last executing test programs: 1m6.208533975s ago: executing program 3 (id=328): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 1m5.633201022s ago: executing program 3 (id=333): syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[], 0x1, 0x307, &(0x7f0000001b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x40000000, r0, 0x0) 1m5.483685969s ago: executing program 3 (id=334): unshare(0x400) r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x22020400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 2.550467841s ago: executing program 2 (id=697): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffff7, r0}, 0x38) 2.35482042s ago: executing program 2 (id=699): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) 1.843218514s ago: executing program 4 (id=703): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001540)=[{&(0x7f0000000340)="92", 0x1}], 0x1, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) splice(r0, 0x0, r2, 0x0, 0x1, 0xe) 1.837282994s ago: executing program 0 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) 1.583957146s ago: executing program 4 (id=705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0x6a7d, 0x4) 1.49659412s ago: executing program 2 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 1.409943425s ago: executing program 0 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000096, 0x0, 0x7}]}) 1.319001749s ago: executing program 4 (id=708): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84004, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 1.234116593s ago: executing program 2 (id=709): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) 1.212840023s ago: executing program 1 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000001400), 0x1, 0x7b0, &(0x7f0000001c00)="$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") ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, 0x0) 971.764164ms ago: executing program 0 (id=711): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 902.343417ms ago: executing program 4 (id=712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa900000000000000, 0xffff1000, 0x4000000000009, 0x0, 0x6}) 627.78125ms ago: executing program 0 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x8001, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x2}}, 0x30) 490.131547ms ago: executing program 2 (id=714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) 393.838911ms ago: executing program 1 (id=715): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) 316.593365ms ago: executing program 0 (id=716): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1020008, r0}) 302.564296ms ago: executing program 4 (id=717): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd7a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 46.376318ms ago: executing program 4 (id=718): setresgid(0xee00, 0xee01, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20, 0x1}}], 0x2, 0x0) 0s ago: executing program 0 (id=719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xd2}, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): [ 84.197706][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.223646][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.235839][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.242954][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.269528][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.291429][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.335284][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.380463][ T5775] hsr_slave_0: entered promiscuous mode [ 84.387783][ T5775] hsr_slave_1: entered promiscuous mode [ 84.394083][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.402038][ T5775] Cannot create hsr debugfs directory [ 84.455295][ T5776] hsr_slave_0: entered promiscuous mode [ 84.461869][ T5776] hsr_slave_1: entered promiscuous mode [ 84.468693][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.476303][ T5776] Cannot create hsr debugfs directory [ 84.485347][ T5774] team0: Port device team_slave_0 added [ 84.497745][ T51] Bluetooth: hci0: command tx timeout [ 84.503500][ T5790] Bluetooth: hci3: command tx timeout [ 84.535688][ T5774] team0: Port device team_slave_1 added [ 84.577051][ T5790] Bluetooth: hci1: command tx timeout [ 84.582725][ T5790] Bluetooth: hci2: command tx timeout [ 84.615335][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.622406][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.649322][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.691852][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.702075][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.728881][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.881294][ T5774] hsr_slave_0: entered promiscuous mode [ 84.888077][ T5774] hsr_slave_1: entered promiscuous mode [ 84.894669][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.904900][ T5774] Cannot create hsr debugfs directory [ 85.031463][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.062805][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.079168][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.090844][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.185455][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.197870][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.230932][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.257376][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.338029][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.355154][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.374958][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.392298][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.508099][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.523845][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.534043][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.554618][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.609652][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.662229][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.691770][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.705033][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.712576][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.775903][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.783117][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.824407][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.869397][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.935111][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.942539][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.954239][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.961543][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.005215][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.044424][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.051621][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.074407][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.123806][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.131074][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.192976][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.292946][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.330916][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.338243][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.390085][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.397343][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.577849][ T51] Bluetooth: hci0: command tx timeout [ 86.583924][ T5790] Bluetooth: hci3: command tx timeout [ 86.614446][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.657779][ T51] Bluetooth: hci1: command tx timeout [ 86.663309][ T5790] Bluetooth: hci2: command tx timeout [ 86.803019][ T5775] veth0_vlan: entered promiscuous mode [ 86.840247][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.865458][ T5775] veth1_vlan: entered promiscuous mode [ 86.910103][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.980609][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.072477][ T5777] veth0_vlan: entered promiscuous mode [ 87.115959][ T5774] veth0_vlan: entered promiscuous mode [ 87.128518][ T5775] veth0_macvtap: entered promiscuous mode [ 87.138006][ T5777] veth1_vlan: entered promiscuous mode [ 87.167891][ T5775] veth1_macvtap: entered promiscuous mode [ 87.193542][ T5774] veth1_vlan: entered promiscuous mode [ 87.224994][ T5776] veth0_vlan: entered promiscuous mode [ 87.236429][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.274293][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.311303][ T5776] veth1_vlan: entered promiscuous mode [ 87.334658][ T5777] veth0_macvtap: entered promiscuous mode [ 87.374231][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.384442][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.401533][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.410847][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.430018][ T5774] veth0_macvtap: entered promiscuous mode [ 87.444114][ T5777] veth1_macvtap: entered promiscuous mode [ 87.462995][ T5776] veth0_macvtap: entered promiscuous mode [ 87.507384][ T5774] veth1_macvtap: entered promiscuous mode [ 87.528880][ T5776] veth1_macvtap: entered promiscuous mode [ 87.590667][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.605679][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.622371][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.634396][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.645435][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.658665][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.680776][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.692249][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.703009][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.713945][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.726089][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.764643][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.778920][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.789166][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.810065][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.821516][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.835631][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.851506][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.870490][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.883979][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.894346][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906816][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.935364][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.952178][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.962463][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.973788][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.985433][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.996260][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.010318][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.021022][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.031677][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.042495][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.053183][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.065011][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.082106][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.091527][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.108328][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.117277][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.134192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.142884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.155127][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.167126][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175892][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185828][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.264205][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.274291][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.422253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.435074][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.484233][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.525699][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.626573][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.637713][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.657316][ T5790] Bluetooth: hci3: command tx timeout [ 88.659009][ T51] Bluetooth: hci0: command tx timeout [ 88.694247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.737501][ T51] Bluetooth: hci2: command tx timeout [ 88.742968][ T51] Bluetooth: hci1: command tx timeout [ 88.768144][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.913769][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.928120][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.979856][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.993092][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.107460][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.288792][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.327003][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 89.340041][ T5815] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 89.357504][ T5815] usb 3-1: config 0 has no interface number 0 [ 89.371356][ T5815] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 89.394569][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.405297][ T5815] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 89.438746][ T5815] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.457910][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.486548][ T5815] usb 3-1: Product: syz [ 89.491164][ T5815] usb 3-1: Manufacturer: syz [ 89.501999][ T5844] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.516711][ T5815] usb 3-1: SerialNumber: syz [ 89.526842][ T5844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.565315][ T5815] usb 3-1: config 0 descriptor?? [ 89.571880][ T5844] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.590891][ T5841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.598545][ T5856] syz.1.8[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.608798][ T5841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.616306][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.650285][ T5844] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.663641][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.679574][ T5858] mmap: syz.3.9 (5858) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.682936][ T5856] loop1: detected capacity change from 0 to 512 [ 89.691631][ T5844] usb 1-1: Product: syz [ 89.691704][ T5844] usb 1-1: Manufacturer: syz [ 89.716228][ T5844] cdc_wdm 1-1:1.0: skipping garbage [ 89.736855][ T5844] cdc_wdm 1-1:1.0: skipping garbage [ 89.776525][ T5844] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 89.805307][ T5844] cdc_wdm 1-1:1.0: Unknown control protocol [ 89.857214][ T5841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.870797][ T5841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.107408][ T5815] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 90.310872][ T27] usb 1-1: USB disconnect, device number 2 [ 90.336993][ T5815] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 84 [ 90.425613][ T5867] ip_tables: iptables: counters copy to user failed while replacing table [ 