last executing test programs: 3m37.664797607s ago: executing program 3 (id=22): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000b40)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x8, &(0x7f0000000b80)}) 3m37.188146435s ago: executing program 3 (id=24): r0 = socket(0x1d, 0x2, 0x7) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000700)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000007c0)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m36.756686668s ago: executing program 3 (id=29): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='l', 0x2a000, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m36.442643375s ago: executing program 3 (id=32): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x1e6, &(0x7f0000000880)="$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") io_setup(0x8, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 3m35.811030133s ago: executing program 3 (id=35): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 3m35.083795501s ago: executing program 3 (id=37): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b +'], 0xa) 3m34.649695114s ago: executing program 32 (id=37): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b +'], 0xa) 1m43.585472544s ago: executing program 0 (id=874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x81, 0x4) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffffffffffffffff, 0x2}, 0x19) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 1m43.246305869s ago: executing program 0 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 1m42.930806514s ago: executing program 0 (id=879): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 1m42.447825067s ago: executing program 0 (id=882): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000002100)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000002140)=""/184, 0xb8) 1m41.585566421s ago: executing program 0 (id=888): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 1m41.04797132s ago: executing program 0 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000023, 0x0, 0xafd0}]}) 1m25.908431652s ago: executing program 33 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000023, 0x0, 0xafd0}]}) 3.982329344s ago: executing program 5 (id=1494): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffffff], 'geneve0\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@hbh={{0x48}, {0x0, 0x4, 0x1, [0x0, 0x80, 0x2, 0x5f, 0xe, 0xe0, 0xda68, 0x4, 0x3, 0xeaae, 0x0, 0x7, 0x6, 0xff, 0x2, 0x90af], 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500) 3.265814753s ago: executing program 5 (id=1505): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 2.178520364s ago: executing program 6 (id=1515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x324, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2f8, 0x2, [@TCA_BPF_ACT={0x2f4, 0x1, [@m_mirred={0x90, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1bc, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf6, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa4, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x6e, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b55d540b4b8921ba36a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.906407588s ago: executing program 5 (id=1516): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f3395f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 1.730205696s ago: executing program 6 (id=1517): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.730076893s ago: executing program 1 (id=1518): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.110075366s ago: executing program 4 (id=1520): openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000040)={0x0, 0xe5f4, 0x100, 0x5, 0x50}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.108472797s ago: executing program 6 (id=1521): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@remove_addr={0x1e, 0x3, 0x6}]}}}}}}}}, 0x0) 1.108017047s ago: executing program 1 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]]}, 0x40}}, 0x80) 1.107438425s ago: executing program 2 (id=1523): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000006c0)={0xa8, 0x0, 0x2}) 1.106958382s ago: executing program 5 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/ieee80211/phy0/netdev:wlan0/hw_queues\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 1.012805598s ago: executing program 6 (id=1525): openat$vhost_vsock(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 885.487432ms ago: executing program 5 (id=1527): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/128) 885.152733ms ago: executing program 1 (id=1528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x2c}}, 0x0) 883.754633ms ago: executing program 2 (id=1529): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e21, 0x10000, @empty}}, 0x80000000, 0xb4, 0x4, 0x2, 0x8, 0x5}, &(0x7f0000000100)=0x9c) 867.05736ms ago: executing program 4 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x78, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 786.079932ms ago: executing program 6 (id=1531): r0 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000540)=0x1) 716.173323ms ago: executing program 4 (id=1532): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bridge_slave_0\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac14141a}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 712.695108ms ago: executing program 2 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000003140)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1, 0x7ff, 0x40) 637.786586ms ago: executing program 1 (id=1534): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*\vrww'], 0xa) 309.768321ms ago: executing program 5 (id=1535): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 309.632655ms ago: executing program 4 (id=1536): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xfff3}, {0x7671693a61b9ff27, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) 307.914183ms ago: executing program 6 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x1f20) 307.285529ms ago: executing program 1 (id=1537): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f40)=@updpolicy={0x148, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x5, 0x1, 0x6, 0x4, 0x9, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x3502, 0x0, 0x0, 0xff, 0xe2, 0x5, 0x8}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x148}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001100)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 307.156195ms ago: executing program 2 (id=1538): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x10008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="9deea131e4b80fd7de607f179bf087d5c3202b903ee8ed64aa4b837ab0cae0a4480162b7a97299e9d50e2f251b78b018f3c0cc896e0185a0976d8cf652b8dd85578adca7e4c147a171a4a037fe72f07d8829fd07a33486e412e13796c086"], 0x1, 0x1f3, &(0x7f00000007c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x1ed) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x0) 150.626969ms ago: executing program 4 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 145.755798ms ago: executing program 2 (id=1550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000001000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 137.002355ms ago: executing program 1 (id=1540): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000006c0)={0xa8, 0x0, 0x2}) 31.635381ms ago: executing program 4 (id=1541): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x100f1, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000022c0)={0x0, 0xe1c, @status={[0x3, 0x6, 0x6, 0xf796, 0x40, 0x9]}, [0x7fffffffffffffff, 0xb320, 0x4, 0xa2, 0x2, 0x1, 0x1000000000000, 0x7, 0x2, 0x1, 0x1, 0x401, 0x4, 0x7, 0x8, 0x800, 0x101, 0x6, 0x3, 0x8, 0x9, 0x6, 0x7, 0x0, 0x3, 0xe51, 0x1ff, 0x9, 0x1, 0x10001, 0x3ff, 0x1ff, 0x4, 0x2, 0x6, 0x835, 0xffffffffffffface, 0x6, 0xe9, 0xe16, 0x0, 0x5, 0x8000000000000003, 0x100, 0x2, 0x5, 0xffff, 0xffffffffffffffff, 0x5fa1, 0x4, 0x5, 0x0, 0x5, 0x6, 0xa1d, 0x9, 0x100000000, 0x7, 0x80, 0x7, 0x7, 0x7, 0x4, 0x2]}) 0s ago: executing program 2 (id=1542): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000180)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000280)=0x0, &(0x7f0000019880)=0x0, &(0x7f00000198c0)=0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, r3, &(0x7f0000019900)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000019980)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): lags [ 197.665981][ T8155] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.679397][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 197.679413][ C0] EXT4-fs (loop0): initial error at time 2000000081: ext4_orphan_get:1404: inode 15 [ 197.679433][ C0] EXT4-fs (loop0): last error at time 2000000081: ext4_orphan_get:1404: inode 15 [ 197.692566][ T8155] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.802: couldn't read orphan inode 15 (err -117) [ 197.692590][ T8155] loop0: lost filesystem error report for type 5 error -117 [ 197.774490][ T8155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.814711][ T5778] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.855817][ T8155] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 197.972849][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.972885][ T5778] usb 3-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 197.974379][ T5778] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.974464][ T5778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.023861][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.023883][ T5778] usb 3-1: Product: syz [ 198.023894][ T5778] usb 3-1: Manufacturer: syz [ 198.023905][ T5778] usb 3-1: SerialNumber: syz [ 198.072931][ T32] kauditd_printk_skb: 80 callbacks suppressed [ 198.072946][ T32] audit: type=1800 audit(2000000081.549:290): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151915 res=0 errno=-22 [ 198.109859][ T32] audit: type=1800 audit(2000000081.589:291): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151947 res=0 errno=-22 [ 198.113551][ T5650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.160483][ T32] audit: type=1800 audit(2000000081.639:292): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151922 res=0 errno=-22 [ 198.189023][ T32] audit: type=1800 audit(2000000081.669:293): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151923 res=0 errno=-22 [ 198.341506][ T5778] usb 3-1: selecting invalid altsetting 1 [ 198.342010][ T5778] usb 3-1: unit 3 not found! [ 198.342023][ T5778] usb 3-1: unit 6 not found! [ 198.879495][ T5778] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.912217][ T5778] usb 3-1: USB disconnect, device number 8 [ 198.929138][ T32] audit: type=1800 audit(2000000082.409:294): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=151944 res=0 errno=-22 [ 198.974189][ T32] audit: type=1800 audit(2000000082.449:295): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=151945 res=0 errno=-22 [ 198.999167][ T32] audit: type=1800 audit(2000000082.479:296): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=151924 res=0 errno=-22 [ 199.030894][ T32] audit: type=1800 audit(2000000082.509:297): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=151946 res=0 errno=-22 [ 199.118599][ T32] audit: type=1800 audit(2000000082.599:298): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26630 res=0 errno=-22 [ 199.121385][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.440719][ T32] audit: type=1800 audit(2000000082.919:299): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.815" name="new_device" dev="sysfs" ino=44074 res=0 errno=-13 [ 199.479867][ T8188] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 199.649395][ T8194] cougar: G6 mapped to space [ 200.782656][ T8221] loop4: detected capacity change from 0 to 512 [ 200.806270][ T8221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 200.806285][ T8221] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 200.806293][ T8221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.860140][ T8221] EXT4-fs (loop4): 1 truncate cleaned up [ 200.879953][ T8221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.998911][ T8226] loop0: detected capacity change from 0 to 512 [ 201.056853][ T8226] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.057316][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.165278][ T8226] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.830: Directory hole found for htree leaf block 0 [ 201.183584][ T8230] loop1: detected capacity change from 0 to 2048 [ 201.192328][ T8226] EXT4-fs (loop0): Remounting filesystem read-only [ 201.281160][ T8232] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.370260][ T5650] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 201.639754][ T8239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.939986][ T8247] capability: warning: `syz.0.839' uses deprecated v2 capabilities in a way that may be insecure [ 202.719444][ T8263] ima: policy update failed [ 203.343555][ T8258] loop4: detected capacity change from 0 to 32768 [ 203.420816][ T32] kauditd_printk_skb: 8 callbacks suppressed [ 203.420831][ T32] audit: type=1800 audit(2000000086.899:308): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 203.422218][ T8258] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 203.557123][ T8258] XFS (loop4): Ending clean mount [ 203.662040][ T8267] loop0: detected capacity change from 0 to 32768 [ 203.743641][ T32] audit: type=1800 audit(2000000087.219:309): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14990 res=0 errno=-22 [ 203.787333][ T8267] JBD2: Ignoring recovery information on journal [ 203.807589][ T5637] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.054171][ T8267] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 204.891154][ T8278] loop1: detected capacity change from 0 to 32768 [ 204.970688][ T32] audit: type=1800 audit(2000000088.449:310): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 205.041342][ T32] audit: type=1800 audit(2000000088.519:311): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.847" name="file1" dev="loop0" ino=17059 res=0 