last executing test programs: 1m42.242694807s ago: executing program 1 (id=429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}], 0x1c) 1m42.038210838s ago: executing program 1 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='0fc5:1227:hmh', 0xd) 1m41.511564342s ago: executing program 1 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) 1m39.480492719s ago: executing program 1 (id=452): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000b80)="$eJzs3U+LW1UUAPDzMpNMqouM4EoE38KFqzLt1k0GaUGclZKFblRsCzIJQgsDLeKbrvwUbt0Igh/Ejd9AcCu4LLTw5L4/yUsMMSlNxc7vt0hv7jvn3nPfyx8aeHe+eHt2fiePe4+//T2Gwyx64xjHkyyOoxety+i6FgDA/9uTsoy/ytoueVlEDPdXFgCwR9X3/9Mdvv9/2XtJAMCeffLpZx+dnp3d+jjPh3F79v3FJP3PPv1bHz+9F1/HNO7GSYyqn/7Lcv5rQXq8XZZlcZgnx/HurLiYpMzZ578245/+GRGHzZPj6nE5/8OzWzfyWie/SHW81sw/TvPfjFG82Zm+k39zTX5MBvFev1P/9RjFb1/FNzGNO1URdX70Ir67kecfNCVeRsrPiovJURW3UB68rGsCAAAAAAAAAAAAAAAAAAAAAMCr73qe53mRWtX+PanR7L9z8Cw96UfeOl7en6fOz9qBTmIUzxb78xRl/NDuz3OS53lZB/YW4x/GW4fznYEAAAAAAAAAAAAAAAAAAADgSnvw8NH5l9Pp3fsvpFHd5N+5p/95xxl3et6JzcFHi7l6TXPDyHHQxmQRG8tI69i65qfNtgfPd+reaGu+tnLop583prdrST0//vvam0Z/i5hOI03y8NF5urTrYrJ1WTEvLFt/Do+i7RlGr7OKNmawdq41jcFyz3B+TcudXn6DtYdG25+o7LJexOtVT7EhOLJNhb3/Rz1O05OtrmKwcqJSo+npNz2d9OUphtu8nrOsfaf0Vz8rsvk7O3shnz0AAAAAAAAAAAAAAAAAAMCy7l3E//B4Y2qvPNpbWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwUi3+/v8OjaJJ3iJ4EPcf/MdLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ar4OwAA///GhUq0") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x892, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff) 1m36.337847297s ago: executing program 1 (id=462): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) 1m35.57128903s ago: executing program 1 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c001480"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1m34.717357725s ago: executing program 32 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c001480"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 6.31739109s ago: executing program 0 (id=1309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000001fc0)=""/4097, 0x41000, 0x4d}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) 6.140100871s ago: executing program 0 (id=1311): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@test_dummy_encryption_v1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) 5.461327993s ago: executing program 0 (id=1318): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 4.964972747s ago: executing program 0 (id=1323): r0 = socket$inet6(0xa, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r1, r1, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) 4.688677218s ago: executing program 0 (id=1328): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) read(r0, &(0x7f0000000400)=""/128, 0x80) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 4.069353645s ago: executing program 0 (id=1336): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000340)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4c62f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41edcd3beef9757a601bee93639000d2ab29c948853ac85e96c09c5bbdae29298f29484685aa4ef6e4c8f0cb7c53fb208e2b3c328cf440a4179e86e6fd6f26bd4af2d1de3e4be695d06004cb0bb3f2140403779e1989ce3151aa5f986b2fe9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.446458077s ago: executing program 4 (id=1341): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x800000000000072, 0x101202) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x2) 3.331653816s ago: executing program 4 (id=1343): unshare(0x2c020400) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000ffc)) 3.045668034s ago: executing program 2 (id=1345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x140, 0x65, 0x400, 0x270bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_ACT={0x110, 0x1, [@m_bpf={0x54, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be109311739257508"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xb8, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x61, 0x6, "3f664d65ad79178dad4d7815e4c50308bfba3f35e2b90355966ed0ed5095219549287bd8b7c2a4646f1cb6b7f0853d3faf9141b4852152ae06b923f29f87d7dcc542255be647ec06862fbe83a0b5909e656ae759165d478e15639b1ad7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.82368007s ago: executing program 4 (id=1348): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 2.60495028s ago: executing program 2 (id=1351): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.426142348s ago: executing program 5 (id=1353): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r0, 0x0, 0x0}, 0x1c) 2.306321001s ago: executing program 3 (id=1354): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f0000000700)=[{0x10, 0x6, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffff}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x5f}) 2.162027715s ago: executing program 5 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 2.074976541s ago: executing program 4 (id=1356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd840010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x34, 0x6000000000000000, 0xfffffffffffffecf, 0x1d4}, 0x28) 2.011942668s ago: executing program 2 (id=1357): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x8905, 0x0) 1.832827423s ago: executing program 3 (id=1358): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.772734591s ago: executing program 6 (id=1359): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x2, 0x3}}, 0x48) 1.768315491s ago: executing program 2 (id=1360): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 1.626139985s ago: executing program 4 (id=1361): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) 1.5886678s ago: executing program 5 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.429680675s ago: executing program 6 (id=1363): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x1, 0xc1, 0x4, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x1c02, 0xb, 0xfda, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0xffffff29, 0x8, 0x5, 0x479b, 0x2, 0xa8, 0x7f, 0x4, 0xa, 0x7, 0x12, 0x4000101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100003, 0x8, 0x752, 0x0, 0x3, 0xc, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x7f, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x400008, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.259341468s ago: executing program 4 (id=1364): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.256173048s ago: executing program 6 (id=1365): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x1b5) semop(r0, &(0x7f00000000c0)=[{0x4, 0xfffe}], 0x1) semop(r0, &(0x7f0000000140)=[{0x4, 0x6, 0x2cb1509397a642eb}], 0x1) 1.084973179s ago: executing program 3 (id=1366): socket(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x8040600) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 939.569881ms ago: executing program 5 (id=1367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000680)="200090bb24", 0x5}], 0x1) 901.160342ms ago: executing program 6 (id=1368): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close(0x3) 891.01424ms ago: executing program 3 (id=1369): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x6}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 649.827746ms ago: executing program 5 (id=1370): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 580.884457ms ago: executing program 3 (id=1371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='sub:*', 0x5) 478.314803ms ago: executing program 6 (id=1372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@bsdgroups}, {@nodioread_nolock}, {@nolazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x852) preadv2(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)=""/216, 0xfdef}], 0x2, 0x800, 0x5, 0x4) 447.528067ms ago: executing program 2 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 223.484058ms ago: executing program 5 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, '\nN@\"5'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 223.335612ms ago: executing program 3 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40480c0) 208.522541ms ago: executing program 2 (id=1376): socket$rds(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 0s ago: executing program 6 (id=1377): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000380)='./bus/file0\x00', 0x64842, 0x0) kernel console output (not intermixed with test programs): ntfs3(loop2): ino=5, mi_enum_attr [ 128.255173][ T6724] process 'syz.3.329' launched '/dev/fd/3' with NULL argv: empty string added [ 128.348762][ T6730] bad cache= option: nonelock 0 [ 128.348762][ T6730] nr_zspages 0 [ 128.348762][ T6730] nr_free_cma 0 [ 128.348762][ T6730] numa_hit 544054 [ 128.348762][ T6730] numa_miss 1 [ 128.348762][ T6730] numa_foreign 1 [ 128.348762][ T6730] numa_interleave 5881 [ 128.348762][ T6730] numa_local 541012 [ 128.348762][ T6730] numa_other 3043 [ 128.348762][ T6730] nr_inactive_anon 0 [ 128.348762][ T6730] nr_active_anon 6748 [ 128.348762][ T6730] nr_inactive_file 53456 [ 128.348762][ T6730] nr_active_file 0 [ 128.348762][ T6730] nr_unevictable 0 [ 128.348762][ T6730] nr_slab_reclaimable 10658 [ 128.348762][ T6730] nr_slab_unreclaimable 98485 [ 128.348762][ T6730] nr_isolated_anon 0 [ 128.348762][ T6730] nr_isolated_file 0 [ 128.348762][ T6730] workingset_nodes 0 [ 128.348762][ T6730] workingset_refault_anon 0 [ 128.348762][ T6730] workingset_refault_file 0 [ 128.348762][ T6730] workingset_activate_anon 0 [ 128.348762][ T6730] workingset_activate_file 0 [ 128.348762][ T6730] workingset_restore_anon 0 [ 128.348762][ T6730] workingset_restore_file 0 [ 128.348762][ T6730] workingset_nodereclaim 0 [ 128.348762][ T6730] nr_anon_pages 6286 [ 128.348762][ T6730] nr_mapped 35274 [ 128.348762][ T6730] nr_file_pages 53971 [ 128.348762][ T6730] nr_dirty 613 [ 128.348762][ T6730] nr_writeback 0 [ 128.348762][ T6730] nr_shmem 530 [ 128.348762][ T6730] nr_shmem_hugepages 0 [ 128.348762][ T6730] nr_shmem_pmdmapped 0 [ 128.348762][ T6730] nr_file_hugepages 0 [ 128.348762][ T6730] nr_file_pmdmapped 0 [ 128.348762][ T6730] nr_anon_transparent_hugepages 0 [ 128.348762][ T6730] nr_vmscan_write 0 [ 128.348762][ T6730] nr_vmscan_immediate_reclaim 0 [ 128.348762][ T6730] nr_dirtied 3000 [ 128.348762][ T6730] nr_written 2376 [ 128.348762][ T6730] nr_throttled_written 0 [ 128.348762][ T6730] nr_kernel_misc_reclaimable 0 [ 128.348762][ T6730] nr_foll_pin_acquired 6145 [ 128.348762][ T6730] nr_foll_pin_released 6145 [ 128.348762][ T6730] nr_vmalloc 103675 [ 128.349172][ T6730] CIFS: VFS: bad cache= option: nonelock 0 [ 128.349172][ T6730] nr_zspages 0 [ 128.349172][ T6730] nr_free_cma 0 [ 128.349172][ T6730] numa_hit 544054 [ 128.349172][ T6730] numa_miss 1 [ 128.349172][ T6730] numa_foreign 1 [ 128.349172][ T6730] numa_interleave 5881 [ 128.349172][ T6730] numa_local 541012 [ 128.349172][ T6730] numa_other 3043 [ 128.349172][ T6730] nr_inactive_anon 0 [ 128.349172][ T6730] nr_active_anon 6748 [ 128.349172][ T6730] nr_inactive_file 53456 [ 128.349172][ T6730] nr_active_file 0 [ 128.349172][ T6730] nr_unevictable 0 [ 128.349172][ T6730] nr_slab_reclaimable 10658 [ 128.349172][ T6730] nr_slab_unreclaimable 98485 [ 128.349172][ T6730] nr_isolated_anon 0 [ 128.349172][ T6730] nr_isolated_file 0 [ 128.349172][ T6730] workingset_nodes 0 [ 128.349172][ T6730] workingset_refault_anon 0 [ 128.349172][ T6730] workingset_refault_file 0 [ 128.349172][ T6730] workingset_activate_anon 0 [ 128.349172][ T6730] workingset_activate_file 0 [ 128.349172][ T6730] workingset_restore_anon 0 [ 128.349172][ T6730] workingset_restore_file 0 [ 128.349172][ T6730] workingset_nodereclaim 0 [ 128.349172][ T6730] nr_anon_pages 6286 [ 128.349172][ T6730] nr_mapped 35274 [ 128.349172][ T6730] nr_file_pages 53971 [ 128.349172][ T6730] nr_dirty 613 [ 128.349172][ T6730] nr_writeback 0 [ 128.349172][ T6730] nr_shmem 530 [ 128.349172][ T6730] nr_shmem_hugepages 0 [ 128.349172][ T6730] nr_shmem_pmdmapped 0 [ 128.349172][ T6730] nr_file_hugepages 0 [ 128.349172][ T6730] nr_file_pmdmapped 0 [ 128.349172][ T6730] nr_anon_transparent_hugepages 0 [ 128.349172][ T6730] nr_vmscan_write 0 [ 128.349172][ T6730] nr_vmscan_immediate_reclaim 0 [ 128.349172][ T6730] nr_dirtied 3000 [ 128.349172][ T6730] nr_written 2376 [ 128.349172][ T6730] nr_throttled_written 0 [ 128.349172][ T6730] nr_kernel_misc_reclaimable 0 [ 128.349172][ T6730] nr_foll_pin_acquired 6145 [ 128.349172][ T6730] nr_foll_pin_released 6145 [ 128.349172][ T6730] nr_vmalloc 103675 [ 128.552097][ T6728] loop2: detected capacity change from 0 to 64 [ 129.101021][ T6743] loop4: detected capacity change from 0 to 512 [ 129.140366][ T6740] macvtap1: entered allmulticast mode [ 129.140762][ T6740] veth1_to_batadv: entered promiscuous mode [ 129.140790][ T6740] veth1_to_batadv: entered allmulticast mode [ 129.173170][ T6740] team0: Device macvtap1 failed to register rx_handler [ 129.182288][ T6740] veth1_to_batadv: left allmulticast mode [ 129.182316][ T6740] veth1_to_batadv: left promiscuous mode [ 129.713954][ T6761] loop2: detected capacity change from 0 to 512 [ 129.727079][ T6761] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.727097][ T6761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.760101][ T6761] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.348: inode has both inline data and extents flags [ 129.760135][ T6761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.760802][ T6761] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.348: couldn't read orphan inode 15 (err -117) [ 129.760834][ T6761] loop2: lost filesystem error report for type 5 error -117 [ 129.809906][ T6761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.862031][ T31] audit: type=1800 audit(1790417286.000:48): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.348" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 129.939627][ T6766] program syz.4.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.989638][ T6768] loop3: detected capacity change from 0 to 256 [ 130.127289][ T6774] tap0: tun_chr_ioctl cmd 1074025677 [ 130.127399][ T6774] tap0: linktype set to 776 [ 130.334816][ T983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.488861][ T983] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 130.511272][ T983] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.511306][ T983] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 130.511333][ T983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.511378][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.575290][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.575436][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.601703][ T983] pl2303 5-1:1.0: pl2303 converter detected [ 130.654785][ T983] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 130.726646][ T6784] sd 0:0:1:0: PR command failed: 1026 [ 130.726697][ T6784] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 130.726741][ T6784] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 130.907034][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.936683][ T6775] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 130.937397][ T6775] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 130.938560][ T6775] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 130.939172][ T6775] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 130.978272][ T6775] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 131.062994][ T6792] loop1: detected capacity change from 0 to 1024 [ 131.269054][ T6775] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 131.282455][ T6775] pl2303 ttyUSB0: error sending break = -32 [ 131.402615][ T9] usb 5-1: USB disconnect, device number 2 [ 131.531012][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 131.531797][ T9] pl2303 5-1:1.0: device disconnected [ 131.639434][ T6804] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 131.737469][ T6808] loop1: detected capacity change from 0 to 1024 [ 131.860252][ T6808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.053192][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 132.160823][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.160891][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.263618][ T6816] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #11: comm syz.1.368: empty directory 'file0' has too many links (111) [ 132.485290][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.496137][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'. [ 132.595053][ T983] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 132.752587][ T983] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.753979][ T983] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.754007][ T983] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.754030][ T983] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.754078][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.754103][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.754127][ T983] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.754172][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.840295][ T983] usb 5-1: config 0 descriptor?? [ 132.872520][ T6839] input: syz0 as /devices/virtual/input/input13 [ 133.126735][ T983] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.230832][ T983] usb 5-1: USB disconnect, device number 3 [ 133.288442][ T983] usblp0: removed [ 133.294803][ T6850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.466869][ T6859] loop3: detected capacity change from 0 to 256 [ 133.482360][ T6852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.679869][ T6826] loop0: detected capacity change from 0 to 32768 [ 133.683521][ T6826] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.377 (6826) [ 133.698496][ T6826] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 133.698528][ T6826] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 133.836646][ T6879] blkio.reset_stats is deprecated [ 133.935685][ T6826] BTRFS info (device loop0): setting nodatasum [ 133.935715][ T6826] BTRFS info (device loop0): allowing degraded mounts [ 133.938825][ T6826] BTRFS info (device loop0): turning on async discard [ 133.938848][ T6826] BTRFS info (device loop0): enabling free space tree [ 133.938870][ T6826] BTRFS info (device loop0): force zlib compression, level 3 [ 134.087520][ T6893] loop5: detected capacity change from 0 to 2048 [ 134.130439][ T6893] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 134.194650][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.280619][ T6897] capability: warning: `syz.5.397' uses deprecated v2 capabilities in a way that may be insecure [ 134.367829][ T5616] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.284308][ T6916] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.500072][ T5629] Bluetooth: hci0: Zero size dump init pkt [ 137.004804][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.038928][ T6956] bond0: entered promiscuous mode [ 137.038953][ T6956] bond_slave_0: entered promiscuous mode [ 137.041047][ T6956] bond_slave_1: entered promiscuous mode [ 137.053427][ T6956] ipvlan1: entered promiscuous mode [ 137.056803][ T6956] ipvlan1: left promiscuous mode [ 137.074094][ T6956] bond0: left promiscuous mode [ 137.074116][ T6956] bond_slave_0: left promiscuous mode [ 137.074334][ T6956] bond_slave_1: left promiscuous mode [ 137.128471][ T6934] loop0: detected capacity change from 0 to 32768 [ 137.158754][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 137.159707][ T30] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.165035][ T30] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.165065][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.165094][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.165121][ T30] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.165166][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.250353][ T6934] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.313728][ T6940] loop2: detected capacity change from 0 to 32768 [ 137.429435][ T6934] XFS (loop0): Ending clean mount [ 137.450335][ T30] usb 4-1: GET_CAPABILITIES returned 0 [ 137.450551][ T30] usbtmc 4-1:16.0: can't read capabilities [ 137.475188][ T6940] JBD2: Ignoring recovery information on journal [ 137.701855][ T6971] ip_tables: iptables: counters copy to user failed while replacing table [ 137.712880][ T6940] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.721547][ T983] usb 4-1: USB disconnect, device number 3 [ 137.819294][ T5616] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.890067][ T31] audit: type=1804 audit(1790417294.030:49): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.420" name="/newroot/82/file1/file1" dev="loop2" ino=17059 res=1 errno=0 [ 138.318530][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 138.476529][ T983] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.637560][ T983] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 138.639151][ T983] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 138.639183][ T983] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 138.639211][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.639255][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.648681][ T6986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.649215][ T6986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.661590][ T983] pl2303 2-1:1.0: pl2303 converter detected [ 138.671046][ T983] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 138.717387][ T6993] loop0: detected capacity change from 0 to 16 [ 138.772824][ T31] audit: type=1400 audit(1790417294.910:50): apparmor="STATUS" operation="profile_load" profile="unconfined" name=222F6F pid=6994 comm="syz.4.442" [ 138.818062][ T6993] erofs (device loop0): mounted with root inode @ nid 36. [ 139.022601][ T7001] warning: `syz.2.445' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.048539][ T6986] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 139.048938][ T6986] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 139.049323][ T6986] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 139.053543][ T6986] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 139.060755][ T6986] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 139.344756][ T6986] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 139.353439][ T6986] pl2303 ttyUSB0: error sending break = -32 [ 139.406892][ T5839] usb 2-1: USB disconnect, device number 5 [ 139.418528][ T7005] ip_tables: iptables: counters copy to user failed while replacing table [ 139.438678][ T5839] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 139.439455][ T5839] pl2303 2-1:1.0: device disconnected [ 139.571732][ T6999] loop4: detected capacity change from 0 to 32768 [ 139.583526][ T6999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.443 (6999) [ 139.623856][ T6999] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.623890][ T6999] BTRFS info (device loop4): using crc32c checksum algorithm [ 139.768629][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 139.803698][ T7023] loop2: detected capacity change from 0 to 1024 [ 139.831039][ T6999] BTRFS info (device loop4): enabling ssd optimizations [ 139.831067][ T6999] BTRFS info (device loop4): turning on flush-on-commit [ 139.831086][ T6999] BTRFS info (device loop4): turning on async discard [ 139.831104][ T6999] BTRFS info (device loop4): enabling free space tree [ 139.831125][ T6999] BTRFS info (device loop4): use zlib compression, level 3 [ 139.831148][ T6999] BTRFS info (device loop4): max_inline set to 7 [ 139.866031][ T7026] ipvlan2: entered allmulticast mode [ 139.866055][ T7026] syz_tun: entered allmulticast mode [ 142.543380][ T5617] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.659719][ T7034] loop1: detected capacity change from 0 to 256 [ 143.349869][ T5613] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 143.349897][ T5613] FAT-fs (loop1): Filesystem has been set read-only [ 143.388929][ T7051] bond0: entered promiscuous mode [ 143.388955][ T7051] bond_slave_0: entered promiscuous mode [ 143.389275][ T7051] bond_slave_1: entered promiscuous mode [ 143.432918][ T5613] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 143.443491][ T7051] ipvlan1: entered promiscuous mode [ 143.460865][ T7051] ipvlan1: left promiscuous mode [ 143.511092][ T7051] bond0: left promiscuous mode [ 143.511119][ T7051] bond_slave_0: left promiscuous mode [ 143.511364][ T7051] bond_slave_1: left promiscuous mode [ 143.764040][ T7057] loop4: detected capacity change from 0 to 4096 [ 143.767482][ T7057] ext4: Unknown parameter 'euid>18446744073709551615' [ 143.816256][ T7059] loop0: detected capacity change from 0 to 1024 [ 143.899095][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.121617][ T7068] loop3: detected capacity change from 0 to 164 [ 144.122061][ T7061] loop2: detected capacity change from 0 to 4096 [ 144.154113][ T7061] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 144.309580][ T7068] isofs: Unable to find the "." directory for NFS. [ 144.347676][ T7061] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 144.350879][ T7061] ntfs3(loop2): ino=1a, mi_enum_attr [ 144.351069][ T7061] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 144.468540][ T1406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.606394][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.786494][ T1406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.009202][ T7080] netlink: 480 bytes leftover after parsing attributes in process `syz.5.475'. [ 145.009293][ T7080] netlink: 480 bytes leftover after parsing attributes in process `syz.5.475'. [ 145.105485][ T1406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.192641][ T7085] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 145.192671][ T7085] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 145.350169][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 145.476000][ T7090] CacheFiles: Failed to register: -95 [ 145.490355][ T1406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.574378][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.578189][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.579385][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.584677][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.585714][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.730232][ T7094] bond0: entered promiscuous mode [ 145.730258][ T7094] bond_slave_0: entered promiscuous mode [ 145.730478][ T7094] bond_slave_1: entered promiscuous mode [ 145.760936][ T7094] ipvlan1: entered promiscuous mode [ 145.773134][ T7094] ipvlan1: left promiscuous mode [ 145.781546][ T7094] bond0: left promiscuous mode [ 145.781569][ T7094] bond_slave_0: left promiscuous mode [ 145.782029][ T7094] bond_slave_1: left promiscuous mode [ 146.135315][ T5345] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.288049][ T5345] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 146.290838][ T5345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.290891][ T5345] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 146.290937][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.618190][ T5345] cxacru 1-1:1.0: invalid response length to cm 0x90: 0 [ 146.618262][ T5345] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 146.618714][ T5345] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 146.696638][ T1406] bridge_slave_1: left allmulticast mode [ 146.696683][ T1406] bridge_slave_1: left promiscuous mode [ 146.699687][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.757198][ T1406] bridge_slave_0: left allmulticast mode [ 146.757227][ T1406] bridge_slave_0: left promiscuous mode [ 146.757510][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.046232][ T30] usb 1-1: USB disconnect, device number 4 [ 147.202957][ T7128] loop2: detected capacity change from 0 to 4096 [ 147.215146][ T7131] nbd0: detected capacity change from 0 to 127 [ 147.273700][ T5629] block nbd0: Receive control failed (result -104) [ 147.339708][ T7128] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 147.339741][ T7128] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 147.665081][ T5629] Bluetooth: hci1: command tx timeout [ 147.861125][ T717] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 147.870118][ T5618] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 147.870148][ T5618] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 147.870167][ T5618] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 147.870378][ T50] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 148.220411][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.272495][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.305686][ T1406] bond0 (unregistering): Released all slaves [ 148.329680][ T31] audit: type=1804 audit(1790417304.470:51): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.500" name="/newroot/92/file1" dev="tmpfs" ino=504 res=1 errno=0 [ 148.547719][ T7154] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 148.554249][ T7166] loop0: detected capacity change from 0 to 128 [ 148.590522][ T7166] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 148.622996][ T7165] Bluetooth: MGMT ver 1.23 [ 148.633861][ T7166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.727999][ T7155] bond0: entered promiscuous mode [ 148.728025][ T7155] bond_slave_0: entered promiscuous mode [ 148.728243][ T7155] bond_slave_1: entered promiscuous mode [ 148.760472][ T7155] ipvlan1: entered promiscuous mode [ 148.775880][ T7155] ipvlan1: left promiscuous mode [ 148.788684][ T7155] bond0: left promiscuous mode [ 148.788706][ T7155] bond_slave_0: left promiscuous mode [ 148.789369][ T7155] bond_slave_1: left promiscuous mode [ 148.819389][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 149.292571][ T7175] loop0: detected capacity change from 0 to 512 [ 149.304123][ T7175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.345828][ T7175] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.505: inode has both inline data and extents flags [ 149.345864][ T7175] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.348833][ T7175] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.505: couldn't read orphan inode 15 (err -117) [ 149.348867][ T7175] loop0: lost filesystem error report for type 5 error -117 [ 149.396138][ T7175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.522199][ T31] audit: type=1800 audit(1790417305.660:52): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 149.591971][ T31] audit: type=1400 audit(1790417305.730:53): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=7180 comm="syz.5.507" name="p" offset=92 [ 149.745363][ T5629] Bluetooth: hci1: command tx timeout [ 150.040163][ T7195] loop3: detected capacity change from 0 to 512 [ 150.192235][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.192266][ T7195] FAT-fs (loop3): Filesystem has been set read-only [ 150.217350][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.218342][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.259209][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.259942][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.260794][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.261483][ T7195] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 150.261803][ T7195] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 150.332856][ T1406] hsr_slave_0: left promiscuous mode [ 150.339818][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.393196][ T1406] hsr_slave_1: left promiscuous mode [ 150.394362][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.394402][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.427383][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.427406][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.561437][ T1978] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.565171][ T1978] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.565228][ T1978] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.565284][ T1978] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.565507][ T1978] block nbd0: Dead connection, failed to find a fallback [ 150.565527][ T1978] block nbd0: shutting down sockets [ 150.565622][ T1978] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.565732][ T1978] Buffer I/O error on dev nbd0, logical block 3, async page read [ 150.565796][ T1978] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.565826][ T1978] Buffer I/O error on dev nbd0, logical block 2, async page read [ 150.565851][ T1978] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.565877][ T1978] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.565902][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.565926][ T1978] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.570725][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.570758][ T1978] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.570785][ T1978] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.570803][ T1978] Buffer I/O error on dev nbd0, logical block 2, async page read [ 150.570821][ T1978] Buffer I/O error on dev nbd0, logical block 3, async page read [ 150.571767][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.571798][ T1978] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.571817][ T1978] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.573727][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.574033][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.574432][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.575036][ T1978] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.576380][ T5637] ldm_validate_partition_table(): Disk read failed. [ 150.590212][ T5637] Dev nbd0: unable to read RDB block 0 [ 150.621206][ T5637] nbd0: unable to read partition table [ 150.680413][ T1406] veth1_macvtap: left promiscuous mode [ 150.680527][ T1406] veth0_macvtap: left promiscuous mode [ 150.680735][ T1406] veth1_vlan: left promiscuous mode [ 150.680843][ T1406] veth0_vlan: left promiscuous mode [ 150.796218][ T5637] ldm_validate_partition_table(): Disk read failed. [ 150.817109][ T5637] Dev nbd0: unable to read RDB block 0 [ 150.840093][ T5637] nbd0: unable to read partition table [ 150.993576][ T7216] input: syz1 as /devices/virtual/input/input14 [ 151.426882][ T7227] netlink: 144 bytes leftover after parsing attributes in process `syz.0.521'. [ 151.429778][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 151.454861][ T3345] IPVS: starting estimator thread 0... [ 151.556430][ T7229] IPVS: using max 24 ests per chain, 57600 per kthread [ 151.700862][ T7238] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 151.825371][ T5629] Bluetooth: hci1: command tx timeout [ 151.895383][ T5623] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.042064][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 152.062568][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 152.071231][ T5623] usb 3-1: Using ep0 maxpacket: 32 [ 152.072446][ T5623] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 152.084317][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.084343][ T5623] usb 3-1: Product: syz [ 152.084360][ T5623] usb 3-1: Manufacturer: syz [ 152.084377][ T5623] usb 3-1: SerialNumber: syz [ 152.096931][ T5623] usb 3-1: config 0 descriptor?? [ 152.116889][ T5623] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 152.342860][ T7246] loop4: detected capacity change from 0 to 32768 [ 152.504281][ T7207] bond0: entered promiscuous mode [ 152.504333][ T7207] bond_slave_0: entered promiscuous mode [ 152.507800][ T7207] bond_slave_1: entered promiscuous mode [ 152.522652][ T7207] ipvlan1: entered promiscuous mode [ 152.529420][ T7207] ipvlan1: left promiscuous mode [ 152.531494][ T7207] bond0: left promiscuous mode [ 152.531513][ T7207] bond_slave_0: left promiscuous mode [ 152.531868][ T7207] bond_slave_1: left promiscuous mode [ 152.546329][ T5623] gspca_ov534_9: reg_w failed -71 [ 152.582236][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.593909][ T7250] fuse: Bad value for 'fd' [ 152.608605][ T7235] bridge_slave_0: left allmulticast mode [ 152.608629][ T7235] bridge_slave_0: left promiscuous mode [ 152.611363][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.666518][ T7235] bridge_slave_1: left allmulticast mode [ 152.666548][ T7235] bridge_slave_1: left promiscuous mode [ 152.666817][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.712232][ T7235] bond0: (slave bond_slave_0): Releasing backup interface [ 152.740008][ T7235] bond0: (slave bond_slave_1): Releasing backup interface [ 152.768108][ T7235] team0: Port device team_slave_0 removed [ 152.792342][ T7235] team0: Port device team_slave_1 removed [ 