last executing test programs: 6.127913465s ago: executing program 1 (id=431): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x3, 0x4) 5.88653378s ago: executing program 1 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xeeee8000, 0x70000, 0x9, 0x40, 0xfb, 0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0xb3}, {0x4000, 0xc000, 0xd, 0x8, 0x3, 0x1, 0x81, 0x95, 0x0, 0x9, 0x51}, {0x58000, 0x8080000, 0xd, 0x5, 0x53, 0x3, 0x7f, 0x81, 0xa0, 0x8, 0x9, 0x4}, {0x5000, 0xd000, 0xd, 0x7, 0xab, 0x2, 0x13, 0x9, 0x9, 0xb4, 0x0, 0x3}, {0xd000, 0x8080000, 0xf, 0x7, 0x10, 0x6, 0xa, 0x2, 0x4, 0x24, 0x7f, 0xc}, {0x54000, 0xa000, 0x8, 0x0, 0x3, 0xfa, 0x8, 0x18, 0x46, 0x2, 0xe8, 0x3f}, {0xc000, 0xffffffff, 0x4, 0x81, 0x7, 0x0, 0x7, 0x5, 0x47, 0x9, 0x4, 0x6}, {0x1, 0x41000, 0xe, 0xdd, 0x2, 0x9, 0xf7, 0xf, 0xfb, 0xd5, 0x4, 0xc0}, {0x4, 0x8}, {0x5000, 0x6}, 0x10000, 0x0, 0x5000, 0x500090, 0x3, 0x1500, 0xfec00000, [0x8, 0x5, 0x6, 0xdb9]}) 5.427578751s ago: executing program 1 (id=438): capset(0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xdb, "", [{{0x9, 0x4, 0x0, 0x6, 0xff, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xd8b, 0xc, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 4.846933396s ago: executing program 0 (id=445): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='wchan\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 4.6662054s ago: executing program 2 (id=446): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 3.548357136s ago: executing program 0 (id=448): syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x4c2, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc00038004000100d4000380100001800800010002000000040003"], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 2.888823811s ago: executing program 1 (id=449): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/195, 0xc3) 2.855137342s ago: executing program 2 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e650962", 0x6, 0x2) 2.781803784s ago: executing program 0 (id=452): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="f8b1f43d24bc8c87c9472c88a515e1ce6475e152ff4c9a8369271e28ca700e5b540d490f8cc00cf9bed917d9bdb10548ce1f222169d1c70759998fdfcfd84a218185268ff8eeac6f4d2c3b81e1d77fa89d31ec5b3765abd61aca0a6e70fad3706dd3f2db2f3231", 0x67}, {&(0x7f00000001c0)="c8f9e5be69ab3a6ad0dc861a8025f6b6c35d78f1", 0x14}, {&(0x7f00000003c0)="4c2a741fde", 0x5}], 0x3}}], 0x2, 0x400c010) 2.466273141s ago: executing program 1 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) 2.263393906s ago: executing program 0 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.018348362s ago: executing program 1 (id=456): unshare(0x62040200) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.601585362s ago: executing program 0 (id=458): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.507261764s ago: executing program 3 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="626173653d30783230303030302024537a653dbd74652dffffff7f6966696e670a000000000000d289ffd36bfc5495f19bbfd68e0742149824fc1bbf1edbef5a27698cbf601cbc56b1d41c725602b70bcfb7d999afcf8b3b8059d6ef103ee7ddc458437f4df3902a1e5cb1998807919787b191bbbf931c793426340e", 0x7c) 1.466549525s ago: executing program 2 (id=460): r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x50}, 0x1c) 1.25162022s ago: executing program 3 (id=461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.030296135s ago: executing program 2 (id=462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020c00048008000140000000031c000480080002401f25c4ea080002403cb140bb0800014000000003"], 0x88}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 870.190029ms ago: executing program 3 (id=463): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r0, 0x402, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr/fscreate\x00') copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xfffffffffffffff7, 0x8, 0x0) 766.480932ms ago: executing program 0 (id=464): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 598.764645ms ago: executing program 2 (id=465): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x100003fa, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x8}]}, 0x10) listen(r0, 0x50) 587.349836ms ago: executing program 3 (id=466): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1, [0x1, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) 335.357622ms ago: executing program 3 (id=467): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 81.303268ms ago: executing program 3 (id=468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xda6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$IPC_RMID(0x0, 0x0) 0s ago: executing program 2 (id=469): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="303132333a616263643a30106fc68237d3890426c12b0afabbfc81eb73a95e0cfa02394295d4383f35af5a52d706da8f636f", 0x32) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 59.415214][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.441242][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. syzkaller login: [ 81.045786][ T5761] cgroup: Unknown subsys name 'net' [ 81.179202][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.917593][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.572609][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.598785][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.623504][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.632599][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.639528][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.646888][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.653578][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.662518][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.672651][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.679932][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.683289][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.689719][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.703498][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.704554][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.712447][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.725201][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.732725][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.733550][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.743276][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.752090][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.757931][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.762985][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.776068][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.783714][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.251288][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 85.400374][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.439059][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.447467][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.454988][ T5781] bridge_slave_0: entered allmulticast mode [ 85.462569][ T5781] bridge_slave_0: entered promiscuous mode [ 85.471878][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.479018][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.486397][ T5781] bridge_slave_1: entered allmulticast mode [ 85.493917][ T5781] bridge_slave_1: entered promiscuous mode [ 85.501174][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.562244][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 85.647815][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.660589][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.762941][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.770163][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.778220][ T5775] bridge_slave_0: entered allmulticast mode [ 85.785744][ T5775] bridge_slave_0: entered promiscuous mode [ 85.793267][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.800431][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.811114][ T5782] bridge_slave_0: entered allmulticast mode [ 85.818179][ T5782] bridge_slave_0: entered promiscuous mode [ 85.829043][ T5781] team0: Port device team_slave_0 added [ 85.859027][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.866352][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.873843][ T5772] bridge_slave_0: entered allmulticast mode [ 85.880961][ T5772] bridge_slave_0: entered promiscuous mode [ 85.889335][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.896654][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.904069][ T5775] bridge_slave_1: entered allmulticast mode [ 85.912007][ T5775] bridge_slave_1: entered promiscuous mode [ 85.929606][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.940045][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.947570][ T5782] bridge_slave_1: entered allmulticast mode [ 85.954646][ T5782] bridge_slave_1: entered promiscuous mode [ 85.974057][ T5781] team0: Port device team_slave_1 added [ 85.991192][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.998367][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.006839][ T5772] bridge_slave_1: entered allmulticast mode [ 86.015085][ T5772] bridge_slave_1: entered promiscuous mode [ 86.047930][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.072700][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.085375][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.110847][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.151545][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.158556][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.184760][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.199219][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.214095][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.254476][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.261639][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.287806][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.319853][ T5782] team0: Port device team_slave_0 added [ 86.329148][ T5782] team0: Port device team_slave_1 added [ 86.337798][ T5775] team0: Port device team_slave_0 added [ 86.346921][ T5775] team0: Port device team_slave_1 added [ 86.418658][ T5772] team0: Port device team_slave_0 added [ 86.438232][ T5772] team0: Port device team_slave_1 added [ 