errno=-22 [ 205.095563][ T8303] ima: rule for LSM 'u' is undefined [ 205.095653][ T32] audit: type=1807 audit(2000000088.579:312): action=measure func=FILE_CHECK obj_type=u res=1 [ 205.095837][ T8301] ima: policy update completed [ 205.095971][ T32] audit: type=1802 audit(2000000088.579:313): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.859" res=1 errno=0 [ 205.102375][ T32] audit: type=1800 audit(2000000088.579:314): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 205.211891][ T32] audit: type=1800 audit(2000000088.689:315): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31466 res=0 errno=-22 [ 205.250401][ T32] audit: type=1800 audit(2000000088.729:316): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31489 res=0 errno=-22 [ 205.446136][ T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 205.468560][ T5650] ocfs2: Unmounting device (7,0) on (node local) [ 205.613161][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.613199][ T10] usb 5-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 205.634485][ T10] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 205.634506][ T10] usb 5-1: config 142 descriptor has 1 excess byte, ignoring [ 205.634520][ T10] usb 5-1: config 142 has no interface number 0 [ 205.634548][ T10] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 205.634855][ T10] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 205.634874][ T10] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 205.634891][ T10] usb 5-1: config 142 interface 251 has no altsetting 0 [ 205.714056][ T10] usb 5-1: string descriptor 0 read error: -22 [ 205.714143][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.738778][ T8305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.738863][ T8305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.768595][ T32] audit: type=1800 audit(2000000089.249:317): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152336 res=0 errno=-22 [ 205.824079][ T10] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 205.889497][ T10] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 206.011680][ T8310] loop1: detected capacity change from 0 to 4096 [ 206.029940][ T8310] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.044051][ T8310] EXT4-fs (loop1): Test dummy encryption mode enabled [ 206.070940][ T8310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.318625][ T8310] fs-verity (loop1, inode 15): fs-verity keyring is empty, rejecting signed file! [ 206.442157][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.613243][ T8296] Bluetooth: hci3: command 0x0406 tx timeout [ 206.613298][ T8296] Bluetooth: hci1: command 0x0406 tx timeout [ 206.613338][ T8296] Bluetooth: hci2: command 0x0406 tx timeout [ 206.731133][ T8305] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 206.731155][ T8305] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 206.731348][ C0] usb 5-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 206.846271][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.998571][ T10] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 207.001138][ T5778] usb 5-1: USB disconnect, device number 9 [ 207.021175][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.040576][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.040598][ T10] usb 1-1: Product: syz [ 207.040608][ T10] usb 1-1: Manufacturer: syz [ 207.040619][ T10] usb 1-1: SerialNumber: syz [ 207.101262][ T5778] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 207.101906][ T5778] cypress_m8 5-1:142.251: device disconnected [ 207.178297][ T9] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 207.183717][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.183742][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.183758][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.183810][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.249824][ T9] usb 2-1: config 0 descriptor?? [ 207.431766][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 207.432028][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 207.471139][ T10] usb 1-1: USB disconnect, device number 4 [ 207.720894][ T9] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 207.782881][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 207.862518][ T8344] loop4: detected capacity change from 0 to 256 [ 208.131669][ T9] usb 2-1: USB disconnect, device number 6 [ 208.145951][ T8335] syz.2.868 (8335) used greatest stack depth: 17992 bytes left [ 208.152643][ T8345] fido_id[8345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0007/report_descriptor': No such device [ 208.154306][ T8332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.255989][ T8332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 208.478115][ T8332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.478191][ T8332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 208.503976][ T8332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.504039][ T8332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 208.525134][ T8332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.525226][ T8332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 209.110996][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.877'. [ 209.203093][ T8370] loop0: detected capacity change from 0 to 16 [ 209.282232][ T8370] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 209.282563][ T8370] erofs (device loop0): mounted with root inode @ nid 36. [ 209.357491][ T8370] syz.0.879: attempt to access beyond end of device [ 209.357491][ T8370] loop0: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 209.357664][ T8370] syz.0.879: attempt to access beyond end of device [ 209.357664][ T8370] loop0: rw=0, sector=301990400, nr_sectors = 2 limit=16 [ 209.379750][ T8370] erofs (device loop0): read error -5 @ 0 of nid 36 [ 209.440787][ T32] kauditd_printk_skb: 34 callbacks suppressed [ 209.440803][ T32] audit: type=1800 audit(2000000092.729:352): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.878" name="resume" dev="sysfs" ino=1437 res=0 errno=-22 [ 209.481668][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'. [ 209.565412][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 209.696768][ T8351] loop4: detected capacity change from 0 to 32768 [ 209.783793][ T32] audit: type=1800 audit(2000000093.259:353): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 209.828928][ T8351] JBD2: Ignoring recovery information on journal [ 209.901717][ T8381] loop0: detected capacity change from 0 to 2048 [ 209.933474][ T8381] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 209.978860][ T8381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.026435][ T8351] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 210.029019][ T32] audit: type=1800 audit(2000000093.509:354): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14990 res=0 errno=-22 [ 210.521508][ T32] audit: type=1800 audit(2000000093.999:355): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.873" name="file1" dev="loop4" ino=17059 res=0 errno=-22 [ 210.524979][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 210.525007][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 210.525050][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 210.896195][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 211.530432][ T32] audit: type=1800 audit(2000000095.009:356): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38174 res=0 errno=-22 [ 211.594077][ T32] audit: type=1800 audit(2000000095.069:357): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=37924 res=0 errno=-22 [ 211.629241][ T32] audit: type=1800 audit(2000000095.109:358): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=37921 res=0 errno=-22 [ 211.652263][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 211.669997][ T32] audit: type=1800 audit(2000000095.139:359): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=38184 res=0 errno=-22 [ 212.121109][ T32] audit: type=1800 audit(2000000095.599:360): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37919 res=0 errno=-22 [ 212.157596][ T32] audit: type=1800 audit(2000000095.639:361): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37909 res=0 errno=-22 [ 212.360692][ T8392] loop5: detected capacity change from 0 to 40427 [ 212.433502][ T8392] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 212.433522][ T8392] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 212.455760][ T8392] F2FS-fs (loop5): invalid crc value [ 212.606096][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 212.606127][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 212.606147][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 212.907636][ T8392] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 212.986114][ T8392] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 212.986137][ T8392] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 213.297543][ T5968] syz-executor: attempt to access beyond end of device [ 213.297543][ T5968] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.351188][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 213.351216][ T5968] Tainted: [L]=SOFTLOCKUP [ 213.351222][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.351232][ T5968] Call Trace: [ 213.351238][ T5968] [ 213.351246][ T5968] dump_stack_lvl+0xe8/0x150 [ 213.351280][ T5968] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 213.351312][ T5968] f2fs_write_end_bio+0x118e/0x15d0 [ 213.351346][ T5968] __submit_merged_bio+0x258/0x6a0 [ 213.351372][ T5968] ? rcu_is_watching+0x16/0xb0 [ 213.351401][ T5968] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 213.351429][ T5968] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 213.351474][ T5968] f2fs_write_data_pages+0x2a13/0x36e0 [ 213.351522][ T5968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.351550][ T5968] ? is_bpf_text_address+0x292/0x2b0 [ 213.351567][ T5968] ? is_bpf_text_address+0x26/0x2b0 [ 213.351605][ T5968] ? stack_trace_save+0xa9/0x100 [ 213.351626][ T5968] ? __pfx_stack_trace_save+0x10/0x10 [ 213.351662][ T5968] ? lockdep_unlock+0x5c/0xd0 [ 213.351678][ T5968] ? __lock_acquire+0x1511/0x2de0 [ 213.351721][ T5968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.351740][ T5968] do_writepages+0x338/0x560 [ 213.351767][ T5968] ? do_raw_spin_unlock+0xf5/0x200 [ 213.351788][ T5968] filemap_fdatawrite+0x1e9/0x2f0 [ 213.351810][ T5968] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 213.351870][ T5968] ? do_raw_spin_unlock+0xf5/0x200 [ 213.351891][ T5968] f2fs_sync_dirty_inodes+0x471/0x970 [ 213.351924][ T5968] f2fs_write_checkpoint+0x860/0x24d0 [ 213.351973][ T5968] kill_f2fs_super+0x2dc/0x700 [ 213.351996][ T5968] ? rcu_do_enqueue+0x616/0x870 [ 213.352017][ T5968] ? lockdep_hardirqs_on+0x7b/0x110 [ 213.352036][ T5968] ? __pfx_kill_f2fs_super+0x10/0x10 [ 213.352068][ T5968] ? __pfx_call_rcu+0x10/0x10 [ 213.352088][ T5968] ? shrinker_free+0x2a7/0x3b0 [ 213.352109][ T5968] deactivate_locked_super+0xbe/0x110 [ 213.352132][ T5968] cleanup_mnt+0x204/0x2a0 [ 213.352161][ T5968] task_work_run+0x1d9/0x260 [ 213.352185][ T5968] ? __pfx_task_work_run+0x10/0x10 [ 213.352217][ T5968] exit_to_user_mode_loop+0x204/0x770 [ 213.352240][ T5968] ? rcu_is_watching+0x16/0xb0 [ 213.352269][ T5968] do_syscall_64+0x328/0x520 [ 213.352287][ T5968] ? trace_irq_disable+0x3b/0x140 [ 213.352310][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.352326][ T5968] ? clear_bhb_loop+0x70/0xc0 [ 213.352347][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.352363][ T5968] RIP: 0033:0x7fc6083a0797 [ 213.352378][ T5968] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 213.352392][ T5968] RSP: 002b:00007ffe596d3288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 213.352409][ T5968] RAX: 0000000000000000 RBX: 00007fc608435f63 RCX: 00007fc6083a0797 [ 213.352420][ T5968] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe596d3340 [ 213.352430][ T5968] RBP: 00007ffe596d3340 R08: 00007ffe596d4340 R09: 00000000ffffffff [ 213.352441][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe596d43d0 [ 213.352451][ T5968] R13: 00007fc608435f63 R14: 0000000000034082 R15: 00007ffe596d4410 [ 213.352477][ T5968] [ 213.391479][ T5968] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 214.617226][ T8467] xt_hashlimit: size too large, truncated to 1048576 [ 215.152640][ T8456] loop1: detected capacity change from 0 to 32768 [ 215.170161][ T8456] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.906 (8456) [ 215.204429][ T8456] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.204454][ T8456] BTRFS info (device loop1): using blake2b checksum algorithm [ 215.241881][ T8478] loop5: detected capacity change from 0 to 512 [ 215.253282][ T8478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.253321][ T8478] EXT4-fs: Ignoring removed nobh option [ 215.293680][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 215.293695][ T32] audit: type=1800 audit(2000000098.769:372): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 215.347956][ T32] audit: type=1800 audit(2000000098.829:373): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153082 res=0 errno=-22 [ 215.389012][ T8478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.410793][ T8478] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.478385][ T32] audit: type=1800 audit(2000000098.959:374): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 215.483523][ T8456] BTRFS info (device loop1): enabling ssd optimizations [ 215.483544][ T8456] BTRFS info (device loop1): turning on async discard [ 215.483555][ T8456] BTRFS info (device loop1): enabling free space tree [ 215.483568][ T8456] BTRFS info (device loop1): use zstd compression, level 3 [ 215.825607][ T5968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.156081][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 216.469623][ T8509] loop5: detected capacity change from 0 to 1024 [ 216.484390][ T8509] EXT4-fs: Ignoring removed oldalloc option [ 216.484407][ T8509] EXT4-fs: Ignoring removed orlov option [ 216.537543][ T8509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 216.537623][ T8509] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.583430][ T32] audit: type=1800 audit(2000000100.059:375): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 216.699210][ T8509] EXT4-fs error (device loop5): ext4_free_blocks:6717: comm syz.5.915: Freeing blocks not in datazone - block = 0, count = 16 [ 216.873538][ T5636] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 216.964082][ T8509] EXT4-fs (loop5): Remounting filesystem read-only [ 217.137662][ T5968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 217.457159][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.919'. [ 217.555472][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.919'. [ 217.764702][ T8500] loop4: detected capacity change from 0 to 40427 [ 217.799565][ T8500] F2FS-fs (loop4): build fault injection rate: 771 [ 217.814942][ T8500] F2FS-fs (loop4): invalid crc value [ 217.884384][ T32] audit: type=1800 audit(2000000101.359:376): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 218.132815][ T8531] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.315322][ T8500] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.422579][ T8500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.806379][ T5637] syz-executor: attempt to access beyond end of device [ 218.806379][ T5637] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.868508][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 218.868536][ T5637] Tainted: [L]=SOFTLOCKUP [ 218.868542][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.868552][ T5637] Call Trace: [ 218.868558][ T5637] [ 218.868565][ T5637] dump_stack_lvl+0xe8/0x150 [ 218.868598][ T5637] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 218.868629][ T5637] f2fs_write_end_bio+0x118e/0x15d0 [ 218.868663][ T5637] __submit_merged_bio+0x258/0x6a0 [ 218.868688][ T5637] ? rcu_is_watching+0x16/0xb0 [ 218.868718][ T5637] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 218.868746][ T5637] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 218.868791][ T5637] f2fs_write_data_pages+0x2a13/0x36e0 [ 218.868839][ T5637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 218.868855][ T5637] ? is_bpf_text_address+0x26/0x2b0 [ 218.868882][ T5637] ? arch_stack_walk+0xfb/0x150 [ 218.868928][ T5637] ? add_lock_to_list+0xc7/0x100 [ 218.868954][ T5637] ? lockdep_unlock+0x5c/0xd0 [ 218.868971][ T5637] ? __lock_acquire+0x1511/0x2de0 [ 218.869014][ T5637] ? do_raw_spin_lock+0x12b/0x2f0 [ 218.869039][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 218.869056][ T5637] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 218.869075][ T5637] do_writepages+0x338/0x560 [ 218.869102][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 218.869122][ T5637] filemap_fdatawrite+0x1e9/0x2f0 [ 218.869144][ T5637] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 218.869199][ T5637] ? do_raw_spin_unlock+0xf5/0x200 [ 218.869219][ T5637] f2fs_sync_dirty_inodes+0x471/0x970 [ 218.869252][ T5637] f2fs_write_checkpoint+0x860/0x24d0 [ 218.869312][ T5637] kill_f2fs_super+0x2dc/0x700 [ 218.869335][ T5637] ? rcu_do_enqueue+0x616/0x870 [ 218.869354][ T5637] ? lockdep_hardirqs_on+0x7b/0x110 [ 218.869373][ T5637] ? __pfx_kill_f2fs_super+0x10/0x10 [ 218.869410][ T5637] ? __pfx_call_rcu+0x10/0x10 [ 218.869429][ T5637] ? shrinker_free+0x2a7/0x3b0 [ 218.869449][ T5637] deactivate_locked_super+0xbe/0x110 [ 218.869472][ T5637] cleanup_mnt+0x204/0x2a0 [ 218.869498][ T5637] task_work_run+0x1d9/0x260 [ 218.869520][ T5637] ? __pfx_task_work_run+0x10/0x10 [ 218.869550][ T5637] exit_to_user_mode_loop+0x204/0x770 [ 218.869572][ T5637] ? rcu_is_watching+0x16/0xb0 [ 218.869599][ T5637] do_syscall_64+0x328/0x520 [ 218.869617][ T5637] ? trace_irq_disable+0x3b/0x140 [ 218.869639][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.869655][ T5637] ? clear_bhb_loop+0x70/0xc0 [ 218.869675][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.869690][ T5637] RIP: 0033:0x7fc849da0797 [ 218.869705][ T5637] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 218.869718][ T5637] RSP: 002b:00007ffc33e390d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 218.869734][ T5637] RAX: 0000000000000000 RBX: 00007fc849e35f63 RCX: 00007fc849da0797 [ 218.869745][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc33e39190 [ 218.869755][ T5637] RBP: 00007ffc33e39190 R08: 00007ffc33e3a190 R09: 00000000ffffffff [ 218.869766][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc33e3a220 [ 218.869775][ T5637] R13: 00007fc849e35f63 R14: 000000000003562d R15: 00007ffc33e3a260 [ 218.869800][ T5637] [ 218.951507][ T5637] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 219.900630][ T8559] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 220.233767][ T32] audit: type=1800 audit(2000000103.709:377): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.932" name="reset" dev="sysfs" ino=21065 res=0 errno=-13 [ 221.875188][ T1161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.896938][ T1161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.896970][ T1161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.896996][ T1161] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.379481][ T8614] loop5: detected capacity change from 0 to 512 [ 222.395797][ T8614] EXT4-fs: Ignoring removed i_version option [ 222.395835][ T8614] EXT4-fs: Ignoring removed oldalloc option [ 222.398466][ T8614] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.481458][ T32] audit: type=1800 audit(2000000105.959:378): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 222.539453][ T8614] EXT4-fs (loop5): 1 truncate cleaned up [ 222.540994][ T8614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.629554][ T8614] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 222.700540][ T8614] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 222.820655][ T5968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.861696][ T8625] fuse-io-uring is disabled by module parameter [ 223.141826][ T8634] loop1: detected capacity change from 0 to 1024 [ 223.160768][ T8634] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 223.211022][ T8634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.363192][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.560076][ T32] audit: type=1800 audit(2000000107.039:379): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.958" name="sriov_numvfs" dev="sysfs" ino=129993 res=0 errno=-22 [ 223.629942][ T32] audit: type=1800 audit(2000000107.109:380): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.959" name="scan" dev="sysfs" ino=21738 res=0 errno=-13 [ 223.652172][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.806618][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 223.807118][ T9] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 223.808006][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.814895][ T32] audit: type=1800 audit(2000000107.289:381): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157486 res=0 errno=-22 [ 223.861393][ T9] usb 5-1: config 0 descriptor?? [ 223.874403][ T32] audit: type=1800 audit(2000000107.349:382): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157515 res=0 errno=-22 [ 223.905334][ T32] audit: type=1800 audit(2000000107.379:383): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=157493 res=0 errno=-22 [ 223.905371][ T32] audit: type=1800 audit(2000000107.389:384): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=157494 res=0 errno=-22 [ 223.958969][ T32] audit: type=1800 audit(2000000107.439:385): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=157495 res=0 errno=-22 [ 224.012073][ T32] audit: type=1800 audit(2000000107.489:386): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157535 res=0 errno=-22 [ 224.100794][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 224.119279][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.120162][ T32] audit: type=1800 audit(2000000107.599:387): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157562 res=0 errno=-22 [ 224.120662][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 224.120705][ T9] usb 5-1: media controller created [ 224.228717][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.341258][ T9] az6027: usb out operation failed. (-71) [ 224.359129][ T9] az6027: usb out operation failed. (-71) [ 224.359143][ T9] stb0899_attach: Driver disabled by Kconfig [ 224.359151][ T9] az6027: no front-end attached [ 224.359151][ T9] [ 224.359519][ T9] az6027: usb out operation failed. (-71) [ 224.359530][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 224.407800][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 224.411037][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 224.411053][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 224.466860][ T9] usb 5-1: USB disconnect, device number 10 [ 224.674005][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 225.417402][ T8651] loop5: detected capacity change from 0 to 32768 [ 225.470726][ T8651] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.533683][ T8651] XFS (loop5): Ending clean mount [ 225.638816][ T8651] XFS (loop5): Quotacheck needed: Please wait. [ 225.900404][ T8651] XFS (loop5): Quotacheck: Done. [ 226.127820][ T5968] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 226.780835][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.791887][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.802449][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.818996][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.819441][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.942563][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.298486][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.482410][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.680432][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.859461][ T8682] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.924857][ T5639] Bluetooth: hci5: command tx timeout [ 228.985422][ T32] kauditd_printk_skb: 20 callbacks suppressed [ 228.985437][ T32] audit: type=1800 audit(2000000112.459:408): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158044 res=0 errno=-22 [ 228.989071][ T32] audit: type=1800 audit(2000000112.469:409): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=158049 res=0 errno=-22 [ 229.001355][ T32] audit: type=1800 audit(2000000112.469:410): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=158053 res=0 errno=-22 [ 229.071923][ T32] audit: type=1800 audit(2000000112.549:411): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=158052 res=0 errno=-22 [ 229.071963][ T32] audit: type=1800 audit(2000000112.549:412): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=158055 res=0 errno=-22 [ 229.149957][ T32] audit: type=1800 audit(2000000112.629:413): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158481 res=0 errno=-22 [ 229.200923][ T32] audit: type=1800 audit(2000000112.659:414): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=158523 res=0 errno=-22 [ 229.256691][ T32] audit: type=1800 audit(2000000112.739:415): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=158527 res=0 errno=-22 [ 229.293617][ T32] audit: type=1800 audit(2000000112.769:416): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=158526 res=0 errno=-22 [ 229.328060][ T32] audit: type=1800 audit(2000000112.809:417): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=158529 res=0 errno=-22 [ 229.497560][ T52] bridge_slave_1: left allmulticast mode [ 229.497583][ T52] bridge_slave_1: left promiscuous mode [ 229.497802][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.534053][ T52] bridge_slave_0: left allmulticast mode [ 229.534074][ T52] bridge_slave_0: left promiscuous mode [ 229.534243][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.766242][ T8723] loop1: detected capacity change from 0 to 512 [ 229.767383][ T8724] loop4: detected capacity change from 0 to 64 [ 229.867903][ T8723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.867989][ T8723] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.064167][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.087211][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.088759][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.109004][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.119121][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.252756][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.589953][ T8737] mmap: syz.4.989 (8737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.721259][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.740155][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.742923][ T52] bond0 (unregistering): Released all slaves [ 230.799742][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 230.896148][ T52] tipc: Disabling bearer [ 230.896550][ T52] tipc: Left network mode [ 230.954878][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 230.964476][ T9] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.984692][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.984713][ T9] usb 2-1: config 0 has no interface number 0 [ 231.005210][ T5639] Bluetooth: hci5: command tx timeout [ 231.019343][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.019362][ T9] usb 2-1: Product: syz [ 231.019374][ T9] usb 2-1: Manufacturer: syz [ 231.019384][ T9] usb 2-1: SerialNumber: syz [ 231.051295][ T9] usb 2-1: config 0 descriptor?? [ 231.064223][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.383449][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.446196][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 231.820953][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 231.849453][ T9] usb 2-1: USB disconnect, device number 7 [ 231.875635][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 231.909564][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.910115][ T9] quatech2 2-1:0.51: device disconnected [ 232.123845][ T8760] sch_fq: defrate 0 ignored. [ 232.205164][ T5639] Bluetooth: hci3: command tx timeout [ 233.166164][ T5639] Bluetooth: hci5: command tx timeout [ 233.587877][ T8728] rxe_eth0 speed is unknown, defaulting to 1000 [ 234.254683][ T194] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.285641][ T5639] Bluetooth: hci3: command tx timeout [ 234.390558][ T52] hsr_slave_0: left promiscuous mode [ 234.391091][ T52] hsr_slave_1: left promiscuous mode [ 234.391693][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.391708][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.393970][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.393985][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.460652][ T52] veth1_macvtap: left promiscuous mode [ 234.460682][ T52] veth0_macvtap: left promiscuous mode [ 234.460802][ T52] veth1_vlan: left promiscuous mode [ 234.460850][ T52] veth0_vlan: left promiscuous mode [ 234.483751][ T194] usb 2-1: Using ep0 maxpacket: 8 [ 234.496574][ T194] usb 2-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00 [ 234.500198][ T194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.500221][ T194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.500238][ T194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.500276][ T194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.527184][ T194] usb 2-1: config 0 descriptor?? [ 234.568188][ T32] kauditd_printk_skb: 35 callbacks suppressed [ 234.568201][ T32] audit: type=1800 audit(2000000118.049:453): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166258 res=0 errno=-22 [ 234.604089][ T32] audit: type=1800 audit(2000000118.079:454): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=166287 res=0 errno=-22 [ 234.634332][ T32] audit: type=1800 audit(2000000118.109:455): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=166265 res=0 errno=-22 [ 234.655924][ T32] audit: type=1800 audit(2000000118.139:456): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=166266 res=0 errno=-22 [ 234.685601][ T32] audit: type=1800 audit(2000000118.169:457): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=166267 res=0 errno=-22 [ 234.737602][ T32] audit: type=1800 audit(2000000118.219:458): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166307 res=0 errno=-22 [ 234.779407][ T32] audit: type=1800 audit(2000000118.259:459): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1005" name="quirks" dev="sysfs" ino=59963 res=0 errno=-22 [ 234.949052][ T32] audit: type=1804 audit(2000000118.429:460): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1006" name="/newroot/195/my_debugfs/asoc/components" dev="debugfs" ino=3475 res=1 errno=0 [ 235.025921][ T32] audit: type=1800 audit(2000000118.509:461): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166325 res=0 errno=-22 [ 235.249063][ T5639] Bluetooth: hci5: command tx timeout [ 235.353178][ T52] team0 (unregistering): Port device team_slave_1 removed [ 235.386305][ T52] team0 (unregistering): Port device team_slave_0 removed [ 235.427860][ T194] sony 0003:054C:042F.0008: can't set operational mode: step 1 [ 235.427922][ T194] sony 0003:054C:042F.0008: Failed to set controller into operational mode [ 235.478013][ T194] sony 0003:054C:042F.0008: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 235.478040][ T194] sony 0003:054C:042F.0008: failed to claim input [ 235.510187][ T32] audit: type=1800 audit(2000000118.989:462): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166347 res=0 errno=-22 [ 235.590180][ T194] usb 2-1: USB disconnect, device number 8 [ 235.659245][ T8802] loop4: detected capacity change from 0 to 512 [ 235.660480][ T8802] EXT4-fs: Ignoring removed i_version option [ 235.683868][ T8802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.711326][ T8802] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 235.711347][ T8802] loop4: lost filesystem error report for type 5 error -117 [ 235.722308][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 235.722328][ C0] EXT4-fs (loop4): initial error at time 2000000119: ext4_process_orphan:346 [ 235.722346][ C0] EXT4-fs (loop4): last error at time 2000000119: ext4_process_orphan:346 [ 235.742606][ T8802] EXT4-fs (loop4): 2 truncates cleaned up [ 235.743767][ T8802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.829714][ T8800] fido_id[8800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 235.970193][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.103367][ T5300] 8021q: adding VLAN 0 to HW filter on device eth5 [ 236.162848][ T8806] loop4: detected capacity change from 0 to 1024 [ 236.201694][ T8806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.288928][ T8806] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 236.326591][ T8806] EXT4-fs error (device loop4) in ext4_setattr:7187: error 28 [ 236.364846][ T5639] Bluetooth: hci3: command tx timeout [ 236.587111][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.759736][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.759836][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.759952][ T8682] bridge_slave_0: entered allmulticast mode [ 236.805267][ T8682] bridge_slave_0: entered promiscuous mode [ 236.816489][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.816566][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.816665][ T8682] bridge_slave_1: entered allmulticast mode [ 236.844271][ T8682] bridge_slave_1: entered promiscuous mode [ 237.111211][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.151694][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.307174][ T8682] team0: Port device team_slave_0 added [ 237.333364][ T8682] team0: Port device team_slave_1 added [ 237.642489][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.924859][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 238.001935][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.001951][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.001970][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.407217][ T8853] 9p: Bad value for 'wfdno' [ 238.444870][ T5639] Bluetooth: hci3: command tx timeout [ 238.501664][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.572867][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.572881][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.572902][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.869923][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.013065][ T8682] hsr_slave_0: entered promiscuous mode [ 239.013895][ T8682] hsr_slave_1: entered promiscuous mode [ 239.037768][ T8682] debugfs: 'hsr0' already exists in 'hsr' [ 239.037788][ T8682] Cannot create hsr debugfs directory [ 239.241427][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.409776][ T5300] 8021q: adding VLAN 0 to HW filter on device eth6 [ 239.718991][ T8877] loop1: detected capacity change from 0 to 2048 [ 239.741434][ T8860] loop4: detected capacity change from 0 to 32768 [ 239.774358][ T8877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.806308][ T8860] JBD2: Ignoring recovery information on journal [ 239.844042][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 239.844064][ T32] audit: type=1800 audit(2000000123.319:466): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 239.886506][ T32] audit: type=1800 audit(2000000123.369:467): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171713 res=0 errno=-22 [ 239.931192][ T32] audit: type=1800 audit(2000000123.409:468): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=171718 res=0 errno=-22 [ 239.931231][ T32] audit: type=1800 audit(2000000123.409:469): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=171722 res=0 errno=-22 [ 239.931260][ T32] audit: type=1800 audit(2000000123.409:470): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=171721 res=0 errno=-22 [ 240.006575][ T32] audit: type=1800 audit(2000000123.489:471): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=171724 res=0 errno=-22 [ 240.061234][ T8860] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 240.192871][ T32] audit: type=1800 audit(2000000123.669:472): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172069 res=0 errno=-22 [ 240.225202][ T32] audit: type=1800 audit(2000000123.699:473): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=172074 res=0 errno=-22 [ 240.225239][ T32] audit: type=1800 audit(2000000123.699:474): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=172078 res=0 errno=-22 [ 240.225270][ T32] audit: type=1800 audit(2000000123.709:475): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=172077 res=0 errno=-22 [ 240.534313][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.534388][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.534519][ T8728] bridge_slave_0: entered allmulticast mode [ 240.562871][ T8728] bridge_slave_0: entered promiscuous mode [ 240.713618][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.713692][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.713815][ T8728] bridge_slave_1: entered allmulticast mode [ 240.748086][ T8728] bridge_slave_1: entered promiscuous mode [ 240.972887][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 241.002424][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.071672][ T52] bridge_slave_1: left allmulticast mode [ 241.071695][ T52] bridge_slave_1: left promiscuous mode [ 241.071862][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.100965][ T52] bridge_slave_0: left allmulticast mode [ 241.100986][ T52] bridge_slave_0: left promiscuous mode [ 241.101151][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.184961][ T194] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.337218][ T194] usb 2-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 241.353991][ T194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 241.368911][ T194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 241.368931][ T194] usb 2-1: Product: syz [ 241.368942][ T194] usb 2-1: Manufacturer: syz [ 241.685211][ T8898] loop4: detected capacity change from 0 to 64 [ 242.017358][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.048104][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.050301][ T52] bond0 (unregistering): Released all slaves [ 242.120681][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.333030][ T8728] team0: Port device team_slave_0 added [ 242.392610][ T194] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 242.432999][ T8728] team0: Port device team_slave_1 added [ 242.518842][ T194] usb 2-1: USB disconnect, device number 9 [ 242.763040][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.763055][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.763076][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.080665][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.080680][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.080701][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.166729][ T5300] 8021q: adding VLAN 0 to HW filter on device eth7 [ 243.570855][ T8728] hsr_slave_0: entered promiscuous mode [ 243.592516][ T8728] hsr_slave_1: entered promiscuous mode [ 243.604767][ T8728] debugfs: 'hsr0' already exists in 'hsr' [ 243.604784][ T8728] Cannot create hsr debugfs directory [ 243.956128][ T8938] loop4: detected capacity change from 0 to 1024 [ 244.101137][ T8682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.193940][ T8682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.292287][ T8682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.319119][ T8682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.336580][ T8682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.381161][ T8682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.480697][ T8682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.502398][ T8682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.597667][ T52] hsr_slave_0: left promiscuous mode [ 244.599867][ T52] hsr_slave_1: left promiscuous mode [ 244.600551][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.600567][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.601111][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.601124][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.697724][ T52] veth1_macvtap: left promiscuous mode [ 244.697865][ T52] veth0_macvtap: left promiscuous mode [ 244.698074][ T52] veth1_vlan: left promiscuous mode [ 244.698125][ T52] veth0_vlan: left promiscuous mode [ 244.907262][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 245.056646][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 245.059153][ T10] usb 5-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 245.059800][ T10] usb 5-1: config 0 has no interfaces? [ 245.062213][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.062231][ T10] usb 5-1: Product: syz [ 245.062242][ T10] usb 5-1: Manufacturer: syz [ 245.062253][ T10] usb 5-1: SerialNumber: syz [ 245.114320][ T10] usb 5-1: config 0 descriptor?? [ 245.129676][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 245.129691][ T32] audit: type=1800 audit(2000000128.609:500): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176208 res=0 errno=-22 [ 245.165980][ T32] audit: type=1800 audit(2000000128.649:501): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=176240 res=0 errno=-22 [ 245.173994][ T32] audit: type=1800 audit(2000000128.649:502): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=176215 res=0 errno=-22 [ 245.198636][ T32] audit: type=1800 audit(2000000128.679:503): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=176216 res=0 errno=-22 [ 245.254797][ T32] audit: type=1800 audit(2000000128.739:504): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=176237 res=0 errno=-22 [ 245.283227][ T32] audit: type=1800 audit(2000000128.759:505): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=176238 res=0 errno=-22 [ 245.283265][ T32] audit: type=1800 audit(2000000128.759:506): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=176217 res=0 errno=-22 [ 245.333728][ T32] audit: type=1800 audit(2000000128.809:507): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=176239 res=0 errno=-22 [ 245.521233][ T10] usb 5-1: USB disconnect, device number 11 [ 245.628185][ T8965] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 246.141533][ T52] team0 (unregistering): Port device team_slave_1 removed [ 246.190791][ T52] team0 (unregistering): Port device team_slave_0 removed [ 