90.571993][ T5872] loop3: detected capacity change from 0 to 2048 [ 90.624778][ T5815] usb 3-1: USB disconnect, device number 2 [ 90.648802][ T5872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.688906][ T5872] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 90.739390][ T51] Bluetooth: hci0: command tx timeout [ 90.739403][ T5790] Bluetooth: hci3: command tx timeout [ 90.816868][ T5790] Bluetooth: hci2: command tx timeout [ 90.819284][ T51] Bluetooth: hci1: command tx timeout [ 90.860705][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.532839][ T5900] capability: warning: `syz.3.25' uses deprecated v2 capabilities in a way that may be insecure [ 91.788370][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.992223][ T5835] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 92.011896][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.027841][ T1201] cfg80211: failed to load regulatory.db [ 92.041888][ T5835] usb 3-1: Product: syz [ 92.046123][ T5835] usb 3-1: Manufacturer: syz [ 92.061485][ T5835] usb 3-1: SerialNumber: syz [ 92.087749][ T5835] usb 3-1: config 0 descriptor?? [ 92.104090][ T5835] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 92.132790][ T5908] loop1: detected capacity change from 0 to 1024 [ 92.148259][ T5908] EXT4-fs: Ignoring removed orlov option [ 92.173635][ T5904] loop3: detected capacity change from 0 to 40427 [ 92.204160][ T5904] F2FS-fs (loop3): invalid crc value [ 92.226448][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.263629][ T5904] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.348948][ T5904] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.389150][ T5908] EXT4-fs warning (device loop1): ext4_resize_fs:2025: can't read last block, resize aborted [ 92.531392][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.587916][ T5911] f2fs_ckpt-7:3: attempt to access beyond end of device [ 92.587916][ T5911] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 92.639346][ T5911] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 92.653716][ T5911] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 92.968102][ T5835] gspca_sunplus: reg_w_riv err -71 [ 92.985912][ T5835] sunplus: probe of 3-1:0.0 failed with error -71 [ 93.000044][ T5925] loop1: detected capacity change from 0 to 1024 [ 93.018990][ T5835] usb 3-1: USB disconnect, device number 3 [ 93.523223][ T5929] kAFS: bad VL server IP address [ 93.734280][ T5935] loop3: detected capacity change from 0 to 512 [ 93.761967][ T28] audit: type=1326 audit(1789669512.645:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 93.837507][ T28] audit: type=1326 audit(1789669512.645:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 93.861212][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.925164][ T5935] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.926932][ T28] audit: type=1326 audit(1789669512.645:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 93.955379][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.962853][ T28] audit: type=1326 audit(1789669512.645:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 93.987312][ T28] audit: type=1326 audit(1789669512.645:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 94.010888][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.018925][ T28] audit: type=1326 audit(1789669512.645:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 94.042580][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.049186][ T28] audit: type=1326 audit(1789669512.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 94.072833][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.087834][ T5935] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 94.130186][ T5935] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 94.142625][ T28] audit: type=1326 audit(1789669512.645:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.1.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 94.167009][ T5935] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.38: Failed to acquire dquot type 0 [ 94.198935][ T5935] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.38: Failed to acquire dquot type 0 [ 94.259377][ T5942] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 94.276330][ T5935] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.38: bg 0: block 64: padding at end of block bitmap is not set [ 94.327608][ T5935] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 94.345028][ T5935] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.38: Failed to acquire dquot type 0 [ 94.361089][ T5935] EXT4-fs (loop3): 1 orphan inode deleted [ 94.375761][ T5935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.589743][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.811436][ T5956] loop0: detected capacity change from 0 to 128 [ 94.820663][ T5946] process 'syz.1.43' launched './file1' with NULL argv: empty string added [ 94.876341][ T5956] FAT-fs (loop0): Directory bread(block 414) failed [ 94.912396][ T5956] FAT-fs (loop0): Directory bread(block 415) failed [ 94.944241][ T5956] FAT-fs (loop0): Directory bread(block 416) failed [ 94.967343][ T5956] FAT-fs (loop0): Directory bread(block 417) failed [ 94.974079][ T5956] FAT-fs (loop0): Directory bread(block 418) failed [ 94.981951][ T5956] FAT-fs (loop0): Directory bread(block 419) failed [ 94.989911][ T5956] FAT-fs (loop0): Directory bread(block 420) failed [ 94.997993][ T5956] FAT-fs (loop0): Directory bread(block 421) failed [ 95.117431][ T5956] FAT-fs (loop0): Directory bread(block 414) failed [ 95.135285][ T5956] FAT-fs (loop0): Directory bread(block 415) failed [ 95.183469][ T5962] loop2: detected capacity change from 0 to 4096 [ 95.191588][ T5962] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.416614][ T5966] loop0: detected capacity change from 0 to 256 [ 95.554853][ T5962] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.594369][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.706358][ T5973] loop0: detected capacity change from 0 to 1024 [ 95.714051][ T5973] ======================================================= [ 95.714051][ T5973] WARNING: The mand mount option has been deprecated and [ 95.714051][ T5973] and is ignored by this kernel. Remove the mand [ 95.714051][ T5973] option from the mount to silence this warning. [ 95.714051][ T5973] ======================================================= [ 95.753196][ T5973] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 95.784798][ T5973] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.53: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.800438][ T5973] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.53: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.816482][ T5973] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.53: Failed to acquire dquot type 0 [ 95.828463][ T5973] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 95.847259][ T5973] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.53: mark_inode_dirty error [ 95.876817][ T5973] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 95.935027][ T5976] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 95.953146][ T5973] EXT4-fs (loop0): 1 orphan inode deleted [ 95.977527][ T49] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.994289][ T5973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.040613][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 96.122246][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.134975][ T5973] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.53: Invalid inode table block 1 in block_group 0 [ 96.202963][ T5973] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.323227][ T5982] loop1: detected capacity change from 0 to 1024 [ 96.385148][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.401162][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.435631][ T5982] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.470042][ T5777] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.525793][ T5777] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.570916][ T5777] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 96.616158][ T5991] loop2: detected capacity change from 0 to 512 [ 96.654928][ T5991] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.61: inode has both inline data and extents flags [ 96.712310][ T5991] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.61: couldn't read orphan inode 15 (err -117) [ 96.727757][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.776957][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.816388][ T5994] loop3: detected capacity change from 0 to 16 [ 96.869839][ T5994] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.934463][ T5994] erofs: (device loop3): erofs_read_inode: unsupported i_format 65535 of nid 89 [ 97.058614][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.944146][ T6023] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 98.333170][ T6036] loop2: detected capacity change from 0 to 64 [ 98.448219][ T1201] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.523323][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.523323][ T1132] loop2: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 98.542591][ T1132] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 98.554431][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.554431][ T1132] loop2: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 98.568034][ T1132] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 98.576967][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.576967][ T1132] loop2: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 98.592886][ T1132] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 98.604380][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.604380][ T1132] loop2: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 98.624712][ T1132] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 98.641329][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.641329][ T1132] loop2: rw=2049, sector=2320, nr_sectors = 1 limit=64 [ 98.655153][ T1132] Buffer I/O error on dev loop2, logical block 2320, lost async page write [ 98.677135][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.677135][ T1132] loop2: rw=2049, sector=2321, nr_sectors = 1 limit=64 [ 98.700305][ T1201] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 98.713010][ T1201] usb 1-1: config 0 has no interface number 0 [ 98.736765][ T1132] Buffer I/O error on dev loop2, logical block 2321, lost async page write [ 98.745478][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.745478][ T1132] loop2: rw=2049, sector=2322, nr_sectors = 1 limit=64 [ 98.759632][ T1201] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.775530][ T1132] Buffer I/O error on dev loop2, logical block 2322, lost async page write [ 98.790717][ T6043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.83'. [ 98.801579][ T1132] kworker/u4:7: attempt to access beyond end of device [ 98.801579][ T1132] loop2: rw=2049, sector=2323, nr_sectors = 1 limit=64 [ 98.826864][ T1201] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 98.835984][ T1201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.848914][ T1201] usb 1-1: Product: syz [ 98.853156][ T1201] usb 1-1: Manufacturer: syz [ 98.859204][ T1201] usb 1-1: SerialNumber: syz [ 98.862651][ T1132] Buffer I/O error on dev loop2, logical block 2323, lost async page write [ 98.878202][ T1201] usb 1-1: config 0 descriptor?? [ 98.902453][ T5775] hfs: request for non-existent node 131072 in B*Tree [ 98.917744][ T1201] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 99.148357][ T5815] usb 1-1: USB disconnect, device number 3 [ 99.164121][ T5815] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 99.252070][ T6049] loop3: detected capacity change from 0 to 4096 [ 99.273845][ T6052] netlink: 316 bytes leftover after parsing attributes in process `syz.2.87'. [ 99.320988][ T6049] NILFS (loop3): invalid segment: Checksum error in segment payload [ 99.352941][ T6049] NILFS (loop3): trying rollback from an earlier position [ 99.447342][ T6049] NILFS (loop3): recovery complete [ 99.464067][ T6057] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.589461][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 99.598550][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.616335][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.643830][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.669872][ T6060] loop2: detected capacity change from 0 to 512 [ 99.676414][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.696668][ T6060] EXT4-fs: Ignoring removed i_version option [ 99.721418][ T6060] EXT4-fs: Ignoring removed nobh option [ 99.740928][ T6060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.748409][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.780137][ T6060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.800561][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.819957][ T6060] EXT4-fs (loop2): 1 truncate cleaned up [ 99.839595][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.853743][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.878132][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.902555][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.954148][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 99.989607][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.031606][ T6060] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.037570][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.081654][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.121877][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.150940][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.165440][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.186821][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.211209][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.240797][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.267684][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.286568][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.315872][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.343017][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.364012][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.383438][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.403116][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.423246][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.442174][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.456817][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.478551][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.497064][ T6049] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 100.518097][ T6049] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 100.867781][ T6066] loop1: detected capacity change from 0 to 32768 [ 101.010360][ T6066] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.021194][ T6068] loop0: detected capacity change from 0 to 32768 [ 101.077275][ T6068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.94 (6068) [ 101.212136][ T6066] XFS (loop1): Ending clean mount [ 101.270703][ T6068] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.310275][ T6068] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 101.346946][ T6068] BTRFS info (device loop0): setting nodatacow, compression disabled [ 101.355128][ T6068] BTRFS info (device loop0): setting datasum, datacow enabled [ 101.402716][ T6068] BTRFS info (device loop0): force clearing of disk