152.793271][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.793302][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.825163][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.825193][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.829991][ T7235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.876942][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.932389][ T7238] team0: Port device dummy0 added [ 152.987811][ T5623] gspca_ov534_9: Unknown sensor 0000 [ 152.987901][ T5623] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 153.044375][ T5623] usb 3-1: USB disconnect, device number 2 [ 153.047857][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 153.050848][ T25] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.050880][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.050915][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.071834][ T25] usb 5-1: config 0 descriptor?? [ 153.459693][ T7263] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.799748][ T5839] usb 5-1: USB disconnect, device number 4 [ 153.909767][ T5629] Bluetooth: hci1: command tx timeout [ 153.970366][ T7281] loop2: detected capacity change from 0 to 128 [ 154.019009][ T31] audit: type=1800 audit(1790417310.160:54): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.540" name="file1" dev="loop2" ino=1048626 res=0 errno=0 [ 154.068114][ T7280] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 154.068143][ T7280] FAT-fs (loop2): Filesystem has been set read-only [ 154.692912][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.693216][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.693401][ T7089] bridge_slave_0: entered allmulticast mode [ 154.716968][ T7089] bridge_slave_0: entered promiscuous mode [ 154.726400][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.726679][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.726831][ T7089] bridge_slave_1: entered allmulticast mode [ 154.728825][ T7089] bridge_slave_1: entered promiscuous mode [ 155.030781][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.072197][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.161978][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 155.279565][ T7089] team0: Port device team_slave_0 added [ 155.303752][ T7089] team0: Port device team_slave_1 added [ 155.398606][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.435530][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'. [ 155.509714][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.509734][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.509763][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.528052][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.528069][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.528098][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.728894][ T5623] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.761237][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.957287][ T7335] loop2: detected capacity change from 0 to 128 [ 155.998931][ T7089] hsr_slave_0: entered promiscuous mode [ 156.016816][ T7089] hsr_slave_1: entered promiscuous mode [ 156.028146][ T983] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 156.049162][ T7335] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.055684][ T7335] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.313966][ T7322] ceph: No mds server is up or the cluster is laggy [ 156.378553][ T5618] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.535914][ T5623] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 156.854726][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.019306][ T5839] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.021085][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.053310][ T5839] usb 3-1: config 0 descriptor?? [ 157.064163][ T5839] cp210x 3-1:0.0: cp210x converter detected [ 157.310206][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 157.513543][ T5839] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 157.587105][ T5839] usb 3-1: cp210x converter now attached to ttyUSB0 [ 157.613152][ T7089] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.743665][ T5839] usb 3-1: USB disconnect, device number 3 [ 157.786822][ T7089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.788749][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.817960][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.819999][ T5839] cp210x 3-1:0.0: device disconnected [ 157.838436][ T7089] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.958235][ T7089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.969044][ T7089] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.058935][ T7089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.070724][ T7089] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.166735][ T7089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.293872][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.572'. [ 158.293910][ T7388] netlink: 'syz.4.572': attribute type 7 has an invalid length. [ 158.293926][ T7388] netlink: 'syz.4.572': attribute type 8 has an invalid length. [ 158.293940][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 158.463793][ T7398] loop5: detected capacity change from 0 to 1024 [ 158.867525][ T7404] loop4: detected capacity change from 0 to 512 [ 158.896943][ T7404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.900746][ T7089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.903259][ T7404] EXT4-fs error (device loop4): ext4_xattr_inode_iget:473: comm syz.4.576: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 158.903291][ T7404] loop4: lost filesystem error report for type 5 error -117 [ 158.906428][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 158.906452][ C1] EXT4-fs (loop4): initial error at time 1790417315: ext4_xattr_inode_iget:473 [ 158.906480][ C1] EXT4-fs (loop4): last error at time 1790417315: ext4_xattr_inode_iget:473 [ 158.916003][ T7404] EXT4-fs (loop4): Remounting filesystem read-only [ 158.917445][ T7404] EXT4-fs (loop4): 1 orphan inode deleted [ 158.927470][ T7404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.038760][ T7089] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.068917][ T717] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.069034][ T717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.145753][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.145864][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.163651][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.656632][ T7414] syz_tun: entered promiscuous mode [ 159.675664][ T7414] vlan2: entered promiscuous mode [ 160.490573][ T7450] loop3: detected capacity change from 0 to 64 [ 160.646199][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.796323][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 160.797371][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.801740][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.801768][ T9] usb 3-1: config 0 has no interface number 0 [ 160.846226][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.846257][ T9] usb 3-1: Product: syz [ 160.846274][ T9] usb 3-1: Manufacturer: syz [ 160.846290][ T9] usb 3-1: SerialNumber: syz [ 160.880660][ T9] usb 3-1: config 0 descriptor?? [ 160.894338][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.951280][ T7457] sctp: [Deprecated]: syz.5.594 (pid 7457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.951280][ T7457] Use struct sctp_sack_info instead [ 161.178927][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.225837][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.378670][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.632688][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.633744][ T30] usb 3-1: USB disconnect, device number 4 [ 161.696520][ T30] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.720214][ T30] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.731219][ T30] quatech2 3-1:0.51: device disconnected [ 162.412152][ T7493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.463097][ T7495] loop3: detected capacity change from 0 to 1024 [ 162.504976][ T7496] loop4: detected capacity change from 0 to 512 [ 162.519931][ T7495] hfsplus: (loop3): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 162.519953][ T7495] hfsplus: Run fsck.hfsplus to repair. [ 162.539229][ T7496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.585660][ T7496] EXT4-fs (loop4): 1 truncate cleaned up [ 162.595222][ T7496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.861707][ T7089] veth0_vlan: entered promiscuous mode [ 162.901225][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.940425][ T7089] veth1_vlan: entered promiscuous mode [ 163.099658][ T7461] loop0: detected capacity change from 0 to 32768 [ 163.161031][ T7089] veth0_macvtap: entered promiscuous mode [ 163.172986][ T7461] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.227559][ T7089] veth1_macvtap: entered promiscuous mode [ 163.298212][ T7461] XFS (loop0): Ending clean mount [ 163.358210][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.421203][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.496678][ T1007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.496747][ T1007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.496788][ T1007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.692940][ T1429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.748311][ T5616] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.872486][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.872512][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.087070][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.115245][ T7487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.115265][ T7487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.235129][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 164.288657][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.288713][ T9] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=c6.e2 [ 164.291418][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 164.291455][ T9] usb 4-1: can't read configurations, error -71 [ 164.433753][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.470'. [ 164.534200][ T7544] ipvlan2: entered allmulticast mode [ 164.534226][ T7544] syz_tun: entered allmulticast mode [ 164.639689][ T7549] loop5: detected capacity change from 0 to 16 [ 164.674065][ T7549] erofs (device loop5): mounted with root inode @ nid 36. [ 164.717894][ T7549] CacheFiles: Failed to register: -95 [ 165.191350][ T7561] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 165.315769][ T31] audit: type=1326 audit(1790417321.450:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.317263][ T31] audit: type=1326 audit(1790417321.460:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.323397][ T31] audit: type=1326 audit(1790417321.460:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.323868][ T31] audit: type=1326 audit(1790417321.460:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.324307][ T31] audit: type=1326 audit(1790417321.460:59): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.374572][ T31] audit: type=1326 audit(1790417321.490:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.374634][ T31] audit: type=1326 audit(1790417321.490:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.374683][ T31] audit: type=1326 audit(1790417321.490:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.385887][ T31] audit: type=1326 audit(1790417321.460:60): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.385948][ T31] audit: type=1326 audit(1790417321.520:64): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.0.635" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9bead9e159 code=0x7ffc0000 [ 165.646296][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 165.798133][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 165.799157][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=1942, bcdDevice=28.1e [ 165.801892][ T9] usb 4-1: config 249 has an invalid interface number: 214 but max is 0 [ 165.801921][ T9] usb 4-1: config 249 has no interface number 0 [ 165.801966][ T9] usb 4-1: config 249 interface 214 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 165.801999][ T9] usb 4-1: config 249 interface 214 has no altsetting 0 [ 165.852208][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.852240][ T9] usb 4-1: Product: syz [ 165.852258][ T9] usb 4-1: Manufacturer: syz [ 165.852282][ T9] usb 4-1: SerialNumber: syz [ 166.183612][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 166.227904][ T9] usb 4-1: USB disconnect, device number 6 [ 166.282040][ T7587] loop2: detected capacity change from 0 to 8192 [ 166.321339][ T7591] ipvlan2: entered allmulticast mode [ 166.321364][ T7591] syz_tun: entered allmulticast mode [ 166.692310][ T7601] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 166.999010][ T7612] loop0: detected capacity change from 0 to 512 [ 167.174849][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.296118][ T7617] mmap: syz.5.654 (7617) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.298078][ T7616] netlink: 'syz.6.653': attribute type 29 has an invalid length. [ 167.298098][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.653'. [ 167.299613][ T7616] netlink: 'syz.6.653': attribute type 29 has an invalid length. [ 167.299632][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.653'. [ 167.356036][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 167.365245][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 167.378682][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.378718][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.378744][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.378789][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.400690][ T25] usb 3-1: config 0 descriptor?? [ 167.572715][ T7625] loop0: detected capacity change from 0 to 128 [ 167.613311][ T7625] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 167.662950][ T7625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.949199][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 168.000447][ T7630] ipvlan2: entered allmulticast mode [ 168.000480][ T7630] syz_tun: entered allmulticast mode [ 168.087260][ T25] sony 0003:054C:042F.0005: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 168.180987][ T25] sony 0003:054C:042F.0005: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 168.196595][ T25] sony 0003:054C:042F.0005: failed to claim input [ 168.227694][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.240522][ T25] usb 3-1: USB disconnect, device number 5 [ 168.379096][ T30] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.382533][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.403406][ T30] usb 6-1: config 0 descriptor?? [ 168.426468][ T30] cp210x 6-1:0.0: cp210x converter detected [ 168.501374][ T7645] fido_id[7645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.749487][ T7653] loop4: detected capacity change from 0 to 512 [ 168.797920][ T25] hid-generic 0005:046D:B00E.0006: hidraw0: BLUETOOTH HID v7.bc Device [syz0] on syz0 [ 168.860904][ T7653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.861022][ T7653] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.863562][ T30] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 168.929260][ T30] usb 6-1: cp210x converter now attached to ttyUSB0 [ 169.047775][ T7665] trusted_key: encrypted_key: key user:syz not found [ 169.156710][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 169.158086][ T30] usb 6-1: USB disconnect, device number 5 [ 169.203375][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.253460][ T30] cp210x 6-1:0.0: device disconnected [ 169.281676][ T7668] gretap0: entered promiscuous mode [ 169.318911][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.329871][ T7673] loop6: detected capacity change from 0 to 4096 [ 169.537682][ T7680] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.629837][ T7683] loop0: detected capacity change from 0 to 512 [ 169.649646][ T7683] EXT4-fs: Ignoring removed bh option [ 169.660647][ T7683] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 169.695853][ T7683] EXT4-fs (loop0): 1 truncate cleaned up [ 169.880319][ T7683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.202629][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 170.227462][ T7698] fido_id[7698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.731175][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.846348][ T7720] pimreg: tun_chr_ioctl cmd 1074025677 [ 170.846465][ T7720] pimreg: linktype set to 768 [ 171.368902][ T7742] loop2: detected capacity change from 0 to 512 [ 171.402506][ T7742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 171.402645][ T7742] System zones: 1-12 [ 171.413532][ T7742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.698: missing EA_INODE flag [ 171.413562][ T7742] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.422330][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 171.422352][ C0] EXT4-fs (loop2): initial error at time 1790417327: ext4_xattr_inode_iget:437: inode 12 [ 171.422387][ C0] EXT4-fs (loop2): last error at time 1790417327: ext4_xattr_inode_iget:437: inode 12 [ 171.481230][ T7742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.698: error while reading EA inode 12 err=-117 [ 171.481273][ T7742] loop2: lost filesystem error report for type 5 error -117 [ 171.521602][ T7742] EXT4-fs (loop2): 1 orphan inode deleted [ 171.536802][ T7742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.840719][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.404033][ T39] IPVS: starting estimator thread 0... [ 172.486273][ T7770] IPVS: using max 24 ests per chain, 57600 per kthread [ 172.790418][ T7754] loop0: detected capacity change from 0 to 32768 [ 172.854834][ T7754] JBD2: Ignoring recovery information on journal [ 172.962240][ T7754] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 173.547475][ T5616] ocfs2: Unmounting device (7,0) on (node local) [ 173.682527][ T7803] loop5: detected capacity change from 0 to 256 [ 173.702913][ T7803] exfat: Deprecated parameter 'utf8' [ 173.801558][ T7757] loop4: detected capacity change from 0 to 32768 [ 173.864105][ T7757] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.875693][ T7807] loop6: detected capacity