wait+0xd0/0xd0 [ 859.890366][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 859.895166][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 859.900551][ T29] ? bit_waitqueue+0x30/0x30 [ 859.905183][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 859.914798][ T29] do_get_write_access+0x5c9/0xe00 [ 859.920257][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 859.926269][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 859.937223][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 859.943610][ T29] ? __might_sleep+0xe0/0xe0 [ 859.958073][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 859.963666][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 859.971631][ T29] ext4_dirty_inode+0xcb/0x110 [ 859.976428][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 859.983972][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 859.991381][ T29] file_update_time+0x187/0x1a0 [ 859.996266][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 860.002460][ T29] ? do_wp_page+0x4ce/0x34d0 [ 860.009441][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 860.016534][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 860.023269][ T29] do_page_mkwrite+0x153/0x3f0 [ 860.033490][ T29] do_wp_page+0xd4d/0x34d0 [ 860.041071][ T29] ? folio_put+0xd0/0xd0 [ 860.045455][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 860.053014][ T29] ? __rwlock_init+0x150/0x150 [ 860.058359][ T29] handle_mm_fault+0x1300/0x4a40 [ 860.063322][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 860.074852][ T29] ? numa_migrate_prep+0x350/0x350 [ 860.080385][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 860.085722][ T29] do_user_addr_fault+0x736/0x12d0 [ 860.094553][ T29] exc_page_fault+0x64/0x100 [ 860.099435][ T29] ? clear_bhb_loop+0x40/0x90 [ 860.104156][ T29] asm_exc_page_fault+0x26/0x30 [ 860.112719][ T29] RIP: 0033:0x7fb894c7dad6 [ 860.119078][ T29] RSP: 002b:00007fffa2571a20 EFLAGS: 00010246 [ 860.125192][ T29] RAX: 00007fb892a24000 RBX: 000055556db6c110 RCX: 0000000000000000 [ 860.136160][ T29] RDX: 00000000000036de RSI: 000055556db7a7c8 RDI: 0000000000000001 [ 860.144391][ T29] RBP: 00007fffa2571f20 R08: 000055556db7a7e8 R09: 0000000000000093 [ 860.152845][ T29] R10: 00007fb894ff9e20 R11: 0000000000000000 R12: 00007fffa2571d60 [ 860.165920][ T29] R13: 00007fffa2571b50 R14: 585858582e7a7973 R15: 00007fffa2571aa0 [ 860.174353][ T29] [ 860.184155][ T29] INFO: task syz.0.3560:16553 blocked for more than 144 seconds. [ 860.195030][ T29] Not tainted syzkaller #0 [ 860.203924][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.212838][ T29] task:syz.0.3560 state:D stack:27048 pid:16553 ppid:14359 flags:0x00004004 [ 860.226700][ T29] Call Trace: [ 860.230252][ T29] [ 860.233207][ T29] __schedule+0x15ae/0x4700 [ 860.241038][ T29] ? mark_lock+0x94/0x320 [ 860.245412][ T29] ? asan.module_dtor+0x20/0x20 [ 860.250733][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 860.255798][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 860.262117][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 860.273071][ T29] schedule+0xbd/0x170 [ 860.277710][ T29] io_schedule+0x80/0xd0 [ 860.281990][ T29] bit_wait_io+0x11/0xd0 [ 860.286262][ T29] __wait_on_bit+0x9f/0x2c0 [ 860.297028][ T29] ? bit_wait+0xd0/0xd0 [ 860.301226][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 860.306709][ T29] ? bit_wait+0xd0/0xd0 [ 860.314075][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 860.319208][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 860.325767][ T29] ? bit_waitqueue+0x30/0x30 [ 860.333524][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 860.338987][ T29] do_get_write_access+0x5c9/0xe00 [ 860.344396][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 860.353699][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 860.360185][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 860.366360][ T29] ? __might_sleep+0xe0/0xe0 [ 860.374056][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 860.382087][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 860.391414][ T29] ext4_dirty_inode+0xcb/0x110 [ 860.396215][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 860.405398][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 860.413482][ T29] file_update_time+0x187/0x1a0 [ 860.418615][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 860.424468][ T29] ? filemap_fault+0x103c/0x1540 [ 860.433982][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 860.440042][ T29] ? pte_alloc_one+0x3b6/0x540 [ 860.444836][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 860.454339][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 860.459614][ T29] do_page_mkwrite+0x153/0x3f0 [ 860.464428][ T29] handle_mm_fault+0x1a26/0x4a40 [ 860.472485][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 860.477728][ T29] ? numa_migrate_prep+0x350/0x350 [ 860.482875][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 860.488665][ T29] do_user_addr_fault+0x736/0x12d0 [ 860.493834][ T29] exc_page_fault+0x64/0x100 [ 860.504235][ T29] asm_exc_page_fault+0x26/0x30 [ 860.512881][ T29] RIP: 0033:0x7fe3efe73c09 [ 860.520565][ T29] RSP: 002b:00007ffc344d1e10 EFLAGS: 00010202 [ 860.528315][ T29] RAX: 0000001b34d24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 860.536307][ T29] RDX: 0000001b34d23ffc RSI: 00000000005ffde8 RDI: 00007fe3f0d55700 [ 860.548726][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fe3f0212000 [ 860.556839][ T29] R10: 00007fe3f0d55700 R11: 0000000000000000 R12: 0000000000000000 [ 860.566723][ T29] R13: 0000000000008424 R14: ffffffff8132425e R15: 00007fe3f0d55720 [ 860.575037][ T29] ? fpregs_activate+0x8e/0x1b0 [ 860.582895][ T29] [ 860.585958][ T29] INFO: task syz.5.3568:16569 blocked for more than 144 seconds. [ 860.602357][ T29] Not tainted syzkaller #0 [ 860.609791][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.625105][ T29] task:syz.5.3568 state:D stack:27048 pid:16569 ppid:12790 flags:0x00004004 [ 860.635480][ T29] Call Trace: [ 860.643017][ T29] [ 860.646027][ T29] __schedule+0x15ae/0x4700 [ 860.651669][ T29] ? mark_lock+0x94/0x320 [ 860.656037][ T29] ? asan.module_dtor+0x20/0x20 [ 860.664251][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 860.670291][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 860.676236][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 860.684821][ T29] schedule+0xbd/0x170 [ 860.689155][ T29] io_schedule+0x80/0xd0 [ 860.693427][ T29] bit_wait_io+0x11/0xd0 [ 860.700799][ T29] __wait_on_bit+0x9f/0x2c0 [ 860.705353][ T29] ? bit_wait+0xd0/0xd0 [ 860.710134][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 860.715644][ T29] ? bit_wait+0xd0/0xd0 [ 860.725307][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 860.735354][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 860.743711][ T29] ? bit_waitqueue+0x30/0x30 [ 860.748582][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 860.753822][ T29] do_get_write_access+0x5c9/0xe00 [ 860.763093][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 860.769360][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 860.775541][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 860.784811][ T29] ? __might_sleep+0xe0/0xe0 [ 860.789689][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 860.795265][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 860.803998][ T29] ext4_dirty_inode+0xcb/0x110 [ 860.809030][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 860.814864][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 860.823035][ T29] file_update_time+0x187/0x1a0 [ 860.830743][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 860.843790][ T29] ? filemap_fault+0x103c/0x1540 [ 860.849134][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 860.854891][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 860.864488][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 860.870684][ T29] ? __pte_offset_map+0x20d/0x280 [ 860.875744][ T29] do_page_mkwrite+0x153/0x3f0 [ 860.883844][ T29] handle_mm_fault+0x1a26/0x4a40 [ 860.889061][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 860.894034][ T29] ? numa_migrate_prep+0x350/0x350 [ 860.902331][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 860.909054][ T29] do_user_addr_fault+0x736/0x12d0 [ 860.914213][ T29] exc_page_fault+0x64/0x100 [ 860.922034][ T29] ? clear_bhb_loop+0x40/0x90 [ 860.926749][ T29] asm_exc_page_fault+0x26/0x30 [ 860.931695][ T29] RIP: 0033:0x7f1799873ba9 [ 860.942955][ T29] RSP: 002b:00007ffc80053920 EFLAGS: 00010202 [ 860.952802][ T29] RAX: 0000001b34522000 RBX: ffffffff813c16fb RCX: 0000001b34521ff8 [ 860.963968][ T29] RDX: 0000001b33f24220 RSI: 0000000000000008 RDI: 00007f179a755720 [ 860.972317][ T29] RBP: 000000000000015c R08: 00007f1799c10000 R09: 00007f1799c12000 [ 860.984212][ T29] R10: 00000000813c16ff R11: 0000000000000002 R12: 00007f1799c26038 [ 860.993882][ T29] R13: 0000000000000169 R14: ffffffff813c16ef R15: 00007f179a755720 [ 861.002294][ T29] ? __unwind_start+0x49f/0x730 [ 861.010099][ T29] ? __unwind_start+0x4ab/0x730 [ 861.015002][ T29] [ 861.018371][ T29] INFO: task syz.2.3569:16571 blocked for more than 144 seconds. [ 861.026115][ T29] Not tainted syzkaller #0 [ 861.034143][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.044551][ T29] task:syz.2.3569 state:D stack:27560 pid:16571 ppid:10307 flags:0x00004004 [ 861.062657][ T29] Call Trace: [ 861.065968][ T29] [ 861.070424][ T29] __schedule+0x15ae/0x4700 [ 861.074999][ T29] ? mark_lock+0x94/0x320 [ 861.081868][ T29] ? asan.module_dtor+0x20/0x20 [ 861.086757][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 861.093774][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 861.102092][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 861.107600][ T29] schedule+0xbd/0x170 [ 861.111701][ T29] io_schedule+0x80/0xd0 [ 861.115962][ T29] bit_wait_io+0x11/0xd0 [ 861.123414][ T29] __wait_on_bit+0x9f/0x2c0 [ 861.128177][ T29] ? bit_wait+0xd0/0xd0 [ 861.132365][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 861.142399][ T29] ? bit_wait+0xd0/0xd0 [ 861.146597][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 861.152593][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 861.162337][ T29] ? bit_waitqueue+0x30/0x30 [ 861.171486][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 861.176825][ T29] do_get_write_access+0x5c9/0xe00 [ 861.185168][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 861.191568][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 861.201677][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 861.208078][ T29] ? __might_sleep+0xe0/0xe0 [ 861.212710][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 861.221668][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 861.227666][ T29] ext4_dirty_inode+0xcb/0x110 [ 861.232469][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 861.245188][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 861.250566][ T29] file_update_time+0x187/0x1a0 [ 861.255451][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 861.263638][ T29] ? filemap_fault+0x103c/0x1540 [ 861.271138][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 861.283449][ T29] ? pte_alloc_one+0x3b6/0x540 [ 861.288491][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 861.294760][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 861.303091][ T29] do_page_mkwrite+0x153/0x3f0 [ 861.308220][ T29] handle_mm_fault+0x1a26/0x4a40 [ 861.313182][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 861.322273][ T29] ? numa_migrate_prep+0x350/0x350 [ 861.328247][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 861.333561][ T29] do_user_addr_fault+0x736/0x12d0 [ 861.341878][ T29] exc_page_fault+0x64/0x100 [ 861.348245][ T29] ? clear_bhb_loop+0x40/0x90 [ 861.352973][ T29] asm_exc_page_fault+0x26/0x30 [ 861.361014][ T29] RIP: 0033:0x7fdd75e6cea3 [ 861.365468][ T29] RSP: 002b:00007ffdf0bf0890 EFLAGS: 00010246 [ 861.371937][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30264000 [ 861.384548][ T29] RDX: 0000001b30224000 RSI: 0000000000600000 RDI: 00007fdd761e7708 [ 861.399793][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.408065][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.416057][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdf0bf0b20 [ 861.426984][ T29] [ 861.430044][ T29] INFO: task syz.7.3570:16573 blocked for more than 145 seconds. [ 861.441440][ T29] Not tainted syzkaller #0 [ 861.446412][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.456712][ T29] task:syz.7.3570 state:D stack:27560 pid:16573 ppid:13486 flags:0x00004004 [ 861.469006][ T29] Call Trace: [ 861.472310][ T29] [ 861.475290][ T29] __schedule+0x15ae/0x4700 [ 861.481214][ T29] ? mark_lock+0x94/0x320 [ 861.485584][ T29] ? asan.module_dtor+0x20/0x20 [ 861.494369][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 861.504495][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 861.512753][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 861.519075][ T29] schedule+0xbd/0x170 [ 861.523179][ T29] io_schedule+0x80/0xd0 [ 861.529965][ T29] bit_wait_io+0x11/0xd0 [ 861.534247][ T29] __wait_on_bit+0x9f/0x2c0 [ 861.539118][ T29] ? bit_wait+0xd0/0xd0 [ 861.543308][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 861.554813][ T29] ? bit_wait+0xd0/0xd0 [ 861.559356][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 861.564144][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 861.572327][ T29] ? bit_waitqueue+0x30/0x30 [ 861.577285][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 861.582619][ T29] do_get_write_access+0x5c9/0xe00 [ 861.590991][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 861.599018][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 861.605223][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 861.619040][ T29] ? __might_sleep+0xe0/0xe0 [ 861.623702][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 861.634995][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 861.643710][ T29] ext4_dirty_inode+0xcb/0x110 [ 861.648739][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 861.656081][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 861.665246][ T29] file_update_time+0x187/0x1a0 [ 861.670375][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 861.675418][ T29] ? filemap_fault+0x103c/0x1540 [ 861.683638][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 861.689704][ T29] ? pte_alloc_one+0x3b6/0x540 [ 861.694497][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 861.703877][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 861.709966][ T29] do_page_mkwrite+0x153/0x3f0 [ 861.714782][ T29] handle_mm_fault+0x1a26/0x4a40 [ 861.728759][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 861.733755][ T29] ? numa_migrate_prep+0x350/0x350 [ 861.741415][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 861.746728][ T29] do_user_addr_fault+0x736/0x12d0 [ 861.752959][ T29] exc_page_fault+0x64/0x100 [ 861.761460][ T29] ? clear_bhb_loop+0x40/0x90 [ 861.766195][ T29] asm_exc_page_fault+0x26/0x30 [ 861.773059][ T29] RIP: 0033:0x7f1196c6cea3 [ 861.779961][ T29] RSP: 002b:00007ffe26761500 EFLAGS: 00010246 [ 861.786173][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e064000 [ 861.795441][ T29] RDX: 0000001b2e024000 RSI: 0000000000400000 RDI: 00007f1196fe7708 [ 861.805795][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.814718][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.825253][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe26761790 [ 861.833663][ T29] [ 861.836728][ T29] [ 861.836728][ T29] Showing all locks held in the system: [ 861.853110][ T29] 1 lock held by khungtaskd/29: [ 861.860360][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 861.873232][ T29] 4 locks held by kworker/u4:10/4545: [ 861.880556][ T29] #0: ffff88801d66e938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 861.894296][ T29] #1: ffffc9000f027d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 861.907328][ T29] #2: ffff88814d5d60e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 861.920902][ T29] #3: ffff88814d5d8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 861.931886][ T29] 2 locks held by getty/5545: [ 861.936578][ T29] #0: ffff88802f5f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 861.953584][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 