246.307633][ T8975] loop1: detected capacity change from 0 to 64 [ 246.388996][ T32] audit: type=1800 audit(2000000129.869:508): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 246.688858][ T5300] 8021q: adding VLAN 0 to HW filter on device eth8 [ 246.975476][ T32] audit: type=1800 audit(2000000130.449:509): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24642 res=0 errno=-13 [ 247.608587][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.694041][ T9008] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1071'. [ 247.828740][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.924284][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.924362][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.974533][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.974675][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.046562][ T8728] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.091195][ T8728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.091884][ T8728] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.128868][ T8728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.153546][ T8728] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.167769][ T9035] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.194196][ T8728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.207265][ T8728] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.230442][ T8728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.311190][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 249.311240][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 249.760130][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.876488][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.937234][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.937309][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.006260][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.006337][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.402209][ T9069] loop1: detected capacity change from 0 to 2048 [ 250.432944][ T9069] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 250.508765][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 250.508781][ T32] audit: type=1800 audit(2000000133.989:513): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 250.548258][ T9069] syz.1.1085: attempt to access beyond end of device [ 250.548258][ T9069] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 250.550503][ T9075] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.665970][ T9069] syz.1.1085: attempt to access beyond end of device [ 250.665970][ T9069] loop1: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 250.666005][ T9069] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 250.827540][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.260009][ T8682] veth0_vlan: entered promiscuous mode [ 252.318158][ T8682] veth1_vlan: entered promiscuous mode [ 252.478804][ T8682] veth0_macvtap: entered promiscuous mode [ 252.516628][ T8682] veth1_macvtap: entered promiscuous mode [ 252.593521][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.647379][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.703729][ T9122] loop1: detected capacity change from 0 to 4096 [ 252.752588][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.774786][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.774820][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.774845][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.774869][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.849600][ T9129] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.850457][ T32] audit: type=1800 audit(2000000136.329:514): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 253.122907][ T32] audit: type=1800 audit(2000000136.599:515): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23622 res=0 errno=-22 [ 253.161294][ T32] audit: type=1800 audit(2000000136.639:516): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23748 res=0 errno=-22 [ 253.199828][ T32] audit: type=1800 audit(2000000136.679:517): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=23935 res=0 errno=-22 [ 253.307675][ T9134] kAFS: Invalid Command on /proc/fs/afs/cells file [ 253.354518][ T32] audit: type=1800 audit(2000000136.829:518): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177525 res=0 errno=-22 [ 253.456886][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.456903][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.500350][ T32] audit: type=1800 audit(2000000136.979:519): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177651 res=0 errno=-22 [ 253.642742][ T9133] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 253.677982][ T9122] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 253.678173][ T9122] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 253.771083][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.771101][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.817504][ T9122] Remounting filesystem read-only [ 253.972755][ T32] audit: type=1800 audit(2000000137.449:520): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1102" name="group_addr" dev="sysfs" ino=94594 res=0 errno=-22 [ 254.895410][ T9150] loop1: detected capacity change from 0 to 131072 [ 254.935697][ T9150] F2FS-fs (loop1): invalid crc value [ 254.991644][ T9150] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 254.992530][ T9150] loop1: lost filesystem error report for type 5 error -117 [ 254.997412][ T9150] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 255.043347][ T9150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.114304][ T32] audit: type=1800 audit(2000000138.579:521): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 255.673941][ T8728] veth0_vlan: entered promiscuous mode [ 255.728921][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728967][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.732003][ T8728] veth1_vlan: entered promiscuous mode [ 255.913269][ T8728] veth0_macvtap: entered promiscuous mode [ 255.951644][ T8728] veth1_macvtap: entered promiscuous mode [ 256.054149][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.092986][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.205185][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.205223][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.205752][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.205778][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.369665][ T32] audit: type=1800 audit(2000000139.849:522): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1110" name="force" dev="sysfs" ino=64174 res=0 errno=-22 [ 256.407910][ T32] audit: type=1800 audit(2000000139.889:523): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177925 res=0 errno=-22 [ 256.578359][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.578378][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.609135][ T32] audit: type=1800 audit(2000000140.089:524): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178051 res=0 errno=-22 [ 256.799342][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.799360][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.529689][ T9200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.568586][ T9200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.719477][ T9208] loop5: detected capacity change from 0 to 512 [ 257.830570][ T32] audit: type=1800 audit(2000000141.309:525): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 258.806883][ T9222] loop4: detected capacity change from 0 to 8192 [ 258.867683][ T32] audit: type=1800 audit(2000000142.349:526): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1130" name="file2" dev="loop4" ino=140 res=0 errno=-22 [ 258.906333][ T32] audit: type=1800 audit(2000000142.389:527): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 259.541424][ T13] IPVS: starting estimator thread 0... [ 259.567780][ T9238] IPVS: ip_vs_edit_dest(): server weight less than zero [ 259.629032][ T9240] IPVS: using max 39 ests per chain, 93600 per kthread [ 259.703571][ T32] audit: type=1800 audit(2000000143.179:528): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1139" name="arp_interval" dev="sysfs" ino=95569 res=0 errno=-22 [ 259.731041][ T9220] loop6: detected capacity change from 0 to 32768 [ 259.807355][ T32] audit: type=1800 audit(2000000143.289:529): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 259.877596][ T32] audit: type=1326 audit(2000000143.359:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef9f559 code=0x7ffc0000 [ 259.920572][ T32] audit: type=1326 audit(2000000143.399:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1141" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef9f559 code=0x7ffc0000 [ 260.058505][ T9220] JBD2: Ignoring recovery information on journal [ 260.181530][ T9220] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 260.580572][ T8682] ocfs2: Unmounting device (7,6) on (node local) [ 261.315107][ T5778] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.420835][ T32] kauditd_printk_skb: 162 callbacks suppressed [ 261.420851][ T32] audit: type=1800 audit(2000000144.899:694): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1152" name="resume" dev="sysfs" ino=1437 res=0 errno=-22 [ 261.474982][ T5778] usb 6-1: Using ep0 maxpacket: 16 [ 261.475933][ T5778] usb 6-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 261.506944][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.506964][ T5778] usb 6-1: Product: syz [ 261.506975][ T5778] usb 6-1: Manufacturer: syz [ 261.506986][ T5778] usb 6-1: SerialNumber: syz [ 261.552057][ T9285] loop1: detected capacity change from 0 to 164 [ 261.553084][ T32] audit: type=1800 audit(2000000145.019:695): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178285 res=0 errno=-22 [ 261.591954][ T32] audit: type=1800 audit(2000000145.069:696): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=178317 res=0 errno=-22 [ 261.630490][ T32] audit: type=1800 audit(2000000145.109:697): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=178292 res=0 errno=-22 [ 261.663784][ T32] audit: type=1800 audit(2000000145.139:698): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=178293 res=0 errno=-22 [ 261.724032][ T32] audit: type=1800 audit(2000000145.199:699): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 261.781788][ T9290] sd 0:0:1:0: PR command failed: 1026 [ 261.781831][ T9290] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 261.781894][ T9290] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 261.843395][ T9285] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 261.893612][ T5778] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 261.912278][ T5778] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.912513][ T5778] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 261.912543][ T5778] usb 6-1: media controller created [ 261.953909][ T32] audit: type=1800 audit(2000000145.429:700): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38174 res=0 errno=-22 [ 262.057272][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.216990][ T5778] zl10353_read_register: readreg error (reg=127, ret==-71) [ 262.360772][ T9297] loop6: detected capacity change from 0 to 2048 [ 262.393375][ T9297] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 262.476437][ T5778] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 262.480793][ T9297] syz.6.1156: attempt to access beyond end of device [ 262.480793][ T9297] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 262.514886][ T9300] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.581043][ T32] audit: type=1800 audit(2000000146.059:702): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 262.613530][ T5778] usb 6-1: USB disconnect, device number 5 [ 262.625464][ T32] audit: type=1800 audit(2000000146.059:701): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=178314 res=0 errno=-22 [ 262.676075][ T32] audit: type=1800 audit(2000000146.159:703): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=178315 res=0 errno=-22 [ 262.716626][ T9297] syz.6.1156: attempt to access beyond end of device [ 262.716626][ T9297] loop6: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 262.716657][ T9297] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 263.914974][ T9335] 0x000000000007-0x000000020000 : "" [ 263.923420][ T9335] ftl_cs: FTL header corrupt! [ 263.963689][ T9314] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.963722][ T9314] block device autoloading is deprecated and will be removed. [ 264.121632][ T9314] EXT4-fs (md5): unable to read superblock [ 264.762623][ T9353] loop1: detected capacity change from 0 to 512 [ 264.847567][ T9353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.847659][ T9353] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.053653][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.508771][ T9346] loop5: detected capacity change from 0 to 32768 [ 265.526827][ T9346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1174 (9346) [ 265.581498][ T9346] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.581530][ T9346] BTRFS info (device loop5): using crc32c checksum algorithm [ 265.749918][ T9346] BTRFS info (device loop5): turning on async discard [ 265.749939][ T9346] BTRFS info (device loop5): enabling free space tree [ 265.749951][ T9346] BTRFS info (device loop5): enabling auto defrag [ 265.749964][ T9346] BTRFS info (device loop5): force zlib compression, level 3 [ 265.749978][ T9346] BTRFS info (device loop5): max_inline set to 0 [ 265.998859][ T8728] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.357763][ T9388] loop4: detected capacity change from 0 to 4096 [ 266.451933][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 266.451947][ T32] audit: type=1800 audit(2000000149.929:718): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 266.489046][ T9391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.701492][ T9394] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 267.759995][ T9382] loop1: detected capacity change from 0 to 32768 [ 267.853820][ T32] audit: type=1800 