change from 0 to 524288000 [ 174.000321][ T7803] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 174.337570][ T7757] XFS (loop4): Ending clean mount [ 174.432372][ T7757] XFS (loop4): Quotacheck needed: Please wait. [ 174.709933][ T7757] XFS (loop4): Quotacheck: Done. [ 175.027978][ T5617] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.469671][ T7818] loop3: detected capacity change from 0 to 32768 [ 175.964875][ T7842] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 175.970558][ T7860] loop4: detected capacity change from 0 to 256 [ 176.125583][ T7860] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 176.232942][ T7872] loop6: detected capacity change from 0 to 128 [ 176.247443][ T7872] EXT4-fs (loop6): Test dummy encryption mode enabled [ 176.299446][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 176.299477][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 176.348753][ T7872] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.349451][ T7872] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.508547][ T7872] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 176.553364][ T7880] loop2: detected capacity change from 0 to 512 [ 176.573850][ T7880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.694388][ T7880] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 176.701331][ T7880] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.740: corrupted in-inode xattr: e_value size too large [ 176.701364][ T7880] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.704570][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 176.704591][ C0] EXT4-fs (loop2): initial error at time 1790417332: ext4_iget_extra_inode:5210: inode 15 [ 176.704626][ C0] EXT4-fs (loop2): last error at time 1790417332: ext4_iget_extra_inode:5210: inode 15 [ 176.709272][ T7880] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.740: couldn't read orphan inode 15 (err -117) [ 176.709304][ T7880] loop2: lost filesystem error report for type 5 error -117 [ 176.744895][ T7880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.966500][ T7089] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.267215][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.001469][ T7923] loop0: detected capacity change from 0 to 2048 [ 178.018231][ T7923] EXT4-fs: Ignoring removed bh option [ 178.018260][ T7923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.062827][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.378952][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.434185][ T7896] loop5: detected capacity change from 0 to 32768 [ 178.579710][ T7896] JBD2: Ignoring recovery information on journal [ 178.699966][ T7896] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 178.907735][ T7906] loop3: detected capacity change from 0 to 32768 [ 178.997636][ T7911] loop6: detected capacity change from 0 to 40427 [ 179.026499][ T7906] find_entry called with index >= next_index [ 179.026513][ T7906] find_entry called with index >= next_index [ 179.026522][ T7906] find_entry called with index >= next_index [ 179.026530][ T7906] find_entry called with index >= next_index [ 179.026538][ T7906] find_entry called with index >= next_index [ 179.026547][ T7906] add_index: next_index = 0. Resetting! [ 179.026561][ T7906] find_entry called with index >= next_index [ 179.026569][ T7906] find_entry called with index >= next_index [ 179.026577][ T7906] find_entry called with index >= next_index [ 179.026585][ T7906] find_entry called with index >= next_index [ 179.067296][ T7911] F2FS-fs (loop6): invalid crc value [ 179.154191][ T7906] non-latin1 character 0x3ff found in JFS file name [ 179.154211][ T7906] mount with iocharset=utf8 to access [ 179.170056][ T7945] syz.2.759 uses obsolete (PF_INET,SOCK_PACKET) [ 179.290646][ T5615] ocfs2: Unmounting device (7,5) on (node local) [ 179.703540][ T7911] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.713785][ T7911] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 179.713811][ T7911] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 179.713840][ T7911] F2FS-fs (loop6): Start checkpoint disabled! [ 179.741303][ T7911] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 179.742171][ T7911] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 180.314151][ T7964] [ 180.711368][ T7973] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [121] [ 180.711397][ T7973] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 180.711417][ T7973] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 180.711431][ T7973] One or more global auth toks could not properly register; rc = [-22] [ 180.711485][ T7973] Error validating options; rc = [-22] [ 180.868700][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 180.868723][ T31] audit: type=1326 audit(1790417337.010:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7976 comm="syz.2.777" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe20059e159 code=0x0 [ 181.127119][ T7984] batman_adv: batadv0: Adding interface: gretap1 [ 181.127138][ T7984] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.127168][ T7984] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 181.349626][ T7996] netlink: 92 bytes leftover after parsing attributes in process `syz.3.784'. [ 182.488806][ T8033] loop2: detected capacity change from 0 to 8 [ 182.644448][ T8033] SQUASHFS error: Failed to read block 0x260685: -5 [ 182.644473][ T8033] SQUASHFS error: Unable to read metadata cache entry [260685] [ 182.644489][ T8033] SQUASHFS error: Unable to read directory block [260685:0] [ 182.971248][ T8041] loop6: detected capacity change from 0 to 4096 [ 183.032849][ T8044] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.142064][ T8045] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 183.311324][ T8021] loop5: detected capacity change from 0 to 32768 [ 183.380960][ T8021] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 183.384106][ T8021] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.512935][ T8061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.683160][ T8021] XFS (loop5): Ending clean mount [ 183.736850][ T8021] XFS (loop5): Quotacheck needed: Please wait. [ 183.869945][ T8071] loop2: detected capacity change from 0 to 1024 [ 184.091895][ T8021] XFS (loop5): Quotacheck: Done. [ 184.430850][ T8082] netlink: 92 bytes leftover after parsing attributes in process `syz.2.816'. [ 185.083531][ T8094] loop2: detected capacity change from 0 to 256 [ 185.097799][ T8094] exfat: Deprecated parameter 'namecase' [ 185.187993][ T8094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 185.301892][ T5615] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.319502][ T8102] Bluetooth: MGMT ver 1.23 [ 185.375161][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.536903][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 185.538002][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 185.539556][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.539589][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.539616][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.539661][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.591697][ T9] usb 7-1: config 0 descriptor?? [ 185.956741][ T8117] loop5: detected capacity change from 0 to 1024 [ 186.088094][ T31] audit: type=1800 audit(1790417342.230:75): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.826" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 186.241014][ T9] sony 0003:054C:042F.0007: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 186.270582][ T8120] loop4: detected capacity change from 0 to 2048 [ 186.270670][ T9] sony 0003:054C:042F.0007: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.6-1/input0 [ 186.270703][ T9] sony 0003:054C:042F.0007: failed to claim input [ 186.437359][ T8120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.498971][ T9] usb 7-1: USB disconnect, device number 2 [ 186.612413][ T8120] EXT4-fs (loop4): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 186.632872][ T8120] EXT4-fs error (device loop4): __ext4_remount:6872: comm syz.4.833: Abort forced by user [ 186.634381][ T8120] EXT4-fs (loop4): Remounting filesystem read-only [ 186.634401][ T8120] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.838943][ T8126] fido_id[8126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 186.863971][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.961816][ T8130] loop6: detected capacity change from 0 to 64 [ 187.089113][ T31] audit: type=1800 audit(1790417343.230:76): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.837" name="bus" dev="loop6" ino=21 res=0 errno=0 [ 187.664840][ T5627] Bluetooth: hci6: command 0x1003 tx timeout [ 187.667104][ T5629] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 188.453625][ T8170] netlink: 104 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.525095][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 188.686899][ T8178] tipc: Started in network mode [ 188.686934][ T8178] tipc: Node identity ac14140f, cluster identity 4711 [ 188.702075][ T8178] tipc: New replicast peer: 255.255.255.255 [ 188.723008][ T8178] tipc: Enabled bearer , priority 10 [ 188.747756][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 188.758862][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.758905][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 188.758946][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.758975][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.759000][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 188.759045][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.875549][ T9] usb 5-1: config 0 descriptor?? [ 189.377908][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.377947][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.377973][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.377998][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.378024][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.378049][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.378074][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.378099][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.378124][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.379471][ T9] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 189.481824][ T9] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 189.482100][ T9] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 189.572240][ C0] hid-thrustmaster 0003:044F:B65D.0008: Unknown packet type 0x0, unable to proceed further with wheel init [ 189.699003][ T5623] tipc: Node number set to 2886997007 [ 189.774295][ T5345] usb 5-1: USB disconnect, device number 5 [ 189.901002][ T8208] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.922096][ T8200] loop3: detected capacity change from 0 to 32768 [ 189.964357][ T8210] overlayfs: upper fs does not support file handles, falling back to index=off. [ 189.964378][ T8210] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 190.049390][ T8200] JBD2: Ignoring recovery information on journal [ 190.079865][ T8206] fido_id[8206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 190.229189][ T8200] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 190.462935][ T8222] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 190.529097][ T8224] loop0: detected capacity change from 0 to 1024 [ 190.599088][ T5614] ocfs2: Unmounting device (7,3) on (node local) [ 190.696266][ T8215] loop5: detected capacity change from 0 to 32768 [ 190.701228][ T8215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.874 (8215) [ 190.778086][ T8215] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.778123][ T8215] BTRFS info (device loop5): using sha256 checksum algorithm [ 190.801022][ T31] audit: type=1400 audit(1790417346.940:77): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=8226 comm="syz.4.879" name="/" offset=53 [ 191.090677][ T8215] BTRFS info (device loop5): enabling ssd optimizations [ 191.090709][ T8215] BTRFS info (device loop5): turning on async discard [ 191.090729][ T8215] BTRFS info (device loop5): enabling free space tree [ 191.094896][ T8236] loop2: detected capacity change from 0 to 4096 [ 191.315933][ T8260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.319716][ T8257] pimreg: entered allmulticast mode [ 191.364413][ T8257] pimreg: left allmulticast mode [ 191.762778][ T5615] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.244363][ T8276] capability: warning: `syz.4.894' uses 32-bit capabilities (legacy support in use) [ 192.258347][ T8276] program syz.4.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.465329][ T8278] loop2: detected capacity change from 0 to 64 [ 192.489900][ T8249] loop6: detected capacity change from 0 to 32768 [ 192.520798][ T8249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.883 (8249) [ 192.561167][ T8278] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 192.597750][ T8249] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.597790][ T8249] BTRFS info (device loop6): using sha256 checksum algorithm [ 192.829486][ T8268] loop0: detected capacity change from 0 to 32768 [ 192.939721][ T8268] JBD2: Ignoring recovery information on journal [ 193.033932][ T31] audit: type=1326 audit(1790417349.170:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.902" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcce339e159 code=0x0 [ 193.035023][ T8249] BTRFS info (device loop6): enabling ssd optimizations [ 193.035050][ T8249] BTRFS info (device loop6): turning on async discard [ 193.035069][ T8249] BTRFS info (device loop6): enabling free space tree [ 193.211614][ T8268] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 193.569240][ T7089] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.596959][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.597022][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.693626][ T5616] ocfs2: Unmounting device (7,0) on (node local) [ 193.850189][ T8319] loop3: detected capacity change from 0 to 4096 [ 194.116326][ T8319] ntfs3(loop3): ino=b, mi_enum_attr [ 194.116362][ T8319] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 194.117032][ T8319] ntfs3(loop3): Failed to load $Extend (-22). [ 194.117056][ T8319] ntfs3(loop3): Failed to initialize $Extend. [ 194.349096][ T8333] loop5: detected capacity change from 0 to 128 [ 194.426445][ T8333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 194.426512][ T8333] hpfs: filesystem error: improperly stopped [ 194.426530][ T8333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 194.426548][ T8333] hpfs: You really don't want any checks? You are crazy... [ 194.426561][ T8333] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 194.426575][ T8333] hpfs: code page support is disabled [ 194.429696][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 194.429810][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 194.429823][ T8333] hpfs: filesystem error: unable to find root dir [ 194.532649][ T8333] hpfs: hpfs_map_4sectors(): unaligned read [ 194.533863][ T8333] hpfs: hpfs_map_sector(): read error [ 194.666850][ T5623] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.761611][ T8344] loop0: detected capacity change from 0 to 256 [ 194.845663][ T5623] usb 5-1: Using ep0 maxpacket: 16 [ 194.858864][ T5623] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 194.873639][ T5623] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.873668][ T5623] usb 5-1: config 0 has no interface number 0 [ 194.873712][ T5623] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.873741][ T5623] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.873782][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.889847][ T5623] usb 5-1: config 0 descriptor?? [ 195.051237][ T8349] loop5: detected capacity change from 0 to 256 [ 195.077534][ T8349] vfat: Deprecated parameter 'posix' [ 195.077584][ T8349] FAT-fs: "posix" option is obsolete, not supported now [ 195.573028][ T5623] uclogic 0003:28BD:0071.0009: pen parameters not found [ 195.573061][ T5623] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 195.601946][ T5623] usb 5-1: USB disconnect, device number 6 [ 196.254423][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.924'. [ 196.360177][ T8368] loop6: detected capacity change from 0 to 512 [ 196.419951][ T8368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.645251][ T8379] loop0: detected capacity change from 0 to 1024 [ 196.649119][ T8379] EXT4-fs: Ignoring removed bh option [ 196.671106][ T8379] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 196.703818][ T8357] loop2: detected capacity change from 0 to 32768 [ 196.778472][ T8357] JBD2: Ignoring recovery information on journal [ 196.787945][ T8379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.821928][ T7089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.956831][ T8357] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.362194][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 197.405640][ T5616] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /143/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 197.407017][ T5616] EXT4-fs (loop0): Remounting filesystem read-only [ 197.589604][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.943'. [ 197.640995][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.690712][ T8408] loop5: detected capacity change from 0 to 128 [ 197.744125][ T9] lg-g15 0003:046D:0A07.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 197.805364][ T8408] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.809030][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 197.810120][ T8408] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.899429][ T9] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000A/input/input19 [ 198.668991][ T8428] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.951'. [ 198.877250][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.955'. [ 198.903519][ T8410] loop6: detected capacity change from 0 to 40427 [ 198.916173][ T8410] f2fs: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿ' [ 198.938805][ T5615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.789458][ T8454] program syz.6.