last executing test programs: 3m55.031955622s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000002800028024000380100001800400030008000100"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m54.827841063s ago: executing program 1 (id=19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x9, @none}}}, 0xb) 3m54.581701299s ago: executing program 1 (id=20): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) fstat(r0, &(0x7f0000000080)) 3m54.360634161s ago: executing program 1 (id=22): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, 0x0) 3m39.266945302s ago: executing program 32 (id=22): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, 0x0) 2m48.572973523s ago: executing program 2 (id=568): r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/rpc\x00') r1 = openat(r0, &(0x7f00000008c0)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)=' \\ 127.0.0.1 2\\000\\000\\0l\\calhost\n', 0x24) 2m48.378900733s ago: executing program 2 (id=571): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 2m48.179353683s ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2m48.011812061s ago: executing program 2 (id=575): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18c50, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xff, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m47.424760071s ago: executing program 2 (id=580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251100000008000100", @ANYRES32, @ANYBLOB="080015"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) 2m46.787907137s ago: executing program 2 (id=587): getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r0 = io_uring_setup(0x108c, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f0000000300), 0x0) 2m46.321256415s ago: executing program 33 (id=587): getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r0 = io_uring_setup(0x108c, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x19, &(0x7f0000000300), 0x0) 2m42.149525957s ago: executing program 4 (id=624): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80201, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001080)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r1}, [@multipath={0x0, 0x884, 0x0, 0x58, 'multipath\x00', {'0', 0x20, '0'}}]}) 2m41.72862258s ago: executing program 4 (id=626): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') pread64(r0, &(0x7f0000000040)=""/33, 0x21, 0x73) lseek(r0, 0x4, 0x0) 2m41.6362371s ago: executing program 4 (id=627): r0 = epoll_create(0x7) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 2m41.517984272s ago: executing program 4 (id=628): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x3010808, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'iso8859-5'}}, {}, {@nobarrier}, {@nobarrier}]}, 0x2, 0x5f9, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 2m41.204851294s ago: executing program 4 (id=629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000008000), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000008200)={0x0, 0x0, &(0x7f00000081c0)={&(0x7f0000008080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 2m39.572034833s ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f000000f880)) 2m39.006971072s ago: executing program 34 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f000000f880)) 2m26.524777752s ago: executing program 5 (id=702): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) unshare(0x8020400) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)=r0) 2m26.135388652s ago: executing program 5 (id=705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.67909453s ago: executing program 5 (id=710): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000006800)={0x80, 0x9, 0x2, 0x7, 0x100007, 0x4}) 2m25.449587953s ago: executing program 5 (id=713): io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2m25.204928608s ago: executing program 5 (id=716): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x30c89, 0x0, 0x20, 0x0, 0x0) 2m24.892389071s ago: executing program 5 (id=719): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) 2m9.097825824s ago: executing program 35 (id=719): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, 0x0) 2.543539268s ago: executing program 0 (id=1952): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000200)) 1.897901714s ago: executing program 6 (id=1963): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e", 0x3, 0x2) 1.652456449s ago: executing program 6 (id=1965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.327243963s ago: executing program 6 (id=1977): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ftruncate(r0, 0xe379) 1.326664263s ago: executing program 7 (id=1970): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x30d}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e3", 0xd0}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e464", 0x57}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.209405105s ago: executing program 3 (id=1971): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06f7", 0x2}, {&(0x7f00000012c0)="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", 0x1a9}], 0x2, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) 1.133005674s ago: executing program 6 (id=1972): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000009a40)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000009a80)={0x0, 0x0, &(0x7f0000009ac0)={&(0x7f0000009b00)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 1.051652962s ago: executing program 3 (id=1973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.050887812s ago: executing program 7 (id=1982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06f7", 0x2}, {&(0x7f00000012c0)="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", 0x1a9}], 0x2, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) 1.018913605s ago: executing program 0 (id=1974): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e", 0x3, 0x2) 957.054381ms ago: executing program 7 (id=1975): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x210000, &(0x7f0000000f40)={[{@auto_da_alloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@debug}, {@init_itable}]}, 0xfc, 0x57c, &(0x7f0000000480)="$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") capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 915.957976ms ago: executing program 6 (id=1976): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 833.868674ms ago: executing program 0 (id=1978): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 826.487815ms ago: executing program 3 (id=1979): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0x48, 0x6, 0x7, 0xffffffff}, {0x6, 0xfd, 0x4}]}) write$ppp(r0, &(0x7f0000000340)="01d4", 0x2) 682.56027ms ago: executing program 0 (id=1980): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='osdtimeout\x00', &(0x7f0000000080)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='mount_timeout\x00', &(0x7f0000000100)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='caps_max\x00', &(0x7f0000000180)='1\x00', 0x0) 511.976567ms ago: executing program 3 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='(!=v_)', 0x6) 503.546488ms ago: executing program 0 (id=1983): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x30d}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e3", 0xd0}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e464", 0x57}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 425.705996ms ago: executing program 7 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 272.994882ms ago: executing program 0 (id=1985): msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000059cd2008fe8e295df0d71993e6e5491a4428b22da58fdc198cb0f97a74ad0211b6bab10694fc9c64bad416c757f9fec54c0a9183412e8efc01a565e8db5e9018ce80922e83ec0ee65efc53c8f49c88dfb738016818a7edec748c386f3ffa97a07d4a17359af5a46c2cfe080000001be837e12abd035a91083a"], 0x8f, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00', 0x0}) 272.892652ms ago: executing program 6 (id=1986): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r0, &(0x7f0000000280)={0x1a, 0x201, 0x80, 0x19, 0x0, 0x1, @broadcast}, 0x10) 197.13005ms ago: executing program 3 (id=1987): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e", 0x3, 0x2) 157.245304ms ago: executing program 7 (id=1988): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) write$sndseq(r1, &(0x7f0000000140)=[{0x22, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0x0, 0x0, 0xffffffff]}}], 0x1c) 73.118643ms ago: executing program 3 (id=1989): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 0s ago: executing program 7 (id=1990): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x6, 0x1, "a4"}, 0x9) kernel console output (not intermixed with test programs): ] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 177.324459][ T8054] System zones: 1-12 [ 177.335771][ T8054] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.385687][ T8054] EXT4-fs error (device loop0): ext4_search_dir:1551: inode #11: block 14: comm syz.0.714: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2306, rec_len=0, size=1024 fake=1 [ 177.420523][ T8054] EXT4-fs (loop0): Remounting filesystem read-only [ 177.497141][ T5791] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 177.740624][ T8069] netlink: 104 bytes leftover after parsing attributes in process `syz.0.717'. [ 178.188653][ T28] audit: type=1326 audit(1793188291.229:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.3.723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f814db9f559 code=0x0 [ 178.322040][ T8088] loop6: detected capacity change from 0 to 1024 [ 178.458437][ T8088] hfsplus: xattr search failed [ 179.695061][ T8123] loop3: detected capacity change from 0 to 4096 [ 179.720792][ T8123] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 179.831197][ T8123] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 180.676978][ T8117] loop6: detected capacity change from 0 to 32768 [ 180.759769][ T8117] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.855488][ T8158] mmap: syz.0.747 (8158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.963008][ T8117] XFS (loop6): Ending clean mount [ 180.985627][ T8117] XFS (loop6): Quotacheck needed: Please wait. [ 181.127946][ T8117] XFS (loop6): Quotacheck: Done. [ 181.334326][ T8169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.420279][ T7776] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.415545][ T8199] loop3: detected capacity change from 0 to 128 [ 182.493333][ T8199] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.577422][ T8199] hpfs: filesystem error: improperly stopped [ 182.623185][ T8199] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 182.631828][ T8199] hpfs: You really don't want any checks? You are crazy... [ 182.699687][ T8199] hpfs: hpfs_map_sector(): read error [ 182.705145][ T8199] hpfs: code page support is disabled [ 182.742873][ T8199] hpfs: hpfs_map_4sectors(): unaligned read [ 182.749372][ T8199] hpfs: hpfs_map_4sectors(): unaligned read [ 182.762070][ T8199] hpfs: filesystem error: unable to find root dir [ 183.509361][ T8226] loop3: detected capacity change from 0 to 4096 [ 183.530649][ T8226] EXT4-fs: Ignoring removed orlov option [ 183.575532][ T8226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.636471][ T8226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.789539][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.069178][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 184.136741][ T8245] bond1: (slave sit0): Device is not bonding slave [ 184.143625][ T8245] bond1: option active_slave: invalid value (sit0) [ 184.160724][ T8245] bond1 (unregistering): Released all slaves [ 185.654542][ T8262] loop0: detected capacity change from 0 to 32768 [ 185.713319][ T8262] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop0 scanned by syz.0.780 (8262) [ 185.801798][ T8262] BTRFS info (device loop0): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 185.851098][ T8262] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 185.859894][ T8262] BTRFS info (device loop0): using free space tree [ 185.995758][ T8295] loop3: detected capacity change from 0 to 256 [ 186.025740][ T8295] exfat: Bad value for 'umask' [ 186.101925][ T8029] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.149937][ T28] audit: type=1326 audit(1793188298.958:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.257299][ T8262] BTRFS info (device loop0): enabling ssd optimizations [ 186.307609][ T8262] BTRFS info (device loop0): auto enabling async discard [ 186.313756][ T28] audit: type=1326 audit(1793188298.958:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.417425][ T28] audit: type=1326 audit(1793188298.958:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.510105][ T28] audit: type=1326 audit(1793188298.986:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.615701][ T28] audit: type=1326 audit(1793188298.986:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.665623][ T8271] loop6: detected capacity change from 0 to 32768 [ 186.713602][ T28] audit: type=1326 audit(1793188298.986:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.787178][ T8271] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.804986][ T8271] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.815678][ T28] audit: type=1326 audit(1793188298.996:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 186.935235][ T5791] BTRFS info (device loop0): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 186.984649][ T28] audit: type=1326 audit(1793188298.996:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.3.789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 187.385107][ T8271] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 187.436614][ T5875] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 187.445885][ T5875] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 187.637891][ T5875] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 179ms [ 187.683495][ T5875] gfs2: fsid=syz:syz.0: jid=0: Done [ 187.690607][ T8271] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 188.152627][ T8344] loop3: detected capacity change from 0 to 512 [ 188.254088][ T8344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.299617][ T8344] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.568716][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.902407][ T8406] netlink: 6 bytes leftover after parsing attributes in process `syz.3.812'. [ 190.917912][ T8406] netlink: 6 bytes leftover after parsing attributes in process `syz.3.812'. [ 191.186484][ T5171] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.307337][ T8414] loop3: detected capacity change from 0 to 1024 [ 191.409589][ T5171] usb 1-1: Using ep0 maxpacket: 16 [ 191.452555][ T5171] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.473995][ T5171] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.484000][ T5171] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.550502][ T5171] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.572241][ T5171] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 191.635879][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.701988][ T5171] usb 1-1: config 0 descriptor?? [ 191.908558][ T8408] loop6: detected capacity change from 0 to 32768 [ 191.972823][ T8408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.813 (8408) [ 192.022563][ T8408] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.052578][ T8408] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 192.094427][ T8408] BTRFS info (device loop6): setting nodatasum [ 192.100687][ T8408] BTRFS info (device loop6): force zlib compression, level 3 [ 192.152321][ T8408] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 192.188463][ T8408] BTRFS info (device loop6): use lzo compression, level 0 [ 192.214762][ T5171] elan 0003:04F3:074D.0007: failed to start in urb: -90 [ 192.227777][ T8408] BTRFS info (device loop6): turning on flush-on-commit [ 192.239039][ T5171] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.0007/input/input9 [ 192.263418][ T8408] BTRFS info (device loop6): enabling auto defrag [ 192.314332][ T5171] elan 0003:04F3:074D.