last executing test programs: 2.903801209s ago: executing program 0 (id=1850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f0004", 0x30) 2.575136913s ago: executing program 3 (id=1853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x4c440) 2.510299556s ago: executing program 0 (id=1854): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-bond_slave_0', 0xd) 2.183649894s ago: executing program 2 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x64e98, 0xb6a0d}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xf}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c080}, 0x48092) 1.898235459s ago: executing program 1 (id=1859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x2, @basic={0x0, 0x0, 0x0, [@runt="00112233"]}}}}}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x3}}}}}, 0x0) 1.803902393s ago: executing program 3 (id=1860): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 1.590303104s ago: executing program 1 (id=1862): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.567895749s ago: executing program 0 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 1.436531901s ago: executing program 2 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20) 1.387651187s ago: executing program 3 (id=1865): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x807, "340b7832ceefd131b8e6498c25f58fad9987ffe93be2ee18cf50198900974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2}) 1.268648886s ago: executing program 4 (id=1866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000002700)={0x79, 0x0, 0xd8f}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000002b00)={0x1, 0x0, [{0x3, 0x3, 0x0, 0x0, @sint={0x6, 0x1ac}}]}) 1.144422302s ago: executing program 2 (id=1867): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) getpeername$packet(r0, 0x0, &(0x7f0000000080)) 1.014577567s ago: executing program 3 (id=1868): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="3ac58d341d191bef3ae54e2d8e854dfa3fe8747801d92ff81e579847d2b423f484d1496e058c6f263b7b677c8d09ad0d79e87a33f66a0daec47924e10e2e97a2a01cce8df6a0fe3d6022c192b1b4c56d2476c6db0fb227706027c8f12fd70f2d498eb433bb079342a248f3943e8e36a1f1413e43e8c8b44ef2608a56270405bd17d42477414f3e04a03b0f77319dad6dcfa93bf2225fc86d5b072a15767e1c96c528cb49aad10adac2f0987518e0ab6ad1422b2f6a6e1b95008908515af8f8e25229f98714fc7bcfac86405567a58dad46435e1e1c9a9f1d40d64c1815a8ec9637e957011ead474f307af7f77dcf43b42bcd497c679f6458380f921577c1f2201a3951f43556fda4a933da66e9215d9620814f7efe891431945b7d703a59922d986c5a5aa7a4f3d08622f3d70656a0eeb5caa6e8876fd100fe0188651004fc295060bd4d071c8a3b0eea874ce8f57cce710456bd9c6ddc613e5894bd9d28f218aef298131096762e1a80a806196d84a08aebe53fcdec082e5edd41bbe56b2a287150cc216f64461841b7753ced9dc226d2a712e0beb3c5b3e25e30888bc8e9eab621176c41e8153906468d78bcf57128f5f8317504a43e5847300d306e4de9e089ceab08c61fc7690e6265886bb997cd4f44551042f29c9aafa839b19124e1b7b947f4fe734882214a0c4e877efc33a826aca15921504784ec31208f5fe025fe0c886914677ff14456fafcd65686fa0b34679b04002bfa99def3ed3c1421aee0639492aa64f548f94c3e0c42d84099393114758c80f89e0e19428891a986f98c607dfc0be446a867b9e519e80970ad346b4259aac04f0b433538556019c527b693ff3974d7b75c16468c852242eb233200226b99ed408f9485b3c77abb3d610871d459ebcb3c1243aac559cec49278a410eb83c38b7c130b916698846a85406343a1350880bdf126d5a3f0e23c51350d617dfc261f68587560cf37bc50cc23bbb7aa2bed7c97e6e1a03ac44bbfa5eeda22c81293d07b6ebaca99b88c8d7176afa173bc976080f73cd5be206a4f3e92b060f43a175e3cb5de297521c5059b93f8d1f1f54b2b2c2a0a7484a638700a4af64038b8d4828315f2ce5e4b57cf4f694d342deeaf017bfba61f1e4855e1a1cef523c1b3af45041389cf985622eac5d7d1238915943ac747cf89103a0661ec3b2459a9f963aa489ee1774bfb90a9fb91c86dbd368f00bef3b5760f9e3e81765b4737e27e38fdebe9f172c4fdbf7cd519bb9f5b7d133de01015b7788acdd15b2c17d217bce05b9d3d1045322a69d2c1bcc904ce388be016b721f519b38179e653b167995ed1765c1e2f7e69608e0b2f69e300f9910dbc959773f509d6512ad46cada69de9f8d984c644bee2f6aab6eace602beee981f81693b0713fd5a62a4f974956b4547b4b2534d99b0646ab33382949d277617b007375bc25b7eddebb77c489f10366f9ef6984713a82b5158659ebd4c4eb407ef449ec245433e6b710661cb8928a3e31a29e16aa4f59d0da7ac259883d18c027f7c8255d951d1fd51e1d6efd7ec4e237e4824b3400a9a099e786eb48adc3be61e39c8df4db73225117a406c52f09c237bbfb57d2a8644cb35f3056bfdcca8de22d46e4352f7f06d600160f4bcf15e8fd0bdcef29583f093354cbe88c94ce23a0260304f6f65e1b33da80f5270b5e78f9daeb59ed5a4a79cc46a09ce7b1a10e3589d37365bc038ca3792e616a066c937e4d4b291c27bd84918e8bdcdd82ff88b535ebc8700917b0ba3c2e8edf4bafb275fe0b21251709c33f2b6ab2daea8cbdd5383c4c097c8be883fc69468bc7cf9e81e459e9d68c5d743daade327b331cf0e291d64a25acffcd75bb74330d9cd77f10fa6204b6bd0dc074288715be2b4e229eb299dbeb696fc420190c73ba7d77301e64ada64fd3b7e22570b2163fee74100d630f8cc0b9a6e110a4317c2c80659840e4f88f5b5326caf2a180f13bf21eb9c3b3b6a277f1f1b92d542e257a81907ad3e640cfb4ce85a1f19bd7e732d4e5a923c453ab783a92466a2090f042368e32cee8c5e57b42f1efc52f6b4963e441ee79b8cea1d0fdf989fa42a2e8d4ca2fd90b2073c4e52ab9c3087993ea00c6847fd15f5e61e194b18b55edbaa2aff53ee0e45273fc0ea23480827bf8f893ad843a928bb62c173eca8b3c267f1c1a74495d3332576bca73dd1af4b3664c478458dd5a167bccdee062ae9e12178cd9191d15c967571a0807a2a9845f8ad45efb865877278e1275f592b3eac4c0d16c7280ca6dc4e67276f1b01bf75942554532dff23091da6acc06c1959d9d343b0742556d0076e781c7426fbc68698f064118c1e48c8ad01ce38f3adddb58bd3983c630505b62c961f1d0c1cb33efaeb7629241b8729b0c9e65d2ed5bc00e09d466f7b61c8ea51088ab21da2c2df10bd89e05f4ef156b75b9c0ef654306693530796da679a9740fa149344aace92b9862c59f5812065205a8f464318fc31e88deb916ae818bad4e87ba219ee5e021d547377e19de06e85769f36cbe675a03701f03f2257e157ee4a48762b796d2ddc266cdbc827ee607a5bc28ceff81932314d053b318d72aa64098f39c64f33d29eff50ed8a2d34bb530c8241fb85de5b2ee69200dadfb568249b3297fb8d1de55769abbf92f5502a910f0ef01da3418609fcd1c15d060d78a7bb1f6297aff407ccfb06e233338ffd6c10d2dc60fe478dd9d9ca21897d2dfee8e86daf14fae06626e7b64d2e8cf02f53db4ca6195e2e440636834d9c3601c1f425b721cb513cb722548c3da07c47f9d32d0415203ead05f6e3759049e35d30efad10ce7ba57e4875b712297266a2c5f1687923bee7701185013e356192bf94722b9777a05222b9a06bbb29ebfd146df58c6c24c6709057011177ec5b0e7c7cbcdd3ace45c8396c64cd40445e09e36e41fb4a180ebb2d975c69730fd958e9f5acc8be6e19108fa270d1596d733e9378808212da528bae1f8cc9eeb4cb98626beb23e6b58a03ad8deaa8116a5483f860caf60f1f40af5f75d71910f045663875a15db63cd1bcfe77eade65275f22a7653565a9158d818115708a9c98c39fc9f57f1c915d070934402b2fb9829710ff96d01037c6ca43972c634dbeee59c5694e867b3a67b7d8c3b2795a99a13ccf4f2f7890e6133b153b000ad2c8b1848083b671ef912b00f6b545f65af4f1be82abfa42bde6047c595b0a2c0df3753e882ccf5c0085853062267afcfb2a5250e8bc605e6878b65d5c631346f6cb269bb4e77576704e79c7995fb1048af1d72b5c6533d858ec2112863ecccf6c541aabe8913468568e8eb2cd5dd72d78c36880f9ce1a403c0f0177155268205c62b4559bf968510c242cc8a08dbb63f041d042bc06e7d28a5ab29bffb3e49fdae733c245dbd6ab037c2a98adcd3bac43f4d92833d6b2d163da9634eaff2fc4f019a6a4d1dd1b6eb4af6f54c1542004c17826b5f84b2d01f15e9cd2d5646326bd2094624c89243202a83353e838ee961efd41d3a9fffa5d857b581af95ecdaf5b2be6b73a37e6da87f37dc33f2cf80b11c50be5047defc754cc022948748f1fc08c8e7edc7194e2b05cfb0f5cbf81f1e25b11f23ea7809aa8b6aed35eb62ca18048b69852bab086158a44078a138567d3246ba2e3aecaa27a857eb8749f46948a2b3bba889d44e0f92757c690dea483d195d6814eae929cd17a3d7632eed2e85bae250b308e4035e7a3af53a9cf02c3db865eb17a09eef4cd20eaad59078eccdbec9cdecf38b3b51d58a07ac56c18a1d01f354da5a41dd1e52b7ae5c64519a51f43de320229737b8fd1f3b6b48d7ff12e6d8ce5484a5d9d819ef1eaf2d0d0f9f38643bf28643640f8a6d8a080534f1b481785186aad542a3121f8d2b36e0007b70f42b81c2f915803c24d15097149ac14828b196eaf7d5c739d80ff4444ad8297aa889bbf09ecfc68a1c30b6d989faed943139f6e7351a52a77174e967922cfb0c0a4e76b7d3e0bc5007e7797113f874b318585d78223517c38c559329a1e583084b8ec269a20ba43a596656dca9591997bd9ce5682d002c6fd93b1219afab27746c45ebe1e0aa32256baaf9cbddbce02be0f0dc7a0eca8beadf0fbc6cd05f99f02220398ef705f4346f883fd0a0c19cea317e943f3111ca13e6b26a9922b84f5facb1ddeea0c645073ee48339d62926887d4c8001c79bf7a815909092cbddc53e2c328dea0ab69b1ae57a268be44d13bc3c8ffb60036b09bab42d86464f329f28be9caf4415867966bbaa6afef0a440c8027869ecf010532aa072814293649b5cb376ce67a1e31fbe2f2525374597efabe6080e6dc0bee5b0584a86fc0bf5cdf7da5502892a5545d5dcaff77851f31cd02a45ed765cab3772d2b67d664b08aa321e8cfbdce5cab54f9fbf4863aa5201d3c79bd6a1651757645dedee9fcea562e17eab64ffb65805fc1fcf070a38cdd0d9948f2f63ea8a369c12a1965b96f6c16c94661c87836f222f2a58b1f4c24e92dfab505b26381fae4b1ff7d23439e8634fa5d907698e40a440904fbf55e160d1acc8c19cc7186edde9dea21270675be409d8305564052515329e502d80be08952b2a43d32cda5689aac4bb0a9f77b10bdd8a2983879c554193c2618448d06c33937c99f7f02133d83115170ebc9842997dac239b0123a80d72650bbb5841a64a742b07fb744179fc0fdcdf533346e5cf53e7d88e51d1d049533a6050bbeec07745486000d7cbce67646208e5d778cc6411fbab08e78bdde85c43224d91010d51d2e4b476f2b1ac038e5f9404923bd3cdaa5c828c75712ca2749513c67899bb3a931b75929919080076700937993633d9db270a470243a7db3d838c12a9530aa9d9c4f2de3ebd9a32ae85be8152da4556dd6e6ebafd31dc5a07b275d37b8e538021eb8b413569bab07d7ba3696f0009d53ef2b3a27c714a934994d76df02d4887c4fab4ab642e900ff5425bbcfedf57f9b84b63d2cb32ce8af833048cab60149c3c5b1f68b498666927462dfba70020cce044598798b7673b17159851e5e5bfca16ca2c25629c1b512303f59d863507e476a6b9f1052adc94e28a036a378059a20be3e23992bdda8afe80c1a79fed8ee835e2f7a4155d4535230ecd06d67cb99567896598f8f7df0788cfc465e1f59c6a0449b21c17d5d06b32b384cb49292a7fb4b36af04d3356dcfabe1c10d26d67b214e81dfebdee5fdedd266882888d520404201580a4ae7b19adf300f35db2fd3dc865c0cec30872e9d26dcd222ba5db191e79440f20158841b7f5a014a121f034ffcc508af78e6eb7d04d82ada23cd1e26ace21168d06a7e6a6ea2a3203e6eeb41c2a163c2ed351bf3a4df34f7e4c7237a409a68a0aeae01aa9ef0538c694c46342166388f6f43da6f9770682dc07d1cd94a1e0209f06955019ba2809b941c9c8a34720912a88b24ef07330755c8fcb320eba7ae5cc5cb487589d95a2e2e98c362c346669d5e7fe6e4c5f0409770c212164ced9e8c54836764a3b1c899f181636418a2467bca105516c948a1da6874010950b44275d91d2e0471107b7112ff87e678d41bcc11d7daa175a0ed7fe92e4acfb75e8f5ca8b56c341e50c3ffa54f264ffb029fd0c8197d75dd04192f46b03d0217ddbb27f700c004866715f5dff738675a105b9814cb7fdd7cabc18ae5d5c8350745ee9a4008ee528d9841ce4d616ac097415245a34e2e46a33fcd4860e90c8790e0854f9c8060044f9cf4629c4a34fa512c3a4bbe745e8cc1fc281c61914e54fcd", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000001000000010000000800060001000000"], 0x0) 985.186692ms ago: executing program 0 (id=1869): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x184000000002, 0x12) 820.264473ms ago: executing program 4 (id=1870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000019400)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000019480)=0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) shutdown(r0, 0x2) 800.71179ms ago: executing program 2 (id=1871): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xb}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r0) 748.505309ms ago: executing program 1 (id=1872): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) unshare(0x24020400) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0) 715.931469ms ago: executing program 3 (id=1873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x54004) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) 618.818321ms ago: executing program 0 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x2, 0xfff1}, {0xffff, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) 616.347984ms ago: executing program 1 (id=1875): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20040854) r0 = inotify_init() socket$phonet_pipe(0x23, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 590.426299ms ago: executing program 4 (id=1876): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x10) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 563.941852ms ago: executing program 3 (id=1877): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@autodefrag}, {@nossd}, {@nossd_spread}, {@noflushoncommit}, {@nodiscard}, {@compress_force}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@datacow}, {@ssd_spread}]}, 0x9, 0x559d, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x8400, 0x0) ioctl$FITRIM(r1, 0xc4009420, 0x0) 470.773318ms ago: executing program 2 (id=1878): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/163, 0x9c}], 0x42, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 418.364441ms ago: executing program 1 (id=1879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)='\b', 0x1) 394.790723ms ago: executing program 0 (id=1880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001540)={0x1, 0x0, [{0x400000f2, 0x0, 0x80000006}]}) 385.924956ms ago: executing program 4 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1c1000, 0x0) read$FUSE(r0, 0x0, 0x0) 166.553454ms ago: executing program 4 (id=1882): r0 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000004}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8001, 0x0, 0x0) 166.259449ms ago: executing program 1 (id=1883): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8001) 127.870665ms ago: executing program 2 (id=1884): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3200014, &(0x7f0000000340)=ANY=[], 0x1, 0x61f, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0x800, 0x41) fcntl$lock(r0, 0x6, &(0x7f0000001140)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000001180)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1885): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)=@multiplanar_userptr={0x20, 0x1, 0x4, 0x100000, 0x53, {}, {0x7, 0x1, 0x0, 0x3, 0x1, 0x2, "6352760e"}, 0x81, 0x2, {0x0}, 0x9}) kernel console output (not intermixed with test programs): B device number 4 using dummy_hcd [ 174.923706][ T11] usb 1-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 174.926083][ T11] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 174.926110][ T11] usb 1-1: config 1 has no interface number 0 [ 174.926151][ T11] usb 1-1: config 1 interface 105 has no altsetting 0 [ 174.928409][ T11] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 174.928432][ T11] usb 1-1: Product: syz [ 174.928447][ T11] usb 1-1: Manufacturer: syz [ 174.928460][ T11] usb 1-1: SerialNumber: syz [ 175.453912][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.603902][ T27] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 175.604953][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.604976][ T27] usb 4-1: config 0 has no interface number 0 [ 175.606549][ T11] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 175.606823][ T11] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 175.607924][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.607946][ T27] usb 4-1: Product: syz [ 175.607958][ T27] usb 4-1: Manufacturer: syz [ 175.607971][ T27] usb 4-1: SerialNumber: syz [ 175.624391][ T27] usb 4-1: config 0 descriptor?? [ 175.694767][ T11] usb 1-1: USB disconnect, device number 4 [ 175.764479][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 175.836479][ T27] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 175.881327][ T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.881799][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 175.881846][ T27] usb 4-1: media controller created [ 175.927623][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.980203][ T8300] program syz.2.