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.069954][ T8458] loop3: detected capacity change from 0 to 512 [ 200.146753][ T8464] loop6: detected capacity change from 0 to 256 [ 200.153964][ T8464] exfat: Deprecated parameter 'utf8' [ 200.154153][ T8464] exfat: Deprecated parameter 'namecase' [ 200.154191][ T8464] exfat: Deprecated parameter 'namecase' [ 200.240790][ T8464] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 200.401662][ T8458] EXT4-fs (loop3): 1 orphan inode deleted [ 200.417991][ T8458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.419493][ T8458] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.419836][ T39] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.419940][ T39] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 200.499001][ T8458] EXT4-fs (loop3): shut down requested (2) [ 200.676390][ T8437] loop4: detected capacity change from 0 to 32768 [ 200.677425][ T8437] xfs: Deprecated parameter 'noattr2' [ 200.677445][ T8437] XFS: noattr2 mount option is deprecated. [ 200.723856][ T8437] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.760024][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.815514][ T8486] loop5: detected capacity change from 0 to 512 [ 200.881659][ T8437] XFS (loop4): Ending clean mount [ 200.897515][ T31] audit: type=1326 audit(1790417357.040:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.897919][ T31] audit: type=1326 audit(1790417357.040:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.898736][ T31] audit: type=1326 audit(1790417357.040:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.900267][ T31] audit: type=1326 audit(1790417357.040:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.900784][ T31] audit: type=1326 audit(1790417357.040:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.901389][ T31] audit: type=1326 audit(1790417357.040:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.901665][ T31] audit: type=1326 audit(1790417357.040:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.902029][ T31] audit: type=1326 audit(1790417357.040:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.6.976" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73579e159 code=0x7ffc0000 [ 200.938232][ T8486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 200.938338][ T8486] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.380872][ T5617] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.553313][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 201.582363][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 202.054175][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'. [ 202.227950][ T8513] loop6: detected capacity change from 0 to 2048 [ 202.254194][ T8513] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.254223][ T8513] EXT4-fs: Ignoring removed i_version option [ 202.337552][ T8513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.383332][ T8515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.530140][ T8521] loop0: detected capacity change from 0 to 1024 [ 202.542338][ T8521] EXT4-fs: Ignoring removed bh option [ 202.556776][ T8524] coredump: 1(syz.2.989): format_corename failed, aborting core [ 202.609140][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.678207][ T7089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.700720][ T8521] EXT4-fs (loop0): shut down requested (2) [ 202.846170][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.451983][ T8546] loop0: detected capacity change from 0 to 512 [ 203.515835][ T8550] loop3: detected capacity change from 0 to 512 [ 203.535289][ T8546] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.996: invalid block [ 203.535326][ T8546] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.540434][ T8546] EXT4-fs error (device loop0) in ext4_process_orphan:346: IO failure [ 203.540460][ T8546] loop0: lost filesystem error report for type 5 error -5 [ 203.543744][ T8550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.544609][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 203.544631][ C0] EXT4-fs (loop0): initial error at time 1790417359: ext4_get_branch:178: inode 11: block 4294967295 [ 203.544674][ C0] EXT4-fs (loop0): last error at time 1790417359: ext4_process_orphan:346 [ 203.607593][ T8546] EXT4-fs (loop0): 2 truncates cleaned up [ 203.656126][ T8546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.663982][ T8550] EXT4-fs (loop3): 1 truncate cleaned up [ 203.679662][ T8550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.713012][ T8546] EXT4-fs error (device loop0): ext4_get_parent:1834: inode #11: comm syz.0.996: bad parent inode number: 3 [ 203.942345][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.009021][ T8550] EXT4-fs error (device loop3): __ext4_expand_extra_isize:6542: inode #12: comm syz.3.998: bad extra_isize 62 (inode size 256) [ 204.047744][ T8550] EXT4-fs (loop3): Remounting filesystem read-only [ 204.286948][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.455556][ T8558] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 204.494877][ T5345] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.650919][ T5345] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.673675][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.673707][ T5345] usb 1-1: Product: syz [ 204.673725][ T5345] usb 1-1: Manufacturer: syz [ 204.673741][ T5345] usb 1-1: SerialNumber: syz [ 204.797219][ T31] audit: type=1400 audit(1790417360.940:87): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8568 comm="syz.2.1005" name="p" offset=79 [ 204.927427][ T8575] loop3: detected capacity change from 0 to 512 [ 204.929006][ T8575] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.145041][ T5623] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.215742][ T8580] loop4: detected capacity change from 0 to 1024 [ 205.220976][ T8580] EXT4-fs: Ignoring removed bh option [ 205.225819][ T5345] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 205.225882][ T5345] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 205.318129][ T5623] usb 3-1: Using ep0 maxpacket: 16 [ 205.319022][ T8580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.320626][ T5623] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 205.368924][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.368958][ T5623] usb 3-1: Product: syz [ 205.368976][ T5623] usb 3-1: Manufacturer: syz [ 205.368994][ T5623] usb 3-1: SerialNumber: syz [ 205.422536][ T8578] tun0: tun_chr_ioctl cmd 1074025675 [ 205.422563][ T8578] tun0: persist disabled [ 205.437770][ T5345] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 205.437836][ T5345] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.461876][ T5345] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.475536][ T8580] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 205.523412][ T8586] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.4.1010: path /149/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 205.556886][ T5345] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 205.563539][ T8586] EXT4-fs (loop4): Remounting filesystem read-only [ 205.639910][ T5345] usb 1-1: USB disconnect, device number 5 [ 205.669472][ T5623] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 205.695936][ T8588] program syz.3.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.749045][ T5623] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.750166][ T5623] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 205.750352][ T5623] usb 3-1: media controller created [ 205.768313][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.826550][ T5623] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.926598][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 205.926644][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 205.926675][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 205.926706][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 205.926733][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 206.235450][ T5623] zl10353_read_register: readreg error (reg=127, ret==-71) [ 206.347510][ T8599] loop5: detected capacity change from 0 to 2048 [ 206.350058][ T8599] EXT4-fs: Ignoring removed nobh option [ 206.402704][ T5623] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 206.419859][ T5623] usb 3-1: USB disconnect, device number 6 [ 206.483463][ T8599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.483563][ T8599] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.532228][ T31] audit: type=1800 audit(1790417362.670:88): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1017" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 206.686251][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.052771][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1026'. [ 207.320724][ T8625] loop0: detected capacity change from 0 to 2048 [ 207.368979][ T8625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.072594][ T8654] loop3: detected capacity change from 0 to 512 [ 208.096275][ T8654] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.283383][ T8654] syz.3.1042: attempt to access beyond end of device [ 208.283383][ T8654] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 208.313670][ T8654] syz.3.1042: attempt to access beyond end of device [ 208.313670][ T8654] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 208.313997][ T31] audit: type=1800 audit(1790417364.450:89): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1042" name="file2" dev="loop3" ino=1048647 res=0 errno=0 [ 208.440243][ T8666] loop4: detected capacity change from 0 to 8 [ 208.462840][ T8666] SQUASHFS error: Failed to read block 0x62: -5 [ 208.462892][ T8666] squashfs image failed sanity check [ 208.568961][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.793959][ T8682] coredump: 414(syz.3.1051): format_corename failed, aborting core [ 209.650200][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1048'. [ 209.650528][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1048'. [ 209.939218][ T8696] loop2: detected capacity change from 0 to 1024 [ 209.992566][ T8697] loop0: detected capacity change from 0 to 2048 [ 210.048461][ T8696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.113586][ T8705] loop4: detected capacity change from 0 to 1024 [ 210.116403][ T8697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.437735][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 210.588992][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 210.590458][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.594214][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.594267][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.594301][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.594328][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.594356][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.622291][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.622322][ T10] usb 7-1: Manufacturer: syz [ 210.755287][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.770163][ T8697] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 274432 lbcount: 278528 extent 129+229376 [ 210.799565][ T10] usb 7-1: config 0 descriptor?? [ 210.842934][ T8722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1064'. [ 211.295533][ T10] rc_core: IR keymap rc-hauppauge not found [ 211.295556][ T10] Registered IR keymap rc-empty [ 211.295971][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.317513][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.346180][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 211.372060][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 211.403300][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.415452][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.435209][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.455137][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.475091][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.495034][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.517904][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.534952][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.554770][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.563101][ T8740] loop2: detected capacity change from 0 to 512 [ 211.579099][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 211.598032][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 211.598061][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.610132][ T8740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.700107][ T8740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.700244][ T8740] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.708977][ T8748] program syz.0.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.860340][ T8750] kAFS: bad VL server IP address [ 211.861046][ T8684] usb 7-1: USB disconnect, device number 3 [ 211.884725][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.017128][ T8753] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.1070: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 212.048607][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 212.050298][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.050332][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.050376][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.107366][ T10] usb 4-1: config 0 descriptor?? [ 212.234346][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.741884][ T8771] loop6: detected capacity change from 0 to 1024 [ 212.752332][ T10] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 212.788115][ T10] usb 4-1: USB disconnect, device number 7 [ 212.799950][ T8771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.820321][ T8777] coredump: 370(syz.4.1083): format_corename failed, aborting core [ 212.832057][ T8771] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 212.853265][ T8771] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 212.853310][ T8771] EXT4-fs (loop6): This should not happen!! Data will be lost [ 212.853310][ T8771] [ 212.853329][ T8771] EXT4-fs (loop6): Total free blocks count 0 [ 212.853345][ T8771] EXT4-fs (loop6): Free/Dirty block details [ 212.853361][ T8771] EXT4-fs (loop6): free_blocks=68451041280 [ 212.853388][ T8771] EXT4-fs (loop6): dirty_blocks=64 [ 212.853404][ T8771] EXT4-fs (loop6): Block reservation details [ 212.853419][ T8771] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 213.012532][ T31] audit: type=1800 audit(1790417369.150:90): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1083" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 213.153207][ T8782] loop5: detected capacity change from 0 to 512 [ 213.187843][ T7089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.242609][ T8816] loop4: detected capacity change from 0 to 512 [ 214.248627][ T8816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.276846][ T8816] EXT4-fs (loop4): 1 truncate cleaned up [ 214.284202][ T8816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.520971][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.800883][ T8830] loop0: detected capacity change from 0 to 512 [ 214.839378][ T8830] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1105: corrupted in-inode xattr: invalid ea_ino [ 214.839421][ T8830] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.840605][ T8830] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1105: couldn't read orphan inode 15 (err -117) [ 214.840658][ T8830] loop0: lost filesystem error report for type 5 error -117 [ 214.849065][ T8830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.941676][ T8837] coredump: 1(syz.4.1103): format_corename failed, aborting core [ 214.942801][ T8834] loop5: detected capacity change from 0 to 736 [ 215.076994][ T1429] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.133527][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.333576][ T8841] netlink: 'syz.6.1108': attribute type 2 has an invalid length. [ 215.713025][ T8853] loop4: detected capacity change from 0 to 1024 [ 215.732671][ T8853] EXT4-fs: Ignoring removed bh option [ 215.943586][ T8853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.999442][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 215.999605][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1121'. [ 216.277959][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.670309][ T8891] netlink: 'syz.5.1132': attribute type 4 has an invalid length. [ 217.181256][ T8910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.716127][ T8930] ptp ptp0: only physical clock in use now [ 218.116148][ T8940] ipvlan2: entered allmulticast mode [ 218.116175][ T8940] ip6gretap0: entered allmulticast mode [ 218.123381][ T8940] batman_adv: batadv0: Adding interface: ipvlan2 [ 218.123400][ T8940] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.123437][ T8940] batman_adv: batadv0: Interface activated: ipvlan2 [ 218.402850][ T8944] loop4: detected capacity change from 0 to 512 [ 218.513889][ T8944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.513993][ T8944] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.542478][ T8934] loop6: detected capacity change from 0 to 32768 [ 218.611596][ T8934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1153 (8934) [ 218.652246][ T8934] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.652291][ T8934] BTRFS info (device loop6): using sha256 checksum algorithm [ 218.691795][ T8915] loop2: detected capacity change from 0 to 40427 [ 218.692895][ T8915] F2FS-fs: heap/no_heap options were deprecated [ 218.722385][ T8915] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 218.722420][ T8915] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 218.744545][ T8915] F2FS-fs (loop2): invalid crc value [ 218.953414][ T8934] BTRFS info (device loop6): enabling ssd optimizations [ 218.953444][ T8934] BTRFS info (device loop6): turning on async discard [ 218.953464][ T8934] BTRFS info (device loop6): enabling free space tree [ 218.997772][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.287801][ T8915] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 219.335070][ T5779] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 219.392345][ T8915] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 219.392378][ T8915] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 219.392407][ T8915] F2FS-fs (loop2): Start checkpoint disabled! [ 219.401332][ T8976] macvlan1: entered allmulticast mode [ 219.498641][ T8976] veth1_vlan: entered allmulticast mode [ 219.498748][ T8976] macvlan1: left allmulticast mode [ 