cache [ 101.431265][ T6068] BTRFS info (device loop0): turning on sync discard [ 101.451914][ T6068] BTRFS warning (device loop0): excessive commit interval 43283 [ 101.495180][ T6068] BTRFS info (device loop0): enabling ssd optimizations [ 101.527469][ T6068] BTRFS info (device loop0): using spread ssd allocation scheme [ 101.535203][ T6068] BTRFS info (device loop0): not using ssd optimizations [ 101.567378][ T6068] BTRFS info (device loop0): not using spread ssd allocation scheme [ 101.603761][ T6068] BTRFS info (device loop0): using free space tree [ 101.685024][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.888575][ T6068] BTRFS info (device loop0): rebuilding free space tree [ 101.896805][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.077211][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 102.084571][ T5815] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.098292][ T5815] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.148208][ T5815] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 102.198611][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.222122][ T5815] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 102.241569][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.274102][ T5815] usb 4-1: config 0 descriptor?? [ 102.324231][ T6068] BTRFS info (device loop0): disk added /dev/nullb0 [ 102.632933][ T5777] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.721591][ T5815] hid (null): nested delimiters [ 102.729664][ T5815] hid (null): report_id 28381 is invalid [ 102.735501][ T5815] hid (null): unknown global tag 0xc [ 102.743990][ T5815] hid (null): unknown global tag 0xe [ 102.752108][ T5815] hid (null): global environment stack underflow [ 102.762468][ T5815] hid (null): invalid report_size 56929 [ 102.770869][ T5815] hid (null): invalid report_size 34704 [ 102.786869][ T5815] hid (null): usage index exceeded [ 102.825828][ T6112] loop1: detected capacity change from 0 to 32768 [ 102.985688][ T6112] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.012038][ T5815] usb 4-1: USB disconnect, device number 2 [ 103.056940][ T6112] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.076763][ T6112] BTRFS info (device loop1): setting nodatacow, compression disabled [ 103.111330][ T6112] BTRFS info (device loop1): force clearing of disk cache [ 103.137422][ T6112] BTRFS info (device loop1): turning off barriers [ 103.157100][ T6112] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.191658][ T6112] BTRFS info (device loop1): use lzo compression, level 0 [ 103.216790][ T6112] BTRFS info (device loop1): disabling free space tree [ 103.224773][ T6112] BTRFS info (device loop1): enabling ssd optimizations [ 103.266833][ T6112] BTRFS info (device loop1): using spread ssd allocation scheme [ 103.274637][ T6112] BTRFS info (device loop1): not using ssd optimizations [ 103.287809][ T6112] BTRFS info (device loop1): not using spread ssd allocation scheme [ 103.450634][ T6112] BTRFS info (device loop1): rebuilding free space tree [ 103.521339][ T6112] BTRFS info (device loop1): disabling free space tree [ 103.557089][ T6112] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.572722][ T6134] syz.2.106 (6134) used greatest stack depth: 20696 bytes left [ 103.588687][ T6112] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.662909][ T6112] BTRFS info (device loop1): checking UUID tree [ 103.887621][ T5815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.965816][ T5776] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.109433][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.136445][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.173899][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.196178][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.244472][ T5815] usb 1-1: config 0 descriptor?? [ 104.352307][ T6156] bond0: entered promiscuous mode [ 104.406833][ T6156] bond_slave_0: entered promiscuous mode [ 104.413003][ T6156] bond_slave_1: entered promiscuous mode [ 104.441244][ T6156] bond0: left promiscuous mode [ 104.446132][ T6156] bond_slave_0: left promiscuous mode [ 104.468893][ T6156] bond_slave_1: left promiscuous mode [ 104.717371][ T5815] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.731642][ T5815] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.760687][ T5815] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.780522][ T5815] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.805490][ T5815] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 104.831546][ T5815] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 105.004535][ T6171] loop1: detected capacity change from 0 to 16 [ 105.044596][ T6171] erofs: (device loop1): mounted with root inode @ nid 36. [ 105.062638][ T1201] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.144828][ T5815] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 32: -71 [ 105.162386][ T5815] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense firmware info: -71 [ 105.174598][ T5815] playstation 0003:054C:0DF2.0002: Failed to get firmware info from DualSense [ 105.183935][ T5815] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 105.201441][ T5815] playstation: probe of 0003:054C:0DF2.0002 failed with error -71 [ 105.226452][ T5815] usb 1-1: USB disconnect, device number 4 [ 105.284657][ T1201] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 105.303914][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.313403][ T1201] usb 4-1: Product: syz [ 105.318469][ T1201] usb 4-1: Manufacturer: syz [ 105.323131][ T1201] usb 4-1: SerialNumber: syz [ 105.335169][ T1201] usb 4-1: config 0 descriptor?? [ 105.353776][ T1201] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 105.364225][ T6173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 105.395313][ T1201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.415807][ T1201] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 105.442468][ T1201] usb 4-1: media controller created [ 105.558340][ T1201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.569032][ T6166] dvb-usb: bulk message failed: -22 (7/0) [ 105.697671][ T1201] DVB: Unable to find symbol mt352_attach() [ 105.753357][ T1201] DVB: Unable to find symbol nxt6000_attach() [ 105.770146][ T1201] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 105.791035][ T1201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 105.806023][ T6179] loop2: detected capacity change from 0 to 1024 [ 105.833969][ T1201] dvb-usb: schedule remote query interval to 1000 msecs. [ 105.861997][ T1201] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 105.882934][ T1201] dvb-usb: bulk message failed: -22 (7/0) [ 105.898321][ T1201] dvb-usb: bulk message failed: -22 (7/0) [ 105.923113][ T6179] hfsplus: invalid length 32517 has been corrected to 255 [ 105.930747][ T1201] usb 4-1: USB disconnect, device number 3 [ 106.020815][ T6181] loop0: detected capacity change from 0 to 512 [ 106.100226][ T1201] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 106.118489][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 106.118505][ T28] audit: type=1800 audit(1789669525.015:22): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 106.293652][ T6175] loop1: detected capacity change from 0 to 40427 [ 106.294823][ T4202] hfsplus: b-tree write err: -5, ino 20 [ 106.331946][ T6175] F2FS-fs (loop1): invalid crc value [ 106.360449][ T6175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.491570][ T6188] loop0: detected capacity change from 0 to 256 [ 106.563113][ T6175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.588911][ T6188] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 106.675657][ T28] audit: type=1800 audit(1789669525.565:23): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 106.847642][ T5776] syz-executor: attempt to access beyond end of device [ 106.847642][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.906260][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 107.111806][ T6201] loop2: detected capacity change from 0 to 1024 [ 107.161737][ T6201] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 107.290379][ T6205] input: syz0 as /devices/virtual/input/input7 [ 107.586464][ T6211] loop3: detected capacity change from 0 to 512 [ 107.734011][ T6211] EXT4-fs (loop3): 1 orphan inode deleted [ 107.766190][ T1132] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.785530][ T6211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.851013][ T1132] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 107.864903][ T6211] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.116374][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 108.143186][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.286974][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.486844][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 108.501796][ T8] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 108.515294][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.528484][ T8] usb 3-1: Product: syz [ 108.534022][ T8] usb 3-1: Manufacturer: syz [ 108.542909][ T8] usb 3-1: SerialNumber: syz [ 108.821367][ T8] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 108.858165][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.881472][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 108.895502][ T8] usb 3-1: media controller created [ 108.970276][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.041778][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 109.134013][ T8] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 109.150916][ T8] usb 3-1: USB disconnect, device number 4 [ 109.157485][ T6261] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.257772][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.461236][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 109.474501][ T5815] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 109.484168][ T5815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.497702][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.507750][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.517991][ T5815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.531334][ T5815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.541116][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.664948][ T6270] kAFS: Invalid Command on /proc/fs/afs/cells file [ 109.789619][ T5815] usb 1-1: GET_CAPABILITIES returned 0 [ 109.795220][ T5815] usbtmc 1-1:16.0: can't read capabilities [ 109.877839][ T6274] loop3: detected capacity change from 0 to 2048 [ 109.969429][ T6274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.065963][ T8] usb 1-1: USB disconnect, device number 5 [ 110.255807][ T6284] loop3: detected capacity change from 0 to 1024 [ 110.389074][ T28] audit: type=1326 audit(1789669529.285:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.445553][ T28] audit: type=1326 audit(1789669529.285:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.478026][ T28] audit: type=1326 audit(1789669529.315:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.502986][ T28] audit: type=1326 audit(1789669529.315:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.526844][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.546574][ T28] audit: type=1326 audit(1789669529.315:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.570647][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.613882][ T28] audit: type=1326 audit(1789669529.315:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.637832][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.702511][ T28] audit: type=1326 audit(1789669529.315:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.170" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309079e159 code=0x7ffc0000 [ 110.726478][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.753331][ T6293] loop3: detected capacity change from 0 to 512 [ 110.792803][ T6293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.806589][ T6294] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 110.870580][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.910832][ T6293] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.034757][ T6293] EXT4-fs error (device loop3): ext4_empty_dir:3147: inode #12: block 32: comm syz.3.172: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 111.058419][ T6293] EXT4-fs (loop3): Remounting filesystem read-only [ 111.065321][ T6293] EXT4-fs warning (device loop3): ext4_empty_dir:3149: inode #12: comm syz.3.172: directory missing '.' [ 111.192592][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.388169][ T6312] binder: 6311:6312 ioctl 400c620e 200000000100 returned -22 [ 111.424126][ T6314] rnbd_client L127: Can't parse path i: -93 [ 111.650575][ T6324] Zero length message leads to an empty skb [ 111.890683][ T6331] loop3: detected capacity change from 0 to 1024 [ 112.537585][ T6341] loop3: detected capacity change from 0 to 8192 [ 112.573792][ T6344] loop1: detected capacity change from 0 to 128 [ 112.585509][ T6341] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.616973][ T6341] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 112.645448][ T6341] REISERFS (device loop3): using ordered data mode [ 112.686746][ T6341] reiserfs: using flush barriers [ 112.704456][ T6341] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.754736][ T6341] REISERFS (device loop3): checking transaction log (loop3) [ 112.975246][ T6349] kAFS: bad VL server IP address [ 113.151636][ T6341] REISERFS (device loop3): Using tea hash to sort names [ 113.176794][ T6341] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 113.190990][ T6341] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 113.518101][ T6362] loop2: detected capacity change from 0 to 164 [ 113.945485][ T6370] loop3: detected capacity change from 0 to 2048 [ 114.074067][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.199432][ T6370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.314903][ T6382] loop1: detected capacity change from 0 to 128 [ 114.329812][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.355402][ T6382] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.380621][ T6382] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.462248][ T6382] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 114.594892][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.865569][ T6395] loop3: detected capacity change from 0 to 2048 [ 114.900106][ T6372] loop2: detected capacity change from 0 to 32768 [ 114.936964][ T6372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.205 (6372) [ 114.982145][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.013419][ T6372] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.036971][ T6372] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 115.064555][ T6372] BTRFS info (device loop2): force clearing of disk cache [ 115.085446][ T6372] BTRFS info (device loop2): enabling auto defrag [ 115.127220][ T6372] BTRFS info (device loop2): max_inline at 0 [ 115.128160][ T6395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, [ 115.133308][ T6372] BTRFS info (device loop2): enabling disk space caching [ 115.141833][ T6395] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.191939][ T6395] EXT4-fs (loop3): Remounting filesystem read-only [ 115.200389][ T6372] BTRFS info (device loop2): disk space caching is enabled [ 115.309479][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.432208][ T6372] BTRFS info (device loop2): enabling ssd optimizations [ 115.496125][ T6372] BTRFS info (device loop2): rebuilding free space tree [ 115.551331][ T6372] BTRFS info (device loop2): disabling free space tree [ 115.581208][ T6372] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.632095][ T6372] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.689036][ T6428] loop0: detected capacity change from 0 to 256 [ 115.940246][ T1148] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 115.976084][ T6434] pimreg: tun_chr_ioctl cmd 1074025677 [ 115.981853][ T6434] pimreg: linktype set to 804 [ 116.123636][ T5782] Process accounting resumed [ 116.147575][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.498115][ T6444] loop0: detected capacity change from 0 to 2048 [ 116.641360][ T6444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.080025][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.643845][ T6473] warning: `syz.1.