86.455901][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.463107][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.490010][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.503780][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.510845][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.537356][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.564816][ T5781] hsr_slave_0: entered promiscuous mode [ 86.572225][ T5781] hsr_slave_1: entered promiscuous mode [ 86.580058][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.587105][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.613430][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.667502][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.674804][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.701062][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.721215][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.728196][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.754598][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.767454][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.774554][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.800544][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.817730][ T5775] hsr_slave_0: entered promiscuous mode [ 86.824794][ T5775] hsr_slave_1: entered promiscuous mode [ 86.832330][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.840097][ T5775] Cannot create hsr debugfs directory [ 86.873999][ T5777] Bluetooth: hci3: command tx timeout [ 86.874019][ T5787] Bluetooth: hci0: command tx timeout [ 86.874302][ T5787] Bluetooth: hci2: command tx timeout [ 86.879743][ T5777] Bluetooth: hci1: command tx timeout [ 86.927219][ T5782] hsr_slave_0: entered promiscuous mode [ 86.934821][ T5782] hsr_slave_1: entered promiscuous mode [ 86.941392][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.948962][ T5782] Cannot create hsr debugfs directory [ 87.081140][ T5772] hsr_slave_0: entered promiscuous mode [ 87.087772][ T5772] hsr_slave_1: entered promiscuous mode [ 87.096726][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.104600][ T5772] Cannot create hsr debugfs directory [ 87.582538][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.611719][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.635668][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.649536][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.735415][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.749863][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.767238][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.786123][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.859294][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.872770][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.885959][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.898653][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.004875][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.017873][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.028955][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.044058][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.125161][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.173072][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.208679][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.216090][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.259396][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.274654][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.281862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.312362][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.347191][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.383421][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.390587][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.429319][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.436625][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.467129][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.506986][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.514291][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.543169][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.584160][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.591394][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.636342][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.681909][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.689109][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.759302][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.766563][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.800551][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.817968][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.913102][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.952317][ T5777] Bluetooth: hci2: command tx timeout [ 88.957804][ T5777] Bluetooth: hci3: command tx timeout [ 88.961819][ T5779] Bluetooth: hci0: command tx timeout [ 88.967585][ T5777] Bluetooth: hci1: command tx timeout [ 89.120258][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.270169][ T5775] veth0_vlan: entered promiscuous mode [ 89.304236][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.319512][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.351713][ T5775] veth1_vlan: entered promiscuous mode [ 89.408248][ T5775] veth0_macvtap: entered promiscuous mode [ 89.446254][ T5775] veth1_macvtap: entered promiscuous mode [ 89.518600][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.544171][ T5781] veth0_vlan: entered promiscuous mode [ 89.553351][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.565366][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.576992][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586489][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.597898][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610255][ T5782] veth0_vlan: entered promiscuous mode [ 89.622555][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.656465][ T5781] veth1_vlan: entered promiscuous mode [ 89.679757][ T5782] veth1_vlan: entered promiscuous mode [ 89.806910][ T5781] veth0_macvtap: entered promiscuous mode [ 89.818325][ T5772] veth0_vlan: entered promiscuous mode [ 89.834161][ T5781] veth1_macvtap: entered promiscuous mode [ 89.842890][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.851818][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.884222][ T5772] veth1_vlan: entered promiscuous mode [ 89.915687][ T5782] veth0_macvtap: entered promiscuous mode [ 89.929445][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.945093][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956675][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.984879][ T5782] veth1_macvtap: entered promiscuous mode [ 90.004162][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.014530][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.022840][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.034219][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.048598][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.064156][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.074194][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.083393][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.092477][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.120470][ T5772] veth0_macvtap: entered promiscuous mode [ 90.137913][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.155191][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.165397][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.176073][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.188565][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.207857][ T5772] veth1_macvtap: entered promiscuous mode [ 90.239789][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.254521][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.264463][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.275337][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.286927][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.310286][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.344258][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.353280][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.362444][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.394936][ T5836] syz.3.4[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.429148][ T5836] loop3: detected capacity change from 0 to 1024 [ 90.439101][ T5836] ======================================================= [ 90.439101][ T5836] WARNING: The mand mount option has been deprecated and [ 90.439101][ T5836] and is ignored by this kernel. Remove the mand [ 90.439101][ T5836] option from the mount to silence this warning. [ 90.439101][ T5836] ======================================================= [ 90.484021][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.488810][ T5836] EXT4-fs: inline encryption not supported [ 90.513293][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.524565][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.535138][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.545135][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.556811][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.568693][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.588221][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.600777][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.618382][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.629547][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.650450][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.664194][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.676157][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.707961][ T5836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.746251][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.756859][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.766117][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.777150][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848062][ T5836] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.4: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 90.877855][ T5836] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1802: Corrupt filesystem [ 