last executing test programs: 1m47.246810942s ago: executing program 1 (id=408): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000054c0)=""/4124, 0x101c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) 1m46.957795746s ago: executing program 1 (id=413): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24008095}, 0x4004084) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01fd0000fe", 0x5, 0x2a25}]) 1m46.638578512s ago: executing program 1 (id=417): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 1m46.505653918s ago: executing program 1 (id=420): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8) getdents(r0, &(0x7f0000000880)=""/232, 0xe8) 1m46.26292267s ago: executing program 1 (id=423): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(0xffffffffffffffff, 0x81, 0x4) 1m45.603703962s ago: executing program 1 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 1m45.357679714s ago: executing program 32 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 7.377921703s ago: executing program 4 (id=1360): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0xa0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 6.325717934s ago: executing program 4 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 6.101081715s ago: executing program 4 (id=1372): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 5.921046513s ago: executing program 4 (id=1375): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 5.747721492s ago: executing program 4 (id=1378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.541059982s ago: executing program 4 (id=1380): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) preadv2(r1, 0x0, 0x0, 0x466, 0x8, 0x8) 3.324318419s ago: executing program 2 (id=1407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xc0002140, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3.048200883s ago: executing program 2 (id=1411): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x70004}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.816699574s ago: executing program 2 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d000"], 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2.47523728s ago: executing program 0 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, 0x0}) 2.414101433s ago: executing program 2 (id=1419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.149756296s ago: executing program 3 (id=1421): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) 2.107838078s ago: executing program 0 (id=1422): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x50) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0x2020) 2.041703251s ago: executing program 2 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)="656e61626c655f6576656e743a73636865642fdf66f5fc3e8b167de3f340aefcfa55cadc6a57efaa55dfc55c38053650e0a83bc42042", 0x36) 1.952847326s ago: executing program 3 (id=1424): r0 = eventfd2(0x0, 0x0) r1 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40002005}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) 1.821039302s ago: executing program 2 (id=1426): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b09, 0x0) 1.65319902s ago: executing program 3 (id=1427): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.374007473s ago: executing program 0 (id=1429): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x100, 0x202, 0xa39f, 0xffff0000, r1}, 0x10) 1.367989254s ago: executing program 3 (id=1431): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.209950512s ago: executing program 5 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)="6252657175657374547970653d2dd5722e", 0x11) 1.141989035s ago: executing program 0 (id=1433): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100), 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="14", 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.058098139s ago: executing program 5 (id=1434): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) 1.017564251s ago: executing program 0 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 817.976151ms ago: executing program 5 (id=1436): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 795.789022ms ago: executing program 0 (id=1437): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x77e}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 708.098156ms ago: executing program 5 (id=1438): unshare(0xa000400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) fdatasync(r0) 520.032485ms ago: executing program 5 (id=1439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, 0x0) 446.585779ms ago: executing program 5 (id=1440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 417.3646ms ago: executing program 3 (id=1441): unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x20000) syz_clone(0x30024000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000a00)=""/100, 0x64) kernel console output (not intermixed with test programs): System zones: 1-3, 19-19, 35-36 [ 107.257874][ T5236] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.276822][ T26] audit: type=1326 audit(1789178981.800:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4279e159 code=0x7ffc0000 [ 107.303621][ T5216] XFS (loop0): Mounting V5 Filesystem [ 107.334918][ T5249] loop4: detected capacity change from 0 to 128 [ 107.342162][ T5236] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.375497][ T26] audit: type=1326 audit(1789178981.830:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4279e159 code=0x7ffc0000 [ 107.458016][ T5253] loop3: detected capacity change from 0 to 512 [ 107.520118][ T26] audit: type=1326 audit(1789178981.830:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4279e159 code=0x7ffc0000 [ 107.573264][ T5216] XFS (loop0): Ending clean mount [ 107.644837][ T5253] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.342: bad orphan inode 11862016 [ 107.662283][ T26] audit: type=1326 audit(1789178981.830:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdf4279e159 code=0x7ffc0000 [ 107.700075][ T5216] XFS (loop0): Quotacheck needed: Please wait. [ 107.707924][ T26] audit: type=1326 audit(1789178981.840:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf4279dec2 code=0x7ffc0000 [ 107.714325][ T5253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.750869][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 107.803869][ T5260] netlink: 14 bytes leftover after parsing attributes in process `syz.4.344'. [ 107.851271][ T26] audit: type=1326 audit(1789178981.860:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4275e98e code=0x7ffc0000 [ 107.884484][ T5253] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.902688][ T5216] XFS (loop0): Quotacheck: Done. [ 108.000735][ T26] audit: type=1326 audit(1789178981.860:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdf4279df87 code=0x7ffc0000 [ 108.060492][ T26] audit: type=1326 audit(1789178981.860:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf4275e98e code=0x7ffc0000 [ 108.115697][ T26] audit: type=1326 audit(1789178981.860:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4279ddeb code=0x7ffc0000 [ 108.166129][ T26] audit: type=1326 audit(1789178981.930:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5248 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4279e159 code=0x7ffc0000 [ 108.206388][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 108.247184][ T5266] program syz.1.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.274055][ T4272] XFS (loop0): Unmounting Filesystem [ 108.292299][ T5260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.342364][ T5260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.464114][ T5260] bond0 (unregistering): Released all slaves [ 110.668174][ T4533] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 110.733253][ T5304] loop1: detected capacity change from 0 to 8192 [ 110.880177][ T4533] usb 3-1: not running at top speed; connect to a high speed hub [ 110.909094][ T4533] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.952399][ T5311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.365'. [ 110.964051][ T4533] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 110.988404][ T4533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.996455][ T4533] usb 3-1: Product: syz [ 111.018096][ T4533] usb 3-1: Manufacturer: syz [ 111.022828][ T4533] usb 3-1: SerialNumber: syz [ 111.047047][ T4533] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 111.077777][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 111.098245][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 111.120465][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 111.168412][ T4533] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 111.210052][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 111.265050][ T4533] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 111.307886][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 111.409037][ T4533] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 111.419299][ T4533] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.433608][ T4533] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 111.437362][ T5319] loop0: detected capacity change from 0 to 1024 [ 111.623712][ T5325] hfsplus: request for non-existent node 211 in B*Tree [ 111.664305][ T5325] hfsplus: request for non-existent node 211 in B*Tree [ 111.733415][ T4533] usb 3-1: USB disconnect, device number 2 [ 111.774361][ T4533] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 111.836093][ T4533] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 111.865364][ T5150] hfsplus: b-tree write err: -5, ino 8 [ 111.879757][ T4533] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 111.898394][ T4533] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 111.919250][ T5330] loop1: detected capacity change from 0 to 8192 [ 111.925595][ T4533] keyspan 3-1:1.0: device disconnected [ 111.979828][ T5330] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.058229][ T5330] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 112.076455][ T5330] REISERFS (device loop1): using ordered data mode [ 112.084349][ T5330] reiserfs: using flush barriers [ 112.108352][ T5330] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.128871][ T5330] REISERFS (device loop1): checking transaction log (loop1) [ 112.289188][ T5330] REISERFS (device loop1): Using tea hash to sort names [ 112.311438][ T5330] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 112.334896][ T5330] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 112.378937][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.602548][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 112.610938][ T22] usb 4-1: config 0 has no interfaces? [ 112.616467][ T22] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.666311][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.694610][ T22] usb 4-1: config 0 descriptor?? [ 112.959701][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.983928][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.019079][ T4533] usb 4-1: USB disconnect, device number 3 [ 113.045968][ T5368] device erspan0 entered promiscuous mode [ 113.487516][ T5373] loop1: detected capacity change from 0 to 32768 [ 113.536236][ T5373] JBD2: Ignoring recovery information on journal [ 113.598141][ T4533] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.598676][ T5373] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.755963][ T5373] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 113.773581][ T5378] loop4: detected capacity change from 0 to 8192 [ 113.817039][ T5373] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.829713][ T5373] OCFS2: File system is now read-only. [ 113.834352][ T4533] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 113.835202][ T5373] (syz.1.393,5373,0):ocfs2_search_one_group:1706 ERROR: status = -30 [ 113.851063][ T4533] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.852065][ T5373] (syz.1.393,5373,0):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 113.874721][ T5373] (syz.1.393,5373,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 113.875984][ T5378] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.883949][ T5373] (syz.1.393,5373,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 113.905127][ T5373] (syz.1.393,5373,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 113.913492][ T5373] (syz.1.393,5373,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 113.921463][ T5373] (syz.1.393,5373,0):ocfs2_mknod:385 ERROR: status = -30 [ 113.929117][ T5373] (syz.1.393,5373,0):ocfs2_mknod:502 ERROR: status = -30 [ 113.940385][ T5373] (syz.1.393,5373,0):ocfs2_mkdir:659 ERROR: status = -30 [ 113.954022][ T4533] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 113.999014][ T4533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.042533][ T4284] ocfs2: Unmounting device (7,1) on (node local) [ 114.058000][ T5378] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 114.070865][ T5378] REISERFS (device loop4): using ordered data mode [ 114.087999][ T4533] usb 4-1: Product: syz [ 114.093046][ T4533] usb 4-1: Manufacturer: syz [ 114.098217][ T5378] reiserfs: using flush barriers [ 114.100125][ T4533] usb 4-1: SerialNumber: syz [ 114.106294][ T5378] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.127910][ T4533] rtl8150 4-1:1.0: couldn't find required endpoints [ 114.138693][ T4533] rtl8150: probe of 4-1:1.0 failed with error -5 [ 114.176037][ T5378] REISERFS (device loop4): checking transaction log (loop4) [ 114.359075][ T5378] REISERFS (device loop4): Using tea hash to sort names [ 114.366526][ T5378] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 114.389822][ T4322] usb 4-1: USB disconnect, device number 4 [ 114.418325][ T5378] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 115.199779][ T5411] loop3: detected capacity change from 0 to 512 [ 115.283680][ T5411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.331408][ T5411] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.393163][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 115.761272][ T4466] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.833597][ T5437] loop1: detected capacity change from 0 to 736 [ 115.913887][ T5439] loop2: detected capacity change from 0 to 512 [ 115.951218][ T4466] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.974696][ T4466] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 115.986933][ T5439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.009554][ T4466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.027863][ T4466] usb 4-1: Product: syz [ 116.033776][ T4466] usb 4-1: Manufacturer: syz [ 116.042552][ T5439] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 116.094128][ T4466] usb 4-1: SerialNumber: syz [ 116.111096][ T5445] loop4: detected capacity change from 0 to 512 [ 116.154790][ T5439] EXT4-fs (loop2): 1 truncate cleaned up [ 116.167236][ T5439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.213415][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 116.213430][ T26] audit: type=1800 audit(1789178990.740:47): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.421" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 116.280605][ T4466] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 116.288869][ T5445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.297943][ T5445] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.315020][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 116.318259][ T4466] cdc_wdm 4-1:1.0: Unknown control protocol [ 116.417905][ T5445] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 116.546036][ T5451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 116.553465][ T5453] block2mtd: illegal erase size [ 116.676345][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 116.739403][ T7] usb 4-1: USB disconnect, device number 5 [ 116.835210][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.982264][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.114529][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.256151][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.621141][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.635968][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.677153][ T5482] loop3: detected capacity change from 0 to 1024 [ 117.683821][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.705831][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.714588][ T5482] hfsplus: request for non-existent node 211 in B*Tree [ 117.722081][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.730093][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.822663][ T5482] hfsplus: request for non-existent node 211 in