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.754510][ T6478] loop2: detected capacity change from 0 to 512 [ 118.166185][ T6490] netlink: 'syz.0.248': attribute type 12 has an invalid length. [ 118.174972][ T6490] netlink: 'syz.0.248': attribute type 29 has an invalid length. [ 118.187099][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.195225][ T6490] netlink: 148 bytes leftover after parsing attributes in process `syz.0.248'. [ 118.406796][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 118.442202][ T5816] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.451209][ T5816] usb 2-1: config 0 has no interface number 0 [ 118.464188][ T5816] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.480675][ T5816] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.491379][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.512190][ T5816] usb 2-1: config 0 descriptor?? [ 118.549735][ T5816] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.705607][ T6508] loop0: detected capacity change from 0 to 512 [ 118.719773][ T6508] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.728486][ T6508] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.762403][ T6508] __quota_error: 12 callbacks suppressed [ 118.762423][ T6508] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 118.795414][ T5835] usb 2-1: USB disconnect, device number 2 [ 118.802720][ T6508] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 118.815769][ T6508] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.256: Failed to acquire dquot type 1 [ 118.834231][ T6508] EXT4-fs (loop0): Remounting filesystem read-only [ 118.841542][ T6508] EXT4-fs (loop0): 1 truncate cleaned up [ 118.858844][ T6508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.934695][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.043027][ T6513] loop3: detected capacity change from 0 to 256 [ 119.070235][ T6513] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 119.239462][ T6515] loop0: detected capacity change from 0 to 4096 [ 119.282056][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.484754][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.192224][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 120.318568][ T6541] loop2: detected capacity change from 0 to 512 [ 120.333952][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.380413][ T6541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.435429][ T6541] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.525232][ T6548] loop1: detected capacity change from 0 to 256 [ 120.533430][ T6548] exfat: Deprecated parameter 'utf8' [ 120.539472][ T6548] exfat: Deprecated parameter 'utf8' [ 120.545016][ T6548] exfat: Deprecated parameter 'utf8' [ 120.565495][ T6548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 120.590609][ T6518] loop3: detected capacity change from 0 to 40427 [ 120.653532][ T6518] F2FS-fs (loop3): invalid crc value [ 120.694368][ T6518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.998806][ T6518] F2FS-fs (loop3): Start checkpoint disabled! [ 121.065634][ T6518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 121.097997][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.527702][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.604996][ T1148] kworker/u4:8: attempt to access beyond end of device [ 121.604996][ T1148] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 121.642868][ T6574] loop9: detected capacity change from 0 to 255852544 [ 121.650942][ T1148] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 121.679307][ T1148] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 121.779541][ T6576] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'. [ 121.840451][ T6576] bridge_slave_0: left allmulticast mode [ 121.846162][ T6576] bridge_slave_0: left promiscuous mode [ 121.909574][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.955398][ T6576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.107678][ T5790] Bluetooth: hci3: command tx timeout [ 122.874548][ T6602] loop2: detected capacity change from 0 to 1024 [ 122.882914][ T6606] loop3: detected capacity change from 0 to 8 [ 122.915231][ T6602] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.923334][ T6602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.952217][ T6602] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.001337][ T6602] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #11: comm syz.2.294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 123.028649][ T6606] SQUASHFS error: Failed to read block 0x2d7: -5 [ 123.035069][ T6606] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 123.060506][ T6602] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.294: couldn't read orphan inode 11 (err -117) [ 123.128845][ T6602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.210778][ T6602] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.294: Invalid block bitmap block 0 in block_group 0 [ 123.279295][ T6602] Quota error (device loop2): write_blk: dquota write failed [ 123.308374][ T6613] loop1: detected capacity change from 0 to 2048 [ 123.315100][ T6602] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 123.374066][ T6602] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.294: Failed to acquire dquot type 0 [ 123.391158][ T6613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.440399][ T6620] netlink: 56 bytes leftover after parsing attributes in process `syz.0.300'. [ 123.493006][ T6614] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 123.596222][ T6622] loop3: detected capacity change from 0 to 512 [ 123.596397][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.698661][ T6622] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.728344][ T6622] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 123.766820][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.804153][ T6626] loop2: detected capacity change from 0 to 1024 [ 123.886706][ T28] audit: type=1800 audit(1789669542.775:43): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 124.067834][ T6630] netlink: 120 bytes leftover after parsing attributes in process `syz.0.305'. [ 124.196873][ T6634] MTRR 0 not used [ 124.350260][ T5782] IPVS: starting estimator thread 0... [ 124.463054][ T6639] IPVS: using max 17 ests per chain, 40800 per kthread [ 125.126305][ T6636] loop0: detected capacity change from 0 to 32768 [ 125.184005][ T6636] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.260049][ T6641] loop2: detected capacity change from 0 to 32768 [ 125.330878][ T6641] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 125.452777][ T6636] XFS (loop0): Ending clean mount [ 125.560889][ T6641] XFS (loop2): Ending clean mount [ 125.728223][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.834369][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 126.370443][ T6692] Bluetooth: MGMT ver 1.22 [ 126.407256][ T6694] loop1: detected capacity change from 0 to 256 [ 126.461466][ T6694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 126.909506][ T6706] loop1: detected capacity change from 0 to 2048 [ 126.967521][ T6708] loop3: detected capacity change from 0 to 128 [ 127.004475][ T6706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.577745][ T6722] scsi_dev_info_list_add_str: bad dev info string 'ÿ' '(null)' '(null)' [ 127.852607][ T6729] udc dummy_udc.0: unsupported command 'c' [ 127.913712][ T6726] set_capacity_and_notify: 1 callbacks suppressed [ 127.913728][ T6726] loop3: detected capacity change from 0 to 4096 [ 127.965334][ T6726] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 128.083379][ T6726] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 128.106757][ T5782] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.117491][ T6726] ntfs3: loop3: Failed to load $Extend (-22). [ 128.123700][ T6726] ntfs3: loop3: Failed to initialize $Extend. [ 128.238980][ T6726] overlayfs: failed to get redirect (-22) [ 128.310644][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.318449][ T5816] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.351202][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.377899][ T5782] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.415654][ T5782] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.446837][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.465850][ T5782] usb 1-1: config 0 descriptor?? [ 128.591036][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 128.610680][ T5816] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 128.636748][ T5816] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 128.646860][ T5816] usb 3-1: config 1 interface 0 has no altsetting 0 [ 128.653535][ T5816] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 128.673003][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.723064][ T5816] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 128.924162][ T5782] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 128.947092][ T5816] scsi host1: usb-storage 3-1:1.0 [ 128.967570][ T5782] plantronics 0003:047F:FFFF.0003: parse failed [ 128.977743][ T5782] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 129.029543][ T6749] loop1: detected capacity change from 0 to 2048 [ 129.090461][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.144590][ T5782] usb 1-1: USB disconnect, device number 6 [ 129.203184][ T5835] usb 3-1: USB disconnect, device number 5 [ 129.256016][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.484616][ T6756] loop1: detected capacity change from 0 to 2048 [ 129.528623][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.013910][ T6762] loop2: detected capacity change from 0 to 2048 [ 130.071506][ T6762] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.115559][ T6767] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.187306][ T6764] loop1: detected capacity change from 0 to 8192 [ 130.230782][ T6764] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 130.246091][ T6764] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 130.255982][ T6764] REISERFS (device loop1): using ordered data mode [ 130.277299][ T6764] reiserfs: using flush barriers [ 130.316120][ T6764] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.399932][ T6764] REISERFS (device loop1): checking transaction log (loop1) [ 130.506722][ T1201] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 130.546920][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 130.670508][ T6764] REISERFS (device loop1): Using tea hash to sort names [ 130.687588][ T6764] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 130.707405][ T1201] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 130.730603][ T1201] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 130.751862][ T1201] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 130.788581][ T1201] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.811813][ T1201] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 130.836026][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.864341][ T1201] usb 1-1: config 0 descriptor?? [ 130.878905][ T6770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.311724][ T1201] wacom 0003:056A:00CC.0004: ignoring exceeding usage max [ 131.357388][ T1201] wacom 0003:056A:00CC.0004: hidraw0: USB HID v0.0c Device [HID 056a:00cc] on usb-dummy_hcd.0-1/input0 [ 131.399400][ T6779] loop2: detected capacity change from 0 to 8192 [ 131.418064][ T6779] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.482267][ T6779] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.546816][ T6779] REISERFS (device loop2): using ordered data mode [ 131.586432][ T6779] reiserfs: using flush barriers [ 131.625922][ T6779] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.655490][ T5779] usb 1-1: USB disconnect, device number 7 [ 131.702109][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 131.727606][ T6779] REISERFS (device loop2): checking transaction log (loop2) [ 131.739616][ T6779] REISERFS (device loop2): Using r5 hash to sort names [ 131.755933][ T6779] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 131.879057][ T6779] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.943314][ T6779] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.979220][ T6779] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 131.996811][ T6787] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 132.016486][ T6787] REISERFS (device loop2): Remounting filesystem read-only [ 132.033633][ T6787] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 132.656983][ T5779] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.846726][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 132.854115][ T5779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.869785][ T5779] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.897713][ T5779] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 132.919210][ T5779] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.955037][ T5779] usb 3-1: config 1 interface 1 has no altsetting 0 [ 132.972862][ T5779] usb 3-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 132.986688][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993547][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.007513][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.015559][ T5779] usb 3-1: Product: syz [ 133.020269][ T5779] usb 3-1: Manufacturer: syz [ 133.025557][ T5779] usb 3-1: SerialNumber: syz [ 133.035610][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 133.299245][ T5779] usb 3-1: selecting invalid altsetting 0 [ 133.305533][ T5779] usb 3-1: unit 3 not found! [ 133.339984][ T5779] usb 3-1: 6:0: failed to get current value for ch 0 (-71) [ 133.368477][ T6803] loop1: detected capacity change from 0 to 32768 [ 133.404676][ T6811] loop0: detected capacity change from 0 to 164 [ 133.421612][ T5779] usb 3-1: USB disconnect, device number 6 [ 133.459303][ T6803] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.615681][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.799730][ T6803] XFS (loop1): Ending clean mount [ 133.838479][ T6803] XFS (loop1): Quotacheck needed: Please wait. [ 133.923991][ T6823] sd 0:0:1:0: PR command failed: 1026 [ 133.929563][ T6823] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 133.948426][ T6823] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 134.000495][ T6803] XFS (loop1): Quotacheck: Done. [ 134.121486][ T28] audit: type=1800 audit(1789669553.015:44): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.375" name="bus" dev="loop1" ino=9290 res=0 errno=0 [ 134.232912][ T28] audit: type=1800 