90.912201][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.937767][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.963424][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.035708][ T5777] Bluetooth: hci1: command tx timeout [ 91.040784][ T5787] Bluetooth: hci0: command tx timeout [ 91.046664][ T5787] Bluetooth: hci3: command tx timeout [ 91.052571][ T5779] Bluetooth: hci2: command tx timeout [ 91.089956][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.123002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.166253][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.173852][ T5841] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5'. [ 91.177051][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.217903][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.229884][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.335609][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.348493][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.386004][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.394619][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.598339][ T5848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.752895][ T5851] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 91.986827][ T5861] loop0: detected capacity change from 0 to 256 [ 92.021801][ T5861] exfat: Deprecated parameter 'namecase' [ 92.025860][ T5860] loop2: detected capacity change from 0 to 1024 [ 92.027567][ T5861] exfat: Deprecated parameter 'namecase' [ 92.131499][ T5861] exfat: Deprecated parameter 'namecase' [ 92.169537][ T23] cfg80211: failed to load regulatory.db [ 92.198629][ T5861] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 92.708658][ T971] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.772605][ T971] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.111456][ T5787] Bluetooth: hci1: command tx timeout [ 93.117032][ T5779] Bluetooth: hci0: command tx timeout [ 93.117084][ T5084] Bluetooth: hci2: command tx timeout [ 93.128860][ T5777] Bluetooth: hci3: command tx timeout [ 93.622210][ T5887] mt6360: probe of 0-0034 failed with error -5 [ 93.648156][ T5887] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 94.166235][ T5906] loop0: detected capacity change from 0 to 256 [ 94.239977][ T5908] program syz.2.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.268472][ T5906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1eaabb1a, utbl_chksum : 0xe619d30d) [ 94.708391][ T5921] loop1: detected capacity change from 0 to 256 [ 95.072883][ T5929] sctp: [Deprecated]: syz.2.39 (pid 5929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.072883][ T5929] Use struct sctp_sack_info instead [ 95.541193][ T5154] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.596114][ T5944] loop2: detected capacity change from 0 to 128 [ 95.779538][ T5154] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 95.804940][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.823484][ T5154] usb 1-1: Product: syz [ 95.827718][ T5154] usb 1-1: Manufacturer: syz [ 95.845733][ T5154] usb 1-1: SerialNumber: syz [ 95.882963][ T5154] usb 1-1: config 0 descriptor?? [ 95.903742][ T5154] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 95.983591][ T5154] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.016052][ T5154] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 96.040874][ T5154] usb 1-1: media controller created [ 96.092573][ T5154] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.122452][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 96.317420][ T5154] DVB: Unable to find symbol mt352_attach() [ 96.428742][ T5154] DVB: Unable to find symbol nxt6000_attach() [ 96.437612][ T5154] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 96.457744][ T5154] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 96.499552][ T5154] dvb-usb: schedule remote query interval to 1000 msecs. [ 96.512751][ T5154] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 96.526022][ T5154] dvb-usb: bulk message failed: -22 (7/0) [ 96.534665][ T5154] dvb-usb: bulk message failed: -22 (7/0) [ 96.552767][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.591279][ T5154] usb 1-1: USB disconnect, device number 2 [ 96.629341][ T5961] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 96.744578][ T5965] loop7: detected capacity change from 0 to 7 [ 96.759131][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.768627][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.778046][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.784619][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 96.787479][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.808658][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.817985][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.826612][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.835828][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.838304][ T27] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 96.846662][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.861347][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.880710][ T27] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 96.882843][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.889413][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 96.898517][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.900792][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.924864][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.933294][ T5965] ldm_validate_partition_table(): Disk read failed. [ 96.940369][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.949603][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.961758][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.970999][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.981167][ T5154] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 97.000815][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.010019][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.023359][ T27] usb 2-1: config 1 has no interface number 0 [ 97.030439][ T27] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.039240][ T5965] Dev loop7: unable to read RDB block 0 [ 97.044464][ T27] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 97.063712][ T27] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 97.075970][ T5965] loop7: unable to read partition table [ 97.092264][ T5965] loop7: partition table beyond EOD, truncated [ 97.098519][ T5965] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 97.120667][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.171493][ T27] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 97.316174][ T5971] loop3: detected capacity change from 0 to 8 [ 97.386377][ T27] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 97.861475][ T5154] usb 2-1: USB disconnect, device number 2 [ 97.869332][ T5154] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 98.960891][ T6010] capability: warning: `syz.0.76' uses 32-bit capabilities (legacy support in use) [ 98.993782][ T6010] program syz.0.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.209025][ T5993] loop2: detected capacity change from 0 to 40427 [ 99.238156][ T5993] F2FS-fs (loop2): invalid crc value [ 99.284236][ T5993] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.518563][ T5993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.727795][ T5782] syz-executor: attempt to access beyond end of device [ 99.727795][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.775183][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.960856][ T6036] warning: `syz.0.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.042694][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.570742][ T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.770798][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 100.780004][ T971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.800963][ T971] usb 4-1: config 0 has no interfaces? [ 100.810140][ T971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.828054][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.841498][ T971] usb 4-1: Product: syz [ 100.845735][ T971] usb 4-1: Manufacturer: syz [ 100.855767][ T971] usb 4-1: SerialNumber: syz [ 100.874923][ T971] usb 4-1: config 0 descriptor?? [ 100.890802][ T5154] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.905477][ T6061] loop0: detected capacity change from 0 to 8192 [ 100.946041][ T6061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.969305][ T6061] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 100.979492][ T6061] REISERFS (device loop0): using ordered data mode [ 100.986547][ T6061] reiserfs: using flush barriers [ 100.997114][ T6061] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.021764][ T6061] REISERFS (device loop0): checking transaction log (loop0) [ 101.044579][ T28] audit: type=1326 audit(1788887038.138:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.070936][ T28] audit: type=1326 audit(1788887038.138:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.095098][ T28] audit: type=1326 audit(1788887038.158:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.122267][ T28] audit: type=1326 audit(1788887038.168:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.138253][ T6061] REISERFS (device loop0): Using r5 hash to sort names [ 101.146733][ T5154] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.162427][ T6061] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.176249][ T28] audit: type=1326 audit(1788887038.168:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.200352][ T28] audit: type=1326 audit(1788887038.178:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.240803][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.258095][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.271305][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.298514][ T5154] usb 3-1: config 0 descriptor?? [ 101.307674][ T5154] cp210x 3-1:0.0: cp210x converter detected [ 101.331457][ T5834] usb 4-1: USB disconnect, device number 2 [ 101.450970][ T28] audit: type=1326 audit(1788887038.538:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.484215][ T28] audit: type=1326 audit(1788887038.538:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b74b9e159 code=0x7ffc0000 [ 101.722468][ T5154] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 