audit(2000000151.329:719): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 267.853998][ T9382] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.595466][ T9412] loop4: detected capacity change from 0 to 131072 [ 268.632325][ T9412] F2FS-fs (loop4): invalid crc value [ 268.690277][ T9412] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 268.690351][ T9412] loop4: lost filesystem error report for type 5 error -117 [ 268.712842][ T9412] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.742307][ T9412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.175689][ T32] audit: type=1800 audit(2000000152.659:720): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 269.274294][ T9382] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 269.373312][ T9382] XFS (loop1): Starting recovery (logdev: internal) [ 269.460008][ T9382] XFS (loop1): Ending recovery (logdev: internal) [ 269.607298][ T5636] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.459558][ T9429] loop4: detected capacity change from 0 to 32768 [ 271.541283][ T9429] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.542918][ T32] audit: type=1800 audit(2000000155.019:721): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 271.765297][ T9429] XFS (loop4): Ending clean mount [ 271.769095][ T9429] XFS (loop4): Quotacheck needed: Please wait. [ 271.795427][ T32] audit: type=1800 audit(2000000155.269:722): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179239 res=0 errno=-22 [ 272.071284][ T9429] XFS (loop4): Quotacheck: Done. [ 272.404250][ T5637] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.474356][ T9445] loop1: detected capacity change from 0 to 40427 [ 272.554681][ T32] audit: type=1800 audit(2000000156.029:723): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 272.583061][ T9445] F2FS-fs (loop1): invalid crc value [ 273.150249][ T9445] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 273.314000][ T9445] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 273.314023][ T9445] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 273.314087][ T9445] F2FS-fs (loop1): Start checkpoint disabled! [ 273.568961][ T9445] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 273.820308][ T32] audit: type=1800 audit(2000000157.299:724): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1203" name="demote_size" dev="sysfs" ino=1806 res=0 errno=-22 [ 273.999299][ T9498] netlink: 'syz.5.1208': attribute type 11 has an invalid length. [ 274.390102][ T9507] loop5: detected capacity change from 0 to 1024 [ 274.477900][ T32] audit: type=1800 audit(2000000157.959:725): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 274.530093][ T9510] loop6: detected capacity change from 0 to 256 [ 274.546246][ T9510] exfat: Deprecated parameter 'utf8' [ 274.546284][ T9510] exfat: Deprecated parameter 'namecase' [ 274.546351][ T9510] exfat: Deprecated parameter 'namecase' [ 274.546368][ T9510] exfat: Deprecated parameter 'utf8' [ 274.632243][ T9510] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 274.632519][ T9510] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 274.667063][ T32] audit: type=1800 audit(2000000158.149:726): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 274.719048][ T32] audit: type=1800 audit(2000000158.199:727): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179417 res=0 errno=-22 [ 274.769711][ T9513] ./file0: Can't lookup blockdev [ 274.794359][ T9510] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 275.919131][ T9533] ip_tables: iptables: counters copy to user failed while replacing table [ 275.939145][ T32] audit: type=1800 audit(2000000159.419:728): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1220" name="vlan_protocol" dev="sysfs" ino=169300 res=0 errno=-22 [ 276.041025][ T32] audit: type=1800 audit(2000000159.519:729): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="quirks" dev="sysfs" ino=59931 res=0 errno=-22 [ 276.265049][ T5639] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 276.265073][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.265095][ T5639] Tainted: [L]=SOFTLOCKUP [ 276.265101][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 276.265111][ T5639] Workqueue: hci3 hci_rx_work [ 276.265142][ T5639] Call Trace: [ 276.265148][ T5639] [ 276.265156][ T5639] dump_stack_lvl+0xe8/0x150 [ 276.265186][ T5639] sysfs_create_dir_ns+0x271/0x2a0 [ 276.265219][ T5639] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 276.265249][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 276.265270][ T5639] kobject_add_internal+0x622/0xcd0 [ 276.265302][ T5639] kobject_add+0x163/0x240 [ 276.265331][ T5639] ? __pfx_kobject_add+0x10/0x10 [ 276.265368][ T5639] ? get_device_parent+0x366/0x3a0 [ 276.265400][ T5639] device_add+0x3fa/0xb80 [ 276.265429][ T5639] hci_conn_add_sysfs+0xd5/0x210 [ 276.265452][ T5639] le_conn_complete_evt+0x1094/0x18d0 [ 276.265488][ T5639] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 276.265515][ T5639] ? __mutex_unlock_slowpath+0x731/0x900 [ 276.265540][ T5639] ? skb_pull_data+0xf0/0x200 [ 276.265563][ T5639] hci_le_enh_conn_complete_evt+0x189/0x490 [ 276.265589][ T5639] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 276.265618][ T5639] hci_event_packet+0x67a/0xf10 [ 276.265643][ T5639] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 276.265666][ T5639] ? __pfx_hci_event_packet+0x10/0x10 [ 276.265691][ T5639] ? kcov_remote_start+0x523/0x7e0 [ 276.265716][ T5639] ? hci_send_to_monitor+0xdf/0x600 [ 276.265735][ T5639] hci_rx_work+0x2b4/0x1110 [ 276.265762][ T5639] ? process_scheduled_works+0x97a/0x1630 [ 276.265788][ T5639] process_scheduled_works+0xc3d/0x1630 [ 276.265838][ T5639] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.265868][ T5639] ? assign_work+0x3cf/0x5d0 [ 276.265896][ T5639] worker_thread+0xa47/0xfb0 [ 276.265923][ T5639] ? __kthread_parkme+0x71/0x1f0 [ 276.265947][ T5639] kthread+0x38b/0x480 [ 276.265966][ T5639] ? __pfx_worker_thread+0x10/0x10 [ 276.265989][ T5639] ? __pfx_kthread+0x10/0x10 [ 276.266009][ T5639] ret_from_fork+0x514/0xb70 [ 276.266030][ T5639] ? __pfx_ret_from_fork+0x10/0x10 [ 276.266049][ T5639] ? __switch_to+0xc78/0x1410 [ 276.266077][ T5639] ? __pfx_kthread+0x10/0x10 [ 276.266097][ T5639] ret_from_fork_asm+0x1a/0x30 [ 276.266128][ T5639] [ 276.266181][ T5639] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 276.266224][ T5639] Bluetooth: hci3: failed to register connection device [ 276.315096][ T9539] loop6: detected capacity change from 0 to 164 [ 276.590128][ T9542] loop1: detected capacity change from 0 to 128 [ 276.618489][ T9542] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 276.643494][ T32] audit: type=1800 audit(2000000160.119:730): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 276.668246][ T9542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.733890][ T9540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.734014][ T9540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.734115][ T9540] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 276.734157][ T9540] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 276.770634][ T9518] loop4: detected capacity change from 0 to 32768 [ 276.840943][ T9540] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 276.863455][ T32] audit: type=1800 audit(2000000160.339:731): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 276.970343][ T9540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.972008][ T9540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.144167][ T9540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.172696][ T9540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 278.571799][ T9562] loop4: detected capacity change from 0 to 32768 [ 278.598517][ T9562] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1234 (9562) [ 278.627717][ T32] audit: type=1800 audit(2000000162.109:732): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179465 res=0 errno=-22 [ 278.663232][ T9562] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 278.663267][ T9562] BTRFS info (device loop4): using crc32c checksum algorithm [ 278.766392][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 278.770892][ T9564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.771042][ T9564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.771148][ T9564] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.771278][ T9564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.823361][ T9562] BTRFS info (device loop4): enabling ssd optimizations [ 278.823384][ T9562] BTRFS info (device loop4): turning on async discard [ 278.823396][ T9562] BTRFS info (device loop4): enabling free space tree [ 278.910834][ T32] audit: type=1800 audit(2000000162.389:733): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1234" name="file1" dev="loop4" ino=260 res=0 errno=-22 [ 279.084261][ T5637] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 279.303843][ T9572] loop1: detected capacity change from 0 to 32768 [ 279.414275][ T32] audit: type=1800 audit(2000000162.889:734): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 279.550437][ T9596] program syz.2.1242 is using a deprecated SCSI ioctl, please convert it to SG_IO zXt&Kb)hGYή/&%M\_tw' ,rXNFE$#Cy01:՜x|'Nin-BYrP)n?!T;+\)zD258ZT~Ir [ "{ T٫y=]\,4Tٳ؃#E]s1/&%{;g:բA?#~#vD3O}vieHVJ0BK,ӴMWN~aehUMV̪Նh>O5ꈺW EEbzyzۏH6piF-B]IC-9mPQ ٺ^s; '|Q&nZ8.YTH/4ݍYOfFzjG\Y'EGGGX=nH%?;a1s^I `Z%ѺN&4oMiB>М|DbQfO\rv:d\o,QNI?m2.x${3ϯЀBA}\FrMGo$7h1!8OXe* %Il\yO* 3 3ԣ w/z)UZ#L^-.=ZE9X}ֵ: ?%=\h /)>C#AyXXuw[pO\̠7X6N{wf4 7g[};pv@ |Cwa n%)!})KxZ+ sDr1 kU"ۡ~ nfT2rػꋎElXC5ݝ %xX9ӥH~%?0Qa\Z \?kn؂ d*^ Jx'ؼc 6G n "YVDk{"`ɄSBi84Ϙ;<38ވV]mMuӝp]o$:nZN&`M^,c.~i@X,rmQs?F8n>( n|b JKwNG넿 ~eepIb3 RKŢ󶟷x'2l ?Uj{;c_\'轸%(,@@?RDuLPGy ֘=hWxf0/yY2y;MjxvJ %hu~wTp+Aa#kt1 `A$@h\BEm|v~TtpKX-/z <;a9w_e̿B]|m g>[a>,!@g{Sdn$}'B\eٳ]xG0ʾg.nczz(t|^@/[͆,TyMuؐfEVEbb6@zL]AbՖiQIuiU|15}3`5Oۯ;F-u*~Ά鏬#,4Lp(hsTVS5!j"ˠ@;1qشw4׳{KL  EuBapD4 ~4{ABy9\6a"U J&5V}ư&*|л",]#=^sH{xcL(7eK`(xVΞ/mhN+Q>y֓F`ѸPP;b*5wxcI}>9SaI'H)BՁ]G0r&Bxwۥw.^pfp8QF·!D4 r36'CK'zdkgxXv/Lou'Y@fĈͪ^$zTyA-$EAW 5#ʀ5d>"nu?9Mq!4[ŗ|<ߓljyIdq>hJlNm1RG|*lشl/}-Z(NTj-py.dmL,ۑ3\Fq+oۆ8mj|P ?IBͨjzb~deZ0XbDn P̴Ma1 8PgsrYהfdfBnKo{-"FJÛW4?[8{)av XO:͏hn5So n`$-Ju],[fY7bG"S$6h ב`t A3'?EqZJTRX8'<+^+F\}fo7_mshk9j.Q>{ =)H1jy|"wjΤ5GK\v^=]$'fFwwG2C9jTV(c8ӈ_"eB7+ĩ.TAڲ A<4׋ '{E_33qZyJ?pxMo ؄<2g滓N*7ɮIa)>V)\8%AM^XF!WHSQ"m3FẰ睊!Z6> Y ^,ck?8gY6|'!HȘnjH9Ն $!溩b&M^ϊYHX+VXl]Z=+"QN[Q /4~ULhv$JYp[ 280.047500][ T5639] Bluetooth: hci1: command 0x0406 tx timeout ӎa:zXIz, 9Z^p6aO[ǰV1O谝z2 XG؉Rn `";Şkl ڤM2ZVN"q/@]&dDSkc/l::BtmDyT^դv"Z4D {7Q~o,x| ,* "V dVX\_G1YeX (-+q tty E &P|ؙ͠_I!C3m`፾<,`$W%0wd7ڭ^3ߔkT{(eT<KFԜV儔+C>Q/ϫ[ 280.491059][ T32] audit: type=1800 audit(2000000163.969:735): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1252" name="control" dev="sysfs" ino=4935 res=0 errno=-22 [ 280.559586][ T9617] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 280.559684][ T9617] syzkaller0: linktype set to 823 [ 280.743825][ T9619] loop5: detected capacity change from 0 to 4096 [ 280.770571][ T9619] ntfs3(loop5): Failed to load $Volume (-22). [ 280.819892][ T32] audit: type=1800 audit(2000000164.299:736): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 280.844955][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.845008][ T5638] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.845035][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 281.123814][ T9622] loop1: detected capacity change from 0 to 4096 [ 281.203991][ T32] audit: type=1800 audit(2000000164.679:737): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 281.263457][ T9622] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 281.332105][ T9622] ntfs3(loop1): ino=1a, mi_enum_attr [ 281.332235][ T9622] ntfs3(loop1): ino=1a, mi_enum_attr [ 281.332249][ T9622] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 281.868429][ T9622] ntfs3(loop1): ino=1a, mi_enum_attr [ 281.977304][ T9646] loop5: detected capacity change from 0 to 164 [ 282.056567][ T32] audit: type=1800 audit(2000000165.539:738): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 282.350131][ T32] audit: type=1326 audit(2000000165.829:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.384422][ T32] audit: type=1326 audit(2000000165.859:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.432162][ T32] audit: type=1326 audit(2000000165.909:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.432474][ T32] audit: type=1326 audit(2000000165.909:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.500292][ T32] audit: type=1326 audit(2000000165.979:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.500333][ T32] audit: type=1326 audit(2000000165.979:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.500366][ T32] audit: type=1326 audit(2000000165.979:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.597964][ T32] audit: type=1326 audit(2000000166.079:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.598006][ T32] audit: type=1326 audit(2000000166.079:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.6.1269" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327e59f559 code=0x7ffc0000 [ 282.925466][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.925602][ T5639] Bluetooth: hci5: command 0x0c1a tx timeout [ 282.962848][ T9668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.978962][ T9668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.979046][ T9668] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 283.017701][ T9668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 283.018743][ T9668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.351206][ T9678] loop4: detected capacity change from 0 to 4096 [ 283.458680][ T9678] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 283.503800][ T9678] ntfs3(loop4): ino=1a, mi_enum_attr [ 283.503887][ T9678] ntfs3(loop4): ino=1a, mi_enum_attr [ 283.503899][ T9678] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 283.762287][ T9678] ntfs3(loop4): ino=1a, mi_enum_attr [ 284.162288][ T9676] loop6: detected capacity change from 0 to 32768 [ 284.246783][ T9676] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 284.346783][ T9676] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 