219.498763][ T8976] veth1_vlan: left allmulticast mode [ 219.528998][ T5779] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 219.532857][ T5779] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 219.532888][ T5779] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 219.532913][ T5779] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 249, changing to 11 [ 219.532938][ T5779] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 18234, setting to 1024 [ 219.532981][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.605312][ T8915] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 219.612219][ T8974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 219.612383][ T8974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 219.612522][ T8974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 219.617028][ T8915] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 219.617052][ T8915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 219.637585][ T5779] pl2303 6-1:1.0: pl2303 converter detected [ 219.717551][ T5779] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 219.833984][ T5779] usb 6-1: USB disconnect, device number 6 [ 219.899950][ T5779] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 219.903768][ T5779] pl2303 6-1:1.0: device disconnected [ 220.130673][ T1429] kworker/u8:11: attempt to access beyond end of device [ 220.130673][ T1429] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.156379][ T1429] CPU: 1 UID: 0 PID: 1429 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.156420][ T1429] Tainted: [L]=SOFTLOCKUP [ 220.156430][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 220.156447][ T1429] Workqueue: writeback wb_workfn (flush-7:2) [ 220.156488][ T1429] Call Trace: [ 220.156498][ T1429] [ 220.156509][ T1429] dump_stack_lvl+0xe8/0x150 [ 220.156549][ T1429] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 220.156592][ T1429] f2fs_write_end_bio+0x1211/0x16e0 [ 220.156625][ T1429] ? blkg_put+0x22/0x240 [ 220.156680][ T1429] __submit_merged_bio+0x258/0x6a0 [ 220.156715][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.156745][ T1429] ? rcu_is_watching+0x16/0xb0 [ 220.156785][ T1429] __submit_merged_write_cond+0x3c9/0x4e0 [ 220.156833][ T1429] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 220.156890][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.156930][ T1429] f2fs_write_data_pages+0x2a27/0x36f0 [ 220.156998][ T1429] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 220.157067][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157092][ T1429] ? lock_acquire+0x115/0x350 [ 220.157119][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157157][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157183][ T1429] ? unwind_next_frame+0x1baf/0x2550 [ 220.157216][ T1429] ? ret_from_fork_asm+0x1a/0x30 [ 220.157254][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157291][ T1429] ? ret_from_fork_asm+0x1a/0x30 [ 220.157324][ T1429] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 220.157348][ T1429] do_writepages+0x338/0x560 [ 220.157379][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157408][ T1429] ? reacquire_held_locks+0x117/0x1a0 [ 220.157435][ T1429] ? writeback_sb_inodes+0x450/0x1b00 [ 220.157472][ T1429] __writeback_single_inode+0x136/0x1220 [ 220.157506][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157531][ T1429] ? do_raw_spin_unlock+0xf5/0x200 [ 220.157567][ T1429] writeback_sb_inodes+0x9de/0x1b00 [ 220.157596][ T1429] ? __lock_acquire+0x747/0x2de0 [ 220.157645][ T1429] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 220.157744][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157770][ T1429] ? rcu_is_watching+0x16/0xb0 [ 220.157796][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.157822][ T1429] ? queue_io+0x2d3/0x470 [ 220.157855][ T1429] wb_writeback+0x41c/0xad0 [ 220.157942][ T1429] ? queue_io+0x271/0x470 [ 220.157977][ T1429] ? __pfx_wb_writeback+0x10/0x10 [ 220.158004][ T1429] ? do_raw_spin_lock+0x12b/0x2f0 [ 220.158054][ T1429] wb_workfn+0x431/0x10f0 [ 220.158098][ T1429] ? __pfx_wb_workfn+0x10/0x10 [ 220.158128][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158153][ T1429] ? trace_hrtimer_start+0x82/0x200 [ 220.158192][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158217][ T1429] ? do_raw_spin_lock+0x12b/0x2f0 [ 220.158257][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158282][ T1429] ? lock_acquire+0x115/0x350 [ 220.158306][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158339][ T1429] ? rcu_is_watching+0x16/0xb0 [ 220.158366][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158396][ T1429] ? process_scheduled_works+0x97a/0x1630 [ 220.158431][ T1429] process_scheduled_works+0xc3d/0x1630 [ 220.158465][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158531][ T1429] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.158573][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158601][ T1429] ? assign_work+0x3cf/0x5d0 [ 220.158642][ T1429] worker_thread+0xa47/0xfb0 [ 220.158680][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158721][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158750][ T1429] ? __kthread_parkme+0x71/0x1f0 [ 220.158801][ T1429] kthread+0x38b/0x480 [ 220.158827][ T1429] ? __pfx_worker_thread+0x10/0x10 [ 220.158860][ T1429] ? __pfx_kthread+0x10/0x10 [ 220.158892][ T1429] ret_from_fork+0x514/0xb70 [ 220.158922][ T1429] ? __pfx_ret_from_fork+0x10/0x10 [ 220.158946][ T1429] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.158974][ T1429] ? __switch_to+0xc89/0x1420 [ 220.159014][ T1429] ? __pfx_kthread+0x10/0x10 [ 220.159042][ T1429] ret_from_fork_asm+0x1a/0x30 [ 220.159101][ T1429] [ 220.160941][ T1429] F2FS-fs (loop2): Remounting filesystem read-only [ 220.282141][ T7089] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.526593][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 222.684820][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 222.686065][ T25] usb 7-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=35.57 [ 222.687515][ T25] usb 7-1: config 3 has an invalid interface number: 236 but max is 0 [ 222.687543][ T25] usb 7-1: config 3 has no interface number 0 [ 222.687577][ T25] usb 7-1: config 3 interface 236 has no altsetting 0 [ 222.692122][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.692151][ T25] usb 7-1: Product: syz [ 222.692169][ T25] usb 7-1: Manufacturer: syz [ 222.692187][ T25] usb 7-1: SerialNumber: syz [ 222.965099][ T9055] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.011363][ T9039] loop3: detected capacity change from 0 to 32768 [ 223.026053][ T9039] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1191 (9039) [ 223.032675][ T25] rndis_host 7-1:3.236: skipping garbage [ 223.032700][ T25] rndis_host 7-1:3.236: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 223.033622][ T25] cdc_acm 7-1:3.236: skipping garbage [ 223.076148][ T9039] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 223.076188][ T9039] BTRFS info (device loop3): using blake2b checksum algorithm [ 223.119336][ T25] usb 7-1: USB disconnect, device number 4 [ 223.136207][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 223.249808][ T9039] BTRFS info (device loop3): enabling ssd optimizations [ 223.249841][ T9039] BTRFS info (device loop3): turning on async discard [ 223.249861][ T9039] BTRFS info (device loop3): enabling free space tree [ 223.249890][ T9039] BTRFS info (device loop3): use zstd compression, level 3 [ 223.290669][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 223.297301][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.297333][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.310346][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.310379][ T10] usb 6-1: Product: syz [ 223.310397][ T10] usb 6-1: Manufacturer: syz [ 223.310414][ T10] usb 6-1: SerialNumber: syz [ 223.378551][ T10] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 223.476180][ T10] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 223.476180][ T10] Please send a copy of this message to and [ 223.548503][ T5614] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 223.952443][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 224.013476][ T9090] loop0: detected capacity change from 0 to 1024 [ 224.030408][ T9090] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 224.061749][ T9090] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1207'. [ 224.061790][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 224.219568][ T10] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 224.338352][ T10] usb 6-1: USB disconnect, device number 7 [ 225.079218][ T9108] loop5: detected capacity change from 0 to 1024 [ 225.345037][ T9098] loop2: detected capacity change from 0 to 32768 [ 225.391217][ T9115] jffs2: notice: (9115) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.402471][ T9108] hfsplus: request for non-existent node 131072 in B*Tree [ 225.439133][ T9108] hfsplus: request for non-existent node 131072 in B*Tree [ 225.995011][ T8684] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.180122][ T8684] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 226.184807][ T8684] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 226.184838][ T8684] usb 5-1: config 1 has no interface number 0 [ 226.184882][ T8684] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 226.184933][ T8684] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.184964][ T8684] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.194860][ T8684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.194890][ T8684] usb 5-1: Product: syz [ 226.194907][ T8684] usb 5-1: Manufacturer: syz [ 226.194925][ T8684] usb 5-1: SerialNumber: syz [ 226.239088][ T9125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.484151][ T9125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.737661][ T9137] loop0: detected capacity change from 0 to 32768 [ 226.861838][ T9137] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.145560][ T8684] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 227.248754][ T8684] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 227.248802][ T8684] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.252011][ T8684] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 227.252041][ T8684] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.300316][ T8684] usb 5-1: USB disconnect, device number 7 [ 227.327306][ T8684] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 227.420868][ T9164] rnbd_client L127: Can't parse path ip: -93 [ 227.602219][ T5616] ocfs2: Unmounting device (7,0) on (node local) [ 227.705908][ T8684] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 227.735322][ T5748] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 227.907984][ T5748] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 227.928003][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.928044][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 227.928092][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.983878][ T5748] usb 3-1: config 0 descriptor?? [ 227.990597][ T9165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.221057][ T9180] kAFS: Invalid Command on /proc/fs/afs/cells file [ 228.761090][ T5748] usbhid 3-1:0.0: can't add hid device: -71 [ 228.761208][ T5748] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.790762][ T5748] usb 3-1: USB disconnect, device number 7 [ 228.988245][ T9202] loop3: detected capacity change from 0 to 256 [ 229.023477][ T9202] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.023504][ T9202] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 229.065490][ T9202] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.087982][ T9202] exFAT-fs (loop3): failed to load alloc-bitmap [ 229.087999][ T9202] exFAT-fs (loop3): failed to recognize exfat type [ 229.218091][ T9209] loop5: detected capacity change from 0 to 64 [ 229.281457][ T9209] syz.5.1260: attempt to access beyond end of device [ 229.281457][ T9209] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 229.283414][ T9209] minix-fs error (device loop5): minix_unlink:149: inode #9: comm syz.5.1260: inode has corrupted nlink [ 229.324397][ T9213] loop0: detected capacity change from 0 to 128 [ 229.942667][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 230.219865][ T9236] futex_wake_op: syz.6.1269 tries to shift op by -1; fix this program [ 230.459017][ T9238] sctp: Trying to GSO but underlying device doesn't support it. [ 231.397194][ T9277] loop0: detected capacity change from 0 to 512 [ 231.440917][ T9277] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1287: corrupted in-inode xattr: invalid ea_ino [ 231.440957][ T9277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.442023][ T9277] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1287: couldn't read orphan inode 15 (err -117) [ 231.442058][ T9277] loop0: lost filesystem error report for type 5 error -117 [ 231.588945][ T9277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.782409][ T9287] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 231.782552][ T9287] syzkaller1: linktype set to 780 [ 232.034153][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.436056][ T1212] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 232.615303][ T1212] usb 6-1: Using ep0 maxpacket: 32 [ 232.619085][ T1212] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 232.620674][ T1212] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 232.620709][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 232.620739][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 232.620765][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 232.620796][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 232.632143][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.632172][ T1212] usb 6-1: Product: syz [ 232.632189][ T1212] usb 6-1: Manufacturer: syz [ 232.632207][ T1212] usb 6-1: SerialNumber: syz [ 232.642997][ T1212] usb 6-1: config 0 descriptor?? [ 232.755341][ T9312] loop6: detected capacity change from 0 to 256 [ 232.763555][ T9312] exfat: Deprecated parameter 'utf8' [ 232.763727][ T9312] exfat: Deprecated parameter 'namecase' [ 232.763766][ T9312] exfat: Deprecated parameter 'namecase' [ 232.795574][ T9315] loop0: detected capacity change from 0 to 2048 [ 232.865013][ T9312] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 232.880426][ T31] audit: type=1800 audit(1790417389.000:91): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1305" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 232.923725][ T31] audit: type=1807 audit(1790417389.060:92): action=measure uid>+ res=0 [ 232.923784][ T31] audit: type=1802 audit(1790417389.060:93): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1303" res=0 errno=0 [ 232.924373][ T9313] ima: policy update failed [ 232.925420][ T31] audit: type=1802 audit(1790417389.060:94): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1303" res=0 errno=0 [ 233.061276][ T9294] loop2: detected capacity change from 0 to 32768 [ 233.085075][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 233.085481][ T1212] input input21: Device does not respond to id packet M [ 233.105456][ T1212] input input21: Device does not respond to id packet P [ 233.204200][ T9294] JBD2: Ignoring recovery information on journal [ 233.225819][ T9294] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 233.226250][ T9294] JBD2: bad block at offset 32 [ 233.346562][ T9294] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 233.349082][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.349136][ T1212] input input21: Device does not respond to id packet B [ 233.353116][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.353165][ T1212] input input21: Device does not respond to id packet N [ 233.360046][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.362434][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.371354][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.373779][ T1212] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 233.397300][ T1212] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 233.513898][ T9294] (syz.2.1294,9294,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 233.800431][ T9328] loop0: detected capacity change from 0 to 512 [ 233.819667][ T9328] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.819700][ T9328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.854930][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 233.964399][ T9328] EXT4-fs (loop0): 1 truncate cleaned up [ 233.968661][ T9328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.976038][ T1212] usb 6-1: USB disconnect, device number 8 [ 234.053800][ T9328] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6542: inode #12: comm syz.0.1311: bad extra_isize 62 (inode size 256) [ 234.088634][ T9328] EXT4-fs (loop0): Remounting filesystem read-only [ 234.192049][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.919411][ T9360] loop5: detected capacity change from 0 to 512 [ 234.978328][ T9360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 234.978466][ T9360] System zones: 1-12 [ 234.982625][ T9360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1325: missing EA_INODE flag [ 234.982654][ T9360] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 234.984697][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 234.984721][ C0] EXT4-fs (loop5): initial error at time 1790417391: ext4_xattr_inode_iget:437: inode 12 [ 234.984758][ C0] EXT4-fs (loop5): last error at time 1790417391: ext4_xattr_inode_iget:437: inode 12 [ 235.021714][ T9360] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1325: error while reading EA inode 12 err=-117 [ 235.021753][ T9360] loop5: lost filesystem error report for type 5 error -117 [ 235.067506][ T9360] EXT4-fs (loop5): 1 orphan inode deleted [ 235.088679][ T9360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.409984][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.638108][ T9383] program syz.0.