101.776065][ T5154] usb 3-1: cp210x converter now attached to ttyUSB0 [ 101.851270][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.995575][ T5154] usb 3-1: USB disconnect, device number 2 [ 102.014604][ T5154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.033964][ T5154] cp210x 3-1:0.0: device disconnected [ 102.049942][ T5814] usb 4-1: New USB device found, idVendor=17ba, idProduct=55aa, bcdDevice= 1.00 [ 102.061021][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.069933][ T5814] usb 4-1: Product: syz [ 102.077470][ T5814] usb 4-1: Manufacturer: syz [ 102.084770][ T5814] usb 4-1: SerialNumber: syz [ 102.325529][ T5814] usb 4-1: USB disconnect, device number 3 [ 102.524790][ T6081] loop1: detected capacity change from 0 to 32768 [ 102.565067][ T6081] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.788479][ T6081] XFS (loop1): Ending clean mount [ 102.811873][ T6081] XFS (loop1): Quotacheck needed: Please wait. [ 102.954149][ T6081] XFS (loop1): Quotacheck: Done. [ 103.275928][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.459360][ T6093] loop2: detected capacity change from 0 to 32768 [ 103.504321][ T6093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.107 (6093) [ 103.584216][ T6093] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.611551][ T6093] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 103.620388][ T6093] BTRFS info (device loop2): setting nodatasum [ 103.645008][ T6093] BTRFS info (device loop2): force zlib compression, level 3 [ 103.686278][ T6093] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.731822][ T6093] BTRFS info (device loop2): use lzo compression, level 0 [ 103.741950][ T6093] BTRFS info (device loop2): turning on flush-on-commit [ 103.748969][ T6093] BTRFS info (device loop2): enabling auto defrag [ 103.780819][ T6093] BTRFS info (device loop2): max_inline at 4096 [ 103.787236][ T6093] BTRFS info (device loop2): using free space tree [ 103.967151][ T6113] loop3: detected capacity change from 0 to 4096 [ 103.974962][ T6113] EXT4-fs: inline encryption not supported [ 104.004608][ T6113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.072802][ T6093] BTRFS info (device loop2): enabling ssd optimizations [ 104.080711][ T6113] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.128728][ T6113] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 104.195883][ T6113] System zones: 0-5 [ 104.234122][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.254721][ T6132] block2mtd: illegal erase size [ 104.556696][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.747117][ T6120] loop0: detected capacity change from 0 to 32768 [ 104.797881][ T6120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (6120) [ 104.889657][ T6120] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.935042][ T6120] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 104.974378][ T6120] BTRFS info (device loop0): force clearing of disk cache [ 104.986289][ T5782] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.017809][ T6120] BTRFS info (device loop0): setting nodatacow, compression disabled [ 105.028130][ T6145] loop1: detected capacity change from 0 to 128 [ 105.050936][ T6120] BTRFS info (device loop0): enabling auto defrag [ 105.057489][ T6120] BTRFS info (device loop0): max_inline at 0 [ 105.100418][ T6145] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.138445][ T6120] BTRFS info (device loop0): enabling disk space caching [ 105.161060][ T6145] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.192248][ T6120] BTRFS info (device loop0): disk space caching is enabled [ 105.371939][ T6145] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 105.466112][ T6120] BTRFS info (device loop0): enabling ssd optimizations [ 105.488096][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.526335][ T6120] BTRFS info (device loop0): rebuilding free space tree [ 105.681776][ T6120] BTRFS info (device loop0): disabling free space tree [ 105.701541][ T6120] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.712947][ T6120] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.466589][ T6152] loop3: detected capacity change from 0 to 32768 [ 106.501872][ T6152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.124 (6152) [ 106.548982][ T6152] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.586650][ T6152] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 106.600681][ T6152] BTRFS info (device loop3): metadata ratio 220 [ 106.607002][ T6152] BTRFS info (device loop3): setting nodatasum [ 106.628943][ T6152] BTRFS info (device loop3): metadata ratio 4 [ 106.660999][ T6152] BTRFS info (device loop3): enabling ssd optimizations [ 106.668035][ T6152] BTRFS info (device loop3): allowing degraded mounts [ 106.687972][ T6152] BTRFS info (device loop3): using free space tree [ 106.696058][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.786063][ T6152] BTRFS info (device loop3): auto enabling async discard [ 107.007143][ T6177] loop1: detected capacity change from 0 to 32768 [ 107.098598][ T6177] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.154044][ T28] audit: type=1800 audit(1788887044.248:10): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 107.336129][ T6177] XFS (loop1): Ending clean mount [ 107.422371][ T6177] XFS (loop1): Quotacheck needed: Please wait. [ 107.538436][ T6177] XFS (loop1): Quotacheck: Done. [ 107.711759][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.772321][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.781760][ T56] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.792026][ T6208] loop2: detected capacity change from 0 to 32768 [ 108.826772][ T6208] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.132 (6208) [ 108.872620][ T6208] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 108.895443][ T6208] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 108.932805][ T6208] BTRFS info (device loop2): using free space tree [ 108.983958][ T56] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.017008][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.055879][ T56] usb 2-1: config 0 descriptor?? [ 109.074093][ T56] cp210x 2-1:0.0: cp210x converter detected [ 109.117527][ T6208] BTRFS info (device loop2): enabling ssd optimizations [ 109.136138][ T6208] BTRFS info (device loop2): auto enabling async discard [ 109.298597][ T6248] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.316830][ T6248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.324550][ T6248] IPv6: NLM_F_CREATE should be set when creating new route [ 109.331972][ T6248] IPv6: NLM_F_CREATE should be set when creating new route [ 109.339238][ T6248] IPv6: NLM_F_CREATE should be set when creating new route [ 109.394789][ T6248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.416801][ T6248] Zero length message leads to an empty skb [ 109.423322][ T5782] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 109.507860][ T56] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 109.753172][ T56] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 109.781512][ T56] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 109.796669][ T56] usb 2-1: cp210x converter now attached to ttyUSB0 [ 109.834539][ T56] usb 2-1: USB disconnect, device number 3 [ 109.875607][ T56] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.911783][ T56] cp210x 2-1:0.0: device disconnected [ 110.238458][ T6260] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83 [ 110.801798][ T6280] ipvlan0: entered promiscuous mode [ 110.810562][ T6280] ipvlan0: left promiscuous mode [ 110.846907][ T6284] loop0: detected capacity change from 0 to 128 [ 110.874489][ T6284] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.904865][ T6284] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.961384][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.104625][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.181167][ T8] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 111.210834][ T8] usb 3-1: config 0 has no interface number 0 [ 111.217034][ T8] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.253586][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 111.269194][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.283405][ T8] usb 3-1: Product: syz [ 111.291367][ T8] usb 3-1: Manufacturer: syz [ 111.296441][ T8] usb 3-1: SerialNumber: syz [ 111.333789][ T8] usb 3-1: config 0 descriptor?? [ 111.372504][ T8] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 111.629801][ T5814] usb 3-1: USB disconnect, device number 3 [ 111.663984][ T5814] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 111.975374][ T6313] loop3: detected capacity change from 0 to 1024 [ 111.991953][ T6313] EXT4-fs: Ignoring removed bh option [ 112.050376][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.108344][ T6313] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 112.146494][ T6313] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.174: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 112.167407][ T6317] udc dummy_udc.0: soft-connect without a gadget driver [ 112.222295][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.777420][ T6311] loop0: detected capacity change from 0 to 40427 [ 112.806919][ T6311] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 112.830007][ T6311] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 112.858454][ T6311] F2FS-fs (loop0): invalid crc value [ 112.874312][ T6311] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.010823][ T6311] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 113.119760][ T6342] loop2: detected capacity change from 0 to 512 [ 113.128290][ T6341] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 113.176668][ T6311] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.225532][ T6342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.292981][ T6342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.358169][ T6311] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 113.477915][ T6311] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 113.582461][ T5781] syz-executor: attempt to access beyond end of device [ 113.582461][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.620358][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.719065][ T6354] loop1: detected capacity change from 0 to 1024 [ 113.754265][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.808432][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.990454][ T6345] loop3: detected capacity change from 0 to 32768 [ 114.072937][ T6345] JBD2: Ignoring recovery information on journal [ 114.102288][ T6345] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 114.135975][ T6345] JBD2: bad block at offset 32 [ 114.179191][ T6345] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.289799][ T6345] (syz.3.187,6345,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 114.487563][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 114.641088][ T6369] program syz.0.