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.092853][ T8306] netlink: 2 bytes leftover after parsing attributes in process `syz.2.957'. [ 176.118482][ T5652] block nbd1: Receive control failed (result -32) [ 176.220316][ T8310] loop2: detected capacity change from 0 to 256 [ 176.251477][ T8310] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 177.060842][ T8324] loop2: detected capacity change from 0 to 40427 [ 177.064066][ T27] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 177.089886][ T8324] F2FS-fs (loop2): invalid crc value [ 177.283550][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.358517][ T27] usb 4-1: USB disconnect, device number 8 [ 177.433256][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 177.434053][ T10] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 177.435200][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.435222][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.435263][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 177.435288][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 177.435327][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.444412][ T8324] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 177.509074][ T8324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.531329][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 177.531354][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 177.531862][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 177.531877][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 177.563790][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 177.563829][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 177.656820][ T5632] bio_check_eod: 67 callbacks suppressed [ 177.656841][ T5632] syz-executor: attempt to access beyond end of device [ 177.656841][ T5632] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.670272][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 177.670300][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 177.670311][ T5632] Call Trace: [ 177.670320][ T5632] [ 177.670328][ T5632] dump_stack_lvl+0xe8/0x150 [ 177.670363][ T5632] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 177.670397][ T5632] f2fs_write_end_bio+0xf7d/0x1310 [ 177.670438][ T5632] __submit_merged_bio+0x258/0x6a0 [ 177.670456][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.670486][ T5632] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 177.670517][ T5632] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 177.670572][ T5632] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 177.670616][ T5632] ? __lock_acquire+0x747/0x2de0 [ 177.670658][ T5632] ? __lock_acquire+0x747/0x2de0 [ 177.670683][ T5632] ? __lock_acquire+0x747/0x2de0 [ 177.670703][ T5632] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 177.670772][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.670800][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.670822][ T5632] ? __kasan_check_byte+0x12/0x40 [ 177.670862][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.670884][ T5632] ? __kasan_check_byte+0x12/0x40 [ 177.670909][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.670935][ T5632] ? lock_release+0x4b/0x3c0 [ 177.670955][ T5632] ? lock_release+0x4b/0x3c0 [ 177.671008][ T5632] ? is_bpf_text_address+0x292/0x2b0 [ 177.671027][ T5632] ? is_bpf_text_address+0x26/0x2b0 [ 177.671048][ T5632] ? kernel_text_address+0xa5/0xe0 [ 177.671072][ T5632] ? __kernel_text_address+0xd/0x30 [ 177.671093][ T5632] ? unwind_get_return_address+0x4d/0x90 [ 177.671116][ T5632] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.671139][ T5632] ? arch_stack_walk+0xfb/0x150 [ 177.671175][ T5632] ? stack_trace_save+0xa9/0x100 [ 177.671195][ T5632] ? __pfx_stack_trace_save+0x10/0x10 [ 177.671222][ T5632] ? check_path+0x21/0x40 [ 177.671251][ T5632] ? add_lock_to_list+0xc7/0x100 [ 177.671277][ T5632] ? lockdep_unlock+0x5c/0xd0 [ 177.671295][ T5632] ? __lock_acquire+0x1511/0x2de0 [ 177.671342][ T5632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 177.671366][ T5632] do_writepages+0x338/0x560 [ 177.671397][ T5632] ? do_raw_spin_unlock+0xf5/0x200 [ 177.671420][ T5632] filemap_fdatawrite+0x1e9/0x2f0 [ 177.671444][ T5632] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 177.671508][ T5632] ? do_raw_spin_unlock+0xf5/0x200 [ 177.671531][ T5632] f2fs_sync_dirty_inodes+0x471/0x970 [ 177.671570][ T5632] f2fs_write_checkpoint+0x867/0x24d0 [ 177.671627][ T5632] kill_f2fs_super+0x2df/0x700 [ 177.671653][ T5632] ? rcu_do_enqueue+0x616/0x870 [ 177.671674][ T5632] ? lockdep_hardirqs_on+0x7b/0x110 [ 177.671695][ T5632] ? __pfx_kill_f2fs_super+0x10/0x10 [ 177.671732][ T5632] ? __pfx_call_rcu+0x10/0x10 [ 177.671754][ T5632] ? shrinker_free+0x2a7/0x3b0 [ 177.671777][ T5632] deactivate_locked_super+0xbe/0x110 [ 177.671803][ T5632] cleanup_mnt+0x204/0x2a0 [ 177.671833][ T5632] task_work_run+0x1d9/0x260 [ 177.671858][ T5632] ? __pfx_task_work_run+0x10/0x10 [ 177.671890][ T5632] exit_to_user_mode_loop+0x204/0x770 [ 177.671914][ T5632] ? rcu_is_watching+0x16/0xb0 [ 177.671942][ T5632] do_syscall_64+0x32c/0x530 [ 177.671966][ T5632] ? trace_irq_disable+0x3b/0x140 [ 177.671990][ T5632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.672008][ T5632] ? clear_bhb_loop+0x70/0xc0 [ 177.672030][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.672048][ T5632] RIP: 0033:0x00007f96ed1a0d57 [ 177.672068][ T5632] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 177.672083][ T5632] RSP: 002b:00007ffdc5295318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 177.672103][ T5632] RAX: 0000000000000000 RBX: 00007f96ed236fb3 RCX: 00007f96ed1a0d57 [ 177.672115][ T5632] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc52953d0 [ 177.672126][ T5632] RBP: 00007ffdc52953d0 R08: 00007ffdc52963d0 R09: 00000000ffffffff [ 177.672138][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc5296460 [ 177.672149][ T5632] R13: 00007f96ed236fb3 R14: 000000000002b5ba R15: 00007ffdc52964a0 [ 177.672181][ T5632] [ 177.685321][ T5632] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 178.416160][ T5636] usb 1-1: USB disconnect, device number 5 [ 178.417031][ T8360] loop3: detected capacity change from 0 to 512 [ 178.477780][ T8360] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.981: corrupted in-inode xattr: invalid ea_ino [ 178.477818][ T8360] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.478124][ T8360] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.981: couldn't read orphan inode 15 (err -117) [ 178.478152][ T8360] loop3: lost filesystem error report for type 5 error -117 [ 178.479849][ T8360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.589168][ T8364] loop4: detected capacity change from 0 to 64 [ 178.913830][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.942377][ T8422] loop4: detected capacity change from 0 to 256 [ 180.068623][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.068623][ T8428] loop4: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 180.068777][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.068777][ T8428] loop4: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 180.068917][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.068917][ T8428] loop4: rw=2049, sector=1960, nr_sectors = 32 limit=256 [ 180.072741][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.072741][ T8428] loop4: rw=2049, sector=2024, nr_sectors = 32 limit=256 [ 180.072897][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.072897][ T8428] loop4: rw=2049, sector=2088, nr_sectors = 32 limit=256 [ 180.076811][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.076811][ T8428] loop4: rw=2049, sector=2152, nr_sectors = 32 limit=256 [ 180.076944][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.076944][ T8428] loop4: rw=2049, sector=2216, nr_sectors = 32 limit=256 [ 180.077150][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.077150][ T8428] loop4: rw=2049, sector=2280, nr_sectors = 32 limit=256 [ 180.077276][ T8428] syz.4.1007: attempt to access beyond end of device [ 180.077276][ T8428] loop4: rw=2049, sector=2344, nr_sectors = 32 limit=256 [ 180.707646][ T8444] device-mapper: table: 248:4: thin-pool: Error setting metadata or data device (-EINVAL) [ 180.707676][ T8444] device-mapper: ioctl: error adding target to table [ 180.708188][ T8444] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 180.718529][ T8444] device-mapper: table: 248:4: multipath: error getting device (-ENOENT) [ 180.718555][ T8444] device-mapper: ioctl: error adding target to table [ 180.795086][ T8416] loop3: detected capacity change from 0 to 40427 [ 180.810920][ T8416] F2FS-fs (loop3): invalid crc value [ 181.049173][ T8416] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.078356][ T8416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 181.163504][ T32] audit: type=1800 audit(1793888888.995:30): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="file1" dev="loop3" ino=10 res=0 errno=-22 [ 181.280988][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 181.281019][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 181.281030][ T5633] Call Trace: [ 181.281037][ T5633] [ 181.281046][ T5633] dump_stack_lvl+0xe8/0x150 [ 181.281080][ T5633] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 181.281114][ T5633] f2fs_write_end_bio+0xf7d/0x1310 [ 181.281156][ T5633] __submit_merged_bio+0x258/0x6a0 [ 181.281175][ T5633] ? rcu_is_watching+0x16/0xb0 [ 181.281206][ T5633] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 181.281238][ T5633] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 181.281293][ T5633] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 181.281337][ T5633] ? __lock_acquire+0x747/0x2de0 [ 181.281379][ T5633] ? __lock_acquire+0x747/0x2de0 [ 181.281407][ T5633] ? __lock_acquire+0x747/0x2de0 [ 181.281429][ T5633] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 181.281498][ T5633] ? rcu_is_watching+0x16/0xb0 [ 181.281527][ T5633] ? rcu_is_watching+0x16/0xb0 [ 181.281550][ T5633] ? __kasan_check_byte+0x12/0x40 [ 181.281593][ T5633] ? is_bpf_text_address+0x292/0x2b0 [ 181.281612][ T5633] ? is_bpf_text_address+0x26/0x2b0 [ 181.281635][ T5633] ? kernel_text_address+0xa5/0xe0 [ 181.281658][ T5633] ? __kernel_text_address+0xd/0x30 [ 181.281688][ T5633] ? unwind_get_return_address+0x4d/0x90 [ 181.281712][ T5633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.281735][ T5633] ? arch_stack_walk+0xfb/0x150 [ 181.281773][ T5633] ? stack_trace_save+0xa9/0x100 [ 181.281795][ T5633] ? __pfx_stack_trace_save+0x10/0x10 [ 181.281821][ T5633] ? check_path+0x21/0x40 [ 181.281851][ T5633] ? add_lock_to_list+0xc7/0x100 [ 181.281878][ T5633] ? lockdep_unlock+0x5c/0xd0 [ 181.281896][ T5633] ? __lock_acquire+0x1511/0x2de0 [ 181.281948][ T5633] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.281978][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 181.281997][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.282022][ T5633] do_writepages+0x338/0x560 [ 181.282055][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 181.282079][ T5633] filemap_fdatawrite+0x1e9/0x2f0 [ 181.282107][ T5633] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 181.282175][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 181.282198][ T5633] f2fs_sync_dirty_inodes+0x471/0x970 [ 181.282233][ T5633] f2fs_write_checkpoint+0x867/0x24d0 [ 181.282292][ T5633] kill_f2fs_super+0x2df/0x700 [ 181.282321][ T5633] ? rcu_do_enqueue+0x616/0x870 [ 181.282343][ T5633] ? lockdep_hardirqs_on+0x7b/0x110 [ 181.282365][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 181.282406][ T5633] ? __pfx_call_rcu+0x10/0x10 [ 181.282430][ T5633] ? shrinker_free+0x2a7/0x3b0 [ 181.282454][ T5633] deactivate_locked_super+0xbe/0x110 [ 181.282482][ T5633] cleanup_mnt+0x204/0x2a0 [ 181.282515][ T5633] task_work_run+0x1d9/0x260 [ 181.282542][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 181.282576][ T5633] exit_to_user_mode_loop+0x204/0x770 [ 181.282601][ T5633] ? rcu_is_watching+0x16/0xb0 [ 181.282633][ T5633] do_syscall_64+0x32c/0x530 [ 181.282653][ T5633] ? trace_irq_disable+0x3b/0x140 [ 181.282683][ T5633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.282702][ T5633] ? clear_bhb_loop+0x70/0xc0 [ 181.282726][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.282745][ T5633] RIP: 0033:0x00007f91fdba0d57 [ 181.282765][ T5633] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 181.282780][ T5633] RSP: 002b:00007ffe9629cd38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.282801][ T5633] RAX: 0000000000000000 RBX: 00007f91fdc36fb3 RCX: 00007f91fdba0d57 [ 181.282814][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9629cdf0 [ 181.282826][ T5633] RBP: 00007ffe9629cdf0 R08: 00007ffe9629ddf0 R09: 00000000ffffffff [ 181.282839][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9629de80 [ 181.282850][ T5633] R13: 00007f91fdc36fb3 R14: 000000000002c3e0 R15: 00007ffe9629dec0 [ 181.282880][ T5633] [ 181.282911][ T5633] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 181.550340][ T8472] block nbd2: server does not support multiple connections per device. [ 181.569519][ T8472] block nbd2: shutting down sockets [ 181.987025][ T8488] loop4: detected capacity change from 0 to 128 [ 182.058951][ T32] audit: type=1800 audit(1793888889.885:31): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1037" name="file1" dev="loop4" ino=46 res=0 errno=-22 [ 182.781977][ T8520] zero sized request [ 183.006216][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1057'. [ 183.006242][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 183.249857][ T8541] loop4: detected capacity change from 0 to 2048 [ 183.263581][ T8541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.291313][ T32] audit: type=1800 audit(1793888891.115:32): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1060" name=BEBEBEAEBEBEBEBEBEBEBEBEAEAEBEAEAEBEAEAEAEBEAEAEAEAEBEAEBEAEBEBEBEBEBEAEAEAEBEBEBEAEAEAEAEBEBEBEBEAEBEAEBEBEBEBEAEBEBEAEAEAEAEBEBEAEBEAEBEBEAEAEBEBE dev="loop4" ino=1368 res=0 errno=-22 [ 183.398515][ T8543] loop2: detected capacity change from 0 to 2048 [ 183.561090][ T8552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.577952][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 183.683607][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 183.683642][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 183.715932][ T32] audit: type=1800 audit(1793888891.545:33): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1062" name="dev" dev="loop2" ino=19 res=0 errno=-22 [ 183.811041][ T8552] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 183.811072][ T8552] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 183.825210][ T14] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.825257][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.825289][ T14] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.825318][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.889918][ T8552] Remounting filesystem read-only [ 183.890436][ T5632] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 183.908193][ T8562] loop4: detected capacity change from 0 to 4096 [ 183.926812][ T8562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.926835][ T8562] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.969591][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.093067][ T5636] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.109492][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.247577][ T5636] usb 4-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 184.254545][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.254569][ T5636] usb 4-1: Product: syz [ 184.254582][ T5636] usb 4-1: Manufacturer: syz [ 184.254594][ T5636] usb 4-1: SerialNumber: syz [ 184.263465][ T5652] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.386810][ T8589] ima: Unable to open file: /eas (-2) [ 184.387682][ T8587] ima: policy update failed [ 184.387950][ T32] audit: type=1802 audit(1793888892.215:34): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1083" res=0 errno=-22 [ 184.476852][ T5652] Bluetooth: hci0: unknown advertising packet type: 0xff [ 184.476889][ T5652] Bluetooth: hci0: unknown advertising packet type: 0xfa [ 184.476903][ T5652] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 184.476917][ T5652] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 184.476939][ T5652] Bluetooth: hci0: Dropping invalid advertising data [ 184.476951][ T5652] Bluetooth: hci0: Malformed LE Event: 0x02 [ 184.567914][ T5636] rtl8150 4-1:1.0: couldn't reset the device [ 184.569961][ T5636] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 184.584970][ T5636] usb 4-1: USB disconnect, device number 9 [ 184.763394][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.943794][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 184.945477][ T27] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 