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.870169][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 235.909674][ T9391] kAFS: Invalid Command on /proc/fs/afs/cells file [ 236.021353][ T9365] loop6: detected capacity change from 0 to 32768 [ 236.104274][ T9365] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.259439][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 236.347957][ T9365] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 236.481216][ T9365] XFS (loop6): Starting recovery (logdev: internal) [ 236.641214][ T9365] XFS (loop6): Ending recovery (logdev: internal) [ 236.847184][ T9365] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 236.847239][ T9365] XFS (loop6): Unmount and run xfs_repair [ 237.072204][ T7089] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.072620][ T9422] loop4: detected capacity change from 0 to 256 [ 237.185855][ T7089] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 237.946364][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 238.438643][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 238.972206][ T5632] udevd[5632]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 239.244857][ T9481] loop6: detected capacity change from 0 to 512 [ 239.254049][ T9481] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 239.286127][ T9481] EXT4-fs (loop6): 1 truncate cleaned up [ 239.313331][ T9481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.362982][ T31] audit: type=1800 audit(1790417395.500:95): pid=9481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1372" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 239.623227][ T7089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.028441][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.028492][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.468437][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.468499][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.389684][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 377.906394][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.906459][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.955049][ T32] INFO: task kworker/u8:7:1007 blocked in I/O wait for more than 143 seconds. [ 400.955090][ T32] Tainted: G L syzkaller #0 [ 400.955108][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.955122][ T32] task:kworker/u8:7 state:D stack:21712 pid:1007 tgid:1007 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 400.955212][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 400.955261][ T32] Call Trace: [ 400.955272][ T32] [ 400.955292][ T32] __schedule+0x17db/0x58f0 [ 400.955334][ T32] ? blk_mq_flush_plug_list+0x415/0x540 [ 400.955397][ T32] ? __lock_acquire+0x747/0x2de0 [ 400.955431][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 400.955462][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.955486][ T32] ? __blk_flush_plug+0x416/0x4d0 [ 400.955510][ T32] ? __pfx___schedule+0x10/0x10 [ 400.955541][ T32] ? schedule+0x90/0x2b0 [ 400.955567][ T32] schedule+0x164/0x2b0 [ 400.955593][ T32] io_schedule+0x7f/0xd0 [ 400.955618][ T32] bit_wait_io+0x11/0xd0 [ 400.955645][ T32] __wait_on_bit+0xac/0x300 [ 400.955669][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.955698][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 400.955725][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.955750][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 400.955779][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 400.955805][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.955836][ T32] do_get_write_access+0x662/0x1070 [ 400.955890][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 400.955923][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 400.955960][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 400.955991][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956021][ T32] ext4_mb_mark_context+0x171/0xec0 [ 400.956052][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956083][ ** replaying previous printk message ** [ 400.956083][ T32] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 400.956109][ T32] ? ext4_sb_block_valid+0x16d/0x560 [ 400.956139][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956161][ T32] ? ext4_sb_block_valid+0x484/0x560 [ 400.956190][ T32] ext4_mb_mark_diskspace_used+0x338/0x760 [ 400.956233][ T32] ext4_mb_new_blocks+0x106c/0x4530 [ 400.956265][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956287][ T32] ? trace_kmalloc+0x2a/0xf0 [ 400.956313][ T32] ? ext4_ext_search_right+0x39a/0x860 [ 400.956344][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956367][ T32] ? __asan_memcpy+0x40/0x70 [ 400.956388][ T32] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 400.956416][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956440][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956462][ T32] ? ext4_ext_find_goal+0xf0/0x1e0 [ 400.956484][ T32] ext4_ext_map_blocks+0x13f1/0x5680 [ 400.956503][ T32] ? kmem_cache_alloc_noprof+0x156/0x600 [ 400.956532][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 400.956574][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956610][ T32] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 400.956635][ T32] ? kmem_cache_alloc_noprof+0x156/0x600 [ 400.956667][ T32] ? kasan_save_track+0x3e/0x80 [ 400.956686][ T32] ? __kasan_slab_alloc+0x6c/0x80 [ 400.956707][ T32] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 400.956735][ T32] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 400.956761][ T32] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 400.956783][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956805][ T32] ? lock_acquire+0x115/0x350 [ 400.956840][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956867][ T32] ? down_write+0x16b/0x200 [ 400.956899][ T32] ext4_map_create_blocks+0x116/0x530 [ 400.956925][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.956947][ T32] ? ext4_fc_track_inode+0xf3/0x3f0 [ 400.956971][ T32] ext4_map_blocks+0x791/0x12c0 [ 400.957001][ T32] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 400.957030][ T32] ? __pfx_ext4_map_blocks+0x10/0x10 [ 400.957051][ T32] ? kmem_cache_alloc_noprof+0x156/0x600 [ 400.957089][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957111][ T32] ? ext4_inode_journal_mode+0x376/0x470 [ 400.957143][ T32] ext4_do_writepages+0x2398/0x4770 [ 400.957212][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 400.957237][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957260][ T32] ? __lock_acquire+0x747/0x2de0 [ 400.957285][ T32] ? filemap_get_folios_tag+0x639/0x720 [ 400.957312][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957337][ T32] ? filemap_get_folios_tag+0x118/0x720 [ 400.957368][ T32] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 400.957392][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957420][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957442][ T32] ? lock_acquire+0x115/0x350 [ 400.957463][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957491][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957523][ T32] ext4_writepages+0x241/0x3b0 [ 400.957546][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 400.957580][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 400.957608][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 400.957629][ T32] do_writepages+0x338/0x560 [ 400.957651][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.957681][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957703][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 400.957726][ T32] ? writeback_sb_inodes+0x450/0x1b00 [ 400.957777][ T32] __writeback_single_inode+0x136/0x1220 [ 400.957807][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.957829][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 400.957864][ T32] writeback_sb_inodes+0x9de/0x1b00 [ 400.957914][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 400.957972][ T32] ? __pfx_down_read_trylock+0x10/0x10 [ 400.957999][ T32] ? __pfx___up_read+0x10/0x10 [ 400.958024][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958052][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958078][ T32] __writeback_inodes_wb+0x114/0x240 [ 400.958113][ T32] wb_writeback+0x42f/0xad0 [ 400.958141][ T32] ? queue_io+0x271/0x470 [ 400.958172][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 400.958196][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.958238][ T32] wb_workfn+0xc92/0x10f0 [ 400.958276][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 400.958312][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958348][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958370][ T32] ? lock_acquire+0x115/0x350 [ 400.958391][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958419][ T32] ? rcu_is_watching+0x16/0xb0 [ 400.958442][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958466][ T32] ? process_scheduled_works+0x97a/0x1630 [ 400.958493][ T32] process_scheduled_works+0xc3d/0x1630 [ 400.958519][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958569][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.958601][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958623][ T32] ? assign_work+0x3cf/0x5d0 [ 400.958653][ T32] worker_thread+0xa47/0xfb0 [ 400.958682][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958713][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958735][ T32] ? __kthread_parkme+0x71/0x1f0 [ 400.958773][ T32] kthread+0x38b/0x480 [ 400.958792][ T32] ? __pfx_worker_thread+0x10/0x10 [ 400.958818][ T32] ? __pfx_kthread+0x10/0x10 [ 400.958839][ T32] ret_from_fork+0x514/0xb70 [ 400.958864][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 400.958882][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.958904][ T32] ? __switch_to+0xc89/0x1420 [ 400.958934][ T32] ? __pfx_kthread+0x10/0x10 [ 400.958955][ T32] ret_from_fork_asm+0x1a/0x30 [ 400.959001][ T32] [ 400.959079][ T32] INFO: task jbd2/sda1-8:4941 blocked in I/O wait for more than 143 seconds. [ 400.959095][ T32] Tainted: G L syzkaller #0 [ 400.959106][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.959115][ T32] task:jbd2/sda1-8 state:D stack:26280 pid:4941 tgid:4941 ppid:2 task_flags:0x240040 flags:0x00080000 [ 400.959171][ T32] Call Trace: [ 400.959178][ T32] [ 400.959190][ T32] __schedule+0x17db/0x58f0 [ 400.959222][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959245][ T32] ? percpu_ref_put_many+0x18e/0x240 [ 400.959274][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959306][ T32] ? __pfx___schedule+0x10/0x10 [ 400.959338][ T32] ? schedule+0x90/0x2b0 [ 400.959363][ T32] schedule+0x164/0x2b0 [ 400.959389][ T32] io_schedule+0x7f/0xd0 [ 400.959414][ T32] bit_wait_io+0x11/0xd0 [ 400.959441][ T32] __wait_on_bit+0xac/0x300 [ 400.959466][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.959494][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 400.959522][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.959547][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 400.959576][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 400.959601][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959626][ T32] ? __wait_on_buffer+0xe/0x80 [ 400.959652][ T32] jbd2_journal_commit_transaction+0x2f1d/0x5b70 [ 400.959673][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959730][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 400.959760][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.959795][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959823][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959854][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959879][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.959902][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959925][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959947][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.959969][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.959991][ T32] ? __timer_delete_sync+0x4a7/0x520 [ 400.960016][ T32] kjournald2+0x3bc/0x750 [ 400.960057][ T32] ? __pfx_kjournald2+0x10/0x10 [ 400.960079][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.960103][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 400.960129][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.960151][ T32] ? __kthread_parkme+0x71/0x1f0 [ 400.960181][ T32] ? __kthread_parkme+0x199/0x1f0 [ 400.960215][ T32] kthread+0x38b/0x480 [ 400.960235][ T32] ? __pfx_kjournald2+0x10/0x10 [ 400.960258][ T32] ? __pfx_kthread+0x10/0x10 [ 400.960278][ T32] ret_from_fork+0x514/0xb70 [ 400.960300][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 400.960318][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.960340][ T32] ? __switch_to+0xc89/0x1420 [ 400.960369][ T32] ? __pfx_kthread+0x10/0x10 [ 400.960390][ T32] ret_from_fork_asm+0x1a/0x30 [ 400.960436][ T32] [ 400.960463][ T32] INFO: task syz-executor:5600 blocked in I/O wait for more than 143 seconds. [ 400.960479][ T32] Tainted: G L syzkaller #0 [ 400.960489][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.960498][ T32] task:syz-executor state:D stack:22184 pid:5600 tgid:5600 ppid:5599 task_flags:0x440100 flags:0x00080000 [ 400.960548][ T32] Call Trace: [ 400.960555][ T32] [ 400.960567][ T32] __schedule+0x17db/0x58f0 [ 400.960599][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.960621][ T32] ? lock_acquire+0x115/0x350 [ 400.960654][ T32] ? __pfx___schedule+0x10/0x10 [ 400.960685][ T32] ? schedule+0x90/0x2b0 [ 400.960711][ T32] schedule+0x164/0x2b0 [ 400.960736][ T32] io_schedule+0x7f/0xd0 [ 400.960761][ T32] bit_wait_io+0x11/0xd0 [ 400.960788][ T32] __wait_on_bit+0xac/0x300 [ 400.960813][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.960842][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 400.960872][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.960897][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 400.960926][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 400.960952][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.960982][ T32] do_get_write_access+0x662/0x1070 [ 400.961028][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 400.961061][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 400.961097][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 400.961126][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 400.961155][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 400.961184][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.961213][ T32] ext4_reserve_inode_write+0x294/0x360 [ 400.961251][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 400.961285][ T32] ext4_dirty_inode+0xd0/0x110 [ 400.961314][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 400.961343][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 400.961371][ T32] file_update_time_flags+0x399/0x440 [ 400.961396][ T32] ext4_page_mkwrite+0x224/0x1140 [ 400.961427][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 400.961457][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.961484][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 400.961513][ T32] ? __lock_acquire+0x747/0x2de0 [ 400.961541][ T32] do_page_mkwrite+0x147/0x310 [ 400.961565][ T32] do_wp_page+0x1a9c/0x4b80 [ 400.961608][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 400.961632][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.961662][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.961687][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.961720][ T32] handle_mm_fault+0x15d7/0x3750 [ 400.961757][ T32] ? handle_mm_fault+0xf1/0x3750 [ 400.961794][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 400.961823][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 400.961858][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 400.961895][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.961929][ T32] do_user_addr_fault+0xa4f/0x1340 [ 400.961955][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.961979][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.962001][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 400.962024][ T32] exc_page_fault+0x6a/0xc0 [ 400.962050][ T32] asm_exc_page_fault+0x26/0x30 [ 400.962069][ T32] RIP: 0033:0x7fd021a7c6e2 [ 400.962086][ T32] RSP: 002b:00007ffe7f113330 EFLAGS: 00010246 [ 400.962103][ T32] RAX: 00007fd01fbe4000 RBX: 0000555586347720 RCX: 0000000000000000 [ 400.962117][ T32] RDX: 0000000000003cef RSI: 0000555586344b58 RDI: 0000000000000001 [ 400.962130][ T32] RBP: 00007ffe7f113830 R08: 0000555586344e50 R09: 00000000000000a1 [ 400.962143][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe7f113670 [ 400.962156][ T32] R13: 00007ffe7f113460 R14: 585858582e7a7973 R15: 00007ffe7f1133b0 [ 400.962187][ T32] [ 400.962252][ T32] INFO: task syz.4.1364:9461 blocked in I/O wait for more than 143 seconds. [ 400.962268][ T32] Tainted: G L syzkaller #0 [ 400.962279][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.962287][ T32] task:syz.4.1364 state:D stack:25608 pid:9461 tgid:9461 ppid:5617 task_flags:0x440040 flags:0x00080002 [ 400.962341][ T32] Call Trace: [ 400.962348][ T32] [ 400.962359][ T32] __schedule+0x17db/0x58f0 [ 400.962392][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.962414][ T32] ? lock_acquire+0x115/0x350 [ 400.962447][ T32] ? __pfx___schedule+0x10/0x10 [ 400.962478][ T32] ? schedule+0x90/0x2b0 [ 400.962504][ T32] schedule+0x164/0x2b0 [ 400.962529][ T32] io_schedule+0x7f/0xd0 [ 400.962555][ T32] bit_wait_io+0x11/0xd0 [ 400.962581][ T32] __wait_on_bit+0xac/0x300 [ 400.962606][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.962634][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 400.962661][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.962686][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 400.962715][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 400.962741][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.962771][ T32] do_get_write_access+0x662/0x1070 [ 400.962817][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 400.962854][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 400.962890][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 400.962919][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 400.962948][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 400.962976][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.963005][ T32] ext4_reserve_inode_write+0x294/0x360 [ 400.963043][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 400.963077][ T32] ext4_dirty_inode+0xd0/0x110 [ 400.963106][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 400.963135][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 400.963163][ T32] file_update_time_flags+0x399/0x440 [ 400.963188][ T32] ext4_page_mkwrite+0x224/0x1140 [ 400.963226][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 400.963257][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 400.963297][ T32] do_page_mkwrite+0x147/0x310 [ 400.963321][ T32] do_pte_missing+0x757/0x34b0 [ 400.963347][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.963372][ T32] ? handle_mm_fault+0xf1/0x3750 [ 400.963403][ T32] handle_mm_fault+0x1a53/0x3750 [ 400.963442][ T32] ? handle_mm_fault+0xf1/0x3750 [ 400.963479][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 400.963504][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 400.963533][ T32] ? __pfx_do_futex+0x10/0x10 [ 400.963580][ T32] do_user_addr_fault+0xa4f/0x1340 [ 400.963606][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.963630][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.963652][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 400.963675][ T32] exc_page_fault+0x6a/0xc0 [ 400.963702][ T32] asm_exc_page_fault+0x26/0x30 [ 400.963720][ T32] RIP: 0033:0x7f84b94727a9 [ 400.963736][ T32] RSP: 002b:00007ffeb38d35d0 EFLAGS: 00010202 [ 400.963752][ T32] RAX: 0000001b33c1c000 RBX: ffffffff82356811 RCX: 0000001b33c1bff8 [ 400.963766][ T32] RDX: 0000001b3362421c RSI: 0000000000000008 RDI: 00007f84ba355720 [ 400.963780][ T32] RBP: 00000000000000b3 R08: 00007f84b9810000 R09: 00007f84b9812000 [ 400.963793][ T32] R10: 0000000082356815 R11: 0000000000000003 R12: 00007f84b9826128 [ 400.963806][ T32] R13: 00000000000000ca R14: ffffffff8235638b R15: 00007f84ba355720 [ 400.963820][ T32] ? page_to_nid+0xb/0x70 [ 400.963852][ T32] ? get_il_weight+0x251/0x260 [ 400.963891][ T32] [ 400.963907][ T32] INFO: task syz.3.1375:9487 blocked in I/O wait for more than 143 seconds. [ 400.963923][ T32] Tainted: G L syzkaller #0 [ 400.963933][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.963942][ T32] task:syz.3.1375 state:D stack:25608 pid:9487 tgid:9487 ppid:5614 task_flags:0x440040 flags:0x00080002 [ 400.963996][ T32] Call Trace: [ 400.964002][ T32] [ 400.964013][ T32] __schedule+0x17db/0x58f0 [ 400.964046][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.964067][ T32] ? __lock_acquire+0x747/0x2de0 [ 400.964101][ T32] ? __pfx___schedule+0x10/0x10 [ 400.964131][ T32] ? schedule+0x90/0x2b0 [ 400.964158][ T32] schedule+0x164/0x2b0 [ 400.964183][ T32] io_schedule+0x7f/0xd0 [ 400.964208][ T32] bit_wait_io+0x11/0xd0 [ 400.964235][ T32] __wait_on_bit+0xac/0x300 [ 400.964259][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.964288][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 400.964315][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 400.964340][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 400.964369][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 400.964395][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.973574][ T32] do_get_write_access+0x662/0x1070 [ 400.973646][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 400.973689][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 400.973735][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 400.973773][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 400.973810][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 400.973847][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.973893][ T32] ext4_reserve_inode_write+0x294/0x360 [ 400.973941][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 400.973984][ T32] ext4_dirty_inode+0xd0/0x110 [ 400.974020][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 400.974056][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 400.974093][ T32] file_update_time_flags+0x399/0x440 [ 400.974125][ T32] ext4_page_mkwrite+0x224/0x1140 [ 400.974176][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 400.974216][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 400.974266][ T32] do_page_mkwrite+0x147/0x310 [ 400.974298][ T32] do_pte_missing+0x757/0x34b0 [ 400.974333][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.974365][ T32] ? handle_mm_fault+0xf1/0x3750 [ 400.974563][ T32] handle_mm_fault+0x1a53/0x3750 [ 400.974615][ T32] ? handle_mm_fault+0xf1/0x3750 [ 400.974662][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 400.974694][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 400.974732][ T32] ? __pfx_do_futex+0x10/0x10 [ 400.974793][ T32] do_user_addr_fault+0xa4f/0x1340 [ 400.974828][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.974866][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.974896][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 400.974926][ T32] exc_page_fault+0x6a/0xc0 [ 401.085086][ T32] asm_exc_page_fault+0x26/0x30 [ 401.085123][ T32] RIP: 0033:0x7fb035672f32 [ 401.096280][ T32] RSP: 002b:00007ffe97a8abb0 EFLAGS: 00010202 [ 401.096308][ T32] RAX: 0000000000001008 RBX: 00007fb036555720 RCX: 0000000000000000 [ 401.096325][ T32] RDX: 0000001b33b23000 RSI: 0000000000000008 RDI: 00007fb036555720 [ 401.096343][ T32] RBP: 0000000000000349 R08: 00007fb035a10000 R09: 00007fb035a26038 [ 401.096360][ T32] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff8bded272 [ 401.096376][ T32] R13: 00007fb035a26038 R14: 00000000000000d4 R15: fffffffffffff000 [ 401.096398][ T32] ? mas_store_prealloc+0x782/0xc20 [ 401.096452][ T32] [ 401.096475][ T32] INFO: task syz.6.1377:9494 blocked in I/O wait for more than 143 seconds. [ 401.096498][ T32] Tainted: G L syzkaller #0 [ 401.096512][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.096523][ T32] task:syz.6.1377 state:D stack:24624 pid:9494 tgid:9494 ppid:7089 task_flags:0x440040 flags:0x00080002 [ 401.096595][ T32] Call Trace: [ 401.096604][ T32] [ 401.096619][ T32] __schedule+0x17db/0x58f0 [ 401.096685][ T32] ? __pfx___schedule+0x10/0x10 [ 401.096726][ T32] ? schedule+0x90/0x2b0 [ 401.096760][ T32] schedule+0x164/0x2b0 [ 401.096794][ T32] io_schedule+0x7f/0xd0 [ 401.096827][ T32] bit_wait_io+0x11/0xd0 [ 401.096871][ T32] __wait_on_bit+0xac/0x300 [ 401.096904][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 401.096940][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 401.096975][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 401.097008][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 401.097046][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 401.097079][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.097119][ T32] do_get_write_access+0x662/0x1070 [ 401.097179][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 401.097222][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 401.097270][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 401.097311][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.097350][ T32] ext4_reserve_inode_write+0x294/0x360 [ 401.097398][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 401.097443][ T32] ext4_dirty_inode+0xd0/0x110 [ 401.097481][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 401.097517][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 401.097545][ T32] ? mnt_get_write_access+0x216/0x280 [ 401.097573][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 401.097608][ T32] touch_atime+0x568/0x670 [ 401.097637][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 401.097677][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 401.127704][ T32] mmap_region+0xe7e/0x2270 [ 401.127747][ T32] ? __page_table_check_zero+0x6c/0x430 [ 401.127793][ T32] ? __pfx_mmap_region+0x10/0x10 [ 401.127825][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.127855][ T32] ? __lock_acquire+0x747/0x2de0 [ 401.127905][ T32] ? lock_acquire+0x115/0x350 [ 401.127941][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.127970][ T32] ? __lock_acquire+0x747/0x2de0 [ 401.128049][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128099][ T32] ? mt_find+0x186/0x630 [ 401.128140][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128169][ T32] ? mt_find+0x5ff/0x630 [ 401.128208][ T32] ? mt_find+0x186/0x630 [ 401.128245][ T32] ? __pfx_mt_find+0x10/0x10 [ 401.128289][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128333][ T32] ? security_mmap_addr+0x71/0x240 [ 401.128369][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128398][ T32] ? shmem_mapping+0xd/0x50 [ 401.128424][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128454][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 401.128492][ T32] do_mmap+0xe0a/0x1300 [ 401.128525][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128566][ T32] ? __pfx_do_mmap+0x10/0x10 [ 401.128597][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128633][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128671][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 401.128699][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128728][ T32] ? down_write_killable+0x17e/0x240 [ 401.128771][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 401.128808][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.128849][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 401.128881][ T32] ? lock_acquire+0x115/0x350 [ 401.128913][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.128946][ T32] ? __fget_files+0x2a/0x420 [ 401.128987][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.129016][ T32] ? __fget_files+0x3a2/0x420 [ 401.129051][ T32] ? __fget_files+0x2a/0x420 [ 401.129108][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 401.130834][ T32] do_syscall_64+0x166/0x520 [ 401.130871][ T32] ? trace_irq_disable+0x3b/0x140 [ 401.130898][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.130932][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.130958][ T32] RIP: 0033:0x7fb73579dec2 [ 401.130981][ T32] RSP: 002b:00007ffef8fa6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 401.131009][ T32] RAX: ffffffffffffffda RBX: 0000001b2ec64000 RCX: 00007fb73579dec2 [ 401.131029][ T32] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2ec64000 [ 401.131045][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 401.131062][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000079 [ 401.131078][ T32] R13: 00000000000927c0 R14: 000000000003a785 R15: 00007ffef8fa72c0 [ 401.131118][ T32] [ 401.131131][ T32] [ 401.131131][ T32] Showing all locks held in the system: [ 401.131143][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 401.131161][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 401.131230][ T32] #1: ffffffff9ad412d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 401.131310][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 401.131327][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 401.131404][ T32] locks held by kworker/u8:7/1007: 6, on CPU#0: [ 401.131422][ T32] #0: ffff8880206d6140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 401.131495][ T32] #1: ffffc90004f87c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 401.131567][ T32] #2: ffff8880331300e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 401.131646][ T32] #3: ffff888031f5ec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 401.131710][ T32] #4: ffff88823bf20938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 401.131783][ T32] #5: ffff8880760d53a8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 401.131875][ T32] locks held by klogd/4968: 1, last CPU#1: [ 401.131892][ T32] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 401.131957][ T32] locks held by getty/5364: 2, on CPU#0: [ 401.131974][ T32] #0: ffff888034a8c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 401.132051][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 401.132121][ T32] locks held by syz-executor/5600: 3, on CPU#0: [ 401.132139][ T32] #0: ffff888031508308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 401.132214][ T32] #1: ffff888033130558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 401.145895][ T32] #2: ffff88823bf20938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 401.145988][ T32] locks held by syz.4.1364/9461: 3, on CPU#1: [ 401.146007][ T32] #0: ffff888059b1fbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 401.146082][ T32] #1: ffff888033130558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 401.146158][ T32] #2: ffff88823bf20938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 401.146231][ T32] locks held by syz.3.1375/9487: 3, on CPU#1: [ 401.146248][ T32] #0: ffff888076d18bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 401.146322][ T32] #1: ffff888033130558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 401.146403][ T32] #2: ffff88823bf20938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 401.146475][ T32] locks held by syz.6.1377/9494: 3, on CPU#0: [ 401.146493][ T32] #0: ffff88801b08d038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 401.146560][ T32] #1: ffff888033130460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 401.146637][ T32] #2: ffff88823bf20938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 401.146711][ T32] [ 401.146718][ T32] ============================================= [ 401.146718][ T32] [ 401.146729][ T32] NMI backtrace for cpu 1 [ 401.146748][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 401.146779][ T32] Tainted: [L]=SOFTLOCKUP [ 401.146789][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 401.146804][ T32] Call Trace: [ 401.146814][ T32] [ 401.146824][ T32] dump_stack_lvl+0xe8/0x150 [ 401.146862][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 401.146890][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 401.146933][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 401.146965][ T32] sys_info+0x135/0x170 [ 401.146987][ T32] watchdog+0xfd7/0x1030 [ 401.147023][ T32] ? watchdog+0x1c7/0x1030 [ 401.147057][ T32] kthread+0x38b/0x480 [ 401.147083][ T32] ? __pfx_watchdog+0x10/0x10 [ 401.147106][ T32] ? __pfx_kthread+0x10/0x10 [ 401.147133][ T32] ret_from_fork+0x514/0xb70 [ 401.147162][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 401.147185][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.147215][ T32] ? __switch_to+0xc89/0x1420 [ 401.147254][ T32] ? __pfx_kthread+0x10/0x10 [ 401.147280][ T32] ret_from_fork_asm+0x1a/0x30 [ 401.147341][ T32] [ 401.147393][ T32] Sending NMI from CPU 1 to CPUs 0: [ 401.147419][ C0] NMI backtrace for cpu 0 [ 401.147436][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.147465][ C0] Tainted: [L]=SOFTLOCKUP [ 401.147473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 401.147486][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0xb0 [ 401.147526][ C0] Code: 89 44 0a 20 e9 28 60 48 ff cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0d f8 7e cd 11 65 48 8b 15 f8 7e cd 11 f7 c2 [ 401.147546][ C0] RSP: 0018:ffffc900001578d8 EFLAGS: 00000046 [ 401.147566][ C0] RAX: ffffffff8573191a RBX: ffffffff9ad415a8 RCX: ffff88801e280000 [ 401.147583][ C0] RDX: 0000000000000000 RSI: 00000000000007b7 RDI: 0000000000000000 [ 401.147597][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 401.147612][ C0] R10: dffffc0000000000 R11: ffffffff857357a0 R12: 1ffffffff35a82b5 [ 401.147630][ C0] R13: 00000000ffffffff R14: ffffffff9ad412c0 R15: 00000000000007b7 [ 401.147647][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 401.147667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.147682][ C0] CR2: 0000561e13d5b660 CR3: 000000000eb48000 CR4: 0000000000350ef0 [ 401.147700][ C0] Call Trace: [ 401.147708][ C0] [ 401.147716][ C0] wait_for_lsr+0x133/0x2f0 [ 401.147747][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 401.147787][ C0] serial8250_console_write+0xaa1/0x1200 [ 401.147821][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 401.147847][ C0] ? __schedule+0x17f1/0x58f0 [ 401.147880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.147912][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.147944][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 401.147982][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 401.148012][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.148038][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 401.148074][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.148101][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 401.148131][ C0] nbcon_kthread_func+0x679/0x880 [ 401.148160][ C0] ? nbcon_kthread_func+0x163/0x880 [ 401.148184][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 401.148209][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.148239][ C0] ? __kthread_parkme+0x71/0x1f0 [ 401.148275][ C0] ? __kthread_parkme+0x199/0x1f0 [ 401.148311][ C0] kthread+0x38b/0x480 [ 401.148334][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 401.148357][ C0] ? __pfx_kthread+0x10/0x10 [ 401.148381][ C0] ret_from_fork+0x514/0xb70 [ 401.148405][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 401.148426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.148453][ C0] ? __switch_to+0xc89/0x1420 [ 401.148486][ C0] ? __pfx_kthread+0x10/0x10 [ 401.148510][ C0] ret_from_fork_asm+0x1a/0x30 [ 401.148556][ C0] [ 401.152599][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 404.180624][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 404.191289][ T32] Tainted: [L]=SOFTLOCKUP [ 404.195595][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 404.205633][ T32] Call Trace: [ 404.208902][ T32] [ 404.211836][ T32] vpanic+0x56d/0xa60 [ 404.215822][ T32] ? __pfx___schedule+0x10/0x10 [ 404.220667][ T32] ? __pfx_vpanic+0x10/0x10 [ 404.225162][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.230797][ T32] panic+0xc5/0xd0 [ 404.234515][ T32] ? __pfx_panic+0x10/0x10 [ 404.238925][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 404.244372][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 404.249740][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 404.255894][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 404.262062][ T32] watchdog+0x1030/0x1030 [ 404.266413][ T32] ? watchdog+0x1c7/0x1030 [ 404.270835][ T32] kthread+0x38b/0x480 [ 404.274898][ T32] ? __pfx_watchdog+0x10/0x10 [ 404.279561][ T32] ? __pfx_kthread+0x10/0x10 [ 404.284142][ T32] ret_from_fork+0x514/0xb70 [ 404.288720][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 404.293821][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.299443][ T32] ? __switch_to+0xc89/0x1420 [ 404.304120][ T32] ? __pfx_kthread+0x10/0x10 [ 404.308703][ T32] ret_from_fork_asm+0x1a/0x30 [ 404.313492][ T32] [ 404.316609][ T32] Kernel Offset: disabled [ 404.320928][ T32] Rebooting in 86400 seconds..