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.677273][ T6408] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.215'. [ 115.723593][ T6408] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.215'. [ 116.036907][ T6415] mmap: syz.3.211 (6415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.659028][ T6436] loop0: detected capacity change from 0 to 1024 [ 116.771487][ T6436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.873784][ T6445] loop1: detected capacity change from 0 to 2048 [ 116.883380][ T6436] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.912079][ T6436] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.227: lblock 3 mapped to illegal pblock 3 (length 2) [ 116.951825][ T6445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.967711][ T6450] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.227: lblock 0 mapped to illegal pblock 0 (length 3) [ 117.036566][ T6450] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 117.051668][ T6450] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.051668][ T6450] [ 117.233002][ T4115] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:8: lblock 4 mapped to illegal pblock 4 (length 1) [ 117.250398][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.302194][ T4115] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 117.349797][ T4115] EXT4-fs (loop0): This should not happen!! Data will be lost [ 117.349797][ T4115] [ 117.379039][ T6452] loop3: detected capacity change from 0 to 512 [ 117.402043][ T6452] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 117.412913][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.483754][ T5788] blk_print_req_error: 10 callbacks suppressed [ 117.483771][ T5788] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.517032][ T6454] process 'syz.1.233' launched './file0' with NULL argv: empty string added [ 117.645548][ T6440] loop2: detected capacity change from 0 to 32768 [ 117.738843][ T6440] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 117.760032][ T6464] loop3: detected capacity change from 0 to 128 [ 117.817288][ T28] audit: type=1800 audit(1788887310.907:11): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 117.873551][ T6464] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 117.912900][ T6440] XFS (loop2): Ending clean mount [ 117.934635][ T6471] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 117.950783][ T6464] FAT-fs (loop3): Filesystem has been set read-only [ 118.028758][ T6471] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 118.286466][ T5782] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 118.601849][ T6483] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.747291][ T6488] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 118.783092][ T6488] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.246'. [ 118.967213][ T6496] loop3: detected capacity change from 0 to 2048 [ 119.254683][ T6500] loop0: detected capacity change from 0 to 2048 [ 119.335023][ T6500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.442143][ T28] audit: type=1800 audit(1788887312.537:12): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 120.567835][ T6537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.267'. [ 120.981403][ T56] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 121.196180][ T56] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.210807][ T56] usb 4-1: config 0 has no interface number 0 [ 121.217004][ T56] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.251431][ T56] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.280724][ T56] usb 4-1: config 0 interface 1 has no altsetting 0 [ 121.299261][ T56] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 121.339504][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.368662][ T56] usb 4-1: config 0 descriptor?? [ 121.436191][ T5777] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1 [ 121.597035][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'. [ 122.026895][ T56] uclogic 0003:2179:0053.0002: pen parameters not found [ 122.060503][ T56] uclogic 0003:2179:0053.0002: interface is invalid, ignoring [ 122.100760][ T56] usb 4-1: USB disconnect, device number 4 [ 122.190333][ T6580] loop2: detected capacity change from 0 to 2048 [ 122.232623][ T6505] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 122.254775][ T6580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.300095][ T6599] loop1: detected capacity change from 0 to 256 [ 123.740928][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.302'. [ 124.253190][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 124.279687][ T6625] ipvlan2: entered allmulticast mode [ 124.308972][ T6625] syz_tun: entered allmulticast mode [ 124.441192][ T6620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 125.242116][ T6653] loop1: detected capacity change from 0 to 1024 [ 125.616026][ T6664] MTRR 1 not used [ 125.969619][ T6656] loop2: detected capacity change from 0 to 40427 [ 125.993024][ T6656] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 126.015705][ T6671] loop3: detected capacity change from 0 to 512 [ 126.038820][ T6656] F2FS-fs (loop2): invalid crc value [ 126.098525][ T6656] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.269898][ T6656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.434249][ T6656] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 126.514900][ T6683] f2fs_ckpt-7:2: attempt to access beyond end of device [ 126.514900][ T6683] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.519500][ T6681] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 126.537897][ T6683] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 126.567833][ T6656] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 126.851193][ T56] smpboot: CPU 1 is now offline [ 129.260742][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.486064][ T5817] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 129.511239][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.541498][ T5817] usb 4-1: Product: syz [ 129.549715][ T5817] usb 4-1: Manufacturer: syz [ 129.568539][ T5817] usb 4-1: SerialNumber: syz [ 129.590193][ T5817] usb 4-1: config 0 descriptor?? [ 129.616156][ T5817] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 129.649925][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.694734][ T5817] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 129.704293][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.740771][ T5817] usb 4-1: media controller created [ 129.817898][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.830217][ T6730] dvb-usb: bulk message failed: -22 (7/0) [ 129.911770][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 129.946050][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.967043][ T8] usb 1-1: config 0 has no interfaces? [ 130.016976][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.041015][ T5817] DVB: Unable to find symbol mt352_attach() [ 130.064100][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.119788][ T8] usb 1-1: Product: syz [ 130.147437][ T8] usb 1-1: Manufacturer: syz [ 130.174546][ T8] usb 1-1: SerialNumber: syz [ 130.191351][ T8] usb 1-1: config 0 descriptor?? [ 130.217688][ T5817] DVB: Unable to find symbol nxt6000_attach() [ 130.237792][ T5817] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 130.287633][ T5817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 130.356390][ T5817] dvb-usb: schedule remote query interval to 1000 msecs. [ 130.410750][ T5817] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 130.475567][ T5817] dvb-usb: bulk message failed: -22 (7/0) [ 130.513218][ T5817] dvb-usb: bulk message failed: -22 (7/0) [ 130.572168][ T5817] usb 4-1: USB disconnect, device number 5 [ 130.629249][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.707050][ T6751] loop1: detected capacity change from 0 to 4096 [ 130.741199][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.836809][ T6751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.877535][ T5817] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 130.897050][ T56] usb 1-1: USB disconnect, device number 3 [ 131.175299][ T6751] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.364: corrupted inode contents [ 131.288784][ T6751] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #15: comm syz.1.364: mark_inode_dirty error [ 131.346350][ T6751] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.364: corrupted inode contents [ 131.368241][ T6759] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 131.419230][ T5834] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 131.489442][ T5834] wiimote 0005:057E:0306.0003: New device registered [ 131.496731][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.534932][ T6751] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #15: comm syz.1.364: mark_inode_dirty error [ 131.634515][ T6751] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.364: corrupted inode contents [ 131.682876][ T6751] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #15: comm syz.1.364: mark_inode_dirty error [ 131.700835][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.737449][ T56] usb 1-1: New USB device found, idVendor=17ba, idProduct=55aa, bcdDevice= 1.00 [ 131.761952][ T6751] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.364: corrupted inode contents [ 131.782312][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.808926][ T56] usb 1-1: Product: syz [ 131.817487][ T56] usb 1-1: Manufacturer: syz [ 131.828656][ T6751] EXT4-fs error (device loop1): ext4_truncate:4302: inode #15: comm syz.1.364: mark_inode_dirty error [ 131.847352][ T56] usb 1-1: SerialNumber: syz [ 131.888195][ T6751] EXT4-fs error (device