184.946442][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.946489][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.946522][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.946543][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.946563][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.947530][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.947551][ T27] usb 3-1: Manufacturer: syz [ 184.953578][ T27] usb 3-1: config 0 descriptor?? [ 185.283100][ T27] rc_core: IR keymap rc-hauppauge not found [ 185.283119][ T27] Registered IR keymap rc-empty [ 185.283263][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.313102][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.341658][ T8622] loop3: detected capacity change from 0 to 2048 [ 185.349730][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 185.416004][ T8622] NILFS (loop3): invalid segment: Magic number mismatch [ 185.416033][ T8622] NILFS (loop3): trying rollback from an earlier position [ 185.445410][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 185.460813][ T8622] NILFS (loop3): recovery complete [ 185.469382][ T8628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.471785][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.495577][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.515681][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.534155][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.556127][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.576226][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.605125][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.614830][ T8622] bio_check_eod: 143 callbacks suppressed [ 185.614867][ T8622] syz.3.1097: attempt to access beyond end of device [ 185.614867][ T8622] loop3: rw=8388608, sector=18446744073709551608, nr_sectors = 4 limit=2048 [ 185.614896][ T8622] NILFS (loop3): bad btree node (ino=3, blocknr=129): level = 0, flags = 0x0, nchildren = 0 [ 185.614919][ T8622] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 185.633143][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.653105][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.675250][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.695735][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 185.766590][ T27] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 185.766616][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.798955][ T27] usb 3-1: USB disconnect, device number 6 [ 185.818374][ T8635] loop4: detected capacity change from 0 to 256 [ 185.878516][ T8635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9f0f4494, utbl_chksum : 0xe619d30d) [ 185.985326][ T32] audit: type=1400 audit(1793888893.815:35): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8636 comm="syz.1.1104" [ 186.259152][ T8644] netlink: 'syz.4.1106': attribute type 12 has an invalid length. [ 186.603137][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.753758][ T10] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.754781][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.760320][ T10] usb 4-1: config 0 descriptor?? [ 186.792466][ T10] cp210x 4-1:0.0: cp210x converter detected [ 186.830371][ T8671] Format for deleting device is "id" (uint). [ 186.987309][ T5652] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 187.180082][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 187.197915][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 187.263571][ T8691] ip6gre1: entered promiscuous mode [ 187.263592][ T8691] ip6gre1: entered allmulticast mode [ 187.265819][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.266195][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.293786][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.373660][ T5784] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.399003][ T27] usb 4-1: USB disconnect, device number 10 [ 187.430714][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.442391][ T27] cp210x 4-1:0.0: device disconnected [ 187.546368][ T5784] usb 1-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 187.547927][ T5784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.547954][ T5784] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 187.547998][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.591730][ T5784] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 187.600194][ T5784] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 187.713058][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.763465][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.863110][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 187.863858][ T10] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 187.865275][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.865303][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.865359][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.868996][ T10] usb 3-1: config 0 descriptor?? [ 187.909013][ T27] usb 1-1: USB disconnect, device number 6 [ 187.940916][ T10] hub 3-1:0.0: USB hub found [ 187.955031][ T27] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 187.957364][ T27] spcp8x5 1-1:1.0: device disconnected [ 188.034128][ T8704] loop3: detected capacity change from 0 to 256 [ 188.135890][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 188.154982][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.154982][ T8708] loop3: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 188.155139][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155139][ T8708] loop3: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 188.155279][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155279][ T8708] loop3: rw=2049, sector=1960, nr_sectors = 32 limit=256 [ 188.155408][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155408][ T8708] loop3: rw=2049, sector=2024, nr_sectors = 32 limit=256 [ 188.155568][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155568][ T8708] loop3: rw=2049, sector=2088, nr_sectors = 32 limit=256 [ 188.155696][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155696][ T8708] loop3: rw=2049, sector=2152, nr_sectors = 32 limit=256 [ 188.155825][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.155825][ T8708] loop3: rw=2049, sector=2216, nr_sectors = 32 limit=256 [ 188.156087][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.156087][ T8708] loop3: rw=2049, sector=2280, nr_sectors = 32 limit=256 [ 188.156221][ T8708] syz.3.1133: attempt to access beyond end of device [ 188.156221][ T8708] loop3: rw=2049, sector=2344, nr_sectors = 32 limit=256 [ 188.183379][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.319024][ T8712] loop4: detected capacity change from 0 to 512 [ 188.322876][ T8712] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 188.322895][ T8712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.363134][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 188.363225][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.367455][ T8712] EXT4-fs (loop4): 1 truncate cleaned up [ 188.371252][ T8712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.385917][ T10] usb 3-1: USB disconnect, device number 7 [ 188.424038][ T8712] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 188.485011][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.975503][ T8734] kAFS: bad VL server IP address [ 189.104195][ T5652] Bluetooth: hci0: Zero size dump init pkt [ 189.209347][ T8744] tap0: tun_chr_ioctl cmd 21731 [ 189.345860][ T8754] loop2: detected capacity change from 0 to 256 [ 189.355124][ T998] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.388357][ T8754] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b39636, utbl_chksum : 0xe619d30d) [ 189.503262][ T998] usb 2-1: Using ep0 maxpacket: 16 [ 189.504643][ T8760] zero sized request [ 189.512635][ T998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.512685][ T998] usb 2-1: New USB device found: idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 189.514382][ T998] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 189.514405][ T998] usb 2-1: config 1 has no interface number 0 [ 189.514432][ T998] usb 2-1: config 1 interface 151 has no altsetting 0 [ 189.521772][ T998] usb 2-1: string descriptor 0 read error: -22 [ 189.521898][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.577924][ T998] gspca_main: pac7311-2.14.0 probing 093a:260e [ 189.696921][ T32] audit: type=1400 audit(1793888897.525:36): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8766 comm="syz.4.1162" name="unknown" offset=16 [ 189.728739][ T8768] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1165'. [ 189.787959][ T8774] loop3: detected capacity change from 0 to 256 [ 189.977663][ T998] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 189.977749][ T998] pac7311 2-1:1.151: probe with driver pac7311 failed with error -71 [ 189.984365][ T998] usb 2-1: USB disconnect, device number 9 [ 190.111289][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1173'. [ 190.293529][ T8798] phram: not enough arguments [ 190.711620][ T8795] loop4: detected capacity change from 0 to 32768 [ 190.722017][ T8795] (syz.4.1178,8795,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 190.722288][ T8795] (syz.4.1178,8795,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 190.742071][ T8795] JBD2: Ignoring recovery information on journal [ 190.807346][ T8795] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.975301][ T5784] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.123022][ T5784] usb 4-1: Using ep0 maxpacket: 8 [ 191.125388][ T5784] usb 4-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 191.126165][ T5784] usb 4-1: config 0 has no interfaces? [ 191.128293][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.128321][ T5784] usb 4-1: Product: syz [ 191.128334][ T5784] usb 4-1: Manufacturer: syz [ 191.128348][ T5784] usb 4-1: SerialNumber: syz [ 191.151451][ T8795] (syz.4.1178,8795,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume. [ 191.151483][ T8795] (syz.4.1178,8795,0):ocfs2_group_add:513 ERROR: status = -22 [ 191.163256][ T5784] usb 4-1: config 0 descriptor?? [ 191.318212][ T5634] ocfs2: Unmounting device (7,4) on (node local) [ 191.383347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.394718][ T5784] usb 4-1: USB disconnect, device number 11 [ 191.581150][ T8843] syz.2.1199 (8843) used greatest stack depth: 17992 bytes left [ 191.772130][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 191.798488][ T8862] loop2: detected capacity change from 0 to 512 [ 191.800238][ T8862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.800287][ T8862] EXT4-fs: Ignoring removed nobh option [ 191.872722][ T8862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.872796][ T8862] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.961954][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.017584][ T8870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.247819][ T8884] loop2: detected capacity change from 0 to 256 [ 192.276671][ T8884] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 192.668597][ T8900] loop4: detected capacity change from 0 to 512 [ 192.708033][ T8900] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.1224: corrupted in-inode xattr: invalid ea_ino [ 192.708070][ T8900] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.710062][ T8900] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1224: couldn't read orphan inode 15 (err -117) [ 192.710095][ T8900] loop4: lost filesystem error report for type 5 error -117 [ 192.727902][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.772343][ T918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.786199][ T8900] EXT4-fs (loop4): shut down requested (2) [ 192.881706][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.916730][ T8915] loop3: detected capacity change from 0 to 128 [ 192.933005][ T918] usb 1-1: Using ep0 maxpacket: 16 [ 192.937358][ T918] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.941216][ T918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.941247][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.952435][ T8915] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.996622][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.996649][ T918] usb 1-1: Product: syz [ 192.996663][ T918] usb 1-1: Manufacturer: syz [ 192.996676][ T918] usb 1-1: SerialNumber: syz [ 192.999329][ T918] usb 1-1: config 0 descriptor?? [ 193.002660][ T918] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.002693][ T918] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 193.164323][ T8920] ptp ptp0: only physical clock in use now [ 193.499691][ T27] hid_parser_main: 847 callbacks suppressed [ 193.499739][ T27] hid-generic 8005:057E:0306.0006: unknown main item tag 0x0 [ 193.545030][ T27] input: syz0 as /devices/virtual/misc/uhid/8005:057E:0306.0006/input/input15 [ 193.601121][ T27] hid-generic 8005:057E:0306.0006: input,hidraw0: HID v0.03 Gamepad [syz0] on syz0 [ 193.616409][ T918] em28xx 1-1:0.0: chip ID is em2870 [ 193.703043][ T5784] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 193.832665][ T27] usb 1-1: USB disconnect, device number 7 [ 193.846541][ T27] em28xx 1-1:0.0: Disconnecting em28xx [ 193.892568][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.906917][ T5784] usb 2-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 193.906957][ T5784] usb 2-1: no configurations [ 193.906970][ T5784] usb 2-1: can't read configurations, error -22 [ 193.952872][ T27] em28xx: Freeing device [ 193.967577][ T8929] loop4: detected capacity change from 0 to 32768 [ 193.972564][ T8929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1236 (8929) [ 194.005187][ T8929] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.005221][ T8929] BTRFS info (device loop4): using crc32c checksum algorithm [ 194.120042][ T8929] BTRFS info (device loop4): enabling ssd optimizations [ 194.120071][ T8929] BTRFS info (device loop4): turning on flush-on-commit [ 194.120087][ T8929] BTRFS info (device loop4): enabling free space tree [ 194.120102][ T8929] BTRFS info (device loop4): enabling auto defrag [ 194.120133][ T8929] BTRFS info (device loop4): use lzo compression, level 1 [ 194.120153][ T8929] BTRFS info (device loop4): max_inline set to 4096 [ 194.135930][ T8929] BTRFS critical (device loop4 state EH): emergency shutdown [ 194.182873][ T5634] BTRFS info (device loop4 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.434046][ T8945] loop2: detected capacity change from 0 to 32768 [ 194.436059][ T8945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1243 (8945) [ 194.476055][ T8945] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.476088][ T8945] BTRFS info (device loop2): using sha256 checksum algorithm [ 194.507920][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.507977][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535549][ T8970] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1245'. [ 194.537827][ T8970] gretap0: entered promiscuous mode [ 194.558820][ T8970] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1245'. [ 194.559031][ T8970] 0ªî{X¹¦: renamed from gretap0 [ 194.578772][ T8970] 0ªî{X¹¦: left promiscuous mode [ 194.578792][ T8970] 0ªî{X¹¦: entered allmulticast mode [ 194.595479][ T8970] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 194.658462][ T8945] BTRFS info (device loop2): enabling ssd optimizations [ 194.658489][ T8945] BTRFS info (device loop2): turning on async discard [ 194.658505][ T8945] BTRFS info (device loop2): enabling free space tree [ 194.896990][ T8984] tipc: Started in network mode [ 194.897021][ T8984] tipc: Node identity ac1414aa, cluster identity 4711 [ 194.897277][ T8984] tipc: New replicast peer: 172.20.20.187 [ 194.898148][ T8984] tipc: Enabled bearer , priority 10 [ 194.954436][ T5632] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.009829][ T8989] trusted_key: encrypted_key: keyword 'epdate' not recognized [ 195.255493][ T9000] jffs2: notice: (9000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.503638][ T9008] loop2: detected capacity change from 0 to 128 [ 195.592097][ T32] audit: type=1800 audit(1793888903.415:37): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1258" name="file1" dev="loop2" ino=50 