last executing test programs: 51.016928369s ago: executing program 0 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x400000, 0x1, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 50.895480852s ago: executing program 0 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}]}]}, 0x28}}, 0x40050) 50.795869055s ago: executing program 0 (id=149): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000440)) 50.57957609s ago: executing program 0 (id=151): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 50.20534848s ago: executing program 0 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="97452a300c000000020000000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) 49.575206956s ago: executing program 0 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000780)='\v', 0x1}, {&(0x7f0000000740)='&', 0x1}], 0x2) 49.330108433s ago: executing program 32 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000780)='\v', 0x1}, {&(0x7f0000000740)='&', 0x1}], 0x2) 3.925094179s ago: executing program 3 (id=566): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$uac1(0x3, 0x7c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0xff, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0x2, "", "f7a8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x197, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0xc, 0x50, 0x6c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x9, 0x8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.597306753s ago: executing program 2 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.304707241s ago: executing program 2 (id=589): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000080)=0xd44, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8f2}], 0x1, 0x62, 0x0) 2.212921493s ago: executing program 1 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) 2.154946714s ago: executing program 2 (id=592): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0x1, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.045628897s ago: executing program 2 (id=594): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 1.894049381s ago: executing program 1 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.805124084s ago: executing program 1 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x3c}}, 0x24040004) 1.774572244s ago: executing program 2 (id=597): r0 = syz_usb_connect(0x2, 0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002090000403412785600010102000109021900010100e00009040000010900000007058103"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x20, 0xd, 0x9, {0x9, 0xa, "89b80c881788d5"}}, 0x0}, 0x0) 1.755816515s ago: executing program 3 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) 1.632092528s ago: executing program 1 (id=600): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) 1.584231849s ago: executing program 3 (id=601): syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000000280)="$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") mkdir(&(0x7f000000c840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000cac0)='./file1\x00', 0xc4042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000000cb40)='./file2\x00', 0x0) 1.519729991s ago: executing program 1 (id=602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000099}]}) 1.295812007s ago: executing program 1 (id=605): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) read(r1, 0x0, 0x0) 776.52354ms ago: executing program 4 (id=611): r0 = fsopen(&(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 741.233541ms ago: executing program 3 (id=612): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xaab, 0x7, 0x0, 0xffffffffffffffff, 0xe, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1}, 0x50) 671.504023ms ago: executing program 4 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x48f, 0x0, 0x8}]}) 443.681299ms ago: executing program 4 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 263.790903ms ago: executing program 4 (id=615): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4f368a", 0x3}], 0x1, 0x0, 0x0, 0x4000000}}], 0x1, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 236.177014ms ago: executing program 3 (id=616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x9, {{0xa, 0x4e24, 0x1, @mcast2, 0x7}}, {{0xa, 0x4e24, 0x1, @mcast2, 0x7}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 194.780755ms ago: executing program 4 (id=617): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c2", 0x4}], 0x1}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x19}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000003780)=""/241, 0xf1}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x8}, 0x1}], 0x4, 0x100, 0x0) 122.978497ms ago: executing program 3 (id=618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 56.302629ms ago: executing program 4 (id=619): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000000540)='A', 0x1}], 0x2) 0s ago: executing program 2 (id=620): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 73.715866][ T5761] cgroup: Unknown subsys name 'net' [ 73.817330][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.170657][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.066549][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.078399][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.086572][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.095359][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.105165][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.113605][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.121023][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.131718][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.151479][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.159170][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.167141][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.167553][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.201284][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.212613][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.224588][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.232447][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.244552][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.259088][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.280015][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.301704][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.310436][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.319882][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.327852][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.335327][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.354306][ T5773] (null): rxe_set_mtu: Set mtu to 1024 [ 77.366971][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 77.375690][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.380734][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 77.388268][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 77.394928][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.402321][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.403681][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.413319][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.462661][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.718531][ T5773] infiniband rxe0: set active [ 77.724497][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.751092][ T5773] infiniband rxe0: added rxe_eth0 [ 77.884688][ T5773] RDS/IB: rxe0: added [ 77.889777][ T5773] smc: adding ib device rxe0 with port count 1 [ 77.906551][ T5773] smc: ib device rxe0 port 1 has pnetid [ 77.922416][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 77.960876][ T791] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.017356][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.059447][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.161972][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 78.259443][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.326861][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.334975][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.345806][ T5781] bridge_slave_0: entered allmulticast mode [ 78.353472][ T5781] bridge_slave_0: entered promiscuous mode [ 78.388634][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.399512][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.407408][ T5781] bridge_slave_1: entered allmulticast mode [ 78.415629][ T5781] bridge_slave_1: entered promiscuous mode [ 78.453040][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.579517][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.602020][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.609195][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.631229][ T5776] bridge_slave_0: entered allmulticast mode [ 78.638658][ T5776] bridge_slave_0: entered promiscuous mode [ 78.662442][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.669807][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.694290][ T5780] bridge_slave_0: entered allmulticast mode [ 78.702013][ T5780] bridge_slave_0: entered promiscuous mode [ 78.727886][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.744758][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.761397][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.768934][ T5776] bridge_slave_1: entered allmulticast mode [ 78.793651][ T5776] bridge_slave_1: entered promiscuous mode [ 78.801109][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.808268][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.815790][ T5780] bridge_slave_1: entered allmulticast mode [ 78.827059][ T5780] bridge_slave_1: entered promiscuous mode [ 78.917263][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.945431][ T5781] team0: Port device team_slave_0 added [ 78.952140][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.973867][ T5781] team0: Port device team_slave_1 added [ 78.982638][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.015071][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.057214][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.110720][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.117830][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.145468][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.169503][ T5780] team0: Port device team_slave_0 added [ 79.180074][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.188246][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.214256][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.234796][ T5780] team0: Port device team_slave_1 added [ 79.245734][ T5776] team0: Port device team_slave_0 added [ 79.251927][ T5777] Bluetooth: hci1: command tx timeout [ 79.263281][ T5776] team0: Port device team_slave_1 added [ 79.296734][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.303927][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.329902][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.340668][ T5777] Bluetooth: hci0: command tx timeout [ 79.346668][ T5777] Bluetooth: hci2: command tx timeout [ 79.368444][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.375546][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.401847][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.420963][ T5777] Bluetooth: hci3: command tx timeout [ 79.437590][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.444706][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.471121][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.483847][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.490989][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.517050][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.550438][ T5781] hsr_slave_0: entered promiscuous mode [ 79.556909][ T5781] hsr_slave_1: entered promiscuous mode [ 79.643544][ T5776] hsr_slave_0: entered promiscuous mode [ 79.649819][ T5776] hsr_slave_1: entered promiscuous mode [ 79.658973][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.666898][ T5776] Cannot create hsr debugfs directory [ 79.697104][ T5435] infiniband rxe0: set active [ 79.746339][ T5780] hsr_slave_0: entered promiscuous mode [ 79.753423][ T5780] hsr_slave_1: entered promiscuous mode [ 79.759857][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.770651][ T5780] Cannot create hsr debugfs directory [ 79.776442][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.018953][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.185819][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.193131][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.200296][ T5773] bridge_slave_0: entered allmulticast mode [ 80.207862][ T5773] bridge_slave_0: entered promiscuous mode [ 80.231604][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.242213][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.249544][ T5773] bridge_slave_1: entered allmulticast mode [ 80.257433][ T5773] bridge_slave_1: entered promiscuous mode [ 80.279674][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.293939][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.306033][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.316728][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.327925][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.359385][ T5773] team0: Port device team_slave_0 added [ 80.366489][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.378148][ T5773] team0: Port device team_slave_1 added [ 80.428895][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.436757][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.464062][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.478056][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.485332][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.512566][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.592421][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.605767][ T5773] hsr_slave_0: entered promiscuous mode [ 80.613359][ T5773] hsr_slave_1: entered promiscuous mode [ 80.619478][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.627219][ T5773] Cannot create hsr debugfs directory [ 80.658234][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.683552][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.723947][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.800187][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.809733][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.840976][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.856475][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.048455][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.061605][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.072984][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.083884][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.097043][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.140094][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.172227][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.202594][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.218576][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.226005][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.245095][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.252281][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.290239][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.297437][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.309114][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.316257][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.331933][ T5777] Bluetooth: hci1: command tx timeout [ 81.338463][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.389471][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.411178][ T5777] Bluetooth: hci2: command tx timeout [ 81.416326][ T5785] Bluetooth: hci0: command tx timeout [ 81.435299][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.456265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.463536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.496863][ T5785] Bluetooth: hci3: command tx timeout [ 81.512910][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.520002][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.663856][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.714975][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.748463][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.756411][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.803790][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.811003][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.978425][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.067214][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.129144][ T5776] veth0_vlan: entered promiscuous mode [ 82.145222][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.192644][ T5776] veth1_vlan: entered promiscuous mode [ 82.277966][ T5776] veth0_macvtap: entered promiscuous mode [ 82.286948][ T5780] veth0_vlan: entered promiscuous mode [ 82.314711][ T5776] veth1_macvtap: entered promiscuous mode [ 82.329265][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.348974][ T5780] veth1_vlan: entered promiscuous mode [ 82.370362][ T5781] veth0_vlan: entered promiscuous mode [ 82.394524][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.406259][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.419090][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428456][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.438103][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.446936][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480010][ T5781] veth1_vlan: entered promiscuous mode [ 82.525906][ T5780] veth0_macvtap: entered promiscuous mode [ 82.560599][ T5780] veth1_macvtap: entered promiscuous mode [ 82.570281][ T5773] veth0_vlan: entered promiscuous mode [ 82.597110][ T5773] veth1_vlan: entered promiscuous mode [ 82.630280][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.641760][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.654689][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.667258][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.678370][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.689621][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.723520][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733424][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.742825][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.751725][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780386][ T5781] veth0_macvtap: entered promiscuous mode [ 82.812594][ T5781] veth1_macvtap: entered promiscuous mode [ 82.826645][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.847704][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.898441][ T5773] veth0_macvtap: entered promiscuous mode [ 82.922161][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.937139][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.947585][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.959079][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.970538][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.978746][ T5773] veth1_macvtap: entered promiscuous mode [ 82.988943][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.997003][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.010058][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.023669][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.041162][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.058419][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.070600][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.081402][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.093712][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.136793][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.148505][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.163434][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.179584][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.198211][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.208874][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.220378][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.231349][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.242386][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.255608][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.267388][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.283806][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.296714][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.306827][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.318449][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.328432][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.347877][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.359654][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.383634][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.394211][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.404269][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.411844][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.420578][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.429601][ T5785] Bluetooth: hci1: command tx timeout [ 83.429813][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491371][ T5785] Bluetooth: hci2: command tx timeout [ 83.496904][ T5777] Bluetooth: hci0: command tx timeout [ 83.583011][ T5777] Bluetooth: hci3: command tx timeout [ 83.710065][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.738052][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.751688][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.831169][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.839141][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.924740][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.946292][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.076812][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.117149][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.182872][ T5887] mmap: syz.1.2 (5887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.737229][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.784049][ T5914] ipvlan2: entered allmulticast mode [ 84.789468][ T5914] syz_tun: entered allmulticast mode [ 84.901659][ T5922] syz.2.23[5922]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.939453][ T5922] loop2: detected capacity change from 0 to 512 [ 84.966013][ T5922] EXT4-fs: Ignoring removed nobh option [ 85.065204][ T5922] EXT4-fs (loop2): 1 truncate cleaned up [ 85.112462][ T5922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.378616][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.491091][ T5777] Bluetooth: hci1: command tx timeout [ 85.572031][ T5777] Bluetooth: hci0: command tx timeout [ 85.577948][ T5777] Bluetooth: hci2: command tx timeout [ 85.595968][ T5945] loop2: detected capacity change from 0 to 128 [ 85.645911][ T5943] loop0: detected capacity change from 0 to 4096 [ 85.652765][ T5777] Bluetooth: hci3: command tx timeout [ 85.665188][ T5943] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 85.683988][ T5945] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.764957][ T5945] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.863739][ T5943] ntfs3: loop0: ino=19, mi_enum_attr [ 85.880263][ T5943] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 85.921209][ T5943] ntfs3: loop0: ino=1a, mi_enum_attr [ 85.962981][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.981227][ T5943] ntfs3: loop0: ino=1a, mi_enum_attr [ 85.986587][ T5943] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 86.040120][ T5930] loop1: detected capacity change from 0 to 32768 [ 86.059758][ T5930] ======================================================= [ 86.059758][ T5930] WARNING: The mand mount option has been deprecated and [ 86.059758][ T5930] and is ignored by this kernel. Remove the mand [ 86.059758][ T5930] option from the mount to silence this warning. [ 86.059758][ T5930] ======================================================= [ 86.219445][ T5930] JBD2: Ignoring recovery information on journal [ 86.437397][ T5930] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.620425][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 86.712910][ T5781] ocfs2: Unmounting device (7,1) on (node local) [ 86.821332][ T56] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.860648][ T27] cfg80211: failed to load regulatory.db [ 87.023605][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 87.036288][ T56] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 87.051050][ T56] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.075159][ T56] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.102716][ T56] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.128793][ T56] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.155905][ T56] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.180952][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.245317][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 87.437607][ T56] usb 4-1: GET_CAPABILITIES returned 0 [ 87.445062][ T56] usbtmc 4-1:16.0: can't read capabilities [ 87.612873][ T5974] loop0: detected capacity change from 0 to 512 [ 87.670689][ T5974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.725480][ T5974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.807060][ T5974] EXT4-fs (loop0): 1 truncate cleaned up [ 87.842280][ T5974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.856185][ T5763] usb 4-1: USB disconnect, device number 2 [ 87.974482][ T5974] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.196276][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.218937][ T5993] loop1: detected capacity change from 0 to 256 [ 88.293521][ T5997] device-mapper: ioctl: Invalid ioctl structure: name p, dev 2f [ 88.861004][ T5763] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.877128][ T6025] program syz.0.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.971062][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.055455][ T6032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.67'. [ 89.069545][ T5763] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.087229][ T5763] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.105598][ T5763] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.113249][ T5763] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 89.122837][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.136090][ T5763] usb 2-1: config 0 descriptor?? [ 89.207860][ T5842] usb 3-1: config 0 has no interfaces? [ 89.229167][ T5842] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 89.253189][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.255965][ T6036] vivid-006: disconnect [ 89.271373][ T5842] usb 3-1: Product: syz [ 89.279560][ T6035] vivid-006: reconnect [ 89.280866][ T5842] usb 3-1: Manufacturer: syz [ 89.294984][ T5842] usb 3-1: SerialNumber: syz [ 89.303822][ T5842] usb 3-1: config 0 descriptor?? [ 89.391094][ T6038] loop0: detected capacity change from 0 to 2048 [ 89.453364][ T6038] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #2: comm syz.0.70: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 89.480937][ T6038] EXT4-fs (loop0): get root inode failed [ 89.491927][ T6038] EXT4-fs (loop0): mount failed [ 89.544251][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 89.559156][ T5842] usb 3-1: USB disconnect, device number 2 [ 89.617635][ T5763] thrustmaster 0003:044F:B65A.0001: No inputs registered, leaving [ 89.679457][ T5763] thrustmaster 0003:044F:B65A.0001: hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.1-1/input0 [ 89.699457][ T5763] thrustmaster 0003:044F:B65A.0001: no inputs found [ 89.848948][ T5763] usb 2-1: USB disconnect, device number 2 [ 90.606304][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.960276][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.552594][ T6094] loop2: detected capacity change from 0 to 2048 [ 91.635863][ T6094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.774130][ T6102] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 92.095233][ T6104] loop0: detected capacity change from 0 to 32768 [ 92.110755][ T6104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (6104) [ 92.146298][ T6104] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.156914][ T6104] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 92.165677][ T6104] BTRFS info (device loop0): setting nodatacow, compression disabled [ 92.175200][ T6104] BTRFS info (device loop0): setting datasum, datacow enabled [ 92.183469][ T6104] BTRFS info (device loop0): force clearing of disk cache [ 92.190865][ T6104] BTRFS info (device loop0): turning on sync discard [ 92.197610][ T6104] BTRFS info (device loop0): enabling ssd optimizations [ 92.204676][ T6104] BTRFS info (device loop0): using spread ssd allocation scheme [ 92.213007][ T6104] BTRFS info (device loop0): not using ssd optimizations [ 92.220076][ T6104] BTRFS info (device loop0): not using spread ssd allocation scheme [ 92.228312][ T6104] BTRFS info (device loop0): using free space tree [ 92.330250][ T4378] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x1335c47d3f94e85552e31a8ecc9dd4db4dece1445f3fbef1d5b0b5e8324c15d5 found 0x184542daec41260a2b3c2ea98e73ef46c1e5f9a0952224652f5b6bbd980923f5 level 0 [ 92.383264][ T6111] loop1: detected capacity change from 0 to 4096 [ 92.402395][ T6104] BTRFS warning (device loop0): couldn't read tree root [ 92.429719][ T6104] BTRFS error (device loop0): open_ctree failed: -5 [ 92.481381][ T6111] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 92.488209][ T6111] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 92.570060][ T5764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (5764) [ 92.675666][ T6111] ntfs3: loop1: ino=5, "/" directory corrupted [ 92.730641][ T6111] ntfs3: loop1: ino=5, "/" directory corrupted [ 92.871589][ T4378] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 92.898149][ T5781] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 92.920936][ T5781] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.927951][ T5781] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 92.982802][ T11] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 93.370943][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.596994][ T5873] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.616820][ T5873] usb 3-1: config 0 has no interface number 0 [ 93.640374][ T6139] loop3: detected capacity change from 0 to 32768 [ 93.648100][ T5873] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.657902][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.685173][ T5873] usb 3-1: Product: syz [ 93.702018][ T5873] usb 3-1: Manufacturer: syz [ 93.706687][ T5873] usb 3-1: SerialNumber: syz [ 93.750333][ T5873] usb 3-1: config 0 descriptor?? [ 93.877664][ T6169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'. [ 94.000433][ T5873] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 94.021571][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.044006][ T5873] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.081381][ T5873] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 94.089772][ T5873] usb 3-1: media controller created [ 94.155128][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.233320][ T5873] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 94.334796][ T5873] usb 3-1: USB disconnect, device number 3 [ 94.619847][ T6179] loop3: detected capacity change from 0 to 32768 [ 94.686762][ T6179] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.753719][ T6193] tipc: Started in network mode [ 94.759083][ T6193] tipc: Node identity ac14142f, cluster identity 4711 [ 94.767707][ T6193] tipc: New replicast peer: 127.0.0.1 [ 94.782131][ T6179] XFS (loop3): Ending clean mount [ 94.785846][ T6193] tipc: Enabled bearer , priority 10 [ 94.823957][ T6179] XFS (loop3): Quotacheck needed: Please wait. [ 94.835519][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.836273][ T6193] tipc: New replicast peer: 255.255.255.255 [ 94.966751][ T6179] XFS (loop3): Quotacheck: Done. [ 95.052900][ T5873] usb 1-1: config 1 has an invalid interface number: 27 but max is 1 [ 95.071050][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.099449][ T5873] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 95.111448][ T5873] usb 1-1: config 1 has no interface number 2 [ 95.117760][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 95.128541][ T5873] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.160514][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.169406][ T5873] usb 1-1: config 1 interface 1 has no altsetting 0 [ 95.194703][ T5873] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 95.205305][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.213655][ T5873] usb 1-1: Product: syz [ 95.218118][ T5873] usb 1-1: Manufacturer: syz [ 95.224097][ T5873] usb 1-1: SerialNumber: syz [ 95.559982][ T6204] netem: change failed [ 95.683383][ T6183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.761878][ T6211] kvm: kvm [6210]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 95.904823][ T5851] tipc: Node number set to 2886997039 [ 95.992682][ T6226] loop1: detected capacity change from 0 to 8 [ 96.092049][ T6226] SQUASHFS error: Failed to read block 0x26067d: -5 [ 96.103276][ T6226] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 96.108257][ T6229] loop9: detected capacity change from 0 to 7 [ 96.113978][ T6226] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 96.139540][ T5873] ATM dev 0: failed to start ADSL synchronisation: -71 [ 96.142460][ T6229] Dev loop9: unable to read RDB block 7 [ 96.159177][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5700 failed (-71)! [ 96.162513][ T6229] loop9: unable to read partition table [ 96.167325][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5a00 failed (-71)! [ 96.174450][ T6229] loop9: partition table beyond EOD, [ 96.181194][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5900 failed (-71)! [ 96.181817][ T6229] truncated [ 96.186662][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5c00 failed (-71)! [ 96.223219][ T6229] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 96.294493][ T6232] loop2: detected capacity change from 0 to 512 [ 96.308857][ T5873] speedtch 1-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 96.319179][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5700 failed (-71)! [ 96.327190][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5a00 failed (-71)! [ 96.335181][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5900 failed (-71)! [ 96.343249][ C0] ATM dev 0: usbatm_complete: urb 0xffff888031bb5c00 failed (-71)! [ 96.352781][ T5873] speedtch 1-1:1.27: usbatm_usb_probe: bind failed: -16! [ 96.359906][ T5873] speedtch: probe of 1-1:1.27 failed with error -16 [ 96.406531][ T6232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.409973][ T5873] usb 1-1: USB disconnect, device number 2 [ 96.422575][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888031bb5700 submission failed (-19)! [ 96.472920][ T6232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 96.501072][ T6232] System zones: 1-12 [ 96.513844][ T6232] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.130: bad orphan inode 131072 [ 96.551613][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.624846][ T6232] EXT4-fs (loop2): shut down requested (0) [ 96.696632][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.841077][ T6248] loop1: detected capacity change from 0 to 1024 [ 96.892601][ T6248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.921258][ T5851] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.982183][ T6248] fs-verity: sha512 using implementation "sha512-avx2" [ 97.019905][ T6248] fs-verity (loop1, inode 13): Unsupported log_blocksize: 12 [ 97.104843][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.118877][ T6257] loop0: detected capacity change from 0 to 128 [ 97.124130][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 97.174977][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.201014][ T5851] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 97.204438][ T6257] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 97.248048][ T5851] usb 4-1: string descriptor 0 read error: -22 [ 97.254663][ T6257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.259375][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 97.293818][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.894572][ T6281] loop0: detected capacity change from 0 to 2048 [ 97.944854][ T6281] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 97.992109][ T6281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.169124][ T5851] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 98.208028][ T5851] usb 4-1: USB disconnect, device number 3 [ 98.217833][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 98.246384][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 98.267304][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.554341][ T6293] loop1: detected capacity change from 0 to 128 [ 98.587042][ T6293] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.626349][ T6293] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.762249][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.772066][ T5776] syz-executor (5776) used greatest stack depth: 20616 bytes left [ 98.915825][ T4321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.036228][ T4321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.165164][ T6302] loop2: detected capacity change from 0 to 256 [ 99.183313][ T4321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.328707][ T4321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.536512][ T6312] loop2: detected capacity change from 0 to 256 [ 99.574608][ T6308] loop1: detected capacity change from 0 to 2048 [ 99.597992][ T6312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 99.705809][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.766403][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.791466][ T6308] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.819872][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.831136][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.842293][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.852005][ T6312] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 99.852005][ T6312] [ 99.865184][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.873814][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.881261][ T6312] exFAT-fs (loop2): Filesystem has been set read-only [ 99.929524][ T6312] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 99.929524][ T6312] [ 99.947822][ T6316] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.015834][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.371320][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 100.729964][ T6347] netlink: 144 bytes leftover after parsing attributes in process `syz.1.177'. [ 101.166608][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 101.182556][ T6367] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.620160][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.636207][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.651611][ T6316] bridge_slave_0: entered allmulticast mode [ 101.666192][ T6316] bridge_slave_0: entered promiscuous mode [ 101.691046][ T6387] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 101.732684][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.755280][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.771956][ T6316] bridge_slave_1: entered allmulticast mode [ 101.792215][ T6316] bridge_slave_1: entered promiscuous mode [ 101.971371][ T5785] Bluetooth: hci1: command tx timeout [ 101.977364][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.014694][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.055175][ T6395] netem: change failed [ 102.070896][ T5842] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.297788][ T6316] team0: Port device team_slave_0 added [ 102.323142][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 102.330333][ T6316] team0: Port device team_slave_1 added [ 102.348949][ T5842] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 102.395302][ T5842] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 102.433828][ T5842] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 102.460884][ T5842] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 102.488215][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.496144][ T4321] hsr_slave_0: left promiscuous mode [ 102.507626][ T4321] hsr_slave_1: left promiscuous mode [ 102.515548][ T5842] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 102.526523][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.541050][ T5842] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 102.549565][ T5842] usb 4-1: Product: syz [ 102.561492][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.579192][ T5842] usb 4-1: Manufacturer: syz [ 102.585847][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.593373][ T5842] usb 4-1: SerialNumber: syz [ 102.609038][ T5842] usb 4-1: config 0 descriptor?? [ 102.618400][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.634570][ T5842] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 102.646242][ T4321] bridge_slave_1: left allmulticast mode [ 102.661307][ T4321] bridge_slave_1: left promiscuous mode [ 102.673989][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.685989][ T5842] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 102.731853][ T4321] bridge_slave_0: left allmulticast mode [ 102.737681][ T4321] bridge_slave_0: left promiscuous mode [ 102.773490][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.825338][ T4321] veth1_macvtap: left promiscuous mode [ 102.851895][ T4321] veth0_macvtap: left promiscuous mode [ 102.857606][ T4321] veth1_vlan: left promiscuous mode [ 102.871402][ T4321] veth0_vlan: left promiscuous mode [ 102.894939][ T5842] usb 4-1: USB disconnect, device number 4 [ 102.900881][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 102.925519][ T5842] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 103.113123][ T6390] ldusb: No device or device unplugged -19 [ 103.642048][ T5842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.670500][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 103.739616][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 103.809630][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.863268][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.870942][ T6426] loop3: detected capacity change from 0 to 4096 [ 103.873689][ T5842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.891344][ T5842] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.911075][ T5842] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.924314][ T5842] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 103.933566][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.956662][ T4321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.051141][ T5785] Bluetooth: hci1: command tx timeout [ 104.401527][ T5842] gud 3-1:1.0: Unexpected status OK for failed transfer [ 104.424531][ T5842] gud: probe of 3-1:1.0 failed with error -32 [ 104.548804][ T4321] bond0 (unregistering): Released all slaves [ 104.687624][ T5763] usb 3-1: USB disconnect, device number 4 [ 104.773151][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.780422][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.817131][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.843824][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.853799][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.880026][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.891093][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.059817][ T6316] hsr_slave_0: entered promiscuous mode [ 105.067303][ T6316] hsr_slave_1: entered promiscuous mode [ 105.075731][ T6316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.085572][ T6316] Cannot create hsr debugfs directory [ 105.506777][ T6316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.543859][ T6316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.564750][ T6316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.593904][ T6316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.840101][ T6464] loop2: detected capacity change from 0 to 512 [ 105.849560][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.860542][ T6463] input: syz1 as /devices/virtual/input/input6 [ 105.921723][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.004515][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.069526][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.077857][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.113811][ T6464] EXT4-fs error (device loop2): ext4_get_first_dir_block:3586: inode #12: comm syz.2.215: Directory block failed checksum [ 106.131666][ T5785] Bluetooth: hci1: command tx timeout [ 106.172704][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.179999][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.348388][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.597757][ T6486] loop3: detected capacity change from 