loop1) in ext4_setattr:5683: Corrupt filesystem [ 131.908472][ T8] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 131.927060][ T8] usb 3-1: config 1 has no interface number 0 [ 131.944000][ T6763] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.364: corrupted inode contents [ 131.971585][ T8] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 131.992574][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.030693][ T8] usb 3-1: Product: syz [ 132.041097][ T8] usb 3-1: Manufacturer: syz [ 132.059161][ T8] usb 3-1: SerialNumber: syz [ 132.121659][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.131070][ T56] usb 1-1: USB disconnect, device number 4 [ 132.319805][ T6765] wiimote 0005:057E:0306.0003: Unhandled report 0 size 6 [ 132.351438][ T8] usb 3-1: cannot find UAC_HEADER [ 132.367909][ T6764] wiimote 0005:057E:0306.0003: Device removed [ 132.466769][ T6771] loop1: detected capacity change from 0 to 512 [ 132.480856][ T8] snd-usb-audio: probe of 3-1:1.3 failed with error -22 [ 132.536813][ T8] usb 3-1: USB disconnect, device number 4 [ 132.558984][ T6771] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.371: iget: bad extended attribute block 134217728 [ 132.608112][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.632702][ T5817] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 132.679878][ T6771] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.371: couldn't read orphan inode 15 (err -117) [ 132.750324][ T5817] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input12 [ 132.796406][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.860509][ T5817] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input13 [ 132.937753][ T5817] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input11 [ 133.124402][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134646][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168141][ T6769] loop3: detected capacity change from 0 to 40427 [ 133.185628][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.209530][ T6769] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 133.278418][ T6769] F2FS-fs (loop3): invalid crc value [ 133.357136][ T6769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.571994][ T6769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.698593][ T6769] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 133.738546][ T6784] f2fs_ckpt-7:3: attempt to access beyond end of device [ 133.738546][ T6784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.794100][ T6784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 133.813736][ T6785] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 134.386414][ T6790] device-mapper: ioctl: name not supplied when creating device [ 134.754972][ T6782] loop1: detected capacity change from 0 to 40427 [ 134.829225][ T6782] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 134.877320][ T6782] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 134.914931][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 134.952091][ T6782] F2FS-fs (loop1): invalid crc value [ 134.996798][ T6782] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.129013][ T6782] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 135.196139][ T6802] syz.3.382: attempt to access beyond end of device [ 135.196139][ T6802] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 135.264262][ T6782] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.477763][ T6782] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 135.557556][ T6782] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0 [ 135.700528][ T5772] syz-executor: attempt to access beyond end of device [ 135.700528][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.789013][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.806833][ T6811] loop3: detected capacity change from 0 to 256 [ 137.617947][ T6824] loop3: detected capacity change from 0 to 32768 [ 137.667440][ T6824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.391 (6824) [ 137.746081][ T6824] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.800931][ T6824] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 137.830863][ T6824] BTRFS info (device loop3): force clearing of disk cache [ 137.838080][ T6824] BTRFS info (device loop3): setting nodatacow, compression disabled [ 137.883502][ T6824] BTRFS info (device loop3): enabling auto defrag [ 137.890003][ T6824] BTRFS info (device loop3): max_inline at 0 [ 137.952198][ T6824] BTRFS info (device loop3): enabling disk space caching [ 137.959277][ T6824] BTRFS info (device loop3): disk space caching is enabled [ 138.021916][ T28] audit: type=1326 audit(1788952868.108:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.1.397" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b74b9e159 code=0x0 [ 138.129381][ T6824] BTRFS info (device loop3): enabling ssd optimizations [ 138.154014][ T6824] BTRFS info (device loop3): rebuilding free space tree [ 138.204041][ T6824] BTRFS info (device loop3): disabling free space tree [ 138.239136][ T6824] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.283569][ T6824] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.684844][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.340854][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.550803][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 140.590462][ T56] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 140.642872][ T56] usb 1-1: config 2 has no interface number 0 [ 140.660448][ T56] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 140.694871][ T56] usb 1-1: config 2 interface 88 has no altsetting 0 [ 140.709454][ T56] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 140.729697][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 140.773627][ T56] usb 1-1: Product: syz [ 140.777858][ T56] usb 1-1: Manufacturer: syz [ 140.808266][ T56] usb 1-1: SerialNumber: syz [ 140.833439][ T6874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.938039][ T6886] loop2: detected capacity change from 0 to 164 [ 140.950983][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 141.152207][ T6888] capability: warning: `syz.1.411' uses deprecated v2 capabilities in a way that may be insecure [ 141.177956][ T6874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.189350][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 141.226747][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.271043][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 141.327086][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.389954][ T8] usb 4-1: Found UVC 1.00 device (046d:0825) [ 141.497476][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 141.588353][ T6895] loop2: detected capacity change from 0 to 164 [ 141.873021][ T56] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 141.944425][ T56] asix: probe of 1-1:2.88 failed with error -71 [ 142.011837][ T56] usb 1-1: USB disconnect, device number 5 [ 142.200097][ T8] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 142.227449][ T8] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 142.304173][ T8] usb 4-1: USB disconnect, device number 6 [ 142.755195][ T6899] loop2: detected capacity change from 0 to 32768 [ 142.810379][ T6899] JBD2: Ignoring recovery information on journal [ 142.921339][ T6908] syz.0.419 (6908) used greatest stack depth: 20616 bytes left [ 142.997040][ T6899] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.419915][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 143.450156][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 143.738114][ T6922] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 144.025054][ T6930] loop1: detected capacity change from 0 to 256 [ 144.354280][ T6934] pimreg0: tun_chr_ioctl cmd 2147767506 [ 144.493728][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 144.509644][ T6936] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 144.543999][ T6936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.432'. [ 144.688189][ T6940] loop3: detected capacity change from 0 to 1024 [ 145.511121][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.720746][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 145.746482][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 145.793019][ T8] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.871111][ T8] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 145.945125][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.973383][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.00 [ 146.017681][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.056533][ T8] usb 2-1: config 0 descriptor?? [ 146.563614][ T8] wacom 0003:056A:0032.0004: hidraw0: USB HID vd.8b Joystick [HID 056a:0032] on usb-dummy_hcd.1-1/input0 [ 146.653302][ T6971] loop3: detected capacity change from 0 to 32768 [ 146.690440][ T6971] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.447 (6971) [ 146.799228][ T6971] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.839505][ T56] usb 2-1: USB disconnect, device number 4 [ 146.878926][ T6971] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 146.896925][ T6970] loop2: detected capacity change from 0 to 32768 [ 146.943462][ T6971] BTRFS info (device loop3): use zlib compression, level 3 [ 146.989882][ T6971] BTRFS info (device loop3): using free space tree [ 147.172090][ T6971] BTRFS info (device loop3): enabling ssd optimizations [ 147.237746][ T6971] BTRFS info (device loop3): auto enabling async discard [ 147.824095][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.137534][ T5788] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5788) [ 149.094232][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 149.256997][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 149.317663][ T8] usb 2-1: config 0 has no interfaces? [ 149.336432][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 149.351127][ T7017] netlink: 'syz.0.458': attribute type 21 has an invalid length. [ 149.413471][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.471513][ T8] usb 2-1: config 0 descriptor?? [ 149.648385][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 149.994750][ T8] usb 2-1: USB disconnect, device number 5 [ 194.555230][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563576][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.002269][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.008319][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 