res=0 errno=-22 [ 195.903359][ T918] tipc: Node number set to 2886997162 [ 196.122676][ T9021] kAFS: Invalid Command on /proc/fs/afs/cells file [ 196.388569][ T5652] Bluetooth: hci3: failed to read key size for handle 0 [ 196.388714][ T5652] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 196.547937][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 196.743313][ T9035] loop4: detected capacity change from 0 to 32768 [ 196.885045][ T5756] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.033812][ T5756] usb 4-1: Using ep0 maxpacket: 32 [ 197.034144][ T9049] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.035117][ T5756] usb 4-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 197.048145][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.048170][ T5756] usb 4-1: Product: syz [ 197.048183][ T5756] usb 4-1: Manufacturer: syz [ 197.048196][ T5756] usb 4-1: SerialNumber: syz [ 197.053291][ T5756] usb 4-1: config 0 descriptor?? [ 197.098536][ T9045] loop2: detected capacity change from 0 to 32768 [ 197.139859][ T9045] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.245045][ T9045] XFS (loop2): Ending clean mount [ 197.289518][ T9045] XFS (loop2): Quotacheck needed: Please wait. [ 197.418722][ T9065] bond0: option arp_interval: invalid value (100…) [ 197.418749][ T9065] bond0: option arp_interval: allowed values 0 - 2147483647 [ 197.467356][ T9045] XFS (loop2): Quotacheck: Done. [ 197.564921][ T5632] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.712430][ T5756] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 197.712486][ T5756] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 197.712527][ T5756] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 197.793052][ T5784] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.909379][ T5756] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 197.927315][ T5756] usb 4-1: USB disconnect, device number 12 [ 197.955126][ T5784] usb 2-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 197.956229][ T5784] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.958777][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.958800][ T5784] usb 2-1: Product: syz [ 197.958812][ T5784] usb 2-1: Manufacturer: syz [ 197.958825][ T5784] usb 2-1: SerialNumber: syz [ 198.010062][ T5784] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 198.206581][ T5784] gspca_mr97310a: reg read [21] error -71 [ 198.206678][ T5784] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 198.227824][ T5784] usb 2-1: USB disconnect, device number 12 [ 198.317774][ T9089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1292'. [ 198.783109][ T998] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 198.935665][ T998] usb 4-1: Using ep0 maxpacket: 16 [ 198.936490][ T998] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 198.937731][ T998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.937759][ T998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.937780][ T998] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.937820][ T998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.959510][ T998] usb 4-1: config 0 descriptor?? [ 199.334310][ T9107] loop2: detected capacity change from 0 to 32768 [ 199.371113][ T9107] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.373475][ T5756] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.401499][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401537][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401596][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401622][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401646][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401671][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401695][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401719][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401744][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.401769][ T998] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 199.422852][ T998] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input16 [ 199.524588][ T5756] usb 1-1: Using ep0 maxpacket: 16 [ 199.525382][ T5756] usb 1-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 199.525429][ T5756] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 199.526647][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.536224][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.539369][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.540030][ T9107] XFS (loop2): Ending clean mount [ 199.542068][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.555649][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.556884][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.561000][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.564253][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.569781][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 199.569805][ T5756] usb 1-1: SerialNumber: syz [ 199.581153][ T998] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 199.602409][ T5756] usb 1-1: config 0 descriptor?? [ 199.670952][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 199.769923][ T998] usb 4-1: USB disconnect, device number 13 [ 199.843196][ T32] audit: type=1800 audit(1793888907.665:38): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1300" name="file1" dev="loop2" ino=4422 res=0 errno=-22 [ 199.879802][ T4986] bcm5974 1-1:0.0: could not read from device [ 199.901462][ T5632] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.931131][ T4986] bcm5974 1-1:0.0: could not read from device [ 199.981108][ T5756] usb 1-1: USB disconnect, device number 8 [ 199.981527][ T9118] bcm5974 1-1:0.0: could not read from device [ 200.000919][ T4986] bcm5974 1-1:0.0: could not read from device [ 200.263180][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.513059][ T5652] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.919874][ T9142] loop2: detected capacity change from 0 to 32768 [ 200.936457][ T9142] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1309 (9142) [ 200.975776][ T9142] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 200.975812][ T9142] BTRFS info (device loop2): using crc32c checksum algorithm [ 201.091625][ T9142] BTRFS info (device loop2): enabling ssd optimizations [ 201.091653][ T9142] BTRFS info (device loop2): turning on async discard [ 201.091669][ T9142] BTRFS info (device loop2): enabling free space tree [ 201.170988][ T9142] BTRFS critical (device loop2 state EH): emergency shutdown [ 201.327186][ T5632] BTRFS info (device loop2 state EH): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 201.499347][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'. [ 201.633189][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 202.302066][ T9208] loop4: detected capacity change from 0 to 8192 [ 202.319779][ T9208] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.861292][ T9210] loop2: detected capacity change from 0 to 32768 [ 202.866907][ T9210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1336 (9210) [ 202.926221][ T9220] loop4: detected capacity change from 0 to 512 [ 202.927341][ T9210] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.927369][ T9210] BTRFS info (device loop2): using sha256 checksum algorithm [ 202.997088][ T9220] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.1341: corrupted in-inode xattr: invalid ea_ino [ 202.997124][ T9220] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.997399][ T9220] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1341: couldn't read orphan inode 15 (err -117) [ 202.997425][ T9220] loop4: lost filesystem error report for type 5 error -117 [ 203.001592][ T9220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.037794][ T9210] BTRFS info (device loop2): enabling ssd optimizations [ 203.037822][ T9210] BTRFS info (device loop2): turning on async discard [ 203.037837][ T9210] BTRFS info (device loop2): enabling free space tree [ 203.103838][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.240038][ T9210] BTRFS error: failed to open device for path jÿ•†}àÑñÀSà3KÜÜãî®=?)€6ó"ظ!z¯Î­…´/EXã@»Þ€],}`…=Á¯.bry© rmœX¤ˆŒ!– !HüJ›C” „ QEúVĪ×8u vþEÐN¢7¹M£%ˆ¢Ž)Kƒ [ 203.240038][ T9210] 8Oí´ß³‘¼…&QëÂýÌ{ÿ¯Öc4;c°R‡¹°?GÝwÿÛ/'ðüñ…ˆ!awù¾?œ’Ê`iNÊ?²»Æ›`C²nû¢s L³;é¤ ‹C–¿ãá¦æ:.†V&ÊgÞ)Ñã ÔÏ£õ/‰€Ó•da93R å 2©¿6Lÿ$dƒ;L with flags 0x1: -2 [ 203.345960][ T5632] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.360749][ T9238] loop4: detected capacity change from 0 to 164 [ 203.597976][ T32] audit: type=1400 audit(1793888911.425:39): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9239 comm="syz.3.1344" name="p" offset=79 [ 204.134039][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.286902][ T11] usb 2-1: New USB device found: idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 204.287908][ T11] usb 2-1: config 253 has an invalid interface number: 130 but max is 0 [ 204.287931][ T11] usb 2-1: config 253 has no interface number 0 [ 204.287959][ T11] usb 2-1: config 253 interface 130 has no altsetting 0 [ 204.291537][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.291560][ T11] usb 2-1: Product: syz [ 204.291574][ T11] usb 2-1: Manufacturer: syz [ 204.291587][ T11] usb 2-1: SerialNumber: syz [ 204.370352][ T9270] loop3: detected capacity change from 0 to 1024 [ 204.643219][ T9279] rnbd_client L127: Can't parse path ip: -93 [ 204.651013][ T9278] tap0: tun_chr_ioctl cmd 1074025676 [ 204.651036][ T9278] tap0: owner set to 0 [ 204.689945][ T9282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.721900][ T9283] loop4: detected capacity change from 0 to 1024 [ 204.768475][ T11] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 204.819001][ T9283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 204.819115][ T9283] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.873253][ T9283] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1363: bg 0: block 112: padding at end of block bitmap is not set [ 204.906346][ T9283] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm syz.4.1363: lblock 0 mapped to illegal pblock 0 (length 1) [ 204.940098][ T9283] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: comm syz.4.1363: lblock 0 mapped to illegal pblock 0 (length 1) [ 204.940390][ T11] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 204.940482][ T11] dib0700: firmware download failed at 7 with -22 [ 204.979213][ T11] usb 2-1: USB disconnect, device number 13 [ 205.101701][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.323237][ T9298] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1369'. [ 205.521537][ T9304] XFS (mtdblock0): Invalid superblock magic number [ 205.548768][ T5756] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.653711][ T5756] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.850408][ T32] audit: type=1400 audit(1793888913.675:40): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=9316 comm="syz.1.1375" [ 205.930728][ T5756] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 205.930998][ T9296] ceph: No mds server is up or the cluster is laggy [ 207.092240][ T9355] sctp: [Deprecated]: syz.1.1391 (pid 9355) Use of int in max_burst socket option deprecated. [ 207.092240][ T9355] Use struct sctp_assoc_value instead [ 207.134343][ T9358] netlink: 'syz.3.1393': attribute type 12 has an invalid length. [ 207.134364][ T9358] netlink: 'syz.3.1393': attribute type 29 has an invalid length. [ 207.134377][ T9358] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1393'. [ 207.134408][ T9358] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 207.134420][ T9358] netlink: 'syz.3.1393': attribute type 2 has an invalid length. [ 207.134433][ T9358] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1393'. [ 207.426477][ T9351] loop2: detected capacity change from 0 to 40427 [ 207.612406][ T9351] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.642092][ T9351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.723886][ T5632] bio_check_eod: 165 callbacks suppressed [ 207.723909][ T5632] syz-executor: attempt to access beyond end of device [ 207.723909][ T5632] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.763415][ T5632] CPU: 0 UID: 0 PID: 5632 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 207.763444][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 207.763456][ T5632] Call Trace: [ 207.763463][ T5632] [ 207.763471][ T5632] dump_stack_lvl+0xe8/0x150 [ 207.763506][ T5632] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 207.763542][ T5632] f2fs_write_end_bio+0xf7d/0x1310 [ 207.763585][ T5632] __submit_merged_bio+0x258/0x6a0 [ 207.763605][ T5632] ? rcu_is_watching+0x16/0xb0 [ 207.763637][ T5632] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 207.763670][ T5632] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 207.763724][ T5632] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 207.763770][ T5632] ? __lock_acquire+0x747/0x2de0 [ 207.763814][ T5632] ? __lock_acquire+0x747/0x2de0 [ 207.763840][ T5632] ? __lock_acquire+0x747/0x2de0 [ 207.763859][ T5632] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 207.763928][ T5632] ? rcu_is_watching+0x16/0xb0 [ 207.763956][ T5632] ? rcu_is_watching+0x16/0xb0 [ 207.763979][ T5632] ? __kasan_check_byte+0x12/0x40 [ 207.764020][ T5632] ? is_bpf_text_address+0x292/0x2b0 [ 207.764038][ T5632] ? is_bpf_text_address+0x26/0x2b0 [ 207.764059][ T5632] ? kernel_text_address+0xa5/0xe0 [ 207.764084][ T5632] ? __kernel_text_address+0xd/0x30 [ 207.764106][ T5632] ? unwind_get_return_address+0x4d/0x90 [ 207.764131][ T5632] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.764154][ T5632] ? arch_stack_walk+0xfb/0x150 [ 207.764198][ T5632] ? stack_trace_save+0xa9/0x100 [ 207.764220][ T5632] ? __pfx_stack_trace_save+0x10/0x10 [ 207.764247][ T5632] ? check_path+0x21/0x40 [ 207.764277][ T5632] ? add_lock_to_list+0xc7/0x100 [ 207.764306][ T5632] ? lockdep_unlock+0x5c/0xd0 [ 207.764324][ T5632] ? __lock_acquire+0x1511/0x2de0 [ 207.764376][ T5632] ? do_raw_spin_lock+0x12b/0x2f0 [ 207.764408][ T5632] ? do_raw_spin_unlock+0xf5/0x200 [ 207.764428][ T5632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 207.764453][ T5632] do_writepages+0x338/0x560 [ 207.764487][ T5632] ? do_raw_spin_unlock+0xf5/0x200 [ 207.764511][ T5632] filemap_fdatawrite+0x1e9/0x2f0 [ 207.764536][ T5632] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 207.764621][ T5632] ? do_raw_spin_unlock+0xf5/0x200 [ 207.764645][ T5632] f2fs_sync_dirty_inodes+0x471/0x970 [ 207.764685][ T5632] f2fs_write_checkpoint+0x867/0x24d0 [ 207.764757][ T5632] kill_f2fs_super+0x2df/0x700 [ 207.764785][ T5632] ? rcu_do_enqueue+0x616/0x870 [ 207.764808][ T5632] ? lockdep_hardirqs_on+0x7b/0x110 [ 207.764829][ T5632] ? __pfx_kill_f2fs_super+0x10/0x10 [ 207.764869][ T5632] ? __pfx_call_rcu+0x10/0x10 [ 207.764891][ T5632] ? shrinker_free+0x2a7/0x3b0 [ 207.764914][ T5632] deactivate_locked_super+0xbe/0x110 [ 207.764942][ T5632] cleanup_mnt+0x204/0x2a0 [ 207.764975][ T5632] task_work_run+0x1d9/0x260 [ 207.765001][ T5632] ? __pfx_task_work_run+0x10/0x10 [ 207.765035][ T5632] exit_to_user_mode_loop+0x204/0x770 [ 207.765060][ T5632] ? rcu_is_watching+0x16/0xb0 [ 207.765091][ T5632] do_syscall_64+0x32c/0x530 [ 207.765111][ T5632] ? trace_irq_disable+0x3b/0x140 [ 207.765135][ T5632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.765154][ T5632] ? clear_bhb_loop+0x70/0xc0 [ 207.765178][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.765203][ T5632] RIP: 0033:0x00007f96ed1a0d57 [ 207.765223][ T5632] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 207.765238][ T5632] RSP: 002b:00007ffdc5295318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 207.765258][ T5632] RAX: 0000000000000000 RBX: 00007f96ed236fb3 RCX: 00007f96ed1a0d57 [ 207.765271][ T5632] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc52953d0 [ 207.765283][ T5632] RBP: 00007ffdc52953d0 R08: 00007ffdc52963d0 R09: 00000000ffffffff [ 207.765297][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc5296460 [ 207.765310][ T5632] R13: 00007f96ed236fb3 R14: 0000000000032b23 R15: 00007ffdc52964a0 [ 207.765343][ T5632] [ 207.768452][ T5632] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 208.601519][ T9395] loop4: detected capacity change from 0 to 16 [ 208.732321][ T9395] erofs (device loop4): mounted with root inode @ nid 36. [ 208.777509][ T9395] syz.4.1409: attempt to access beyond end of device [ 208.777509][ T9395] loop4: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 208.787493][ T9395] syz.4.1409: attempt to access beyond end of device [ 208.787493][ T9395] loop4: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 208.787737][ T32] audit: type=1800 audit(1793888916.615:41): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1409" name="file1" dev="loop4" ino=86 res=0 errno=-5 [ 208.793453][ T9395] syz.4.1409: attempt to access beyond end of device [ 208.793453][ T9395] loop4: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 208.793738][ T32] audit: type=1800 audit(1793888916.615:42): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1409" name="file1" dev="loop4" ino=86 res=0 errno=-5 [ 209.194984][ T9416] ip_tables: iptables: counters copy to user failed while replacing table [ 209.400847][ T9424] loop2: detected capacity change from 0 to 2048 [ 209.414415][ T9424] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 209.434398][ T9424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.439944][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 209.724624][ T9429] loop3: detected capacity change from 0 to 256 [ 209.725475][ T9429] exfat: Deprecated parameter 'utf8' [ 209.725589][ T9429] exfat: Deprecated parameter 'namecase' [ 209.725642][ T9429] exfat: Deprecated parameter 'namecase' [ 209.775744][ T9429] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 209.938927][ T9414] loop4: detected capacity change from 0 to 40427 [ 209.941540][ T9414] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 209.941566][ T9414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 209.970145][ T9414] F2FS-fs (loop4): invalid crc value [ 210.048428][ T9414] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.079212][ T9414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.079240][ T9414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.170079][ T5634] syz-executor: attempt to access beyond end of device [ 210.170079][ T5634] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.190714][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 210.190741][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.190753][ T5634] Call Trace: [ 210.190761][ T5634] [ 210.190769][ T5634] dump_stack_lvl+0xe8/0x150 [ 210.190804][ T5634] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 210.190843][ T5634] f2fs_write_end_bio+0xf7d/0x1310 [ 210.190887][ T5634] __submit_merged_bio+0x258/0x6a0 [ 210.190905][ T5634] ? rcu_is_watching+0x16/0xb0 [ 210.190938][ T5634] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 210.190971][ T5634] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 210.191024][ T5634] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 210.191070][ T5634] ? __lock_acquire+0x747/0x2de0 [ 210.191109][ T5634] ? __lock_acquire+0x747/0x2de0 [ 210.191133][ T5634] ? __lock_acquire+0x747/0x2de0 [ 210.191153][ T5634] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 210.191219][ T5634] ? rcu_is_watching+0x16/0xb0 [ 210.191245][ T5634] ? rcu_is_watching+0x16/0xb0 [ 210.191267][ T5634] ? __kasan_check_byte+0x12/0x40 [ 210.191305][ T5634] ? is_bpf_text_address+0x292/0x2b0 [ 210.191324][ T5634] ? is_bpf_text_address+0x26/0x2b0 [ 210.191346][ T5634] ? kernel_text_address+0xa5/0xe0 [ 210.191370][ T5634] ? __kernel_text_address+0xd/0x30 [ 210.191392][ T5634] ? unwind_get_return_address+0x4d/0x90 [ 210.191418][ T5634] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.191441][ T5634] ? arch_stack_walk+0xfb/0x150 [ 210.191479][ T5634] ? stack_trace_save+0xa9/0x100 [ 210.191498][ T5634] ? __pfx_stack_trace_save+0x10/0x10 [ 210.191523][ T5634] ? check_path+0x21/0x40 [ 210.191551][ T5634] ? add_lock_to_list+0xc7/0x100 [ 210.191579][ T5634] ? lockdep_unlock+0x5c/0xd0 [ 210.191597][ T5634] ? __lock_acquire+0x1511/0x2de0 [ 210.191657][ T5634] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.191688][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 210.191707][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.191732][ T5634] do_writepages+0x338/0x560 [ 210.191765][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 210.191790][ T5634] filemap_fdatawrite+0x1e9/0x2f0 [ 210.191817][ T5634] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.191886][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 210.191910][ T5634] f2fs_sync_dirty_inodes+0x471/0x970 [ 210.191946][ T5634] f2fs_write_checkpoint+0x867/0x24d0 [ 210.192008][ T5634] kill_f2fs_super+0x2df/0x700 [ 210.192037][ T5634] ? rcu_do_enqueue+0x616/0x870 [ 210.192059][ T5634] ? lockdep_hardirqs_on+0x7b/0x110 [ 210.192080][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.192118][ T5634] ? __pfx_call_rcu+0x10/0x10 [ 210.192141][ T5634] ? shrinker_free+0x2a7/0x3b0 [ 210.192165][ T5634] deactivate_locked_super+0xbe/0x110 [ 210.192192][ T5634] cleanup_mnt+0x204/0x2a0 [ 210.192225][ T5634] task_work_run+0x1d9/0x260 [ 210.192252][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 210.192286][ T5634] exit_to_user_mode_loop+0x204/0x770 [ 210.192311][ T5634] ? rcu_is_watching+0x16/0xb0 [ 210.192341][ T5634] do_syscall_64+0x32c/0x530 [ 210.192361][ T5634] ? trace_irq_disable+0x3b/0x140 [ 210.192384][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.192403][ T5634] ? clear_bhb_loop+0x70/0xc0 [ 210.192426][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.192444][ T5634] RIP: 0033:0x00007fc2e33a0d57 [ 210.192464][ T5634] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 210.192480][ T5634] RSP: 002b:00007fffdab481c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.192501][ T5634] RAX: 0000000000000000 RBX: 00007fc2e3436fb3 RCX: 00007fc2e33a0d57 [ 210.192514][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdab48280 [ 210.192526][ T5634] RBP: 00007fffdab48280 R08: 00007fffdab49280 R09: 00000000ffffffff [ 210.192539][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdab49310 [ 210.192550][ T5634] R13: 00007fc2e3436fb3 R14: 00000000000334bc R15: 00007fffdab49350 [ 210.192583][ T5634] [ 210.207551][ T5634] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 210.219784][ T9440] overlayfs: invalid origin (0000) [ 210.530098][ T9446] loop2: detected capacity change from 0 to 512 [ 210.576070][ T9446] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.635404][ T9446] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #2: comm syz.2.1433: Directory hole found for htree leaf block 0 [ 210.645912][ T9446] EXT4-fs (loop2): Remounting filesystem read-only [ 210.762209][ T5632] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 210.871463][ T9457] tipc: New replicast peer: 127.0.0.1 [ 210.871932][ T9457] tipc: Enabled bearer , priority 10 [ 210.872823][ T9457] tipc: Disabling bearer [ 211.106388][ T9464] loop2: detected capacity change from 0 to 2048 [ 211.149387][ T9464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 211.354912][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 212.079469][ T9500] loop4: detected capacity change from 0 to 2048 [ 212.134168][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 212.134206][ T9502] netlink: 'syz.1.1455': attribute type 30 has an invalid length. [ 212.161860][ T9500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.194044][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 212.194080][ T9506] netlink: 'syz.1.1455': attribute type 30 has an invalid length. [ 212.243084][ T45] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.243129][ T45] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.243160][ T45] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.243190][ T45] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.313526][ T9507] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 212.377783][ T9507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 212 with error 28 [ 212.377818][ T9507] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.377818][ T9507] [ 212.377832][ T9507] EXT4-fs (loop4): Total free blocks count 0 [ 212.377845][ T9507] EXT4-fs (loop4): Free/Dirty block details [ 212.377943][ T9507] EXT4-fs (loop4): free_blocks=4096 [ 212.377986][ T9507] EXT4-fs (loop4): dirty_blocks=320 [ 212.377999][ T9507] EXT4-fs (loop4): Block reservation details [ 212.378010][ T9507] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 212.623275][ T45] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 212.732415][ T5634] EXT4-fs warning (device loop4): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 212.970001][ T9526] loop3: detected capacity change from 0 to 256 [ 213.022436][ T9527] loop4: detected capacity change from 0 to 1024 [ 213.085450][ T9527] EXT4-fs: Ignoring removed orlov option [ 213.118835][ T9527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.301626][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.650787][ T4952] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 213.893892][ T9567] loop2: detected capacity change from 0 to 256 [ 213.998957][ T4952] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 214.129330][ T9572] jffs2: notice: (9572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.272269][ T9581] loop2: detected capacity change from 0 to 512 [ 214.302751][ T9581] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 214.302783][ T9581] FAT-fs (loop2): Filesystem has been set read-only [ 214.464839][ T9588] loop2: detected capacity change from 0 to 512 [ 214.491048][ T9588] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1489: corrupted in-inode xattr: e_value out of bounds [ 214.491083][ T9588] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.506480][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 214.506507][ C1] EXT4-fs (loop2): initial error at time 1793888922: ext4_iget_extra_inode:6027: inode 15 [ 214.506538][ C1] EXT4-fs (loop2): last error at time 1793888922: ext4_iget_extra_inode:6027: inode 15 [ 214.550506][ T9588] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1489: couldn't read orphan inode 15 (err -117) [ 214.550544][ T9588] loop2: lost filesystem error report for type 5 error -117 [ 214.565861][ T9588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.662663][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.130965][ T9619] ip_tables: iptables: counters copy to user failed while replacing table [ 215.137459][ T9619] ip_tables: iptables: counters copy to user failed while replacing table [ 215.239804][ T9623] loop3: detected capacity change from 0 to 2048 [ 215.259460][ T9623] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 215.274984][ T9623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.995479][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.215272][ T9669] loop3: detected capacity change from 0 to 4096 [ 216.239772][ T9669] ntfs3(loop3): Failed to load $MFT (-22). [ 216.824675][ T9695] loop3: detected capacity change from 0 to 512 [ 216.828454][ T9695] EXT4-fs: Ignoring removed bh option [ 216.869274][ T9695] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1535: inode #13: comm syz.3.1535: iget: illegal inode # [ 216.869308][ T9695] loop3: lost filesystem error report for type 5 error -117 [ 216.871688][ T9695] EXT4-fs (loop3): Remounting filesystem read-only [ 216.903146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.924219][ T9695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.053896][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.316592][ T9708] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1541'. [ 217.322363][ T9708] gretap0: entered promiscuous mode [ 217.380038][ T9708] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1541'. [ 217.380111][ T9708] 0ªî{X¹¦: renamed from gretap0 [ 217.400580][ T9708] 0ªî{X¹¦: left promiscuous mode [ 217.400594][ T9708] 0ªî{X¹¦: entered allmulticast mode [ 217.408521][ T9708] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 217.782604][ T9725] loop2: detected capacity change from 0 to 512 [ 217.829857][ T9725] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1549: corrupted in-inode xattr: invalid ea_ino [ 217.829894][ T9725] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.832399][ T9725] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1549: couldn't read orphan inode 15 (err -117) [ 217.832429][ T9725] loop2: lost filesystem error report for type 5 error -117 [ 217.875706][ T9725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.983749][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.409068][ T9741] loop2: detected capacity change from 0 to 2048 [ 218.501477][ T9746] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.567736][ T9746] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 218.567766][ T9746] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 218.585262][ T9746] Remounting filesystem read-only [ 218.986730][ T9748] loop3: detected capacity change from 0 to 32768 [ 218.994067][ T9748] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 218.994087][ T9748] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 219.074503][ T9748] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 219.089608][ T918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 219.089629][ T918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 219.168616][ T9760] loop2: detected capacity change from 0 to 16 [ 219.321735][ T918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 232ms [ 219.332269][ T918] gfs2: fsid=syz:syz.0: jid=0: Done [ 219.334896][ T9748] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 219.364622][ T9760] erofs (device loop2): mounted with root inode @ nid 36. [ 219.824147][ T9777] ip_tables: iptables: counters copy to user failed while replacing table [ 219.884354][ T9748] gfs2: fsid=syz:syz.0: found 1 quota changes [ 220.460035][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 220.460063][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 221.129684][ T9812] loop5: detected capacity change from 0 to 7 [ 221.144280][ T5640] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.156127][ T5640] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.156674][ T5640] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.157142][ T5640] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.187931][ T5640] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.366584][ T9827] random: crng reseeded on system resumption [ 221.563057][ T5784] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.593060][ T918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.682821][ T32] audit: type=1400 audit(1793888929.505:43): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9842 comm="syz.3.1599" name="p" offset=48 [ 221.723039][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 221.723739][ T5784] usb 3-1: New USB device found: idVendor=044e, idProduct=120c, bcdDevice=0.00 [ 221.724997][ T5784] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 221.725040][ T5784] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.725065][ T5784] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 221.725089][ T5784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.725121][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.730114][ T5784] usb 3-1: config 0 descriptor?? [ 221.760754][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 221.772683][ T918] usb 2-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5 [ 221.825420][ T918] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 221.825445][ T918] usb 2-1: config 0 has no interface number 0 [ 221.825483][ T918] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.825505][ T918] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 221.827194][ T918] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 221.827217][ T918] usb 2-1: Manufacturer: syz [ 221.827231][ T918] usb 2-1: SerialNumber: syz [ 221.849107][ T918] usb 2-1: config 0 descriptor?? [ 222.257499][ T9865] loop4: detected capacity change from 0 to 512 [ 222.277349][ T9865] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 222.291973][ T9865] EXT4-fs (loop4): invalid journal inode [ 222.292110][ T9865] EXT4-fs (loop4): can't get journal size [ 222.329593][ T9865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 222.361532][ T9865] System zones: 1-12, 13-13 [ 222.406724][ T9865] EXT4-fs (loop4): 1 truncate cleaned up [ 222.442434][ T9865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.472679][ T9865] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 222.474051][ T32] audit: type=1400 audit(1793888930.305:44): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9870 comm="syz.3.1612" name="p" offset=69 [ 222.502195][ T918] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 222.519842][ T918] usb 2-1: USB disconnect, device number 14 [ 222.559817][ T5784] hid-alps 0003:044E:120C.0008: failed read register (-71) [ 222.559906][ T5784] hid-alps 0003:044E:120C.0008: failed T4_PRM_ID_CONFIG_3 (-71) [ 222.562682][ T5784] hid-alps 0003:044E:120C.0008: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 222.609771][ T5784] usb 3-1: USB disconnect, device number 8 [ 222.688281][ T9875] fido_id[9875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 222.730224][ T4952] Bluetooth: hci0: Zero size dump init pkt [ 222.836781][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.047719][ T9885] loop3: detected capacity change from 0 to 128 [ 223.063503][ T9885] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.063538][ T9885] hpfs: filesystem error: improperly stopped [ 223.063551][ T9885] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.063564][ T9885] hpfs: You really don't want any checks? You are crazy... [ 223.063577][ T9885] hpfs: Code page index out of array [ 223.063584][ T9885] hpfs: code page support is disabled [ 223.064758][ T9885] hpfs: hpfs_map_4sectors(): unaligned read [ 223.064825][ T9885] hpfs: hpfs_map_4sectors(): unaligned read [ 223.064834][ T9885] hpfs: filesystem error: unable to find root dir [ 223.495753][ T918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.497748][ T9905] phram: illegal device length [ 223.636904][ T9910] loop2: detected capacity change from 0 to 128 [ 223.651905][ T9910] FAT-fs (loop2): Directory bread(block 1048) failed [ 223.651937][ T9910] FAT-fs (loop2): Directory bread(block 1049) failed [ 223.651959][ T9910] FAT-fs (loop2): Directory bread(block 1050) failed [ 223.651981][ T9910] FAT-fs (loop2): Directory bread(block 1051) failed [ 223.652002][ T9910] FAT-fs (loop2): Directory bread(block 1052) failed [ 223.652024][ T9910] FAT-fs (loop2): Directory bread(block 1053) failed [ 223.652044][ T9910] FAT-fs (loop2): Directory bread(block 1054) failed [ 223.652998][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 223.659168][ T9910] FAT-fs (loop2): Directory bread(block 1055) failed [ 223.667334][ T918] usb 2-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 223.701193][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.701246][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.711780][ T9910] FAT-fs (loop2): FAT read failed (blocknr 128) [ 223.731575][ T918] usb 2-1: config 0 descriptor?? [ 223.776167][ T918] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 224.012817][ T4986] bcm5974 2-1:0.0: could not read from device [ 224.021345][ T4986] bcm5974 2-1:0.0: could not read from device [ 224.033060][ T4986] bcm5974 2-1:0.0: could not read from device [ 224.036533][ T918] usb 2-1: USB disconnect, device number 15 [ 224.039182][ T4986] bcm5974 2-1:0.0: could not read from device [ 224.039654][ T4986] bcm5974 2-1:0.0: could not read from device [ 224.226527][ T9912] loop3: detected capacity change from 0 to 32768 [ 224.231803][ T9912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1632 (9912) [ 224.257898][ T9912] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.257931][ T9912] BTRFS info (device loop3): using crc32c checksum algorithm [ 224.337885][ T9912] BTRFS info (device loop3): enabling ssd optimizations [ 224.337912][ T9912] BTRFS info (device loop3): turning on flush-on-commit [ 224.337928][ T9912] BTRFS info (device loop3): enabling free space tree [ 224.337946][ T9912] BTRFS info (device loop3): enabling auto defrag [ 224.337964][ T9912] BTRFS info (device loop3): use lzo compression, level 1 [ 224.337983][ T9912] BTRFS info (device loop3): max_inline set to 4096 [ 224.514342][ T9942] fuse: Bad value for 'fd' [ 224.757199][ T9914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.757225][ T9914] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 224.757353][ T9915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.757654][ T9915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.757843][ T9915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.758014][ T9915] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.853089][ T9914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.853116][ T9914] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.889332][ T9914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.889355][ T9914] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.908520][ T9914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.908541][ T9914] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.927258][ T9914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.927281][ T9914] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 224.963480][ T9952] ./file0: Can't lookup blockdev [ 224.999732][ T5633] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.335740][ T9963] loop9: detected capacity change from 0 to 7 [ 225.344179][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.344270][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 225.353970][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.354042][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 225.358287][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.358358][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 225.358542][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.358599][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 225.359242][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.359301][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 225.359436][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.359626][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.359703][ T9963] ldm_validate_partition_table(): Disk read failed. [ 225.359823][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.360035][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.360217][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 225.360442][ T9963] Dev loop9: unable to read RDB block 0 [ 225.361078][ T9963] loop9: unable to read partition table [ 225.361274][ T9963] loop9: partition table beyond EOD, truncated [ 225.361303][ T9963] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 225.735868][ T32] audit: type=1326 audit(1793888933.555:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c10b9fb19 code=0x7ffc0000 [ 225.735917][ T32] audit: type=1326 audit(1793888933.565:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c10b9fb19 code=0x7ffc0000 [ 225.753136][ T32] audit: type=1326 audit(1793888933.575:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c10b9fb19 code=0x7ffc0000 [ 225.753189][ T32] audit: type=1326 audit(1793888933.575:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c10b9fb19 code=0x7ffc0000 [ 225.761240][ T32] audit: type=1326 audit(1793888933.585:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c10b9fb19 code=0x7ffc0000 [ 225.761291][ T32] audit: type=1326 audit(1793888933.585:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c10b9f882 code=0x7ffc0000 [ 225.788369][ T32] audit: type=1326 audit(1793888933.615:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c10b6034e code=0x7ffc0000 [ 225.838658][ T32] audit: type=1326 audit(1793888933.665:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.0.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c10b9f947 code=0x7ffc0000 [ 226.205297][ T9987] loop2: detected capacity change from 0 to 256 [ 226.213455][ T9987] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000000001777777777777777777777aË׃ô£¬¤ä¢¬ZuǨfõÄÇé ~Ê]¶y'PÜzƒ<Ó\øwïä@ï‡qj±$1¦Í½þÛ› Ö|¶Á³™Og‚C-²i¸ÁGV¥‚KrU$«#6Ñ48…˜^D Ü»°é6úêEÖh^\[ä&§Љ1çQܦ¬¤ëóoãÔ&ûV¯-•Ràÿÿÿÿÿÿÿÿ' [ 226.599064][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 226.687566][T10002] loop2: detected capacity change from 0 to 512 [ 226.721989][T10002] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1663: iget: bad i_size value: 38620345925642 [ 226.722013][T10002] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.722990][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 226.723009][ C0] EXT4-fs (loop2): initial error at time 1793888934: ext4_orphan_get:1404: inode 15 [ 226.723037][ C0] EXT4-fs (loop2): last error at time 1793888934: ext4_orphan_get:1404: inode 15 [ 226.724960][T10002] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1663: couldn't read orphan inode 15 (err -117) [ 226.724996][T10002] loop2: lost filesystem error report for type 5 error -117 [ 226.765422][T10002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.800257][ T32] kauditd_printk_skb: 16 callbacks suppressed [ 226.800275][ T32] audit: type=1800 audit(1793888934.625:69): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1663" name="file1" dev="loop2" ino=18 res=0 errno=-22 [ 226.884653][T10002] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1663: bg 0: block 5: invalid block bitmap [ 226.989105][T10002] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 226.989140][T10002] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.989140][T10002] [ 226.989155][T10002] EXT4-fs (loop2): Total free blocks count 0 [ 226.989167][T10002] EXT4-fs (loop2): Free/Dirty block details [ 226.989210][T10002] EXT4-fs (loop2): free_blocks=0 [ 226.989246][T10002] EXT4-fs (loop2): dirty_blocks=4 [ 226.989258][T10002] EXT4-fs (loop2): Block reservation details [ 226.989269][T10002] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 227.131244][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.294300][ T5763] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.444969][ T5763] usb 4-1: Using ep0 maxpacket: 32 [ 227.448537][ T5763] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 227.451619][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.458815][ T5763] usb 4-1: config 0 descriptor?? [ 227.567108][T10036] loop4: detected capacity change from 0 to 512 [ 227.578200][ T32] audit: type=1326 audit(1793888935.405:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.582023][ T32] audit: type=1326 audit(1793888935.405:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.589198][ T32] audit: type=1326 audit(1793888935.415:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.589269][ T32] audit: type=1326 audit(1793888935.415:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.594141][ T32] audit: type=1326 audit(1793888935.415:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.594189][ T32] audit: type=1326 audit(1793888935.415:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.594250][ T32] audit: type=1326 audit(1793888935.425:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.595861][ T32] audit: type=1326 audit(1793888935.425:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.595905][ T32] audit: type=1326 audit(1793888935.425:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ed19fb19 code=0x7ffc0000 [ 227.607500][T10036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e01c, mo2=0002] [ 227.607641][T10036] System zones: 1-12 [ 227.610944][T10036] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.1678: corrupted in-inode xattr: e_value out of bounds [ 227.610996][T10036] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.612021][T10036] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1678: couldn't read orphan inode 15 (err -117) [ 227.612049][T10036] loop4: lost filesystem error report for type 5 error -117 [ 227.622192][T10036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.715894][ T5763] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 227.737979][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.747657][ T5763] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 227.747711][ T5763] usb 4-1: media controller created [ 227.817905][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.937953][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.026825][ T5763] az6027: usb out operation failed. (-71) [ 228.039184][ T5763] az6027: usb out operation failed. (-71) [ 228.039199][ T5763] stb0899_attach: Driver disabled by Kconfig [ 228.039207][ T5763] az6027: no front-end attached [ 228.039207][ T5763] [ 228.040171][ T5763] az6027: usb out operation failed. (-71) [ 228.040197][ T5763] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 228.055178][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 228.091810][ T5763] dvb-usb: schedule remote query interval to 400 msecs. [ 228.091836][ T5763] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 228.110400][ T5763] usb 4-1: USB disconnect, device number 14 [ 228.125727][T10049] loop4: detected capacity change from 0 to 512 [ 228.188036][T10049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.260471][ T5763] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 228.437398][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.706801][T10072] loop2: detected capacity change from 0 to 1024 [ 228.707779][T10072] EXT4-fs: Ignoring removed bh option [ 228.747548][T10072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.816174][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.989835][T10085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 229.072824][T10086] device-mapper: ioctl: device has been removed from the dev hash table. [ 229.193108][ T5784] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.365244][ T5784] usb 3-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 229.366615][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.366665][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.423078][ T918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.523718][ T5784] rtsx_usb 3-1:1.0: probe with driver rtsx_usb failed with error -22 [ 229.603059][ T918] usb 4-1: Using ep0 maxpacket: 8 [ 229.606885][ T918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.606935][ T918] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 229.606968][ T918] usb 4-1: no configurations [ 229.606980][ T918] usb 4-1: can't read configurations, error -22 [ 229.667283][ T5763] usb 3-1: USB disconnect, device number 9 [ 230.259717][T10133] loop2: detected capacity change from 0 to 512 [ 230.270133][T10133] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.270155][T10133] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 230.270166][T10133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.280141][T10133] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1722: bad orphan inode 131083 [ 230.280171][T10133] loop2: lost filesystem error report for type 5 error -117 [ 230.282976][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 230.282998][ C0] EXT4-fs (loop2): initial error at time 1793888938: ext4_orphan_get:1430 [ 230.283021][ C0] EXT4-fs (loop2): last error at time 1793888938: ext4_orphan_get:1430 [ 230.288207][T10133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.439826][T10131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.748597][T10156] Format for deleting device is "id" (uint). [ 230.906471][T10164] loop4: detected capacity change from 0 to 16 [ 230.945889][T10164] erofs (device loop4): mounted with root inode @ nid 36. [ 230.995176][T10164] erofs (device loop4): bogus dirent @ nid 36 [ 231.028131][T10150] loop3: detected capacity change from 0 to 32768 [ 231.030897][T10150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1728 (10150) [ 231.071483][T10150] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.071516][T10150] BTRFS info (device loop3): using