284.436935][ T9676] XFS (loop6): Starting recovery (logdev: internal) [ 284.514257][ T9676] XFS (loop6): Ending recovery (logdev: internal) [ 284.549642][ T9705] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 284.549658][ T9705] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 284.758816][ T8682] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.006629][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 285.006664][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 285.093519][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.093558][ T5638] Bluetooth: hci5: command 0x0c1a tx timeout [ 285.392131][ T9715] loop1: detected capacity change from 0 to 1024 [ 285.483228][ T9692] loop5: detected capacity change from 0 to 32768 [ 285.555322][ T9692] JBD2: Ignoring recovery information on journal [ 285.750666][ T9692] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 286.448564][ T8728] ocfs2: Unmounting device (7,5) on (node local) [ 286.514515][ T9736] bond0: invalid ARP target specified [ 287.085145][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 287.165520][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.924238][ T9761] loop4: detected capacity change from 0 to 2048 [ 287.997933][ T9761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.188074][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.343524][ T9776] Cannot find set identified by id 0 to match [ 288.554691][ T5731] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.707695][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 288.714436][ T5731] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 288.737900][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.737926][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.737956][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.743893][ T5731] usb 2-1: config 0 descriptor?? [ 288.787446][ T5731] hub 2-1:0.0: USB hub found [ 288.789039][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 288.789052][ T32] audit: type=1800 audit(2000000172.269:766): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180005 res=0 errno=-22 [ 288.836805][ T32] audit: type=1800 audit(2000000172.309:767): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180034 res=0 errno=-22 [ 288.866602][ T32] audit: type=1800 audit(2000000172.349:768): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=180012 res=0 errno=-22 [ 288.898910][ T32] audit: type=1800 audit(2000000172.379:769): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=180013 res=0 errno=-22 [ 288.898948][ T32] audit: type=1800 audit(2000000172.379:770): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=180014 res=0 errno=-22 [ 289.017913][ T5731] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 289.037580][ T32] audit: type=1800 audit(2000000172.519:771): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180062 res=0 errno=-22 [ 289.229533][ T5731] usbhid 2-1:0.0: can't add hid device: -71 [ 289.229632][ T5731] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 289.278364][ T5731] usb 2-1: USB disconnect, device number 10 [ 289.668932][ T32] audit: type=1800 audit(2000000173.149:772): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1337" name="evt_soft_threshold_reached" dev="sysfs" ino=37949 res=0 errno=-22 [ 290.361258][ T9815] loop5: detected capacity change from 0 to 131072 [ 290.387041][ T9815] F2FS-fs (loop5): invalid crc value [ 290.445145][ T9815] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.464056][ T9815] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 290.600915][ T32] audit: type=1800 audit(2000000174.079:773): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 291.591948][ T9845] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8682] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9845] [ 291.600420][ T194] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.785255][ T194] usb 6-1: Using ep0 maxpacket: 16 [ 291.785860][ T194] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 291.791908][ T194] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.791942][ T194] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.791961][ T194] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.791975][ T194] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 291.791990][ T194] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.870670][ T194] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.870691][ T194] usb 6-1: Manufacturer: syz [ 291.883549][ T32] audit: type=1800 audit(2000000175.359:774): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180346 res=0 errno=-22 [ 291.918359][ T194] usb 6-1: config 0 descriptor?? [ 291.934305][ T32] audit: type=1800 audit(2000000175.409:775): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=180376 res=0 errno=-22 [ 292.088263][ T9853] kAFS: bad VL server IP address [ 292.334664][ T194] rc_core: IR keymap rc-hauppauge not found [ 292.334702][ T194] Registered IR keymap rc-empty [ 292.335259][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.361539][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.384534][ T194] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 292.406542][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.406909][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.435440][ T194] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 292.494806][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.515832][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.539131][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.554804][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.574983][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.594915][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.616354][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.634720][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.655881][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.676526][ T194] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 292.700578][ T194] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 292.700598][ T194] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 292.756471][ T194] usb 6-1: USB disconnect, device number 6 [ 293.438895][ T9874] netlink: 'syz.2.1362': attribute type 15 has an invalid length. [ 293.552610][ T9880] loop6: detected capacity change from 0 to 512 [ 293.876245][ T32] kauditd_printk_skb: 13 callbacks suppressed [ 293.876260][ T32] audit: type=1800 audit(2000000177.359:789): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1369" name="resource0" dev="sysfs" ino=2855 res=0 errno=-22 [ 294.785346][ T9889] loop1: detected capacity change from 0 to 32768 [ 294.793110][ T9889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1368 (9889) [ 295.494102][ T9889] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.494129][ T9889] BTRFS info (device loop1): using sha256 checksum algorithm [ 295.630335][ T9909] loop6: detected capacity change from 0 to 32768 [ 295.656474][ T9909] (syz.6.1378,9909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.656734][ T9909] (syz.6.1378,9909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.708369][ T32] audit: type=1800 audit(2000000434.966:790): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 295.708413][ T32] audit: type=1800 audit(2000000434.966:791): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180568 res=0 errno=-22 [ 295.708442][ T32] audit: type=1800 audit(2000000435.126:792): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 296.130634][ T9914] loop4: detected capacity change from 0 to 32768 [ 296.194866][ T32] audit: type=1800 audit(2000000435.666:793): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 296.275351][ T9909] JBD2: Ignoring recovery information on journal [ 296.415037][ T9909] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 296.527563][ T9914] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.607021][ T9889] BTRFS info (device loop1): enabling ssd optimizations [ 296.607043][ T9889] BTRFS info (device loop1): turning on async discard [ 296.607054][ T9889] BTRFS info (device loop1): enabling free space tree [ 296.715838][ T9914] XFS (loop4): Ending clean mount [ 296.743236][ T9914] XFS (loop4): Quotacheck needed: Please wait. [ 296.776679][ T32] audit: type=1800 audit(2000000436.256:794): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180721 res=0 errno=-22 [ 297.067342][ T9914] XFS (loop4): Quotacheck: Done. [ 297.150604][ T5636] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 297.381797][ T5637] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.565864][ T8682] ocfs2: Unmounting device (7,6) on (node local) [ 297.982997][ T9956] loop1: detected capacity change from 0 to 128 [ 298.093919][ T32] audit: type=1800 audit(2000000437.566:795): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1388" name="bus" dev="loop1" ino=146 res=0 errno=-22 [ 298.411297][ T9958] loop5: detected capacity change from 0 to 4096 [ 298.503583][ T9963] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.521320][ T32] audit: type=1800 audit(2000000437.996:796): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15605 res=0 errno=-22 [ 298.652440][ T9958] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 298.912639][ T9971] loop6: detected capacity change from 0 to 256 [ 298.913559][ T9971] exfat: Deprecated parameter 'utf8' [ 298.913613][ T9971] exfat: Deprecated parameter 'namecase' [ 298.913652][ T9971] exfat: Deprecated parameter 'namecase' [ 298.913698][ T9971] exfat: Deprecated parameter 'namecase' [ 299.012013][ T9971] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 299.047220][ T32] audit: type=1800 audit(2000000438.526:797): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 299.554032][ T32] audit: type=1800 audit(2000000439.026:798): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1398" name="online" dev="sysfs" ino=1342 res=0 errno=-22 [ 299.920805][ T32] audit: type=1800 audit(2000000439.396:799): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1404" name="new_device" dev="sysfs" ino=44074 res=0 errno=-13 [ 299.953637][ T9999] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 299.953851][ T9999] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 299.980381][ T32] audit: type=1800 audit(2000000439.426:800): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180882 res=0 errno=-22 [ 300.016988][ T32] audit: type=1800 audit(2000000439.496:801): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=44072 res=0 errno=-22 [ 300.021391][T10000] loop6: detected capacity change from 0 to 256 [ 300.023825][ T32] audit: type=1800 audit(2000000439.496:802): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=180883 res=0 errno=-22 [ 300.124112][T10000] exFAT-fs (loop6): error, no upcase table entry. Please run fsck [ 300.124132][T10000] exFAT-fs (loop6): Filesystem has been set read-only [ 300.124371][T10000] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 300.153300][ T32] audit: type=1800 audit(2000000439.636:803): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15728 res=0 errno=-22 [ 300.182932][ T206] IPVS: starting estimator thread 0... [ 300.201940][T10002] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 300.265595][T10004] IPVS: using max 38 ests per chain, 91200 per kthread [ 300.361848][ T32] audit: type=1800 audit(2000000439.836:804): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180903 res=0 errno=-22 [ 300.862404][T10029] program syz.2.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.107419][T10009] overlayfs: statfs failed on './file0' [ 301.523981][ T32] audit: type=1800 audit(2000000440.996:805): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14990 res=0 errno=-22 [ 301.554452][T10050] xt_hashlimit: size too large, truncated to 1048576 [ 301.583221][ T32] audit: type=1400 audit(2000000441.056:806): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=10048 comm="syz.1.1425" name="foo" offset=76 [ 302.213817][T10067] loop1: detected capacity change from 0 to 256 [ 302.262588][T10067] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) syzkaller syzkaller login: [ 303.536447][ T194] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 303.685546][ T194] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 303.689449][ T194] usb 5-1: config 1 has an invalid interface number: 144 but max is 1 [ 303.689479][ T194] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.689493][ T194] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 303.689508][ T194] usb 5-1: config 1 has no interface number 2 [ 303.689554][ T194] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.689582][ T194] usb 5-1: config 1 interface 144 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.689598][ T194] usb 5-1: config 1 interface 144 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.689616][ T194] usb 5-1: config 1 interface 144 has no altsetting 0 [ 303.705845][ T194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.705863][ T194] usb 5-1: Product: syz [ 303.705873][ T194] usb 5-1: Manufacturer: syz [ 303.705882][ T194] usb 5-1: SerialNumber: syz [ 303.827127][ T194] usb 5-1: selecting invalid altsetting 1 [ 303.948250][T10091] loop6: detected capacity change from 0 to 32768 [ 304.117075][T10091] dmapctl: nleafs 0 != 2^0 [ 304.117100][T10091] ERROR: (device loop6): dbAdjCtl: Corrupt dmapctl page [ 304.117100][T10091] [ 304.149551][T10091] ERROR: (device loop6): remounting filesystem as read-only [ 304.149642][T10091] ERROR: (device loop6): dbDiscardAG: -EIO [ 304.149642][T10091] [ 304.200131][T10115] loop1: detected capacity change from 0 to 1024 [ 304.235893][T10115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.281127][T10115] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #3: block 1: comm syz.1.1451: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.281160][T10115] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.281927][T10115] __quota_error: 9 callbacks suppressed [ 304.281940][T10115] Quota error (device loop1): write_blk: dquota write failed [ 304.281965][T10115] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 