audit(1789669553.055:45): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.375" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 134.311266][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.401935][ T6850] Format for deleting device is "id" (uint). [ 135.448262][ T6852] loop1: detected capacity change from 0 to 1024 [ 136.192913][ T6867] gadgetfs: bound to dummy_udc driver [ 136.296889][ T5835] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 136.502385][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.516462][ T5835] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.565108][ T5835] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.614587][ T5835] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 136.636737][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.644855][ T5835] usb 2-1: Product: syz [ 136.656653][ T5835] usb 2-1: Manufacturer: syz [ 136.665988][ T5835] usb 2-1: SerialNumber: syz [ 136.833903][ T6863] loop0: detected capacity change from 0 to 40427 [ 136.869729][ T6863] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 136.884679][ T6863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.919036][ T6863] F2FS-fs (loop0): invalid crc value [ 136.924507][ T6863] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 136.974996][ T6863] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.156954][ T6863] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 137.164121][ T6863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.172015][ C1] usb 2-1: received EP1 urb->status = -2 [ 137.177893][ T5835] usb 2-1: unable to init card! (ret=-110) [ 137.184683][ T5835] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 137.371879][ T6880] bond0: no command found in slaves file - use +ifname or -ifname [ 137.382421][ T8] usb 2-1: USB disconnect, device number 3 [ 137.390080][ T5777] syz-executor: attempt to access beyond end of device [ 137.390080][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.438552][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 138.671846][ T6896] netlink: 'syz.2.415': attribute type 25 has an invalid length. [ 138.686092][ T6896] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.720856][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.540887][ T6914] loop0: detected capacity change from 0 to 4096 [ 139.553564][ T6914] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 139.627048][ T6914] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 139.666788][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.746199][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 139.878922][ T5835] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.902907][ T5835] usb 2-1: config 0 has no interface number 0 [ 139.918235][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.940492][ T5835] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.976710][ T5835] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.017066][ T5835] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 140.056680][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.083552][ T5835] usb 2-1: config 0 descriptor?? [ 140.747019][ T5835] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0005/input/input11 [ 140.802305][ T6934] loop0: detected capacity change from 0 to 256 [ 140.838158][ T6934] exfat: Deprecated parameter 'namecase' [ 140.843931][ T6934] exfat: Deprecated parameter 'namecase' [ 140.860863][ T6928] loop2: detected capacity change from 0 to 32768 [ 140.917804][ T6934] exfat: Deprecated parameter 'namecase' [ 140.951482][ T6928] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.978259][ T5835] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0005/input/input12 [ 141.011588][ T6934] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 141.067715][ T5835] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 141.139828][ T5835] usb 2-1: USB disconnect, device number 4 [ 141.159168][ T6928] XFS (loop2): Ending clean mount [ 141.413812][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 141.425318][ T6943] fido_id[6943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.628140][ T6947] loop0: detected capacity change from 0 to 1024 [ 142.012186][ T6953] loop0: detected capacity change from 0 to 128 [ 142.284387][ T6960] loop1: detected capacity change from 0 to 256 [ 142.460739][ T6964] Bluetooth: MGMT ver 1.22 [ 142.465400][ T6964] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 142.669982][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.0.444'. [ 142.688027][ T6966] bridge_slave_0: left allmulticast mode [ 142.693735][ T6966] bridge_slave_0: left promiscuous mode [ 142.741491][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.789148][ T6966] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.096011][ T6968] loop0: detected capacity change from 0 to 4096 [ 143.192460][ T6972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.422245][ T6962] loop1: detected capacity change from 0 to 40427 [ 143.456697][ T6962] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 143.463737][ T6962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.520788][ T6962] F2FS-fs (loop1): invalid crc value [ 143.526159][ T6962] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 143.549616][ T5777] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 143.573112][ T5777] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 143.584227][ T6962] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.644193][ T5777] Remounting filesystem read-only [ 143.678727][ T5777] NILFS (loop0): error -5 truncating bmap (ino=12) [ 143.746883][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 143.756315][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 143.773330][ T5777] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 143.803127][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 143.840124][ T5777] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 143.852555][ T6962] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.897825][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 143.904846][ T5777] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 143.917148][ T6962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.966777][ T5777] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 143.973815][ T5777] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 144.195604][ T5776] syz-executor: attempt to access beyond end of device [ 144.195604][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.248787][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 144.588652][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.600881][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.609196][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.627549][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.638729][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.646165][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.172047][ T5774] syz-executor (5774) used greatest stack depth: 20368 bytes left [ 145.261648][ T4202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.370021][ T7003] loop2: detected capacity change from 0 to 256 [ 145.485172][ T4202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.534419][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 145.631047][ T4202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.705719][ T4202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.805605][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.821499][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.835324][ T6990] bridge_slave_0: entered allmulticast mode [ 145.863148][ T6990] bridge_slave_0: entered promiscuous mode [ 145.874980][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.882857][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.890498][ T6990] bridge_slave_1: entered allmulticast mode [ 145.899339][ T6990] bridge_slave_1: entered promiscuous mode [ 145.993833][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.015670][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.122935][ T6990] team0: Port device team_slave_0 added [ 146.141742][ T6990] team0: Port device team_slave_1 added [ 146.268269][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.275285][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.304633][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.356941][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.363964][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.397418][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.493012][ T6990] hsr_slave_0: entered promiscuous mode [ 146.501080][ T6990] hsr_slave_1: entered promiscuous mode [ 146.508454][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.516065][ T6990] Cannot create hsr debugfs directory [ 146.748348][ T51] Bluetooth: hci4: command tx timeout [ 146.985647][ T6990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.004461][ T6990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.014908][ T6990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.025790][ T6990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.319674][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.378256][ T4202] hsr_slave_0: left promiscuous mode [ 147.384714][ T4202] hsr_slave_1: left promiscuous mode [ 147.395422][ T4202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.403485][ T4202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.412641][ T4202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.420513][ T4202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.432502][ T4202] bridge_slave_1: left allmulticast mode [ 147.444851][ T4202] bridge_slave_1: left promiscuous mode [ 147.453485][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.471976][ T4202] bridge_slave_0: left allmulticast mode [ 147.477886][ T4202] bridge_slave_0: left promiscuous mode [ 147.483672][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.541088][ T4202] veth1_macvtap: left promiscuous mode [ 147.550804][ T4202] veth0_macvtap: left promiscuous mode [ 147.556513][ T4202] veth1_vlan: left promiscuous mode [ 147.564430][ T4202] veth0_vlan: left promiscuous mode [ 148.265823][ T4202] team0 (unregistering): Port device team_slave_1 removed [ 148.314401][ T4202] team0 (unregistering): Port device team_slave_0 removed [ 148.384131][ T4202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.483116][ T4202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.817856][ T51] Bluetooth: hci4: command tx timeout [ 148.938933][ T4202] bond0 (unregistering): Released all slaves [ 149.069282][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.112785][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.121078][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.148995][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.156209][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.600592][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.965375][ T6990] veth0_vlan: entered promiscuous mode [ 149.994653][ T6990] veth1_vlan: entered promiscuous mode [ 150.032840][ T6990] veth0_macvtap: entered promiscuous mode [ 150.051051][ T6990] veth1_macvtap: entered promiscuous mode [ 150.081488][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.093463][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.105999][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.118197][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.129204][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.140085][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.152171][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.175828][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.192563][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.203819][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.216653][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.228212][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.238927][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.260220][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.286384][ T6990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.297638][ T6990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.306386][ T6990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.316079][ T6990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.429183][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.448444][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.486448][ T4202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.504831][ T4202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.694166][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 150.716567][ T7077] loop4: detected capacity change from 0 to 128 [ 150.898698][ T51] Bluetooth: hci4: command tx timeout [ 151.291631][ T7094] loop0: detected capacity change from 0 to 1024 [ 151.404496][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.437128][ T7094] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.638565][ T7104] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.459: lblock 0 mapped to illegal pblock 0 (length 6) [ 151.727077][ T7104] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 151.781364][ T7104] EXT4-fs (loop0): This should not happen!! Data will be lost [ 151.781364][ T7104] [ 152.253673][ T49] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 152.330297][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 152.370949][ T7096] loop4: detected capacity change from 0 to 40427 [ 152.382038][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.382038][ T49] [ 152.404429][ T7096] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 152.450351][ T7096] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.483528][ T7096] F2FS-fs (loop4): invalid crc value [ 152.503365][ T7096] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 152.575163][ T7096] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.667325][ T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 152.698050][ T7124] loop2: detected capacity change from 0 to 512 [ 152.741821][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 108 with error 28 [ 152.779884][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.779884][ T49] [ 152.802178][ T7124] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.471: corrupted in-inode xattr: invalid ea_ino [ 152.825333][ T7096] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.841623][ T49] EXT4-fs (loop0): Total free blocks count 0 [ 152.850446][ T7096] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.873297][ T49] EXT4-fs (loop0): Free/Dirty block details [ 152.880077][ T7124] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.471: couldn't read orphan inode 15 (err -117) [ 152.936855][ T49] EXT4-fs (loop0): free_blocks=0 [ 152.964304][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.984958][ T51] Bluetooth: hci4: command tx timeout [ 153.026341][ T7124] syz.2.471 (pid 7124) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 153.179873][ T6990] syz-executor: attempt to access beyond end of device [ 153.179873][ T6990] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.235297][ T6990] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 153.248998][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.440228][ T7135] loop0: detected capacity change from 0 to 2048 [ 153.496255][ T7135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.542053][ T7135] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.736032][ T7145] input: syz1 as /devices/virtual/input/input13 [ 