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0 [ 192.318315][ T8408] BTRFS info (device loop6): max_inline at 4096 [ 192.394963][ T8408] BTRFS info (device loop6): using free space tree [ 192.479562][ T27] usb 1-1: USB disconnect, device number 4 [ 192.526142][ T8429] fido_id[8429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 192.672843][ T8408] BTRFS info (device loop6): enabling ssd optimizations [ 192.784845][ T28] audit: type=1800 audit(1793188305.161:44): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.813" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 192.888054][ T7776] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.976017][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 194.201539][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.222767][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.256678][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.283883][ T5875] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 194.297361][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.307691][ T5875] usb 7-1: Product: syz [ 194.312218][ T5875] usb 7-1: Manufacturer: syz [ 194.337390][ T5875] usb 7-1: SerialNumber: syz [ 194.377590][ T5875] usb 7-1: config 0 descriptor?? [ 194.430589][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.442579][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.455100][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.463721][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.471984][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.488066][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.520897][ T5857] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.623088][ T5875] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 194.641794][ T38] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.699946][ T8491] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.765958][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.790966][ T38] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.801735][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.816475][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.833992][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.889082][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.936236][ T971] usb 7-1: USB disconnect, device number 2 [ 194.943654][ T5857] usb 1-1: config 0 descriptor?? [ 195.003310][ T38] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.156457][ T38] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.445917][ T5857] plantronics 0003:047F:FFFF.0008: report_id 35069 is invalid [ 195.485820][ T5857] plantronics 0003:047F:FFFF.0008: item 0 2 1 8 parsing failed [ 195.538838][ T5857] plantronics 0003:047F:FFFF.0008: parse failed [ 195.553922][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.560534][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.572552][ T5857] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 195.706321][ T8510] Bluetooth: hci0: too big key_count value 62977 [ 195.767076][ T9] usb 1-1: USB disconnect, device number 5 [ 195.993391][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 196.421708][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.444205][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.451531][ T8491] bridge_slave_0: entered allmulticast mode [ 196.474264][ T8491] bridge_slave_0: entered promiscuous mode [ 196.643184][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.659251][ T5795] Bluetooth: hci2: command tx timeout [ 196.668992][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.676281][ T8491] bridge_slave_1: entered allmulticast mode [ 196.722075][ T8491] bridge_slave_1: entered promiscuous mode [ 196.832462][ T8552] loop6: detected capacity change from 0 to 64 [ 197.034169][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.196182][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.400194][ T8491] team0: Port device team_slave_0 added [ 197.523788][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 197.568250][ T8491] team0: Port device team_slave_1 added [ 197.737717][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 197.739864][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.761637][ T8] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.768148][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.783577][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 197.807772][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.842843][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.880507][ T8] usb 7-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 197.918749][ T8554] loop3: detected capacity change from 0 to 32768 [ 197.925599][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.950495][ T8] usb 7-1: config 0 descriptor?? [ 197.965022][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.977508][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.008281][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.061637][ T8554] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.123330][ T8491] hsr_slave_0: entered promiscuous mode [ 198.137202][ T8491] hsr_slave_1: entered promiscuous mode [ 198.177861][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.202434][ T8554] XFS (loop3): Ending clean mount [ 198.213055][ T8491] Cannot create hsr debugfs directory [ 198.416147][ T5789] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.607514][ T8] wacom 0003:056A:032F.0009: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.6-1/input0 [ 198.710309][ T8] usb 7-1: USB disconnect, device number 3 [ 198.859888][ T38] hsr_slave_0: left promiscuous mode [ 198.870726][ T5795] Bluetooth: hci2: command tx timeout [ 198.890322][ T38] hsr_slave_1: left promiscuous mode [ 198.964790][ T8598] fido_id[8598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 198.999300][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.001063][ T8605] loop3: detected capacity change from 0 to 1024 [ 199.006928][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.078209][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.085926][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.102989][ T8605] hfsplus: bad catalog entry type [ 199.104029][ T38] bridge_slave_1: left allmulticast mode [ 199.136504][ T38] bridge_slave_1: left promiscuous mode [ 199.159449][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.203345][ T38] bridge_slave_0: left allmulticast mode [ 199.209182][ T38] bridge_slave_0: left promiscuous mode [ 199.223502][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.321364][ T38] veth1_macvtap: left promiscuous mode [ 199.335076][ T38] veth0_macvtap: left promiscuous mode [ 199.349711][ T38] veth1_vlan: left promiscuous mode [ 199.366387][ T38] veth0_vlan: left promiscuous mode [ 199.433953][ T8616] device-mapper: table: 248:6: thin-pool: Error getting data device (-ENOENT) [ 199.443218][ T8616] device-mapper: ioctl: error adding target to table [ 200.399366][ T8629] loop6: detected capacity change from 0 to 32768 [ 200.514345][ T8629] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 200.699433][ T7776] ocfs2: Unmounting device (7,6) on (node local) [ 200.821564][ T38] team0 (unregistering): Port device team_slave_1 removed [ 200.920973][ T38] team0 (unregistering): Port device team_slave_0 removed [ 200.987544][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.061124][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.093980][ T5795] Bluetooth: hci2: command tx timeout [ 201.379218][ T8633] loop6: detected capacity change from 0 to 32768 [ 201.433267][ T8633] XFS (loop6): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 201.494312][ T8633] XFS (loop6): Quotacheck needed: Please wait. [ 201.634977][ T8633] XFS (loop6): Quotacheck: Done. [ 201.699679][ T7776] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.718459][ T38] bond0 (unregistering): Released all slaves [ 202.495039][ T8491] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.524245][ T8660] loop6: detected capacity change from 0 to 256 [ 202.547445][ T8491] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.566019][ T8660] exfat: Deprecated parameter 'utf8' [ 202.575720][ T8660] exfat: Deprecated parameter 'namecase' [ 202.588836][ T8660] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 202.606951][ T8491] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.645405][ T8491] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.953491][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.028280][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.105147][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.112361][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.151865][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.159114][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.233417][ T8677] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 203.241343][ T8677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.879'. [ 203.297439][ T8677] dummy0: entered promiscuous mode [ 203.303155][ T8677] bridge0: port 3(dummy0) entered blocking state [ 203.312994][ T8677] bridge0: port 3(dummy0) entered disabled state [ 203.320900][ T5795] Bluetooth: hci2: command tx timeout [ 203.339201][ T8677] dummy0: entered allmulticast mode [ 203.358206][ T8677] bridge0: port 3(dummy0) entered blocking state [ 203.365304][ T8677] bridge0: port 3(dummy0) entered forwarding state [ 203.457136][ T8684] loop0: detected capacity change from 0 to 16 [ 203.459675][ T8491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.488445][ T8491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.490074][ T8684] erofs: (device loop0): mounted with root inode @ nid 36. [ 204.140361][ T1199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.227898][ T8712] loop6: detected capacity change from 0 to 4096 [ 204.316604][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.365367][ T1199] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 204.374476][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.418210][ T1199] usb 4-1: Product: syz [ 204.422448][ T1199] usb 4-1: Manufacturer: syz [ 204.427630][ T1199] usb 4-1: SerialNumber: syz [ 204.470300][ T1199] usb 4-1: config 0 descriptor?? [ 204.783942][ T5857] usb 4-1: USB disconnect, device number 3 [ 205.110542][ T8699] loop0: detected capacity change from 0 to 40427 [ 205.167914][ T8699] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 205.190291][ T8699] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.224363][ T8699] F2FS-fs (loop0): invalid crc value [ 205.233714][ T8699] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 205.277982][ T8699] F2FS-fs (loop0): Found nat_bits in checkpoint [ 205.288687][ T8491] veth0_vlan: entered promiscuous mode [ 205.354517][ T8491] veth1_vlan: entered promiscuous mode [ 205.416166][ T8699] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 205.444945][ T8699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.473306][ T8491] veth0_macvtap: entered promiscuous mode [ 205.488891][ T8491] veth1_macvtap: entered promiscuous mode [ 205.543996][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.578027][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.606316][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.623226][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.643570][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.663882][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.704492][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.713984][ T8699] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 205.792908][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.850249][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.873382][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.897582][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.925055][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.946120][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.971481][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.055861][ T8491] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.077457][ T8491] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.105188][ T8491] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.132741][ T8491] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.304524][ T8749] loop3: detected capacity change from 0 to 512 [ 206.392220][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.431111][ T8749] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #17: comm syz.3.894: corrupted in-inode xattr: overlapping e_value [ 206.434911][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.506287][ T8749] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.894: couldn't read orphan inode 17 (err -117) [ 206.538711][ T8749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.572273][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.606606][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.779932][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.218838][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.436403][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.454026][ T27] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 207.456863][ T8775] loop6: detected capacity change from 0 to 32768 [ 207.472431][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.495686][ T27] usb 4-1: Product: syz [ 207.523119][ T27] usb 4-1: Manufacturer: syz [ 207.539099][ T8775] JBD2: Ignoring recovery information on journal [ 207.568178][ T27] usb 4-1: selecting invalid altsetting 1 [ 207.606020][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 207.626864][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 207.627095][ T8775] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 207.798757][ T8772] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 207.882237][ T27] DVB: Unable to find symbol cx22700_attach() [ 207.994590][ T27] DVB: Unable to find symbol tda10046_attach() [ 208.015017][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 208.048823][ T27] usb 4-1: USB disconnect, device number 4 [ 208.135395][ T7776] ocfs2: Unmounting device (7,6) on (node local) [ 208.710909][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 208.710969][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 208.787477][ T8809] kAFS: unparsable volume name [ 209.047184][ T5101] Bluetooth: hci2: command 0x0405 tx timeout [ 209.095029][ T8799] loop7: detected capacity change from 0 to 32768 [ 209.164974][ T8799] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 209.399106][ T5809] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 209.731594][ T5875] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 209.951751][ T8820] loop6: detected capacity change from 0 to 32768 [ 209.958768][ T5875] usb 8-1: Using ep0 maxpacket: 16 [ 209.992792][ T5875] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 210.049968][ T5875] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.083105][ T5875] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.091685][ T8820] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.148620][ T5875] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 210.210740][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.233465][ T8849] netlink: 'syz.0.911': attribute type 29 has an invalid length. [ 210.252485][ T5875] usb 8-1: config 0 descriptor?? [ 210.276808][ T8829] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 210.303204][ T8820] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 210.349483][ T8826] loop3: detected capacity change from 0 to 40427 [ 210.364654][ T8820] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30 [ 210.395149][ T8826] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 210.402276][ T8826] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 210.432573][ T8826] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 210.441798][ T8826] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 210.451284][ T8820] XFS (loop6): Ending clean mount [ 210.452574][ T8826] F2FS-fs (loop3): invalid crc value [ 210.481691][ T8826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.709766][ T8826] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.735948][ T7776] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.749796][ T8826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.774896][ T5875] samsung 0003:0419:0001.000A: unknown main item tag 0x0 [ 210.812121][ T5875] samsung 0003:0419:0001.000A: unexpected long global item [ 210.850439][ T5875] samsung 0003:0419:0001.000A: parse failed [ 210.864847][ T5875] samsung: probe of 0003:0419:0001.000A failed with error -22 [ 210.939875][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 210.991949][ T27] usb 8-1: USB disconnect, device number 2 [ 211.124609][ T8826] syz.3.907: attempt to access beyond end of device [ 211.124609][ T8826] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 211.270688][ T8852] loop0: detected capacity change from 0 to 32768 [ 211.331661][ T5789] syz-executor: attempt to access beyond end of device [ 211.331661][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.380602][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 211.391837][ T8852] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.531425][ T8852] XFS (loop0): Ending clean mount [ 211.734535][ T5791] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.096673][ T28] audit: type=1326 audit(1793188323.235:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38279f559 code=0x7ffc0000 [ 212.163121][ T28] audit: type=1326 audit(1793188323.235:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38279f559 code=0x7ffc0000 [ 212.254696][ T28] audit: type=1326 audit(1793188323.235:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38279f559 code=0x7ffc0000 [ 212.343767][ T28] audit: type=1326 audit(1793188323.235:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa38279f559 code=0x7ffc0000 [ 212.408584][ T28] audit: type=1326 audit(1793188323.235:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fa38279f559 code=0x7ffc0000 [ 212.469973][ T28] audit: type=1326 audit(1793188323.300:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa38275fd8e code=0x7ffc0000 [ 212.530927][ T28] audit: type=1326 audit(1793188323.338:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa38275fd8e code=0x7ffc0000 [ 212.595481][ T28] audit: type=1326 audit(1793188323.347:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa38275fd8e code=0x7ffc0000 [ 212.682386][ T28] audit: type=1326 audit(1793188323.347:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa38275fd8e code=0x7ffc0000 [ 212.740834][ T28] audit: type=1326 audit(1793188323.347:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.6.