304.282007][T10115] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz.1.1451: Failed to acquire dquot type 0 [ 304.282024][T10115] loop1: lost filesystem error report for type 5 error -117 [ 304.282288][ T194] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 304.282382][ T194] cdc_ncm 5-1:1.0: bind() failure [ 304.284623][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 304.284639][ C0] EXT4-fs (loop1): initial error at time 2000000443: ext4_map_blocks:951: inode 3: block 1 [ 304.284665][ C0] EXT4-fs (loop1): last error at time 2000000443: ext4_acquire_dquot:7120 [ 304.327815][T10115] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.1451: Freeing blocks not in datazone - block = 0, count = 4096 [ 304.327841][T10115] loop1: lost filesystem error report for type 5 error -117 [ 304.440925][ T194] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 304.440963][ T194] cdc_ncm 5-1:1.1: bind() failure [ 304.464529][ T32] audit: type=1800 audit(2000000443.946:816): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15113 res=0 errno=-22 [ 304.563284][ T32] audit: type=1800 audit(2000000444.036:817): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=181043 res=0 errno=-22 [ 304.563322][ T32] audit: type=1800 audit(2000000444.036:818): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=181044 res=0 errno=-22 [ 304.563351][ T32] audit: type=1800 audit(2000000444.036:819): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=181023 res=0 errno=-22 [ 304.634474][ T1161] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.634505][ T1161] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.652611][ T1161] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 304.652646][ T1161] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 0 [ 304.652663][ T1161] loop1: lost filesystem error report for type 5 error -117 [ 304.654505][ T32] audit: type=1800 audit(2000000444.136:820): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=181045 res=0 errno=-22 [ 304.742473][ T32] audit: type=1800 audit(2000000444.216:821): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181116 res=0 errno=-22 [ 304.743358][ T32] audit: type=1800 audit(2000000444.216:822): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=181066 res=0 errno=-22 [ 304.803141][T10115] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1451: Invalid inode bitmap blk 0 in block_group 0 [ 304.803168][T10115] loop1: lost filesystem error report for type 5 error -117 [ 304.822275][T10115] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 304.822296][T10115] loop1: lost filesystem error report for type 5 error -117 [ 304.822587][T10115] EXT4-fs (loop1): 1 orphan inode deleted [ 304.868184][ T194] usb 5-1: USB disconnect, device number 12 [ 304.869144][T10115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.003987][T10115] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.1451: Invalid inode table block 18446744069414584321 in block_group 0 [ 305.102038][T10115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 305.211047][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.214187][ T5636] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 18446744069414584321 in block_group 0 [ 305.214234][ T5636] loop1: lost filesystem error report for type 5 error -117 [ 305.753610][T10139] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 306.165830][T10157] loop5: detected capacity change from 0 to 256 [ 306.235707][T10161] loop6: detected capacity change from 0 to 64 [ 306.306279][T10161] syz.6.1480: attempt to access beyond end of device [ 306.306279][T10161] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 306.306564][T10161] Buffer I/O error on dev loop6, logical block 512, async page read [ 306.306779][T10161] syz.6.1480: attempt to access beyond end of device [ 306.306779][T10161] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 306.306808][T10161] Buffer I/O error on dev loop6, logical block 56576, async page read [ 306.335773][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1468'. [ 307.851315][T10204] loop6: detected capacity change from 0 to 2048 [ 307.893031][T10204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.006754][T10218] xt_hashlimit: size too large, truncated to 1048576 [ 308.064507][T10220] xt_connbytes: Forcing CT accounting to be enabled [ 308.074493][T10220] ip6t_hbh: Not strict - not implemented [ 308.455723][T10204] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 308.567515][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 561 with error 28 [ 308.567552][ T13] EXT4-fs (loop6): This should not happen!! Data will be lost [ 308.567552][ T13] [ 308.567568][ T13] EXT4-fs (loop6): Total free blocks count 0 [ 308.567583][ T13] EXT4-fs (loop6): Free/Dirty block details [ 308.567608][ T13] EXT4-fs (loop6): free_blocks=4096 [ 308.570269][ T13] EXT4-fs (loop6): dirty_blocks=576 [ 308.570284][ T13] EXT4-fs (loop6): Block reservation details [ 308.570293][ T13] EXT4-fs (loop6): i_reserved_data_blocks=36 [ 308.709886][ T8682] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.435612][T10260] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1509'. [ 309.759518][T10243] loop5: detected capacity change from 0 to 40427 [ 309.783795][T10243] F2FS-fs (loop5): invalid crc value [ 309.930889][T10270] ip_tables: iptables: counters copy to user failed while replacing table [ 309.967020][T10243] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.990168][T10243] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 310.046825][T10259] loop4: detected capacity change from 0 to 32768 [ 310.132792][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 310.132831][ T32] audit: type=1800 audit(2000000449.606:833): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15482 res=0 errno=-22 [ 310.792417][T10283] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.276787][T10306] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 311.913993][T10327] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1550'. [ 311.970498][T10329] Ring buffer clock went backwards: 102851628921 -> 59 [ 311.970529][T10329] [CPU: 1]TIME DOES NOT MATCH expected:102851628922 actual:60 delta:1 before:59 after:59 context:. [ 311.970529][T10329] trace clock:trace_clock_counter+0x0/0x40 [ 311.970602][T10329] [102851628921] PAGE TIME STAMP [ 311.970645][T10329] 0x0: [102851628921] delta:0 . [ 311.970662][T10329] 0x14: [102851628921] delta:0 TIME EXTEND [ 311.970675][T10329] 0x1c: [102851628921] delta:0 .d [ 311.970691][T10329] expected end:0x34 last event actually ended at:0x34 [ 311.970876][T10329] ------------[ cut here ]------------ [ 311.970885][T10329] system_state != SYSTEM_BOOTING [ 311.970899][T10329] WARNING: kernel/trace/ring_buffer.c:4790 at check_buffer+0x746/0x860, CPU#1: syz.1.1540/10329 [ 312.046950][T10329] Modules linked in: [ 312.051554][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.1.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.063121][T10329] Tainted: [L]=SOFTLOCKUP [ 312.067885][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.078361][T10329] RIP: 0010:check_buffer+0x746/0x860 [ 312.083718][T10329] Code: c0 0f 85 16 01 00 00 8b 1d 97 5d f0 0f 31 ff 89 de e8 ee d7 fb ff 85 db 75 45 e8 d5 d2 fb ff e9 bf fa ff ff e8 cb d2 fb ff 90 <0f> 0b 65 48 8b 05 18 d8 13 13 48 3b 44 24 40 75 41 90 e9 ff f9 ff [ 312.103507][T10329] RSP: 0018:ffffc90003557970 EFLAGS: 00010287 [ 312.109715][T10329] RAX: ffffffff81cd4805 RBX: 0000000000000003 RCX: 0000000000080000 [ 312.117774][T10329] RDX: ffffc90005d21000 RSI: 0000000000001b83 RDI: 0000000000001b84 [ 312.125859][T10329] RBP: 00000017f26f4f7a R08: 0000000000000003 R09: 0000000000000004 [ 312.133876][T10329] R10: dffffc0000000000 R11: fffffbfff37de0d4 R12: ffff88813fe060c8 [ 312.142040][T10329] R13: ffffffff8c3278c0 R14: dffffc0000000000 R15: 0000000000000034 [ 312.150098][T10329] FS: 00007f3fe6bf66c0(0000) GS:ffff88812350e000(0000) knlGS:0000000000000000 [ 312.159106][T10329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.165793][T10329] CR2: 00007fb2cfd556c8 CR3: 00000000741c4000 CR4: 00000000003526f0 [ 312.173852][T10329] Call Trace: [ 312.177214][T10329] [ 312.180193][T10329] __rb_reserve_next+0x549/0xdd0 [ 312.185249][T10329] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 312.190939][T10329] ? trace_event_buffer_reserve+0x249/0x2d0 [ 312.196948][T10329] ? trace_event_raw_event_kvm_update_master_clock+0x1ba/0x2a0 [ 312.204608][T10329] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 312.210817][T10329] trace_event_buffer_reserve+0x1ef/0x2d0 [ 312.216631][T10329] trace_event_raw_event_kvm_apicv_inhibit_changed+0x10b/0x290 [ 312.224239][T10329] ? __pfx_trace_event_raw_event_kvm_apicv_inhibit_changed+0x10/0x10 [ 312.232395][T10329] set_or_clear_apicv_inhibit+0x1dd/0x220 [ 312.238226][T10329] kvm_arch_init_vm+0x496/0x780 [ 312.243132][T10329] kvm_dev_ioctl+0xbb7/0x1700 [ 312.247904][T10329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 312.253068][T10329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.258140][T10329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 312.263329][T10329] __se_sys_ioctl+0xfc/0x170 [ 312.268013][T10329] do_syscall_64+0x166/0x520 [ 312.272654][T10329] ? trace_irq_disable+0x3b/0x140 [ 312.277786][T10329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.283929][T10329] ? clear_bhb_loop+0x70/0xc0 [ 312.288745][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.294720][T10329] RIP: 0033:0x7f3fe899f559 [ 312.299186][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.318963][T10329] RSP: 002b:00007f3fe6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.327465][T10329] RAX: ffffffffffffffda RBX: 00007f3fe8c25fa0 RCX: 00007f3fe899f559 [ 312.335521][T10329] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 312.343538][T10329] RBP: 00007f3fe8a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 312.351695][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.359756][T10329] R13: 00007f3fe8c26038 R14: 00007f3fe8c25fa0 R15: 00007ffd466591f8 [ 312.367848][T10329] [ 312.370920][T10329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.378240][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.1.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.389303][T10329] Tainted: [L]=SOFTLOCKUP [ 312.393657][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 312.403754][T10329] Call Trace: [ 312.407063][T10329] [ 312.410021][T10329] vpanic+0x26f/0x710 [ 312.414043][T10329] panic+0xc5/0xd0 [ 312.417803][T10329] ? __pfx_panic+0x10/0x10 [ 312.422275][T10329] __warn+0x315/0x4c0 [ 312.426303][T10329] ? check_buffer+0x746/0x860 [ 312.431038][T10329] ? check_buffer+0x746/0x860 [ 312.435759][T10329] __report_bug+0x276/0x570 [ 312.440346][T10329] ? check_buffer+0x746/0x860 [ 312.445084][T10329] ? __pfx___report_bug+0x10/0x10 [ 312.450169][T10329] ? vprintk_emit+0x55c/0x5f0 [ 312.454911][T10329] ? __pfx_vprintk_emit+0x10/0x10 [ 312.459994][T10329] ? check_buffer+0x746/0x860 [ 312.464728][T10329] report_bug+0x16b/0x220 [ 312.469107][T10329] ? check_buffer+0x746/0x860 [ 312.473845][T10329] ? check_buffer+0x748/0x860 [ 312.478580][T10329] handle_bug+0x9c/0x200 [ 312.482886][T10329] exc_invalid_op+0x1a/0x50 [ 312.487433][T10329] asm_exc_invalid_op+0x1a/0x20 [ 312.492330][T10329] RIP: 0010:check_buffer+0x746/0x860 [ 312.497675][T10329] Code: c0 0f 85 16 01 00 00 8b 1d 97 5d f0 0f 31 ff 89 de e8 ee d7 fb ff 85 db 75 45 e8 d5 d2 fb ff e9 bf fa ff ff e8 cb d2 fb ff 90 <0f> 0b 65 48 8b 05 18 d8 13 13 48 3b 44 24 40 75 41 90 e9 ff f9 ff [ 312.519797][T10329] RSP: 0018:ffffc90003557970 EFLAGS: 00010287 [ 312.525911][T10329] RAX: ffffffff81cd4805 RBX: 0000000000000003 RCX: 0000000000080000 [ 312.533946][T10329] RDX: ffffc90005d21000 RSI: 0000000000001b83 RDI: 0000000000001b84 [ 312.542490][T10329] RBP: 00000017f26f4f7a R08: 0000000000000003 R09: 0000000000000004 [ 312.550505][T10329] R10: dffffc0000000000 R11: fffffbfff37de0d4 R12: ffff88813fe060c8 [ 312.558517][T10329] R13: ffffffff8c3278c0 R14: dffffc0000000000 R15: 0000000000000034 [ 312.566524][T10329] ? check_buffer+0x745/0x860 [ 312.571258][T10329] __rb_reserve_next+0x549/0xdd0 [ 312.576270][T10329] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 312.581940][T10329] ? trace_event_buffer_reserve+0x249/0x2d0 [ 312.587885][T10329] ? trace_event_raw_event_kvm_update_master_clock+0x1ba/0x2a0 [ 312.596177][T10329] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 312.602386][T10329] trace_event_buffer_reserve+0x1ef/0x2d0 [ 312.608198][T10329] trace_event_raw_event_kvm_apicv_inhibit_changed+0x10b/0x290 [ 312.615799][T10329] ? __pfx_trace_event_raw_event_kvm_apicv_inhibit_changed+0x10/0x10 [ 312.623905][T10329] set_or_clear_apicv_inhibit+0x1dd/0x220 [ 312.629651][T10329] kvm_arch_init_vm+0x496/0x780 [ 312.634529][T10329] kvm_dev_ioctl+0xbb7/0x1700 [ 312.639240][T10329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 312.644379][T10329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.649353][T10329] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 312.654624][T10329] __se_sys_ioctl+0xfc/0x170 [ 312.659286][T10329] do_syscall_64+0x166/0x520 [ 312.663908][T10329] ? trace_irq_disable+0x3b/0x140 [ 312.668970][T10329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.675069][T10329] ? clear_bhb_loop+0x70/0xc0 [ 312.679785][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.685701][T10329] RIP: 0033:0x7f3fe899f559 [ 312.690146][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.709784][T10329] RSP: 002b:00007f3fe6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.718229][T10329] RAX: ffffffffffffffda RBX: 00007f3fe8c25fa0 RCX: 00007f3fe899f559 [ 312.728873][T10329] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 312.736876][T10329] RBP: 00007f3fe8a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 312.744871][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.752865][T10329] R13: 00007f3fe8c26038 R14: 00007f3fe8c25fa0 R15: 00007ffd466591f8 [ 312.760881][T10329] [ 312.763944][T10329] Kernel Offset: disabled [ 312.768292][T10329] Rebooting in 86400 seconds..