153.749215][ T7135] fs-verity: sha512 using implementation "sha512-avx2" [ 153.777734][ T7135] fs-verity (loop0, inode 13): Unsupported log_blocksize: 13 [ 153.898055][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.128852][ T7155] loop0: detected capacity change from 0 to 64 [ 154.323828][ T3474] kworker/u4:9: attempt to access beyond end of device [ 154.323828][ T3474] loop0: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 154.375535][ T3474] Buffer I/O error on dev loop0, logical block 2320, lost async page write [ 154.396895][ T3474] kworker/u4:9: attempt to access beyond end of device [ 154.396895][ T3474] loop0: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 154.446962][ T3474] Buffer I/O error on dev loop0, logical block 2321, lost async page write [ 154.465870][ T3474] kworker/u4:9: attempt to access beyond end of device [ 154.465870][ T3474] loop0: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 154.507762][ T3474] Buffer I/O error on dev loop0, logical block 2322, lost async page write [ 154.543317][ T3474] kworker/u4:9: attempt to access beyond end of device [ 154.543317][ T3474] loop0: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 154.586872][ T3474] Buffer I/O error on dev loop0, logical block 2323, lost async page write [ 154.611710][ T12] kworker/u4:1: attempt to access beyond end of device [ 154.611710][ T12] loop0: rw=2049, sector=2320, nr_sectors = 1 limit=64 [ 154.667641][ T7137] loop2: detected capacity change from 0 to 32768 [ 154.679105][ T12] Buffer I/O error on dev loop0, logical block 2320, lost async page write [ 154.697467][ T12] kworker/u4:1: attempt to access beyond end of device [ 154.697467][ T12] loop0: rw=2049, sector=2321, nr_sectors = 1 limit=64 [ 154.747621][ T12] Buffer I/O error on dev loop0, logical block 2321, lost async page write [ 154.774552][ T7137] [ 154.774552][ T7137] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.774552][ T7137] [ 154.786397][ T12] kworker/u4:1: attempt to access beyond end of device [ 154.786397][ T12] loop0: rw=2049, sector=2322, nr_sectors = 1 limit=64 [ 154.822018][ T12] Buffer I/O error on dev loop0, logical block 2322, lost async page write [ 154.844868][ T12] kworker/u4:1: attempt to access beyond end of device [ 154.844868][ T12] loop0: rw=2049, sector=2323, nr_sectors = 1 limit=64 [ 154.887377][ T12] Buffer I/O error on dev loop0, logical block 2323, lost async page write [ 154.910907][ T5777] hfs: request for non-existent node 131072 in B*Tree [ 155.042353][ T49] ERROR: (device loop2): diWrite: ixpxd invalid [ 155.042353][ T49] [ 155.072355][ T49] ERROR: (device loop2): txCommit: [ 155.072355][ T49] [ 155.122772][ T49] jfs_write_inode: jfs_commit_inode failed! [ 155.167242][ T5775] [ 155.167242][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.167242][ T5775] [ 155.193221][ T5775] [ 155.193221][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 155.193221][ T5775] [ 155.302138][ T7171] netlink: 'syz.4.481': attribute type 25 has an invalid length. [ 155.337652][ T7168] loop0: detected capacity change from 0 to 8192 [ 155.360644][ T7168] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.361876][ T7171] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.419129][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.427049][ T7168] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 155.427137][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.436507][ T7168] REISERFS (device loop0): using ordered data mode [ 155.508031][ T7168] reiserfs: using flush barriers [ 155.524457][ T7168] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.559797][ T7168] REISERFS (device loop0): checking transaction log (loop0) [ 155.591640][ T7168] REISERFS (device loop0): Using r5 hash to sort names [ 155.627248][ T7168] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 155.786801][ T7168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 155.817142][ T7168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 155.833487][ T7182] loop4: detected capacity change from 0 to 512 [ 155.868003][ T7182] EXT4-fs: Ignoring removed bh option [ 155.878009][ T7168] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 155.965496][ T7183] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 156.003802][ T7182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.069155][ T7183] REISERFS (device loop0): Remounting filesystem read-only [ 156.076568][ T7183] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 156.088753][ T7182] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.201554][ T7182] EXT4-fs error (device loop4): ext4_get_first_dir_block:3586: inode #12: comm syz.4.484: Directory hole found for htree leaf block 0 [ 156.302617][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.974237][ T7180] loop2: detected capacity change from 0 to 32768 [ 157.041718][ T7180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.480 (7180) [ 157.106978][ T7180] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.136337][ T7180] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 157.152183][ T7180] BTRFS info (device loop2): setting nodatacow, compression disabled [ 157.165292][ T7213] loop4: detected capacity change from 0 to 256 [ 157.180951][ T7180] BTRFS info (device loop2): force clearing of disk cache [ 157.213085][ T7180] BTRFS info (device loop2): turning off barriers [ 157.244013][ T7180] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 157.280491][ T7180] BTRFS info (device loop2): use lzo compression, level 0 [ 157.306693][ T7180] BTRFS info (device loop2): disabling free space tree [ 157.313686][ T7180] BTRFS info (device loop2): enabling ssd optimizations [ 157.362945][ T7180] BTRFS info (device loop2): using spread ssd allocation scheme [ 157.377059][ T7180] BTRFS info (device loop2): not using ssd optimizations [ 157.384174][ T7180] BTRFS info (device loop2): not using spread ssd allocation scheme [ 157.565381][ T7180] BTRFS info (device loop2): rebuilding free space tree [ 157.634973][ T7180] BTRFS info (device loop2): disabling free space tree [ 157.667373][ T7180] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.684606][ T7180] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.718951][ T7180] BTRFS info (device loop2): checking UUID tree [ 158.014187][ T5775] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.242375][ T7251] loop2: detected capacity change from 0 to 32768 [ 159.316903][ T7251] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 159.449918][ T7271] netlink: 'syz.0.494': attribute type 25 has an invalid length. [ 159.474969][ T7251] XFS (loop2): Ending clean mount [ 159.487735][ T7271] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.520781][ T7274] loop1: detected capacity change from 0 to 256 [ 159.546372][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.555461][ T7274] exfat: Deprecated parameter 'utf8' [ 159.681297][ T7274] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 159.846822][ T7279] loop0: detected capacity change from 0 to 256 [ 159.856496][ T7279] exfat: Deprecated parameter 'namecase' [ 159.874216][ T7279] exfat: Deprecated parameter 'namecase' [ 159.894770][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 159.976900][ T7279] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 161.376364][ T7309] loop1: detected capacity change from 0 to 4096 [ 161.400199][ T7297] loop0: detected capacity change from 0 to 32768 [ 161.433921][ T7297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.502 (7297) [ 161.461613][ T7310] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.494309][ T7297] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.520311][ T7297] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 161.542817][ T7297] BTRFS info (device loop0): setting nodatacow, compression disabled [ 161.568800][ T7297] BTRFS info (device loop0): force clearing of disk cache [ 161.576022][ T7297] BTRFS info (device loop0): turning off barriers [ 161.605676][ T7297] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 161.627565][ T7297] BTRFS info (device loop0): use lzo compression, level 0 [ 161.634764][ T7297] BTRFS info (device loop0): disabling free space tree [ 161.644791][ T5776] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 161.654932][ T5776] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 161.667040][ T7297] BTRFS info (device loop0): enabling ssd optimizations [ 161.684314][ T7297] BTRFS info (device loop0): using spread ssd allocation scheme [ 161.697140][ T5776] Remounting filesystem read-only [ 161.702237][ T5776] NILFS (loop1): error -5 truncating bmap (ino=12) [ 161.717106][ T7297] BTRFS info (device loop0): not using ssd optimizations [ 161.734459][ T7297] BTRFS info (device loop0): not using spread ssd allocation scheme [ 161.747628][ T5776] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 161.767342][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 161.777297][ T5776] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 161.796240][ T5776] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 161.813616][ T5776] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 161.830082][ T5776] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 161.844291][ T5776] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 161.865210][ T5776] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 161.880315][ T5776] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 161.940968][ T7297] BTRFS info (device loop0): rebuilding free space tree [ 162.015139][ T7297] BTRFS info (device loop0): disabling free space tree [ 162.042880][ T7297] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.080633][ T7297] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.100606][ T7330] loop4: detected capacity change from 0 to 1024 [ 162.132066][ T7297] BTRFS info (device loop0): checking UUID tree [ 162.462976][ T7336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.509'. [ 162.508213][ T5777] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.699222][ T5767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (5767) [ 163.453306][ T7366] loop0: detected capacity change from 0 to 256 [ 163.491684][ T7366] exfat: Deprecated parameter 'utf8' [ 163.579980][ T7366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 164.189809][ T7361] loop1: detected capacity change from 0 to 40427 [ 164.209253][ T7361] F2FS-fs (loop1): invalid crc value [ 164.229802][ T7361] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.422349][ T7361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.589409][ T7385] f2fs_ckpt-7:1: attempt to access beyond end of device [ 164.589409][ T7385] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 164.620752][ T7385] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 164.632154][ T7385] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 164.847623][ T7404] loop2: detected capacity change from 0 to 256 [ 164.878109][ T7404] exfat: Deprecated parameter 'utf8' [ 164.918889][ T7404] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 165.679336][ T7429] loop0: detected capacity change from 0 to 256 [ 166.122523][ T7419] loop2: detected capacity change from 0 to 40427 [ 166.150809][ T7419] F2FS-fs (loop2): invalid crc value [ 166.165062][ T7419] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.320080][ T7419] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 166.622193][ T5775] syz-executor: attempt to access beyond end of device [ 166.622193][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.648045][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.600280][ T7464] loop2: detected capacity change from 0 to 40427 [ 167.626157][ T7464] F2FS-fs (loop2): invalid crc value [ 167.647480][ T7464] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.719023][ T7464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.821900][ T7465] f2fs_ckpt-7:2: attempt to access beyond end of device [ 167.821900][ T7465] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 167.848542][ T7465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.856087][ T7465] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.983796][ T7473] loop0: detected capacity change from 0 to 1024 [ 168.036923][ T7473] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 168.364135][ T7483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'. [ 168.793976][ T7497] gadgetfs: bound to dummy_udc driver [ 170.222108][ T7521] loop0: detected capacity change from 0 to 40427 [ 170.254926][ T7521] F2FS-fs (loop0): invalid crc value [ 170.294707][ T7521] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.472605][ T7521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 170.626029][ T5777] syz-executor: attempt to access beyond end of device [ 170.626029][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.658552][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 171.356431][ T7560] netlink: 64 bytes leftover after parsing attributes in process `syz.4.568'. [ 172.121435][ T7566] loop0: detected capacity change from 0 to 40427 [ 172.161638][ T7566] F2FS-fs (loop0): invalid crc value [ 172.194732][ T7570] loop1: detected capacity change from 0 to 40427 [ 172.205624][ T7566] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.221294][ T7570] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 172.249521][ T7570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 172.288084][ T7570] F2FS-fs (loop1): invalid crc value [ 172.362483][ T7566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.580355][ T7583] f2fs_ckpt-7:0: attempt to access beyond end of device [ 172.580355][ T7583] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 172.613886][ T7570] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 172.629507][ T7570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.656238][ T7583] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 172.684601][ T7583] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 172.769153][ T5776] syz-executor: attempt to access beyond end of device [ 172.769153][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.831030][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 173.244330][ T7608] loop4: detected capacity change from 0 to 256 [ 173.665049][ T7617] loop0: detected capacity change from 0 to 512 [ 173.676314][ T7617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.785060][ T7617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.885162][ T7617] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.980847][ T7631] MTRR 0 not used [ 174.023563][ T7633] input: syz0 as /devices/virtual/input/input14 [ 174.204533][ T28] audit: type=1800 audit(1789669593.095:46): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.584" name="b_vendor_code" dev="configfs" ino=12851 res=0 errno=0 [ 174.378144][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.130769][ T5816] IPVS: starting estimator thread 0... [ 176.236810][ T7707] IPVS: using max 20 ests per chain, 48000 per kthread [ 176.863609][ T7698] loop2: detected capacity change from 0 to 32768 [ 176.953091][ T7698] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.983546][ T7736] loop1: detected capacity change from 0 to 512 [ 177.038917][ T7736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.057177][ T5790] Bluetooth: hci4: command tx timeout [ 177.242862][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.317916][ T7736] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.402579][ T7698] XFS (loop2): Ending clean mount [ 