0 to 128 [ 106.668359][ T6486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.717575][ T6486] hpfs: filesystem error: improperly stopped [ 106.735568][ T6486] hpfs: You really don't want any checks? You are crazy... [ 106.756530][ T6486] hpfs: hpfs_map_sector(): read error [ 106.781167][ T6486] hpfs: code page support is disabled [ 106.788240][ T6486] hpfs: hpfs_map_4sectors(): unaligned read [ 106.816440][ T6486] hpfs: hpfs_map_4sectors(): unaligned read [ 106.827763][ T6486] hpfs: filesystem error: unable to find root dir [ 106.953704][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.178411][ T6474] loop1: detected capacity change from 0 to 32768 [ 107.271028][ T6474] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 107.424234][ T6474] XFS (loop1): Ending clean mount [ 107.529378][ T6524] process 'syz.3.227' launched './file1' with NULL argv: empty string added [ 107.698633][ T5781] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 107.719996][ T6316] veth0_vlan: entered promiscuous mode [ 107.753893][ T6316] veth1_vlan: entered promiscuous mode [ 107.913593][ T6316] veth0_macvtap: entered promiscuous mode [ 107.963442][ T6316] veth1_macvtap: entered promiscuous mode [ 108.009894][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.040869][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.060920][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.083914][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.110851][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.137659][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.152409][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.210604][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.224050][ T5785] Bluetooth: hci1: command tx timeout [ 108.236739][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.247921][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.259805][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.270318][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.281349][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.296245][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.329798][ T6316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.356790][ T6316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.378857][ T6316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.389068][ T6316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.624407][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.657169][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.714630][ T6553] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 108.750468][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.791650][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.137039][ T6565] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 109.228821][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.242'. [ 109.561773][ T6587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.827759][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 109.909927][ T5763] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.992142][ T6607] loop4: detected capacity change from 0 to 512 [ 110.096916][ T5763] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 110.115879][ T6610] loop1: detected capacity change from 0 to 512 [ 110.154599][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.171560][ T5763] usb 3-1: Product: syz [ 110.180192][ T5763] usb 3-1: Manufacturer: syz [ 110.188403][ T5763] usb 3-1: SerialNumber: syz [ 110.204374][ T5763] usb 3-1: config 0 descriptor?? [ 110.214862][ T6607] EXT4-fs (loop4): 1 orphan inode deleted [ 110.223397][ T5763] hub 3-1:0.0: bad descriptor, ignoring hub [ 110.229909][ T5763] hub: probe of 3-1:0.0 failed with error -5 [ 110.232910][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.265836][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.278745][ T6607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.302694][ T6610] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.319650][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 110.345284][ T6607] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.469018][ T5763] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 110.512777][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.512827][ T6610] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz.1.256: invalid size [ 110.531651][ T5763] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 110.545650][ T6620] device-mapper: ioctl: Invalid ioctl structure: name mp, dev 30 [ 110.595661][ T5763] usb 3-1: media controller created [ 110.636831][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.672638][ T6590] dib0700: tx buffer length is larger than 4. Not supported. [ 110.714196][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.750087][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.987953][ T5763] DVB: Unable to find symbol dib7000p_attach() [ 111.017914][ T5763] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 111.127222][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 111.191027][ T5763] rc_core: IR keymap rc-dib0700-rc5 not found [ 111.200981][ T5763] Registered IR keymap rc-empty [ 111.219864][ T5763] dvb-usb: could not initialize remote control. [ 111.246414][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 111.252355][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'. [ 111.331946][ T5763] usb 3-1: USB disconnect, device number 5 [ 111.422551][ T6651] syz.2.267: attempt to access beyond end of device [ 111.422551][ T6651] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.458836][ T6651] SQUASHFS error: Failed to read block 0x0: -5 [ 111.482415][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 111.817511][ T6661] loop4: detected capacity change from 0 to 512 [ 111.832359][ T6661] EXT4-fs: Ignoring removed oldalloc option [ 111.888253][ T6661] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.980379][ T6661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.112683][ T5763] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.288271][ T6650] loop1: detected capacity change from 0 to 32768 [ 112.313163][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 112.321133][ T6650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.266 (6650) [ 112.328501][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.377143][ T6650] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.402676][ T5763] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 112.402866][ T6650] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 112.421324][ T5763] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 112.461938][ T6650] BTRFS info (device loop1): setting nodatasum [ 112.466555][ T5763] usb 3-1: Manufacturer: syz [ 112.486621][ T6650] BTRFS info (device loop1): enabling auto defrag [ 112.501869][ T6650] BTRFS info (device loop1): disabling tree log [ 112.515546][ T5763] usb 3-1: config 0 descriptor?? [ 112.529990][ T6650] BTRFS info (device loop1): using free space tree [ 112.617210][ T6661] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 112.680207][ T6650] BTRFS info (device loop1): enabling ssd optimizations [ 112.709816][ T6650] BTRFS info (device loop1): auto enabling async discard [ 112.774277][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.983098][ T6711] loop4: detected capacity change from 0 to 512 [ 113.007645][ T5763] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0002/input/input9 [ 113.054013][ T6711] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.277: corrupted in-inode xattr: invalid ea_ino [ 113.118870][ T5763] creative-sb0540 0003:041E:3100.0002: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 113.147750][ T6711] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.277: couldn't read orphan inode 15 (err -117) [ 113.244124][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.266146][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.307136][ T6716] loop3: detected capacity change from 0 to 1024 [ 113.335831][ T28] audit: type=1800 audit(1792501519.004:2): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.277" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 113.690556][ T5851] usb 3-1: USB disconnect, device number 6 [ 113.716121][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.861886][ T11] hfsplus: b-tree write err: -5, ino 25 [ 113.868764][ T11] hfsplus: b-tree write err: -5, ino 4 [ 113.941248][ T11] hfsplus: b-tree write err: -5, ino 2 [ 113.978431][ T11] hfsplus: b-tree write err: -5, ino 17 [ 114.150224][ T6734] Zero length message leads to an empty skb [ 114.590329][ T6749] loop3: detected capacity change from 0 to 2048 [ 114.646700][ T6749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.704201][ T6752] loop1: detected capacity change from 0 to 512 [ 114.754695][ T6752] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.800573][ T6752] EXT4-fs (loop1): 1 truncate cleaned up [ 114.841298][ T6752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.952713][ T6758] loop4: detected capacity change from 0 to 128 [ 114.996025][ T6758] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.113773][ T6752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.129837][ T6758] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.532942][ T6776] loop1: detected capacity change from 0 to 512 [ 115.574192][ T6776] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.607909][ T6776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.657712][ T6316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.725984][ T6776] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.292: bad orphan inode 131083 [ 115.806036][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.986099][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.013759][ T6787] loop4: detected capacity change from 0 to 512 [ 116.036927][ T6787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.060761][ T6787] EXT4-fs (loop4): 1 truncate cleaned up [ 116.067617][ T6787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.187663][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 116.266728][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.431956][ T6799] loop1: detected capacity change from 0 to 256 [ 116.503611][ T6799] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 117.187751][ T6819] input: syz1 as /devices/virtual/input/input10 [ 117.374019][ T6806] loop4: detected capacity change from 0 to 32768 [ 117.385656][ T6802] loop3: detected capacity change from 0 to 32768 [ 117.438957][ T6806] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 117.493819][ T6806] JBD2: Ignoring recovery information on journal [ 117.654577][ T6806] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 118.020977][ T791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.084268][ T28] audit: type=1800 audit(1792501523.754:3): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.301" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 118.236959][ T6806] syz.4.301 (6806) used greatest stack depth: 19320 bytes left [ 118.256983][ T28] audit: type=1326 audit(1792501523.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.288964][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.317417][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 118.337924][ T791] usb 3-1: config 0 has no interfaces? [ 118.348027][ T791] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 118.361057][ T6316] ocfs2: Unmounting device (7,4) on (node local) [ 118.368439][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.396063][ T28] audit: type=1326 audit(1792501523.984:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.424651][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.437076][ T28] audit: type=1326 audit(1792501524.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.468112][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.477504][ T791] usb 3-1: config 0 descriptor?? [ 118.489437][ T28] audit: type=1326 audit(1792501524.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.519938][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.541586][ T28] audit: type=1326 audit(1792501524.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.569258][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.618768][ T28] audit: type=1326 audit(1792501524.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.650319][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.662464][ T28] audit: type=1326 audit(1792501524.044:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.692252][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.731220][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.747358][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.757356][ T28] audit: type=1326 audit(1792501524.044:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.788534][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.831281][ T791] usb 3-1: USB disconnect, device number 7 [ 118.855125][ T28] audit: type=1326 audit(1792501524.044:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daa39f559 code=0x7ffc0000 [ 118.888554][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.060612][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.076297][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.098739][ T6860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.115416][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 119.270477][ T6869] loop4: detected capacity change from 0 to 512 [ 119.281775][ T6870] loop3: detected capacity change from 0 to 128 [ 119.327401][ T6870] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 119.356513][ T6869] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 119.373859][ T6869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 119.397189][ T6869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.412265][ T6869] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #13: comm syz.4.324: iget: bad i_size value: 12154761577498 [ 119.450975][ T791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.470749][ T6869] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.324: couldn't read orphan inode 13 (err -117) [ 119.498424][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.589162][ T6869] EXT4-fs (loop4): shut down requested (0) [ 119.627535][ T6877] loop1: detected capacity change from 0 to 256 [ 119.663734][ T791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.686202][ T791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.688783][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.728463][ T791] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 119.770906][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.805174][ T791] hub 3-1:1.0: USB hub found [ 120.014534][ T791] hub 3-1:1.0: config failed, can't read hub descriptor (err -22) [ 120.101787][ T791] usb 3-1: USB disconnect, device number 8 [ 120.420613][ T6892] loop4: detected capacity change from 0 to 512 [ 120.513785][ T6892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.544880][ T6892] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.844293][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.463262][ T5851] IPVS: starting estimator thread 0... [ 121.471175][ T6912] netlink: 72 bytes leftover after parsing attributes in process `syz.1.340'. [ 121.472641][ T6915] bcache: register_bcache() error : failed to open device [ 121.581171][ T6918] IPVS: using max 23 ests per chain, 55200 per kthread [ 121.765591][ T6924] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 122.338643][ T6930] loop3: detected capacity change from 0 to 32768 [ 122.431228][ T6930] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.494578][ T6930] XFS (loop3): Ending clean mount [ 122.591114][ T6930] XFS (loop3): User initiated shutdown received. [ 122.617141][ T6930] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 122.662512][ T6930] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 122.813070][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.495393][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 123.652006][ T7004] bond0: no command found in slaves file - use +ifname or -ifname [ 123.781692][ T7011] loop1: detected capacity change from 0 to 256 [ 123.789232][ T5763] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.992481][ T5763] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 124.014123][ T5763] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.031262][ T5763] usb 5-1: config 0 has no interface number 0 [ 124.048524][ T5763] usb 5-1: config 0 interface 255 has no altsetting 0 [ 124.065842][ T5763] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.080195][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.080355][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 124.089895][ T5763] usb 5-1: Product: syz [ 124.116344][ T5763] usb 5-1: Manufacturer: syz [ 124.126435][ T5763] usb 5-1: SerialNumber: syz [ 124.143416][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 124.143434][ T28] audit: type=1400 audit(1792501529.814:20): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7022 comm="syz.3.382" name="p" offset=43 [ 124.172520][ T5763] usb 5-1: config 0 descriptor?? [ 124.493014][ T8] usb 5-1: USB disconnect, device number 2 [ 125.047988][ T7059] loop3: detected capacity change from 0 to 1024 [ 125.074565][ T7059] EXT4-fs: inline encryption not supported [ 125.087551][ T7059] EXT4-fs (loop3): invalid inodes per group: 204800 [ 125.087551][ T7059] [ 125.489830][ T7071] pimreg: entered allmulticast mode [ 125.501202][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.531600][ T7071] pimreg: left allmulticast mode [ 125.694913][ T8] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.718190][ T8] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.752451][ T7079] loop4: detected capacity change from 0 to 2048 [ 125.777789][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.790041][ T7084] loop1: detected capacity change from 0 to 2048 [ 125.806941][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 125.810414][ T7084] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 125.836723][ T7079] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #2: comm syz.4.406: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 125.845194][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.892942][ T8] usb 3-1: config 0 descriptor?? [ 125.920092][ T7084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.942233][ T7079] EXT4-fs (loop4): get root inode failed [ 125.958144][ T7079] EXT4-fs (loop4): mount failed [ 126.343351][ T8] thrustmaster 0003:044F:B65A.0003: No inputs registered, leaving [ 126.385989][ T8] thrustmaster 0003:044F:B65A.0003: hidraw0: USB HID v0.00 Joystick [HID 044f:b65a] on usb-dummy_hcd.2-1/input0 [ 126.427659][ T8] thrustmaster 0003:044F:B65A.0003: no inputs found [ 126.652563][ T791] usb 3-1: USB disconnect, device number 9 [ 127.718172][ T7154] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 127.771050][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.971090][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 127.989701][ T5873] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 128.017379][ T5873] usb 4-1: config 0 has no interface number 0 [ 128.037911][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.057924][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.076682][ T5873] usb 4-1: Product: syz [ 128.081928][ T5873] usb 4-1: Manufacturer: syz [ 128.086566][ T5873] usb 4-1: SerialNumber: syz [ 128.112226][ T5873] usb 4-1: config 0 descriptor?? [ 128.127894][ T5873] smsc95xx v2.0.0 [ 128.431374][ T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.642907][ T791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.664367][ T791] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.697992][ T791] usb 5-1: string descriptor 0 read error: -22 [ 128.715308][ T791] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 128.734765][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.767900][ T791] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 128.796645][ T791] etas_es58x 5-1:1.0: could not retrieve the product info string [ 128.955718][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 128.968374][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 128.979644][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 129.004321][ T5873] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 129.041088][ T5873] usb 4-1: USB disconnect, device number 5 [ 129.114350][ T7177] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 129.163794][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 129.191333][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 129.202233][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 129.210029][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 129.231231][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 129.238926][ T7177] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 129.271101][ T791] usb 5-1: USB disconnect, device number 3 [ 129.278352][ T791] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 129.725673][ T7231] loop3: detected capacity change from 0 to 1024 [ 129.905357][ T7216] loop1: detected capacity change from 0 to 32768 [ 129.943463][ T7216] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop1 scanned by syz.1.448 (7216) [ 129.986743][ T7216] BTRFS info (device loop1): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 130.036732][ T7216] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.101861][ T7216] BTRFS info (device loop1): using free space tree [ 130.284365][ T7248] input: syz0 as /devices/virtual/input/input12 [ 130.385488][ T7216] BTRFS info (device loop1): enabling ssd optimizations [ 130.429524][ T7216] BTRFS info (device loop1): auto enabling async discard [ 130.649597][ T28] audit: type=1800 audit(1792501536.304:21): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.448" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 130.916296][ T7275] loop3: detected capacity change from 0 to 128 [ 131.021519][ T7275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 131.061161][ T7275] System zones: 1-3, 19-19, 35-36 [ 131.112304][ T7275] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.130859][ T28] audit: type=1400 audit(1792501536.774:22): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7279 comm="syz.2.458" [ 131.161358][ T7275] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.193381][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.242782][ T5781] BTRFS info (device loop1): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 131.491995][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.567530][ T7236] loop4: detected capacity change from 0 to 40427 [ 131.605748][ T7289] raw_sendmsg: syz.1.459 forgot to set AF_INET. Fix it! [ 131.651505][ T7236] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 131.770998][ T7236] F2FS-fs (loop4): invalid crc value [ 131.861634][ T7236] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.043153][ T7236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.198349][ T7236] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 132.289233][ T7314] loop2: detected capacity change from 0 to 2048 [ 132.321755][ T7314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.375690][ T7318] capability: warning: `syz.3.468' uses deprecated v2 capabilities in a way that may be insecure [ 132.648982][ T7324] loop3: detected capacity change from 0 to 16 [ 132.727327][ T7324] erofs: (device loop3): mounted with root inode @ nid 36. [ 132.937435][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986936][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 133.261978][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.403255][ T7322] loop2: detected capacity change from 0 to 32768 [ 133.441234][ T7322] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.452985][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 133.473029][ T8] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 133.492422][ T7322] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 133.518193][ T8] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.538366][ T7322] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.547033][ T7351] loop3: detected capacity change from 0 to 512 [ 133.557505][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.577055][ T7322] BTRFS info (device loop2): use lzo compression, level 0 [ 133.586276][ T8] usb 2-1: Product: syz [ 133.592093][ T7351] EXT4-fs: Ignoring removed nobh option [ 133.598217][ T8] usb 2-1: Manufacturer: syz [ 133.603410][ T7322] BTRFS info (device loop2): force clearing of disk cache [ 133.628199][ T8] usb 2-1: SerialNumber: syz [ 133.630988][ T7351] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 133.640123][ T7322] BTRFS info (device loop2): turning on sync discard [ 133.650171][ T8] usb 2-1: config 0 descriptor?? [ 133.658597][ T7322] BTRFS warning (device loop2): excessive commit interval 43283 [ 133.671106][ T7322] BTRFS info (device loop2): enabling ssd optimizations [ 133.671967][ T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.688049][ T8] usb 2-1: setting power ON [ 133.693242][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 133.702347][ T7351] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 133.718624][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.724103][ T7322] BTRFS info (device loop2): using spread ssd allocation scheme [ 133.737873][ T7351] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.477: inode has both inline data and extents flags [ 133.741348][ T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.781010][ T8] usb 2-1: media controller created [ 133.785363][ T7322] BTRFS info (device loop2): not using ssd optimizations [ 133.800743][ T7351] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.477: couldn't read orphan inode 13 (err -117) [ 133.823562][ T7322] BTRFS info (device loop2): not using spread ssd allocation scheme [ 133.843552][ T7322] BTRFS info (device loop2): using free space tree [ 133.865031][ T7351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.868447][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.918580][ T7331] dvb-usb: bulk message failed: -22 (3/0) [ 133.931339][ T7331] dvb-usb: bulk message failed: -22 (4/0) [ 133.937114][ T7331] cxusb: i2c read failed [ 133.992410][ T8] usb 2-1: selecting invalid altsetting 6 [ 134.000032][ T7351] EXT4-fs (loop3): shut down requested (2) [ 134.010119][ T8] usb 2-1: digital interface selection failed (-22) [ 134.031456][ T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 134.071357][ T8] usb 2-1: setting power OFF [ 134.076631][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 134.091759][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.115843][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 134.128097][ T7322] BTRFS info (device loop2): rebuilding free space tree [ 134.197667][ T8] (NULL device *): no alternate interface [ 134.347747][ T7382] loop3: detected capacity change from 0 to 512 [ 134.414701][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 134.438780][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.479539][ T7382] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.501159][ T8] usb 2-1: USB disconnect, device number 3 [ 134.631336][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.681596][ T7382] capability: warning: `syz.3.478' uses 32-bit capabilities (legacy support in use) [ 134.809127][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.875347][ T5842] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.931068][ T5842] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.969199][ T5842] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.997678][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.013702][ T7401] loop3: detected capacity change from 0 to 8 [ 135.042198][ T7384] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.070343][ T5842] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 135.154655][ T7401] SQUASHFS error: Failed to read block 0x8f: -5 [ 135.172394][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.199645][ T28] audit: type=1800 audit(1792501540.864:23): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.481" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 135.237154][ T7401] SQUASHFS error: Failed to read block 0x285: -5 [ 135.285271][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.303090][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.311069][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 135.317976][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 135.338612][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 135.347112][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.358352][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 135.378759][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 135.392477][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.417761][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 135.450871][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 135.466620][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.480925][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 135.520611][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 135.544539][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.545961][ T8] usb 5-1: USB disconnect, device number 4 [ 135.573931][ T7409] loop1: detected capacity change from 0 to 4096 [ 135.580655][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 135.587438][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 135.634066][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.680123][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 135.710434][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 135.734223][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 135.752839][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.791716][ T7412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.813155][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.820545][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 135.845885][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 