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa38275fd8e code=0x7ffc0000 [ 212.831946][ T8906] loop3: detected capacity change from 0 to 2048 [ 212.912040][ T8906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.183131][ T8906] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 213.204754][ T8906] EXT4-fs (loop3): Remounting filesystem read-only [ 213.259371][ T8906] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 213.286415][ T8906] overlayfs: failed to verify upper root origin [ 213.624114][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.643423][ T8927] netlink: 340 bytes leftover after parsing attributes in process `syz.7.928'. [ 213.839969][ T8935] program syz.0.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.083352][ T8939] loop7: detected capacity change from 0 to 4096 [ 214.113782][ T8939] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.167276][ T8939] EXT4-fs (loop7): Test dummy encryption mode enabled [ 214.212454][ T8939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.218219][ T8949] loop3: detected capacity change from 0 to 4096 [ 214.235921][ T8949] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 214.407503][ T8949] ntfs3: loop3: ino=1a, mi_enum_attr [ 214.437007][ T8949] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 214.573422][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.578330][ T8949] ntfs3: loop3: ino=5, "/" directory corrupted [ 214.849782][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 215.158270][ T8980] loop7: detected capacity change from 0 to 256 [ 215.265420][ T8982] loop0: detected capacity change from 0 to 1024 [ 215.345147][ T8980] FAT-fs (loop7): Directory bread(block 64) failed [ 215.371040][ T8980] FAT-fs (loop7): Directory bread(block 65) failed [ 215.385041][ T8982] hfsplus: extend alloc file! (16384,256,150995124) [ 215.405208][ T8980] FAT-fs (loop7): Directory bread(block 66) failed [ 215.411901][ T8982] hfsplus: failed to extend attributes file [ 215.447209][ T8982] hfsplus: extend alloc file! (16384,256,150995124) [ 215.454637][ T8980] FAT-fs (loop7): Directory bread(block 67) failed [ 215.480226][ T8982] hfsplus: failed to extend attributes file [ 215.486188][ T8980] FAT-fs (loop7): Directory bread(block 68) failed [ 215.486257][ T8980] FAT-fs (loop7): Directory bread(block 69) failed [ 215.486360][ T8980] FAT-fs (loop7): Directory bread(block 70) failed [ 215.486390][ T8980] FAT-fs (loop7): Directory bread(block 71) failed [ 215.486479][ T8980] FAT-fs (loop7): Directory bread(block 72) failed [ 215.589390][ T8980] FAT-fs (loop7): Directory bread(block 73) failed [ 215.649748][ T8995] loop3: detected capacity change from 0 to 16 [ 215.702466][ T8995] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.851241][ T9001] loop6: detected capacity change from 0 to 64 [ 216.318859][ T5857] logitech-hidpp-device 0003:046D:C082.000B: unknown main item tag 0x1 [ 216.357612][ T5857] logitech-hidpp-device 0003:046D:C082.000B: Device not connected [ 216.608309][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 216.616375][ T9024] loop0: detected capacity change from 0 to 64 [ 216.831651][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.852726][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.890438][ T8] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.930521][ T8] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.953601][ T8] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 216.971870][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.178771][ T9043] loop3: detected capacity change from 0 to 4096 [ 217.307694][ T9043] ntfs3: loop3: ino=b, Correct links count -> 1. [ 217.329474][ T9043] ntfs3: loop3: ino=18, mi_enum_attr [ 217.352750][ T9043] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 217.424621][ T9043] ntfs3: loop3: failed to convert "0080" to koi8-r [ 217.450819][ T9043] ntfs3: loop3: failed to convert name for inode 1e. [ 217.464549][ T9043] ntfs3: loop3: ino=1f, mi_enum_attr [ 217.471909][ T9043] ntfs3: loop3: ino=1f, mi_enum_attr [ 217.527688][ T9055] loop7: detected capacity change from 0 to 164 [ 217.671997][ T8] gud 7-1:1.0: Failed to get properties (error=-71) [ 217.705147][ T8] gud: probe of 7-1:1.0 failed with error -71 [ 217.760012][ T8] usb 7-1: USB disconnect, device number 4 [ 217.966589][ T9063] netlink: 64 bytes leftover after parsing attributes in process `syz.7.974'. [ 218.002021][ T9063] netlink: 64 bytes leftover after parsing attributes in process `syz.7.974'. [ 218.041080][ T9063] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 218.433774][ T9077] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.774296][ T8] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 218.989229][ T8] usb 8-1: not running at top speed; connect to a high speed hub [ 219.001400][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.020243][ T9107] sch_fq: defrate 2 ignored. [ 219.030938][ T8] usb 8-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 219.042519][ T8] usb 8-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 219.066317][ T8] usb 8-1: Product: syz [ 219.071848][ T8] usb 8-1: Manufacturer: syz [ 219.155457][ T8] usb 8-1: Found UVC 1.00 device syz (225a:e1d4) [ 219.171631][ T8] usb 8-1: No streaming interface found for terminal 2. [ 219.431295][ T8] usb 8-1: USB disconnect, device number 3 [ 219.438344][ T9119] Bluetooth: hci0: unsupported parameter 5135 [ 219.447550][ T9119] Bluetooth: hci0: unsupported parameter 8192 [ 219.468768][ T9119] Bluetooth: hci0: unsupported parameter 5135 [ 219.475093][ T9119] Bluetooth: hci0: unsupported parameter 8192 [ 219.679235][ T9128] loop0: detected capacity change from 0 to 256 [ 219.693452][ T9126] loop3: detected capacity change from 0 to 4096 [ 219.744609][ T9128] exfat: Deprecated parameter 'namecase' [ 219.763967][ T9130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.773215][ T9128] exfat: Deprecated parameter 'namecase' [ 219.893025][ T9126] NILFS (loop3): error -22 preparing GC: cannot mark copying blocks dirty [ 219.924307][ T9128] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 220.304279][ T9140] loop3: detected capacity change from 0 to 1024 [ 220.311953][ T9140] EXT4-fs: inline encryption not supported [ 220.391107][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 220.414424][ T9140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.619155][ T9157] loop7: detected capacity change from 0 to 2048 [ 220.657490][ T9157] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.723626][ T9161] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.746376][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.860057][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 220.860077][ T28] audit: type=1800 audit(1793188331.440:139): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1003" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 220.886414][ T9164] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1005'. [ 220.916910][ T9164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.954467][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 221.170579][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 221.179940][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1006'. [ 221.189713][ T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 221.215324][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 221.235606][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.255884][ T8] usb 1-1: Product: syz [ 221.261410][ T8] usb 1-1: Manufacturer: syz [ 221.275808][ T8] usb 1-1: SerialNumber: syz [ 221.361627][ T9180] loop7: detected capacity change from 0 to 512 [ 221.398074][ T9180] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.414353][ T5876] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 221.441161][ T9180] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.1009: inode has both inline data and extents flags [ 221.460107][ T9183] loop3: detected capacity change from 0 to 2048 [ 221.510433][ T9180] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1009: couldn't read orphan inode 15 (err -117) [ 221.541202][ T9183] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 221.545702][ T9180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.628107][ T9187] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.642647][ T8] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 221.659651][ T5876] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 221.673155][ T8] usb 1-1: unit 4 not found! [ 221.680566][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.691179][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.760466][ T8] usb 1-1: USB disconnect, device number 6 [ 221.920007][ C0] dln2 7-1:1.0: short response: 0 [ 221.925066][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.958391][ T5876] dln2 7-1:1.0: USB write failed: -110 [ 221.967508][ T5876] dln2 7-1:1.0: failed to initialize hardware [ 221.996647][ T5876] dln2: probe of 7-1:1.0 failed with error -110 [ 222.182241][ T8] usb 7-1: USB disconnect, device number 5 [ 222.317818][ T28] audit: type=1326 audit(1793188332.796:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.407718][ T28] audit: type=1326 audit(1793188332.796:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.504159][ T28] audit: type=1326 audit(1793188332.796:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.566671][ T28] audit: type=1326 audit(1793188332.796:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.626494][ T28] audit: type=1326 audit(1793188332.796:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.684051][ T28] audit: type=1326 audit(1793188332.796:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.750275][ T28] audit: type=1326 audit(1793188332.796:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.812280][ T28] audit: type=1326 audit(1793188332.796:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 222.888897][ T28] audit: type=1326 audit(1793188332.796:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.7.1015" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467af9f559 code=0x7ffc0000 [ 223.281002][ T9206] loop3: detected capacity change from 0 to 32768 [ 223.954285][ T9253] Bluetooth: MGMT ver 1.22 [ 224.337333][ T9234] loop0: detected capacity change from 0 to 32768 [ 224.403950][ T9262] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 224.421376][ T9234] jfs_lookup: iget failed on inum 4 [ 224.429401][ T9234] jfs_lookup: iget failed on inum 4 [ 224.449525][ T9262] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 224.483199][ T9262] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 224.805440][ T9281] loop6: detected capacity change from 0 to 64 [ 225.582377][ T9309] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1049'. [ 225.861280][ T5875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.074844][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 226.111672][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 226.130947][ T5875] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 226.151037][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.181557][ T5875] usb 4-1: Product: syz [ 226.185800][ T5875] usb 4-1: Manufacturer: syz [ 226.190447][ T5875] usb 4-1: SerialNumber: syz [ 226.221990][ T5875] usb 4-1: config 0 descriptor?? [ 226.257526][ T9310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.281985][ T5875] hub 4-1:0.0: bad descriptor, ignoring hub [ 226.309863][ T5875] hub: probe of 4-1:0.0 failed with error -5 [ 226.329054][ T9332] use of bytesused == 0 is deprecated and will be removed in the future, [ 226.338852][ T5875] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 226.341944][ T9332] use the actual size instead. [ 226.844786][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 1 < 9 [ 226.852565][ T5101] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 226.890374][ T1199] usb 4-1: USB disconnect, device number 5 [ 226.890387][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 227.310783][ T9327] loop0: detected capacity change from 0 to 32768 [ 227.535793][ T9334] loop6: detected capacity change from 0 to 32768 [ 227.966446][ T9337] loop7: detected capacity change from 0 to 32768 [ 227.973464][ T5857] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 228.217344][ T5857] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 228.242944][ T5857] usb 4-1: config 1 has no interface number 0 [ 228.270982][ T5857] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 228.317458][ T5857] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.381562][ T5857] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 228.392876][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.401650][ T5857] usb 4-1: Product: syz [ 228.406847][ T5857] usb 4-1: Manufacturer: syz [ 228.412110][ T5857] usb 4-1: SerialNumber: syz [ 228.441600][ T9351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.493400][ T5857] usb 4-1: Expected 3 endpoints, found: 2 [ 228.668277][ T9364] loop6: detected capacity change from 0 to 4096 [ 228.733170][ T9367] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.975074][ T9357] loop0: detected capacity change from 0 to 32768 [ 228.992876][ T9357] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.1060 (9357) [ 229.054126][ T9357] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 229.095804][ T9357] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 229.153242][ T9357] BTRFS info (device loop0): using free space tree [ 229.355139][ T9357] BTRFS info (device loop0): enabling ssd optimizations [ 229.381238][ T9357] BTRFS info (device loop0): auto enabling async discard [ 229.560051][ T5791] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 230.075689][ T9406] loop0: detected capacity change from 0 to 4096 [ 230.115166][ T9406] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 230.284592][ T9406] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 230.387107][ T9406] ntfs3: loop0: ino=1e, mi_enum_attr [ 230.441983][ T9413] loop7: detected capacity change from 0 to 2048 [ 230.546193][ T9413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.700120][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 230.700138][ T28] audit: type=1800 audit(1793188340.636:153): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1070" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 230.941943][ T971] usb 4-1: USB disconnect, device number 6 [ 231.054479][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.452224][ T9441] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 231.832767][ T9423] loop0: detected capacity change from 0 to 32768 [ 232.431094][ T9435] loop3: detected capacity change from 0 to 32768 [ 233.096402][ T9449] loop6: detected capacity change from 0 to 40427 [ 233.156563][ T9449] F2FS-fs (loop6): invalid crc value [ 233.174635][ T9449] F2FS-fs (loop6): Found nat_bits in checkpoint [ 233.328230][ T9478] program syz.0.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.338934][ T9449] F2FS-fs (loop6): Start checkpoint disabled! [ 233.391883][ T9449] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 233.762036][ T4556] kworker/u4:13: attempt to access beyond end of device [ 233.762036][ T4556] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 233.793176][ T4556] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 233.811291][ T4556] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 233.886000][ T9497] loop0: detected capacity change from 0 to 512 [ 233.916005][ T9497] EXT4-fs: Ignoring removed nobh option [ 233.968847][ T9497] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1094: invalid indirect mapped block 256 (level 2) [ 233.993271][ T9497] EXT4-fs (loop0): 2 truncates cleaned up [ 234.050641][ T9497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.256780][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.583379][ T1199] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 234.815634][ T1199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 234.838758][ T1199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.860307][ T1199] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.887206][ T1199] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 234.903292][ T1199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.911981][ T1199] usb 7-1: Product: syz [ 234.921870][ T1199] usb 7-1: Manufacturer: syz [ 234.927324][ T1199] usb 7-1: SerialNumber: syz [ 235.080300][ T9541] loop3: detected capacity change from 0 to 256 [ 235.204281][ T1199] usb 7-1: selecting invalid altsetting 1 [ 235.227768][ T1199] usb 7-1: unit 3 not found! [ 235.234301][ T1199] usb 7-1: cannot request logical cluster ID: 0 (err: -71) [ 235.254621][ T1199] usb 7-1: invalid MIXER UNIT descriptor 6 [ 235.319193][ T1199] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 235.337607][ T1199] usb 7-1: USB disconnect, device number 6 [ 235.378385][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.647772][ T9556] loop0: detected capacity change from 0 to 1024 [ 235.698747][ T9556] hfsplus: catalog searching failed [ 235.739579][ T12] hfsplus: b-tree write err: -5, ino 3 [ 235.871330][ T28] audit: type=1400 audit(1793188345.482:154): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=9559 comm="syz.0.1118" name="foo" offset=35 [ 235.950695][ T9564] sch_tbf: peakrate 221 is lower than or equals to rate 4003 ! [ 236.454048][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 236.528736][ T9590] kAFS: Invalid Command on /proc/fs/afs/cells file [ 236.648526][ T5857] usb 4-1: config index 0 descriptor too short (expected 45, got 43) [ 236.657148][ T5857] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 236.679765][ T9596] loop7: detected capacity change from 0 to 128 [ 236.682301][ T5857] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.726977][ T5857] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 236.752020][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.776557][ T5857] usb 4-1: Product: syz [ 236.780790][ T5857] usb 4-1: Manufacturer: syz [ 236.801316][ T5857] usb 4-1: SerialNumber: syz [ 236.802564][ T9598] bonding: unable to delete non-existent b [ 236.821520][ T5857] rtl8150 4-1:1.0: couldn't find required endpoints [ 236.831918][ T5857] rtl8150: probe of 4-1:1.0 failed with error -5 [ 237.064446][ T5857] usb 4-1: USB disconnect, device number 7 [ 237.205856][ T9610] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 237.447549][ T9621] loop6: detected capacity change from 0 to 1024 [ 237.873595][ T5795] block nbd0: Receive control failed (result -32) [ 237.873595][ T5101] block nbd0: Receive control failed (result -32) [ 238.139221][ T9644] loop6: detected capacity change from 0 to 512 [ 238.169598][ T9644] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 238.187569][ T9644] EXT4-fs (loop6): 1 truncate cleaned up [ 238.208984][ T9644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.254115][ T9644] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #2: block 13: comm syz.6.1157: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 238.273949][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.311241][ T9644] EXT4-fs (loop6): Remounting filesystem read-only [ 238.353935][ T9651] loop7: detected capacity change from 0 to 128 [ 238.367491][ T9651] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 238.412449][ T7776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.701403][ T9659] loop7: detected capacity change from 0 to 1024 [ 238.721146][ T9659] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 239.138544][ T9675] pimreg: entered allmulticast mode [ 239.155558][ T9675] pimreg: left allmulticast mode [ 239.373077][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.435504][ T9684] loop0: detected capacity change from 0 to 512 [ 239.517266][ T9684] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 239.539960][ T9684] System zones: 0-2, 18-18, 34-35 [ 239.574062][ T9684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.588669][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 239.612048][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.624045][ T9684] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.635297][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.665705][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 239.679439][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 239.699308][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.722420][ T9] usb 4-1: config 0 descriptor?? [ 239.793720][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.062598][ T9668] loop6: detected capacity change from 0 to 32768 [ 240.133562][ T9668] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.221086][ T9] hid (null): report_id 0 is invalid [ 240.238908][ T9] asus 0003:0B05:18C6.000C: unknown main item tag 0x3 [ 240.246146][ T9] asus 0003:0B05:18C6.000C: unknown main item tag 0x6 [ 240.261111][ T9] asus 0003:0B05:18C6.000C: unknown main item tag 0x7 [ 240.266590][ T9668] XFS (loop6): Ending clean mount [ 240.287219][ T9] asus 0003:0B05:18C6.000C: report_id 0 is invalid [ 240.307404][ T9] asus 0003:0B05:18C6.000C: item 0 0 1 8 parsing failed [ 240.345938][ T9] asus 0003:0B05:18C6.000C: Asus hid parse failed: -22 [ 240.368665][ T9] asus: probe of 0003:0B05:18C6.000C failed with error -22 [ 240.466873][ T9] usb 4-1: USB disconnect, device number 8 [ 240.601000][ T7776] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.650885][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1174'. [ 240.683589][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1174'. [ 241.173562][ T28] audit: type=1400 audit(1793188606.439:155): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9732 comm="syz.6.1175" name="unknown" offset=82 [ 241.576235][ T9752] loop6: detected capacity change from 0 to 128 [ 241.656371][ T9752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.682758][ T9752] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.878402][ T7776] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.913939][ T28] audit: type=1400 audit(1793188607.141:156): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9761 comm="syz.3.1188" [ 242.096421][ T9765] loop0: detected capacity change from 0 to 1024 [ 242.190575][ T9765] hfsplus: invalid length 1033 has been corrected to 255 [ 242.229248][ T9765] hfsplus: invalid length 1033 has been corrected to 255 [ 242.265689][ T9765] hfsplus: invalid length 1033 has been corrected to 255 [ 242.321662][ T9765] hfsplus: b-tree write err: -5, ino 26 [ 242.341481][ T9776] vivid-002: disconnect [ 242.351481][ T9774] vivid-002: reconnect [ 242.419436][ T12] hfsplus: b-tree write err: -5, ino 25 [ 242.429319][ T12] hfsplus: b-tree write err: -5, ino 4 [ 242.452073][ T12] hfsplus: b-tree write err: -5, ino 2 [ 242.543198][ T9782] loop6: detected capacity change from 0 to 512 [ 242.585165][ T9782] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 242.618771][ T9782] EXT4-fs (loop6): 1 truncate cleaned up [ 242.634822][ T9782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.688911][ T9781] syzkaller1: tun_chr_ioctl cmd 3223345255 [ 242.704098][ T9782] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5994: inode #12: comm syz.6.1196: bad extra_isize 62 (inode size 256) [ 242.726561][ T9782] EXT4-fs (loop6): Remounting filesystem read-only [ 242.874204][ T7776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.163420][ T9800] loop0: detected capacity change from 0 to 128 [ 243.224993][ T9800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.255424][ T9800] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.406347][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.455005][ T9813] loop6: detected capacity change from 0 to 512 [ 244.395017][ T9845] macvtap1: entered promiscuous mode [ 244.405802][ T9845] vlan0: entered promiscuous mode [ 244.433684][ T9845] vlan0: left promiscuous mode [ 245.299277][ T1199] IPVS: starting estimator thread 0... [ 245.412623][ T9881] IPVS: using max 17 ests per chain, 40800 per kthread [ 246.494755][ T9921] loop3: detected capacity change from 0 to 512 [ 247.174082][ T9907] loop6: detected capacity change from 0 to 40427 [ 247.238765][ T9907] F2FS-fs (loop6): invalid crc value [ 247.260664][ T9907] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.439408][ T9907] F2FS-fs (loop6): Start checkpoint disabled! [ 247.501869][ T9907] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 247.624949][ T9953] loop7: detected capacity change from 0 to 512 [ 247.717123][ T9953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.851059][ T9953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.925834][ T9953] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.971959][ T4556] kworker/u4:13: attempt to access beyond end of device [ 247.971959][ T4556] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 247.989042][ T9953] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #12: block 32: comm syz.7.1252: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 248.034285][ T4556] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 248.036481][ T9953] EXT4-fs (loop7): Remounting filesystem read-only [ 248.047009][ T4556] kworker/u4:13: attempt to access beyond end of device [ 248.047009][ T4556] loop6: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 248.076855][ T9953] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #12: comm syz.7.1252: directory missing '.' [ 248.085134][ T4556] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 248.242604][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.343238][ T9974] loop3: detected capacity change from 0 to 4096 [ 248.475976][ T9980] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.806167][ T9987] loop7: detected capacity change from 0 to 128 [ 249.247146][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1266'. [ 249.428328][T10008] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 249.883496][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 249.950599][T10031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.117830][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 250.167046][T10039] bond1: (slave sit0): Device is not bonding slave [ 250.174541][T10039] bond1: option active_slave: invalid value (sit0) [ 250.185879][T10039] bond1 (unregistering): Released all slaves [ 250.361739][T10048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.378943][T10128] loop0: detected capacity change from 0 to 2048 [ 252.462749][T10128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.549440][T10134] loop7: detected capacity change from 0 to 32768 [ 253.646136][T10134] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 253.683603][T10178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1322'. [ 253.740594][T10134] XFS (loop7): Ending clean mount [ 253.793099][T10134] XFS (loop7): Quotacheck needed: Please wait. [ 253.936101][T10134] XFS (loop7): Quotacheck: Done. [ 254.205378][ T8491] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.548424][T10205] block device autoloading is deprecated and will be removed. [ 254.616623][T10205] syz.0.1330: attempt to access beyond end of device [ 254.616623][T10205] md0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 254.669874][T10205] EXT4-fs (md0): unable to read superblock [ 255.056447][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1340'. [ 255.162761][T10232] loop7: detected capacity change from 0 to 1024 [ 255.833299][T10234] loop3: detected capacity change from 0 to 32768 [ 255.878739][T10234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1343 (10234) [ 255.911553][T10234] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.929482][T10243] Zero length message leads to an empty skb [ 255.939023][T10234] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 255.953657][T10234] BTRFS info (device loop3): setting nodatasum [ 255.966261][T10234] BTRFS info (device loop3): force zlib compression, level 3 [ 255.985722][T10234] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.003371][T10234] BTRFS info (device loop3): use lzo compression, level 0 [ 256.017707][T10234] BTRFS info (device loop3): turning on flush-on-commit [ 256.031831][T10234] BTRFS info (device loop3): enabling auto defrag [ 256.046561][T10234] BTRFS info (device loop3): max_inline at 4096 [ 256.061464][T10234] BTRFS info (device loop3): using free space tree [ 256.231346][T10234] BTRFS info (device loop3): enabling ssd optimizations [ 256.534488][ T28] audit: type=1800 audit(1793188620.807:157): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1343" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 256.662743][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.925636][T10281] loop6: detected capacity change from 0 to 32768 [ 257.953778][T10281] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop6 scanned by syz.6.1356 (10281) [ 257.987939][T10281] BTRFS info (device loop6): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 258.009353][T10281] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 258.027517][T10281] BTRFS info (device loop6): using free space tree [ 258.122805][T10291] loop3: detected capacity change from 0 to 32768 [ 258.219033][T10322] loop0: detected capacity change from 0 to 64 [ 258.234714][T10291] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.325636][T10281] BTRFS info (device loop6): enabling ssd optimizations [ 258.337921][T10281] BTRFS info (device loop6): auto enabling async discard [ 258.437953][T10291] XFS (loop3): Ending clean mount [ 258.464374][T10291] XFS (loop3): Quotacheck needed: Please wait. [ 258.590109][T10291] XFS (loop3): Quotacheck: Done. [ 258.592676][T10331] Bluetooth: hci0: too big key_count value 62977 [ 258.626497][ T27] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 258.644583][ T7776] BTRFS info (device loop6): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 258.774127][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.829288][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 258.843236][ T27] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.861657][ T27] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.872299][ T27] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.887029][ T27] usb 8-1: config 0 interface 0 has no altsetting 0 [ 258.893976][ T27] usb 8-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 258.903436][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.923872][ T27] usb 8-1: config 0 descriptor?? [ 259.357960][T10343] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1378'. [ 259.451629][ T27] elan 0003:04F3:074D.000D: failed to start in urb: -90 [ 259.472808][ T27] input: HID 04f3:074d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:04F3:074D.000D/input/input16 [ 259.525603][ T27] elan 0003:04F3:074D.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.7-1/input0 [ 259.703743][ T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.747025][ T27] usb 8-1: USB disconnect, device number 4 [ 259.911917][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.923015][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.933086][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.946142][ T971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.956717][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.967177][ T971] usb 4-1: config 0 descriptor?? [ 260.409922][T10356] loop7: detected capacity change from 0 to 64 [ 260.430979][ T971] plantronics 0003:047F:FFFF.000E: report_id 35069 is invalid [ 260.471629][ T971] plantronics 0003:047F:FFFF.000E: item 0 2 1 8 parsing failed [ 260.491508][ T971] plantronics 0003:047F:FFFF.000E: parse failed [ 260.520032][ T971] plantronics: probe of 0003:047F:FFFF.000E failed with error -22 [ 260.732077][ T5853] usb 4-1: USB disconnect, device number 9 [ 260.862249][T10364] block device autoloading is deprecated and will be removed. [ 260.875326][T10364] syz.7.1383: attempt to access beyond end of device [ 260.875326][T10364] md7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 260.900886][T10364] EXT4-fs (md7): unable to read superblock [ 261.022564][T10357] loop0: detected capacity change from 0 to 32768 [ 261.104630][T10357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 261.218801][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.227063][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.326040][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 261.368104][T10375] device-mapper: table: 248:7: thin-pool: Error getting data device (-ENOENT) [ 261.419546][T10375] device-mapper: ioctl: error adding target to table [ 261.555586][ T5853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 261.770518][T10388] loop6: detected capacity change from 0 to 1024 [ 261.770828][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 261.815819][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.836694][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 261.861737][T10388] hfsplus: bad catalog entry type [ 261.867756][ T5853] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 261.883967][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.906220][ T5853] usb 8-1: Product: syz [ 261.925758][ T5853] usb 8-1: Manufacturer: syz [ 261.940225][ T5853] usb 8-1: SerialNumber: syz [ 261.962338][ T5853] usb 8-1: config 0 descriptor?? [ 262.200711][ T5853] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 262.289063][T10382] loop3: detected capacity change from 0 to 32768 [ 262.318035][T10382] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 262.348642][T10382] XFS (loop3): Quotacheck needed: Please wait. [ 262.404689][T10382] XFS (loop3): Quotacheck: Done. [ 262.482637][ T27] usb 8-1: USB disconnect, device number 5 [ 262.529371][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.429778][T10406] loop0: detected capacity change from 0 to 32768 [ 263.479706][T10406] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 263.570212][T10416] loop3: detected capacity change from 0 to 32768 [ 263.612350][T10406] XFS (loop0): Ending clean mount [ 263.668547][T10416] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 263.682295][ T27] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 263.771175][ T5791] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 263.782864][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 263.928307][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 263.956071][ T27] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 263.992199][ T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 264.018975][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 264.059710][ T27] usb 8-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 264.091904][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.112408][ T27] usb 8-1: config 0 descriptor?? [ 264.325090][T10441] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 264.333071][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1418'. [ 264.355754][T10441] dummy0: entered promiscuous mode [ 264.368711][T10441] bridge0: port 3(dummy0) entered blocking state [ 264.375946][T10441] bridge0: port 3(dummy0) entered disabled state [ 264.383639][T10441] dummy0: entered allmulticast mode [ 264.392417][T10441] bridge0: port 