last executing test programs: 7m50.265653656s ago: executing program 4 (id=492): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x300, 0x0, 0x8000, r1, 0x0, 0x0, 0x34, 0x0, 0x1, r1}]) 7m49.912706493s ago: executing program 4 (id=497): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file3\x00', 0x10, &(0x7f0000000240)={[{@rodir}, {@utf8no}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x155}}, {@uni_xlateno}, {@utf8}, {@numtail}, {@shortname_mixed}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@tz_utc}, {@utf8no}]}, 0x3, 0x29c, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x13) 7m49.345077293s ago: executing program 4 (id=509): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 7m47.933700524s ago: executing program 4 (id=529): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000022c0)=ANY=[], 0x2, 0xc36, &(0x7f0000002540)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7m47.199507713s ago: executing program 4 (id=540): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x8, 0x21, 0xffffffffffffffff, 0x0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x98}, 0x8, 0x20004000, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7m45.478998022s ago: executing program 4 (id=552): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 7m44.956947561s ago: executing program 32 (id=552): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 5m59.907742815s ago: executing program 5 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 5m59.531685259s ago: executing program 5 (id=1617): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2395050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000880) 5m58.636071752s ago: executing program 5 (id=1625): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0x4}, {0xc, 0x9b}, 0xa, 0x1, 0xc}) 5m58.446116365s ago: executing program 5 (id=1629): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@errors_continue}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@fmask={'fmask', 0x3d, 0x7ea}}, {@utf8}, {@errors_remount}, {@gid}]}, 0x1, 0x152e, &(0x7f0000004a00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x2008410, 0x0) 5m57.545264504s ago: executing program 5 (id=1639): r0 = socket$inet6(0xa, 0x2, 0x0) setuid(0xee00) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000bc0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0xfffffffc, 0x0, 0xb063}}) 5m56.770488174s ago: executing program 5 (id=1649): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10006, 0x4, {0x8, @pix={0x0, 0xfffffffd, 0x48524742, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2}}, 0xfffffffc}) 5m56.451252756s ago: executing program 33 (id=1649): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x10006, 0x4, {0x8, @pix={0x0, 0xfffffffd, 0x48524742, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x1, 0x2}}, 0xfffffffc}) 4m43.322077854s ago: executing program 6 (id=2383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) 4m42.894751847s ago: executing program 6 (id=2388): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4m41.078031764s ago: executing program 6 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2f, 0x25dfcbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x0) 4m41.01417191s ago: executing program 6 (id=2402): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1c040, &(0x7f00000004c0)={[{@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x8}}, {@sys_tz}, {@umask={'umask', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) 4m40.808182556s ago: executing program 6 (id=2404): semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 4m40.207926509s ago: executing program 6 (id=2412): r0 = socket(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/snmp\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4m39.730354356s ago: executing program 34 (id=2412): r0 = socket(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/snmp\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m8.791901502s ago: executing program 2 (id=4055): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0xf', 0x3) 1m8.576796455s ago: executing program 2 (id=4060): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m7.523902171s ago: executing program 2 (id=4073): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.361826566s ago: executing program 2 (id=4088): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5b6, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 1m5.46223558s ago: executing program 2 (id=4096): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000011d27bd6ffffffff8000a21004000000080000000001400030068737230000000000000000000000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x48810) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 1m2.708711596s ago: executing program 2 (id=4121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000b3d) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000380)) 1m2.046472082s ago: executing program 35 (id=4121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000b3d) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000380)) 8.138173257s ago: executing program 9 (id=4619): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.682532733s ago: executing program 9 (id=4622): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='.\x02\x00') 6.519044975s ago: executing program 0 (id=4627): r0 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_LISTEN={0x39, 0x40, 0x0, r4, 0x0, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 6.354045206s ago: executing program 1 (id=4628): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) 6.179621618s ago: executing program 0 (id=4631): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) sendfile(r1, r0, 0x0, 0x1) 5.996989905s ago: executing program 1 (id=4632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0x50}}, 0x80) 5.493459262s ago: executing program 1 (id=4633): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x4) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 4.995899809s ago: executing program 1 (id=4634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.903522289s ago: executing program 9 (id=4636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r1, 0xb15, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.534247768s ago: executing program 1 (id=4641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010601000000000000000200000a0900010073797a30000000004c000000030a010602000000000000000200000a0900010073797a30000000000900030073797a30000000000b00070066696c7465720000140004800800014000000003080002400000000098000000060a010603000000000000000200000a0900010073797a30000000000900020073797a30000000006c0004802c0001800e000100696d6d6564696174650000"], 0x12c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 3.889256172s ago: executing program 9 (id=4644): userfaultfd(0x801) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3.749028624s ago: executing program 8 (id=4646): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1}) 3.218750724s ago: executing program 9 (id=4647): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x4) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 3.218662593s ago: executing program 3 (id=4648): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1cf, &(0x7f00000002c0)="$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") r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[], 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x969edffe39095fd4, 0x0) 3.195161444s ago: executing program 8 (id=4649): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504"], 0x0) syz_usb_connect$uac2(0x3, 0xf4, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902e2000301090009080b0101010820010904000000010120000924010300091400010b2407060200020000010009040100000102200009040101010102200009240201040f1506210b24020105030405e653781124020268080400f1bae1ff293bf324621024010406030100000080210000000609240201ae00400903090501090004e000ad08250103310806000904020000010220000904020101010220001024020209"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 3.153173376s ago: executing program 0 (id=4651): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="d380b09390", 0x5}, 0x1, 0x0, 0x0, 0x4081}, 0x24004010) 2.806666049s ago: executing program 7 (id=4652): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1000000, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}], 0x1, 0x48081) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) 2.420034961s ago: executing program 7 (id=4653): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) dup(r0) r1 = dup(r0) write$cgroup_subtree(r1, 0x0, 0x32600) 2.381899081s ago: executing program 0 (id=4654): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.297114026s ago: executing program 7 (id=4655): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x144, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x6}, 0x4e20, 0x5, 0x4e23, 0x4000, 0xa, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@mcast1, {0x300, 0x5, 0xeb, 0xffff, 0x3, 0x5, 0x7}, {0xffffffffffffffff, 0x0, 0x80001f, 0xfffffffffffffffc}, {0x0, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {r1, 0x2}}]}, 0x144}}, 0x844) 2.084055534s ago: executing program 3 (id=4656): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2, 0x11}, 0x10) 1.88031957s ago: executing program 3 (id=4657): unshare(0x6020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe400, 0x0}, 0x10) 1.794791942s ago: executing program 0 (id=4658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0xe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.598473976s ago: executing program 7 (id=4659): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d09, &(0x7f0000000a00)) 1.512573784s ago: executing program 3 (id=4660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db"], 0x24}}, 0x4000800) 1.29441813s ago: executing program 8 (id=4661): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a4, @local, 0x404f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xbffffff8}}, 0x0, 0x1, [{{0xa, 0x4e22, 0x0, @local, 0x3}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1.252216969s ago: executing program 9 (id=4662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.230029104s ago: executing program 7 (id=4663): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="61646420206f6f73797a205b959b86c2038af739ac7ce85b1980981f94ea922cca2e2045096e3b58cd2c18b3ffd4d8d8725257bd7534fad339b98b74ad76ceaf04ad12bd0f6b7e78e77de62fc12e724fe08e1e6f0318a33d60e7c5747aa64a65b6fa5edf11a745f5aa89796672611fc76df92ab1a4d716b740733f969554b324885bc81435681dc8dd9b8a63ee618c5ed31ce810a1868954249311e9a23e9fcb3df5cbed706333cdb519ad4f3c7230cd3742a3b88f08280f0eb33499969c0d88d5cd9b108397bff94a463097efc9637d98a89bb16e87b09e5d", 0xd9) 1.14004139s ago: executing program 3 (id=4664): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1.077563746s ago: executing program 8 (id=4665): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x898, 0xfffffffe, 0xe}, 0x10) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e26, @empty=0x1000000}, 0x10) 939.620733ms ago: executing program 8 (id=4666): mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 714.998377ms ago: executing program 8 (id=4667): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), 0x4) 469.848646ms ago: executing program 0 (id=4668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 416.277866ms ago: executing program 3 (id=4669): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x400003, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x4, 0xffc, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 133.706653ms ago: executing program 1 (id=4670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 0s ago: executing program 7 (id=4671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): d length. [ 502.164004][T15487] bond0: (slave bond_slave_0): Releasing backup interface [ 502.212578][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 502.218753][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 502.244185][ T10] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 502.244217][ T10] usb 3-1: config 0 has no interface number 0 [ 502.244262][ T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.244292][ T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.244319][ T10] usb 3-1: config 0 interface 52 has no altsetting 0 [ 502.244356][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.306983][T15481] loop1: detected capacity change from 0 to 131072 [ 502.312488][T15422] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 502.312541][T15422] XFS (loop7): Unmount and run xfs_repair [ 502.312557][T15422] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 502.312577][T15422] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 502.312596][T15422] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 502.312614][T15422] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 502.312631][T15422] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 502.312649][T15422] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 502.312668][T15422] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.312685][T15422] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.312703][T15422] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.312722][T15422] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 502.349969][T15481] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 502.350002][T15481] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 502.353621][ T10] usb 3-1: config 0 descriptor?? [ 502.402375][T15485] fido_id[15485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 502.415489][T15481] F2FS-fs (loop1): invalid crc value [ 502.531273][T15481] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 502.540612][T15481] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 502.540642][T15481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 502.545436][T15487] bond0: (slave bond_slave_1): Releasing backup interface [ 502.545779][T15422] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 502.545826][T15422] XFS (loop7): Unmount and run xfs_repair [ 502.545841][T15422] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 502.545861][T15422] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 502.545879][T15422] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 502.545896][T15422] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 502.545914][T15422] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 502.545932][T15422] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 502.545950][T15422] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.545967][T15422] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.545985][T15422] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.546012][T15422] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 502.556650][T15422] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 502.556697][T15422] XFS (loop7): Unmount and run xfs_repair [ 502.556712][T15422] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 502.556732][T15422] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 502.556750][T15422] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 502.556769][T15422] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 502.556786][T15422] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 502.556804][T15422] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 502.556822][T15422] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.556839][T15422] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.556856][T15422] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 502.556875][T15422] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 502.797950][ T10] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input44 [ 502.811724][ T4962] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 502.908303][T15497] loop3: detected capacity change from 0 to 7 [ 502.920467][T15487] team0: Port device team_slave_0 removed [ 502.929746][ T4962] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 502.973008][ T4962] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 502.976611][ T4962] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 502.984377][T10171] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 503.009886][ T10] usb 3-1: USB disconnect, device number 17 [ 503.035285][T10171] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 503.046870][T15487] team0: Port device team_slave_1 removed [ 503.058501][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.058532][T15487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.089363][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.089401][T15487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.151759][T15487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.402438][T15488] team0: Port device dummy0 added [ 503.607352][T15502] loop0: detected capacity change from 0 to 1024 [ 503.647162][T15502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.647203][T15502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.647245][T15502] EXT4-fs: Ignoring removed i_version option [ 503.751681][T15502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 503.751794][T15502] ext4 filesystem being mounted at /643/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.884711][T15502] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.3637: lblock 0 mapped to illegal pblock 0 (length 6) [ 503.914771][T15502] EXT4-fs (loop0): Remounting filesystem read-only [ 504.068568][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 504.399763][T15517] loop2: detected capacity change from 0 to 2048 [ 504.461280][T15517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.461386][T15517] ext4 filesystem being mounted at /653/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 504.714096][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.775233][T15510] loop8: detected capacity change from 0 to 32768 [ 504.809090][T15510] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 505.045882][T15510] XFS (loop8): Ending clean mount [ 505.121978][T15510] XFS (loop8): Quotacheck needed: Please wait. [ 505.619749][T15510] XFS (loop8): Quotacheck: Done. [ 505.721545][T15555] loop1: detected capacity change from 0 to 256 [ 505.726084][T15555] exfat: Deprecated parameter 'namecase' [ 505.726164][T15555] exfat: Deprecated parameter 'utf8' [ 505.774165][T15555] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 505.862754][T12199] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 505.888066][T12199] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 505.958845][T15543] loop2: detected capacity change from 0 to 32768 [ 505.993629][T15543] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 506.127211][T15543] XFS (loop2): Ending clean mount [ 506.350323][T15571] loop3: detected capacity change from 0 to 2048 [ 506.395327][T15571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.608410][T15577] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.3655: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 506.636457][ T5616] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 506.658540][T15577] EXT4-fs (loop3): Remounting filesystem read-only [ 506.660183][T15577] CacheFiles: Lookup cache failed with error -117 [ 506.660258][T15577] CacheFiles: Failed to register: -117 [ 506.914547][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.375016][T15590] 9p: Unknown uid 00000000004294967295 [ 507.455639][T15595] loop2: detected capacity change from 0 to 2048 [ 507.503324][T15595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.629151][ T5734] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 507.692664][T15576] loop1: detected capacity change from 0 to 32768 [ 507.695893][T15576] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3656 (15576) [ 507.718478][T15576] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 507.718514][T15576] BTRFS info (device loop1): using blake2b checksum algorithm [ 507.779906][ T5734] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 507.783627][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.783653][ T5734] usb 4-1: Product: syz [ 507.783668][ T5734] usb 4-1: Manufacturer: syz [ 507.783684][ T5734] usb 4-1: SerialNumber: syz [ 507.996888][T15622] tipc: Enabling of bearer rejected, failed to enable media [ 507.998634][T15576] BTRFS info (device loop1): enabling ssd optimizations [ 507.998661][T15576] BTRFS info (device loop1): turning on async discard [ 507.998680][T15576] BTRFS info (device loop1): enabling free space tree [ 507.998700][T15576] BTRFS info (device loop1): use zstd compression, level 3 [ 508.104741][ T5734] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 508.544707][ T5635] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 508.949506][T15642] loop1: detected capacity change from 0 to 256 [ 509.023765][T15642] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 509.037688][T15645] loop7: detected capacity change from 0 to 512 [ 509.538310][ T5829] usb 4-1: driver API: 1.9.9 2016-02-15 [1-1] [ 509.538349][ T5829] usb 4-1: firmware API: 1.9.6 2012-07-07 [ 509.707149][T15658] loop7: detected capacity change from 0 to 128 [ 509.717781][T15658] FAT-fs (loop7): Directory bread(block 1048) failed [ 509.717823][T15658] FAT-fs (loop7): Directory bread(block 1049) failed [ 509.717850][T15658] FAT-fs (loop7): Directory bread(block 1050) failed [ 509.717877][T15658] FAT-fs (loop7): Directory bread(block 1051) failed [ 509.717903][T15658] FAT-fs (loop7): Directory bread(block 1052) failed [ 509.717930][T15658] FAT-fs (loop7): Directory bread(block 1053) failed [ 509.717957][T15658] FAT-fs (loop7): Directory bread(block 1054) failed [ 509.717983][T15658] FAT-fs (loop7): Directory bread(block 1055) failed [ 509.824221][ C1] usb 4-1: received invalid command response:got -4, instead of 0 [ 509.824284][ C1] usb 4-1: restart device (9) [ 510.025374][ C1] usb 4-1: received invalid command response:got -4, instead of 0 [ 510.142604][T15665] netlink: 'syz.1.3686': attribute type 30 has an invalid length. [ 510.276596][T15668] ipvlan2: entered allmulticast mode [ 510.276624][T15668] virt_wifi0: entered allmulticast mode [ 510.291219][T15668] batman_adv: batadv0: Adding interface: ipvlan2 [ 510.291240][T15668] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.298501][T15668] batman_adv: batadv0: Interface activated: ipvlan2 [ 510.619063][ T5829] usb 4-1: firmware upload failed (-110). [ 510.746738][ T5829] usb 4-1: USB disconnect, device number 19 [ 511.109295][ T5734] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 511.271397][ T5734] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 511.276225][ T5734] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.276276][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 511.276307][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 511.276337][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 511.279921][ T5734] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 511.279950][ T5734] usb 1-1: Manufacturer: syz [ 511.361792][ T5734] usb 1-1: config 0 descriptor?? [ 511.368676][ T5734] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 511.382235][ T5734] mceusb 1-1:0.0: Interface 0 is not authorized for usage [ 511.382886][ T5734] cx231xx 1-1:0.0: Interface 0 is not authorized for usage [ 511.793165][T15706] loop3: detected capacity change from 0 to 8 [ 512.173555][T15690] loop7: detected capacity change from 0 to 32768 [ 512.206610][T15690] [ 512.206610][T15690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.206610][T15690] [ 512.385100][ T1488] ERROR: (device loop7): diWrite: ixpxd invalid [ 512.385100][ T1488] [ 512.399720][ T1488] ERROR: (device loop7): remounting filesystem as read-only [ 512.399741][ T1488] ERROR: (device loop7): txCommit: [ 512.399741][ T1488] [ 512.399792][ T1488] jfs_write_inode: jfs_commit_inode failed! [ 512.401503][T10171] [ 512.401503][T10171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.401503][T10171] [ 512.401907][T10171] [ 512.401907][T10171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.401907][T10171] [ 512.531249][T15713] loop2: detected capacity change from 0 to 2048 [ 512.569137][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 512.622450][T15713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.632653][T15713] ext4 filesystem being mounted at /662/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.722723][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 512.729755][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.729791][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.729832][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.788634][ T10] usb 2-1: config 0 descriptor?? [ 512.980557][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.073670][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 513.073829][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 513.081860][ T10] usb 2-1: USB disconnect, device number 15 [ 513.153625][T15727] loop2: detected capacity change from 0 to 512 [ 513.154771][T15727] EXT4-fs: Ignoring removed oldalloc option [ 513.182693][T15727] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 513.182980][T15727] EXT4-fs (loop2): orphan cleanup on readonly fs [ 513.212240][T15727] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 513.212643][T15727] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 513.213051][T15727] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.3726: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 513.213099][T15727] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 513.215587][T15727] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3726: couldn't read orphan inode 13 (err -117) [ 513.215622][T15727] loop2: lost filesystem error report for type 5 error -117 [ 513.282015][T15727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 513.375038][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.440768][T15714] loop3: detected capacity change from 0 to 32768 [ 513.451987][T15714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3709 (15714) [ 513.485645][T15714] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 513.485683][T15714] BTRFS info (device loop3): using sha256 checksum algorithm [ 513.569717][ T5742] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 513.636437][T15714] BTRFS info (device loop3): enabling ssd optimizations [ 513.636469][T15714] BTRFS info (device loop3): turning on async discard [ 513.636488][T15714] BTRFS info (device loop3): enabling free space tree [ 513.719485][ T5742] usb 2-1: Using ep0 maxpacket: 8 [ 513.728352][ T5742] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 513.737340][ T5742] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 513.737369][ T5742] usb 2-1: config 0 has no interface number 0 [ 513.737414][ T5742] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.737443][ T5742] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.737469][ T5742] usb 2-1: config 0 interface 52 has no altsetting 0 [ 513.737507][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.747635][ T5742] usb 2-1: config 0 descriptor?? [ 513.906442][ T5829] usb 1-1: USB disconnect, device number 13 [ 514.028384][ T5742] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input45 [ 514.035186][ T4962] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 514.052592][ T5630] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 514.090353][ T4962] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 514.235952][ T4962] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 514.252943][ T4962] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 514.304526][ T5734] usb 2-1: USB disconnect, device number 16 [ 514.747040][T15768] loop2: detected capacity change from 0 to 512 [ 515.188855][T15777] loop0: detected capacity change from 0 to 1024 [ 515.281144][T15777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.281258][T15777] ext4 filesystem being mounted at /665/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.607841][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 515.808492][T15800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3740'. [ 516.159100][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 516.320628][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 516.335960][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.336023][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 516.340767][ T10] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 516.340796][ T10] usb 1-1: config 127 has no interface number 0 [ 516.340829][ T10] usb 1-1: config 127 interface 124 has no altsetting 0 [ 516.348335][ T10] usb 1-1: string descriptor 0 read error: -22 [ 516.348489][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.400009][ T10] carl9170 1-1:127.124: Interface 124 is not authorized for usage [ 516.406039][ T10] usbtest 1-1:127.124: Interface 124 is not authorized for usage [ 516.537832][T15823] loop7: detected capacity change from 0 to 2048 [ 516.621588][T15830] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.626255][ T10] usb 1-1: USB disconnect, device number 14 [ 516.733484][T15830] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 516.733587][T15830] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 516.761910][T15830] Remounting filesystem read-only [ 517.134133][T15839] loop1: detected capacity change from 0 to 256 [ 517.249262][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 517.399112][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 517.403825][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 517.403877][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 517.404942][ T10] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 517.404971][ T10] usb 1-1: config 127 has no interface number 0 [ 517.405017][ T10] usb 1-1: config 127 interface 124 has no altsetting 0 [ 517.439139][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.439171][ T10] usb 1-1: Product: syz [ 517.439189][ T10] usb 1-1: Manufacturer: syz [ 517.439206][ T10] usb 1-1: SerialNumber: syz [ 517.531136][T15841] loop8: detected capacity change from 0 to 4096 [ 517.722149][T10171] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 517.736561][ T10] carl9170 1-1:127.124: Interface 124 is not authorized for usage [ 517.744722][ T10] usbtest 1-1:127.124: Interface 124 is not authorized for usage [ 517.768653][ T10] usb 1-1: USB disconnect, device number 15 [ 518.334707][T15858] netlink: 'syz.7.3764': attribute type 30 has an invalid length. [ 518.590648][T15855] loop8: detected capacity change from 0 to 8192 [ 518.604293][T15855] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.917777][T15867] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 518.917807][T15867] FAT-fs (loop8): Filesystem has been set read-only [ 519.287491][T15880] loop1: detected capacity change from 0 to 1024 [ 519.428841][T15880] hfsplus: invalid length 1280 has been corrected to 255 [ 520.534886][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 520.700191][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.702436][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.702463][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.705588][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.705617][ T10] usb 1-1: SerialNumber: syz [ 520.950324][ T10] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 520.968561][ T10] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage [ 520.969175][ T5742] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 520.981892][ T10] usb 1-1: USB disconnect, device number 16 [ 521.077764][T15921] loop8: detected capacity change from 0 to 256 [ 521.093701][T15921] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 521.095515][T15921] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 521.095542][T15921] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 521.095558][T15921] UDF-fs: Scanning with blocksize 512 failed [ 521.138694][T15921] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 521.146916][ T5742] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 521.171180][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.171214][ T5742] usb 2-1: Product: syz [ 521.171232][ T5742] usb 2-1: Manufacturer: syz [ 521.171250][ T5742] usb 2-1: SerialNumber: syz [ 521.208726][T15921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.359729][ T5742] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 521.687260][ T189] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 521.687300][ T189] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 521.809116][T15940] program syz.3.3800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.841881][T15942] loop2: detected capacity change from 0 to 1024 [ 521.934579][T15942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.968380][ C0] usb 2-1: received invalid command response:got -4, instead of 0 [ 521.968419][ C0] usb 2-1: restart device (9) [ 521.987140][T15947] program syz.3.3802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.176214][ C0] usb 2-1: received invalid command response:got -4, instead of 0 [ 522.332326][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3806'. [ 522.592710][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.737546][T15936] loop0: detected capacity change from 0 to 32768 [ 522.775520][T15936] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 522.783556][ T189] usb 2-1: firmware upload failed (-110). [ 522.920189][T15936] XFS (loop0): Ending clean mount [ 523.004779][ T5773] usb 2-1: USB disconnect, device number 17 [ 523.085149][T15936] XFS (loop0): Quotacheck needed: Please wait. [ 523.542861][T15992] loop1: detected capacity change from 0 to 1024 [ 523.619484][T15936] XFS (loop0): Quotacheck: Done. [ 523.654692][T15992] hfsplus: bad catalog entry type [ 523.827496][ T5617] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.899621][ T5617] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 524.541072][T16015] loop3: detected capacity change from 0 to 128 [ 525.830037][T16048] nbd0: detected capacity change from 0 to 63 [ 525.834781][ T5626] block nbd0: Receive control failed (result -32) [ 525.849693][ T2001] block nbd0: Dead connection, failed to find a fallback [ 525.849723][ T2001] block nbd0: shutting down sockets [ 525.849817][ T2001] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.849932][ T2001] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.899539][ T4938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 525.899581][ T4938] Buffer I/O error on dev nbd0, logical block 1, async page read [ 525.899603][ T4938] Buffer I/O error on dev nbd0, logical block 2, async page read [ 525.899622][ T4938] Buffer I/O error on dev nbd0, logical block 3, async page read [ 525.905205][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.905242][ T4938] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.905264][ T4938] Buffer I/O error on dev nbd0, logical block 1, async page read [ 525.905283][ T4938] Buffer I/O error on dev nbd0, logical block 2, async page read [ 525.905303][ T4938] Buffer I/O error on dev nbd0, logical block 3, async page read [ 525.907033][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.907098][ T4938] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.907119][ T4938] Buffer I/O error on dev nbd0, logical block 1, async page read [ 525.908122][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.908355][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.908597][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.908838][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.910782][ T4938] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 525.910981][ T4938] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 525.911051][ T5621] ldm_validate_partition_table(): Disk read failed. [ 525.915041][ T5621] Dev nbd0: unable to read RDB block 0 [ 525.930047][ T5621] nbd0: unable to read partition table [ 526.002174][ T5742] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 526.002329][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 526.017732][ T5621] ldm_validate_partition_table(): Disk read failed. [ 526.023127][ T5621] Dev nbd0: unable to read RDB block 0 [ 526.041076][ T5621] nbd0: unable to read partition table [ 526.152674][ T5742] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 526.153206][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 526.154389][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.177357][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.177395][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.177421][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.177467][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.199723][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.199754][ T5742] usb 9-1: Product: syz [ 526.199773][ T5742] usb 9-1: Manufacturer: syz [ 526.199791][ T5742] usb 9-1: SerialNumber: syz [ 526.212987][ T10] usb 1-1: config 0 descriptor?? [ 526.235476][ T10] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 526.236445][ T10] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 526.913018][ T5742] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:91:80:4f:bf:38 [ 526.986047][T16070] loop7: detected capacity change from 0 to 40427 [ 526.987139][T16070] F2FS-fs: heap/no_heap options were deprecated [ 527.006683][T16070] F2FS-fs (loop7): build fault injection rate: 19 [ 527.006712][T16070] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 527.025620][T16070] F2FS-fs (loop7): invalid crc value [ 527.085631][T16070] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 527.128406][ T5742] rtl8150 9-1:1.0: eth13: rtl8150 is detected [ 527.166515][ T5742] usb 9-1: USB disconnect, device number 8 [ 527.384021][T16070] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 527.468420][T16070] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 527.590189][T16070] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 527.624506][T16070] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 527.666302][T16070] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 527.858478][T10171] syz-executor: attempt to access beyond end of device [ 527.858478][T10171] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 527.876285][T10171] CPU: 1 UID: 0 PID: 10171 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 527.876328][T10171] Tainted: [L]=SOFTLOCKUP [ 527.876339][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 527.876355][T10171] Call Trace: [ 527.876366][T10171] [ 527.876377][T10171] dump_stack_lvl+0xe8/0x150 [ 527.876433][T10171] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 527.876477][T10171] f2fs_write_end_bio+0x1211/0x16e0 [ 527.876510][T10171] ? blkg_put+0x22/0x240 [ 527.876564][T10171] __submit_merged_bio+0x258/0x6a0 [ 527.876600][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.876630][T10171] ? rcu_is_watching+0x16/0xb0 [ 527.876670][T10171] __submit_merged_write_cond+0x3c9/0x4e0 [ 527.876718][T10171] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 527.876771][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.876812][T10171] f2fs_write_data_pages+0x2a27/0x36f0 [ 527.876852][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.876882][T10171] ? __lock_acquire+0x747/0x2de0 [ 527.876951][T10171] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 527.877044][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877074][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877103][T10171] ? __bfs+0x153/0x290 [ 527.877129][T10171] ? __pfx_hlock_conflict+0x10/0x10 [ 527.877167][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877210][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877241][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877271][T10171] ? __lock_acquire+0x1511/0x2de0 [ 527.877329][T10171] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 527.877373][T10171] do_writepages+0x338/0x560 [ 527.877402][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877441][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877474][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877503][T10171] ? do_raw_spin_unlock+0xf5/0x200 [ 527.877545][T10171] filemap_fdatawrite+0x1e9/0x2f0 [ 527.877580][T10171] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 527.877650][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877684][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.877720][T10171] ? do_raw_spin_unlock+0xf5/0x200 [ 527.877763][T10171] f2fs_sync_dirty_inodes+0x30e/0x830 [ 527.877818][T10171] f2fs_write_checkpoint+0xa3d/0x2710 [ 527.877845][T10171] ? __lock_acquire+0x747/0x2de0 [ 527.877910][T10171] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 527.877935][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.878028][T10171] kill_f2fs_super+0x2dd/0x700 [ 527.878068][T10171] ? __pfx_kill_f2fs_super+0x10/0x10 [ 527.878109][T10171] ? call_rcu+0x64d/0x8b0 [ 527.878139][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.878169][T10171] ? lockdep_hardirqs_on+0x7b/0x110 [ 527.878203][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.878250][T10171] deactivate_locked_super+0xbc/0x110 [ 527.878290][T10171] cleanup_mnt+0x3d3/0x460 [ 527.878322][T10171] task_work_run+0x1d9/0x270 [ 527.878356][T10171] ? __pfx_task_work_run+0x10/0x10 [ 527.878397][T10171] exit_to_user_mode_loop+0x204/0x770 [ 527.878431][T10171] ? srso_alias_return_thunk+0x5/0xfbef5 [ 527.878460][T10171] ? rcu_is_watching+0x16/0xb0 [ 527.878497][T10171] do_syscall_64+0x328/0x520 [ 527.878529][T10171] ? trace_irq_disable+0x3b/0x140 [ 527.878556][T10171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.878589][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.878615][T10171] RIP: 0033:0x7f1a4079f397 [ 527.878639][T10171] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 527.878661][T10171] RSP: 002b:00007ffe9c5f8878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 527.878689][T10171] RAX: 0000000000000000 RBX: 00007f1a408344bb RCX: 00007f1a4079f397 [ 527.878707][T10171] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9c5f8930 [ 527.878724][T10171] RBP: 00007ffe9c5f8930 R08: 00007ffe9c5f9930 R09: 00000000ffffffff [ 527.878743][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9c5f99c0 [ 527.878760][T10171] R13: 00007f1a408344bb R14: 0000000000080d2d R15: 00007ffe9c5f9a00 [ 527.878802][T10171] [ 528.104508][T10171] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 528.411684][T16091] loop3: detected capacity change from 0 to 32768 [ 528.892895][ T10] usb 1-1: USB disconnect, device number 17 [ 529.516385][T16121] loop2: detected capacity change from 0 to 32768 [ 529.556169][T16121] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 529.665997][T16121] XFS (loop2): Ending clean mount [ 529.735337][T16136] loop0: detected capacity change from 0 to 4096 [ 529.766636][T16136] ntfs3(loop0): ino=3, mi_enum_attr [ 529.941524][ T5616] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 530.311065][T16134] loop7: detected capacity change from 0 to 32768 [ 530.448153][T16134] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 530.824544][T16134] XFS (loop7): Ending clean mount [ 530.874982][T16134] XFS (loop7): Quotacheck needed: Please wait. [ 530.972681][T16178] overlayfs: failed to clone upperpath [ 531.122840][T16134] XFS (loop7): Quotacheck: Done. [ 531.130264][T16184] loop2: detected capacity change from 0 to 256 [ 531.139789][T16184] exfat: Deprecated parameter 'namecase' [ 531.158272][T16184] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 531.379645][T10171] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 531.423883][T10171] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 531.720260][T16196] loop3: detected capacity change from 0 to 512 [ 531.722719][T16196] EXT4-fs (loop3): Test dummy encryption mode enabled [ 531.722740][T16196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.763170][T16196] EXT4-fs (loop3): 1 truncate cleaned up [ 531.767033][T16196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.776899][T16196] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.3904: bad extra_isize 62 (inode size 256) [ 532.177879][T16200] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.3904: bad extra_isize 62 (inode size 256) [ 532.575706][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.712068][T16227] loop8: detected capacity change from 0 to 2048 [ 532.749954][T16227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.750074][T16227] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.825793][T16235] loop7: detected capacity change from 0 to 512 [ 532.850309][T16227] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.3916: bg 0: block 2: invalid block bitmap [ 532.852516][T16235] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.3919: bad orphan inode 15 [ 532.852545][T16235] loop7: lost filesystem error report for type 5 error -117 [ 532.854326][T16235] ext4_test_bit(bit=14, block=5) = 0 [ 532.907111][T16235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.968517][T16227] fs-verity (loop8, inode 13): ext4_end_enable_verity() failed with err -28 [ 533.007246][T16235] EXT4-fs (loop7): shut down requested (2) [ 533.214695][T12199] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.226730][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.624299][T16255] loop3: detected capacity change from 0 to 4096 [ 533.638327][T16255] EXT4-fs: Ignoring removed nobh option [ 533.638403][T16255] EXT4-fs: Ignoring removed bh option [ 533.656126][T16255] EXT4-fs (loop3): Test dummy encryption mode enabled [ 533.691299][T16255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.049664][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.131066][T16275] loop7: detected capacity change from 0 to 164 [ 534.218256][T16275] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 534.254565][T16275] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 534.279727][T16276] loop2: detected capacity change from 0 to 2048 [ 534.305886][T16276] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 534.311431][T16276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.395377][T16258] loop8: detected capacity change from 0 to 40427 [ 534.413633][T16258] F2FS-fs (loop8): invalid crc value [ 534.535753][T16258] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 534.625694][T16258] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 534.625725][T16258] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 534.625753][T16258] F2FS-fs (loop8): Start checkpoint disabled! [ 534.696156][T16258] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 534.696543][T16258] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 534.970717][T16289] sctp: [Deprecated]: syz.3.3941 (pid 16289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.970717][T16289] Use struct sctp_sack_info instead [ 535.027855][ T63] kworker/u8:4: attempt to access beyond end of device [ 535.027855][ T63] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 535.027958][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.027993][ T63] Tainted: [L]=SOFTLOCKUP [ 535.028004][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 535.028021][ T63] Workqueue: writeback wb_workfn (flush-7:8) [ 535.028063][ T63] Call Trace: [ 535.028074][ T63] [ 535.028086][ T63] dump_stack_lvl+0xe8/0x150 [ 535.028129][ T63] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 535.028176][ T63] f2fs_write_end_bio+0x1211/0x16e0 [ 535.028209][ T63] ? blkg_put+0x22/0x240 [ 535.028268][ T63] __submit_merged_bio+0x258/0x6a0 [ 535.028303][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028334][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.028376][ T63] __submit_merged_write_cond+0x3c9/0x4e0 [ 535.028428][ T63] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 535.028495][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028539][ T63] f2fs_write_data_pages+0x2a27/0x36f0 [ 535.028580][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028664][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.028778][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028835][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028865][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.028901][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.028930][ T63] ? trace_hrtimer_start+0x82/0x200 [ 535.028988][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029037][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.029082][ T63] do_writepages+0x338/0x560 [ 535.029122][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029152][ T63] ? reacquire_held_locks+0x117/0x1a0 [ 535.029184][ T63] ? writeback_sb_inodes+0x450/0x1b00 [ 535.029230][ T63] __writeback_single_inode+0x136/0x1220 [ 535.029270][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029300][ T63] ? do_raw_spin_unlock+0xf5/0x200 [ 535.029346][ T63] writeback_sb_inodes+0x9de/0x1b00 [ 535.029380][ T63] ? __lock_acquire+0x747/0x2de0 [ 535.029417][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029459][ T63] ? do_raw_spin_unlock+0xf5/0x200 [ 535.029507][ T63] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 535.029604][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029634][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.029667][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.029697][ T63] ? queue_io+0x2d3/0x470 [ 535.029737][ T63] wb_writeback+0x41c/0xad0 [ 535.029776][ T63] ? queue_io+0x1f1/0x470 [ 535.029819][ T63] ? __pfx_wb_writeback+0x10/0x10 [ 535.029850][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.029911][ T63] wb_workfn+0x431/0x10f0 [ 535.029974][ T63] ? __pfx_wb_workfn+0x10/0x10 [ 535.030023][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030052][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.030102][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030132][ T63] ? lock_acquire+0x115/0x350 [ 535.030161][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030200][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.030232][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030264][ T63] ? process_scheduled_works+0x97a/0x1630 [ 535.030301][ T63] process_scheduled_works+0xc3d/0x1630 [ 535.030337][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030414][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 535.030458][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030488][ T63] ? assign_work+0x3cf/0x5d0 [ 535.030536][ T63] worker_thread+0xa47/0xfb0 [ 535.030576][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030621][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030651][ T63] ? __kthread_parkme+0x71/0x1f0 [ 535.030706][ T63] kthread+0x38b/0x480 [ 535.030734][ T63] ? __pfx_worker_thread+0x10/0x10 [ 535.030768][ T63] ? __pfx_kthread+0x10/0x10 [ 535.030797][ T63] ret_from_fork+0x514/0xb70 [ 535.030829][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 535.030855][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.030885][ T63] ? __switch_to+0xc89/0x1420 [ 535.030928][ T63] ? __pfx_kthread+0x10/0x10 [ 535.030963][ T63] ret_from_fork_asm+0x1a/0x30 [ 535.031030][ T63] [ 535.046165][ T63] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 535.046267][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.046301][ T63] Tainted: [L]=SOFTLOCKUP [ 535.046311][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 535.046329][ T63] Workqueue: writeback wb_workfn (flush-7:8) [ 535.046368][ T63] Call Trace: [ 535.046379][ T63] [ 535.046389][ T63] dump_stack_lvl+0xe8/0x150 [ 535.046431][ T63] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 535.046477][ T63] f2fs_write_end_bio+0x1211/0x16e0 [ 535.046538][ T63] __submit_merged_bio+0x258/0x6a0 [ 535.046574][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.046608][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.046650][ T63] __submit_merged_write_cond+0x3c9/0x4e0 [ 535.046703][ T63] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 535.046760][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.046803][ T63] f2fs_write_data_pages+0x2a27/0x36f0 [ 535.046844][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.046926][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.047086][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047142][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047172][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.047204][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047234][ T63] ? trace_hrtimer_start+0x82/0x200 [ 535.047283][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047333][ T63] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.047376][ T63] do_writepages+0x338/0x560 [ 535.047416][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047447][ T63] ? reacquire_held_locks+0x117/0x1a0 [ 535.047479][ T63] ? writeback_sb_inodes+0x450/0x1b00 [ 535.047523][ T63] __writeback_single_inode+0x136/0x1220 [ 535.047563][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047593][ T63] ? do_raw_spin_unlock+0xf5/0x200 [ 535.047637][ T63] writeback_sb_inodes+0x9de/0x1b00 [ 535.047671][ T63] ? __lock_acquire+0x747/0x2de0 [ 535.047708][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047750][ T63] ? do_raw_spin_unlock+0xf5/0x200 [ 535.047798][ T63] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 535.047895][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047925][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.047956][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.047986][ T63] ? queue_io+0x2d3/0x470 [ 535.048032][ T63] wb_writeback+0x41c/0xad0 [ 535.048071][ T63] ? queue_io+0x1f1/0x470 [ 535.048115][ T63] ? __pfx_wb_writeback+0x10/0x10 [ 535.048146][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.048208][ T63] wb_workfn+0x431/0x10f0 [ 535.048266][ T63] ? __pfx_wb_workfn+0x10/0x10 [ 535.048315][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048344][ T63] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.048394][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048423][ T63] ? lock_acquire+0x115/0x350 [ 535.048452][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048489][ T63] ? rcu_is_watching+0x16/0xb0 [ 535.048521][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048554][ T63] ? process_scheduled_works+0x97a/0x1630 [ 535.048591][ T63] process_scheduled_works+0xc3d/0x1630 [ 535.048627][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048704][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 535.048749][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048778][ T63] ? assign_work+0x3cf/0x5d0 [ 535.048823][ T63] worker_thread+0xa47/0xfb0 [ 535.048863][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048908][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.048938][ T63] ? __kthread_parkme+0x71/0x1f0 [ 535.048993][ T63] kthread+0x38b/0x480 [ 535.049027][ T63] ? __pfx_worker_thread+0x10/0x10 [ 535.049061][ T63] ? __pfx_kthread+0x10/0x10 [ 535.049091][ T63] ret_from_fork+0x514/0xb70 [ 535.049123][ T63] ? __pfx_ret_from_fork+0x10/0x10 [ 535.049148][ T63] ? srso_alias_return_thunk+0x5/0xfbef5 [ 535.049178][ T63] ? __switch_to+0xc89/0x1420 [ 535.049220][ T63] ? __pfx_kthread+0x10/0x10 [ 535.049249][ T63] ret_from_fork_asm+0x1a/0x30 [ 535.049314][ T63] [ 535.058313][ T63] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 535.207944][T16286] loop7: detected capacity change from 0 to 8192 [ 535.268485][T16286] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 536.254103][T16310] loop0: detected capacity change from 0 to 4096 [ 536.259298][T16310] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 536.347728][T16310] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 536.396104][T16316] loop7: detected capacity change from 0 to 512 [ 536.403713][T16310] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 536.424647][T16316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 536.424783][T16316] System zones: 1-12 [ 536.425109][T16316] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.3954: Directory hole found for htree index block 0 [ 536.425144][T16316] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 536.425972][T16316] EXT4-fs (loop7): Remounting filesystem read-only [ 536.426030][T16316] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 536.426132][T16316] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 536.428536][T16316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.434508][T16316] EXT4-fs (loop7): shut down requested (2) [ 536.547521][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.605973][T16320] netlink: 'syz.2.3953': attribute type 1 has an invalid length. [ 537.199420][T16334] loop2: detected capacity change from 0 to 256 [ 537.200504][T16334] exfat: Deprecated parameter 'utf8' [ 537.200584][T16334] exfat: Deprecated parameter 'namecase' [ 537.200612][T16334] exfat: Deprecated parameter 'utf8' [ 537.200673][T16334] exfat: Deprecated parameter 'namecase' [ 537.200755][T16334] exfat: Deprecated parameter 'namecase' [ 537.232981][T16334] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 537.296319][T16334] xt_hashlimit: size too large, truncated to 1048576 [ 537.783284][T16348] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3963'. [ 537.872404][T16350] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 537.872450][T16350] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 537.872494][T16350] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 537.934662][T16350] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 538.168694][T16357] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 538.168694][T16357] program syz.7.3967 not setting count and/or reply_len properly [ 538.427337][ T5734] infiniband s`z1: ib_query_port failed (-19) [ 538.637078][T16363] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 538.637124][T16363] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 538.637169][T16363] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 538.815938][T16363] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 538.971375][ T217] smbdirect: ib_dev[s`z1] removed [ 539.247988][T16350] siw: device registration error -19 [ 539.527424][T16361] loop2: detected capacity change from 0 to 32768 [ 539.536910][T16361] [ 539.536910][T16361] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 539.536910][T16361] [ 539.606121][ T31] audit: type=1800 audit(1790035987.770:175): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3971" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 539.738755][T16379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.922235][ T189] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 