135.858996][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 135.913885][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 135.920198][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 135.990576][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.015428][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.040954][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 136.062943][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 136.069241][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.097586][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 136.112089][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.139984][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 136.159349][ T7406] SQUASHFS error: Failed to read block 0x0: -5 [ 136.172630][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.180206][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.181028][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 136.190458][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 136.206827][ T7422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.486'. [ 136.228067][ T7406] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.233079][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.241249][ T7422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 136.248295][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.274413][ T7406] SQUASHFS error: read_indexes: reading block [283:0] [ 136.305467][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 136.319799][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.341279][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.348385][ T7401] SQUASHFS error: Failed to read block 0x0: -5 [ 136.354908][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.362851][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.369999][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.379164][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.389498][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.403593][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.421133][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.444755][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.485459][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.493303][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.500295][ T7401] SQUASHFS error: Unable to read metadata cache entry [283] [ 136.530431][ T7401] SQUASHFS error: read_indexes: reading block [283:0] [ 136.830916][ T5842] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 136.905941][ T7427] loop2: detected capacity change from 0 to 32768 [ 136.953996][ T7427] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 136.963520][ T5763] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.023478][ T5842] usb 5-1: not running at top speed; connect to a high speed hub [ 137.051517][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.089151][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.098775][ T7435] loop1: detected capacity change from 0 to 32768 [ 137.117331][ T7435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.492 (7435) [ 137.127337][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.164668][ T7435] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.169498][ T5842] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 137.195430][ T5763] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 137.204749][ T7435] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.215832][ T5763] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 137.230829][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.237929][ T7435] BTRFS info (device loop1): setting nodatasum [ 137.249997][ T5763] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.262287][ T7435] BTRFS info (device loop1): enabling auto defrag [ 137.279020][ T7435] BTRFS info (device loop1): disabling tree log [ 137.285658][ T5842] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 137.300678][ T7435] BTRFS info (device loop1): using free space tree [ 137.307377][ T5763] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 137.307406][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.307425][ T5763] usb 4-1: Product: syz [ 137.307440][ T5763] usb 4-1: Manufacturer: syz [ 137.323362][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 137.328267][ T7427] syz.2.489 (7427) used greatest stack depth: 18808 bytes left [ 137.353590][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 137.417698][ T5842] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 137.465824][ T7435] BTRFS info (device loop1): enabling ssd optimizations [ 137.477864][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 137.485049][ T7435] BTRFS info (device loop1): auto enabling async discard [ 137.492132][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 137.492239][ T5842] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 137.494203][ T5842] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.528474][ T7433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.546087][ T7433] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.624361][ T5763] dvb_ttusb_budget: ttusb_init_controller: error [ 137.665212][ T5763] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 137.786813][ T7433] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 137.828692][ T5763] DVB: Unable to find symbol cx22700_attach() [ 137.874484][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.907127][ T5763] DVB: Unable to find symbol tda10046_attach() [ 137.918790][ T5763] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 137.966098][ T5763] usb 4-1: USB disconnect, device number 6 [ 138.184566][ T8] usb 5-1: USB disconnect, device number 5 [ 138.206924][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 138.241035][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.249451][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 138.289152][ T8] keyspan 5-1:1.0: device disconnected [ 138.453627][ T5873] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.473629][ T5873] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.486966][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.493743][ T5873] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 138.503821][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.528469][ T5873] usb 3-1: config 0 descriptor?? [ 138.921910][ T7476] loop4: detected capacity change from 0 to 512 [ 138.935758][ T7476] EXT4-fs: Ignoring removed i_version option [ 138.968465][ T7476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.986069][ T7476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.012252][ T5873] playstation 0003:054C:09CC.0004: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 139.054950][ T7476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.079206][ T7476] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.197152][ T5873] playstation 0003:054C:09CC.0004: Invalid reportID received, expected 18 got 161 [ 139.241889][ T5873] playstation 0003:054C:09CC.0004: Failed to retrieve DualShock4 pairing info: -22 [ 139.259259][ T7486] batadv_slave_1: entered promiscuous mode [ 139.265541][ T7486] macvlan3: entered allmulticast mode [ 139.275998][ T7486] batadv_slave_1: entered allmulticast mode [ 139.281427][ T5873] playstation 0003:054C:09CC.0004: Failed to get MAC address from DualShock4 [ 139.285618][ T7486] batman_adv: batadv0: Adding interface: macvlan3 [ 139.301014][ T5873] playstation 0003:054C:09CC.0004: Failed to create dualshock4. [ 139.314861][ T7486] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.340271][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.355215][ T6316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.366731][ T5873] playstation: probe of 0003:054C:09CC.0004 failed with error -22 [ 139.375120][ T7486] batman_adv: batadv0: Interface activated: macvlan3 [ 139.465870][ T5763] usb 3-1: USB disconnect, device number 10 [ 139.835050][ T7488] loop3: detected capacity change from 0 to 32768 [ 139.871102][ T7488] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.933101][ T7488] XFS (loop3): Ending clean mount [ 140.099996][ T7495] loop4: detected capacity change from 0 to 32768 [ 140.129302][ T7495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.508 (7495) [ 140.175412][ T7495] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.186348][ T7495] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 140.199563][ T5780] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.214569][ T7495] BTRFS info (device loop4): use zlib compression, level 3 [ 140.222099][ T7495] BTRFS info (device loop4): using free space tree [ 140.281606][ T7515] kernel read not supported for file /eth0 (pid: 7515 comm: syz.1.512) [ 140.332968][ T7525] loop2: detected capacity change from 0 to 128 [ 140.350995][ T7527] 9pnet_fd: Insufficient options for proto=fd [ 140.357317][ T28] audit: type=1800 audit(1792501546.014:24): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.512" name="eth0" dev="mqueue" ino=13160 res=0 errno=0 [ 140.392815][ T7495] BTRFS info (device loop4): enabling ssd optimizations [ 140.399830][ T7495] BTRFS info (device loop4): auto enabling async discard [ 140.418402][ T7525] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.490985][ T7525] hpfs: filesystem error: improperly stopped [ 140.497053][ T7525] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.540919][ T7525] hpfs: You really don't want any checks? You are crazy... [ 140.548283][ T7525] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 140.581652][ T7525] hpfs: code page support is disabled [ 140.600044][ T7525] hpfs: hpfs_map_4sectors(): unaligned read [ 140.641162][ T7525] hpfs: hpfs_map_4sectors(): unaligned read [ 140.647128][ T7525] hpfs: filesystem error: unable to find root dir [ 140.676750][ T6316] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.778811][ T7525] hpfs: hpfs_map_4sectors(): unaligned read [ 140.968880][ T7536] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 141.019531][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 141.465507][ T7557] loop1: detected capacity change from 0 to 64 [ 142.240946][ T5851] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 142.392285][ T7604] loop3: detected capacity change from 0 to 128 [ 142.417583][ T7604] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.431886][ T7604] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.445662][ T5851] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.478726][ T5851] usb 5-1: config 0 has no interface number 0 [ 142.492386][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.516088][ T5851] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.577517][ T5851] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.597680][ T5851] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.617028][ T5851] usb 5-1: config 0 interface 1 has no altsetting 0 [ 142.625718][ T5851] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 142.639935][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.657482][ T5851] usb 5-1: config 0 descriptor?? [ 142.816013][ T7617] sctp: [Deprecated]: syz.2.551 (pid 7617) Use of int in maxseg socket option. [ 142.816013][ T7617] Use struct sctp_assoc_value instead [ 143.128118][ T7612] loop1: detected capacity change from 0 to 40427 [ 143.149733][ T7612] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.167554][ T7612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.189708][ T7612] F2FS-fs (loop1): invalid crc value [ 143.220901][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.293880][ T5851] uclogic 0003:145F:0212.0005: pen parameters not found [ 143.315090][ T5851] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 143.416864][ T7612] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.427231][ T7612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.437598][ T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 143.450863][ T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 50 [ 143.467603][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.485821][ T7612] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 143.513278][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 143.540968][ T5842] usb 5-1: USB disconnect, device number 6 [ 143.547006][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.564628][ T27] usb 3-1: Product: syz [ 143.569098][ T27] usb 3-1: Manufacturer: syz [ 143.625222][ T7636] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 143.654413][ T7636] bond1 (unregistering): Released all slaves [ 143.832475][ T7619] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.839892][ T7619] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.931184][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 143.937615][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.028201][ T27] DVB: Unable to find symbol cx22700_attach() [ 144.083003][ T27] DVB: Unable to find symbol tda10046_attach() [ 144.089236][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.112673][ T7619] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 144.257971][ T5763] usb 3-1: USB disconnect, device number 11 [ 144.262210][ T7650] loop4: detected capacity change from 0 to 128 [ 144.308537][ T7650] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.354304][ T28] audit: type=1800 audit(1792501550.024:25): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.563" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 144.790943][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.000932][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 145.024946][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.053318][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.083666][ T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 145.124415][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.149002][ T28] audit: type=1400 audit(1792501550.814:26): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7666 comm="syz.2.571" name="unknown" offset=16 [ 145.153072][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 145.220916][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.256779][ T8] usb 4-1: config 0 descriptor?? [ 145.490407][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.521548][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.072716][ T5763] usb 4-1: USB disconnect, device number 7 [ 146.287409][ T7715] Bluetooth: MGMT ver 1.22 [ 146.311241][ T7712] kvm: kvm [7711]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 146.365559][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 146.384171][ T7717] netlink: 'syz.4.593': attribute type 30 has an invalid length. [ 146.394021][ T7719] loop2: detected capacity change from 0 to 128 [ 146.415543][ T7719] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 146.415836][ T7717] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.426607][ T7717] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.443717][ T7717] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.453306][ T7717] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.488091][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 