3(dummy0) entered blocking state [ 264.398982][T10441] bridge0: port 3(dummy0) entered forwarding state [ 264.615702][ T27] wacom 0003:056A:032F.000F: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.7-1/input0 [ 264.875567][ T27] usb 8-1: USB disconnect, device number 6 [ 265.829084][T10472] loop3: detected capacity change from 0 to 4096 [ 265.888768][T10468] loop7: detected capacity change from 0 to 32768 [ 265.991389][T10468] JBD2: Ignoring recovery information on journal [ 266.149340][T10468] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 266.326861][T10485] kAFS: unparsable volume name [ 266.537327][ T8491] ocfs2: Unmounting device (7,7) on (node local) [ 266.589753][ T5853] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 266.829808][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.842381][ T5853] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 266.852052][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 266.860547][ T5853] usb 7-1: Product: syz [ 266.864795][ T5853] usb 7-1: Manufacturer: syz [ 266.881559][ T5853] usb 7-1: selecting invalid altsetting 1 [ 266.887477][ T5853] dvb_ttusb_budget: ttusb_init_controller: error [ 266.894483][ T5853] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 266.943726][ T5853] DVB: Unable to find symbol cx22700_attach() [ 266.986146][ T5853] DVB: Unable to find symbol tda10046_attach() [ 266.992442][ T5853] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 267.123803][ T5795] Bluetooth: hci2: command 0x0405 tx timeout [ 267.132368][T10484] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 267.142213][ T5876] usb 7-1: USB disconnect, device number 7 [ 267.954365][T10498] loop0: detected capacity change from 0 to 32768 [ 267.993859][T10498] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.073448][T10498] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 268.093665][T10503] loop7: detected capacity change from 0 to 32768 [ 268.128266][T10498] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 268.171085][T10503] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.211817][T10498] XFS (loop0): Ending clean mount [ 268.292936][T10503] XFS (loop7): Ending clean mount [ 268.431342][ T8491] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 268.460092][ T5791] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 269.385162][T10522] loop6: detected capacity change from 0 to 32768 [ 269.415523][T10522] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1445 (10522) [ 269.480229][T10522] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 269.505728][T10522] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 269.524328][T10522] BTRFS info (device loop6): using free space tree [ 269.661221][T10522] BTRFS info (device loop6): enabling ssd optimizations [ 269.678923][ T5795] Bluetooth: hci2: command 0x0405 tx timeout [ 269.693253][T10522] BTRFS info (device loop6): auto enabling async discard [ 269.914138][T10533] loop0: detected capacity change from 0 to 40427 [ 269.928730][T10533] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 269.950367][T10533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 269.975625][T10533] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 269.998177][T10533] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 270.028998][T10533] F2FS-fs (loop0): invalid crc value [ 270.077380][T10533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 270.143983][ T7776] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 270.307683][T10533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 270.343040][T10533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 270.489923][T10533] syz.0.1437: attempt to access beyond end of device [ 270.489923][T10533] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 270.642371][ T5791] syz-executor: attempt to access beyond end of device [ 270.642371][ T5791] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.676406][ T5791] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 271.548757][ T28] audit: type=1326 audit(1793188634.849:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 271.595378][T10587] netlink: 'syz.7.1464': attribute type 10 has an invalid length. [ 271.632930][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1464'. [ 271.638546][ T28] audit: type=1326 audit(1793188634.886:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 271.655968][T10587] dummy0: entered promiscuous mode [ 271.676836][T10586] loop3: detected capacity change from 0 to 4096 [ 271.681764][T10568] loop6: detected capacity change from 0 to 32768 [ 271.695886][T10586] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.701663][T10587] bridge0: port 3(dummy0) entered blocking state [ 271.709207][ T28] audit: type=1326 audit(1793188634.886:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 271.734395][T10586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 271.742593][T10587] bridge0: port 3(dummy0) entered disabled state [ 271.764606][T10587] dummy0: entered allmulticast mode [ 271.776554][T10587] bridge0: port 3(dummy0) entered blocking state [ 271.783143][T10587] bridge0: port 3(dummy0) entered forwarding state [ 271.812186][ T28] audit: type=1326 audit(1793188634.886:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f814db9f2c2 code=0x7ffc0000 [ 271.819901][T10586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.850022][ T28] audit: type=1326 audit(1793188634.905:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f814db5fd8e code=0x7ffc0000 [ 271.874977][T10568] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.927946][ T28] audit: type=1326 audit(1793188634.970:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f814db9f387 code=0x7ffc0000 [ 271.953039][ T28] audit: type=1326 audit(1793188634.970:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f814db5fd8e code=0x7ffc0000 [ 272.007192][T10596] loop0: detected capacity change from 0 to 4096 [ 272.011605][ T28] audit: type=1326 audit(1793188634.970:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f814db9f1eb code=0x7ffc0000 [ 272.038798][ T28] audit: type=1326 audit(1793188634.989:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f814db5fd8e code=0x7ffc0000 [ 272.065302][ T28] audit: type=1326 audit(1793188634.989:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.3.1455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f814db5fd8e code=0x7ffc0000 [ 272.103094][T10596] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 272.152541][T10568] XFS (loop6): Ending clean mount [ 272.232722][T10596] ntfs3: loop0: ino=1a, mi_enum_attr [ 272.261261][T10596] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 272.315818][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.396143][T10596] ntfs3: loop0: ino=5, "/" directory corrupted [ 272.414273][ T7776] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 273.061102][T10612] loop3: detected capacity change from 0 to 256 [ 273.206302][T10612] FAT-fs (loop3): Directory bread(block 64) failed [ 273.220528][T10612] FAT-fs (loop3): Directory bread(block 65) failed [ 273.233870][T10612] FAT-fs (loop3): Directory bread(block 66) failed [ 273.250368][T10612] FAT-fs (loop3): Directory bread(block 67) failed [ 273.268034][T10612] FAT-fs (loop3): Directory bread(block 68) failed [ 273.281417][T10612] FAT-fs (loop3): Directory bread(block 69) failed [ 273.303038][T10612] FAT-fs (loop3): Directory bread(block 70) failed [ 273.309703][T10612] FAT-fs (loop3): Directory bread(block 71) failed [ 273.334950][T10612] FAT-fs (loop3): Directory bread(block 72) failed [ 273.352470][T10612] FAT-fs (loop3): Directory bread(block 73) failed [ 273.630240][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 273.752365][T10628] loop7: detected capacity change from 0 to 1024 [ 273.779654][T10628] hfsplus: extend alloc file! (16384,256,150995124) [ 273.822145][T10628] hfsplus: failed to extend attributes file [ 273.843846][T10628] hfsplus: extend alloc file! (16384,256,150995124) [ 273.863912][T10628] hfsplus: failed to extend attributes file [ 274.068386][T10635] loop0: detected capacity change from 0 to 16 [ 274.103874][T10635] erofs: (device loop0): mounted with root inode @ nid 36. [ 274.419763][T10622] loop3: detected capacity change from 0 to 32768 [ 274.453212][T10622] JBD2: Ignoring recovery information on journal [ 274.501817][T10622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 274.568501][T10648] loop6: detected capacity change from 0 to 64 [ 274.983161][ T5876] logitech-hidpp-device 0003:046D:C082.0010: unknown main item tag 0x1 [ 275.033195][ T5876] logitech-hidpp-device 0003:046D:C082.0010: Device not connected [ 275.065005][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 275.675389][T10675] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 276.046467][T10687] loop0: detected capacity change from 0 to 4096 [ 276.432637][T10698] loop7: detected capacity change from 0 to 2048 [ 276.514380][T10698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.641674][T10698] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 276.725416][T10698] EXT4-fs (loop7): Remounting filesystem read-only [ 276.732174][T10698] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 276.778791][T10698] overlayfs: failed to verify upper root origin [ 276.825015][T10689] loop3: detected capacity change from 0 to 32768 [ 276.866077][T10689] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 276.995319][T10689] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 277.051866][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.083067][T10689] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 277.134693][T10689] XFS (loop3): Ending clean mount [ 277.326419][T10706] loop6: detected capacity change from 0 to 32768 [ 277.436703][T10706] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 277.467969][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.599481][T10706] XFS (loop6): Ending clean mount [ 277.996228][ T7776] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 278.465403][ T971] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.594542][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1509'. [ 278.610265][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1509'. [ 278.636111][T10739] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 278.640587][T10743] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1513'. [ 278.663766][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 278.696850][ T971] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 278.722000][ T971] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.747844][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 278.769872][ T971] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 278.796631][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.816913][ T971] usb 4-1: config 0 descriptor?? [ 278.829291][T10733] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.887394][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 278.887412][ T28] audit: type=1326 audit(1793188641.715:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb19f559 code=0x7ffc0000 [ 278.939364][ T28] audit: type=1326 audit(1793188641.753:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb19f559 code=0x7ffc0000 [ 278.985778][ T28] audit: type=1326 audit(1793188641.753:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8fdb19f559 code=0x7ffc0000 [ 279.020743][T10747] loop0: detected capacity change from 0 to 4096 [ 279.029275][T10747] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.037460][ T28] audit: type=1326 audit(1793188641.753:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8fdb19f2c2 code=0x7ffc0000 [ 279.062749][ T28] audit: type=1326 audit(1793188641.800:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8fdb15fd8e code=0x7ffc0000 [ 279.124658][T10747] EXT4-fs (loop0): Test dummy encryption mode enabled [ 279.134896][ T28] audit: type=1326 audit(1793188641.837:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8fdb19f387 code=0x7ffc0000 [ 279.163781][T10749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.193576][T10747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.195385][ T28] audit: type=1326 audit(1793188641.837:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fdb15fd8e code=0x7ffc0000 [ 279.285502][T10752] loop6: detected capacity change from 0 to 164 [ 279.296057][ T28] audit: type=1326 audit(1793188641.837:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fdb19f1eb code=0x7ffc0000 [ 279.322143][ T28] audit: type=1326 audit(1793188641.846:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fdb15fd8e code=0x7ffc0000 [ 279.350308][ T971] samsung 0003:0419:0001.0011: unknown main item tag 0x0 [ 279.359173][ T971] samsung 0003:0419:0001.0011: unexpected long global item [ 279.367780][ T971] samsung 0003:0419:0001.0011: parse failed [ 279.373865][ T971] samsung: probe of 0003:0419:0001.0011 failed with error -22 [ 279.416417][ T28] audit: type=1326 audit(1793188641.846:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.0.1515" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fdb15fd8e code=0x7ffc0000 [ 279.479901][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.674296][ T5876] usb 4-1: USB disconnect, device number 10 [ 279.906800][T10761] loop0: detected capacity change from 0 to 2048 [ 279.948566][T10761] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.990317][T10762] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.077601][T10761] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 280.117844][T10761] Remounting filesystem read-only [ 280.512807][T10773] loop0: detected capacity change from 0 to 4096 [ 280.592295][T10774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.651805][T10773] NILFS (loop0): error -22 preparing GC: cannot mark copying blocks dirty [ 280.699248][ T1199] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 280.903864][ T1199] usb 4-1: not running at top speed; connect to a high speed hub [ 280.914516][ T1199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.931747][ T1199] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 280.944399][ T1199] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 280.954416][ T1199] usb 4-1: Product: syz [ 280.964317][ T1199] usb 4-1: Manufacturer: syz [ 280.998571][ T1199] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 281.030568][ T1199] usb 4-1: No streaming interface found for terminal 2. [ 281.200507][T10780] loop0: detected capacity change from 0 to 256 [ 281.283265][ T1199] logitech-hidpp-device 0003:046D:C082.0012: unknown main item tag 0x1 [ 281.289667][T10784] loop6: detected capacity change from 0 to 1024 [ 281.314145][ T5876] usb 4-1: USB disconnect, device number 11 [ 281.334531][ T1199] logitech-hidpp-device 0003:046D:C082.0012: Device not connected [ 281.365945][T10784] hfsplus: extend alloc file! (16384,256,150995124) [ 281.380553][T10780] FAT-fs (loop0): Directory bread(block 64) failed [ 281.396009][T10780] FAT-fs (loop0): Directory bread(block 65) failed [ 281.401337][T10784] hfsplus: failed to extend attributes file [ 281.407687][T10780] FAT-fs (loop0): Directory bread(block 66) failed [ 281.440605][T10780] FAT-fs (loop0): Directory bread(block 67) failed [ 281.448628][T10784] hfsplus: extend alloc file! (16384,256,150995124) [ 281.455353][T10784] hfsplus: failed to extend attributes file [ 281.458089][T10780] FAT-fs (loop0): Directory bread(block 68) failed [ 281.480852][T10780] FAT-fs (loop0): Directory bread(block 69) failed [ 281.487573][T10780] FAT-fs (loop0): Directory bread(block 70) failed [ 281.501043][T10780] FAT-fs (loop0): Directory bread(block 71) failed [ 281.507874][T10780] FAT-fs (loop0): Directory bread(block 72) failed [ 281.519986][T10780] FAT-fs (loop0): Directory bread(block 73) failed [ 281.881148][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 281.989406][T10800] loop3: detected capacity change from 0 to 64 [ 282.163539][ T5876] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 282.360422][ T5876] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.382680][ T5876] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.408006][ T5876] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.428703][ T5876] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.452518][ T5876] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 282.462056][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.653251][T10826] loop0: detected capacity change from 0 to 64 [ 283.172250][ T5876] gud 8-1:1.0: Failed to get properties (error=-71) [ 283.180699][ T5876] gud: probe of 8-1:1.0 failed with error -71 [ 283.206234][ T5876] usb 8-1: USB disconnect, device number 7 [ 283.212678][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 283.415577][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 283.434731][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.450085][ T9] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 283.460272][ T9] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 283.478596][ T9] usb 7-1: Product: syz [ 283.486695][ T9] usb 7-1: Manufacturer: syz [ 283.512753][ T9] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 283.519311][ T9] usb 7-1: No streaming interface found for terminal 2. [ 283.570657][T10852] loop0: detected capacity change from 0 to 4096 [ 283.727835][T10852] ntfs3: loop0: ino=b, Correct links count -> 1. [ 283.745617][T10852] ntfs3: loop0: ino=18, mi_enum_attr [ 283.756352][T10852] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 283.763466][ T5853] usb 7-1: USB disconnect, device number 8 [ 283.837900][T10852] ntfs3: loop0: failed to convert "0080" to koi8-r [ 283.868527][T10852] ntfs3: loop0: failed to convert name for inode 1e. [ 283.883867][T10852] ntfs3: loop0: ino=1f, mi_enum_attr [ 283.890012][T10852] ntfs3: loop0: ino=1f, mi_enum_attr [ 283.894030][T10861] loop3: detected capacity change from 0 to 64 [ 284.129954][T10868] loop0: detected capacity change from 0 to 164 [ 284.221864][T10866] loop7: detected capacity change from 0 to 4096 [ 284.316131][T10872] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.451312][T10866] NILFS (loop7): error -22 preparing GC: cannot mark copying blocks dirty [ 284.678964][T10881] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1580'. [ 284.831244][T10887] loop6: detected capacity change from 0 to 2048 [ 284.851819][T10887] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 284.876538][T10890] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.918893][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 284.918911][ T28] audit: type=1800 audit(1793188647.357:262): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1591" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 284.964664][T10887] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 284.977073][T10887] Remounting filesystem read-only [ 285.124781][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 285.334547][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.353317][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.363805][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.374001][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.387339][ T27] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 285.396577][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.519959][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 285.733707][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 285.745920][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 285.768390][ T9] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 285.777788][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.785817][ T9] usb 7-1: Product: syz [ 285.808490][ T9] usb 7-1: Manufacturer: syz [ 285.813244][ T9] usb 7-1: SerialNumber: syz [ 285.820884][ T9] usb 7-1: config 0 descriptor?? [ 285.826934][T10900] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 285.842402][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 285.848507][ T9] hub: probe of 7-1:0.0 failed with error -5 [ 285.866050][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20 [ 286.083975][ T27] gud 4-1:1.0: Failed to get properties (error=-71) [ 286.110522][ T27] gud: probe of 4-1:1.0 failed with error -71 [ 286.143718][ T27] usb 4-1: USB disconnect, device number 12 [ 286.282214][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 1 < 9 [ 286.283903][ T9] usb 7-1: USB disconnect, device number 9 [ 286.289098][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 286.664395][ T971] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 286.859736][ T971] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 286.871271][ T971] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 286.886517][ T971] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 286.896379][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.905094][ T971] usb 8-1: Product: syz [ 286.922127][ T971] usb 8-1: Manufacturer: syz [ 286.926839][ T971] usb 8-1: SerialNumber: syz [ 286.961987][T10908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1593'. [ 286.977224][T10908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.160369][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1595'. [ 287.213784][ T971] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 287.232554][ T971] usb 8-1: unit 4 not found! [ 287.269534][T10918] loop6: detected capacity change from 0 to 512 [ 287.280937][ T971] usb 8-1: USB disconnect, device number 8 [ 287.306867][T10918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.362875][T10918] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.1597: inode has both inline data and extents flags [ 287.377690][T10918] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1597: couldn't read orphan inode 15 (err -117) [ 287.392784][T10918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.447051][ T7776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.499633][ T28] audit: type=1326 audit(1793188649.780:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.536934][ T28] audit: type=1326 audit(1793188649.780:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.543725][T10924] loop6: detected capacity change from 0 to 2048 [ 287.574246][ T28] audit: type=1326 audit(1793188649.808:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.619225][T10924] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.633766][ T28] audit: type=1326 audit(1793188649.808:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.671849][T10925] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.689993][ T28] audit: type=1326 audit(1793188649.808:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.715982][ T28] audit: type=1326 audit(1793188649.808:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.741594][ T28] audit: type=1326 audit(1793188649.808:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.766539][ T28] audit: type=1326 audit(1793188649.808:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 287.845917][ T28] audit: type=1326 audit(1793188649.808:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10921 comm="syz.3.1599" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814db9f559 code=0x7ffc0000 [ 288.022660][T10934] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 288.634163][T10963] program syz.7.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.992961][T10949] loop6: detected capacity change from 0 to 32768 [ 289.813115][T10971] loop7: detected capacity change from 0 to 40427 [ 289.842331][T10971] F2FS-fs (loop7): invalid crc value [ 289.862747][T10971] F2FS-fs (loop7): Found nat_bits in checkpoint [ 289.949356][T10971] F2FS-fs (loop7): Start checkpoint disabled! [ 289.981003][T10971] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 290.157667][T10988] loop3: detected capacity change from 0 to 512 [ 290.176063][T10988] EXT4-fs: Ignoring removed nobh option [ 290.205557][T10988] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1626: invalid indirect mapped block 256 (level 2) [ 290.246133][T10988] EXT4-fs (loop3): 2 truncates cleaned up [ 290.284539][T10988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.409555][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.465421][T10981] loop6: detected capacity change from 0 to 32768 [ 290.506498][ T145] kworker/u4:5: attempt to access beyond end of device [ 290.506498][ T145] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 290.508636][T10981] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.1625 (10981) [ 290.526602][ T145] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 290.551186][T10996] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 290.560601][ T145] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 290.580015][T10996] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 290.580038][T10981] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 290.580120][T10981] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 290.587156][T10996] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 290.618092][T10981] BTRFS info (device loop6): using free space tree [ 290.701875][T10981] BTRFS info (device loop6): enabling ssd optimizations [ 290.713540][T10981] BTRFS info (device loop6): auto enabling async discard [ 290.888643][ T7776] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 291.435950][T11019] loop7: detected capacity change from 0 to 64 [ 292.163399][T11016] loop6: detected capacity change from 0 to 32768 [ 292.180825][T11034] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1649'. [ 293.154901][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.368693][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.388715][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.399390][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.422461][ T5876] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 293.440895][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.459863][ T5876] usb 4-1: Product: syz [ 293.470684][ T5876] usb 4-1: Manufacturer: syz [ 293.479902][ T5876] usb 4-1: SerialNumber: syz [ 293.607053][T11063] loop7: detected capacity change from 0 to 32768 [ 293.732013][T11065] loop6: detected capacity change from 0 to 32768 [ 293.745973][ T5876] usb 4-1: selecting invalid altsetting 1 [ 293.780321][ T5876] usb 4-1: unit 3 not found! [ 293.800129][ T5876] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 293.818789][ T5876] usb 4-1: invalid MIXER UNIT descriptor 6 [ 293.892898][ T5876] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 293.923642][ T5876] usb 4-1: USB disconnect, device number 13 [ 293.989242][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.660838][T11082] loop6: detected capacity change from 0 to 1024 [ 294.714353][T11072] loop0: detected capacity change from 0 to 32768 [ 294.787963][T11082] hfsplus: catalog searching failed [ 294.869615][ T145] hfsplus: b-tree write err: -5, ino 3 [ 295.136828][T11088] sch_tbf: peakrate 221 is lower than or equals to rate 4003 ! [ 295.547647][T11084] loop0: detected capacity change from 0 to 32768 [ 296.126596][T11109] kAFS: Invalid Command on /proc/fs/afs/cells file [ 296.265246][T11104] loop3: detected capacity change from 0 to 32768 [ 296.273797][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 296.293547][T11104] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.1672 (11104) [ 296.315219][T11104] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 296.325687][T11104] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 296.335482][T11104] BTRFS info (device loop3): using free space tree [ 296.390967][T11104] BTRFS info (device loop3): enabling ssd optimizations [ 296.398560][T11104] BTRFS info (device loop3): auto enabling async discard [ 296.479080][ T5789] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 296.821972][T11134] bonding: unable to delete non-existent b [ 297.102056][T11142] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.700348][T11150] loop7: detected capacity change from 0 to 32768 [ 297.713033][T11150] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop7 scanned by syz.7.1686 (11150) [ 297.738918][T11150] BTRFS info (device loop7): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 297.750882][T11150] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 297.761523][T11150] BTRFS info (device loop7): using free space tree [ 297.797573][T11150] BTRFS info (device loop7): enabling ssd optimizations [ 297.804832][T11150] BTRFS info (device loop7): auto enabling async discard [ 297.914680][ T8491] BTRFS info (device loop7): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 298.318207][T11184] loop7: detected capacity change from 0 to 512 [ 298.352073][T11184] EXT4-fs: Ignoring removed nobh option [ 298.443697][T11184] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1690: invalid indirect mapped block 256 (level 2) [ 298.488427][T11184] EXT4-fs (loop7): 2 truncates cleaned up [ 298.496061][T11184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.625402][T11192] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 298.639738][ T5101] block nbd1: Receive control failed (result -32) [ 298.659518][ T5795] block nbd1: Receive control failed (result -32) [ 298.809491][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.946259][T11201] loop3: detected capacity change from 0 to 1024 [ 298.989025][T11201] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 299.639914][T11223] loop6: detected capacity change from 0 to 512 [ 299.663337][T11223] EXT4-fs: Ignoring removed nobh option [ 299.714928][T11223] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1711: invalid indirect mapped block 256 (level 2) [ 299.771474][T11223] EXT4-fs (loop6): 2 truncates cleaned up [ 299.778803][T11223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.923598][ T7776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.969129][T11232] loop7: detected capacity change from 0 to 512 [ 300.044217][T11232] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 300.089921][T11232] System zones: 0-2, 18-18, 34-35 [ 300.117646][T11232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.135457][T11232] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.337781][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.918832][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 300.943923][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 301.522768][T11267] syzkaller1: tun_chr_ioctl cmd 3223345255 [ 301.610146][T11270] loop3: detected capacity change from 0 to 1024 [ 301.660387][T11270] hfsplus: catalog searching failed [ 301.702122][ T3488] hfsplus: b-tree write err: -5, ino 3 [ 301.899761][T11262] loop7: detected capacity change from 0 to 32768 [ 301.946510][T11262] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.033688][T11262] XFS (loop7): Ending clean mount [ 302.147100][T11289] sch_tbf: peakrate 221 is lower than or equals to rate 4003 ! [ 302.340447][ T8491] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 303.238870][T11319] loop6: detected capacity change from 0 to 128 [ 303.717011][T11338] loop6: detected capacity change from 0 to 128 [ 303.735737][ T1199] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 303.751517][T11338] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.765922][T11338] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.822664][ T7776] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.980487][ T1199] usb 8-1: Using ep0 maxpacket: 16 [ 303.993082][ T1199] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.004359][ T1199] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.018895][ T1199] usb 8-1: config 0 interface 0 has no altsetting 0 [ 304.026533][ T1199] usb 8-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 304.036191][ T1199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.048531][ T1199] usb 8-1: config 0 descriptor?? [ 304.513799][ T1199] hid (null): report_id 0 is invalid [ 304.527318][ T1199] asus 0003:0B05:18C6.0013: unknown main item tag 0x3 [ 304.545988][ T1199] asus 0003:0B05:18C6.0013: unknown main item tag 0x6 [ 304.563922][ T1199] asus 0003:0B05:18C6.0013: unknown main item tag 0x7 [ 304.574905][ T1199] asus 0003:0B05:18C6.0013: report_id 0 is invalid [ 304.587101][ T1199] asus 0003:0B05:18C6.0013: item 0 0 1 8 parsing failed [ 304.624228][ T1199] asus 0003:0B05:18C6.0013: Asus hid parse failed: -22 [ 304.631286][ T1199] asus: probe of 0003:0B05:18C6.0013 failed with error -22 [ 304.769260][T11359] bonding: unable to delete non-existent b [ 304.802818][ T1199] usb 8-1: USB disconnect, device number 9 [ 305.039364][T11368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.511229][ T5101] block nbd2: Receive control failed (result -32) [ 305.511240][ T5795] block nbd2: Receive control failed (result -32) [ 306.859916][T11412] loop0: detected capacity change from 0 to 128 [ 306.883129][T11412] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 308.479597][T11435] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 308.587747][T11437] pimreg: entered allmulticast mode [ 308.628466][T11437] pimreg: left allmulticast mode [ 309.196896][T11457] pimreg: entered allmulticast mode [ 309.214319][T11457] pimreg: left allmulticast mode [ 309.427815][ T5101] block nbd3: Receive control failed (result -32) [ 309.437557][ T5795] block nbd3: Receive control failed (result -32) [ 309.536170][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 309.536187][ T28] audit: type=1400 audit(1793188926.386:277): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11463 comm="syz.0.1824" [ 310.298131][T11469] loop7: detected capacity change from 0 to 40427 [ 310.311230][T11469] F2FS-fs (loop7): invalid crc value [ 310.338341][T11469] F2FS-fs (loop7): Found nat_bits in checkpoint [ 310.338904][T11490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.475468][T11469] F2FS-fs (loop7): Start checkpoint disabled! [ 310.532178][T11469] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 310.747868][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1830'. [ 310.849538][ T62] kworker/u4:4: attempt to access beyond end of device [ 310.849538][ T62] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 310.853934][T11504] loop0: detected capacity change from 0 to 128 [ 310.874682][ T62] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 310.893025][ T62] kworker/u4:4: attempt to access beyond end of device [ 310.893025][ T62] loop7: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 310.912361][ T62] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 310.962218][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 311.280554][T11512] loop0: detected capacity change from 0 to 4096 [ 311.372777][T11515] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.893321][T11533] loop3: detected capacity change from 0 to 128 [ 311.967504][T11533] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.006735][T11537] loop0: detected capacity change from 0 to 512 [ 312.034995][T11533] ext4 filesystem being mounted at /532/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.236749][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.701781][T11556] loop6: detected capacity change from 0 to 1024 [ 312.743599][T11556] hfsplus: invalid length 1033 has been corrected to 255 [ 312.755184][T11556] hfsplus: invalid length 1033 has been corrected to 255 [ 312.794863][T11556] hfsplus: invalid length 1033 has been corrected to 255 [ 312.848517][T11556] hfsplus: b-tree write err: -5, ino 26 [ 312.901158][ T62] hfsplus: b-tree write err: -5, ino 25 [ 312.911714][ T62] hfsplus: b-tree write err: -5, ino 4 [ 312.935676][ T62] hfsplus: b-tree write err: -5, ino 2 [ 313.630333][T11562] loop0: detected capacity change from 0 to 32768 [ 313.686885][T11562] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 313.757415][T11587] loop6: detected capacity change from 0 to 2048 [ 313.815452][T11587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.831830][T11562] XFS (loop0): Ending clean mount [ 314.132512][ T5791] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 315.036279][T11616] macvtap1: entered promiscuous mode [ 315.044721][T11616] vlan0: entered promiscuous mode [ 315.053463][T11616] vlan0: left promiscuous mode [ 315.856170][T11638] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 315.924196][T11640] loop7: detected capacity change from 0 to 4096 [ 316.037033][T11644] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.053891][T11645] loop3: detected capacity change from 0 to 1024 [ 316.119481][T11645] hfsplus: invalid length 1033 has been corrected to 255 [ 316.139785][T11645] hfsplus: invalid length 1033 has been corrected to 255 [ 316.211708][T11645] hfsplus: invalid length 1033 has been corrected to 255 [ 316.250355][T11645] hfsplus: b-tree write err: -5, ino 26 [ 316.366563][ T3488] hfsplus: b-tree write err: -5, ino 25 [ 316.381462][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 316.394247][ T3488] hfsplus: b-tree write err: -5, ino 2 [ 316.601720][T11656] macvtap1: entered promiscuous mode [ 316.608334][T11656] vlan0: entered promiscuous mode [ 316.620928][T11656] vlan0: left promiscuous mode [ 316.850606][T11663] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.081182][T11669] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 317.194163][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1906'. [ 317.198265][T11675] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 317.263829][T11677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.776310][T11698] loop7: detected capacity change from 0 to 2048 [ 317.818268][T11698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.340026][T11715] block device autoloading is deprecated and will be removed. [ 318.372227][T11715] syz.3.1925: attempt to access beyond end of device [ 318.372227][T11715] md3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 318.401521][T11715] EXT4-fs (md3): unable to read superblock [ 318.466489][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1927'. [ 318.637753][T11728] loop3: detected capacity change from 0 to 1024 [ 318.715549][T11728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 318.762970][T11728] System zones: 0-1, 3-12 [ 318.809415][T11728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.922423][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.165029][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 319.489549][T11766] loop7: detected capacity change from 0 to 256 [ 319.844375][T11754] loop0: detected capacity change from 0 to 32768 [ 319.874141][T11754] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 319.931621][T11754] XFS (loop0): Ending clean mount [ 320.085409][ T5791] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 320.229565][T11783] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 320.450464][ T8] kernel write not supported for file /amidi2 (pid: 8 comm: kworker/0:0) [ 320.666755][T11796] loop3: detected capacity change from 0 to 512 [ 320.743810][T11796] EXT4-fs error (device loop3): __ext4_iget:5117: inode #11: block 1: comm syz.3.1960: invalid block [ 320.756649][T11796] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1960: couldn't read orphan inode 11 (err -117) [ 320.781415][T11796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.004213][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.775077][T11835] loop7: detected capacity change from 0 to 1024 [ 321.827067][T11834] loop6: detected capacity change from 0 to 2048 [ 321.827385][T11835] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 321.843052][T11835] System zones: 0-1, 3-12 [ 321.910736][T11835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.975108][T11834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.107273][ T28] audit: type=1800 audit(1793188938.153:278): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1976" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 322.201910][ T8491] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.230400][ T7776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.897737][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.905076][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.113701][ T5795] Bluetooth: hci2: command 0x0405 tx timeout [ 392.580212][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.589659][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.262706][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.270799][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 484.266271][ T29] INFO: task kworker/u4:4:62 blocked for more than 143 seconds. [ 484.274399][ T29] Not tainted syzkaller #0 [ 484.279963][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.288745][ T29] task:kworker/u4:4 state:D stack:22376 pid:62 ppid:2 flags:0x00004000 [ 484.298036][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 484.304366][ T29] Call Trace: [ 484.307722][ T29] [ 484.313033][ T29] __schedule+0x15ae/0x4700 [ 484.317817][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 484.325392][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 484.331867][ T29] ? mark_lock+0x94/0x320 [ 484.336314][ T29] ? asan.module_dtor+0x20/0x20 [ 484.341388][ T29] ? blk_check_plugged+0x250/0x250 [ 484.346600][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 484.354278][ T29] ? wq_worker_sleeping+0x63/0x240 [ 484.359504][ T29] schedule+0xbd/0x170 [ 484.363742][ T29] io_schedule+0x80/0xd0 [ 484.368081][ T29] bit_wait_io+0x11/0xd0 [ 484.372385][ T29] __wait_on_bit+0x9f/0x2c0 [ 484.377234][ T29] ? bit_wait+0xd0/0xd0 [ 484.381489][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 484.387422][ T29] ? bit_wait+0xd0/0xd0 [ 484.391618][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 484.396594][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 484.401703][ T29] ? bit_waitqueue+0x30/0x30 [ 484.407256][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 484.412643][ T29] do_get_write_access+0x5c9/0xe00 [ 484.418419][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 484.424576][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 484.431545][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 484.437848][ T29] ? __might_sleep+0xe0/0xe0 [ 484.442520][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 484.448580][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 484.454170][ T29] ext4_dirty_inode+0xcb/0x110 [ 484.459062][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 484.464970][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 484.470544][ T29] ext4_da_update_reserve_space+0x2d0/0x720 [ 484.476780][ T29] ? ext4_ext_find_goal+0xed/0x1d0 [ 484.482315][ T29] ext4_ext_map_blocks+0x1ba1/0x68c0 [ 484.487706][ T29] ? __might_sleep+0xe0/0xe0 [ 484.492583][ T29] ? ext4_ext_release+0x10/0x10 [ 484.497494][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.502692][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 484.508348][ T29] ext4_map_blocks+0x9db/0x1a90 [ 484.513815][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 484.519056][ T29] ? rcu_is_watching+0x15/0xb0 [ 484.524256][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 484.529981][ T29] ext4_do_writepages+0x1463/0x3990 [ 484.535404][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 484.542629][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 484.548556][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 484.553707][ T29] ext4_writepages+0x1dd/0x350 [ 484.558578][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 484.563699][ T29] ? __rwlock_init+0x150/0x150 [ 484.568641][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 484.573913][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 484.579248][ T29] do_writepages+0x351/0x590 [ 484.583934][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 484.590057][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 484.595498][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.600791][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 484.606156][ T29] __writeback_single_inode+0x14e/0xee0 [ 484.612291][ T29] writeback_sb_inodes+0x813/0x1020 [ 484.617588][ T29] ? queue_io+0x530/0x530 [ 484.622026][ T29] __writeback_inodes_wb+0x114/0x240 [ 484.627570][ T29] wb_writeback+0x472/0xbe0 [ 484.632283][ T29] ? queue_io+0x321/0x530 [ 484.636672][ T29] ? percpu_ref_tryget+0x250/0x250 [ 484.642135][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 484.648477][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.653767][ T29] wb_workfn+0xad7/0xe60 [ 484.658111][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 484.664019][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 484.670110][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.675569][ T29] ? read_lock_is_recursive+0x20/0x20 [ 484.681114][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.686505][ T29] ? process_scheduled_works+0x975/0x1600 [ 484.692546][ T29] ? process_scheduled_works+0x975/0x1600 [ 484.698555][ T29] process_scheduled_works+0xa60/0x1600 [ 484.704226][ T29] ? worker_attach_to_pool+0x370/0x370 [ 484.710238][ T29] ? assign_work+0x3cc/0x5d0 [ 484.714867][ T29] worker_thread+0xa5e/0xfe0 [ 484.719643][ T29] kthread+0x2fa/0x390 [ 484.723764][ T29] ? pr_cont_work+0x550/0x550 [ 484.728706][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.733522][ T29] ret_from_fork+0x48/0x80 [ 484.738394][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.743133][ T29] ret_from_fork_asm+0x11/0x20 [ 484.748181][ T29] [ 484.751367][ T29] INFO: task jbd2/sda1-8:5118 blocked for more than 143 seconds. [ 484.759797][ T29] Not tainted syzkaller #0 [ 484.764789][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.774104][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5118 ppid:2 flags:0x00004000 [ 484.783491][ T29] Call Trace: [ 484.786820][ T29] [ 484.790019][ T29] __schedule+0x15ae/0x4700 [ 484.794747][ T29] ? asan.module_dtor+0x20/0x20 [ 484.799833][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.805174][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 484.811184][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 484.816593][ T29] schedule+0xbd/0x170 [ 484.820719][ T29] io_schedule+0x80/0xd0 [ 484.825354][ T29] bit_wait_io+0x11/0xd0 [ 484.829664][ T29] __wait_on_bit+0x9f/0x2c0 [ 484.834512][ T29] ? bit_wait+0xd0/0xd0 [ 484.838728][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 484.844325][ T29] ? bit_wait+0xd0/0xd0 [ 484.848564][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 484.853413][ T29] ? do_raw_write_lock+0x11e/0x260 [ 484.858713][ T29] ? bit_waitqueue+0x30/0x30 [ 484.863432][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 484.869236][ T29] jbd2_journal_commit_transaction+0x2e90/0x5ad0 [ 484.875867][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 484.882860][ T29] ? lock_chain_count+0x20/0x20 [ 484.887937][ T29] ? _raw_spin_unlock+0x40/0x40 [ 484.892894][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 484.898904][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 484.904265][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.909413][ T29] ? timer_delete_sync+0x20/0x20 [ 484.914417][ T29] ? do_raw_read_unlock+0x80/0x80 [ 484.919539][ T29] ? prepare_to_wait+0x1aa/0x200 [ 484.924622][ T29] kjournald2+0x40f/0x810 [ 484.929436][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 484.934745][ T29] ? wake_bit_function+0x200/0x200 [ 484.940232][ T29] ? _raw_spin_unlock+0x40/0x40 [ 484.945179][ T29] ? __kthread_parkme+0x71/0x1c0 [ 484.950191][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 484.955375][ T29] kthread+0x2fa/0x390 [ 484.959531][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 484.965096][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.969733][ T29] ret_from_fork+0x48/0x80 [ 484.974263][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.979282][ T29] ret_from_fork_asm+0x11/0x20 [ 484.984208][ T29] [ 484.987289][ T29] INFO: task syz-executor:5778 blocked for more than 144 seconds. [ 484.995637][ T29] Not tainted syzkaller #0 [ 485.000714][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.009522][ T29] task:syz-executor state:D stack:22456 pid:5778 ppid:5777 flags:0x00004002 [ 485.018922][ T29] Call Trace: [ 485.022252][ T29] [ 485.025574][ T29] __schedule+0x15ae/0x4700 [ 485.030189][ T29] ? mark_lock+0x94/0x320 [ 485.034563][ T29] ? asan.module_dtor+0x20/0x20 [ 485.039538][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.044828][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 485.050865][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 485.056366][ T29] schedule+0xbd/0x170 [ 485.061307][ T29] io_schedule+0x80/0xd0 [ 485.065628][ T29] bit_wait_io+0x11/0xd0 [ 485.070013][ T29] __wait_on_bit+0x9f/0x2c0 [ 485.074632][ T29] ? bit_wait+0xd0/0xd0 [ 485.079029][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 485.084570][ T29] ? bit_wait+0xd0/0xd0 [ 485.089026][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 485.094386][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 485.099590][ T29] ? bit_waitqueue+0x30/0x30 [ 485.104273][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 485.109542][ T29] do_get_write_access+0x5c9/0xe00 [ 485.114791][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 485.120857][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 485.127428][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 485.133748][ T29] ? __might_sleep+0xe0/0xe0 [ 485.138427][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 485.144121][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 485.149723][ T29] ext4_dirty_inode+0xcb/0x110 [ 485.154825][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 485.160761][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 485.165929][ T29] file_update_time+0x187/0x1a0 [ 485.170889][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 485.176435][ T29] ? do_wp_page+0x4ce/0x34d0 [ 485.181093][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 485.187761][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.192874][ T29] do_page_mkwrite+0x153/0x3f0 [ 485.198489][ T29] do_wp_page+0xd4d/0x34d0 [ 485.203019][ T29] ? folio_put+0xd0/0xd0 [ 485.207420][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 485.212531][ T29] ? __rwlock_init+0x150/0x150 [ 485.217367][ T29] handle_mm_fault+0x1300/0x4a40 [ 485.222654][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 485.227781][ T29] ? numa_migrate_prep+0x350/0x350 [ 485.233043][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 485.238403][ T29] do_user_addr_fault+0x736/0x12d0 [ 485.243730][ T29] exc_page_fault+0x64/0x100 [ 485.248389][ T29] ? clear_bhb_loop+0x40/0x90 [ 485.253503][ T29] asm_exc_page_fault+0x26/0x30 [ 485.258422][ T29] RIP: 0033:0x7febe907dad6 [ 485.263176][ T29] RSP: 002b:00007ffd3f1f3a10 EFLAGS: 00010202 [ 485.269336][ T29] RAX: 00007febe6e28000 RBX: 00005555844ec020 RCX: 0000000000000003 [ 485.277555][ T29] RDX: 0000000000003dc4 RSI: 00005555844f22c8 RDI: 0000000000000008 [ 485.286878][ T29] RBP: 00007ffd3f1f3f10 R08: 00005555844f2418 R09: 0000000000000092 [ 485.295298][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd3f1f3d50 [ 485.303428][ T29] R13: 00007ffd3f1f3b40 R14: 585858582e7a7973 R15: 00007ffd3f1f3a90 [ 485.312066][ T29] [ 485.315495][ T29] INFO: task syz.0.1985:11855 blocked for more than 144 seconds. [ 485.323453][ T29] Not tainted syzkaller #0 [ 485.328464][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.337421][ T29] task:syz.0.1985 state:D stack:27048 pid:11855 ppid:5791 flags:0x00004004 [ 485.347123][ T29] Call Trace: [ 485.350467][ T29] [ 485.353452][ T29] __schedule+0x15ae/0x4700 [ 485.358123][ T29] ? mark_lock+0x94/0x320 [ 485.362512][ T29] ? asan.module_dtor+0x20/0x20 [ 485.376280][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.384007][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 485.390067][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 485.395369][ T29] schedule+0xbd/0x170 [ 485.400167][ T29] io_schedule+0x80/0xd0 [ 485.404551][ T29] bit_wait_io+0x11/0xd0 [ 485.408849][ T29] __wait_on_bit+0x9f/0x2c0 [ 485.414439][ T29] ? bit_wait+0xd0/0xd0 [ 485.418680][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 485.425352][ T29] ? bit_wait+0xd0/0xd0 [ 485.429570][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 485.434633][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 485.439716][ T29] ? bit_waitqueue+0x30/0x30 [ 485.444387][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 485.449641][ T29] do_get_write_access+0x5c9/0xe00 [ 485.455048][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 485.461081][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 