177.558931][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.648089][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.695165][ T7750] loop0: detected capacity change from 0 to 4096 [ 177.717778][ T7750] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.752951][ T7750] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.792820][ T7750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.904084][ T28] audit: type=1804 audit(1789669596.795:47): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.624" name="/newroot/157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=15 res=1 errno=0 [ 178.024555][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.436880][ T7755] loop4: detected capacity change from 0 to 40427 [ 178.458019][ T7755] F2FS-fs (loop4): invalid crc value [ 178.485753][ T7755] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.611687][ T7755] F2FS-fs (loop4): Start checkpoint disabled! [ 178.631233][ T7755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 178.656857][ T5844] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.890054][ T5844] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.900350][ T7765] loop0: detected capacity change from 0 to 2048 [ 178.906747][ T5844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.906770][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.906852][ T5844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.911723][ T5844] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.979133][ T11] kworker/u4:0: attempt to access beyond end of device [ 178.979133][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 178.984148][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.013706][ T5844] usb 2-1: Product: syz [ 179.031551][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.057299][ T7765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.084020][ T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.084989][ T7765] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.108841][ T7765] EXT4-fs (loop0): Remounting filesystem read-only [ 179.118056][ T5844] usb 2-1: Manufacturer: syz [ 179.145083][ T5844] cdc_wdm 2-1:1.0: skipping garbage [ 179.156828][ T5844] cdc_wdm 2-1:1.0: skipping garbage [ 179.174180][ T5844] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 179.186690][ T5844] cdc_wdm 2-1:1.0: Unknown control protocol [ 179.236430][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.691318][ T1201] usb 2-1: USB disconnect, device number 5 [ 179.839886][ T7776] loop2: detected capacity change from 0 to 4096 [ 179.871300][ T7776] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 179.911848][ T7780] loop4: detected capacity change from 0 to 512 [ 179.931612][ T7780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.977507][ T7776] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 180.005945][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.067532][ T7780] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.286012][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.388439][ T7787] loop1: detected capacity change from 0 to 8 [ 180.473109][ T7787] SQUASHFS error: Failed to read block 0x2d7: -5 [ 180.500839][ T7787] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 181.197947][ T7789] loop4: detected capacity change from 0 to 32768 [ 181.259953][ T7789] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.479293][ T7789] XFS (loop4): Ending clean mount [ 181.743394][ T6990] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.775076][ T7818] netlink: 'syz.1.636': attribute type 3 has an invalid length. [ 181.782715][ T7820] loop2: detected capacity change from 0 to 512 [ 181.790145][ T7820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.799478][ T7818] netlink: 136 bytes leftover after parsing attributes in process `syz.1.636'. [ 181.876041][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.999998][ T7820] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.163688][ T7828] bond0: (slave bond_slave_0): Releasing backup interface [ 182.329930][ T7833] loop1: detected capacity change from 0 to 2048 [ 182.350404][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.377295][ T7833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.387304][ T1201] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.519992][ T7833] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 182.593150][ T1201] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.594475][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.613822][ T1201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.643258][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.656155][ T1201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.695213][ T1201] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.708210][ T1201] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.716274][ T1201] usb 5-1: Product: syz [ 182.724635][ T1201] usb 5-1: Manufacturer: syz [ 182.744619][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 182.750210][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 182.758080][ T1201] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 182.764036][ T1201] cdc_wdm 5-1:1.0: Unknown control protocol [ 183.145839][ T1201] usb 5-1: USB disconnect, device number 2 [ 184.335393][ T7859] loop3: detected capacity change from 0 to 7 [ 184.364069][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.379781][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.389039][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 184.401655][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.410921][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 184.431452][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.440727][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 184.451060][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.460362][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 184.469840][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.479075][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 184.756147][ T28] audit: type=1800 audit(1789669603.645:48): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.665" name="b_vendor_code" dev="configfs" ino=13388 res=0 errno=0 [ 184.778418][ T7867] loop2: detected capacity change from 0 to 2048 [ 184.868061][ T7874] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.192639][ T7883] loop2: detected capacity change from 0 to 512 [ 185.247572][ T7883] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.262210][ T7883] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 185.551061][ T7889] loop2: detected capacity change from 0 to 2048 [ 185.613098][ T7889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.736945][ T7889] EXT4-fs error (device loop2): ext4_find_extent:911: inode #2: comm syz.2.664: inode has invalid extent depth: 8 [ 185.879357][ T7889] EXT4-fs (loop2): Remounting filesystem read-only [ 186.007468][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.120799][ T7904] netlink: 120 bytes leftover after parsing attributes in process `syz.4.669'. [ 187.049507][ T7928] bond0: entered promiscuous mode [ 187.054651][ T7928] bond_slave_0: entered promiscuous mode [ 187.119947][ T7928] bond_slave_1: entered promiscuous mode [ 187.135011][ T7928] bond0: left promiscuous mode [ 187.146868][ T7928] bond_slave_0: left promiscuous mode [ 187.156371][ T7917] loop1: detected capacity change from 0 to 32768 [ 187.158918][ T7928] bond_slave_1: left promiscuous mode [ 187.207550][ T7917] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.475094][ T7940] loop0: detected capacity change from 0 to 1024 [ 187.508764][ T7917] XFS (loop1): Ending clean mount [ 187.809083][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.820656][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.848367][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.861012][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.868460][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.903423][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.912194][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.666097][ T28] audit: type=1400 audit(1789669608.555:49): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=7969 comm="syz.2.691" name=":/o" offset=35 [ 189.785155][ T7972] pim6reg: entered allmulticast mode [ 189.822585][ T7971] pim6reg: left allmulticast mode [ 190.013821][ T7978] loop0: detected capacity change from 0 to 256 [ 190.081038][ T7978] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 190.174167][ T7982] bridge0: entered allmulticast mode [ 190.506501][ T7968] loop1: detected capacity change from 0 to 32768 [ 190.548135][ T7968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.690 (7968) [ 190.595663][ T7968] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.619578][ T7968] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 190.643197][ T7968] BTRFS info (device loop1): force clearing of disk cache [ 190.658491][ T7968] BTRFS info (device loop1): enabling auto defrag [ 190.703137][ T7968] BTRFS info (device loop1): max_inline at 0 [ 190.740871][ T7968] BTRFS info (device loop1): enabling disk space caching [ 190.772929][ T7968] BTRFS info (device loop1): disk space caching is enabled [ 190.928199][ T7968] BTRFS info (device loop1): enabling ssd optimizations [ 190.962889][ T7968] BTRFS info (device loop1): rebuilding free space tree [ 191.022583][ T7968] BTRFS info (device loop1): disabling free space tree [ 191.030870][ T7968] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.040824][ T7968] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.273926][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 191.365905][ T8023] loop4: detected capacity change from 0 to 256 [ 191.379927][ T8023] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.426384][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.421569][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428185][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.736920][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 206.743006][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 206.751042][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 255.860759][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868821][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.176748][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 317.301273][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.307841][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.816910][ T29] INFO: task jbd2/sda1-8:5104 blocked for more than 143 seconds. [ 344.824728][ T29] Not tainted syzkaller #0 [ 344.829787][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.838564][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5104 ppid:2 flags:0x00004000 [ 344.848024][ T29] Call Trace: [ 344.851361][ T29] [ 344.854326][ T29] __schedule+0x15ae/0x4660 [ 344.859148][ T29] ? asan.module_dtor+0x20/0x20 [ 344.864073][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 344.870522][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 344.876487][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 344.881899][ T29] schedule+0xbd/0x170 [ 344.886115][ T29] io_schedule+0x80/0xd0 [ 344.890900][ T29] bit_wait_io+0x11/0xd0 [ 344.895240][ T29] __wait_on_bit+0x9f/0x2c0 [ 344.899846][ T29] ? bit_wait+0xd0/0xd0 [ 344.904060][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 344.909655][ T29] ? bit_wait+0xd0/0xd0 [ 344.913857][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 344.918949][ T29] ? do_raw_write_lock+0x11e/0x260 [ 344.924215][ T29] ? bit_waitqueue+0x30/0x30 [ 344.928931][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 344.934003][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 344.941532][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 344.951566][ T29] ? lock_chain_count+0x20/0x20 [ 344.956505][ T29] ? _raw_spin_unlock+0x40/0x40 [ 344.962676][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 344.969449][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 344.974780][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 344.982386][ T29] ? timer_delete_sync+0x20/0x20 [ 344.990868][ T29] ? do_raw_read_unlock+0x80/0x80 [ 344.998229][ T29] ? prepare_to_wait+0x1aa/0x200 [ 345.003331][ T29] kjournald2+0x40f/0x810 [ 345.010914][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 345.016249][ T29] ? wake_bit_function+0x200/0x200 [ 345.024449][ T29] ? _raw_spin_unlock+0x40/0x40 [ 345.031654][ T29] ? __kthread_parkme+0x71/0x1c0 [ 345.039019][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 345.044110][ T29] kthread+0x2fa/0x390 [ 345.051406][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 345.060371][ T29] ? kthread_blkcg+0xd0/0xd0 [ 345.065020][ T29] ret_from_fork+0x48/0x80 [ 345.073026][ T29] ? kthread_blkcg+0xd0/0xd0 [ 345.079845][ T29] ret_from_fork_asm+0x11/0x20 [ 345.084708][ T29] [ 345.092101][ T29] INFO: task syz-executor:5763 blocked for more than 143 seconds. [ 345.102142][ T29] Not tainted syzkaller #0 [ 345.110650][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.121528][ T29] task:syz-executor state:D stack:22472 pid:5763 ppid:5762 flags:0x00004002 [ 345.134948][ T29] Call Trace: [ 345.140639][ T29] [ 345.143636][ T29] __schedule+0x15ae/0x4660 [ 345.152556][ T29] ? mark_lock+0x94/0x320 [ 345.158127][ T29] ? asan.module_dtor+0x20/0x20 [ 345.163052][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.168288][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 345.174236][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 345.183911][ T29] schedule+0xbd/0x170 [ 345.189103][ T29] io_schedule+0x80/0xd0 [ 345.193429][ T29] bit_wait_io+0x11/0xd0 [ 345.204269][ T29] __wait_on_bit+0x9f/0x2c0 [ 345.208897][ T29] ? bit_wait+0xd0/0xd0 [ 345.213107][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 345.224315][ T29] ? bit_wait+0xd0/0xd0 [ 345.229666][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 345.234486][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 345.239750][ T29] ? bit_waitqueue+0x30/0x30 [ 345.244393][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 345.254811][ T29] do_get_write_access+0x5c9/0xe00 [ 345.261076][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 345.267392][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 345.273640][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 345.279958][ T29] ? __might_sleep+0xe0/0xe0 [ 345.284659][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 345.290383][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 345.295894][ T29] ext4_dirty_inode+0xcb/0x110 [ 345.301139][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 345.307186][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 345.312276][ T29] file_update_time+0x187/0x1a0 [ 345.317281][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 345.322370][ T29] ? do_wp_page+0x4ce/0x34d0 [ 345.327138][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 345.333433][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.338568][ T29] do_page_mkwrite+0x153/0x3f0 [ 345.343390][ T29] do_wp_page+0xd4d/0x34d0 [ 345.347937][ T29] ? folio_put+0xd0/0xd0 [ 345.352236][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 345.357445][ T29] ? __rwlock_init+0x150/0x150 [ 345.362280][ T29] handle_mm_fault+0x1306/0x4a50 [ 345.367403][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 345.372403][ T29] ? numa_migrate_prep+0x350/0x350 [ 345.377768][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 