146.529362][ T7719] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 146.547247][ T7720] netlink: 'syz.4.593': attribute type 30 has an invalid length. [ 146.990990][ T56] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 147.192311][ T56] usb 3-1: not running at top speed; connect to a high speed hub [ 147.202419][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.220966][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.252859][ T56] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 147.271644][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 147.286225][ T56] usb 3-1: Product: syz [ 147.287592][ T7736] loop3: detected capacity change from 0 to 32768 [ 147.294390][ T56] usb 3-1: Manufacturer: syz [ 147.314345][ T56] hub 3-1:1.0: USB hub found [ 147.328581][ T7736] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 147.351720][ T7736] JBD2: Ignoring recovery information on journal [ 147.391167][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.422527][ T7736] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.524875][ T56] hub 3-1:1.0: config failed, can't read hub descriptor (err -90) [ 147.534634][ T56] usbtouchscreen: probe of 3-1:1.0 failed with error -12 [ 147.559252][ T28] audit: type=1800 audit(1792501553.224:27): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.601" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 147.585172][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 147.603040][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.612543][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.638854][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.648659][ T8] pvrusb2: ********** [ 147.654871][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.666010][ T8] pvrusb2: Important functionality might not be entirely working. [ 147.674421][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.688519][ T8] pvrusb2: ********** [ 147.722048][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 147.854677][ T2322] pvrusb2: Invalid write control endpoint [ 147.918465][ T8] usb 3-1: USB disconnect, device number 12 [ 148.002706][ T2322] pvrusb2: Invalid write control endpoint [ 148.008823][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.060880][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.068510][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.094451][ T2322] pvrusb2: Device being rendered inoperable [ 148.109260][ T7745] pvrusb2: Attempted to execute control transfer when device not ok [ 148.131696][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.139409][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 148.150467][ T27] usb 2-1: USB disconnect, device number 4 [ 148.189697][ T2322] pvrusb2: Attached sub-driver cx25840 [ 148.211401][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.229609][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.683091][ T7778] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.750881][ T5763] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.952230][ T5763] usb 5-1: Using ep0 maxpacket: 8 [ 148.960133][ T5763] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 148.968720][ T5763] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.981422][ T5763] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.991687][ T5763] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 149.003395][ T5763] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 149.014315][ T5763] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.027614][ T5763] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.036764][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.141298][ T5763] usb 5-1: usb_control_msg returned -110 [ 154.147032][ T5763] usbtmc 5-1:16.0: can't read capabilities [ 194.375576][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382134][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.570871][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 201.589668][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 201.594702][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 247.661011][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 255.815960][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823388][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.691018][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 298.698802][ T29] Not tainted syzkaller #0 [ 298.712361][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.721567][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000 [ 298.737627][ T29] Call Trace: [ 298.741041][ T29] [ 298.744200][ T29] __schedule+0x15ae/0x4660 [ 298.748770][ T29] ? asan.module_dtor+0x20/0x20 [ 298.753674][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 298.758761][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 298.764748][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 298.769967][ T29] schedule+0xbd/0x170 [ 298.774155][ T29] io_schedule+0x80/0xd0 [ 298.778417][ T29] bit_wait_io+0x11/0xd0 [ 298.782772][ T29] __wait_on_bit+0x9f/0x2c0 [ 298.787291][ T29] ? bit_wait+0xd0/0xd0 [ 298.791752][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 298.797227][ T29] ? bit_wait+0xd0/0xd0 [ 298.801559][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 298.806354][ T29] ? do_raw_write_lock+0x11e/0x260 [ 298.811517][ T29] ? bit_waitqueue+0x30/0x30 [ 298.816117][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 298.821236][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 298.827865][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 298.834702][ T29] ? lock_chain_count+0x20/0x20 [ 298.839595][ T29] ? _raw_spin_unlock+0x40/0x40 [ 298.844535][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 298.850198][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 298.855582][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 298.860633][ T29] ? timer_delete_sync+0x20/0x20 [ 298.865665][ T29] ? do_raw_read_unlock+0x80/0x80 [ 298.870747][ T29] ? prepare_to_wait+0x1aa/0x200 [ 298.875750][ T29] kjournald2+0x40f/0x810 [ 298.880114][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 298.885344][ T29] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 298.891322][ T29] ? wake_bit_function+0x200/0x200 [ 298.896464][ T29] ? _raw_spin_unlock+0x40/0x40 [ 298.901412][ T29] ? __kthread_parkme+0x71/0x1c0 [ 298.906383][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 298.911615][ T29] kthread+0x2fa/0x390 [ 298.915693][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 298.920937][ T29] ? kthread_blkcg+0xd0/0xd0 [ 298.925941][ T29] ret_from_fork+0x48/0x80 [ 298.930375][ T29] ? kthread_blkcg+0xd0/0xd0 [ 298.935207][ T29] ret_from_fork_asm+0x11/0x20 [ 298.940020][ T29] [ 298.943151][ T29] INFO: task syz-executor:5761 blocked for more than 143 seconds. [ 298.950995][ T29] Not tainted syzkaller #0 [ 298.955956][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.964694][ T29] task:syz-executor state:D stack:22600 pid:5761 ppid:5760 flags:0x00004002 [ 298.973961][ T29] Call Trace: [ 298.977248][ T29] [ 298.980200][ T29] __schedule+0x15ae/0x4660 [ 298.984823][ T29] ? mark_lock+0x94/0x320 [ 298.989185][ T29] ? asan.module_dtor+0x20/0x20 [ 298.994090][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 298.999129][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.005109][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 299.010325][ T29] schedule+0xbd/0x170 [ 299.014873][ T29] io_schedule+0x80/0xd0 [ 299.019143][ T29] bit_wait_io+0x11/0xd0 [ 299.023610][ T29] __wait_on_bit+0x9f/0x2c0 [ 299.028516][ T29] ? bit_wait+0xd0/0xd0 [ 299.032744][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 299.038233][ T29] ? bit_wait+0xd0/0xd0 [ 299.042416][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 299.047186][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.052258][ T29] ? bit_waitqueue+0x30/0x30 [ 299.056879][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 299.062156][ T29] do_get_write_access+0x5c9/0xe00 [ 299.067290][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 299.073333][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 299.079502][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 299.085738][ T29] ? __might_sleep+0xe0/0xe0 [ 299.090389][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 299.096688][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 299.102267][ T29] ext4_dirty_inode+0xcb/0x110 [ 299.107066][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 299.112921][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 299.117967][ T29] file_update_time+0x187/0x1a0 [ 299.122889][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 299.127929][ T29] ? do_wp_page+0x4ce/0x34d0 [ 299.133082][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 299.139392][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.144506][ T29] do_page_mkwrite+0x153/0x3f0 [ 299.149311][ T29] do_wp_page+0xd4d/0x34d0 [ 299.153804][ T29] ? folio_put+0xd0/0xd0 [ 299.158074][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.163136][ T29] ? __rwlock_init+0x150/0x150 [ 299.167915][ T29] handle_mm_fault+0x1306/0x4a50 [ 299.172992][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 299.177957][ T29] ? numa_migrate_prep+0x350/0x350 [ 299.183168][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 299.188496][ T29] do_user_addr_fault+0x736/0x12d0 [ 299.193692][ T29] exc_page_fault+0x64/0x100 [ 299.198304][ T29] ? clear_bhb_loop+0x40/0x90 [ 299.203058][ T29] asm_exc_page_fault+0x26/0x30 [ 299.207951][ T29] RIP: 0033:0x7f4c9047dae2 [ 299.212533][ T29] RSP: 002b:00007ffc7d49f650 EFLAGS: 00010202 [ 299.218606][ T29] RAX: 00007f4c8e2fc000 RBX: 000055558e526cb0 RCX: 0000000000000006 [ 299.226663][ T29] RDX: 0000000000000b99 RSI: 000055558e523418 RDI: 0000000000000040 [ 299.235089][ T29] RBP: 00007ffc7d49fb50 R08: 000055558e5234f8 R09: 0000000000000091 [ 299.243339][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc7d49f990 [ 299.253886][ T29] R13: 00007ffc7d49f780 R14: 585858582e7a7973 R15: 00007ffc7d49f6d0 [ 299.262031][ T29] [ 299.265085][ T29] INFO: task syz.1.605:7744 blocked for more than 143 seconds. [ 299.272712][ T29] Not tainted syzkaller #0 [ 299.277655][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.286384][ T29] task:syz.1.605 state:D stack:27048 pid:7744 ppid:5781 flags:0x00004004 [ 299.295676][ T29] Call Trace: [ 299.298952][ T29] [ 299.301973][ T29] __schedule+0x15ae/0x4660 [ 299.306546][ T29] ? mark_lock+0x94/0x320 [ 299.310922][ T29] ? asan.module_dtor+0x20/0x20 [ 299.315801][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.320903][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.326822][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 299.332148][ T29] schedule+0xbd/0x170 [ 299.336640][ T29] io_schedule+0x80/0xd0 [ 299.341017][ T29] bit_wait_io+0x11/0xd0 [ 299.345280][ T29] __wait_on_bit+0x9f/0x2c0 [ 299.349772][ T29] ? bit_wait+0xd0/0xd0 [ 299.354126][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 299.359631][ T29] ? bit_wait+0xd0/0xd0 [ 299.363815][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 299.368614][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.373722][ T29] ? bit_waitqueue+0x30/0x30 [ 299.378327][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 299.383622][ T29] do_get_write_access+0x5c9/0xe00 [ 299.388829][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 299.394866][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 299.401068][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 299.407231][ T29] ? __might_sleep+0xe0/0xe0 [ 299.411911][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 299.417472][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 299.423090][ T29] ext4_dirty_inode+0xcb/0x110 [ 299.427869][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 299.433741][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 299.439186][ T29] file_update_time+0x187/0x1a0 [ 299.444149][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 299.449186][ T29] ? filemap_fault+0x103c/0x1540 [ 299.454161][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 299.459926][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 299.466368][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.471476][ T29] ? __pte_offset_map+0x20d/0x280 [ 299.476517][ T29] do_page_mkwrite+0x153/0x3f0 [ 299.481330][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 299.486287][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 299.491335][ T29] ? numa_migrate_prep+0x350/0x350 [ 299.496489][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 299.501878][ T29] do_user_addr_fault+0x736/0x12d0 [ 299.507066][ T29] exc_page_fault+0x64/0x100 [ 299.511708][ T29] asm_exc_page_fault+0x26/0x30 [ 299.516569][ T29] RIP: 0033:0x7f4daa274332 [ 299.521022][ T29] RSP: 002b:00007ffddccea340 EFLAGS: 00010202 [ 299.527121][ T29] RAX: 0000000000014008 RBX: 00007f4dab155720 RCX: 0000000000000000 [ 299.535141][ T29] RDX: 0000001b2dc10000 RSI: 0000000000000008 RDI: 00007f4dab155720 [ 299.543737][ T29] RBP: 0000000000000686 R08: 00007f4daa610000 R09: 00007f4daa625f40 [ 299.551786][ T29] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff866fc17d [ 299.559805][ T29] R13: 00007f4daa625f40 R14: 00000000000001da R15: fffffffffffec000 [ 299.567829][ T29] ? usb_remove_ep_devs+0x1d/0x80 [ 299.573119][ T29] [ 299.576162][ T29] INFO: task syz.3.618:7773 blocked for more than 144 seconds. [ 299.583799][ T29] Not tainted syzkaller #0 [ 299.588760][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.597486][ T29] task:syz.3.618 state:D stack:27048 pid:7773 ppid:5780 flags:0x00004004 [ 299.606751][ T29] Call Trace: [ 299.610025][ T29] [ 299.613005][ T29] __schedule+0x15ae/0x4660 [ 299.617572][ T29] ? mark_lock+0x94/0x320 [ 299.622005][ T29] ? asan.module_dtor+0x20/0x20 [ 299.626871][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.631946][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.637859][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 299.643531][ T29] schedule+0xbd/0x170 [ 299.647641][ T29] io_schedule+0x80/0xd0 [ 299.652047][ T29] bit_wait_io+0x11/0xd0 [ 299.656333][ T29] __wait_on_bit+0x9f/0x2c0 [ 299.660956][ T29] ? bit_wait+0xd0/0xd0 [ 299.665146][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 299.670623][ T29] ? bit_wait+0xd0/0xd0 [ 299.674880][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 299.679646][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.684848][ T29] ? bit_waitqueue+0x30/0x30 [ 299.689513][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 299.694759][ T29] do_get_write_access+0x5c9/0xe00 [ 299.699920][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 299.706016][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 299.712236][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 299.718399][ T29] ? __might_sleep+0xe0/0xe0 [ 299.723050][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 299.728613][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 299.734252][ T29] ext4_dirty_inode+0xcb/0x110 [ 299.739069][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 