539.996329][T16398] loop7: detected capacity change from 0 to 8 [ 540.038871][T16398] SQUASHFS error: Failed to read block 0x62: -5 [ 540.039030][T16398] squashfs image failed sanity check [ 540.073966][ T13] [ 540.073966][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.073966][ T13] [ 540.073995][ T13] [ 540.073995][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.073995][ T13] [ 540.074197][ T5616] [ 540.074197][ T5616] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.074197][ T5616] [ 540.077315][ T189] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 540.115867][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.115920][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.153239][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 540.153273][ T189] usb 1-1: Product: syz [ 540.153291][ T189] usb 1-1: Manufacturer: syz [ 540.155816][ T118] [ 540.155816][ T118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.155816][ T118] [ 540.155883][ T5616] [ 540.155883][ T5616] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.155883][ T5616] [ 540.205069][ T189] navman 1-1:1.0: Interface 0 is not authorized for usage [ 540.205677][ T189] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 540.429319][ T189] usb 1-1: USB disconnect, device number 18 [ 540.562635][T16406] bond0: no command found in slaves file - use +ifname or -ifname [ 540.568045][T16405] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3988'. [ 541.854949][T16440] loop3: detected capacity change from 0 to 256 [ 541.901386][T16440] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 542.073450][T16444] loop0: detected capacity change from 0 to 512 [ 542.095036][T16442] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 542.095127][T16442] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 542.172620][T16444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.577238][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.689403][T16462] ªªªªªª: renamed from vlan0 (while UP) [ 542.902745][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4017'. [ 543.307371][T16486] loop7: detected capacity change from 0 to 2048 [ 543.378124][T16489] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 543.418886][T16486] syz.7.4023: attempt to access beyond end of device [ 543.418886][T16486] loop7: rw=8388608, sector=2198922592328, nr_sectors = 2 limit=2048 [ 543.421271][T16486] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 543.479199][ T5773] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 543.535164][T16489] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 543.535194][T16489] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 543.536407][T16489] Remounting filesystem read-only [ 543.632424][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 543.633156][ T5773] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.634366][ T5773] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 543.634402][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 543.634432][ T5773] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.634460][ T5773] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.634508][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.729562][ T189] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 543.785609][T16496] loop7: detected capacity change from 0 to 512 [ 543.812775][T16496] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.4027: inode has both inline data and extents flags [ 543.812813][T16496] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 543.813198][T16496] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.4027: couldn't read orphan inode 15 (err -117) [ 543.813232][T16496] loop7: lost filesystem error report for type 5 error -117 [ 543.816016][T16496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.881805][ T5773] usb 4-1: GET_CAPABILITIES returned 0 [ 543.881860][ T5773] usbtmc 4-1:16.0: can't read capabilities [ 543.906816][ T189] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 543.907909][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.907942][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.907968][ T189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.908046][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.964386][ T189] usb 3-1: config 0 descriptor?? [ 544.102375][T16500] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 544.125769][ T5734] usb 4-1: USB disconnect, device number 20 [ 544.205203][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.382255][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.386520][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.433630][ T189] ortek 0003:1223:3F07.001B: Fixing up logical maximum in report descriptor (Skycable) [ 544.434123][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434154][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434180][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x1 [ 544.434205][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434230][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434255][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434280][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434304][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434330][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434355][ T189] ortek 0003:1223:3F07.001B: unknown main item tag 0x0 [ 544.434423][ T189] ortek 0003:1223:3F07.001B: unexpected long global item [ 544.435368][ T189] ortek 0003:1223:3F07.001B: probe with driver ortek failed with error -22 [ 544.551439][T16510] loop0: detected capacity change from 0 to 2048 [ 544.578268][T16510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.644116][ T189] usb 3-1: USB disconnect, device number 18 [ 546.035563][ T13] IPVS: starting estimator thread 0... [ 546.129163][T16549] IPVS: using max 25 ests per chain, 60000 per kthread [ 546.849986][T16587] netlink: Only one type of NAT may be specified [ 546.850023][T16587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.847675][T16609] netlink: 'syz.3.4076': attribute type 4 has an invalid length. [ 547.969309][T16611] block nbd1: server does not support multiple connections per device. [ 548.013397][T16611] block nbd1: shutting down sockets [ 548.749883][T16635] loop2: detected capacity change from 0 to 1024 [ 548.795530][T16635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 548.795652][T16635] ext4 filesystem being mounted at /726/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.986347][T16645] program syz.8.4091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.077173][T16624] loop3: detected capacity change from 0 to 32768 [ 549.095950][T16624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4083 (16624) [ 549.102970][T16635] EXT4-fs error (device loop2): ext4_readdir:280: inode #12: block 80: comm syz.2.4088: path /: bad entry in directory: directory entry overrun - offset=296, inode=0, rec_len=1024, size=1024 fake=0 [ 549.154715][T16624] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.154755][T16624] BTRFS info (device loop3): using sha256 checksum algorithm [ 549.176968][T16641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 549.336458][T16624] BTRFS info (device loop3): enabling ssd optimizations [ 549.336489][T16624] BTRFS info (device loop3): turning on async discard [ 549.336507][T16624] BTRFS info (device loop3): enabling free space tree [ 549.499240][T16640] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 549.508213][ T5616] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /726/file0: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 549.529837][T16667] kAFS: bad VL server IP address [ 549.555787][ T5616] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /726/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 549.565830][ T5616] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 549.624144][ T5630] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.625813][T16670] loop7: detected capacity change from 0 to 512 [ 549.693319][ T5616] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /726/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 549.697126][ T5616] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 549.784561][T16670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.784668][T16670] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.798763][ T5616] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /726/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 549.803674][ T5616] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 549.813775][ T5616] EXT4-fs error (device loop2): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /726/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 549.885020][T16674] bond0: entered promiscuous mode [ 549.885045][T16674] bond_slave_0: entered promiscuous mode [ 549.885263][T16674] bond_slave_1: entered promiscuous mode [ 549.987016][T16674] ipvlan1: entered promiscuous mode [ 550.013365][T16674] ipvlan1: left promiscuous mode [ 550.096869][T16674] bond0: left promiscuous mode [ 550.096899][T16674] bond_slave_0: left promiscuous mode [ 550.100007][T16674] bond_slave_1: left promiscuous mode [ 550.110122][T10171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.500014][T16687] loop0: detected capacity change from 0 to 512 [ 550.543918][T16687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.544028][T16687] ext4 filesystem being mounted at /718/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.932879][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.200101][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.266548][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.413635][T16696] macvlan0: left promiscuous mode [ 551.889342][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 551.891559][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 552.106569][T11299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 552.249068][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 552.402943][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 552.403980][ T10] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 552.408050][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 552.408095][ T10] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.408126][ T10] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 552.408157][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 552.408195][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.484269][ T10] usb 9-1: config 0 descriptor?? [ 552.821063][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.911487][ T10] bigben 0003:146B:0902.001C: unexpected rdesc, please submit for review [ 552.913391][ T10] bigben 0003:146B:0902.001C: missing HID_OUTPUT_REPORT 0 [ 552.913417][ T10] bigben 0003:146B:0902.001C: no output report found [ 552.949896][ T10] bigben 0003:146B:0902.001C: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.8-1/input0 [ 553.131577][ T5742] usb 9-1: USB disconnect, device number 9 [ 553.235736][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.269928][T16729] fido_id[16729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 553.349370][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 553.427183][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 553.452258][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.456116][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.458613][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.481611][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.500788][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 553.533201][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.533230][ T10] usb 4-1: Product: syz [ 553.533247][ T10] usb 4-1: Manufacturer: syz [ 553.533263][ T10] usb 4-1: SerialNumber: syz [ 553.620713][ T10] usb 4-1: config 0 descriptor?? [ 553.651884][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 553.663349][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 553.674931][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 553.684162][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 553.685207][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 553.685945][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.790563][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.080071][T16751] loop0: detected capacity change from 0 to 4096 [ 554.083645][T16751] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.113133][T16751] EXT4-fs (loop0): Test dummy encryption mode enabled [ 554.146479][T16751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.163738][ T10] gspca_sunplus: reg_r err -110 [ 554.294764][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.398487][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.546435][T16767] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4133'. [ 554.613893][ T10] usb 4-1: USB disconnect, device number 21 [ 555.331127][T16740] lo speed is unknown, defaulting to 1000 [ 555.421473][T16788] loop0: detected capacity change from 0 to 4096 [ 555.530426][T16793] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 555.589092][ T5623] Bluetooth: hci0: command tx timeout [ 555.740524][ T5623] Bluetooth: hci4: command tx timeout [ 555.748073][ T13] lo: left allmulticast mode [ 555.748327][ T13] pimreg3: left allmulticast mode [ 556.197705][T16810] loop8: detected capacity change from 0 to 1024 [ 556.238295][T16810] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 556.255114][T16810] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 556.266229][T16810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.421692][T16810] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 556.495782][T12199] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.905511][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.926323][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.932101][ T13] bond0 (unregistering): Released all slaves [ 557.218637][T16836] comedi comedi3: dt2817: I/O base address or length out of range [ 557.230513][T16742] lo speed is unknown, defaulting to 1000 [ 557.352284][ T13] IPVS: stopping master sync thread 8120 ... [ 557.587047][T16843] loop3: detected capacity change from 0 to 512 [ 557.660670][ T5623] Bluetooth: hci0: command tx timeout [ 557.681636][T16843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.681755][T16843] ext4 filesystem being mounted at /711/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.742604][T16843] EXT4-fs (loop3): shut down requested (2) [ 557.783957][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 557.819533][ T5623] Bluetooth: hci4: command tx timeout [ 557.847247][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.081528][T16857] loop3: detected capacity change from 0 to 128 [ 558.097000][T16857] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 558.306654][T16859] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4161'. [ 558.306737][T16859] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4161'. [ 558.340143][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 558.475897][T16845] loop8: detected capacity change from 0 to 32768 [ 558.732640][T16845] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 558.798692][T16874] bond0: entered promiscuous mode [ 558.867925][T16845] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 558.875145][T16874] ipvlan1: entered promiscuous mode [ 558.892684][T16874] ipvlan1: left promiscuous mode [ 558.902364][T16874] bond0: left promiscuous mode [ 558.937507][T16845] XFS (loop8): Starting recovery (logdev: internal) [ 559.067790][T16845] XFS (loop8): Ending recovery (logdev: internal) [ 559.070061][ T13] hsr_slave_0: left promiscuous mode [ 559.083340][ T13] hsr_slave_1: left promiscuous mode [ 559.087889][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.087916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.104938][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.104965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.198638][T16845] XFS (loop8): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 559.198702][T16845] XFS (loop8): Unmount and run xfs_repair [ 559.273874][ T13] veth1_macvtap: left promiscuous mode [ 559.273912][ T13] veth0_macvtap: left promiscuous mode [ 559.274154][ T13] veth1_vlan: left promiscuous mode [ 559.274216][ T13] veth0_vlan: left promiscuous mode [ 559.354433][T12199] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 559.434694][T16898] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 559.543955][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'. [ 559.696579][T12199] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 559.741606][ T5623] Bluetooth: hci0: command tx timeout [ 559.899523][ T5623] Bluetooth: hci4: command tx timeout [ 560.475250][T16922] loop0: detected capacity change from 0 to 2048 [ 560.578398][T16922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.578491][T16922] ext4 filesystem being mounted at /743/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 560.781070][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.817792][ T13] team0 (unregistering): Port device team_slave_1 removed [ 560.835889][ T13] team0 (unregistering): Port device team_slave_0 removed [ 561.168400][T16936] jffs2: notice: (16936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 561.253660][T16886] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 561.470683][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 561.588552][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4188'. [ 561.758084][T16955] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4191'. [ 561.819703][ T5623] Bluetooth: hci0: command tx timeout [ 561.978997][ T5623] Bluetooth: hci4: command tx timeout [ 562.209485][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.209601][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.209784][T16740] bridge_slave_0: entered allmulticast mode [ 562.212198][T16740] bridge_slave_0: entered promiscuous mode [ 562.262559][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.262738][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.262911][T16740] bridge_slave_1: entered allmulticast mode [ 562.277086][T16740] bridge_slave_1: entered promiscuous mode [ 562.322732][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.322797][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.584758][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.627944][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.755714][ T13] IPVS: stop unused estimator thread 0... [ 562.862707][ T31] audit: type=1400 audit(1790036011.030:176): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=16990 comm="syz.8.4201" name="p" offset=92 [ 562.971853][T16740] team0: Port device team_slave_0 added [ 562.997796][T16740] team0: Port device team_slave_1 added [ 563.319626][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.324464][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.645469][ T5734] lo speed is unknown, defaulting to 1000 [ 563.648458][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.648478][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.648521][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.716009][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.716031][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.716063][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.785842][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 563.979978][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.980092][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.980218][T16742] bridge_slave_0: entered allmulticast mode [ 563.983351][T16742] bridge_slave_0: entered promiscuous mode [ 563.995910][T16740] hsr_slave_0: entered promiscuous mode [ 563.997116][T16740] hsr_slave_1: entered promiscuous mode [ 563.998089][T16740] debugfs: 'hsr0' already exists in 'hsr' [ 563.998111][T16740] Cannot create hsr debugfs directory [ 564.000729][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.000927][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.002029][T16742] bridge_slave_1: entered allmulticast mode [ 564.004302][T16742] bridge_slave_1: entered promiscuous mode [ 564.204035][T16742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.246763][T16742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.402439][T17030] loop8: detected capacity change from 0 to 40427 [ 564.404228][T17030] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 564.404274][T17030] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 564.526858][T16742] team0: Port device team_slave_0 added [ 564.537982][T16742] team0: Port device team_slave_1 added [ 564.545534][T17030] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 564.608836][T17030] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 564.608870][T17030] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 564.816573][T16742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.816597][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.816628][T16742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.880217][T12199] syz-executor: attempt to access beyond end of device [ 564.880217][T12199] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 564.886500][T12199] CPU: 0 UID: 0 PID: 12199 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 564.886540][T12199] Tainted: [L]=SOFTLOCKUP [ 564.886550][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 564.886566][T12199] Call Trace: [ 564.886576][T12199] [ 564.886588][T12199] dump_stack_lvl+0xe8/0x150 [ 564.886631][T12199] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 564.886676][T12199] f2fs_write_end_bio+0x1211/0x16e0 [ 564.886708][T12199] ? blkg_put+0x22/0x240 [ 564.886762][T12199] __submit_merged_bio+0x258/0x6a0 [ 564.886798][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.886830][T12199] ? rcu_is_watching+0x16/0xb0 [ 564.886872][T12199] __submit_merged_write_cond+0x3c9/0x4e0 [ 564.886921][T12199] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 564.886974][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887015][T12199] f2fs_write_data_pages+0x2a27/0x36f0 [ 564.887056][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887137][T12199] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 564.887176][T12199] ? is_bpf_text_address+0x26/0x2b0 [ 564.887224][T12199] ? arch_stack_walk+0xfb/0x150 [ 564.887289][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887319][T12199] ? add_lock_to_list+0xc7/0x100 [ 564.887355][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887385][T12199] ? __lock_acquire+0x1511/0x2de0 [ 564.887443][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887485][T12199] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.887532][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887567][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887597][T12199] ? do_raw_spin_unlock+0xf5/0x200 [ 564.887634][T12199] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 564.887678][T12199] do_writepages+0x338/0x560 [ 564.887707][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887740][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887775][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887805][T12199] ? do_raw_spin_unlock+0xf5/0x200 [ 564.887847][T12199] filemap_fdatawrite+0x1e9/0x2f0 [ 564.887880][T12199] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 564.887952][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.887986][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.888022][T12199] ? do_raw_spin_unlock+0xf5/0x200 [ 564.888065][T12199] f2fs_sync_dirty_inodes+0x30e/0x830 [ 564.888111][T12199] f2fs_write_checkpoint+0xa3d/0x2710 [ 564.888143][T12199] ? __lock_acquire+0x747/0x2de0 [ 564.888207][T12199] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 564.888234][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.888329][T12199] kill_f2fs_super+0x2dd/0x700 [ 564.888368][T12199] ? __pfx_kill_f2fs_super+0x10/0x10 [ 564.888409][T12199] ? call_rcu+0x64d/0x8b0 [ 564.888440][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.888470][T12199] ? lockdep_hardirqs_on+0x7b/0x110 [ 564.888502][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.888548][T12199] deactivate_locked_super+0xbc/0x110 [ 564.888588][T12199] cleanup_mnt+0x3d3/0x460 [ 564.888620][T12199] task_work_run+0x1d9/0x270 [ 564.888650][T12199] ? __pfx_task_work_run+0x10/0x10 [ 564.888685][T12199] exit_to_user_mode_loop+0x204/0x770 [ 564.888713][T12199] ? srso_alias_return_thunk+0x5/0xfbef5 [ 564.888743][T12199] ? rcu_is_watching+0x16/0xb0 [ 564.888780][T12199] do_syscall_64+0x328/0x520 [ 564.888811][T12199] ? trace_irq_disable+0x3b/0x140 [ 564.888839][T12199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.888873][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.888899][T12199] RIP: 0033:0x7f094499f397 [ 564.888924][T12199] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 564.888946][T12199] RSP: 002b:00007ffd0410aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 564.888973][T12199] RAX: 0000000000000000 RBX: 00007f0944a344bb RCX: 00007f094499f397 [ 564.888992][T12199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0410ab10 [ 564.889009][T12199] RBP: 00007ffd0410ab10 R08: 00007ffd0410bb10 R09: 00000000ffffffff [ 564.889028][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0410bba0 [ 564.889045][T12199] R13: 00007f0944a344bb R14: 0000000000089d97 R15: 00007ffd0410bbe0 [ 564.889087][T12199] [ 564.958646][T16742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.958668][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.958699][T16742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.020206][T12199] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 565.555500][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4224'. [ 565.960659][T16742] hsr_slave_0: entered promiscuous mode [ 565.963404][T16742] hsr_slave_1: entered promiscuous mode [ 565.964315][T16742] debugfs: 'hsr0' already exists in 'hsr' [ 565.964338][T16742] Cannot create hsr debugfs directory [ 565.969501][T17070] netlink: 'syz.3.4227': attribute type 12 has an invalid length. [ 565.969523][T17070] netlink: 'syz.3.4227': attribute type 29 has an invalid length. [ 565.969541][T17070] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4227'. [ 565.969562][T17070] netlink: 'syz.3.4227': attribute type 3 has an invalid length. [ 565.969578][T17070] netlink: 'syz.3.4227': attribute type 2 has an invalid length. [ 565.969673][T17070] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4227'. [ 566.684900][T16740] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.811096][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 567.335640][T17110] loop3: detected capacity change from 0 to 2048 [ 567.384246][T17112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 567.541254][T17095] loop0: detected capacity change from 0 to 32768 [ 567.961538][T16740] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.157864][T17117] loop3: detected capacity change from 0 to 2048 [ 568.178416][T17117] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 568.179355][T17117] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 568.191707][T17117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.474385][T16740] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.648840][T17136] sit0: entered promiscuous mode [ 568.671464][T17136] netlink: 'syz.1.4247': attribute type 1 has an invalid length. [ 568.671490][T17136] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4247'. [ 568.777239][T16740] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.883491][T17145] loop8: detected capacity change from 0 to 2048 [ 568.896299][T17145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 569.201755][ T31] audit: type=1800 audit(1790036017.370:177): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4251" name="file1" dev="loop8" ino=1313 res=0 errno=0 [ 569.606649][T16740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.645507][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.646941][T16740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.668041][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.714000][T17165] bond0: entered promiscuous mode [ 569.714039][T17165] bond_slave_0: entered promiscuous mode [ 569.719449][T17165] bond_slave_1: entered promiscuous mode [ 569.746300][T17165] ipvlan1: entered promiscuous mode [ 569.751745][T17165] ipvlan1: left promiscuous mode [ 569.754912][T17165] bond0: left promiscuous mode [ 569.754934][T17165] bond_slave_0: left promiscuous mode [ 569.755238][T17165] bond_slave_1: left promiscuous mode [ 569.784821][T16740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.802220][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.808474][T16740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.850925][T16740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.449362][T16742] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 570.463623][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.469268][T16742] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 570.514810][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.540484][T16742] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 570.554251][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.561060][T16742] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 570.595111][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.883823][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.967816][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.991835][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.991948][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.043763][T16742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.046194][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.046282][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.218162][T16742] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.287115][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.287228][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.436229][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.436352][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.057951][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4280'. [ 572.074666][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4280'. [ 572.852302][ T31] audit: type=1400 audit(1790036021.020:178): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=17261 comm="syz.3.4288" name="p" offset=48 [ 573.403935][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.166759][ T31] audit: type=1326 audit(1790036022.330:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.0.4295" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41cbd9e159 code=0x0 [ 574.216028][T16742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.501081][T17304] xt_hashlimit: size too large, truncated to 1048576 [ 574.610078][T17305] xt_hashlimit: size too large, truncated to 1048576 [ 574.859647][T16740] veth0_vlan: entered promiscuous mode [ 574.890319][T16740] veth1_vlan: entered promiscuous mode [ 575.138657][T17322] netlink: 'syz.8.4304': attribute type 2 has an invalid length. [ 575.146894][T16742] veth0_vlan: entered promiscuous mode [ 575.204380][T16742] veth1_vlan: entered promiscuous mode [ 575.233385][T16740] veth0_macvtap: entered promiscuous mode [ 575.287821][T16740] veth1_macvtap: entered promiscuous mode [ 575.439974][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.458220][T17323] loop0: detected capacity change from 0 to 4096 [ 575.462337][T16742] veth0_macvtap: entered promiscuous mode [ 575.468957][T17323] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 575.483688][T16742] veth1_macvtap: entered promiscuous mode [ 575.551636][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.566349][T17323] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 575.578814][T17323] ntfs3(loop0): Failed to load $Extend (-22). [ 575.578846][T17323] ntfs3(loop0): Failed to initialize $Extend. [ 575.695061][T16742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.781685][T16742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.789607][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.790329][ T217] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.790377][ T217] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.790420][ T217] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.083563][ T1488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.119431][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.142553][ T1488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.144843][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.239913][T17351] loop9: detected capacity change from 0 to 524287999 [ 576.457946][T17357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4318'. [ 576.470549][ T5734] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 576.595202][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.595225][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.636069][ T5734] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 576.646245][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.646276][ T5734] usb 9-1: Product: syz [ 576.646294][ T5734] usb 9-1: Manufacturer: syz [ 576.646312][ T5734] usb 9-1: SerialNumber: syz [ 576.887633][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.887661][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.044779][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.044869][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.082071][ T5734] rtl8150 9-1:1.0: couldn't reset the device [ 577.082359][ T5734] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 577.187020][ T5734] usb 9-1: USB disconnect, device number 10 [ 577.222286][ T5623] Bluetooth: hci3: ACL packet too small [ 577.469952][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.469978][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.004808][T17385] loop8: detected capacity change from 0 to 256 [ 578.088529][T17388] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 578.088581][T17388] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 578.088628][T17388] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 578.128150][T17385] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 578.242089][T17388] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 578.531577][T17392] loop3: detected capacity change from 0 to 32768 [ 578.583347][T17392] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 578.583374][T17392] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 578.620409][T17392] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 578.626002][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 578.626032][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 578.668474][T17348] infiniband s`z1: ib_query_port failed (-19) [ 578.713412][T17404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4332'. [ 578.866539][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 240ms [ 578.866756][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 578.866811][T17392] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 578.987661][ T1488] smbdirect: ib_dev[s`z1] removed [ 578.993754][T17392] gfs2: fsid=syz:syz.0: found 1 quota changes [ 579.068368][T17409] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 579.068414][T17409] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 579.068449][T17409] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:17409 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 579.068506][T17409] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 579.068543][T17409] CPU: 0 UID: 0 PID: 17409 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 579.068575][T17409] Tainted: [L]=SOFTLOCKUP [ 579.068585][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 579.068601][T17409] Call Trace: [ 579.068611][T17409] [ 579.068623][T17409] dump_stack_lvl+0xe8/0x150 [ 579.068662][T17409] gfs2_withdraw+0xc3/0x1b0 [ 579.068693][T17409] inode_go_instantiate+0xbc1/0x12b0 [ 579.068721][T17409] ? queue_delayed_work_on+0x12f/0x1e0 [ 579.068758][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.068793][T17409] ? preempt_schedule_common+0x7f/0xd0 [ 579.068824][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.068856][T17409] ? __pfx_inode_go_instantiate+0x10/0x10 [ 579.068893][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.068932][T17409] gfs2_instantiate+0x168/0x220 [ 579.068970][T17409] gfs2_glock_wait+0x1d4/0x2a0 [ 579.069006][T17409] do_sync+0x49c/0xbb0 [ 579.069049][T17409] ? gfs2_quota_sync+0x353/0x450 [ 579.069096][T17409] ? __pfx_do_sync+0x10/0x10 [ 579.069128][T17409] ? do_raw_spin_lock+0x12b/0x2f0 [ 579.069177][T17409] ? gfs2_quota_sync+0x353/0x450 [ 579.069215][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.069250][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.069279][T17409] ? do_raw_spin_unlock+0xf5/0x200 [ 579.069322][T17409] gfs2_quota_sync+0x353/0x450 [ 579.069373][T17409] gfs2_quotad+0x2ab/0x6f0 [ 579.069430][T17409] ? __pfx_gfs2_quotad+0x10/0x10 [ 579.069467][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.069501][T17409] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 579.069531][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.069560][T17409] ? __kthread_parkme+0x71/0x1f0 [ 579.069601][T17409] ? __kthread_parkme+0x199/0x1f0 [ 579.069646][T17409] kthread+0x38b/0x480 [ 579.069673][T17409] ? __pfx_gfs2_quotad+0x10/0x10 [ 579.069711][T17409] ? __pfx_kthread+0x10/0x10 [ 579.069738][T17409] ret_from_fork+0x514/0xb70 [ 579.069769][T17409] ? __pfx_ret_from_fork+0x10/0x10 [ 579.069793][T17409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.069822][T17409] ? __switch_to+0xc89/0x1420 [ 579.069863][T17409] ? __pfx_kthread+0x10/0x10 [ 579.069892][T17409] ret_from_fork_asm+0x1a/0x30 [ 579.069951][T17409] [ 579.080456][T17409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 579.087109][ T10] gfs2: fsid=syz:syz.0: file system withdrawn [ 579.232408][T17388] siw: device registration error -19 [ 579.397251][T17406] batman_adv: batadv0: Adding interface: vlan2 [ 579.397273][T17406] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.397305][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.397324][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.397338][T17406] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 580.113371][T17437] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.154722][T17437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 580.154747][T17437] IPv6: NLM_F_CREATE should be set when creating new route [ 580.154917][T17437] IPv6: NLM_F_CREATE should be set when creating new route [ 580.154952][T17437] IPv6: NLM_F_CREATE should be set when creating new route [ 580.177900][T17437] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4343'. [ 580.494126][T17444] loop9: detected capacity change from 0 to 512 [ 580.729867][ T5749] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 580.879348][ T5749] usb 9-1: Using ep0 maxpacket: 32 [ 580.883172][ T5749] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 