212.014415][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 237.595681][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 255.994615][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004972][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 305.910788][ T29] INFO: task jbd2/sda1-8:5101 blocked for more than 143 seconds. [ 305.919952][ T29] Not tainted syzkaller #0 [ 305.927567][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.938659][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5101 ppid:2 flags:0x00004000 [ 305.950238][ T29] Call Trace: [ 305.956322][ T29] [ 305.959285][ T29] __schedule+0x15ae/0x4660 [ 305.966517][ T29] ? asan.module_dtor+0x20/0x20 [ 305.972319][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 305.977372][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.985641][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 305.993873][ T29] schedule+0xbd/0x170 [ 305.997975][ T29] io_schedule+0x80/0xd0 [ 306.005202][ T29] bit_wait_io+0x11/0xd0 [ 306.009610][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.015392][ T29] ? bit_wait+0xd0/0xd0 [ 306.019581][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.027442][ T29] ? bit_wait+0xd0/0xd0 [ 306.031858][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.036668][ T29] ? do_raw_write_lock+0x11e/0x260 [ 306.046236][ T29] ? bit_waitqueue+0x30/0x30 [ 306.051064][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 306.058042][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 306.067482][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 306.074492][ T29] ? lock_chain_count+0x20/0x20 [ 306.079375][ T29] ? _raw_spin_unlock+0x40/0x40 [ 306.087256][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 306.093094][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 306.098397][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.108057][ T29] ? timer_delete_sync+0x20/0x20 [ 306.113231][ T29] ? do_raw_read_unlock+0x80/0x80 [ 306.118280][ T29] ? prepare_to_wait+0x1aa/0x200 [ 306.126402][ T29] kjournald2+0x40f/0x810 [ 306.130943][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 306.136159][ T29] ? wake_bit_function+0x200/0x200 [ 306.144524][ T29] ? _raw_spin_unlock+0x40/0x40 [ 306.149397][ T29] ? __kthread_parkme+0x71/0x1c0 [ 306.157681][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 306.167667][ T29] kthread+0x2fa/0x390 [ 306.171981][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 306.177202][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.184965][ T29] ret_from_fork+0x48/0x80 [ 306.189411][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.194316][ T29] ret_from_fork_asm+0x11/0x20 [ 306.199112][ T29] [ 306.202585][ T29] INFO: task syz-executor:5761 blocked for more than 143 seconds. [ 306.210401][ T29] Not tainted syzkaller #0 [ 306.219863][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.228761][ T29] task:syz-executor state:D stack:22672 pid:5761 ppid:5760 flags:0x00004002 [ 306.241147][ T29] Call Trace: [ 306.244468][ T29] [ 306.247436][ T29] __schedule+0x15ae/0x4660 [ 306.254399][ T29] ? mark_lock+0x94/0x320 [ 306.258780][ T29] ? asan.module_dtor+0x20/0x20 [ 306.268002][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.275432][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.281603][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.286852][ T29] schedule+0xbd/0x170 [ 306.293924][ T29] io_schedule+0x80/0xd0 [ 306.298197][ T29] bit_wait_io+0x11/0xd0 [ 306.302773][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.307319][ T29] ? bit_wait+0xd0/0xd0 [ 306.319417][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.326783][ T29] ? bit_wait+0xd0/0xd0 [ 306.333923][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.338717][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.344583][ T29] ? bit_waitqueue+0x30/0x30 [ 306.349200][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.357613][ T29] do_get_write_access+0x5c9/0xe00 [ 306.364964][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.375211][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.381638][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.387819][ T29] ? __might_sleep+0xe0/0xe0 [ 306.396363][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.402143][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.407633][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.415452][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.421524][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.426676][ T29] file_update_time+0x187/0x1a0 [ 306.432729][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.437804][ T29] ? do_wp_page+0x4ce/0x34d0 [ 306.446212][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.453406][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.458465][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.467609][ T29] do_wp_page+0xd4d/0x34d0 [ 306.474120][ T29] ? folio_put+0xd0/0xd0 [ 306.478385][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.487287][ T29] ? __rwlock_init+0x150/0x150 [ 306.493010][ T29] handle_mm_fault+0x1306/0x4a50 [ 306.497975][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.505282][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.510426][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.516041][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.524149][ T29] exc_page_fault+0x64/0x100 [ 306.528775][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.534321][ T29] asm_exc_page_fault+0x26/0x30 [ 306.539212][ T29] RIP: 0033:0x7f6382c701e3 [ 306.546701][ T29] RSP: 002b:00007ffd5fb84a20 EFLAGS: 00010202 [ 306.554384][ T29] RAX: 00007f637e3e5cfc RBX: 00007ffd5fb84b50 RCX: 0000000000000000 [ 306.569578][ T29] RDX: 00007f637e3e5cf8 RSI: 0000000000000008 RDI: 00007ffd5fb84b50 [ 306.577895][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 306.588830][ T29] R10: 00007ffd5fb84b30 R11: 0000000000000000 R12: 0000000000000000 [ 306.598457][ T29] R13: 000000000001a304 R14: fffffffffffe5cfc R15: 0000000000000000 [ 306.609511][ T29] [ 306.612743][ T29] INFO: task syz.0.464:7026 blocked for more than 144 seconds. [ 306.620395][ T29] Not tainted syzkaller #0 [ 306.625693][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.638066][ T29] task:syz.0.464 state:D stack:27048 pid:7026 ppid:5781 flags:0x00004004 [ 306.647369][ T29] Call Trace: [ 306.653828][ T29] [ 306.656792][ T29] __schedule+0x15ae/0x4660 [ 306.661626][ T29] ? mark_lock+0x94/0x320 [ 306.666001][ T29] ? asan.module_dtor+0x20/0x20 [ 306.677495][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.682924][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 306.688845][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.697179][ T29] schedule+0xbd/0x170 [ 306.702922][ T29] io_schedule+0x80/0xd0 [ 306.707196][ T29] bit_wait_io+0x11/0xd0 [ 306.715460][ T29] __wait_on_bit+0x9f/0x2c0 [ 306.719997][ T29] ? bit_wait+0xd0/0xd0 [ 306.724488][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 306.729975][ T29] ? bit_wait+0xd0/0xd0 [ 306.737248][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 306.742251][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 306.747309][ T29] ? bit_waitqueue+0x30/0x30 [ 306.752262][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.757484][ T29] do_get_write_access+0x5c9/0xe00 [ 306.765543][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 306.771830][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 306.779967][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 306.790942][ T29] ? __might_sleep+0xe0/0xe0 [ 306.795598][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 306.804187][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 306.809679][ T29] ext4_dirty_inode+0xcb/0x110 [ 306.814798][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 306.825056][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 306.830113][ T29] file_update_time+0x187/0x1a0 [ 306.835318][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 306.840370][ T29] ? filemap_fault+0x103c/0x1540 [ 306.848379][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 306.854346][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 306.863528][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 306.868572][ T29] ? __pte_offset_map+0x20d/0x280 [ 306.873997][ T29] do_page_mkwrite+0x153/0x3f0 [ 306.879815][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 306.889444][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 306.896902][ T29] ? numa_migrate_prep+0x350/0x350 [ 306.905149][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 306.910458][ T29] do_user_addr_fault+0x736/0x12d0 [ 306.916043][ T29] exc_page_fault+0x64/0x100 [ 306.920924][ T29] asm_exc_page_fault+0x26/0x30 [ 306.925795][ T29] RIP: 0033:0x7f05d7a72f32 [ 306.930215][ T29] RSP: 002b:00007fff51988ad0 EFLAGS: 00010202 [ 306.940645][ T29] RAX: 0000000000006008 RBX: 00007f05d8955720 RCX: 0000000000000000 [ 306.948643][ T29] RDX: 0000001b2da1e000 RSI: 0000000000000008 RDI: 00007f05d8955720 [ 306.960074][ T29] RBP: 0000000000000583 R08: 00007f05d7e10000 R09: 00007f05d7e26038 [ 306.968316][ T29] R10: 0000000000000007 R11: 0000000000000001 R12: ffffffff8a7dc334 [ 306.981177][ T29] R13: 00007f05d7e26038 R14: 000000000000010a R15: ffffffffffffa000 [ 306.989179][ T29] ? mas_root_expand+0xc4/0x660 [ 306.996408][ T29] [ 306.999479][ T29] INFO: task syz.3.468:7040 blocked for more than 144 seconds. [ 307.009669][ T29] Not tainted syzkaller #0 [ 307.017014][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.026598][ T29] task:syz.3.468 state:D stack:27048 pid:7040 ppid:5775 flags:0x00004004 [ 307.038785][ T29] Call Trace: [ 307.042349][ T29] [ 307.045310][ T29] __schedule+0x15ae/0x4660 [ 307.049851][ T29] ? mark_lock+0x94/0x320 [ 307.059172][ T29] ? asan.module_dtor+0x20/0x20 [ 307.064268][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.069319][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 307.078345][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 307.085664][ T29] schedule+0xbd/0x170 [ 307.089772][ T29] io_schedule+0x80/0xd0 [ 307.097111][ T29] bit_wait_io+0x11/0xd0 [ 307.101564][ T29] __wait_on_bit+0x9f/0x2c0 [ 307.106089][ T29] ? bit_wait+0xd0/0xd0 [ 307.110260][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 