B*Tree [ 117.901333][ T5465] loop4: detected capacity change from 0 to 32768 [ 118.030460][ T4316] hfsplus: b-tree write err: -5, ino 8 [ 118.058055][ T5465] XFS (loop4): Mounting V5 Filesystem [ 118.248499][ T5465] XFS (loop4): Ending clean mount [ 118.449554][ T5465] XFS (loop4): User initiated shutdown received. [ 118.497234][ T5465] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 118.598444][ T5465] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 118.740046][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 118.769765][ T4279] XFS (loop4): Unmounting Filesystem [ 119.106592][ T5523] sctp: [Deprecated]: syz.2.447 (pid 5523) Use of int in max_burst socket option deprecated. [ 119.106592][ T5523] Use struct sctp_assoc_value instead [ 119.445431][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.457072][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.469291][ T5477] device bridge_slave_0 entered promiscuous mode [ 119.478173][ T4322] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.488725][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.526095][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.535122][ T5477] device bridge_slave_1 entered promiscuous mode [ 119.685651][ T4322] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.710053][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.733684][ T4322] usb 4-1: config 0 descriptor?? [ 119.761210][ T4322] cp210x 4-1:0.0: cp210x converter detected [ 119.769029][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 119.829950][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.852229][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.880207][ T5544] sch_tbf: burst 0 is lower than device lo mtu (1296) ! [ 119.936775][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.976969][ T5477] team0: Port device team_slave_0 added [ 119.986287][ T5477] team0: Port device team_slave_1 added [ 120.161282][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.165567][ T4322] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 120.180594][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.211484][ T4322] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 120.212454][ T4321] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.248805][ T4322] usb 4-1: cp210x converter now attached to ttyUSB0 [ 120.255718][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.285204][ T4321] usb 3-1: SerialNumber: syz [ 120.356058][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.385440][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.450506][ T4540] usb 4-1: USB disconnect, device number 6 [ 120.454288][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.472293][ T4540] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.507098][ T4540] cp210x 4-1:0.0: device disconnected [ 120.533964][ T4321] usb 3-1: 0:2 : does not exist [ 120.552617][ T75] device hsr_slave_0 left promiscuous mode [ 120.574612][ T75] device hsr_slave_1 left promiscuous mode [ 120.585770][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.612361][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.660970][ T4321] usb 3-1: USB disconnect, device number 3 [ 120.709334][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.716796][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.726606][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.773551][ T75] device bridge_slave_1 left promiscuous mode [ 120.793342][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.842590][ T75] device bridge_slave_0 left promiscuous mode [ 120.851606][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.917410][ T75] device veth1_macvtap left promiscuous mode [ 120.928528][ T75] device veth0_macvtap left promiscuous mode [ 120.934685][ T75] device veth1_vlan left promiscuous mode [ 120.941010][ T75] device veth0_vlan left promiscuous mode [ 121.208214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.376554][ T5581] loop2: detected capacity change from 0 to 2048 [ 121.417997][ T5581] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 121.444858][ T5583] program syz.4.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.484481][ T5581] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 121.528342][ T5581] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 121.556724][ T5581] UDF-fs: Scanning with blocksize 512 failed [ 121.581312][ T5581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.714265][ T5587] loop4: detected capacity change from 0 to 512 [ 121.809356][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.848160][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 121.848965][ T5587] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.068664][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 122.446820][ T75] team0 (unregistering): Port device team_slave_1 removed [ 122.489683][ T75] team0 (unregistering): Port device team_slave_0 removed [ 122.542432][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.608861][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.171347][ T5606] loop4: detected capacity change from 0 to 512 [ 123.207804][ T75] bond0 (unregistering): Released all slaves [ 123.377224][ T5606] EXT4-fs (loop4): Test dummy encryption mode enabled [ 123.384652][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.392087][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.398423][ T5606] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 123.420089][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.436727][ T5606] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 123.446389][ T5606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.514396][ T5606] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.472: Directory hole found for htree leaf block 0 [ 123.554137][ T5615] trusted_key: encrypted_key: keyword 'ÉSw' not recognized [ 123.692015][ T5620] loop3: detected capacity change from 0 to 512 [ 123.709599][ T5477] device hsr_slave_0 entered promiscuous mode [ 123.721350][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 123.727806][ T5620] EXT4-fs: Ignoring removed i_version option [ 123.745064][ T5620] EXT4-fs: Ignoring removed oldalloc option [ 123.767413][ T5620] ext4: Unknown parameter 'uid<00000000000000000000' [ 123.778854][ T5477] device hsr_slave_1 entered promiscuous mode [ 123.799287][ T5477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.810561][ T5477] Cannot create hsr debugfs directory [ 123.854988][ T5622] loop4: detected capacity change from 0 to 512 [ 123.928445][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 123.949765][ T5622] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 124.104624][ T5622] EXT4-fs (loop4): 1 truncate cleaned up [ 124.142861][ T5628] loop3: detected capacity change from 0 to 2048 [ 124.168300][ T5622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.223000][ T5628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.252164][ T5628] EXT4-fs (loop3): shut down requested (2) [ 124.302102][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 124.455214][ T5477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.535074][ T5477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.631565][ T5477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.705738][ T5477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.713821][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 124.782922][ T5645] loop3: detected capacity change from 0 to 128 [ 124.862419][ T5645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.927199][ T4533] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.966140][ T5645] hpfs: filesystem error: improperly stopped [ 124.993478][ T4533] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.017600][ T5645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.050184][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.054600][ T5645] hpfs: You really don't want any checks? You are crazy... [ 125.071693][ T5645] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 125.087726][ T5645] hpfs: code page support is disabled [ 125.099607][ T5645] hpfs: hpfs_map_4sectors(): unaligned read [ 125.105634][ T5645] hpfs: hpfs_map_4sectors(): unaligned read [ 125.129265][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.137791][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.160093][ T5654] loop0: detected capacity change from 0 to 2048 [ 125.168388][ T5645] hpfs: filesystem error: unable to find root dir [ 125.192048][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.240254][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.247917][ T5654] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.250224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.303771][ T5654] NILFS (loop0): mounting unchecked fs [ 125.316160][ T5645] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 125.325729][ T4530] udevd[4530]: incorrect nilfs2 checksum on /dev/loop0 [ 125.340008][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.347956][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.424253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.457314][ T5654] NILFS (loop0): recovery complete [ 125.478604][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.506381][ T5663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.527694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.578583][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.585763][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.664203][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.702668][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.721419][ T5667] loop3: detected capacity change from 0 to 8 [ 125.738945][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.785056][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.809500][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.876959][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.887634][ T5670] loop2: detected capacity change from 0 to 736 [ 125.938713][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.982513][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.008486][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 126.050992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.178645][ T5675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 126.197078][ T5675] team0: Port device batadv1 added [ 126.223187][ T5477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.264659][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.306603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.318695][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.575858][ T5678] loop2: detected capacity change from 0 to 4096 [ 126.664070][ T5678] ntfs: volume version 3.1. [ 126.992772][ T5697] loop3: detected capacity change from 0 to 128 [ 127.237414][ T5705] nfsd: exp_rootfh path not found \ [ 127.248305][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.318173][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.352390][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.541775][ T5715] loop0: detected capacity change from 0 to 512 [ 127.658386][ T5715] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 127.702757][ T5715] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 127.760002][ T5715] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.505: iget: bad i_size value: 12154757448730 [ 127.782147][ T5715] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.505: couldn't read orphan inode 13 (err -117) [ 127.794947][ T5715] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.962997][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 128.334924][ T5742] loop2: detected capacity change from 0 to 8 [ 128.734643][ T5755] loop2: detected capacity change from 0 to 1024 [ 128.780373][ T5755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.840277][ T5755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.874057][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.887994][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.928261][ T5755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.969071][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.006904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.025033][ T26] audit: type=1326 audit(1789179003.550:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.051876][ T5757] loop0: detected capacity change from 0 to 4096 [ 129.060645][ T5755] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.074608][ T5755] System zones: 0-1, 3-36 [ 129.090080][ T5477] device veth0_vlan entered promiscuous mode [ 129.124311][ T5755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.149470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.182749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.212567][ T26] audit: type=1326 audit(1789179003.550:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.236405][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.252400][ T5477] device veth1_vlan entered promiscuous mode [ 129.333849][ T26] audit: type=1326 audit(1789179003.560:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.399508][ T5477] device veth0_macvtap entered promiscuous mode [ 129.439132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.457106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.458143][ T26] audit: type=1326 audit(1789179003.560:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.478882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.512881][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 129.551173][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 129.562118][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.605825][ T26] audit: type=1326 audit(1789179003.580:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.618095][ T4272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.642197][ T5477] device veth1_macvtap entered promiscuous mode [ 129.674077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.703553][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.747704][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.748384][ T26] audit: type=1326 audit(1789179003.580:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.782470][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.808068][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.855048][ T26] audit: type=1326 audit(1789179003.580:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.874883][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.929259][ T26] audit: type=1326 audit(1789179003.580:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 129.946353][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.000096][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.024862][ T26] audit: type=1326 audit(1789179003.580:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 130.080508][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.114144][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.115658][ T26] audit: type=1326 audit(1789179003.580:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f174259e159 code=0x7ffc0000 [ 130.148067][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.243874][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.288515][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.320971][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.324161][ T5790] loop0: detected capacity change from 0 to 8 [ 130.381016][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.401734][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.430509][ T5792] loop3: detected capacity change from 0 to 16 [ 130.457120][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.493849][ T5792] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.518085][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.558167][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.598062][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.628384][ T5477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.658190][ T5477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.704083][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.754175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.779449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.846478][ T5477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.863101][ T5477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.886800][ T5477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.922092][ T5477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.017337][ T5785] loop2: detected capacity change from 0 to 32768 [ 131.194893][ T5785] (syz.2.522,5785,1):ocfs2_clear_journal_error:1115 ERROR: File system error 32768 recorded in journal 0. [ 131.238129][ T5785] (syz.2.522,5785,0):ocfs2_clear_journal_error:1117 ERROR: File system on device loop2 needs checking. [ 131.272228][ T5785] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.281715][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.310834][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.356916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.445827][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.482532][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.516754][ T5785] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 67108896 [ 131.535591][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.583670][ T5785] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.651956][ T5785] OCFS2: File system is now read-only. [ 131.692303][ T5785] (syz.2.522,5785,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 131.745103][ T5785] (syz.2.522,5785,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 131.789048][ T5785] (syz.2.522,5785,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 131.797459][ T5785] (syz.2.522,5785,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 131.848874][ T5785] (syz.2.522,5785,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 131.857023][ T5785] (syz.2.522,5785,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 131.888162][ T5785] (syz.2.522,5785,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 131.907125][ T5785] (syz.2.522,5785,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 131.953934][ T5785] (syz.2.522,5785,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 131.984337][ T5785] (syz.2.522,5785,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 132.027290][ T5785] (syz.2.522,5785,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 132.053935][ T5785] (syz.2.522,5785,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 132.108151][ T5785] (syz.2.522,5785,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 132.135391][ T5785] (syz.2.522,5785,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 132.167913][ T5785] (syz.2.522,5785,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 132.205660][ T5785] (syz.2.522,5785,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 132.251864][ T5785] (syz.2.522,5785,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 132.357087][ T5838] loop4: detected capacity change from 0 to 512 [ 132.406503][ T5838] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 132.533093][ T5838] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.537: iget: bad i_size value: 360287970189639680 [ 132.605820][ T5838] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.537: couldn't read orphan inode 15 (err -117) [ 132.618772][ T5785] syz.2.522 (5785) used greatest stack depth: 20448 bytes left [ 132.635113][ T5838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.656015][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 132.683993][ T5838] EXT4-fs (loop4): shut down requested (1) [ 132.731648][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.738249][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.753767][ T5820] loop0: detected capacity change from 0 to 32768 [ 132.855121][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 132.977291][ T5820] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 133.000524][ T5820] XFS (loop0): Mounting V5 Filesystem [ 133.163422][ T5820] XFS (loop0): Ending clean mount [ 133.167986][ T5862] loop4: detected capacity change from 0 to 136 [ 133.244389][ T5820] XFS (loop0): Quotacheck needed: Please wait. [ 133.369791][ T5820] XFS (loop0): Quotacheck: Done. [ 133.515569][ T5866] loop3: detected capacity change from 0 to 4096 [ 133.567566][ T5875] program syz.5.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.569040][ T4272] XFS (loop0): Unmounting Filesystem [ 133.592429][ T5876] loop2: detected capacity change from 0 to 1024 [ 133.862904][ T5873] loop4: detected capacity change from 0 to 8192 [ 133.969208][ T5873] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.037367][ T5873] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 134.098529][ T5873] REISERFS (device loop4): using ordered data mode [ 134.105183][ T5873] reiserfs: using flush barriers [ 134.185255][ T5873] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.291632][ T5873] REISERFS (device loop4): checking transaction log (loop4) [ 134.349829][ T5873] REISERFS (device loop4): Using r5 hash to sort names [ 134.357034][ T5873] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 134.527843][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 134.527857][ T26] audit: type=1800 audit(1789179009.050:67): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.545" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 135.384744][ T5889] loop3: detected capacity change from 0 to 32768 [ 135.564953][ T5889] XFS (loop3): Mounting V5 Filesystem [ 135.728491][ T5889] XFS (loop3): Ending clean mount [ 135.854570][ T5931] loop5: detected capacity change from 0 to 1024 [ 136.059541][ T4273] XFS (loop3): Unmounting Filesystem [ 136.646049][ T5952] tap0: tun_chr_ioctl cmd 1074812118 [ 136.697191][ T5957] loop2: detected capacity change from 0 to 1024 [ 136.804954][ T5954] loop5: detected capacity change from 0 to 4096 [ 136.861452][ T5954] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 136.924804][ T5962] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.772779][ T5992] set_capacity_and_notify: 1 callbacks suppressed [ 137.772795][ T5992] loop2: detected capacity change from 0 to 512 [ 137.821174][ T5992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.935566][ T5992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.975038][ T5992] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.316513][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 138.440195][ T6013] loop5: detected capacity change from 0 to 128 [ 138.491539][ T6013] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 138.528866][ T6013] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.534423][ T5985] loop3: detected capacity change from 0 to 32768 [ 138.705197][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 138.711882][ T5985] JBD2: Ignoring recovery information on journal [ 138.763009][ T6022] loop0: detected capacity change from 0 to 512 [ 138.926174][ T5985] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 138.935628][ T6022] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 138.968928][ T6022] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.988545][ T6022] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.593: bad orphan inode 15 [ 139.057588][ T6022] ext4_test_bit(bit=14, block=18) = 1 [ 139.121604][ T6022] is_bad_inode(inode)=0 [ 139.140918][ T6022] NEXT_ORPHAN(inode)=1023 [ 139.171573][ T6022] max_ino=32 [ 139.218880][ T6022] i_nlink=0 [ 139.307561][ T6022] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2921: inode #15: comm syz.0.593: corrupted xattr block 19 [ 139.400055][ T6022] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 139.461117][ T6022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 139.645881][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 139.740705][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 139.862567][ T6053] loop3: detected capacity change from 0 to 256 [ 139.922806][ T6053] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 140.763549][ T6059] loop0: detected capacity change from 0 to 32768 [ 140.794623][ T6059] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.603 (6059) [ 140.886444][ T6059] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 140.934489][ T6059] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 140.989862][ T6059] BTRFS info (device loop0): turning off barriers [ 141.006547][ T6059] BTRFS info (device loop0): turning on async discard [ 141.049242][ T6059] BTRFS info (device loop0): doing ref verification [ 141.055916][ T6059] BTRFS info (device loop0): using free space tree [ 141.236828][ T6059] BTRFS info (device loop0): enabling ssd optimizations [ 141.584149][ T4272] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.616085][ T6109] loop2: detected capacity change from 0 to 4096 [ 141.667498][ T6109] ntfs: volume version 3.1. [ 141.843376][ T6109] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 141.928324][ T6109] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 142.813805][ T6143] loop0: detected capacity change from 0 to 2048 [ 142.956326][ T6148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.170917][ T6148] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 143.190051][ T6148] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 143.208351][ T6148] Remounting filesystem read-only [ 143.272628][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 143.803540][ T6171] netlink: 'syz.2.641': attribute type 39 has an invalid length. [ 143.829689][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 144.144439][ T6184] loop4: detected capacity change from 0 to 128 [ 144.262294][ T6184] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.368186][ T6184] hpfs: filesystem error: improperly stopped [ 144.401953][ T6184] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.486364][ T6184] hpfs: You really don't want any checks? You are crazy... [ 144.504527][ T6184] hpfs: hpfs_map_sector(): read error [ 144.528233][ T6184] hpfs: code page support is disabled [ 144.546129][ T6184] hpfs: hpfs_map_4sectors(): unaligned read [ 144.587482][ T6184] hpfs: hpfs_map_4sectors(): unaligned read [ 144.597753][ T6184] hpfs: filesystem error: unable to find root dir [ 145.208122][ T4290] Bluetooth: hci1: command 0x2016 tx timeout [ 145.254032][ T6189] loop3: detected capacity change from 0 to 40427 [ 145.274457][ T6189] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 145.290288][ T6189] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.308322][ T6189] F2FS-fs (loop3): invalid crc value [ 145.361197][ T6189] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 145.408289][ T4466] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.610136][ T4466] usb 6-1: Using ep0 maxpacket: 8 [ 145.617025][ T4466] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 145.625121][ T6189] F2FS-fs (loop3): Start checkpoint disabled! [ 145.642203][ T4466] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.696422][ T4466] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.737309][ T4466] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.748279][ T6189] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.762216][ T4466] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.773528][ T6189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 145.788125][ T4466] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.794785][ T6232] program syz.2.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.807500][ T4466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.995706][ T6189] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 146.076761][ T4466] usb 6-1: GET_CAPABILITIES returned 0 [ 146.088260][ T4466] usbtmc 6-1:16.0: can't read capabilities [ 146.318215][ T128] usb 6-1: USB disconnect, device number 2 [ 146.437801][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 146.467875][ T6248] device hsr_slave_0 left promiscuous mode [ 146.501941][ T6248] device hsr_slave_1 left promiscuous mode [ 146.751593][ T6257] loop3: detected capacity change from 0 to 256 [ 146.816438][ T6257] FAT-fs (loop3): Directory bread(block 64) failed [ 146.866636][ T6257] FAT-fs (loop3): Directory bread(block 65) failed [ 146.905636][ T6257] FAT-fs (loop3): Directory bread(block 66) failed [ 146.958121][ T6257] FAT-fs (loop3): Directory bread(block 67) failed [ 146.964786][ T6257] FAT-fs (loop3): Directory bread(block 68) failed [ 147.008292][ T6257] FAT-fs (loop3): Directory bread(block 69) failed [ 147.040276][ T6257] FAT-fs (loop3): Directory bread(block 70) failed [ 147.067698][ T6257] FAT-fs (loop3): Directory bread(block 71) failed [ 147.118189][ T6257] FAT-fs (loop3): Directory bread(block 72) failed [ 147.158121][ T6257] FAT-fs (loop3): Directory bread(block 73) failed [ 147.848834][ T6288] loop4: detected capacity change from 0 to 128 [ 147.929954][ T6288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.989188][ T6288] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.042339][ T26] audit: type=1800 audit(1789179022.570:68): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.688" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 148.201556][ T6298] loop2: detected capacity change from 0 to 64 [ 148.239505][ T6300] loop3: detected capacity change from 0 to 256 [ 148.246658][ T6300] exfat: Deprecated parameter 'utf8' [ 148.274443][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 148.392322][ T6302] loop0: detected capacity change from 0 to 1024 [ 148.409318][ T6300] exfat: Deprecated parameter 'utf8' [ 148.414709][ T6300] exfat: Deprecated parameter 'utf8' [ 148.543451][ T6300] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 148.759367][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.696'. [ 148.919219][ T26] audit: type=1400 audit(1789179023.450:69): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=6312 comm="syz.0.697" name="p" offset=79 [ 149.049534][ T6284] loop5: detected capacity change from 0 to 40427 [ 149.152254][ T6284] F2FS-fs (loop5): invalid crc value [ 149.222781][ T6284] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 149.542758][ T6284] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.831503][ T5477] syz-executor: attempt to access beyond end of device [ 149.831503][ T5477] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.461204][ T6334] loop4: detected capacity change from 0 to 32768 [ 150.487093][ T6334] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.702 (6334) [ 150.526527][ T6334] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.562455][ T6334] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 150.588092][ T6334] BTRFS info (device loop4): turning off barriers [ 150.594602][ T6334] BTRFS info (device loop4): turning on async discard [ 150.668137][ T6334] BTRFS info (device loop4): doing ref verification [ 150.698111][ T128] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.726042][ T6334] BTRFS info (device loop4): using free space tree [ 150.918316][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 150.929453][ T128] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.963432][ T128] usb 3-1: config 0 has no interface number 0 [ 150.990953][ T128] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 151.003917][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.014492][ T128] usb 3-1: Product: syz [ 151.018989][ T128] usb 3-1: Manufacturer: syz [ 151.023986][ T128] usb 3-1: SerialNumber: syz [ 151.030979][ T128] usb 3-1: config 0 descriptor?? [ 151.085984][ T128] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 151.128281][ T128] usb 3-1: selecting invalid altsetting 1 [ 151.141284][ T128] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 151.194067][ T128] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 151.210141][ T128] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 151.219632][ T128] usb 3-1: media controller created [ 151.260237][ T6334] BTRFS info (device loop4): enabling ssd optimizations [ 151.262706][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.504286][ T128] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 151.521159][ T128] zl10353_read_register: readreg error (reg=127, ret==-71) [ 151.571685][ T128] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 151.678536][ T128] usb 3-1: USB disconnect, device number 4 [ 151.796897][ T4279] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.879437][ T4262] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4262) [ 152.958237][ T4466] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.163152][ T4466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.194760][ T4466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.245193][ T4466] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.308226][ T4466] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 153.348481][ T4466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.395176][ T4466] usb 6-1: config 0 descriptor?? [ 153.773433][ T6470] tap0: tun_chr_ioctl cmd 1074025677 [ 153.783814][ T6470] tap0: linktype set to 768 [ 153.857220][ T4466] thrustmaster 0003:044F:B324.0004: ignoring exceeding usage max [ 153.942524][ T4466] thrustmaster 0003:044F:B324.0004: unbalanced collection at end of report description [ 154.003779][ T4466] thrustmaster 0003:044F:B324.0004: parse failed [ 154.028252][ T4466] thrustmaster: probe of 0003:044F:B324.0004 failed