580.887467][ T5749] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.887497][ T5749] usb 9-1: config 0 has no interface number 0 [ 580.887540][ T5749] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.887571][ T5749] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.887614][ T5749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.980428][ T5749] usb 9-1: config 0 descriptor?? [ 581.644324][ T5749] uclogic 0003:28BD:0094.001D: pen parameters not found [ 581.644356][ T5749] uclogic 0003:28BD:0094.001D: interface is invalid, ignoring [ 581.684064][ T5749] usb 9-1: USB disconnect, device number 11 [ 583.120465][T17537] loop7: detected capacity change from 0 to 2048 [ 583.147690][T17537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.243375][ T31] audit: type=1800 audit(1790036031.410:180): pid=17545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4381" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 583.401203][T17550] loop0: detected capacity change from 0 to 128 [ 583.444328][T17550] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 583.444391][T17550] hpfs: filesystem error: improperly stopped [ 583.444410][T17550] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 583.444429][T17550] hpfs: You really don't want any checks? You are crazy... [ 583.444793][T17550] hpfs: hpfs_map_sector(): read error [ 583.444807][T17550] hpfs: code page support is disabled [ 583.444902][T17550] hpfs: hpfs_map_4sectors(): unaligned read [ 583.444978][T17550] hpfs: hpfs_map_4sectors(): unaligned read [ 583.444991][T17550] hpfs: filesystem error: unable to find root dir [ 584.134973][T17526] loop3: detected capacity change from 0 to 32768 [ 584.150050][T17526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4376 (17526) [ 584.245097][T17526] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 584.245138][T17526] BTRFS info (device loop3): using blake2b checksum algorithm [ 584.284689][T17568] loop7: detected capacity change from 0 to 512 [ 584.332205][T17572] loop8: detected capacity change from 0 to 512 [ 584.333320][T17572] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.364440][T17568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.364550][T17568] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.467354][T17572] EXT4-fs (loop8): orphan cleanup on readonly fs [ 584.467384][T17572] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 584.512173][T17572] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4394: attempt to clear invalid blocks 2 len 1 [ 584.512217][T17572] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 584.518961][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 584.518989][ C0] EXT4-fs (loop8): initial error at time 1790036032: ext4_clear_blocks:876: inode 13 [ 584.519027][ C0] EXT4-fs (loop8): last error at time 1790036032: ext4_clear_blocks:876: inode 13 [ 584.552713][T17526] BTRFS info (device loop3): enabling ssd optimizations [ 584.552743][T17526] BTRFS info (device loop3): turning on async discard [ 584.552763][T17526] BTRFS info (device loop3): enabling free space tree [ 584.552784][T17526] BTRFS info (device loop3): use zstd compression, level 3 [ 584.584463][T17572] EXT4-fs (loop8): Remounting filesystem read-only [ 584.615192][T17572] EXT4-fs (loop8): 1 truncate cleaned up [ 584.637180][T17572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.654423][ T31] audit: type=1800 audit(1790036032.820:181): pid=17526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4376" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 584.717302][T17598] ima: policy update failed [ 584.717564][ T31] audit: type=1802 audit(1790036032.880:182): pid=17598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4396" res=0 errno=0 [ 584.720069][T17572] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 584.832000][T16740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.925725][T12199] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.194037][ T5630] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 585.722931][T17619] loop8: detected capacity change from 0 to 1024 [ 586.206791][T17619] hfsplus: xattr search failed [ 586.460160][T17644] ip_tables: iptables: counters copy to user failed while replacing table [ 586.484524][T17644] ip_tables: iptables: counters copy to user failed while replacing table [ 586.819302][T17649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4412'. [ 587.252394][T17659] loop3: detected capacity change from 0 to 512 [ 587.317249][T17659] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.4418: inode has both inline data and extents flags [ 587.317287][T17659] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.318962][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 587.318985][ C0] EXT4-fs (loop3): initial error at time 1790036291: ext4_orphan_get:1403: inode 15 [ 587.319022][ C0] EXT4-fs (loop3): last error at time 1790036291: ext4_orphan_get:1403: inode 15 [ 587.351532][T17659] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4418: couldn't read orphan inode 15 (err -117) [ 587.351571][T17659] loop3: lost filesystem error report for type 5 error -117 [ 587.373108][T17659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.438753][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4422'. [ 587.694782][T17659] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 587.779412][T17676] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 587.779439][T17676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 587.800882][T17676] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 587.800916][T17676] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 587.803393][T17676] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 587.946014][ T31] audit: type=1400 audit(1790036292.113:183): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=17678 comm="syz.8.4426" name="p" offset=58 [ 588.081676][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.352341][T17692] netlink: 'syz.3.4431': attribute type 11 has an invalid length. [ 589.947868][T17753] kernel read not supported for file /file0 (pid: 17753 comm: syz.8.4459) [ 589.949290][ T31] audit: type=1800 audit(1790036294.113:184): pid=17753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4459" name="file0" dev="mqueue" ino=46147 res=0 errno=0 [ 589.999563][ T5742] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 590.151454][ T5742] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 590.152827][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.152855][ T5742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.154065][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 590.154094][ T5742] usb 1-1: SerialNumber: syz [ 590.254963][T17765] loop9: detected capacity change from 0 to 8 [ 590.369122][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 590.452918][ T5742] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 590.453904][ T5742] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage [ 590.504715][ T5742] usb 1-1: USB disconnect, device number 19 [ 590.570756][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4466'. [ 590.992520][T17787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.125602][T17785] loop3: detected capacity change from 0 to 2048 [ 591.169479][T17785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.303953][ T31] audit: type=1800 audit(1790036295.473:185): pid=17785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4475" name="file1" dev="loop3" ino=1313 res=0 errno=0 [ 593.317044][T17848] loop7: detected capacity change from 0 to 1024 [ 593.365307][T17848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.670288][T16740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.881707][T17861] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4508'. [ 594.277225][T17875] loop7: detected capacity change from 0 to 64 [ 594.420719][T17878] loop9: detected capacity change from 0 to 2048 [ 594.501397][T17878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 594.591576][T17878] CacheFiles: Failed to register: -95 [ 595.113199][T17894] loop0: detected capacity change from 0 to 2048 [ 595.230250][T17902] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 595.325117][ T5742] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 595.642417][T17913] loop9: detected capacity change from 0 to 2048 [ 595.675222][T17902] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 595.675259][T17902] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 595.683457][T17902] Remounting filesystem read-only [ 595.728705][ T5617] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 595.775166][T17913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.835080][T17348] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 595.885626][ T31] audit: type=1800 audit(1790036556.053:186): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4528" name="file1" dev="loop9" ino=1313 res=0 errno=0 [ 596.009561][T17348] usb 9-1: Using ep0 maxpacket: 8 [ 596.013649][T17348] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 596.015373][T17348] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.015423][T17348] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 596.015453][T17348] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 596.015483][T17348] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 596.015510][T17348] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.044946][T17348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 596.044979][T17348] usb 9-1: Product: syz [ 596.044997][T17348] usb 9-1: Manufacturer: syz [ 596.045015][T17348] usb 9-1: SerialNumber: syz [ 596.078696][T17348] usb 9-1: config 0 descriptor?? [ 596.319549][T17348] radio-si470x 9-1:0.0: DeviceID=0xc800 ChipID=0x0000 [ 596.319588][T17348] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 596.525100][T17348] radio-si470x 9-1:0.0: software version 200, hardware version 0 [ 596.525133][T17348] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 596.525159][T17348] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 596.568777][ T5742] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 596.722731][T17348] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 596.722789][T17348] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 596.724521][T17348] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 596.724917][T17348] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 596.758532][ T5742] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 596.769145][T17348] usb 9-1: USB disconnect, device number 12 [ 596.791508][ T5742] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.791547][ T5742] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.791578][ T5742] usb 1-1: config 0 interface 0 has no altsetting 0 [ 596.791617][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.861852][ T5742] usb 1-1: config 0 descriptor?? [ 596.879665][ T5742] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 596.897167][ T5742] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 597.801326][T17959] loop3: detected capacity change from 0 to 4096 [ 597.830731][T17959] NILFS (loop3): invalid segment: Checksum error in segment payload [ 597.830764][T17959] NILFS (loop3): trying rollback from an earlier position [ 597.878726][T17959] NILFS (loop3): recovery complete [ 598.079287][T17968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.133174][T17959] NILFS (loop3): Segment number 281474976710665 to be freed is out of range [ 598.614587][T17951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.614618][T17951] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 598.889248][T17951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.889279][T17951] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 599.014854][T17986] Bluetooth: MGMT ver 1.23 [ 599.047397][T17989] loop3: detected capacity change from 0 to 128 [ 599.056095][T17989] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 599.356733][ T5749] usb 1-1: USB disconnect, device number 20 [ 599.540057][T17998] loop3: detected capacity change from 0 to 256 [ 599.574317][T17998] exfat: Deprecated parameter 'utf8' [ 599.655753][T17998] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 599.880602][T18004] loop8: detected capacity change from 0 to 164 [ 600.501534][T17951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.501563][T17951] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 601.431011][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4577'. [ 601.600460][T17951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 601.600488][T17951] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 601.792948][T17951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.792975][T17951] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 602.200980][ T5749] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 602.361926][ T5749] usb 9-1: Using ep0 maxpacket: 16 [ 602.365111][ T5749] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 602.367830][ T5749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.367865][ T5749] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.367892][ T5749] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 602.367939][ T5749] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.388356][ T5749] usb 9-1: config 0 descriptor?? [ 602.891385][ T5749] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 602.948521][T18080] loop9: detected capacity change from 0 to 16 [ 602.959770][T18080] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 603.091861][T17348] usb 9-1: USB disconnect, device number 13 [ 603.194432][T18082] fido_id[18082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 603.249506][T18085] loop7: detected capacity change from 0 to 256 [ 603.396515][T18044] loop3: detected capacity change from 0 to 32768 [ 603.413916][T18044] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4578 (18044) [ 603.444345][T18044] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 603.444382][T18044] BTRFS info (device loop3): using crc32c checksum algorithm [ 603.760555][T18044] BTRFS info (device loop3): setting nodatasum [ 603.760581][T18044] BTRFS info (device loop3): setting nodatacow [ 603.760598][T18044] BTRFS info (device loop3): enabling ssd optimizations [ 603.760614][T18044] BTRFS info (device loop3): turning on flush-on-commit [ 603.760630][T18044] BTRFS info (device loop3): turning on async discard [ 603.760645][T18044] BTRFS info (device loop3): enabling free space tree [ 603.816818][ T1488] IPVS: starting estimator thread 0... [ 603.921228][T18108] IPVS: using max 26 ests per chain, 62400 per kthread [ 604.153852][T18114] loop7: detected capacity change from 0 to 512 [ 604.326820][T18114] EXT4-fs (loop7): 1 orphan inode deleted [ 604.334803][T18114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.340132][T18114] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.351733][ T1488] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 604.351868][ T1488] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 1 [ 604.392823][T18114] EXT4-fs (loop7): shut down requested (2) [ 604.652743][ T5630] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 604.812696][T16740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.961804][T18138] loop0: detected capacity change from 0 to 256 [ 605.038578][T18138] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 605.089379][T18140] loop8: detected capacity change from 0 to 1024 [ 605.596927][T18156] loop7: detected capacity change from 0 to 128 [ 605.767729][T18156] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 605.772880][T18156] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.850480][T18156] overlayfs: upper fs needs to support d_type. [ 607.056218][T18191] jffs2: notice: (18191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 607.087178][T18191] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 607.265560][T16740] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.309168][T18176] loop8: detected capacity change from 0 to 32768 [ 607.405410][T18176] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 608.974193][T18206] loop9: detected capacity change from 0 to 32768 [ 609.034806][T12199] ocfs2: Unmounting device (7,8) on (node local) [ 609.133412][T18206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4622 (18206) [ 609.200807][T18206] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.200846][T18206] BTRFS info (device loop9): using sha256 checksum algorithm [ 609.510506][T18206] BTRFS info (device loop9): enabling ssd optimizations [ 609.510541][T18206] BTRFS info (device loop9): turning on async discard [ 609.510561][T18206] BTRFS info (device loop9): enabling free space tree [ 610.037863][T16742] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 610.916029][ T101] IPVS: starting estimator thread 0... [ 610.918399][T18227] loop0: detected capacity change from 0 to 32768 [ 611.001369][T18285] IPVS: using max 28 ests per chain, 67200 per kthread [ 611.126354][T18227] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 611.424308][T18227] XFS (loop0): Ending clean mount [ 611.573737][ T31] audit: type=1800 audit(1790036571.743:187): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4631" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 611.821575][ T5617] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 612.220706][ T5838] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 612.432904][T18316] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.489388][ T5838] usb 9-1: Using ep0 maxpacket: 16 [ 612.498374][ T5838] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 612.519025][ T5838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.519084][ T5838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 612.519111][ T5838] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.568330][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.568364][ T5838] usb 9-1: Product: syz [ 612.568382][ T5838] usb 9-1: Manufacturer: syz [ 612.568399][ T5838] usb 9-1: SerialNumber: syz [ 612.606096][ T5838] usb 9-1: config 0 descriptor?? [ 612.614187][ T5838] mcba_usb 9-1:0.0: Can't find endpoints [ 612.890422][T18312] loop9: detected capacity change from 0 to 32768 [ 612.897362][T18312] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4647 (18312) [ 612.912327][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.916734][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.965731][T18312] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 612.965776][T18312] BTRFS info (device loop9): using crc32c checksum algorithm [ 613.009718][T17348] usb 9-1: USB disconnect, device number 14 [ 613.012357][T18324] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 613.242082][T18312] BTRFS info (device loop9): setting nodatasum [ 613.242117][T18312] BTRFS info (device loop9): setting nodatacow [ 613.242136][T18312] BTRFS info (device loop9): enabling ssd optimizations [ 613.242157][T18312] BTRFS info (device loop9): turning on flush-on-commit [ 613.242176][T18312] BTRFS info (device loop9): turning on async discard [ 613.242195][T18312] BTRFS info (device loop9): enabling free space tree [ 613.616405][T18348] MTRR 2 not used [ 614.481659][T16742] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 614.724213][T18365] kAFS: bad VL server IP address [ 623.741367][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.741434][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.182245][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.182321][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.621334][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.621401][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 