861.971865][ T29] 3 locks held by syz-executor/5775: [ 861.977464][ T29] #0: ffff8880304f4420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 861.991766][ T29] #1: ffff88814d5d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 862.002054][ T29] #2: ffff88814d5da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 862.014848][ T29] 3 locks held by syz.0.3560/16553: [ 862.020377][ T29] #0: ffff888061a427a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 862.030901][ T29] #1: ffff88814d5d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 862.045181][ T29] #2: ffff88814d5da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 862.055252][ T29] 3 locks held by syz.5.3568/16569: [ 862.066339][ T29] #0: ffff88807e1a8b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 862.083537][ T29] #1: ffff88814d5d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 862.093837][ T29] #2: ffff88814d5da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 862.108337][ T29] 3 locks held by syz.2.3569/16571: [ 862.113577][ T29] #0: ffff88807e1ad720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 862.126221][ T29] #1: ffff88814d5d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 862.139107][ T29] #2: ffff88814d5da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 862.150119][ T29] 3 locks held by syz.7.3570/16573: [ 862.155343][ T29] #0: ffff88807e1aa7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 862.171377][ T29] #1: ffff88814d5d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 862.181542][ T29] #2: ffff88814d5da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 862.197039][ T29] [ 862.199413][ T29] ============================================= [ 862.199413][ T29] [ 862.213207][ T29] NMI backtrace for cpu 0 [ 862.217578][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 862.224795][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 862.234861][ T29] Call Trace: [ 862.238166][ T29] [ 862.241104][ T29] dump_stack_lvl+0x18c/0x250 [ 862.245807][ T29] ? __wake_up_klogd+0xd9/0x100 [ 862.250671][ T29] ? show_regs_print_info+0x20/0x20 [ 862.255894][ T29] ? load_image+0x420/0x420 [ 862.260412][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 862.265403][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 862.271574][ T29] ? load_image+0x420/0x420 [ 862.276083][ T29] ? wq_watchdog_touch+0xef/0x170 [ 862.281119][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 862.287202][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 862.293187][ T29] watchdog+0xf59/0xfa0 [ 862.297349][ T29] ? watchdog+0x1e1/0xfa0 [ 862.301697][ T29] kthread+0x2fa/0x390 [ 862.305791][ T29] ? hungtask_pm_notify+0x50/0x50 [ 862.310825][ T29] ? kthread_blkcg+0xd0/0xd0 [ 862.315437][ T29] ret_from_fork+0x48/0x80 [ 862.319858][ T29] ? kthread_blkcg+0xd0/0xd0 [ 862.324473][ T29] ret_from_fork_asm+0x11/0x20 [ 862.329272][ T29] [ 862.348890][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 862.355810][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 862.363012][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 862.373074][ T29] Call Trace: [ 862.376362][ T29] [ 862.379297][ T29] dump_stack_lvl+0x18c/0x250 [ 862.384001][ T29] ? show_regs_print_info+0x20/0x20 [ 862.389252][ T29] ? load_image+0x420/0x420 [ 862.393829][ T29] panic+0x2ca/0x720 [ 862.397741][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 862.402258][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 862.407831][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 862.413214][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 862.419394][ T29] watchdog+0xf98/0xfa0 [ 862.423572][ T29] ? watchdog+0x1e1/0xfa0 [ 862.427927][ T29] kthread+0x2fa/0x390 [ 862.432001][ T29] ? hungtask_pm_notify+0x50/0x50 [ 862.437068][ T29] ? kthread_blkcg+0xd0/0xd0 [ 862.441672][ T29] ret_from_fork+0x48/0x80 [ 862.446094][ T29] ? kthread_blkcg+0xd0/0xd0 [ 862.450687][ T29] ret_from_fork_asm+0x11/0x20 [ 862.455470][ T29] [ 862.458558][ T29] Kernel Offset: disabled [ 862.462888][ T29] Rebooting in 86400 seconds..