299.745368][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 299.750444][ T29] file_update_time+0x187/0x1a0 [ 299.755386][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 299.760432][ T29] ? filemap_fault+0x103c/0x1540 [ 299.765470][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 299.771243][ T29] ? pte_alloc_one+0x3b6/0x540 [ 299.776043][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 299.782378][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.787474][ T29] do_page_mkwrite+0x153/0x3f0 [ 299.792500][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 299.797463][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 299.802477][ T29] ? numa_migrate_prep+0x350/0x350 [ 299.807629][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 299.812961][ T29] do_user_addr_fault+0x736/0x12d0 [ 299.818098][ T29] exc_page_fault+0x64/0x100 [ 299.822817][ T29] asm_exc_page_fault+0x26/0x30 [ 299.827696][ T29] RIP: 0033:0x7f9504c73c09 [ 299.832185][ T29] RSP: 002b:00007ffe7e666960 EFLAGS: 00010202 [ 299.838325][ T29] RAX: 0000001b2de24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 299.846728][ T29] RDX: 0000001b2de23ffc RSI: 00000000005ffde8 RDI: 00007f9505b55700 [ 299.854768][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f9505012000 [ 299.862847][ T29] R10: 00007f9505b55700 R11: 0000000000000001 R12: 0000000000000000 [ 299.870867][ T29] R13: 0000000000004463 R14: ffffffff81322060 R15: 00007f9505b55720 [ 299.878872][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 299.884990][ T29] [ 299.888052][ T29] INFO: task syz.4.619:7775 blocked for more than 144 seconds. [ 299.895685][ T29] Not tainted syzkaller #0 [ 299.900633][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.909521][ T29] task:syz.4.619 state:D stack:27048 pid:7775 ppid:6316 flags:0x00004004 [ 299.918768][ T29] Call Trace: [ 299.922116][ T29] [ 299.925056][ T29] __schedule+0x15ae/0x4660 [ 299.929562][ T29] ? mark_lock+0x94/0x320 [ 299.933957][ T29] ? asan.module_dtor+0x20/0x20 [ 299.938840][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.943952][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.950203][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 299.955530][ T29] schedule+0xbd/0x170 [ 299.959614][ T29] io_schedule+0x80/0xd0 [ 299.963907][ T29] bit_wait_io+0x11/0xd0 [ 299.968162][ T29] __wait_on_bit+0x9f/0x2c0 [ 299.972835][ T29] ? bit_wait+0xd0/0xd0 [ 299.977023][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 299.982618][ T29] ? bit_wait+0xd0/0xd0 [ 299.986815][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 299.991642][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 299.996688][ T29] ? bit_waitqueue+0x30/0x30 [ 300.001323][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 300.006558][ T29] do_get_write_access+0x5c9/0xe00 [ 300.011869][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 300.017891][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.024183][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.030377][ T29] ? __might_sleep+0xe0/0xe0 [ 300.035027][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 300.040606][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.046115][ T29] ext4_dirty_inode+0xcb/0x110 [ 300.051353][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.057317][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 300.062492][ T29] file_update_time+0x187/0x1a0 [ 300.067380][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.072453][ T29] ? filemap_fault+0x103c/0x1540 [ 300.077404][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 300.083181][ T29] ? pte_alloc_one+0x3b6/0x540 [ 300.088009][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.094283][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.099300][ T29] do_page_mkwrite+0x153/0x3f0 [ 300.104159][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 300.109134][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 300.114113][ T29] ? numa_migrate_prep+0x350/0x350 [ 300.119239][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.124744][ T29] do_user_addr_fault+0x736/0x12d0 [ 300.129886][ T29] exc_page_fault+0x64/0x100 [ 300.135084][ T29] asm_exc_page_fault+0x26/0x30 [ 300.139982][ T29] RIP: 0033:0x7f0c06073c09 [ 300.144491][ T29] RSP: 002b:00007ffe72294ee0 EFLAGS: 00010202 [ 300.150571][ T29] RAX: 0000001b2ec24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 300.158919][ T29] RDX: 0000001b2ec23ffc RSI: 00000000005ffde8 RDI: 00007f0c06f55700 [ 300.166953][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0c06412000 [ 300.174986][ T29] R10: 00007f0c06f55700 R11: 0000000000000000 R12: 0000000000000000 [ 300.183060][ T29] R13: 0000000000010018 R14: ffffffff8132211e R15: 00007f0c06f55720 [ 300.191122][ T29] ? fpregs_activate+0x8e/0x1b0 [ 300.195999][ T29] [ 300.199020][ T29] INFO: task syz.2.620:7777 blocked for more than 144 seconds. [ 300.206646][ T29] Not tainted syzkaller #0 [ 300.211620][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.220294][ T29] task:syz.2.620 state:D stack:27048 pid:7777 ppid:5773 flags:0x00004004 [ 300.229627][ T29] Call Trace: [ 300.233040][ T29] [ 300.235989][ T29] __schedule+0x15ae/0x4660 [ 300.240543][ T29] ? mark_lock+0x94/0x320 [ 300.244937][ T29] ? asan.module_dtor+0x20/0x20 [ 300.249813][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.254923][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 300.261344][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 300.266570][ T29] schedule+0xbd/0x170 [ 300.270632][ T29] io_schedule+0x80/0xd0 [ 300.274952][ T29] bit_wait_io+0x11/0xd0 [ 300.279204][ T29] __wait_on_bit+0x9f/0x2c0 [ 300.283763][ T29] ? bit_wait+0xd0/0xd0 [ 300.287929][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 300.293534][ T29] ? bit_wait+0xd0/0xd0 [ 300.297701][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 300.302560][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 300.307655][ T29] ? bit_waitqueue+0x30/0x30 [ 300.312312][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 300.317525][ T29] do_get_write_access+0x5c9/0xe00 [ 300.322722][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 300.328715][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 300.334954][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 300.341363][ T29] ? __might_sleep+0xe0/0xe0 [ 300.345993][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 300.351575][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 300.357079][ T29] ext4_dirty_inode+0xcb/0x110 [ 300.362291][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 300.368138][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 300.373243][ T29] file_update_time+0x187/0x1a0 [ 300.378108][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 300.383239][ T29] ? filemap_fault+0x103c/0x1540 [ 300.388215][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 300.393972][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 300.400218][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 300.405343][ T29] ? __pte_offset_map+0x20d/0x280 [ 300.410395][ T29] do_page_mkwrite+0x153/0x3f0 [ 300.415239][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 300.420188][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 300.425246][ T29] ? numa_migrate_prep+0x350/0x350 [ 300.430381][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 300.435700][ T29] do_user_addr_fault+0x736/0x12d0 [ 300.440890][ T29] exc_page_fault+0x64/0x100 [ 300.445512][ T29] asm_exc_page_fault+0x26/0x30 [ 300.450345][ T29] RIP: 0033:0x7f47c0873ba9 [ 300.454934][ T29] RSP: 002b:00007ffe317531a0 EFLAGS: 00010202 [ 300.461436][ T29] RAX: 0000001b2dd1c000 RBX: ffffffff83edd175 RCX: 0000001b2dd1bff8 [ 300.469428][ T29] RDX: 0000001b2d72421c RSI: 0000000000000008 RDI: 00007f47c1755720 [ 300.477490][ T29] RBP: 000000000000012a R08: 00007f47c0c10000 R09: 00007f47c0c12000 [ 300.485513][ T29] R10: 0000000083edd179 R11: 0000000000000003 R12: 00007f47c0c26128 [ 300.493557][ T29] R13: 0000000000000bb9 R14: ffffffff83edd862 R15: 00007f47c1755720 [ 300.501581][ T29] ? security_mmap_file+0x122/0x180 [ 300.506814][ T29] ? fsnotify_perm+0x505/0x5e0 [ 300.511636][ T29] [ 300.514684][ T29] [ 300.514684][ T29] Showing all locks held in the system: [ 300.522503][ T29] 1 lock held by khungtaskd/29: [ 300.527358][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 300.537290][ T29] 6 locks held by kworker/u4:9/4321: [ 300.542618][ T29] #0: ffff88814005dd38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 300.553894][ T29] #1: ffffc9000e7d7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 300.566736][ T29] #2: ffff88814e33a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 300.577389][ T29] #3: ffff88814e33cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 300.587883][ T29] #4: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.597617][ T29] #5: ffff888076d96688 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 300.607446][ T29] 2 locks held by getty/5531: [ 300.612176][ T29] #0: ffff88802df170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 300.622015][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 300.632196][ T29] 3 locks held by syz-executor/5761: [ 300.637491][ T29] #0: ffff88807a616a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 300.647466][ T29] #1: ffff88814e33a510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 300.657282][ T29] #2: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.667334][ T29] 3 locks held by syz.1.605/7744: [ 300.672487][ T29] #0: ffff88807bbc4da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 300.682468][ T29] #1: ffff88814e33a510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 300.692399][ T29] #2: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.702150][ T29] 3 locks held by syz.3.618/7773: [ 300.707198][ T29] #0: ffff88807bbc1e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 300.717165][ T29] #1: ffff88814e33a510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 300.726970][ T29] #2: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.736690][ T29] 3 locks held by syz.4.619/7775: [ 300.741774][ T29] #0: ffff88807bbc27a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 300.751808][ T29] #1: ffff88814e33a510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 300.761667][ T29] #2: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.771906][ T29] 3 locks held by syz.2.620/7777: [ 300.776954][ T29] #0: ffff88807bbc14a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 300.787114][ T29] #1: ffff88814e33a510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 300.796955][ T29] #2: ffff88814e33e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 300.806708][ T29] [ 300.809059][ T29] ============================================= [ 300.809059][ T29] [ 300.817502][ T29] NMI backtrace for cpu 1 [ 300.821867][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 300.829082][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.839124][ T29] Call Trace: [ 300.842424][ T29] [ 300.845341][ T29] dump_stack_lvl+0x18c/0x250 [ 300.850006][ T29] ? __wake_up_klogd+0xd9/0x100 [ 300.854861][ T29] ? show_regs_print_info+0x20/0x20 [ 300.860062][ T29] ? load_image+0x420/0x420 [ 300.864559][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 300.869484][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 300.875633][ T29] ? load_image+0x420/0x420 [ 300.880144][ T29] ? wq_watchdog_touch+0xef/0x170 [ 300.885174][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 300.891243][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 300.897223][ T29] watchdog+0xf59/0xfa0 [ 300.901383][ T29] ? watchdog+0x1e1/0xfa0 [ 300.905715][ T29] kthread+0x2fa/0x390 [ 300.909779][ T29] ? hungtask_pm_notify+0x50/0x50 [ 300.914802][ T29] ? kthread_blkcg+0xd0/0xd0 [ 300.919390][ T29] ret_from_fork+0x48/0x80 [ 300.923803][ T29] ? kthread_blkcg+0xd0/0xd0 [ 300.928389][ T29] ret_from_fork_asm+0x11/0x20 [ 300.933157][ T29] [ 300.936219][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.942762][ T29] Sending NMI from CPU 1 to CPUs 0: [ 300.948103][ C0] NMI backtrace for cpu 0 [ 300.948114][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 300.948129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.948138][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 300.948162][ C0] Code: 99 17 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d d3 38 35 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 300.948174][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 300.948188][ C0] RAX: 69794ec81ecf9900 RBX: ffffffff81631f44 RCX: 69794ec81ecf9900 [ 300.948199][ C0] RDX: 0000000000000001 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 [ 300.948210][ C0] RBP: ffffffff8dc07eb8 R08: ffff8880b8c36b6b R09: 1ffff11017186d6d [ 300.948221][ C0] R10: dffffc0000000000 R11: ffffed1017186d6e R12: 1ffffffff1b80fbc [ 300.948232][ C0] R13: dffffc0000000000 R14: 1ffffffff1b92688 R15: 0000000000000000 [ 300.948242][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 300.948255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.948266][ C0] CR2: 000055d8f1bc0168 CR3: 00000000302f9000 CR4: 00000000003506f0 [ 300.948280][ C0] Call Trace: [ 300.948286][ C0] [ 300.948292][ C0] default_idle+0x13/0x20 [ 300.948310][ C0] default_idle_call+0x6c/0xa0 [ 300.948329][ C0] do_idle+0x334/0x5c0 [ 300.948348][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.948365][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 300.948387][ C0] ? do_idle+0x8/0x5c0 [ 300.948401][ C0] cpu_startup_entry+0x43/0x60 [ 300.948418][ C0] rest_init+0x2e2/0x300 [ 300.948435][ C0] ? time_init+0x40/0x40 [ 300.948451][ C0] arch_call_rest_init+0xe/0x10 [ 300.948469][ C0] start_kernel+0x461/0x4e0 [ 300.948487][ C0] x86_64_start_reservations+0x2a/0x30 [ 300.948503][ C0] x86_64_start_kernel+0x60/0x60 [ 300.948517][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 300.948544][ C0] [ 300.949225][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 301.148385][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 301.155583][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.165636][ T29] Call Trace: [ 301.168912][ T29] [ 301.171840][ T29] dump_stack_lvl+0x18c/0x250 [ 301.176521][ T29] ? show_regs_print_info+0x20/0x20 [ 301.181717][ T29] ? load_image+0x420/0x420 [ 301.186405][ T29] panic+0x2ca/0x720 [ 301.190299][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 301.194805][ T29] ? nmi_backtrace_stall_check+0x41e/0x430 [ 301.200614][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 301.206008][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 301.212177][ T29] watchdog+0xf98/0xfa0 [ 301.216344][ T29] ? watchdog+0x1e1/0xfa0 [ 301.220675][ T29] kthread+0x2fa/0x390 [ 301.224747][ T29] ? hungtask_pm_notify+0x50/0x50 [ 301.229771][ T29] ? kthread_blkcg+0xd0/0xd0 [ 301.234360][ T29] ret_from_fork+0x48/0x80 [ 301.238771][ T29] ? kthread_blkcg+0xd0/0xd0 [ 301.243353][ T29] ret_from_fork_asm+0x11/0x20 [ 301.248126][ T29] [ 301.251274][ T29] Kernel Offset: disabled [ 301.255588][ T29] Rebooting in 86400 seconds..