775.420126][ T32] INFO: task kworker/u8:3:50 blocked in I/O wait for more than 143 seconds. [ 775.420165][ T32] Tainted: G L syzkaller #0 [ 775.420180][ ** replaying previous printk message ** [ 775.420180][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.420192][ T32] task:kworker/u8:3 state:D stack:21480 pid:50 tgid:50 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 775.420275][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 775.420327][ T32] Call Trace: [ 775.420343][ T32] [ 775.420368][ T32] __schedule+0x17db/0x58f0 [ 775.420416][ T32] ? blk_mq_flush_plug_list+0x415/0x540 [ 775.420497][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 775.420555][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.420592][ T32] ? __blk_flush_plug+0x416/0x4d0 [ 775.420633][ T32] ? __pfx___schedule+0x10/0x10 [ 775.420679][ T32] ? schedule+0x90/0x2b0 [ 775.420716][ T32] schedule+0x164/0x2b0 [ 775.420752][ T32] io_schedule+0x7f/0xd0 [ 775.420786][ T32] rq_qos_wait+0x266/0x360 [ 775.420838][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 775.422557][ T32] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 775.422590][ T32] ? __pfx_rq_qos_wait+0x10/0x10 [ 775.422622][ T32] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 775.422655][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 775.422681][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.422709][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.422742][ T32] wbt_wait+0x326/0x550 [ 775.422769][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 775.422792][ T32] ? __pfx_dd_bio_merge+0x10/0x10 [ 775.422828][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 775.422850][ T32] __rq_qos_throttle+0x6b/0xb0 [ 775.422881][ T32] blk_mq_submit_bio+0x1512/0x2a70 [ 775.422913][ T32] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 775.422945][ T32] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 775.422969][ T32] ? blk_cgroup_bio_start+0x5d7/0x670 [ 775.423167][ T32] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 775.423201][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.423226][ T32] ? __submit_bio+0x7e/0x340 [ 775.423256][ T32] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 775.423290][ T32] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 775.423314][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.423342][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.423373][ T32] ? submit_bio_noacct+0x104f/0x1b80 [ 775.423403][ T32] ? blkcg_set_ioprio+0x16b/0x2a0 [ 775.423448][ T32] ext4_bio_write_folio+0xf90/0x1780 [ 775.423496][ T32] mpage_process_page_bufs+0x6bd/0x8a0 [ 775.423531][ T32] mpage_prepare_extent_to_map+0xf92/0x1890 [ 775.423568][ T32] ? process_scheduled_works+0xc3d/0x1630 [ 775.423647][ T32] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 775.423711][ T32] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 775.423746][ T32] ? ext4_init_io_end+0x29/0x130 [ 775.423774][ T32] ? kmem_cache_alloc_noprof+0x156/0x600 [ 775.423809][ T32] ? ext4_init_io_end+0x29/0x130 [ 775.423850][ T32] ext4_do_writepages+0xb8a/0x4770 [ 775.423886][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.423929][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.423956][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.424004][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 775.424032][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424058][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.424098][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424128][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424153][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.424187][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424213][ T32] ? lock_acquire+0x115/0x350 [ 775.424237][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424271][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424308][ T32] ext4_writepages+0x241/0x3b0 [ 775.424335][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 775.424375][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 775.424408][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 775.424432][ T32] do_writepages+0x338/0x560 [ 775.424457][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.424493][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.424518][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 775.424561][ T32] ? writeback_sb_inodes+0x450/0x1b00 [ 775.424596][ T32] __writeback_single_inode+0x136/0x1220 [ 775.425957][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426002][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 775.426048][ T32] writeback_sb_inodes+0x9de/0x1b00 [ 775.426117][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 775.426191][ T32] ? __pfx_down_read_trylock+0x10/0x10 [ 775.426240][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426276][ T32] __writeback_inodes_wb+0x114/0x240 [ 775.426323][ T32] wb_writeback+0x42f/0xad0 [ 775.426361][ T32] ? queue_io+0x1f1/0x470 [ 775.426403][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 775.426435][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.426506][ T32] wb_workfn+0xc92/0x10f0 [ 775.426558][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 775.426606][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426645][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426676][ T32] ? lock_acquire+0x115/0x350 [ 775.426704][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426811][ T32] ? rcu_is_watching+0x16/0xb0 [ 775.426843][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.426876][ T32] ? process_scheduled_works+0x97a/0x1630 [ 775.426912][ T32] process_scheduled_works+0xc3d/0x1630 [ 775.426948][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.427011][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 775.427053][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.427083][ T32] ? assign_work+0x3cf/0x5d0 [ 775.427124][ T32] worker_thread+0xa47/0xfb0 [ 775.427195][ T32] kthread+0x38b/0x480 [ 775.427222][ T32] ? __pfx_worker_thread+0x10/0x10 [ 775.427256][ T32] ? __pfx_kthread+0x10/0x10 [ 775.427285][ T32] ret_from_fork+0x514/0xb70 [ 775.427316][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 775.427341][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.427371][ T32] ? __switch_to+0xc89/0x1420 [ 775.427409][ T32] ? __pfx_kthread+0x10/0x10 [ 775.427438][ T32] ret_from_fork_asm+0x1a/0x30 [ 775.427509][ T32] [ 775.427630][ T32] INFO: task jbd2/sda1-8:4939 blocked in I/O wait for more than 143 seconds. [ 775.427650][ T32] Tainted: G L syzkaller #0 [ 775.427661][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.427671][ T32] task:jbd2/sda1-8 state:D stack:25136 pid:4939 tgid:4939 ppid:2 task_flags:0x240040 flags:0x00080000 [ 775.427729][ T32] Call Trace: [ 775.427737][ T32] [ 775.427749][ T32] __schedule+0x17db/0x58f0 [ 775.427785][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.427809][ T32] ? percpu_ref_put_many+0x18e/0x240 [ 775.427840][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.427874][ T32] ? __pfx___schedule+0x10/0x10 [ 775.427904][ T32] ? schedule+0x90/0x2b0 [ 775.427929][ T32] schedule+0x164/0x2b0 [ 775.427954][ T32] io_schedule+0x7f/0xd0 [ 775.427979][ T32] bit_wait_io+0x11/0xd0 [ 775.428006][ T32] __wait_on_bit+0xac/0x300 [ 775.428031][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.428058][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.428085][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.428109][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.428137][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.428163][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428188][ T32] ? __wait_on_buffer+0xe/0x80 [ 775.428215][ T32] jbd2_journal_commit_transaction+0x2f1d/0x5b70 [ 775.428236][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428259][ T32] ? trace_hrtimer_start+0x82/0x200 [ 775.428323][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 775.428353][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.428390][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428418][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428445][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428471][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 775.428502][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428526][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428548][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 775.428570][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428592][ T32] ? __timer_delete_sync+0x4a7/0x520 [ 775.428618][ T32] kjournald2+0x3bc/0x750 [ 775.428659][ T32] ? __pfx_kjournald2+0x10/0x10 [ 775.428682][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428706][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 775.428733][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.428756][ T32] ? __kthread_parkme+0x71/0x1f0 [ 775.428786][ T32] ? __kthread_parkme+0x199/0x1f0 [ 775.428981][ T32] kthread+0x38b/0x480 [ 775.429012][ T32] ? __pfx_kjournald2+0x10/0x10 [ 775.429044][ T32] ? __pfx_kthread+0x10/0x10 [ 775.429073][ T32] ret_from_fork+0x514/0xb70 [ 775.429102][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 775.429128][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.429157][ T32] ? __switch_to+0xc89/0x1420 [ 775.429197][ T32] ? __pfx_kthread+0x10/0x10 [ 775.429225][ T32] ret_from_fork_asm+0x1a/0x30 [ 775.429286][ T32] [ 775.429334][ T32] INFO: task syz-executor:5599 blocked in I/O wait for more than 143 seconds. [ 775.429356][ T32] Tainted: G L syzkaller #0 [ 775.429369][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.429381][ T32] task:syz-executor state:D stack:21816 pid:5599 tgid:5599 ppid:5598 task_flags:0x440100 flags:0x00080000 [ 775.429450][ T32] Call Trace: [ 775.429459][ T32] [ 775.429474][ T32] __schedule+0x17db/0x58f0 [ 775.429535][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.429563][ T32] ? lock_acquire+0x115/0x350 [ 775.429599][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.429638][ T32] ? __pfx___schedule+0x10/0x10 [ 775.429679][ T32] ? schedule+0x90/0x2b0 [ 775.429713][ T32] schedule+0x164/0x2b0 [ 775.429745][ T32] io_schedule+0x7f/0xd0 [ 775.429779][ T32] bit_wait_io+0x11/0xd0 [ 775.429813][ T32] __wait_on_bit+0xac/0x300 [ 775.429846][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.429883][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.429918][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.429951][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.429988][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.430024][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.430064][ T32] do_get_write_access+0x662/0x1070 [ 775.430127][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 775.430171][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 775.430219][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 775.430258][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 775.430296][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 775.430334][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.430373][ T32] ext4_reserve_inode_write+0x294/0x360 [ 775.430424][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 775.430470][ T32] ext4_dirty_inode+0xd0/0x110 [ 775.430518][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 775.430556][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 775.430595][ T32] file_update_time_flags+0x399/0x440 [ 775.430629][ T32] ext4_page_mkwrite+0x224/0x1140 [ 775.430689][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 775.430726][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.430766][ T32] do_page_mkwrite+0x147/0x310 [ 775.430800][ T32] do_wp_page+0x1a9c/0x4b80 [ 775.430858][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 775.430890][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.430934][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.430968][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.431013][ T32] handle_mm_fault+0x15d7/0x3750 [ 775.431063][ T32] ? handle_mm_fault+0xf1/0x3750 [ 775.431112][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 775.431145][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 775.431184][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 775.431234][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.431279][ T32] do_user_addr_fault+0xa4f/0x1340 [ 775.431316][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.431349][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.431378][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 775.431410][ T32] exc_page_fault+0x6a/0xc0 [ 775.431444][ T32] asm_exc_page_fault+0x26/0x30 [ 775.431471][ T32] RIP: 0033:0x7fadf8c701e3 [ 775.431501][ T32] RSP: 002b:00007ffc1f11ebd0 EFLAGS: 00010202 [ 775.431524][ T32] RAX: 00007fadf29ff678 RBX: 00007ffc1f11ed00 RCX: 0000000000000000 [ 775.431543][ T32] RDX: 00007fadf29ff674 RSI: 0000000000000008 RDI: 00007ffc1f11ed00 [ 775.431562][ T32] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 775.431578][ T32] R10: 00007ffc1f11ece0 R11: 0000000000000000 R12: 0000000000000000 [ 775.431596][ T32] R13: 0000000000000988 R14: fffffffffffff678 R15: 0000000000000000 [ 775.431636][ T32] [ 775.431773][ T32] INFO: task syz.8.4667:18360 blocked in I/O wait for more than 143 seconds. [ 775.431797][ T32] Tainted: G L syzkaller #0 [ 775.431812][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.431824][ T32] task:syz.8.4667 state:D stack:25608 pid:18360 tgid:18360 ppid:12199 task_flags:0x440040 flags:0x00080002 [ 775.431897][ T32] Call Trace: [ 775.431906][ T32] [ 775.431922][ T32] __schedule+0x17db/0x58f0 [ 775.431965][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.431995][ T32] ? lock_acquire+0x115/0x350 [ 775.432030][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.432070][ T32] ? __pfx___schedule+0x10/0x10 [ 775.432110][ T32] ? schedule+0x90/0x2b0 [ 775.432144][ T32] schedule+0x164/0x2b0 [ 775.432176][ T32] io_schedule+0x7f/0xd0 [ 775.432209][ T32] bit_wait_io+0x11/0xd0 [ 775.432243][ T32] __wait_on_bit+0xac/0x300 [ 775.432275][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.432312][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.432347][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.432379][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.432416][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.432502][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.432543][ T32] do_get_write_access+0x662/0x1070 [ 775.432605][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 775.432649][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 775.432698][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 775.432736][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 775.432775][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 775.432812][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.432852][ T32] ext4_reserve_inode_write+0x294/0x360 [ 775.432901][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 775.432947][ T32] ext4_dirty_inode+0xd0/0x110 [ 775.432986][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 775.433023][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 775.433061][ T32] file_update_time_flags+0x399/0x440 [ 775.433095][ T32] ext4_page_mkwrite+0x224/0x1140 [ 775.433146][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 775.433187][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 775.433239][ T32] do_page_mkwrite+0x147/0x310 [ 775.433273][ T32] do_pte_missing+0x757/0x34b0 [ 775.433309][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.433343][ T32] ? handle_mm_fault+0xf1/0x3750 [ 775.433384][ T32] handle_mm_fault+0x1a53/0x3750 [ 775.433433][ T32] ? handle_mm_fault+0xf1/0x3750 [ 775.433528][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 775.433562][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 775.433619][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.433663][ T32] do_user_addr_fault+0xa4f/0x1340 [ 775.433699][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.433731][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.433761][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 775.433792][ T32] exc_page_fault+0x6a/0xc0 [ 775.433827][ T32] asm_exc_page_fault+0x26/0x30 [ 775.433853][ T32] RIP: 0033:0x7f09448727a9 [ 775.433875][ T32] RSP: 002b:00007ffd0410b830 EFLAGS: 00010202 [ 775.433897][ T32] RAX: 0000001b2e420000 RBX: ffffffff89a75039 RCX: 0000001b2e41fff8 [ 775.433917][ T32] RDX: 0000001b2de24220 RSI: 0000000000000008 RDI: 00007f0945755720 [ 775.433934][ T32] RBP: 000000000000001a R08: 00007f0944c10000 R09: 00007f0944c12000 [ 775.433952][ T32] R10: 0000000089a7503d R11: 0000000000000002 R12: 00007f0944c26128 [ 775.433970][ T32] R13: 0000000000000019 R14: ffffffff89a753b3 R15: 00007f0945755720 [ 775.434001][ T32] ? ____sys_sendmsg+0x93/0x850 [ 775.434040][ T32] ? __copy_msghdr+0x309/0x590 [ 775.434089][ T32] [ 775.434128][ T32] INFO: task syz.0.4668:18366 blocked in I/O wait for more than 143 seconds. [ 775.434150][ T32] Tainted: G L syzkaller #0 [ 775.434164][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.434176][ T32] task:syz.0.4668 state:D stack:25608 pid:18366 tgid:18366 ppid:5617 task_flags:0x440040 flags:0x00080002 [ 775.434249][ T32] Call Trace: [ 775.434259][ T32] [ 775.434274][ T32] __schedule+0x17db/0x58f0 [ 775.434317][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.434353][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.434387][ T32] ? __pfx___schedule+0x10/0x10 [ 775.434428][ T32] ? schedule+0x90/0x2b0 [ 775.434461][ T32] schedule+0x164/0x2b0 [ 775.434499][ T32] io_schedule+0x7f/0xd0 [ 775.434532][ T32] bit_wait_io+0x11/0xd0 [ 775.434567][ T32] __wait_on_bit+0xac/0x300 [ 775.434598][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.434636][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.434670][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.434702][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.434739][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.434774][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.434815][ T32] do_get_write_access+0x662/0x1070 [ 775.434876][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 775.434920][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 775.434969][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 775.435008][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 775.435047][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 775.435084][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.435124][ T32] ext4_reserve_inode_write+0x294/0x360 [ 775.435173][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 775.435219][ T32] ext4_dirty_inode+0xd0/0x110 [ 775.435259][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 775.435297][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 775.435334][ T32] file_update_time_flags+0x399/0x440 [ 775.435368][ T32] ext4_page_mkwrite+0x224/0x1140 [ 775.435420][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 775.435461][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 775.435519][ T32] do_page_mkwrite+0x147/0x310 [ 775.435552][ T32] do_pte_missing+0x757/0x34b0 [ 775.435588][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.435622][ T32] ? handle_mm_fault+0xf1/0x3750 [ 775.435663][ T32] handle_mm_fault+0x1a53/0x3750 [ 775.435713][ T32] ? handle_mm_fault+0xf1/0x3750 [ 775.435798][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 775.435831][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 775.435886][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.435931][ T32] do_user_addr_fault+0xa4f/0x1340 [ 775.435967][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.436000][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.436031][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 775.436062][ T32] exc_page_fault+0x6a/0xc0 [ 775.436096][ T32] asm_exc_page_fault+0x26/0x30 [ 775.436122][ T32] RIP: 0033:0x7f41cbc727a9 [ 775.436145][ T32] RSP: 002b:00007ffe2ca59be0 EFLAGS: 00010202 [ 775.436167][ T32] RAX: 0000001b33c1d000 RBX: ffffffff863786f7 RCX: 0000001b33c1cff8 [ 775.436186][ T32] RDX: 0000001b3362421c RSI: 0000000000000008 RDI: 00007f41ccb55720 [ 775.436204][ T32] RBP: 000000000000006f R08: 00007f41cc010000 R09: 00007f41cc012000 [ 775.436222][ T32] R10: 00000000863786fb R11: 0000000000000003 R12: 00007f41cc026038 [ 775.436240][ T32] R13: 000000000000006e R14: ffffffff863787ae R15: 00007f41ccb55720 [ 775.436260][ T32] ? trace_rpm_return_int+0x3e/0x200 [ 775.436298][ T32] ? pm_runtime_force_resume+0x4e7/0x550 [ 775.436349][ T32] [ 775.436387][ T32] INFO: task syz.1.4670:18372 blocked in I/O wait for more than 143 seconds. [ 775.436410][ T32] Tainted: G L syzkaller #0 [ 775.436424][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.436436][ T32] task:syz.1.4670 state:D stack:26352 pid:18372 tgid:18372 ppid:5635 task_flags:0x440040 flags:0x00080002 [ 775.436515][ T32] Call Trace: [ 775.436524][ T32] [ 775.436540][ T32] __schedule+0x17db/0x58f0 [ 775.436594][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 775.436635][ T32] ? __pfx___schedule+0x10/0x10 [ 775.436676][ T32] ? schedule+0x90/0x2b0 [ 775.436709][ T32] schedule+0x164/0x2b0 [ 775.436742][ T32] io_schedule+0x7f/0xd0 [ 775.436775][ T32] bit_wait_io+0x11/0xd0 [ 775.436809][ T32] __wait_on_bit+0xac/0x300 [ 775.436840][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.436877][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.436912][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.436945][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.436982][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.437018][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.437058][ T32] do_get_write_access+0x662/0x1070 [ 775.437119][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 775.437163][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 775.437211][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 775.437253][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.437292][ T32] ext4_reserve_inode_write+0x294/0x360 [ 775.437341][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 775.437387][ T32] ext4_dirty_inode+0xd0/0x110 [ 775.437426][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 775.437463][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 775.437497][ T32] ? mnt_get_write_access+0x216/0x280 [ 775.437525][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 775.437561][ T32] touch_atime+0x568/0x670 [ 775.437586][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 775.437627][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 775.437669][ T32] mmap_region+0xe7e/0x2270 [ 775.437704][ T32] ? __page_table_check_zero+0x6c/0x430 [ 775.437750][ T32] ? __pfx_mmap_region+0x10/0x10 [ 775.437782][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.437812][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.437860][ T32] ? lock_acquire+0x115/0x350 [ 775.437896][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.437926][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.438003][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438053][ T32] ? mt_find+0x186/0x630 [ 775.438091][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438119][ T32] ? mt_find+0x5ff/0x630 [ 775.438156][ T32] ? mt_find+0x186/0x630 [ 775.438191][ T32] ? __pfx_mt_find+0x10/0x10 [ 775.438236][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438266][ T32] ? security_mmap_addr+0x71/0x240 [ 775.438295][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438322][ T32] ? shmem_mapping+0xd/0x50 [ 775.438346][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438373][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 775.438417][ T32] do_mmap+0xe0a/0x1300 [ 775.438448][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438496][ T32] ? __pfx_do_mmap+0x10/0x10 [ 775.438527][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438562][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438598][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 775.438624][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438653][ T32] ? down_write_killable+0x17e/0x240 [ 775.438694][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 775.438729][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.438768][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 775.438800][ T32] ? lock_acquire+0x115/0x350 [ 775.439327][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 775.439364][ T32] ? __fget_files+0x2a/0x420 [ 775.439404][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.439439][ T32] ? __fget_files+0x3a2/0x420 [ 775.439472][ T32] ? __fget_files+0x2a/0x420 [ 775.439519][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 775.439562][ T32] do_syscall_64+0x166/0x520 [ 775.439595][ T32] ? trace_irq_disable+0x3b/0x140 [ 775.439622][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.439654][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.439681][ T32] RIP: 0033:0x7f228579dec2 [ 775.439703][ T32] RSP: 002b:00007fffea5b7f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 775.439730][ T32] RAX: ffffffffffffffda RBX: 0000001b33764000 RCX: 00007f228579dec2 [ 775.439750][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33764000 [ 775.439765][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 775.439782][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000351 [ 775.439799][ T32] R13: 0000000000000000 R14: 000000000009550e R15: 00007fffea5b8240 [ 775.439839][ T32] [ 775.439882][ T32] INFO: task syz.7.4671:18373 blocked in I/O wait for more than 143 seconds. [ 775.439905][ T32] Tainted: G L syzkaller #0 [ 775.439919][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.439931][ T32] task:syz.7.4671 state:D stack:26352 pid:18373 tgid:18373 ppid:16740 task_flags:0x440040 flags:0x00080002 [ 775.440003][ T32] Call Trace: [ 775.440012][ T32] [ 775.440028][ T32] __schedule+0x17db/0x58f0 [ 775.440083][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 775.440124][ T32] ? __pfx___schedule+0x10/0x10 [ 775.440165][ T32] ? schedule+0x90/0x2b0 [ 775.440199][ T32] schedule+0x164/0x2b0 [ 775.440232][ T32] io_schedule+0x7f/0xd0 [ 775.440264][ T32] bit_wait_io+0x11/0xd0 [ 775.440298][ T32] __wait_on_bit+0xac/0x300 [ 775.440330][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.440367][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 775.440421][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 775.440453][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 775.440496][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 775.440532][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.440572][ T32] do_get_write_access+0x662/0x1070 [ 775.440633][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 775.440677][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 775.440788][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 775.440830][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.440870][ T32] ext4_reserve_inode_write+0x294/0x360 [ 775.440920][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 775.440965][ T32] ext4_dirty_inode+0xd0/0x110 [ 775.441004][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 775.441042][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 775.441071][ T32] ? mnt_get_write_access+0x216/0x280 [ 775.441100][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 775.441136][ T32] touch_atime+0x568/0x670 [ 775.441161][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 775.441205][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 775.441248][ T32] mmap_region+0xe7e/0x2270 [ 775.441282][ T32] ? __page_table_check_zero+0x6c/0x430 [ 775.441329][ T32] ? __pfx_mmap_region+0x10/0x10 [ 775.441361][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441391][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.441440][ T32] ? lock_acquire+0x115/0x350 [ 775.441475][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441512][ T32] ? __lock_acquire+0x747/0x2de0 [ 775.441591][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441642][ T32] ? mt_find+0x186/0x630 [ 775.441682][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441712][ T32] ? mt_find+0x5ff/0x630 [ 775.441750][ T32] ? mt_find+0x186/0x630 [ 775.441785][ T32] ? __pfx_mt_find+0x10/0x10 [ 775.441829][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441859][ T32] ? security_mmap_addr+0x71/0x240 [ 775.441890][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441920][ T32] ? shmem_mapping+0xd/0x50 [ 775.441946][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.441977][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 775.442015][ T32] do_mmap+0xe0a/0x1300 [ 775.442049][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442089][ T32] ? __pfx_do_mmap+0x10/0x10 [ 775.442120][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442157][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442196][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 775.442224][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442254][ T32] ? down_write_killable+0x17e/0x240 [ 775.442296][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 775.442331][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442373][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 775.442405][ T32] ? lock_acquire+0x115/0x350 [ 775.442438][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 775.442472][ T32] ? __fget_files+0x2a/0x420 [ 775.442517][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.442547][ T32] ? __fget_files+0x3a2/0x420 [ 775.442582][ T32] ? __fget_files+0x2a/0x420 [ 775.442623][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 775.442670][ T32] do_syscall_64+0x166/0x520 [ 775.442702][ T32] ? trace_irq_disable+0x3b/0x140 [ 775.442729][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.442762][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.442789][ T32] RIP: 0033:0x7fb10599dec2 [ 775.442811][ T32] RSP: 002b:00007ffffbca1208 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 775.442838][ T32] RAX: ffffffffffffffda RBX: 0000001b32664000 RCX: 00007fb10599dec2 [ 775.442857][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32664000 [ 775.442875][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 775.442891][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000003f [ 775.442909][ T32] R13: 00000000000927c0 R14: 000000000009613a R15: 00007ffffbca14e0 [ 775.442950][ T32] [ 775.442963][ T32] [ 775.442963][ T32] Showing all locks held in the system: [ 775.442977][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 775.442995][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 775.443064][ T32] #1: ffffffff9ad40258 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 775.443146][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 775.443164][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 775.443231][ T32] locks held by kworker/u8:3/50: 4, on CPU#0: [ 775.443249][ T32] #0: ffff88801fe96940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 775.443322][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 775.443393][ T32] #2: ffff8880340b40e8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 775.443473][ T32] #3: ffff8880340b2c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 775.443571][ T32] locks held by klogd/4966: 1, last CPU#0: [ 775.443589][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 775.443680][ T32] locks held by getty/5364: 2, on CPU#1: [ 775.443698][ T32] #0: ffff888035d8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 775.443774][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 775.443850][ T32] locks held by syz-executor/5599: 3, on CPU#1: [ 775.443868][ T32] #0: ffff88801dfc7088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 775.443943][ T32] #1: ffff8880340b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 775.444018][ T32] #2: ffff8880340b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 775.444116][ T32] locks held by syz.8.4667/18360: 3, on CPU#0: [ 775.444134][ T32] #0: ffff88807c3ad448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 775.444208][ T32] #1: ffff8880340b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 775.444283][ T32] #2: ffff8880340b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 775.444355][ T32] locks held by syz.0.4668/18366: 3, on CPU#1: [ 775.444373][ T32] #0: ffff888058ecd088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 775.444447][ T32] #1: ffff8880340b4558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 775.444527][ T32] #2: ffff8880340b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 775.444599][ T32] locks held by syz.1.4670/18372: 3, on CPU#0: [ 775.444617][ T32] #0: ffff8880356b5cf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 775.444684][ T32] #1: ffff8880340b4460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 775.444761][ T32] #2: ffff8880340b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 775.444833][ T32] locks held by syz.7.4671/18373: 3, on CPU#1: [ 775.444851][ T32] #0: ffff8880356b1d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 775.444916][ T32] #1: ffff8880340b4460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 775.444993][ T32] #2: ffff8880340b0938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 775.445065][ T32] [ 775.445072][ T32] ============================================= [ 775.445072][ T32] [ 775.445085][ T32] NMI backtrace for cpu 1 [ 775.445104][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 775.445136][ T32] Tainted: [L]=SOFTLOCKUP [ 775.445145][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 775.445161][ T32] Call Trace: [ 775.445172][ T32] [ 775.445183][ T32] dump_stack_lvl+0xe8/0x150 [ 775.445220][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 775.445247][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 775.445291][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 775.445321][ T32] sys_info+0x135/0x170 [ 775.445358][ T32] watchdog+0xfd7/0x1030 [ 775.445394][ T32] ? watchdog+0x1c7/0x1030 [ 775.445428][ T32] kthread+0x38b/0x480 [ 775.445456][ T32] ? __pfx_watchdog+0x10/0x10 [ 775.445479][ T32] ? __pfx_kthread+0x10/0x10 [ 775.445511][ T32] ret_from_fork+0x514/0xb70 [ 775.445541][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 775.445565][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.445595][ T32] ? __switch_to+0xc89/0x1420 [ 775.445634][ T32] ? __pfx_kthread+0x10/0x10 [ 775.445662][ T32] ret_from_fork_asm+0x1a/0x30 [ 775.445720][ T32] [ 775.445730][ T32] Sending NMI from CPU 1 to CPUs 0: [ 775.445760][ C0] NMI backtrace for cpu 0 [ 775.445777][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.445807][ C0] Tainted: [L]=SOFTLOCKUP [ 775.445816][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 775.445830][ C0] RIP: 0010:delay_tsc+0x73/0xd0 [ 775.445853][ C0] Code: e8 c2 66 b0 f5 65 48 8b 05 fa c8 b0 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 59 65 b0 f5 e8 24 7b 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 24 de 4e f5 eb dd 4c 29 fb e8 0a 7b 01 00 89 c5 0f [ 775.445873][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000046 [ 775.445892][ C0] RAX: 00000000336f9c35 RBX: 0000000000000993 RCX: 0000000000000000 [ 775.445908][ C0] RDX: 00000000000001be RSI: ffffffff8c6da760 RDI: ffffffff8c6da720 [ 775.445925][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 775.445939][ C0] R10: dffffc0000000000 R11: ffffffff8be486c0 R12: 1ffffffff35a80a5 [ 775.445957][ C0] R13: 00000000ffffffff R14: 000001be336f92a3 R15: 0000000000000917 [ 775.445976][ C0] FS: 0000000000000000(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 775.446001][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.446018][ C0] CR2: 00005587d618f660 CR3: 000000007f244000 CR4: 0000000000350ef0 [ 775.446037][ C0] Call Trace: [ 775.446046][ C0] [ 775.446058][ C0] wait_for_lsr+0x147/0x2f0 [ 775.446088][ C0] __serial8250_console_fifo_write+0x346/0x3e0 [ 775.446130][ C0] serial8250_console_write+0xaa1/0x1200 [ 775.446156][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 775.446192][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 775.446218][ C0] ? __schedule+0x17f1/0x58f0 [ 775.446244][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446310][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 775.446349][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 775.446379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446406][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 775.446443][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446471][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 775.446499][ C0] nbcon_kthread_func+0x679/0x880 [ 775.446530][ C0] ? nbcon_kthread_func+0x163/0x880 [ 775.446555][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 775.446581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446612][ C0] ? __kthread_parkme+0x71/0x1f0 [ 775.446647][ C0] ? __kthread_parkme+0x199/0x1f0 [ 775.446685][ C0] kthread+0x38b/0x480 [ 775.446709][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 775.446732][ C0] ? __pfx_kthread+0x10/0x10 [ 775.446756][ C0] ret_from_fork+0x514/0xb70 [ 775.446781][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 775.446803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 775.446830][ C0] ? __switch_to+0xc89/0x1420 [ 775.446864][ C0] ? __pfx_kthread+0x10/0x10 [ 775.446889][ C0] ret_from_fork_asm+0x1a/0x30 [ 775.446937][ C0] [ 775.447755][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 779.046731][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 779.057411][ T32] Tainted: [L]=SOFTLOCKUP [ 779.061749][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 779.071890][ T32] Call Trace: [ 779.075245][ T32] [ 779.078169][ T32] vpanic+0x56d/0xa60 [ 779.082167][ T32] ? __pfx_vpanic+0x10/0x10 [ 779.086715][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 779.092356][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 779.097911][ T32] panic+0xc5/0xd0 [ 779.101645][ T32] ? __pfx_panic+0x10/0x10 [ 779.106079][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 779.111726][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 779.116785][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 779.122961][ T32] watchdog+0x1030/0x1030 [ 779.127327][ T32] ? watchdog+0x1c7/0x1030 [ 779.131768][ T32] kthread+0x38b/0x480 [ 779.135846][ T32] ? __pfx_watchdog+0x10/0x10 [ 779.140612][ T32] ? __pfx_kthread+0x10/0x10 [ 779.145297][ T32] ret_from_fork+0x514/0xb70 [ 779.149908][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 779.155034][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 779.160667][ T32] ? __switch_to+0xc89/0x1420 [ 779.165358][ T32] ? __pfx_kthread+0x10/0x10 [ 779.169945][ T32] ret_from_fork_asm+0x1a/0x30 [ 779.174986][ T32] [ 779.178277][ T32] Kernel Offset: disabled [ 779.182680][ T32] Rebooting in 86400 seconds..