with error -22 [ 154.087012][ T4466] usb 6-1: USB disconnect, device number 3 [ 154.540039][ T6496] loop0: detected capacity change from 0 to 4096 [ 154.568762][ T6496] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 155.097549][ T6513] loop5: detected capacity change from 0 to 4096 [ 155.128536][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.141378][ T6513] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 155.232040][ T6513] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 155.627858][ T26] audit: type=1326 audit(1789179030.150:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.5.761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3465d9e159 code=0x0 [ 155.736972][ T6541] loop0: detected capacity change from 0 to 128 [ 155.770677][ T6541] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 155.819687][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.108169][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.196289][ T6554] loop0: detected capacity change from 0 to 1024 [ 156.302852][ T7] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 156.322489][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.350454][ T7] usb 3-1: Product: syz [ 156.384354][ T7] usb 3-1: Manufacturer: syz [ 156.421007][ T7] usb 3-1: SerialNumber: syz [ 156.453441][ T7] usb 3-1: config 0 descriptor?? [ 156.644215][ T6563] loop5: detected capacity change from 0 to 1024 [ 156.893004][ T7] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 156.915005][ T7] usb 3-1: Firmware version (0.0) predates our first public release. [ 156.948707][ T7] usb 3-1: Please update to version 0.2 or newer [ 157.210841][ T7] usb 3-1: USB disconnect, device number 5 [ 157.289044][ T4290] Bluetooth: hci4: command 0x0405 tx timeout [ 157.816481][ T6594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.867849][ T6592] netlink: 'syz.5.781': attribute type 12 has an invalid length. [ 158.365571][ T6613] loop5: detected capacity change from 0 to 256 [ 158.461865][ T6620] hub 1-0:1.0: USB hub found [ 158.505819][ T6620] hub 1-0:1.0: 1 port detected [ 159.032352][ T6642] loop2: detected capacity change from 0 to 128 [ 159.139167][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.238549][ T6642] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.327658][ T6642] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 159.414009][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 159.974103][ T6636] loop3: detected capacity change from 0 to 32768 [ 160.017698][ T6668] loop5: detected capacity change from 0 to 8192 [ 160.077565][ T6668] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.096909][ T6636] XFS (loop3): Mounting V5 Filesystem [ 160.136471][ T6668] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 160.184852][ T6668] REISERFS (device loop5): using ordered data mode [ 160.248352][ T6668] reiserfs: using flush barriers [ 160.281273][ T6668] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.308203][ T6636] XFS (loop3): Ending clean mount [ 160.364260][ T6636] XFS (loop3): Quotacheck needed: Please wait. [ 160.368909][ T6668] REISERFS (device loop5): checking transaction log (loop5) [ 160.447011][ T6668] REISERFS (device loop5): Using r5 hash to sort names [ 160.501566][ T6668] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 160.553704][ T6636] XFS (loop3): Quotacheck: Done. [ 160.591426][ T26] audit: type=1800 audit(1789179035.120:71): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 160.681064][ T26] audit: type=1804 audit(1789179035.160:72): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.795" name="/newroot/162/file1/file1" dev="loop3" ino=9286 res=1 errno=0 [ 160.761335][ T6692] loop2: detected capacity change from 0 to 2048 [ 160.797992][ T4273] XFS (loop3): Unmounting Filesystem [ 160.823477][ T6692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.991022][ T6734] loop3: detected capacity change from 0 to 512 [ 162.075119][ T6734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 162.096553][ T6734] System zones: 1-12 [ 162.113274][ T6734] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.824: missing EA_INODE flag [ 162.180410][ T6731] loop0: detected capacity change from 0 to 4096 [ 162.207508][ T6734] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.824: error while reading EA inode 12 err=-117 [ 162.228613][ T6739] loop5: detected capacity change from 0 to 512 [ 162.236655][ T6734] EXT4-fs (loop3): 1 orphan inode deleted [ 162.248723][ T6734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.333887][ T6739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.458092][ T6739] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.478804][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 162.709045][ T6749] Failed to get privilege flags for destination (handle=0x2:0x1) [ 162.731657][ T6745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.753750][ T6745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.792213][ T6745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.821927][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 162.855942][ T6745] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.031254][ T6758] autofs4:pid:6758:autofs_fill_super: pipe file descriptor does not contain proper ops [ 164.014466][ T6762] loop0: detected capacity change from 0 to 131072 [ 164.037843][ T6762] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 164.045835][ T6762] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 164.054869][ T6762] F2FS-fs (loop0): Test dummy encryption mode enabled [ 164.112651][ T6762] F2FS-fs (loop0): invalid crc value [ 164.155096][ T6762] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.191684][ T6762] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 164.226165][ T6762] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 164.236563][ T6762] F2FS-fs (loop0): Start checkpoint disabled! [ 164.305125][ T6762] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 164.312294][ T6762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 164.349366][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.387915][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.395988][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.469221][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.476680][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.546514][ T6795] loop2: detected capacity change from 0 to 1024 [ 164.567799][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.575742][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.646133][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.677337][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.720804][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.736995][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.807870][ T6795] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.845891][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.886751][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.917717][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.941623][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.968148][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 164.975600][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.004729][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.029784][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.046771][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.075028][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.098788][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.117017][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.131605][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.147643][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.165282][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.177739][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.189786][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.202974][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.212756][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.228188][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.237234][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.245494][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.265486][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.282177][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.291229][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.298934][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.306417][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.315140][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.322959][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.330993][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.338791][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.346206][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.353983][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.361702][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.369932][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.377346][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.385140][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.393256][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.411973][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.419954][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.427396][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.435174][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.442638][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.450138][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.457621][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.465021][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.472462][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.479915][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.487292][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.495147][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.502634][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.510510][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.518717][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.526158][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.533616][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.541102][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.548573][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.555966][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.563437][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.570881][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.578407][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.585844][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.593372][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.601125][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.608703][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.616103][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.624021][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.631590][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.639049][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.646462][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.653915][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.661404][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.668965][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.676373][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.683854][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.691325][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.699187][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.706604][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.714103][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.721976][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.729532][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.736956][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.744486][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.751912][ T14] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 165.773378][ T14] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz1] on syz0 [ 165.841699][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 166.211977][ T6818] fido_id[6818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.595701][ T6839] program syz.5.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.605138][ T4322] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.797473][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 166.804754][ T4322] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.846893][ T4322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.857040][ T4322] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 1.00 [ 166.888032][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.918289][ T4322] usb 5-1: config 0 descriptor?? [ 167.160487][ T6852] loop2: detected capacity change from 0 to 64 [ 167.369598][ T4322] wacom 0003:056A:0017.0006: unknown main item tag 0x0 [ 167.397427][ T4322] wacom 0003:056A:0017.0006: unknown main item tag 0x1 [ 167.416655][ T4322] wacom 0003:056A:0017.0006: unknown main item tag 0x0 [ 167.447726][ T4322] wacom 0003:056A:0017.0006: unknown main item tag 0x5 [ 167.454839][ T4322] wacom 0003:056A:0017.0006: unknown main item tag 0x6 [ 167.466118][ T6856] loop2: detected capacity change from 0 to 512 [ 167.484319][ T4322] wacom 0003:056A:0017.0006: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 167.510226][ T4322] wacom 0003:056A:0017.0006: hidraw0: USB HID v0.02 Device [HID 056a:0017] on usb-dummy_hcd.4-1/input0 [ 167.523786][ T4322] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0017.0006/input/input8 [ 167.597387][ T6856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.650088][ T4322] usb 5-1: USB disconnect, device number 8 [ 167.656341][ T6856] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.805449][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 167.861240][ T6864] fido_id[6864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.091288][ T6870] netlink: 100 bytes leftover after parsing attributes in process `syz.5.871'. [ 168.887385][ T6807] block2mtd: error: cannot open device /dev/ [ 168.979443][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.875'. [ 169.026842][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.583573][ T6900] loop5: detected capacity change from 0 to 512 [ 169.617438][ T6901] input: syz0 as /devices/virtual/input/input11 [ 169.752682][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.885'. [ 169.798879][ T6877] loop4: detected capacity change from 0 to 32768 [ 169.810690][ T6900] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 169.898501][ T6900] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 169.906201][ T6900] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 171.581105][ T6952] loop2: detected capacity change from 0 to 256 [ 171.960901][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.159770][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 172.177686][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 172.227771][ T7] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 172.253008][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.277069][ T7] usb 5-1: Product: syz [ 172.290388][ T7] usb 5-1: Manufacturer: syz [ 172.304136][ T7] usb 5-1: SerialNumber: syz [ 172.337028][ T7] usb 5-1: config 0 descriptor?? [ 172.352469][ T6956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.367252][ T6956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.462710][ T6958] loop5: detected capacity change from 0 to 32768 [ 172.478188][ T6958] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.909 (6958) [ 172.519863][ T6958] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 172.543632][ T6958] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 172.570064][ T6958] BTRFS info (device loop5): using free space tree [ 172.586780][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 172.599825][ T6956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.623262][ T6956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.771306][ T6958] BTRFS info (device loop5): enabling ssd optimizations [ 172.786834][ T4261] usb 1-1: Using ep0 maxpacket: 8 [ 172.794103][ T4261] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.836080][ T4261] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.842915][ T4261] usb 1-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 1.00 [ 172.845127][ T26] audit: type=1800 audit(1789179303.375:73): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.909" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 172.862291][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.884824][ T4261] usb 1-1: config 0 descriptor?? [ 172.971902][ T7001] loop2: detected capacity change from 0 to 164 [ 173.040575][ T7001] rock: directory entry would overflow storage [ 173.051390][ T7001] rock: sig=0x5252, size=5, remaining=3 [ 173.083476][ T7] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 173.238526][ T5477] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 173.293666][ T7] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 173.312065][ T4261] wacom 0003:056A:0017.0007: unknown main item tag 0x0 [ 173.357067][ T7] usb 5-1: USB disconnect, device number 9 [ 173.364488][ T4261] wacom 0003:056A:0017.0007: unknown main item tag 0x1 [ 173.409131][ T4261] wacom 0003:056A:0017.0007: unknown main item tag 0x0 [ 173.431308][ T4261] wacom 0003:056A:0017.0007: unknown main item tag 0x5 [ 173.455635][ T4261] wacom 0003:056A:0017.0007: unknown main item tag 0x6 [ 173.464045][ T4261] wacom 0003:056A:0017.0007: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 173.525324][ T4261] wacom 0003:056A:0017.0007: hidraw0: USB HID v0.02 Device [HID 056a:0017] on usb-dummy_hcd.0-1/input0 [ 173.588853][ T4261] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0017.0007/input/input12 [ 173.724498][ T4261] usb 1-1: USB disconnect, device number 2 [ 173.988416][ T7025] program syz.5.