485.467428][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 485.473629][ T29] ? __might_sleep+0xe0/0xe0 [ 485.478444][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 485.484036][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 485.489713][ T29] ext4_dirty_inode+0xcb/0x110 [ 485.494522][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 485.500429][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 485.505563][ T29] file_update_time+0x187/0x1a0 [ 485.510592][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 485.515761][ T29] ? filemap_fault+0x103c/0x1540 [ 485.520904][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 485.526814][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 485.533346][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.538547][ T29] ? __pte_offset_map+0x20d/0x280 [ 485.544809][ T29] do_page_mkwrite+0x153/0x3f0 [ 485.549742][ T29] handle_mm_fault+0x1a26/0x4a40 [ 485.554734][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 485.559830][ T29] ? numa_migrate_prep+0x350/0x350 [ 485.565013][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 485.570530][ T29] do_user_addr_fault+0x736/0x12d0 [ 485.576244][ T29] exc_page_fault+0x64/0x100 [ 485.580951][ T29] ? clear_bhb_loop+0x40/0x90 [ 485.585821][ T29] asm_exc_page_fault+0x26/0x30 [ 485.590701][ T29] RIP: 0033:0x7f8fdb073ba9 [ 485.595302][ T29] RSP: 002b:00007ffeb12003c0 EFLAGS: 00010202 [ 485.601404][ T29] RAX: 0000001b2eb22000 RBX: ffffffff8a878f38 RCX: 0000001b2eb21ff8 [ 485.609501][ T29] RDX: 0000001b2e52421c RSI: 0000000000000008 RDI: 00007f8fdbf55720 [ 485.617585][ T29] RBP: 000000000000006d R08: 00007f8fdb410000 R09: 00007f8fdb412000 [ 485.627231][ T29] R10: 000000008a878f3c R11: 0000000000000003 R12: 00007f8fdb426128 [ 485.636187][ T29] R13: 000000000000012a R14: ffffffff8a878a67 R15: 00007f8fdbf55720 [ 485.644230][ T29] ? number+0x6e7/0xf00 [ 485.648746][ T29] ? number+0xbb8/0xf00 [ 485.652959][ T29] [ 485.656228][ T29] INFO: task syz.3.1989:11866 blocked for more than 144 seconds. [ 485.664319][ T29] Not tainted syzkaller #0 [ 485.669566][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.678435][ T29] task:syz.3.1989 state:D stack:27560 pid:11866 ppid:5789 flags:0x00004004 [ 485.687675][ T29] Call Trace: [ 485.691110][ T29] [ 485.694187][ T29] __schedule+0x15ae/0x4700 [ 485.698817][ T29] ? mark_lock+0x94/0x320 [ 485.703280][ T29] ? asan.module_dtor+0x20/0x20 [ 485.708197][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.713346][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 485.719539][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 485.725020][ T29] schedule+0xbd/0x170 [ 485.729155][ T29] io_schedule+0x80/0xd0 [ 485.733620][ T29] bit_wait_io+0x11/0xd0 [ 485.738077][ T29] __wait_on_bit+0x9f/0x2c0 [ 485.742870][ T29] ? bit_wait+0xd0/0xd0 [ 485.747164][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 485.752745][ T29] ? bit_wait+0xd0/0xd0 [ 485.757019][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 485.761803][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 485.767345][ T29] ? bit_waitqueue+0x30/0x30 [ 485.772080][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 485.777446][ T29] do_get_write_access+0x5c9/0xe00 [ 485.782651][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 485.788848][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 485.795130][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 485.801404][ T29] ? __might_sleep+0xe0/0xe0 [ 485.806200][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 485.811887][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 485.817669][ T29] ext4_dirty_inode+0xcb/0x110 [ 485.822551][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 485.828465][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 485.833646][ T29] file_update_time+0x187/0x1a0 [ 485.838616][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 485.843948][ T29] ? filemap_fault+0x103c/0x1540 [ 485.850138][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 485.856052][ T29] ? pte_alloc_one+0x3b6/0x540 [ 485.860951][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 485.867278][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 485.872408][ T29] do_page_mkwrite+0x153/0x3f0 [ 485.877406][ T29] handle_mm_fault+0x1a26/0x4a40 [ 485.882769][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 485.887853][ T29] ? numa_migrate_prep+0x350/0x350 [ 485.893138][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 485.898473][ T29] do_user_addr_fault+0x736/0x12d0 [ 485.903949][ T29] exc_page_fault+0x64/0x100 [ 485.908592][ T29] ? clear_bhb_loop+0x40/0x90 [ 485.913374][ T29] asm_exc_page_fault+0x26/0x30 [ 485.918255][ T29] RIP: 0033:0x7f814da6cea3 [ 485.922784][ T29] RSP: 002b:00007ffe680280a0 EFLAGS: 00010246 [ 485.929129][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e864000 [ 485.937262][ T29] RDX: 0000001b2e824000 RSI: 0000000000400000 RDI: 00007f814dde7708 [ 485.945401][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.953443][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 485.961812][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe68028330 [ 485.970033][ T29] [ 485.973107][ T29] INFO: task syz.7.1990:11868 blocked for more than 144 seconds. [ 485.981017][ T29] Not tainted syzkaller #0 [ 485.985999][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.994766][ T29] task:syz.7.1990 state:D stack:27560 pid:11868 ppid:8491 flags:0x00004004 [ 486.004292][ T29] Call Trace: [ 486.007604][ T29] [ 486.010730][ T29] __schedule+0x15ae/0x4700 [ 486.015326][ T29] ? mark_lock+0x94/0x320 [ 486.019816][ T29] ? asan.module_dtor+0x20/0x20 [ 486.024742][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 486.029815][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 486.035978][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 486.041393][ T29] schedule+0xbd/0x170 [ 486.045514][ T29] io_schedule+0x80/0xd0 [ 486.049775][ T29] bit_wait_io+0x11/0xd0 [ 486.054205][ T29] __wait_on_bit+0x9f/0x2c0 [ 486.059098][ T29] ? bit_wait+0xd0/0xd0 [ 486.063587][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 486.069203][ T29] ? bit_wait+0xd0/0xd0 [ 486.073819][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 486.078726][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 486.083937][ T29] ? bit_waitqueue+0x30/0x30 [ 486.088569][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 486.093806][ T29] do_get_write_access+0x5c9/0xe00 [ 486.099042][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 486.105300][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 486.111513][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 486.117926][ T29] ? __might_sleep+0xe0/0xe0 [ 486.122579][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 486.128221][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 486.133719][ T29] ext4_dirty_inode+0xcb/0x110 [ 486.138679][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 486.144756][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 486.149966][ T29] file_update_time+0x187/0x1a0 [ 486.154886][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 486.160081][ T29] ? filemap_fault+0x103c/0x1540 [ 486.165203][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 486.171034][ T29] ? pte_alloc_one+0x3b6/0x540 [ 486.175879][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 486.182534][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 486.187643][ T29] do_page_mkwrite+0x153/0x3f0 [ 486.192680][ T29] handle_mm_fault+0x1a26/0x4a40 [ 486.198067][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 486.203318][ T29] ? numa_migrate_prep+0x350/0x350 [ 486.208506][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 486.213895][ T29] do_user_addr_fault+0x736/0x12d0 [ 486.219068][ T29] exc_page_fault+0x64/0x100 [ 486.223852][ T29] ? clear_bhb_loop+0x40/0x90 [ 486.228585][ T29] asm_exc_page_fault+0x26/0x30 [ 486.233719][ T29] RIP: 0033:0x7f467ae6cea3 [ 486.238341][ T29] RSP: 002b:00007ffcc70a0d00 EFLAGS: 00010246 [ 486.244517][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2df64000 [ 486.252568][ T29] RDX: 0000001b2df24000 RSI: 0000000000400000 RDI: 00007f467b1e7708 [ 486.260706][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.269015][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.277222][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc70a0f90 [ 486.285322][ T29] [ 486.289693][ T29] [ 486.289693][ T29] Showing all locks held in the system: [ 486.297784][ T29] 1 lock held by khungtaskd/29: [ 486.302660][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 486.312660][ T29] 6 locks held by kworker/u4:4/62: [ 486.317791][ T29] #0: ffff88801b27cd38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 486.329261][ T29] #1: ffffc900015d7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 486.342073][ T29] #2: ffff88802e9d60e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 486.353144][ T29] #3: ffff88802e9d8c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 486.363822][ T29] #4: ffff88802e9da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 486.373718][ T29] #5: ffff88807723aa88 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 486.383768][ T29] 2 locks held by kworker/u4:9/3488: [ 486.389105][ T29] 2 locks held by getty/5550: [ 486.394939][ T29] #0: ffff8880336b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 486.405109][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 486.415583][ T29] 3 locks held by syz-executor/5778: [ 486.420894][ T29] #0: ffff8880316160a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 486.430904][ T29] #1: ffff88802e9d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 486.440776][ T29] #2: ffff88802e9da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 486.450604][ T29] 3 locks held by syz.0.1985/11855: [ 486.455825][ T29] #0: ffff8880221060a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 486.465860][ T29] #1: ffff88802e9d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 486.475794][ T29] #2: ffff88802e9da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 486.485975][ T29] 3 locks held by syz.3.1989/11866: [ 486.491437][ T29] #0: ffff888027814420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 486.501796][ T29] #1: ffff88802e9d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 486.512018][ T29] #2: ffff88802e9da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 486.521969][ T29] 3 locks held by syz.7.1990/11868: [ 486.527199][ T29] #0: ffff88807c8081a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 486.537403][ T29] #1: ffff88802e9d6510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 486.547372][ T29] #2: ffff88802e9da990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 486.557178][ T29] [ 486.559523][ T29] ============================================= [ 486.559523][ T29] [ 486.568237][ T29] NMI backtrace for cpu 0 [ 486.572615][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 486.579831][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 486.589929][ T29] Call Trace: [ 486.593355][ T29] [ 486.596295][ T29] dump_stack_lvl+0x18c/0x250 [ 486.601006][ T29] ? __wake_up_klogd+0xd9/0x100 [ 486.605866][ T29] ? show_regs_print_info+0x20/0x20 [ 486.611157][ T29] ? load_image+0x420/0x420 [ 486.615689][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 486.620665][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 486.627108][ T29] ? load_image+0x420/0x420 [ 486.631629][ T29] ? wq_watchdog_touch+0xef/0x170 [ 486.636720][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 486.642790][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 486.648790][ T29] watchdog+0xf59/0xfa0 [ 486.653007][ T29] ? watchdog+0x1e1/0xfa0 [ 486.657371][ T29] kthread+0x2fa/0x390 [ 486.661555][ T29] ? hungtask_pm_notify+0x50/0x50 [ 486.666609][ T29] ? kthread_blkcg+0xd0/0xd0 [ 486.671209][ T29] ret_from_fork+0x48/0x80 [ 486.675648][ T29] ? kthread_blkcg+0xd0/0xd0 [ 486.680264][ T29] ret_from_fork_asm+0x11/0x20 [ 486.685069][ T29] [ 486.688621][ T29] Sending NMI from CPU 0 to CPUs 1: [ 486.693920][ C1] NMI backtrace for cpu 1 [ 486.693933][ C1] CPU: 1 PID: 5137 Comm: syslogd Not tainted syzkaller #0 [ 486.693949][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 486.693957][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x6d/0xe0 [ 486.693985][ C1] Code: 4c 09 01 48 8b 54 24 20 65 4c 8b 05 0d df 7b 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d fb de 7b 7e <41> 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 24 [ 486.694061][ C1] RSP: 0018:ffffc90003277430 EFLAGS: 00000206 [ 486.694076][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003 [ 486.694086][ C1] RDX: ffffffff813beb18 RSI: ffffffff8dfa0a80 RDI: 0000000000000005 [ 486.694097][ C1] RBP: ffffc90003277578 R08: ffff88807ddada00 R09: 0000000000000005 [ 486.694107][ C1] R10: 0000000000000007 R11: 0000000080000001 R12: ffffffff908f2d22 [ 486.694117][ C1] R13: ffffc90003277528 R14: 0000000000000005 R15: dffffc0000000000 [ 486.694128][ C1] FS: 00007fc6be980c80(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 486.694142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.694153][ C1] CR2: 000056083e57f660 CR3: 0000000032913000 CR4: 00000000003506e0 [ 486.694169][ C1] Call Trace: [ 486.694175][ C1] [ 486.694183][ C1] unwind_next_frame+0x748/0x2990 [ 486.694206][ C1] ? consume_skb+0xb2/0x110 [ 486.694272][ C1] ? consume_skb+0xb2/0x110 [ 486.694286][ C1] ? stack_trace_save+0x100/0x100 [ 486.694305][ C1] arch_stack_walk+0x144/0x190 [ 486.694325][ C1] ? consume_skb+0xb2/0x110 [ 486.694342][ C1] stack_trace_save+0xaa/0x100 [ 486.694360][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 486.694382][ C1] ? verify_lock_unused+0x140/0x140 [ 486.694401][ C1] kasan_set_track+0x4e/0x70 [ 486.694419][ C1] ? kasan_set_track+0x4e/0x70 [ 486.694435][ C1] ? kasan_save_free_info+0x28/0x40 [ 486.694455][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 486.694473][ C1] ? slab_free_freelist_hook+0x154/0x240 [ 486.694489][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 486.694502][ C1] ? skb_release_data+0x609/0x7f0 [ 486.694526][ C1] ? consume_skb+0xb2/0x110 [ 486.694571][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 486.694585][ C1] kasan_save_free_info+0x28/0x40 [ 486.694605][ C1] ____kasan_slab_free+0x126/0x1f0 [ 486.694625][ C1] slab_free_freelist_hook+0x154/0x240 [ 486.694653][ C1] ? skb_release_data+0x609/0x7f0 [ 486.694709][ C1] __kmem_cache_free+0xba/0x1f0 [ 486.694727][ C1] skb_release_data+0x609/0x7f0 [ 486.694748][ C1] consume_skb+0xb2/0x110 [ 486.694764][ C1] __unix_dgram_recvmsg+0xa05/0xd90 [ 486.694832][ C1] ? unix_unhash+0x10/0x10 [ 486.694848][ C1] ? aa_af_perm+0x330/0x330 [ 486.694865][ C1] ? aa_file_perm+0x3e3/0xee0 [ 486.694880][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.694905][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 486.694931][ C1] ? security_socket_recvmsg+0x89/0xb0 [ 486.694958][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 486.694982][ C1] sock_read_iter+0x2db/0x3f0 [ 486.695019][ C1] ? kernel_sock_ip_overhead+0x5a0/0x5a0 [ 486.695042][ C1] ? common_file_perm+0x198/0x1f0 [ 486.695067][ C1] vfs_read+0x486/0x990 [ 486.695092][ C1] ? kernel_read+0x1e0/0x1e0 [ 486.695114][ C1] ? __rseq_handle_notify_resume+0x33f/0x1140 [ 486.695141][ C1] ? __fdget_pos+0x1d8/0x330 [ 486.695164][ C1] ksys_read+0x151/0x260 [ 486.695186][ C1] ? vfs_write+0x9a0/0x9a0 [ 486.695209][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 486.695233][ C1] do_syscall_64+0x55/0xb0 [ 486.695250][ C1] ? clear_bhb_loop+0x40/0x90 [ 486.695269][ C1] ? clear_bhb_loop+0x40/0x90 [ 486.695289][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.695308][ C1] RIP: 0033:0x7fc6bead0407 [ 486.695322][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 486.695335][ C1] RSP: 002b:00007fff4820ba10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 486.695350][ C1] RAX: ffffffffffffffda RBX: 00007fc6be980c80 RCX: 00007fc6bead0407 [ 486.695362][ C1] RDX: 00000000000000ff RSI: 0000562fc12cb950 RDI: 0000000000000000 [ 486.695372][ C1] RBP: 0000562fc12cb910 R08: 0000000000000000 R09: 0000000000000000 [ 486.695382][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562fc12cb999 [ 486.695393][ C1] R13: 0000000000000000 R14: 0000562fc12cb950 R15: 0000562f9830dd98 [ 486.695411][ C1] [ 486.696276][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 487.135691][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 487.142900][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 487.152970][ T29] Call Trace: [ 487.156263][ T29] [ 487.159204][ T29] dump_stack_lvl+0x18c/0x250 [ 487.163923][ T29] ? show_regs_print_info+0x20/0x20 [ 487.169161][ T29] ? load_image+0x420/0x420 [ 487.173694][ T29] panic+0x2ca/0x720 [ 487.177607][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 487.182136][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 487.187708][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 487.193802][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 487.200164][ T29] watchdog+0xf98/0xfa0 [ 487.204425][ T29] ? watchdog+0x1e1/0xfa0 [ 487.208879][ T29] kthread+0x2fa/0x390 [ 487.213046][ T29] ? hungtask_pm_notify+0x50/0x50 [ 487.218082][ T29] ? kthread_blkcg+0xd0/0xd0 [ 487.222682][ T29] ret_from_fork+0x48/0x80 [ 487.227106][ T29] ? kthread_blkcg+0xd0/0xd0 [ 487.231704][ T29] ret_from_fork_asm+0x11/0x20 [ 487.236495][ T29] [ 487.239954][ T29] Kernel Offset: disabled [ 487.244279][ T29] Rebooting in 86400 seconds..