345.383114][ T29] do_user_addr_fault+0x736/0x12d0 [ 345.388394][ T29] exc_page_fault+0x64/0x100 [ 345.393025][ T29] ? clear_bhb_loop+0x40/0x90 [ 345.397869][ T29] asm_exc_page_fault+0x26/0x30 [ 345.403217][ T29] RIP: 0033:0x7f883807c6e2 [ 345.407971][ T29] RSP: 002b:00007ffc06dc5430 EFLAGS: 00010202 [ 345.414128][ T29] RAX: 00007f8835e34000 RBX: 000055556d870bb0 RCX: 0000000000000007 [ 345.422327][ T29] RDX: 00000000000019c9 RSI: 000055556d86f310 RDI: 0000000000000080 [ 345.430394][ T29] RBP: 00007ffc06dc5930 R08: 000055556d86f318 R09: 0000000000000091 [ 345.438526][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc06dc5770 [ 345.446660][ T29] R13: 00007ffc06dc5560 R14: 585858582e7a7973 R15: 00007ffc06dc54b0 [ 345.454879][ T29] [ 345.458380][ T29] INFO: task syz.4.718:8050 blocked for more than 144 seconds. [ 345.465969][ T29] Not tainted syzkaller #0 [ 345.470985][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.479847][ T29] task:syz.4.718 state:D stack:27048 pid:8050 ppid:6990 flags:0x00004004 [ 345.489256][ T29] Call Trace: [ 345.492578][ T29] [ 345.495552][ T29] __schedule+0x15ae/0x4660 [ 345.500184][ T29] ? mark_lock+0x94/0x320 [ 345.504961][ T29] ? asan.module_dtor+0x20/0x20 [ 345.509946][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.515045][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 345.521101][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 345.526360][ T29] schedule+0xbd/0x170 [ 345.530739][ T29] io_schedule+0x80/0xd0 [ 345.535038][ T29] bit_wait_io+0x11/0xd0 [ 345.539419][ T29] __wait_on_bit+0x9f/0x2c0 [ 345.543971][ T29] ? bit_wait+0xd0/0xd0 [ 345.548241][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 345.553745][ T29] ? bit_wait+0xd0/0xd0 [ 345.558067][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 345.562893][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 345.568110][ T29] ? bit_waitqueue+0x30/0x30 [ 345.572758][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 345.578124][ T29] do_get_write_access+0x5c9/0xe00 [ 345.583327][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 345.589431][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 345.595621][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 345.601965][ T29] ? __might_sleep+0xe0/0xe0 [ 345.607157][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 345.612788][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 345.618412][ T29] ext4_dirty_inode+0xcb/0x110 [ 345.623241][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 345.629140][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 345.634224][ T29] file_update_time+0x187/0x1a0 [ 345.639411][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 345.644479][ T29] ? filemap_fault+0x103c/0x1540 [ 345.649913][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 345.655686][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 345.662224][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.667505][ T29] ? __pte_offset_map+0x20d/0x280 [ 345.672590][ T29] do_page_mkwrite+0x153/0x3f0 [ 345.677700][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 345.682697][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 345.687795][ T29] ? numa_migrate_prep+0x350/0x350 [ 345.692956][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 345.698354][ T29] do_user_addr_fault+0x736/0x12d0 [ 345.703533][ T29] exc_page_fault+0x64/0x100 [ 345.708612][ T29] asm_exc_page_fault+0x26/0x30 [ 345.713528][ T29] RIP: 0033:0x7f72cf272f32 [ 345.718310][ T29] RSP: 002b:00007fff1aa67380 EFLAGS: 00010202 [ 345.724424][ T29] RAX: 0000000000001008 RBX: 00007f72d0155720 RCX: 0000000000000000 [ 345.732822][ T29] RDX: 0000001b31123000 RSI: 0000000000000008 RDI: 00007f72d0155720 [ 345.742304][ T29] RBP: 000000000000025a R08: 00007f72cf610000 R09: 00007f72cf626038 [ 345.750803][ T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff83f5d5b2 [ 345.759028][ T29] R13: 00007f72cf626038 R14: 0000000000000091 R15: fffffffffffff000 [ 345.767178][ T29] ? apparmor_socket_post_create+0x2b2/0x2e0 [ 345.773209][ T29] [ 345.776235][ T29] INFO: task syz.0.719:8052 blocked for more than 144 seconds. [ 345.785444][ T29] Not tainted syzkaller #0 [ 345.790516][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.801768][ T29] task:syz.0.719 state:D stack:27560 pid:8052 ppid:5777 flags:0x00004004 [ 345.813878][ T29] Call Trace: [ 345.818409][ T29] [ 345.821394][ T29] __schedule+0x15ae/0x4660 [ 345.825950][ T29] ? mark_lock+0x94/0x320 [ 345.830415][ T29] ? asan.module_dtor+0x20/0x20 [ 345.835326][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.840506][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 345.846443][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 345.852005][ T29] schedule+0xbd/0x170 [ 345.856131][ T29] io_schedule+0x80/0xd0 [ 345.861368][ T29] bit_wait_io+0x11/0xd0 [ 345.865781][ T29] __wait_on_bit+0x9f/0x2c0 [ 345.870708][ T29] ? bit_wait+0xd0/0xd0 [ 345.874918][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 345.880506][ T29] ? bit_wait+0xd0/0xd0 [ 345.884868][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 345.889788][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 345.894884][ T29] ? bit_waitqueue+0x30/0x30 [ 345.899749][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 345.905017][ T29] do_get_write_access+0x5c9/0xe00 [ 345.910465][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 345.917189][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 345.923412][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 345.929772][ T29] ? __might_sleep+0xe0/0xe0 [ 345.934595][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 345.940280][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 345.945792][ T29] ext4_dirty_inode+0xcb/0x110 [ 345.950810][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 345.956869][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 345.961980][ T29] file_update_time+0x187/0x1a0 [ 345.967046][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 345.972260][ T29] ? filemap_fault+0x103c/0x1540 [ 345.977426][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 345.983209][ T29] ? pte_alloc_one+0x3b6/0x540 [ 345.988299][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 345.994584][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 345.999698][ T29] do_page_mkwrite+0x153/0x3f0 [ 346.004667][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 346.009771][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 346.015527][ T29] ? numa_migrate_prep+0x350/0x350 [ 346.020898][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 346.026568][ T29] do_user_addr_fault+0x736/0x12d0 [ 346.031755][ T29] exc_page_fault+0x64/0x100 [ 346.036396][ T29] ? clear_bhb_loop+0x40/0x90 [ 346.041626][ T29] asm_exc_page_fault+0x26/0x30 [ 346.046580][ T29] RIP: 0033:0x7f2bd2c6baa3 [ 346.051142][ T29] RSP: 002b:00007ffe94c34500 EFLAGS: 00010246 [ 346.057403][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000 [ 346.065418][ T29] RDX: 0000001b2d624000 RSI: 0000000000600000 RDI: 00007f2bd2fe0708 [ 346.073609][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.081845][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 346.090014][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe94c34790 [ 346.098285][ T29] [ 346.106885][ T29] [ 346.106885][ T29] Showing all locks held in the system: [ 346.114682][ T29] 1 lock held by khungtaskd/29: [ 346.120335][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 346.131191][ T29] 6 locks held by kworker/u4:3/49: [ 346.136330][ T29] #0: ffff888141e4e538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 346.147963][ T29] #1: ffffc90000b9fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 346.160712][ T29] #2: ffff8880317ac0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 346.171598][ T29] #3: ffff8880317aec58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 346.183104][ T29] #4: ffff8880317f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 346.193113][ T29] #5: ffff88807729a088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 346.203150][ T29] 1 lock held by syslogd/5124: [ 346.208129][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 346.218182][ T29] 2 locks held by getty/5532: [ 346.223386][ T29] #0: ffff88802ced70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.233304][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 346.243545][ T29] 3 locks held by syz-executor/5763: [ 346.248973][ T29] #0: ffff88807ec48b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 346.259079][ T29] #1: ffff8880317ac510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 346.269004][ T29] #2: ffff8880317f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 346.278813][ T29] 3 locks held by syz.4.718/8050: [ 346.283881][ T29] #0: ffff88807f0bb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 346.293959][ T29] #1: ffff8880317ac510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 346.303819][ T29] #2: ffff8880317f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 346.313758][ T29] 3 locks held by syz.0.719/8052: [ 346.318843][ T29] #0: ffff88807f0bd720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 346.329473][ T29] #1: ffff8880317ac510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 346.339357][ T29] #2: ffff8880317f0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 346.349227][ T29] [ 346.351582][ T29] ============================================= [ 346.351582][ T29] [ 346.360370][ T29] NMI backtrace for cpu 1 [ 346.364762][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 346.371991][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.382080][ T29] Call Trace: [ 346.385383][ T29] [ 346.388338][ T29] dump_stack_lvl+0x18c/0x250 [ 346.393045][ T29] ? __wake_up_klogd+0xd9/0x100 [ 346.397929][ T29] ? show_regs_print_info+0x20/0x20 [ 346.403153][ T29] ? load_image+0x420/0x420 [ 346.407692][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 346.412667][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 346.418868][ T29] ? load_image+0x420/0x420 [ 346.423394][ T29] ? wq_watchdog_touch+0xef/0x170 [ 346.428460][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 346.434576][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 346.440588][ T29] watchdog+0xf59/0xfa0 [ 346.444775][ T29] ? watchdog+0x1e1/0xfa0 [ 346.449143][ T29] kthread+0x2fa/0x390 [ 346.453236][ T29] ? hungtask_pm_notify+0x50/0x50 [ 346.458287][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.462906][ T29] ret_from_fork+0x48/0x80 [ 346.467354][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.471971][ T29] ret_from_fork_asm+0x11/0x20 [ 346.476777][ T29] [ 346.480434][ T29] Sending NMI from CPU 1 to CPUs 0: [ 346.485713][ C0] NMI backtrace for cpu 0 [ 346.485722][ C0] CPU: 0 PID: 1148 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 346.485739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.485749][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 346.485774][ C0] RIP: 0010:preempt_count_add+0x42/0x1a0 [ 346.485800][ C0] Code: 2f 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 eb 00 00 00 83 3d 9e 2b d2 15 00 75 07 65 8b 05 1d bf a6 7e 65 01 3d 16 bf a6 7e <48> c7 c0 80 24 2f 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 [ 346.485814][ C0] RSP: 0018:ffffc9000452f598 EFLAGS: 00000282 [ 346.485828][ C0] RAX: 0000000080000001 RBX: 1ffff920008a5ed1 RCX: ffffffff972f2403 [ 346.485840][ C0] RDX: ffff888023e69e00 RSI: 0000000000000001 RDI: 0000000000000001 [ 346.485850][ C0] RBP: 0000000000000001 R08: ffffc9000452f750 R09: 000000000000000a [ 346.485860][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000452ff58 [ 346.485870][ C0] R13: ffffc9000452f688 R14: ffffc9000452f6c0 R15: dffffc0000000000 [ 346.485882][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 346.485896][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.485907][ C0] CR2: 000055b4b8127660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 346.485922][ C0] Call Trace: [ 346.485927][ C0] [ 346.485933][ C0] unwind_next_frame+0xb7/0x2990 [ 346.485956][ C0] ? ret_from_fork_asm+0x11/0x20 [ 346.485979][ C0] ? ret_from_fork_asm+0x11/0x20 [ 346.486000][ C0] ? stack_trace_save+0x100/0x100 [ 346.486022][ C0] arch_stack_walk+0x144/0x190 [ 346.486042][ C0] ? ret_from_fork_asm+0x11/0x20 [ 346.486066][ C0] stack_trace_save+0xaa/0x100 [ 346.486085][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 346.486105][ C0] ? stack_trace_save+0xaa/0x100 [ 346.486127][ C0] ? kasan_set_track+0x5f/0x70 [ 346.486146][ C0] ? kasan_set_track+0x4e/0x70 [ 346.486165][ C0] kasan_set_track+0x4e/0x70 [ 346.486182][ C0] ? kasan_set_track+0x4e/0x70 [ 346.486199][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 346.486218][ C0] ? __kmalloc_node_track_caller+0xb4/0x230 [ 346.486242][ C0] ? kmalloc_reserve+0x116/0x240 [ 346.486262][ C0] ? __alloc_skb+0x138/0x2c0 [ 346.486279][ C0] ? nsim_dev_trap_report_work+0x253/0xa90 [ 346.486298][ C0] ? process_scheduled_works+0xa60/0x1600 [ 346.486319][ C0] ? worker_thread+0xa5e/0xfe0 [ 346.486338][ C0] ? kthread+0x2fa/0x390 [ 346.486364][ C0] ? ret_from_fork+0x48/0x80 [ 346.486382][ C0] ? ret_from_fork_asm+0x11/0x20 [ 346.486440][ C0] ? __kmem_cache_alloc_node+0x194/0x250 [ 346.486464][ C0] ? __alloc_skb+0x138/0x2c0 [ 346.486483][ C0] __kasan_kmalloc+0x8f/0xa0 [ 346.486508][ C0] ? __alloc_skb+0x138/0x2c0 [ 346.486529][ C0] __kmalloc_node_track_caller+0xb4/0x230 [ 346.486554][ C0] ? rcu_is_watching+0x15/0xb0 [ 346.486579][ C0] ? __alloc_skb+0x138/0x2c0 [ 346.486598][ C0] kmalloc_reserve+0x116/0x240 [ 346.486622][ C0] __alloc_skb+0x138/0x2c0 [ 346.486646][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 346.486673][ C0] ? process_scheduled_works+0x975/0x1600 [ 346.486696][ C0] process_scheduled_works+0xa60/0x1600 [ 346.486731][ C0] ? worker_attach_to_pool+0x370/0x370 [ 346.486755][ C0] ? assign_work+0x3cc/0x5d0 [ 346.486779][ C0] worker_thread+0xa5e/0xfe0 [ 346.486806][ C0] ? _raw_spin_unlock+0x40/0x40 [ 346.486829][ C0] ? __kthread_parkme+0x71/0x1c0 [ 346.486849][ C0] kthread+0x2fa/0x390 [ 346.486882][ C0] ? pr_cont_work+0x550/0x550 [ 346.486903][ C0] ? kthread_blkcg+0xd0/0xd0 [ 346.486920][ C0] ret_from_fork+0x48/0x80 [ 346.486940][ C0] ? kthread_blkcg+0xd0/0xd0 [ 346.486957][ C0] ret_from_fork_asm+0x11/0x20 [ 346.486987][ C0] [ 346.506885][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 346.506919][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 346.506971][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.507005][ T29] Call Trace: [ 346.507025][ T29] [ 346.507046][ T29] dump_stack_lvl+0x18c/0x250 [ 346.507148][ T29] ? show_regs_print_info+0x20/0x20 [ 346.507222][ T29] ? load_image+0x420/0x420 [ 346.507314][ T29] panic+0x2ca/0x720 [ 346.507406][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 346.507479][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 346.507546][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 346.507628][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 346.507728][ T29] watchdog+0xf98/0xfa0 [ 346.507802][ T29] ? watchdog+0x1e1/0xfa0 [ 346.507893][ T29] kthread+0x2fa/0x390 [ 346.507947][ T29] ? hungtask_pm_notify+0x50/0x50 [ 346.508034][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.508104][ T29] ret_from_fork+0x48/0x80 [ 346.508165][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.508217][ T29] ret_from_fork_asm+0x11/0x20 [ 346.508307][ T29] [ 346.509701][ T29] Kernel Offset: disabled [ 346.958808][ T29] Rebooting in 86400 seconds..