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.999565][ T7027] loop4: detected capacity change from 0 to 1024 [ 174.004209][ T7021] fido_id[7021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.084678][ T7027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.131508][ T7027] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.216771][ T7032] bonding: no command found in bonding_masters - use +ifname or -ifname [ 174.225939][ T7020] loop3: detected capacity change from 0 to 32768 [ 174.238914][ T7020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.928 (7020) [ 174.280037][ T7027] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.929: lblock 3 mapped to illegal pblock 3 (length 2) [ 174.304753][ T7020] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.315196][ T7020] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 174.338512][ T7020] BTRFS info (device loop3): setting nodatasum [ 174.344938][ T7020] BTRFS info (device loop3): force zlib compression, level 3 [ 174.358018][ T7027] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.929: lblock 0 mapped to illegal pblock 0 (length 3) [ 174.374987][ T7020] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 174.385567][ T7020] BTRFS info (device loop3): use lzo compression, level 0 [ 174.398821][ T7027] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 174.414280][ T7020] BTRFS info (device loop3): turning on flush-on-commit [ 174.422324][ T7020] BTRFS info (device loop3): enabling auto defrag [ 174.430064][ T7027] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.430064][ T7027] [ 174.440932][ T7020] BTRFS info (device loop3): max_inline at 4096 [ 174.451465][ T7020] BTRFS info (device loop3): using free space tree [ 174.652311][ T7058] loop2: detected capacity change from 0 to 512 [ 174.667499][ T7020] BTRFS info (device loop3): enabling ssd optimizations [ 174.695755][ T5150] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 174.714912][ T7058] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 174.856093][ T7058] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #17: comm syz.2.937: iget: immutable or append flags not allowed on symlinks [ 174.892463][ T5150] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 174.936632][ T7058] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.937: couldn't read orphan inode 17 (err -117) [ 174.976260][ T7058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.000516][ T5150] EXT4-fs (loop4): This should not happen!! Data will be lost [ 175.000516][ T5150] [ 175.106675][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 175.253889][ T4273] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.329604][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 175.451709][ T7076] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.945'. [ 175.705296][ T4262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4262) [ 176.454163][ T7100] loop3: detected capacity change from 0 to 4096 [ 176.488060][ T7100] EXT4-fs: inline encryption not supported [ 176.514109][ T7100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.542712][ T7100] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.589484][ T7100] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 176.604532][ T7100] System zones: 0-5 [ 176.624895][ T7100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.736197][ T7093] loop2: detected capacity change from 0 to 40427 [ 176.757094][ T7093] F2FS-fs (loop2): invalid crc value [ 176.796759][ T7093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.918402][ T7097] loop0: detected capacity change from 0 to 32768 [ 176.944448][ T7093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 176.989934][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 176.995378][ T7097] JBD2: Ignoring recovery information on journal [ 177.168312][ T7097] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 177.439198][ T4278] syz-executor: attempt to access beyond end of device [ 177.439198][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.578779][ T7097] syz.0.951 (7097) used greatest stack depth: 18688 bytes left [ 177.633921][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 177.768268][ T7120] device erspan0 entered promiscuous mode [ 177.978495][ T7109] loop4: detected capacity change from 0 to 32768 [ 178.032099][ T7124] loop0: detected capacity change from 0 to 64 [ 178.102401][ T7109] add_index: next_index = 0. Resetting! [ 178.133346][ T7109] find_entry called with index >= next_index [ 178.143912][ T7124] syz.0.962: attempt to access beyond end of device [ 178.143912][ T7124] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 178.162310][ T7109] find_entry called with index >= next_index [ 178.206193][ T7109] find_entry called with index >= next_index [ 178.215386][ T7124] Buffer I/O error on dev loop0, logical block 512, async page read [ 178.216496][ T7109] find_entry called with index >= next_index [ 178.271319][ T7124] syz.0.962: attempt to access beyond end of device [ 178.271319][ T7124] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 178.359944][ T7109] non-latin1 character 0x3ff found in JFS file name [ 178.361779][ T7124] Buffer I/O error on dev loop0, logical block 56576, async page read [ 178.394540][ T7109] mount with iocharset=utf8 to access [ 178.590318][ T7130] program syz.2.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.088156][ T7126] loop3: detected capacity change from 0 to 32768 [ 179.122976][ T7126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.963 (7126) [ 179.213357][ T7126] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.255995][ T7126] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 179.290726][ T7126] BTRFS info (device loop3): using free space tree [ 179.636022][ T7126] BTRFS info (device loop3): enabling ssd optimizations [ 179.721405][ T26] audit: type=1800 audit(1789179310.246:74): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.963" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 179.809205][ T7175] loop4: detected capacity change from 0 to 1024 [ 179.962479][ T4273] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.996364][ T7177] loop0: detected capacity change from 0 to 4096 [ 180.023662][ T7177] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 180.187014][ T7179] loop5: detected capacity change from 0 to 4096 [ 180.272574][ T7179] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 180.468993][ T7179] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 180.567348][ T7190] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 180.691845][ T5477] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 180.715772][ T5477] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 180.784979][ T7192] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 181.147872][ T4321] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.369670][ T4321] usb 6-1: Using ep0 maxpacket: 32 [ 181.389144][ T4321] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.391581][ T7210] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 181.423912][ T4321] usb 6-1: config 0 has no interface number 0 [ 181.443448][ T4321] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.473082][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.508931][ T4321] usb 6-1: Product: syz [ 181.513164][ T4321] usb 6-1: Manufacturer: syz [ 181.529176][ T4321] usb 6-1: SerialNumber: syz [ 181.551698][ T4321] usb 6-1: config 0 descriptor?? [ 181.591662][ T4321] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 181.800475][ T4321] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 181.826362][ T4321] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.985461][ T7230] block nbd3: not configured, cannot reconfigure [ 182.044434][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 37 [ 182.083029][ T7227] loop2: detected capacity change from 0 to 4096 [ 182.185563][ T7235] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.264309][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.273215][ T4466] usb 6-1: USB disconnect, device number 4 [ 182.292468][ T7239] program syz.4.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.310353][ T4466] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.360181][ T4466] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.399835][ T4466] quatech2 6-1:0.51: device disconnected [ 182.513255][ T7246] loop2: detected capacity change from 0 to 64 [ 182.562638][ T7248] loop0: detected capacity change from 0 to 512 [ 182.579690][ T7246] gfs2: path_lookup on c::: returned error -2 [ 182.632052][ T7248] EXT4-fs: Invalid want_extra_isize 206 [ 182.818313][ T4466] kernel write not supported for file /input/mouse0 (pid: 4466 comm: kworker/0:12) [ 182.983487][ T7258] sd 0:0:1:0: PR command failed: 1026 [ 182.993806][ T7256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1013'. [ 183.012274][ T7258] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 183.032617][ T7258] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 183.903639][ T7260] loop5: detected capacity change from 0 to 32768 [ 184.092064][ T7285] loop4: detected capacity change from 0 to 1024 [ 184.143863][ T7285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.157861][ T7288] loop2: detected capacity change from 0 to 64 [ 184.229846][ T7285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.253450][ T7288] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 184.301222][ T7288] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 184.321638][ T7285] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 184.422230][ T26] audit: type=1800 audit(1789179314.947:75): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1028" name="file1" dev="loop2" ino=8 res=0 errno=0 [ 184.445294][ T7296] ax25_connect(): syz.3.1031 uses autobind, please contact jreuter@yaina.de [ 184.530702][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 185.171002][ T7322] input: syz0 as /devices/virtual/input/input15 [ 185.553934][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1049'. [ 185.844127][ T7350] loop4: detected capacity change from 0 to 1024 [ 185.881508][ T7350] EXT4-fs: Ignoring removed bh option [ 185.978899][ T7350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.257203][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 186.292330][ T7368] device bond0 entered promiscuous mode [ 186.357402][ T7368] device bond_slave_0 entered promiscuous mode [ 186.373660][ T7369] loop0: detected capacity change from 0 to 1024 [ 186.394347][ T7368] device bond_slave_1 entered promiscuous mode [ 186.432679][ T7369] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.451408][ T7368] device ipvlan1 entered promiscuous mode [ 186.472135][ T7368] device ipvlan1 left promiscuous mode [ 186.492588][ T7368] device bond0 left promiscuous mode [ 186.503581][ T26] audit: type=1400 audit(1789179317.027:76): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7372 comm="syz.5.1063" name="p" offset=92 [ 186.541984][ T7369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.561396][ T7368] device bond_slave_0 left promiscuous mode [ 186.575639][ T7368] device bond_slave_1 left promiscuous mode [ 186.772688][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 186.826351][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 187.014096][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 187.108451][ T7390] loop3: detected capacity change from 0 to 512 [ 187.146991][ T7390] EXT4-fs: Ignoring removed orlov option [ 187.183209][ T7390] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.211321][ T7390] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1070: corrupted in-inode xattr [ 187.225453][ T7390] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1070: couldn't read orphan inode 15 (err -117) [ 187.299433][ T7390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.565172][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 187.692808][ T7409] loop5: detected capacity change from 0 to 4096 [ 187.706062][ T7411] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 187.913178][ T7417] loop0: detected capacity change from 0 to 64 [ 188.148162][ T4272] hfs: node 4:3 still has 1 user(s)! [ 188.166124][ T7424] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 188.166124][ T7424] The task syz.3.1084 (7424) triggered the difference, watch for misbehavior. [ 188.276872][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 188.304581][ T7428] loop5: detected capacity change from 0 to 4096 [ 188.359834][ T7428] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.520491][ T7440] loop0: detected capacity change from 0 to 128 [ 188.580946][ T7440] netlink: 'syz.0.1091': attribute type 12 has an invalid length. [ 188.614440][ T7440] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 188.623729][ T7440] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1091'. [ 188.642906][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 188.844307][ T7447] EXT4-fs: Invalid want_extra_isize 206 [ 189.214984][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 189.237766][ T7459] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1098'. [ 189.259169][ T7460] set_capacity_and_notify: 1 callbacks suppressed [ 189.259183][ T7460] loop4: detected capacity change from 0 to 1024 [ 189.373795][ T7460] hfsplus: xattr searching failed [ 189.810057][ T7479] loop0: detected capacity change from 0 to 128 [ 189.863339][ T7479] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.876032][ T7479] hpfs: filesystem error: improperly stopped [ 189.885337][ T7479] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.893234][ T7479] hpfs: You really don't want any checks? You are crazy... [ 189.924703][ T7479] hpfs: Code page index out of array [ 189.954041][ T7479] hpfs: code page support is disabled [ 189.960040][ T7479] hpfs: hpfs_map_4sectors(): unaligned read [ 189.997805][ T7479] hpfs: hpfs_map_4sectors(): unaligned read [ 190.003846][ T7479] hpfs: filesystem error: unable to find root dir [ 190.052226][ T7479] hpfs: bad mount options. [ 190.596462][ T7485] loop4: detected capacity change from 0 to 32768 [ 190.603599][ T7486] loop2: detected capacity change from 0 to 32768 [ 190.665087][ T7485] JBD2: Ignoring recovery information on journal [ 190.759055][ T7486] XFS (loop2): Mounting V5 Filesystem [ 190.841768][ T7486] XFS (loop2): Ending clean mount [ 190.909912][ T7486] XFS (loop2): Quotacheck needed: Please wait. [ 190.917464][ T7485] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 191.044338][ T7486] XFS (loop2): Quotacheck: Done. [ 191.124706][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.130809][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.197565][ T4278] XFS (loop2): Unmounting Filesystem [ 191.264302][ T7485] syz.4.1109 (7485) used greatest stack depth: 18512 bytes left [ 191.370287][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 191.529935][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'. [ 191.769066][ T7525] nbd: socks must be embedded in a SOCK_ITEM attr [ 192.015279][ T7539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 192.093561][ T7546] loop3: detected capacity change from 0 to 1024 [ 192.138458][ T7548] ip_tables: iptables: counters copy to user failed while replacing table [ 192.251327][ T7545] hfsplus: invalid extended attribute record [ 192.349163][ T7552] loop2: detected