307.120699][ T29] ? bit_wait+0xd0/0xd0 [ 307.124909][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 307.129686][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 307.137148][ T29] ? bit_waitqueue+0x30/0x30 [ 307.141989][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 307.147230][ T29] do_get_write_access+0x5c9/0xe00 [ 307.155417][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 307.163241][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 307.169433][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.178678][ T29] ? __might_sleep+0xe0/0xe0 [ 307.185442][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 307.197689][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 307.203444][ T29] ext4_dirty_inode+0xcb/0x110 [ 307.208237][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 307.217413][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 307.224358][ T29] file_update_time+0x187/0x1a0 [ 307.229243][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 307.237538][ T29] ? filemap_fault+0x103c/0x1540 [ 307.242775][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 307.248519][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 307.257974][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.263296][ T29] ? __pte_offset_map+0x20d/0x280 [ 307.268344][ T29] do_page_mkwrite+0x153/0x3f0 [ 307.273748][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 307.278718][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 307.291518][ T29] ? numa_migrate_prep+0x350/0x350 [ 307.296678][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 307.303801][ T29] do_user_addr_fault+0x736/0x12d0 [ 307.308984][ T29] exc_page_fault+0x64/0x100 [ 307.315355][ T29] asm_exc_page_fault+0x26/0x30 [ 307.320236][ T29] RIP: 0033:0x7f8c58c72f32 [ 307.326479][ T29] RSP: 002b:00007fffdac92380 EFLAGS: 00010202 [ 307.335707][ T29] RAX: 0000000000001008 RBX: 00007f8c59b55720 RCX: 0000000000000000 [ 307.345488][ T29] RDX: 0000001b2dd23000 RSI: 0000000000000008 RDI: 00007f8c59b55720 [ 307.360275][ T29] RBP: 00000000000005ab R08: 00007f8c59010000 R09: 00007f8c59026038 [ 307.369891][ T29] R10: 0000000000000007 R11: 0000000000000001 R12: ffffffff82045ec9 [ 307.379552][ T29] R13: 00007f8c59026038 R14: 00000000000001ed R15: fffffffffffff000 [ 307.391936][ T29] ? userfaultfd_unmap_complete+0x89/0x310 [ 307.397786][ T29] [ 307.404266][ T29] INFO: task syz.2.469:7042 blocked for more than 144 seconds. [ 307.412083][ T29] Not tainted syzkaller #0 [ 307.417051][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.428804][ T29] task:syz.2.469 state:D stack:27560 pid:7042 ppid:5782 flags:0x00004004 [ 307.442081][ T29] Call Trace: [ 307.445401][ T29] [ 307.448350][ T29] __schedule+0x15ae/0x4660 [ 307.456562][ T29] ? mark_lock+0x94/0x320 [ 307.461146][ T29] ? asan.module_dtor+0x20/0x20 [ 307.466024][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.474237][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 307.480161][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 307.485713][ T29] schedule+0xbd/0x170 [ 307.494628][ T29] io_schedule+0x80/0xd0 [ 307.498937][ T29] bit_wait_io+0x11/0xd0 [ 307.504848][ T29] __wait_on_bit+0x9f/0x2c0 [ 307.509385][ T29] ? bit_wait+0xd0/0xd0 [ 307.517771][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 307.523483][ T29] ? bit_wait+0xd0/0xd0 [ 307.527665][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 307.532814][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 307.537861][ T29] ? bit_waitqueue+0x30/0x30 [ 307.545399][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 307.552634][ T29] do_get_write_access+0x5c9/0xe00 [ 307.557814][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 307.567089][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 307.573593][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 307.579778][ T29] ? __might_sleep+0xe0/0xe0 [ 307.587507][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 307.596719][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 307.605169][ T29] ext4_dirty_inode+0xcb/0x110 [ 307.609959][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 307.617432][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 307.625549][ T29] file_update_time+0x187/0x1a0 [ 307.630470][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 307.635893][ T29] ? filemap_fault+0x103c/0x1540 [ 307.641004][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 307.646765][ T29] ? pte_alloc_one+0x3b6/0x540 [ 307.654529][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 307.662512][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 307.667571][ T29] do_page_mkwrite+0x153/0x3f0 [ 307.676638][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 307.681933][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 307.686906][ T29] ? numa_migrate_prep+0x350/0x350 [ 307.697228][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 307.702778][ T29] do_user_addr_fault+0x736/0x12d0 [ 307.707925][ T29] exc_page_fault+0x64/0x100 [ 307.715565][ T29] ? clear_bhb_loop+0x40/0x90 [ 307.720295][ T29] asm_exc_page_fault+0x26/0x30 [ 307.726938][ T29] RIP: 0033:0x7f6a3dc6baa3 [ 307.734922][ T29] RSP: 002b:00007ffc7ee2b190 EFLAGS: 00010246 [ 307.741270][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000 [ 307.749264][ T29] RDX: 0000001b2d624000 RSI: 0000000000600000 RDI: 00007f6a3dfe0708 [ 307.760566][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.768577][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 307.780847][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc7ee2b420 [ 307.788860][ T29] [ 307.794993][ T29] [ 307.794993][ T29] Showing all locks held in the system: [ 307.805154][ T29] 1 lock held by khungtaskd/29: [ 307.810113][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 307.823209][ T29] 6 locks held by kworker/u4:2/34: [ 307.828368][ T29] #0: ffff88814225a538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 307.844862][ T29] #1: ffffc90000aafd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 307.857601][ T29] #2: ffff88814e59a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 307.871185][ T29] #3: ffff88814e59cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 307.885389][ T29] #4: ffff88814e59e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.896132][ T29] #5: ffff888077e0a088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 307.910291][ T29] 2 locks held by getty/5531: [ 307.917173][ T29] #0: ffff8880309720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.929447][ T29] #1: ffffc900032662f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 307.940491][ T29] 3 locks held by syz-executor/5761: [ 307.948062][ T29] #0: ffff88807b034420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 307.960413][ T29] #1: ffff88814e59a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 307.973817][ T29] #2: ffff88814e59e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 307.983739][ T29] 3 locks held by syz.0.464/7026: [ 307.988778][ T29] #0: ffff88807a81a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 308.000824][ T29] #1: ffff88814e59a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 308.016267][ T29] #2: ffff88814e59e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 308.026461][ T29] 3 locks held by syz.3.468/7040: [ 308.034617][ T29] #0: ffff88801b3d73a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 308.044795][ T29] #1: ffff88814e59a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 308.057616][ T29] #2: ffff88814e59e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 308.069021][ T29] 3 locks held by syz.2.469/7042: [ 308.077657][ T29] #0: ffff88801b3d0b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 308.087978][ T29] #1: ffff88814e59a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 308.098063][ T29] #2: ffff88814e59e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 308.112875][ T29] [ 308.115229][ T29] ============================================= [ 308.115229][ T29] [ 308.126766][ T29] NMI backtrace for cpu 0 [ 308.131122][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 308.138323][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.148383][ T29] Call Trace: [ 308.151673][ T29] [ 308.154612][ T29] dump_stack_lvl+0x18c/0x250 [ 308.159322][ T29] ? __wake_up_klogd+0xd9/0x100 [ 308.164218][ T29] ? show_regs_print_info+0x20/0x20 [ 308.169431][ T29] ? load_image+0x420/0x420 [ 308.173965][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 308.178938][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 308.185110][ T29] ? load_image+0x420/0x420 [ 308.189635][ T29] ? wq_watchdog_touch+0xef/0x170 [ 308.194671][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 308.200760][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 308.206951][ T29] watchdog+0xf59/0xfa0 [ 308.211124][ T29] ? watchdog+0x1e1/0xfa0 [ 308.215490][ T29] kthread+0x2fa/0x390 [ 308.219564][ T29] ? hungtask_pm_notify+0x50/0x50 [ 308.224622][ T29] ? kthread_blkcg+0xd0/0xd0 [ 308.229224][ T29] ret_from_fork+0x48/0x80 [ 308.233651][ T29] ? kthread_blkcg+0xd0/0xd0 [ 308.238264][ T29] ret_from_fork_asm+0x11/0x20 [ 308.243049][ T29] [ 308.257005][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 308.263877][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 308.271109][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.281346][ T29] Call Trace: [ 308.284632][ T29] [ 308.287568][ T29] dump_stack_lvl+0x18c/0x250 [ 308.292260][ T29] ? show_regs_print_info+0x20/0x20 [ 308.297466][ T29] ? load_image+0x420/0x420 [ 308.301992][ T29] panic+0x2ca/0x720 [ 308.305927][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 308.310445][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 308.316012][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 308.321398][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 308.327569][ T29] watchdog+0xf98/0xfa0 [ 308.331744][ T29] ? watchdog+0x1e1/0xfa0 [ 308.336089][ T29] kthread+0x2fa/0x390 [ 308.340174][ T29] ? hungtask_pm_notify+0x50/0x50 [ 308.345216][ T29] ? kthread_blkcg+0xd0/0xd0 [ 308.349816][ T29] ret_from_fork+0x48/0x80 [ 308.354240][ T29] ? kthread_blkcg+0xd0/0xd0 [ 308.358837][ T29] ret_from_fork_asm+0x11/0x20 [ 308.363622][ T29] [ 308.366717][ T29] Kernel Offset: disabled [ 308.371063][ T29] Rebooting in 86400 seconds..