capacity change from 0 to 1024 [ 192.369290][ T7553] tun0: tun_chr_ioctl cmd 1074025676 [ 192.380876][ T7553] tun0: owner set to 0 [ 192.398840][ T75] hfsplus: b-tree write err: -5, ino 25 [ 192.409872][ T75] hfsplus: b-tree write err: -5, ino 4 [ 192.425633][ T75] hfsplus: b-tree write err: -5, ino 2 [ 192.624835][ T4321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.804492][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 192.814418][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 192.821529][ T4321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 192.835598][ T4321] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.844895][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.853565][ T4321] usb 5-1: Product: syz [ 192.858343][ T4321] usb 5-1: Manufacturer: syz [ 192.862960][ T4321] usb 5-1: SerialNumber: syz [ 192.993123][ T7575] loop0: detected capacity change from 0 to 1764 [ 193.087444][ T4321] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 193.118147][ T4321] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 193.193475][ T4321] usb 5-1: USB disconnect, device number 10 [ 193.235500][ T7581] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1146'. [ 193.727651][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 193.949909][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.982552][ T22] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.014221][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.044965][ T22] usb 6-1: config 0 descriptor?? [ 194.128009][ T7614] loop0: detected capacity change from 0 to 512 [ 194.151503][ T7614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.172494][ T7612] loop4: detected capacity change from 0 to 2048 [ 194.181688][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.181735][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.259695][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 194.267106][ T7614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.274150][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 194.296014][ T22] usb 6-1: USB disconnect, device number 5 [ 194.303329][ T7612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 194.324171][ T7614] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.358119][ T7612] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 194.528242][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 194.576951][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 194.854340][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1168'. [ 194.885725][ T22] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 194.993871][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 195.022170][ T7637] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.102001][ T22] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 195.114989][ T22] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 195.125854][ T7628] loop3: detected capacity change from 0 to 32768 [ 195.145037][ T22] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.198592][ T22] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 195.228471][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.250509][ T7628] JBD2: Ignoring recovery information on journal [ 195.297760][ T22] usb 6-1: Product: syz [ 195.336379][ T22] usb 6-1: Manufacturer: syz [ 195.341122][ T22] usb 6-1: SerialNumber: syz [ 195.385316][ T7628] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.577715][ T7642] loop2: detected capacity change from 0 to 32768 [ 195.638872][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 195.743335][ T7642] XFS (loop2): Mounting V5 Filesystem [ 195.866584][ T7] usb 6-1: USB disconnect, device number 6 [ 195.872659][ T7642] XFS (loop2): Ending clean mount [ 196.047651][ T4278] XFS (loop2): Unmounting Filesystem [ 196.417482][ T7672] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1181'. [ 196.507144][ T7674] program syz.3.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.947107][ T7687] loop2: detected capacity change from 0 to 4096 [ 197.273738][ T4320] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 197.476879][ T4320] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.500378][ T4320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.522774][ T4320] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 197.552292][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.603461][ T4320] usb 6-1: config 0 descriptor?? [ 198.041898][ T4320] input: HID 05ac:0265 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0265.0008/input/input17 [ 198.139407][ T4320] magicmouse 0003:05AC:0265.0008: input,hidraw0: USB HID v2.53 Joystick [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 198.502388][ T4320] usb 6-1: USB disconnect, device number 7 [ 198.570758][ T7714] fido_id[7714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 198.629612][ T7724] loop4: detected capacity change from 0 to 64 [ 198.923774][ T7728] loop3: detected capacity change from 0 to 4096 [ 199.213175][ T7741] loop4: detected capacity change from 0 to 1024 [ 199.238724][ T7742] loop5: detected capacity change from 0 to 512 [ 199.250957][ T7741] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.277877][ T7742] EXT4-fs: Ignoring removed nobh option [ 199.331768][ T7742] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 199.371267][ T7741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.399741][ T7742] EXT4-fs (loop5): 1 truncate cleaned up [ 199.406461][ T7742] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 199.484945][ T7742] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1211: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 199.602389][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 199.750587][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 200.687168][ T7769] loop2: detected capacity change from 0 to 32768 [ 200.779481][ T7769] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 200.868537][ T7769] (syz.2.1221,7769,1):ocfs2_rename:1282 ERROR: status = -2 [ 200.900334][ T7786] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1227'. [ 200.942014][ T7769] (syz.2.1221,7769,1):ocfs2_rename:1687 ERROR: status = -2 [ 201.033292][ T7788] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1228'. [ 201.136306][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 201.251134][ T7795] program syz.4.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.269477][ T7790] loop3: detected capacity change from 0 to 1024 [ 201.331305][ T7790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.464729][ T7790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.007258][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 202.182570][ T7792] loop0: detected capacity change from 0 to 40427 [ 202.219280][ T26] audit: type=1400 audit(1789179332.749:77): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7813 comm="syz.4.1240" [ 202.280175][ T7792] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 202.304918][ T7792] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 202.350646][ T7792] F2FS-fs (loop0): invalid crc value [ 202.464353][ T7792] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 202.864961][ T7792] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 202.872303][ T7792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.171459][ T4272] syz-executor: attempt to access beyond end of device [ 203.171459][ T4272] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.547755][ T7836] loop2: detected capacity change from 0 to 512 [ 203.572808][ T7836] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.684160][ T7836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.763742][ T7836] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.959744][ T7849] loop4: detected capacity change from 0 to 128 [ 204.049292][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 205.184836][ T7868] loop3: detected capacity change from 0 to 128 [ 205.258291][ T7855] loop2: detected capacity change from 0 to 40427 [ 205.331259][ T7855] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 205.365208][ T7855] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 205.489654][ T7855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.604364][ T7868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.664924][ T7868] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.771068][ T7855] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.782826][ T7855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.224506][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 206.591594][ T7896] loop5: detected capacity change from 0 to 256 [ 206.615726][ T7898] binder: 7897:7898 ioctl 40046205 0 returned -22 [ 206.835357][ T7902] loop2: detected capacity change from 0 to 1024 [ 207.133465][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 207.917392][ T7930] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1284'. [ 208.104939][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 208.231341][ T7934] loop3: detected capacity change from 0 to 2048 [ 208.254560][ T7923] loop2: detected capacity change from 0 to 32768 [ 208.363498][ T7934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.425846][ T7942] loop4: detected capacity change from 0 to 512 [ 208.477885][ T7944] netlink: 'syz.5.1291': attribute type 1 has an invalid length. [ 208.584660][ T7934] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.1286: path /252/file1: bad entry in directory: rec_len is smaller than minimal - offset=1868, inode=0, rec_len=0, size=2048 fake=0 [ 208.662451][ T7942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.729202][ T7950] binder: BC_ATTEMPT_ACQUIRE not supported [ 208.748855][ T7942] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.807554][ T7950] binder: 7947:7950 ioctl c0306201 2000000003c0 returned -22 [ 208.842350][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 209.091829][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 209.265943][ T7963] loop4: detected capacity change from 0 to 256 [ 209.827455][ T7982] loop4: detected capacity change from 0 to 64 [ 209.850376][ T7983] vivid-000: disconnect [ 209.876611][ T7979] vivid-000: reconnect [ 209.909345][ T7982] hfs: request for non-existent node 131072 in B*Tree [ 209.952217][ T7982] hfs: request for non-existent node 131072 in B*Tree [ 209.975516][ T7986] loop2: detected capacity change from 0 to 4096 [ 210.069700][ T7986] NILFS (loop2): invalid segment: Checksum error in segment payload [ 210.092947][ T7986] NILFS (loop2): trying rollback from an earlier position [ 210.215396][ T7986] NILFS (loop2): recovery complete [ 210.252144][ T7994] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.390200][ T7998] loop5: detected capacity change from 0 to 512 [ 210.515761][ T8001] loop4: detected capacity change from 0 to 2048 [ 210.605707][ T7998] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 210.626372][ T8001] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 210.670533][ T7998] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.794541][ T7998] EXT4-fs error (device loop5): ext4_get_first_dir_block:3594: inode #12: comm syz.5.1313: directory missing '.' [ 210.845802][ T8009] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 211.074642][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 211.392183][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 211.450490][ T8018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 211.622241][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 211.637795][ T8018] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 211.662169][ T4317] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 211.671643][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.684221][ T4273] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 211.703350][ T8018] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 211.715809][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 211.757134][ T4317] usb 1-1: config 0 descriptor?? [ 211.768817][ T8018] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.768817][ T8018] [ 211.806440][ T8018] EXT4-fs (loop5): Total free blocks count 0 [ 211.823693][ T8018] EXT4-fs (loop5): Free/Dirty block details [ 211.842328][ T8018] EXT4-fs (loop5): free_blocks=2415919504 [ 211.858589][ T8018] EXT4-fs (loop5): dirty_blocks=32 [ 211.871144][ T8018] EXT4-fs (loop5): Block reservation details [ 211.912415][ T8018] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 211.981649][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.002756][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.034966][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.068055][ T4317] usb 1-1: media controller created [ 212.146128][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.146463][ T5477] EXT4-fs (loop5): unmounting filesystem. [ 212.292253][ T8037] #! [ 212.301430][ T4317] az6027: usb out operation failed. (-71) [ 212.332305][ T8039] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1326'. [ 212.336226][ T4317] az6027: usb out operation failed. (-71) [ 212.365839][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1326'. [ 212.375926][ T4317] stb0899_attach: Driver disabled by Kconfig [ 212.404536][ T4317] az6027: no front-end attached [ 212.404536][ T4317] [ 212.447379][ T4317] az6027: usb out operation failed. (-71) [ 212.469512][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 212.514719][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 212.531929][ T8043] program syz.2.1329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.597964][ T4317] dvb-usb: schedule remote query interval to 400 msecs. [ 212.614233][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 212.683530][ T4317] usb 1-1: USB disconnect, device number 3 [ 212.804968][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.195114][ T8064] set_capacity_and_notify: 3 callbacks suppressed [ 213.195130][ T8064] loop3: detected capacity change from 0 to 64 [ 213.291461][ T8064] hfs: request for non-existent node 131072 in B*Tree [ 213.324128][ T8064] hfs: request for non-existent node 131072 in B*Tree [ 213.387334][ T8070] loop2: detected capacity change from 0 to 512 [ 213.450118][ T8070] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1342: iget: bad extended attribute block 134217728 [ 213.492804][ T8070] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1342: couldn't read orphan inode 15 (err -117) [ 213.572799][ T8070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.676351][ T8070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1342: bg 0: block 465: padding at end of block bitmap is not set [ 213.685081][ T26] audit: type=1800 audit(1789179344.210:78): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1342" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 213.777849][ T8070] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 213.792096][ T26] audit: type=1326 audit(1789179344.330:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 213.827481][ T8070] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1342: invalid indirect mapped block 234881024 (level 0) [ 213.866057][ T26] audit: type=1326 audit(1789179344.360:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 213.928510][ T8070] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1342: invalid indirect mapped block 768 (level 1) [ 214.013567][ T26] audit: type=1326 audit(1789179344.430:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.098637][ T26] audit: type=1326 audit(1789179344.430:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.136590][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 214.209350][ T26] audit: type=1326 audit(1789179344.440:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.251723][ T26] audit: type=1326 audit(1789179344.440:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.265330][ T8095] loop4: detected capacity change from 0 to 2048 [ 214.301715][ T26] audit: type=1326 audit(1789179344.490:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.376992][ T26] audit: type=1326 audit(1789179344.490:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 214.378831][ T8095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.512601][ T8095] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.577409][ T26] audit: type=1326 audit(1789179344.490:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.1346" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fac18b9e159 code=0x7ffc0000 [ 215.491018][ T8105] loop3: detected capacity change from 0 to 131072 [ 215.518820][ T8105] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 215.525742][ T8105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 215.525766][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 215.551596][ T8105] F2FS-fs (loop3): invalid crc value [ 215.689809][ T8105] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.752873][ T8105] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 215.760181][ T8105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 216.261811][ T4534] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 216.471556][ T4534] usb 6-1: Using ep0 maxpacket: 32 [ 216.483005][ T4534] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 216.518082][ T4534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.551523][ T4534] usb 6-1: Product: syz [ 216.561561][ T4534] usb 6-1: Manufacturer: syz [ 216.571426][ T4534] usb 6-1: SerialNumber: syz [ 216.585595][ T4534] usb 6-1: config 0 descriptor?? [ 216.668074][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'. [ 216.846482][ T8156] loop0: detected capacity change from 0 to 2048 [ 216.989196][ T8156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 217.146265][ T8156] EXT4-fs (loop0): shut down requested (1) [ 217.221748][ T4534] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 217.305903][ T4534] peak_usb: probe of 6-1:0.0 failed with error -71 [ 217.343636][ T4534] usb 6-1: USB disconnect, device number 8 [ 217.403903][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 217.495536][ T8165] CUSE: unknown device info "" [ 217.531786][ T8165] CUSE: unknown device info "" [ 217.536696][ T8165] CUSE: unknown device info "˙w" [ 217.589341][ T8165] CUSE: unknown device info "" [ 217.619066][ T8165] CUSE: unknown device info "" [ 217.637568][ T8165] CUSE: unknown device info "" [ 217.652729][ T8165] CUSE: unknown device info "" [ 217.657625][ T8165] CUSE: unknown device info "" [ 217.692361][ T8165] CUSE: DEVNAME unspecified [ 217.930136][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1389'. [ 219.158027][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 219.158041][ T26] audit: type=1800 audit(1789179349.691:98): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1410" name="use" dev="configfs" ino=45887 res=0 errno=0 [ 219.339979][ T8223] loop0: detected capacity change from 0 to 1024 [ 219.346217][ T8221] loop5: detected capacity change from 0 to 4096 [ 219.375302][ T8221] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 219.376073][ T8223] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.411281][ T8223] EXT4-fs: Ignoring removed oldalloc option [ 219.483727][ T8223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 219.504141][ T8221] ntfs: volume version 3.1. [ 219.511626][ T8223] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.578915][ T8221] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp866. You might want to try to use the mount option nls=utf8. [ 219.652944][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1414'. [ 219.710800][ T8221] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 219.776805][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 220.234300][ T8250] netlink: 'syz.5.1420': attribute type 3 has an invalid length. [ 220.267387][ T8249] loop0: detected capacity change from 0 to 2048 [ 220.279377][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1420'. [ 220.359946][ T8249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.517677][ T26] audit: type=1800 audit(1789179351.051:99): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1422" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 220.545052][ T8249] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 220.604814][ T8249] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 220.634176][ T8262] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 220.649648][ T8249] EXT4-fs (loop0): This should not happen!! Data will be lost [ 220.649648][ T8249] [ 220.669678][ T8262] EXT4-fs (loop0): This should not happen!! Data will be lost [ 220.669678][ T8262] [ 220.688025][ T8249] EXT4-fs (loop0): Total free blocks count 0 [ 220.694579][ T8249] EXT4-fs (loop0): Free/Dirty block details [ 220.725309][ T8262] EXT4-fs (loop0): Total free blocks count 0 [ 220.734592][ T8249] EXT4-fs (loop0): free_blocks=2415919104 [ 220.740634][ T8262] EXT4-fs (loop0): Free/Dirty block details [ 220.860974][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.081026][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 221.090967][ T4318] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 221.107328][ T4318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 221.136792][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.162220][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.187777][ T4318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.211270][ T4318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.243647][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.492772][ T4318] usb 3-1: GET_CAPABILITIES returned 0 [ 221.501254][ T4318] usbtmc 3-1:16.0: can't read capabilities [ 221.596322][ T8287] loop5: detected capacity change from 0 to 128 [ 221.717285][ T128] usb 3-1: USB disconnect, device number 6 [ 221.936950][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 222.120794][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 222.130959][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.171424][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.183240][ T4534] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 222.196979][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.207409][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.224627][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.251185][ T4317] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.260258][ T4317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.269106][ T4317] usb 1-1: Manufacturer: syz [ 222.277754][ T4317] usb 1-1: config 0 descriptor?? [ 222.370686][ T4534] usb 6-1: Using ep0 maxpacket: 32 [ 222.393076][ T4534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.407398][ T4534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.417309][ T4534] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.426859][ T4534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.457661][ T4534] usb 6-1: config 0 descriptor?? [ 222.466277][ T4534] hub 6-1:0.0: USB hub found [ 224.880475][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.510120][ T4317] rc_core: IR keymap rc-hauppauge not found [ 227.516080][ T4317] Registered IR keymap rc-empty [ 227.528632][ T4534] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 227.542585][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.558438][ T4534] usbhid 6-1:0.0: can't add hid device: -32 [ 227.564786][ T4534] usbhid: probe of 6-1:0.0 failed with error -32 [ 227.580112][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.612429][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 227.634499][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 227.678449][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.717326][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.750136][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.797511][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.837346][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.870189][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.907524][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.950168][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.980089][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.010102][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.041446][ T4317] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 228.049525][ T4317] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 242.318308][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 255.610445][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.616812][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.032123][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038475][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.228651][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 363.104016][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.513732][ T28] INFO: task syz-executor:4259 blocked for more than 143 seconds. [ 369.521632][ T28] Not tainted syzkaller #0 [ 369.538067][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.559677][ T28] task:syz-executor state:D stack:23024 pid:4259 ppid:4258 flags:0x00004002 [ 369.571754][ T28] Call Trace: [ 369.580942][ T28] [ 369.588874][ T28] __schedule+0x107f/0x4030 [ 369.598813][ T28] ? mark_lock+0x94/0x320 [ 369.607152][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 369.612302][ T28] ? release_firmware_map_entry+0x187/0x187 [ 369.623173][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 369.629318][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 369.643220][ T28] schedule+0xb9/0x180 [ 369.647381][ T28] io_schedule+0x7c/0xd0 [ 369.651679][ T28] bit_wait_io+0xd/0xc0 [ 369.662277][ T28] __wait_on_bit+0x9b/0x2c0 [ 369.668031][ T28] ? bit_wait+0xc0/0xc0 [ 369.672430][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 369.682648][ T28] ? bit_wait+0xc0/0xc0 [ 369.687266][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 369.692127][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 369.705344][ T28] ? bit_waitqueue+0x30/0x30 [ 369.710088][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 369.720623][ T28] do_get_write_access+0x605/0xf20 [ 369.728850][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 369.740424][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 369.747565][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 369.754236][ T28] ? rcu_is_watching+0x11/0xa0 [ 369.759777][ T28] ext4_reserve_inode_write+0x201/0x290 [ 369.766568][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 369.772122][ T28] ext4_dirty_inode+0xbf/0x100 [ 369.777965][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 369.784856][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 369.790134][ T28] __file_update_time+0x21d/0x240 [ 369.795524][ T28] file_update_time+0x2f3/0x370 [ 369.800455][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 369.806242][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 369.811795][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 369.817339][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 369.823987][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 369.829433][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 369.834878][ T28] do_page_mkwrite+0x16b/0x5c0 [ 369.839718][ T28] wp_page_shared+0x167/0x370 [ 369.844827][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 369.849824][ T28] ? mt_find+0x157/0x830 [ 369.854555][ T28] ? numa_migrate_prep+0x250/0x250 [ 369.860317][ T28] ? lock_chain_count+0x20/0x20 [ 369.865692][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 369.871218][ T28] do_user_addr_fault+0x58e/0xb20 [ 369.876799][ T28] exc_page_fault+0x60/0x100 [ 369.881477][ T28] asm_exc_page_fault+0x22/0x30 [ 369.886751][ T28] RIP: 0033:0x7f5a9887c6e2 [ 369.891319][ T28] RSP: 002b:00007ffda68965b0 EFLAGS: 00010202 [ 369.898054][ T28] RAX: 00007f5a96664000 RBX: 000055558d46f870 RCX: 0000000000000006 [ 369.906369][ T28] RDX: 00000000000033c6 RSI: 000055558d46f538 RDI: 0000000000000040 [ 369.914667][ T28] RBP: 00007ffda6896ab0 R08: 000055558d46f568 R09: 000000000000008b [ 369.922712][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda68968f0 [ 369.931102][ T28] R13: 00007ffda68966e0 R14: 585858582e7a7973 R15: 00007ffda6896630 [ 369.939444][ T28] [ 369.942678][ T28] INFO: task syz.2.1426:8260 blocked for more than 143 seconds. [ 369.950724][ T28] Not tainted syzkaller #0 [ 369.961485][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.973105][ T28] task:syz.2.1426 state:D stack:26288 pid:8260 ppid:4278 flags:0x00004004 [ 369.998265][ T28] Call Trace: [ 370.001619][ T28] [ 370.005216][ T28] __schedule+0x107f/0x4030 [ 370.009795][ T28] ? mark_lock+0x94/0x320 [ 370.014551][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 370.019637][ T28] ? release_firmware_map_entry+0x187/0x187 [ 370.025952][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 370.031908][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 370.037600][ T28] schedule+0xb9/0x180 [ 370.041735][ T28] io_schedule+0x7c/0xd0 [ 370.046632][ T28] bit_wait_io+0xd/0xc0 [ 370.050847][ T28] __wait_on_bit+0x9b/0x2c0 [ 370.055767][ T28] ? bit_wait+0xc0/0xc0 [ 370.059979][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 370.066509][ T28] ? bit_wait+0xc0/0xc0 [ 370.070752][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 370.075961][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 370.081043][ T28] ? bit_waitqueue+0x30/0x30 [ 370.086047][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 370.091330][ T28] do_get_write_access+0x605/0xf20 [ 370.098595][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 370.112337][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 370.119131][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 370.133156][ T28] ? rcu_is_watching+0x11/0xa0 [ 370.138013][ T28] ext4_reserve_inode_write+0x201/0x290 [ 370.144921][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 370.150456][ T28] ext4_dirty_inode+0xbf/0x100 [ 370.155982][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 370.161853][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 370.167650][ T28] __file_update_time+0x21d/0x240 [ 370.172763][ T28] file_update_time+0x2f3/0x370 [ 370.178284][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 370.184029][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 370.189144][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 370.195827][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 370.201183][ T28] ? put_page+0x270/0x270 [ 370.206407][ T28] do_page_mkwrite+0x16b/0x5c0 [ 370.211230][ T28] handle_mm_fault+0x199c/0x3d40 [ 370.216563][ T28] ? mt_find+0x157/0x830 [ 370.220887][ T28] ? numa_migrate_prep+0x250/0x250 [ 370.226611][ T28] ? lock_chain_count+0x20/0x20 [ 370.231688][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 370.237436][ T28] do_user_addr_fault+0x58e/0xb20 [ 370.242536][ T28] exc_page_fault+0x60/0x100 [ 370.247587][ T28] asm_exc_page_fault+0x22/0x30 [ 370.252501][ T28] RIP: 0033:0x7fb180072f32 [ 370.257287][ T28] RSP: 002b:00007fffaef225c0 EFLAGS: 00010202 [ 370.264485][ T28] RAX: 0000000000011008 RBX: 00007fb180f55720 RCX: 0000000000000000 [ 370.273411][ T28] RDX: 0000001b2ff13000 RSI: 0000000000000008 RDI: 00007fb180f55720 [ 370.281443][ T28] RBP: 0000000000000511 R08: 00007fb180410000 R09: 00007fb180425f40 [ 370.289848][ T28] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff8a1d6b2c [ 370.298183][ T28] R13: 00007fb180425f40 R14: 0000000000000093 R15: fffffffffffef000 [ 370.315418][ T28] ? add_uevent_var+0x9c/0x460 [ 370.320303][ T28] [ 370.330990][ T28] INFO: task syz.0.1437:8284 blocked for more than 144 seconds. [ 370.340567][ T28] Not tainted syzkaller #0 [ 370.352375][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.361513][ T28] task:syz.0.1437 state:D stack:26288 pid:8284 ppid:4272 flags:0x00004004 [ 370.371610][ T28] Call Trace: [ 370.376364][ T28] [ 370.379351][ T28] __schedule+0x107f/0x4030 [ 370.384339][ T28] ? mark_lock+0x94/0x320 [ 370.388738][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 370.394224][ T28] ? release_firmware_map_entry+0x187/0x187 [ 370.400214][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 370.406523][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 370.411788][ T28] schedule+0xb9/0x180 [ 370.416290][ T28] io_schedule+0x7c/0xd0 [ 370.420587][ T28] bit_wait_io+0xd/0xc0 [ 370.427597][ T28] __wait_on_bit+0x9b/0x2c0 [ 370.432154][ T28] ? bit_wait+0xc0/0xc0 [ 370.441238][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 370.450705][ T28] ? bit_wait+0xc0/0xc0 [ 370.458923][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 370.467934][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 370.477543][ T28] ? bit_waitqueue+0x30/0x30 [ 370.482206][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 370.492333][ T28] do_get_write_access+0x605/0xf20 [ 370.502021][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 370.512100][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 370.522421][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 370.532657][ T28] ? rcu_is_watching+0x11/0xa0 [ 370.543236][ T28] ext4_reserve_inode_write+0x201/0x290 [ 370.548887][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 370.563340][ T28] ext4_dirty_inode+0xbf/0x100 [ 370.568184][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 370.575202][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 370.580389][ T28] __file_update_time+0x21d/0x240 [ 370.585871][ T28] file_update_time+0x2f3/0x370 [ 370.590785][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 370.596526][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 370.601894][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 370.607342][ T28] ? pte_alloc_one+0x287/0x310 [ 370.612172][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 370.618851][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 370.624721][ T28] ? put_page+0x270/0x270 [ 370.629110][ T28] do_page_mkwrite+0x16b/0x5c0 [ 370.634254][ T28] handle_mm_fault+0x199c/0x3d40 [ 370.639249][ T28] ? mt_find+0x157/0x830 [ 370.643966][ T28] ? numa_migrate_prep+0x250/0x250 [ 370.649165][ T28] ? lock_chain_count+0x20/0x20 [ 370.654448][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 370.659784][ T28] do_user_addr_fault+0x58e/0xb20 [ 370.665295][ T28] exc_page_fault+0x60/0x100 [ 370.669943][ T28] asm_exc_page_fault+0x22/0x30 [ 370.675314][ T28] RIP: 0033:0x7fac18a72809 [ 370.680193][ T28] RSP: 002b:00007ffe5e5bd280 EFLAGS: 00010202 [ 370.687137][ T28] RAX: 0000001b2fd24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 370.702912][ T28] RDX: 0000001b2fd23ffc RSI: 00000000005ffde8 RDI: 00007fac19955700 [ 370.711754][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fac18e12000 [ 370.720215][ T28] R10: 00007fac19955700 R11: 0000000000000000 R12: 0000000000000000 [ 370.728595][ T28] R13: 00000000000077c8 R14: ffffffff812f8d50 R15: 00007fac19955720 [ 370.736900][ T28] ? fpregs_activate+0xb0/0x230 [ 370.741919][ T28] [ 370.745405][ T28] INFO: task syz.5.1440:8290 blocked for more than 144 seconds. [ 370.753357][ T28] Not tainted syzkaller #0 [ 370.758413][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.771087][ T28] task:syz.5.1440 state:D stack:26288 pid:8290 ppid:5477 flags:0x00004004 [ 370.785375][ T28] Call Trace: [ 370.788749][ T28] [ 370.791732][ T28] __schedule+0x107f/0x4030 [ 370.808729][ T28] ? mark_lock+0x94/0x320 [ 370.815500][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 370.820612][ T28] ? release_firmware_map_entry+0x187/0x187 [ 370.833249][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 370.839217][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 370.850920][ T28] schedule+0xb9/0x180 [ 370.856568][ T28] io_schedule+0x7c/0xd0 [ 370.860882][ T28] bit_wait_io+0xd/0xc0 [ 370.875781][ T28] __wait_on_bit+0x9b/0x2c0 [ 370.880389][ T28] ? bit_wait+0xc0/0xc0 [ 370.885549][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 370.891097][ T28] ? bit_wait+0xc0/0xc0 [ 370.895672][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 370.900486][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 370.905903][ T28] ? bit_waitqueue+0x30/0x30 [ 370.910548][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 370.916207][ T28] do_get_write_access+0x605/0xf20 [ 370.921385][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 370.927785][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 370.934208][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 370.940422][ T28] ? rcu_is_watching+0x11/0xa0 [ 370.945565][ T28] ext4_reserve_inode_write+0x201/0x290 [ 370.951168][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 370.957056][ T28] ext4_dirty_inode+0xbf/0x100 [ 370.961879][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 370.968083][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 370.973457][ T28] __file_update_time+0x21d/0x240 [ 370.978534][ T28] file_update_time+0x2f3/0x370 [ 370.984198][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 370.989543][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 370.995238][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 371.000327][ T28] ? pte_alloc_one+0x287/0x310 [ 371.005476][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 371.011769][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 371.017466][ T28] ? put_page+0x270/0x270 [ 371.021861][ T28] do_page_mkwrite+0x16b/0x5c0 [ 371.037207][ T28] handle_mm_fault+0x199c/0x3d40 [ 371.042255][ T28] ? mt_find+0x157/0x830 [ 371.046932][ T28] ? numa_migrate_prep+0x250/0x250 [ 371.052103][ T28] ? lock_chain_count+0x20/0x20 [ 371.057351][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 371.062692][ T28] do_user_addr_fault+0x58e/0xb20 [ 371.068141][ T28] exc_page_fault+0x60/0x100 [ 371.072792][ T28] asm_exc_page_fault+0x22/0x30 [ 371.078070][ T28] RIP: 0033:0x7f3465c72809 [ 371.082534][ T28] RSP: 002b:00007fff45896de0 EFLAGS: 00010202 [ 371.089525][ T28] RAX: 0000001b32324000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 371.097802][ T28] RDX: 0000001b32323ffc RSI: 00000000003ffde8 RDI: 00007f3466b55700 [ 371.106083][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f3466012000 [ 371.114316][ T28] R10: 00007f3466b55700 R11: 0000000000000000 R12: 0000000000000000 [ 371.122332][ T28] R13: 0000000000006a81 R14: ffffffff812f8d50 R15: 00007f3466b55720 [ 371.130767][ T28] ? fpregs_activate+0xb0/0x230 [ 371.136080][ T28] [ 371.139171][ T28] INFO: task syz.3.1442:8295 blocked for more than 144 seconds. [ 371.147442][ T28] Not tainted syzkaller #0 [ 371.152436][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.161865][ T28] task:syz.3.1442 state:D stack:27632 pid:8295 ppid:4273 flags:0x00004004 [ 371.171708][ T28] Call Trace: [ 371.175298][ T28] [ 371.178276][ T28] __schedule+0x107f/0x4030 [ 371.183265][ T28] ? mark_lock+0x94/0x320 [ 371.187666][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 371.202116][ T28] ? release_firmware_map_entry+0x187/0x187 [ 371.209167][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 371.215858][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 371.221122][ T28] schedule+0xb9/0x180 [ 371.225601][ T28] io_schedule+0x7c/0xd0 [ 371.229901][ T28] bit_wait_io+0xd/0xc0 [ 371.234458][ T28] __wait_on_bit+0x9b/0x2c0 [ 371.239020][ T28] ? bit_wait+0xc0/0xc0 [ 371.243650][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 371.249174][ T28] ? bit_wait+0xc0/0xc0 [ 371.253758][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 371.258569][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 371.263951][ T28] ? bit_waitqueue+0x30/0x30 [ 371.268606][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 371.274236][ T28] do_get_write_access+0x605/0xf20 [ 371.279421][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 371.285817][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 371.292405][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 371.299428][ T28] ? rcu_is_watching+0x11/0xa0 [ 371.304520][ T28] ext4_reserve_inode_write+0x201/0x290 [ 371.310128][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 371.316104][ T28] ext4_dirty_inode+0xbf/0x100 [ 371.320922][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 371.327109][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 371.332195][ T28] __file_update_time+0x21d/0x240 [ 371.337649][ T28] file_update_time+0x2f3/0x370 [ 371.342560][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 371.348363][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 371.353847][ T28] ? pte_alloc_one+0x287/0x310 [ 371.358668][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 371.365292][ T28] do_page_mkwrite+0x16b/0x5c0 [ 371.370114][ T28] handle_mm_fault+0x199c/0x3d40 [ 371.375497][ T28] ? mt_find+0x157/0x830 [ 371.379819][ T28] ? numa_migrate_prep+0x250/0x250 [ 371.385314][ T28] ? lock_chain_count+0x20/0x20 [ 371.390231][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 371.398975][ T28] do_user_addr_fault+0x58e/0xb20 [ 371.405556][ T28] exc_page_fault+0x60/0x100 [ 371.410203][ T28] ? clear_bhb_loop+0x60/0xb0 [ 371.428142][ T28] asm_exc_page_fault+0x22/0x30 [ 371.434678][ T28] RIP: 0033:0x7f174246baa3 [ 371.439152][ T28] RSP: 002b:00007fffdaadfd10 EFLAGS: 00010246 [ 371.445670][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000 [ 371.453945][ T28] RDX: 0000001b2fa24000 RSI: 0000000000600000 RDI: 00007f17427e0708 [ 371.461970][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.470491][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 371.478786][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffdaadffa0 [ 371.488394][ T28] [ 371.491559][ T28] [ 371.491559][ T28] Showing all locks held in the system: [ 371.505872][ T28] 1 lock held by rcu_tasks_kthre/12: [ 371.511224][ T28] #0: ffffffff8cb2e5b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 371.526851][ T28] 1 lock held by rcu_tasks_trace/13: [ 371.532196][ T28] #0: ffffffff8cb2edd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 371.553884][ T28] 1 lock held by khungtaskd/28: [ 371.558819][ T28] #0: ffffffff8cb2dc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 371.576084][ T28] 2 locks held by getty/4028: [ 371.580879][ T28] #0: ffff88814d2e5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 371.593247][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 371.607316][ T28] 3 locks held by syz-executor/4259: [ 371.612661][ T28] #0: ffff888078da88d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 371.626290][ T28] #1: ffff88807e262558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 371.639937][ T28] #2: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.653452][ T28] 1 lock held by syz-executor/4279: [ 371.658723][ T28] 6 locks held by kworker/u4:8/5759: [ 371.675130][ T28] #0: ffff88801a2e9938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 371.691069][ T28] #1: ffffc90004477d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 371.704877][ T28] #2: ffff88807e2620e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 371.721319][ T28] #3: ffff88807e264c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 371.739550][ T28] #4: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.749502][ T28] #5: ffff888074b048c0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 371.766944][ T28] 3 locks held by syz.2.1426/8260: [ 371.772130][ T28] #0: ffff88801746ea58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 371.786259][ T28] #1: ffff88807e262558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 371.801400][ T28] #2: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.814359][ T28] 3 locks held by syz.0.1437/8284: [ 371.819534][ T28] #0: ffff8880781ce2d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 371.830943][ T28] #1: ffff88807e262558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 371.840897][ T28] #2: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.850667][ T28] 3 locks held by syz.5.1440/8290: [ 371.855846][ T28] #0: ffff88802ff06a58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 371.865993][ T28] #1: ffff88807e262558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 371.875870][ T28] #2: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.885636][ T28] 3 locks held by syz.3.1442/8295: [ 371.890785][ T28] #0: ffff88802ff03d58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 371.901045][ T28] #1: ffff88807e262558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 371.911415][ T28] #2: ffff88807e266990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 371.921244][ T28] [ 371.926054][ T28] ============================================= [ 371.926054][ T28] [ 371.935346][ T28] NMI backtrace for cpu 1 [ 371.939702][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 371.946908][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.956973][ T28] Call Trace: [ 371.960262][ T28] [ 371.963207][ T28] dump_stack_lvl+0x188/0x24e [ 371.967904][ T28] ? irq_work_queue+0xb8/0x140 [ 371.972789][ T28] ? show_regs_print_info+0x12/0x12 [ 371.978004][ T28] ? load_image+0x410/0x410 [ 371.982520][ T28] ? vprintk_emit+0x59f/0x6a0 [ 371.987218][ T28] ? printk_sprint+0x460/0x460 [ 371.992017][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 371.996985][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 372.003162][ T28] ? _printk+0xda/0x130 [ 372.007427][ T28] ? load_image+0x410/0x410 [ 372.011949][ T28] ? load_image+0x410/0x410 [ 372.016470][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 372.022557][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 372.028718][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 372.034726][ T28] watchdog+0xf0e/0xf50 [ 372.039011][ T28] ? watchdog+0x1ed/0xf50 [ 372.043363][ T28] kthread+0x29d/0x330 [ 372.047509][ T28] ? hungtask_pm_notify+0x40/0x40 [ 372.052554][ T28] ? kthread_blkcg+0xd0/0xd0 [ 372.057157][ T28] ret_from_fork+0x1f/0x30 [ 372.061635][ T28] [ 372.065248][ T28] Sending NMI from CPU 1 to CPUs 0: [ 372.070471][ C0] NMI backtrace for cpu 0 [ 372.070482][ C0] CPU: 0 PID: 3627 Comm: klogd Not tainted syzkaller #0 [ 372.070496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.070503][ C0] RIP: 0010:debug_smp_processor_id+0xe/0x10 [ 372.070525][ C0] Code: 48 c7 c7 80 a4 bc 8c 4c 89 f6 e8 bd 62 0c fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 c0 63 df 8a 48 c7 c6 00 64 df 8a 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 [ 372.070607][ C0] RSP: 0018:ffffc900032c7a48 EFLAGS: 00000282 [ 372.070620][ C0] RAX: ffffffff883dc639 RBX: 0000000000000000 RCX: 0000000000000000 [ 372.070630][ C0] RDX: ffff88807c349e00 RSI: ffffffff8adf6400 RDI: ffffffff8adf63c0 [ 372.070640][ C0] RBP: ffffc900032c7b10 R08: dffffc0000000000 R09: 1ffffffff2162648 [ 372.070651][ C0] R10: dffffc0000000000 R11: fffffbfff2162649 R12: ffff88807daa2000 [ 372.070668][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: dffffc0000000000 [ 372.070677][ C0] FS: 00007f78c8d43c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 372.070691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.070701][ C0] CR2: 00007f5b41872700 CR3: 000000007e42f000 CR4: 00000000003506f0 [ 372.070714][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.070722][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.070731][ C0] Call Trace: [ 372.070736][ C0] [ 372.070741][ C0] rcu_is_watching+0x11/0xa0 [ 372.070762][ C0] sk_filter_trim_cap+0x533/0x830 [ 372.070813][ C0] ? skb_copy_datagram_from_iter+0x5c7/0x6b0 [ 372.070837][ C0] ? sk_filter_trim_cap+0x143/0x830 [ 372.070852][ C0] ? skb_put+0x10e/0x200 [ 372.070866][ C0] unix_dgram_sendmsg+0x920/0x16f0 [ 372.070898][ C0] ? unix_dgram_poll+0x680/0x680 [ 372.070913][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 372.070962][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 372.071006][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 372.071049][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 372.071092][ C0] __sys_sendto+0x497/0x650 [ 372.071156][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 372.071185][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 372.071205][ C0] ? lock_chain_count+0x20/0x20 [ 372.071225][ C0] __x64_sys_sendto+0xda/0xf0 [ 372.071244][ C0] do_syscall_64+0x4c/0xa0 [ 372.071262][ C0] ? clear_bhb_loop+0x60/0xb0 [ 372.071280][ C0] ? clear_bhb_loop+0x60/0xb0 [ 372.071298][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.071315][ C0] RIP: 0033:0x7f78c8e93407 [ 372.071326][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 372.071337][ C0] RSP: 002b:00007ffef3344e60 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 372.071352][ C0] RAX: ffffffffffffffda RBX: 00007f78c8d43c80 RCX: 00007f78c8e93407 [ 372.071361][ C0] RDX: 000000000000004e RSI: 00007ffef3344fa0 RDI: 0000000000000003 [ 372.071370][ C0] RBP: 00007ffef33453d0 R08: 0000000000000000 R09: 0000000000000000 [ 372.071379][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffef33453e8 [ 372.071388][ C0] R13: 00007ffef3344fa0 R14: 0000000000000033 R15: 00007ffef3344fa0 [ 372.071404][ C0] [ 372.418745][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 372.425641][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 372.432877][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.442941][ T28] Call Trace: [ 372.446224][ T28] [ 372.449176][ T28] dump_stack_lvl+0x188/0x24e [ 372.453876][ T28] ? memcpy+0x3c/0x60 [ 372.457938][ T28] ? show_regs_print_info+0x12/0x12 [ 372.463162][ T28] ? load_image+0x410/0x410 [ 372.467695][ T28] panic+0x2d3/0x710 [ 372.471604][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 372.477262][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 372.481778][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 372.487434][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 372.493614][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 372.499792][ T28] watchdog+0xf4d/0xf50 [ 372.503967][ T28] ? watchdog+0x1ed/0xf50 [ 372.508316][ T28] kthread+0x29d/0x330 [ 372.512399][ T28] ? hungtask_pm_notify+0x40/0x40 [ 372.517440][ T28] ? kthread_blkcg+0xd0/0xd0 [ 372.522046][ T28] ret_from_fork+0x1f/0x30 [ 372.526490][ T28] [ 372.529798][ T28] Kernel Offset: disabled [ 372.534120][ T28] Rebooting in 86400 seconds..