crc32c checksum algorithm [ 231.216232][T10150] BTRFS info (device loop3): enabling ssd optimizations [ 231.216262][T10150] BTRFS info (device loop3): turning on flush-on-commit [ 231.216278][T10150] BTRFS info (device loop3): enabling free space tree [ 231.216293][T10150] BTRFS info (device loop3): enabling auto defrag [ 231.216310][T10150] BTRFS info (device loop3): use lzo compression, level 1 [ 231.320401][T10184] macvlan2: entered promiscuous mode [ 231.320425][T10184] bridge0: entered promiscuous mode [ 231.388551][T10150] BTRFS critical (device loop3 state EH): emergency shutdown [ 231.536805][ T5633] BTRFS info (device loop3 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.392583][T10222] sd 0:0:1:0: PR command failed: 1026 [ 232.392629][T10222] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 232.392749][T10222] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 232.686465][T10230] loop3: detected capacity change from 0 to 1024 [ 232.734240][T10213] loop2: detected capacity change from 0 to 32768 [ 232.769246][T10230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 232.769353][T10230] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.801204][T10213] JBD2: Ignoring recovery information on journal [ 232.826071][T10230] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1757: bg 0: block 112: padding at end of block bitmap is not set [ 232.852518][T10230] EXT4-fs (loop3): Remounting filesystem read-only [ 232.952008][T10213] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 233.011939][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.479476][ T5632] ocfs2: Unmounting device (7,2) on (node local) [ 233.605209][ T32] kauditd_printk_skb: 6 callbacks suppressed [ 233.605227][ T32] audit: type=1400 audit(1793888941.435:85): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10267 comm="syz.1.1772" name="unknown" offset=28 [ 234.005653][T10286] netlink: 'syz.0.1781': attribute type 5 has an invalid length. [ 234.088332][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 234.269518][T10263] loop4: detected capacity change from 0 to 32768 [ 234.302732][T10303] input: syz1 as /devices/virtual/input/input24 [ 234.322507][T10263] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.421656][T10263] XFS (loop4): Ending clean mount [ 234.459226][T10316] loop3: detected capacity change from 0 to 64 [ 234.493053][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 234.496561][T10316] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 234.503705][T10316] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 234.518799][T10316] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 234.643250][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 234.643949][ T10] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 234.645042][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.645086][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.645111][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.645129][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.645149][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.646137][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.646159][ T10] usb 2-1: Manufacturer: syz [ 234.651469][ T10] usb 2-1: config 0 descriptor?? [ 234.686450][T10263] XFS (loop4): Quotacheck needed: Please wait. [ 234.778873][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 234.905814][T10263] XFS (loop4): Quotacheck: Done. [ 234.942698][ T5634] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.056379][ T10] rc_core: IR keymap rc-hauppauge not found [ 235.056398][ T10] Registered IR keymap rc-empty [ 235.056535][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.077415][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.102100][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 235.115984][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 235.155687][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.173334][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.195539][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.213311][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.234406][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.253165][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.273800][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.293154][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.313362][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.333153][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.357196][ T10] mceusb 2-1:0.0: Registered 42 with mce emulator interface version 1 [ 235.357222][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.459002][ T10] usb 2-1: USB disconnect, device number 16 [ 235.710917][T10347] loop3: detected capacity change from 0 to 2048 [ 235.770149][T10347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.833954][T10347] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 235.857466][T10347] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 235.857486][T10347] EXT4-fs (loop3): This should not happen!! Data will be lost [ 235.857486][T10347] [ 235.857494][T10347] EXT4-fs (loop3): Total free blocks count 0 [ 235.857501][T10347] EXT4-fs (loop3): Free/Dirty block details [ 235.857509][T10347] EXT4-fs (loop3): free_blocks=4096 [ 235.857517][T10347] EXT4-fs (loop3): dirty_blocks=48 [ 235.857523][T10347] EXT4-fs (loop3): Block reservation details [ 235.857530][T10347] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 236.002010][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.088636][T10362] HugeTLB: PID 10362 killed due to inadequate hugepage pool [ 236.158454][T10366] batman_adv: batadv0: Adding interface: ipvlan2 [ 236.158472][T10366] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.158499][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.158513][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.158527][T10366] batman_adv: batadv0: Interface activated: ipvlan2 [ 236.347086][ T32] audit: type=1326 audit(1793888944.175:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.347229][ T32] audit: type=1326 audit(1793888944.175:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.367083][ T32] audit: type=1326 audit(1793888944.175:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.367144][ T32] audit: type=1326 audit(1793888944.175:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.367327][ T32] audit: type=1326 audit(1793888944.175:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.368419][ T32] audit: type=1326 audit(1793888944.175:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.382837][ T32] audit: type=1326 audit(1793888944.215:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.391445][ T32] audit: type=1326 audit(1793888944.215:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.391521][ T32] audit: type=1326 audit(1793888944.215:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10376 comm="syz.3.1814" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fdb9fb19 code=0x7ffc0000 [ 236.948390][T10387] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.951895][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1823'. [ 237.058514][T10398] loop3: detected capacity change from 0 to 512 [ 237.075273][T10398] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 237.075292][T10398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.107706][T10398] EXT4-fs (loop3): 1 truncate cleaned up [ 237.121378][T10398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.207521][T10398] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1825: Logical block already allocated [ 237.225896][T10398] EXT4-fs (loop3): Remounting filesystem read-only [ 237.371460][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.395728][T10408] loop2: detected capacity change from 0 to 8 [ 237.439993][T10408] SQUASHFS error: Unable to read inode 0x24 [ 237.585642][T10413] syz.2.1831 uses obsolete (PF_INET,SOCK_PACKET) [ 237.649884][T10413] netlink: 'syz.2.1831': attribute type 8 has an invalid length. [ 238.199797][T10424] loop3: detected capacity change from 0 to 512 [ 238.227602][T10396] loop4: detected capacity change from 0 to 40427 [ 238.229376][T10424] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1835: iget: bad i_size value: 38620345925642 [ 238.229408][T10424] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.230827][T10424] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1835: couldn't read orphan inode 15 (err -117) [ 238.230858][T10424] loop3: lost filesystem error report for type 5 error -117 [ 238.293288][T10396] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 238.293314][T10396] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 238.300591][T10396] F2FS-fs (loop4): invalid crc value [ 238.331821][T10424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.374992][T10424] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1835: bg 0: block 5: invalid block bitmap [ 238.377556][T10424] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 238.377584][T10424] EXT4-fs (loop3): This should not happen!! Data will be lost [ 238.377584][T10424] [ 238.377694][T10424] EXT4-fs (loop3): Total free blocks count 0 [ 238.377708][T10424] EXT4-fs (loop3): Free/Dirty block details [ 238.377721][T10424] EXT4-fs (loop3): free_blocks=0 [ 238.377734][T10424] EXT4-fs (loop3): dirty_blocks=4 [ 238.377745][T10424] EXT4-fs (loop3): Block reservation details [ 238.377756][T10424] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 238.629092][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.762521][T10396] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.836136][T10432] loop3: detected capacity change from 0 to 512 [ 238.875477][T10432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 238.875596][T10432] System zones: 1-12 [ 238.879649][T10396] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 238.879677][T10396] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.886388][T10432] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.1836: missing EA_INODE flag [ 238.886416][T10432] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 238.903587][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 238.903612][ C1] EXT4-fs (loop3): initial error at time 1793888946: ext4_xattr_inode_iget:437: inode 12 [ 238.903640][ C1] EXT4-fs (loop3): last error at time 1793888946: ext4_xattr_inode_iget:437: inode 12 [ 238.986034][T10432] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1836: error while reading EA inode 12 err=-117 [ 238.986070][T10432] loop3: lost filesystem error report for type 5 error -117 [ 239.023904][T10432] EXT4-fs (loop3): 1 orphan inode deleted [ 239.024836][T10432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.098857][ T5634] syz-executor: attempt to access beyond end of device [ 239.098857][ T5634] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 239.124511][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 239.124539][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 239.124562][ T5634] Call Trace: [ 239.124570][ T5634] [ 239.124584][ T5634] dump_stack_lvl+0xe8/0x150 [ 239.124619][ T5634] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 239.124654][ T5634] f2fs_write_end_bio+0xf7d/0x1310 [ 239.124692][ T5634] __submit_merged_bio+0x258/0x6a0 [ 239.124709][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.124739][ T5634] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 239.124770][ T5634] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 239.124817][ T5634] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 239.124859][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.124902][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.124928][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.124949][ T5634] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 239.125009][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.125047][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.125070][ T5634] ? __kasan_check_byte+0x12/0x40 [ 239.125097][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.125123][ T5634] ? lock_release+0x4b/0x3c0 [ 239.125144][ T5634] ? lock_release+0x4b/0x3c0 [ 239.125173][ T5634] ? is_bpf_text_address+0x292/0x2b0 [ 239.125193][ T5634] ? is_bpf_text_address+0x26/0x2b0 [ 239.125216][ T5634] ? kernel_text_address+0xa5/0xe0 [ 239.125241][ T5634] ? __kernel_text_address+0xd/0x30 [ 239.125263][ T5634] ? unwind_get_return_address+0x4d/0x90 [ 239.125288][ T5634] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.125312][ T5634] ? arch_stack_walk+0xfb/0x150 [ 239.125349][ T5634] ? stack_trace_save+0xa9/0x100 [ 239.125372][ T5634] ? __pfx_stack_trace_save+0x10/0x10 [ 239.125401][ T5634] ? check_path+0x21/0x40 [ 239.125431][ T5634] ? add_lock_to_list+0xc7/0x100 [ 239.125459][ T5634] ? lockdep_unlock+0x5c/0xd0 [ 239.125477][ T5634] ? __lock_acquire+0x1511/0x2de0 [ 239.125529][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.125554][ T5634] do_writepages+0x338/0x560 [ 239.125594][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 239.125618][ T5634] filemap_fdatawrite+0x1e9/0x2f0 [ 239.125645][ T5634] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 239.125714][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 239.125738][ T5634] f2fs_sync_dirty_inodes+0x471/0x970 [ 239.125780][ T5634] f2fs_write_checkpoint+0x867/0x24d0 [ 239.125846][ T5634] kill_f2fs_super+0x2df/0x700 [ 239.125874][ T5634] ? rcu_do_enqueue+0x616/0x870 [ 239.125897][ T5634] ? lockdep_hardirqs_on+0x7b/0x110 [ 239.125918][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 239.125959][ T5634] ? __pfx_call_rcu+0x10/0x10 [ 239.125983][ T5634] ? shrinker_free+0x2a7/0x3b0 [ 239.126007][ T5634] deactivate_locked_super+0xbe/0x110 [ 239.126035][ T5634] cleanup_mnt+0x204/0x2a0 [ 239.126066][ T5634] task_work_run+0x1d9/0x260 [ 239.126092][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 239.126125][ T5634] exit_to_user_mode_loop+0x204/0x770 [ 239.126150][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.126180][ T5634] do_syscall_64+0x32c/0x530 [ 239.126195][ T5634] ? trace_irq_disable+0x3b/0x140 [ 239.126218][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.126237][ T5634] ? clear_bhb_loop+0x70/0xc0 [ 239.126261][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.126279][ T5634] RIP: 0033:0x00007fc2e33a0d57 [ 239.126298][ T5634] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 239.126314][ T5634] RSP: 002b:00007fffdab481c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 239.126334][ T5634] RAX: 0000000000000000 RBX: 00007fc2e3436fb3 RCX: 00007fc2e33a0d57 [ 239.126347][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdab48280 [ 239.126359][ T5634] RBP: 00007fffdab48280 R08: 00007fffdab49280 R09: 00000000ffffffff [ 239.126373][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdab49310 [ 239.126385][ T5634] R13: 00007fc2e3436fb3 R14: 000000000003a5ac R15: 00007fffdab49350 [ 239.126418][ T5634] [ 239.126682][ T5634] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 239.126796][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 239.126818][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 239.126829][ T5634] Call Trace: [ 239.126836][ T5634] [ 239.126844][ T5634] dump_stack_lvl+0xe8/0x150 [ 239.126875][ T5634] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 239.126909][ T5634] f2fs_write_end_bio+0xf7d/0x1310 [ 239.126951][ T5634] __submit_merged_bio+0x258/0x6a0 [ 239.126968][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.126999][ T5634] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 239.127032][ T5634] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 239.127087][ T5634] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 239.127145][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.127190][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.127217][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.127239][ T5634] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 239.127315][ T5634] ? __lock_acquire+0x747/0x2de0 [ 239.127363][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.127387][ T5634] ? __kasan_check_byte+0x12/0x40 [ 239.127416][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.127443][ T5634] ? lock_release+0x4b/0x3c0 [ 239.127463][ T5634] ? lock_release+0x4b/0x3c0 [ 239.127493][ T5634] ? is_bpf_text_address+0x292/0x2b0 [ 239.127513][ T5634] ? is_bpf_text_address+0x26/0x2b0 [ 239.127536][ T5634] ? kernel_text_address+0xa5/0xe0 [ 239.127561][ T5634] ? __kernel_text_address+0xd/0x30 [ 239.127590][ T5634] ? unwind_get_return_address+0x4d/0x90 [ 239.127614][ T5634] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.127638][ T5634] ? arch_stack_walk+0xfb/0x150 [ 239.127677][ T5634] ? stack_trace_save+0xa9/0x100 [ 239.127699][ T5634] ? __pfx_stack_trace_save+0x10/0x10 [ 239.127728][ T5634] ? check_path+0x21/0x40 [ 239.127759][ T5634] ? add_lock_to_list+0xc7/0x100 [ 239.127787][ T5634] ? lockdep_unlock+0x5c/0xd0 [ 239.127806][ T5634] ? __lock_acquire+0x1511/0x2de0 [ 239.127860][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 239.127886][ T5634] do_writepages+0x338/0x560 [ 239.127919][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 239.127945][ T5634] filemap_fdatawrite+0x1e9/0x2f0 [ 239.127970][ T5634] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 239.128049][ T5634] ? do_raw_spin_unlock+0xf5/0x200 [ 239.128072][ T5634] f2fs_sync_dirty_inodes+0x471/0x970 [ 239.128114][ T5634] f2fs_write_checkpoint+0x867/0x24d0 [ 239.128181][ T5634] kill_f2fs_super+0x2df/0x700 [ 239.128210][ T5634] ? rcu_do_enqueue+0x616/0x870 [ 239.128232][ T5634] ? lockdep_hardirqs_on+0x7b/0x110 [ 239.128254][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 239.128296][ T5634] ? __pfx_call_rcu+0x10/0x10 [ 239.128321][ T5634] ? shrinker_free+0x2a7/0x3b0 [ 239.128346][ T5634] deactivate_locked_super+0xbe/0x110 [ 239.128373][ T5634] cleanup_mnt+0x204/0x2a0 [ 239.128406][ T5634] task_work_run+0x1d9/0x260 [ 239.128433][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 239.128468][ T5634] exit_to_user_mode_loop+0x204/0x770 [ 239.128492][ T5634] ? rcu_is_watching+0x16/0xb0 [ 239.128522][ T5634] do_syscall_64+0x32c/0x530 [ 239.128541][ T5634] ? trace_irq_disable+0x3b/0x140 [ 239.128562][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.128587][ T5634] ? clear_bhb_loop+0x70/0xc0 [ 239.128612][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.128630][ T5634] RIP: 0033:0x00007fc2e33a0d57 [ 239.128648][ T5634] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 239.128664][ T5634] RSP: 002b:00007fffdab481c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 239.128683][ T5634] RAX: 0000000000000000 RBX: 00007fc2e3436fb3 RCX: 00007fc2e33a0d57 [ 239.128696][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffdab48280 [ 239.128708][ T5634] RBP: 00007fffdab48280 R08: 00007fffdab49280 R09: 00000000ffffffff [ 239.128721][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffdab49310 [ 239.128734][ T5634] R13: 00007fc2e3436fb3 R14: 000000000003a5ac R15: 00007fffdab49350 [ 239.128770][ T5634] [ 239.129050][ T5634] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 239.154838][T10432] fscrypt (loop3, inode 15): Reserved bits set in encryption policy [ 239.409006][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.760092][T10450] loop3: detected capacity change from 0 to 32768 [ 240.767926][T10450] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1844 (10450) [ 240.792434][T10450] BTRFS info (device loop3): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 240.792456][T10450] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 240.892921][T10450] BTRFS info (device loop3): enabling ssd optimizations [ 240.893031][T10450] BTRFS info (device loop3): turning on async discard [ 240.893048][T10450] BTRFS info (device loop3): enabling free space tree [ 241.053479][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 241.053497][ T32] audit: type=1400 audit(1793888948.885:106): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=10483 comm="syz.0.1850" name="foo" offset=35 [ 241.187329][T10489] loop4: detected capacity change from 0 to 512 [ 241.214707][T10489] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1852: iget: bad i_size value: 38620345925642 [ 241.214743][T10489] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.227970][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 241.227993][ C0] EXT4-fs (loop4): initial error at time 1793888949: ext4_orphan_get:1404: inode 15 [ 241.228019][ C0] EXT4-fs (loop4): last error at time 1793888949: ext4_orphan_get:1404: inode 15 [ 241.228330][T10489] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1852: couldn't read orphan inode 15 (err -117) [ 241.228358][T10489] loop4: lost filesystem error report for type 5 error -117 [ 241.293741][T10489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.349794][ T32] audit: type=1800 audit(1793888949.175:107): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1852" name="file1" dev="loop4" ino=18 res=0 errno=-22 [ 241.361346][ T5633] BTRFS info (device loop3): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 241.379346][T10489] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1852: bg 0: block 5: invalid block bitmap [ 241.405273][T10489] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 241.405306][T10489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 241.405306][T10489] [ 241.405321][T10489] EXT4-fs (loop4): Total free blocks count 0 [ 241.405335][T10489] EXT4-fs (loop4): Free/Dirty block details [ 241.405348][T10489] EXT4-fs (loop4): free_blocks=0 [ 241.405361][T10489] EXT4-fs (loop4): dirty_blocks=4 [ 241.405373][T10489] EXT4-fs (loop4): Block reservation details [ 241.405385][T10489] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 241.641809][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.744189][T10502] loop4: detected capacity change from 0 to 1024 [ 241.745148][T10502] EXT4-fs: Ignoring removed orlov option [ 241.774255][T10493] bond0: (slave bond_slave_0): Releasing backup interface [ 241.821226][T10502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.026773][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.091010][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.818602][T10528] loop3: detected capacity change from 0 to 512 [ 242.824421][T10528] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.744512][T10562] loop2: detected capacity change from 0 to 1024 [ 243.884953][T10546] loop3: detected capacity change from 0 to 32768 [ 243.890244][T10546] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1877 (10546) [ 243.896622][T10546] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 243.896652][T10546] BTRFS info (device loop3): using blake2b checksum algorithm [ 243.975162][T10546] BTRFS info (device loop3): enabling ssd optimizations [ 243.975189][T10546] BTRFS info (device loop3): using spread ssd allocation scheme [ 243.975205][T10546] BTRFS info (device loop3): turning off barriers [ 243.975220][T10546] BTRFS info (device loop3): enabling free space tree [ 243.975235][T10546] BTRFS info (device loop3): enabling auto defrag [ 243.975251][T10546] BTRFS info (device loop3): force zlib compression, level 3 [ 248.903163][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.945237][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945295][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.263151][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.384257][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.384313][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.824373][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.824432][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.943369][ T34] INFO: task kworker/u8:1:14 blocked in I/O wait for more than 143 seconds. [ 399.943401][ T34] Tainted: G L syzkaller #0 [ 399.943412][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.943420][ T34] task:kworker/u8:1 state:D stack:20928 pid:14 tgid:14 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 399.943474][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 399.943656][ T34] Call Trace: [ 399.943699][ T34] [ 399.943718][ T34] __schedule+0x17dd/0x5830 [ 399.943882][ T34] ? blk_mq_flush_plug_list+0x415/0x540 [ 399.944005][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 399.944034][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 399.944098][ T34] ? __pfx___schedule+0x10/0x10 [ 399.944125][ T34] ? schedule+0x90/0x2b0 [ 399.944147][ T34] schedule+0x164/0x2b0 [ 399.944166][ T34] io_schedule+0x7f/0xd0 [ 399.944187][ T34] rq_qos_wait+0x266/0x360 [ 399.944261][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 399.944300][ T34] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 399.944312][ T34] ? __pfx_rq_qos_wait+0x10/0x10 [ 399.944325][ T34] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 399.944340][ T34] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 399.944359][ T34] wbt_wait+0x326/0x550 [ 399.944376][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 399.944387][ T34] ? __pfx_dd_bio_merge+0x10/0x10 [ 399.944426][ T34] ? __pfx_wbt_wait+0x10/0x10 [ 399.944437][ T34] __rq_qos_throttle+0x6b/0xb0 [ 399.944451][ T34] blk_mq_submit_bio+0x18ae/0x2eb0 [ 399.944470][ T34] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 399.944481][ T34] ? blk_cgroup_bio_start+0x5d7/0x670 [ 399.944498][ T34] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 399.944513][ T34] ? __submit_bio+0x7e/0x340 [ 399.944549][ T34] submit_bio_noacct_nocheck+0x2fe/0xb10 [ 399.944564][ T34] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 399.944586][ T34] ext4_bio_write_folio+0x101a/0x18c0 [ 399.944657][ T34] mpage_process_page_bufs+0x6bd/0x8a0 [ 399.944771][ T34] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 399.944802][ T34] ? process_scheduled_works+0xc3d/0x1630 [ 399.944849][ T34] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 399.944881][ T34] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 399.944904][ T34] ? ext4_init_io_end+0x29/0x130 [ 399.944913][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 399.944925][ T34] ? ext4_init_io_end+0x29/0x130 [ 399.944941][ T34] ext4_do_writepages+0xc08/0x44a0 [ 399.944989][ T34] ? kfree+0x1c7/0x650 [ 399.945000][ T34] ? ieee80211_inform_bss+0xc59/0x1150 [ 399.945088][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 399.945102][ T34] ? __lock_acquire+0x747/0x2de0 [ 399.945136][ T34] ? lock_acquire+0x115/0x350 [ 399.945159][ T34] ext4_writepages+0x1fe/0x4e0 [ 399.945173][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 399.945193][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 399.945205][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 399.945217][ T34] do_writepages+0x338/0x560 [ 399.945243][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.945256][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 399.945269][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 399.945309][ T34] __writeback_single_inode+0x136/0x1220 [ 399.945324][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 399.945337][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 399.945364][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 399.945398][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 399.945417][ T34] __writeback_inodes_wb+0x114/0x250 [ 399.945434][ T34] wb_writeback+0x42f/0xad0 [ 399.945447][ T34] ? queue_io+0x231/0x470 [ 399.945462][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 399.945473][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.945492][ T34] wb_workfn+0xc92/0x10f0 [ 399.945512][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 399.945535][ T34] ? lock_acquire+0x115/0x350 [ 399.945552][ T34] ? rcu_is_watching+0x16/0xb0 [ 399.945577][ T34] ? process_scheduled_works+0x97a/0x1630 [ 399.945591][ T34] process_scheduled_works+0xc3d/0x1630 [ 399.945605][ T34] ? trace_contention_end+0x3b/0x160 [ 399.945630][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.945648][ T34] ? assign_work+0x3cf/0x5d0 [ 399.945665][ T34] worker_thread+0xa47/0xfb0 [ 399.945689][ T34] kthread+0x38b/0x480 [ 399.945702][ T34] ? __pfx_worker_thread+0x10/0x10 [ 399.945710][ T34] ? __pfx_kthread+0x10/0x10 [ 399.945722][ T34] ret_from_fork+0x514/0xb70 [ 399.945750][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 399.945761][ T34] ? __switch_to+0xc78/0x1410 [ 399.945773][ T34] ? __pfx_kthread+0x10/0x10 [ 399.945785][ T34] ret_from_fork_asm+0x1a/0x30 [ 399.945813][ T34] [ 399.945929][ T34] INFO: task jbd2/sda1-8:4964 blocked in I/O wait for more than 143 seconds. [ 399.945941][ T34] Tainted: G L syzkaller #0 [ 399.945947][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.945952][ T34] task:jbd2/sda1-8 state:D stack:25280 pid:4964 tgid:4964 ppid:2 task_flags:0x240040 flags:0x00080000 [ 399.945984][ T34] Call Trace: [ 399.945988][ T34] [ 399.945995][ T34] __schedule+0x17dd/0x5830 [ 399.946022][ T34] ? __pfx___schedule+0x10/0x10 [ 399.946038][ T34] ? schedule+0x90/0x2b0 [ 399.946050][ T34] schedule+0x164/0x2b0 [ 399.946062][ T34] io_schedule+0x7f/0xd0 [ 399.946074][ T34] bit_wait_io+0x13/0x110 [ 399.946087][ T34] __wait_on_bit+0xac/0x300 [ 399.946098][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.946111][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.946123][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.946134][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.946147][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.946165][ T34] ? __wait_on_buffer+0xe/0x80 [ 399.946223][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 399.946286][ T34] ? trace_hrtimer_start+0x82/0x200 [ 399.946323][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 399.946343][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.946370][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.946404][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.946415][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 399.946431][ T34] kjournald2+0x3bc/0x740 [ 399.946493][ T34] ? __pfx_kjournald2+0x10/0x10 [ 399.946505][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 399.946521][ T34] ? __kthread_parkme+0x71/0x1f0 [ 399.946532][ T34] ? __kthread_parkme+0x199/0x1f0 [ 399.946545][ T34] kthread+0x38b/0x480 [ 399.946557][ T34] ? __pfx_kjournald2+0x10/0x10 [ 399.946567][ T34] ? __pfx_kthread+0x10/0x10 [ 399.946579][ T34] ret_from_fork+0x514/0xb70 [ 399.946598][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 399.946610][ T34] ? __switch_to+0xc78/0x1410 [ 399.946621][ T34] ? __pfx_kthread+0x10/0x10 [ 399.946633][ T34] ret_from_fork_asm+0x1a/0x30 [ 399.946653][ T34] [ 399.946663][ T34] INFO: task syz-executor:5618 blocked in I/O wait for more than 143 seconds. [ 399.946672][ T34] Tainted: G L syzkaller #0 [ 399.946678][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.946682][ T34] task:syz-executor state:D stack:21992 pid:5618 tgid:5618 ppid:5617 task_flags:0x440100 flags:0x00080000 [ 399.946711][ T34] Call Trace: [ 399.946714][ T34] [ 399.946721][ T34] __schedule+0x17dd/0x5830 [ 399.946746][ T34] ? __pfx___schedule+0x10/0x10 [ 399.946762][ T34] ? schedule+0x90/0x2b0 [ 399.946775][ T34] schedule+0x164/0x2b0 [ 399.946786][ T34] io_schedule+0x7f/0xd0 [ 399.946798][ T34] bit_wait_io+0x13/0x110 [ 399.946810][ T34] __wait_on_bit+0xac/0x300 [ 399.946821][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.946834][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.946847][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.946858][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.946877][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.946896][ T34] do_get_write_access+0x658/0x10c0 [ 399.946920][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 399.946936][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 399.946976][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 399.946986][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 399.946998][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 399.947016][ T34] ext4_reserve_inode_write+0x294/0x360 [ 399.947032][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 399.947052][ T34] ext4_dirty_inode+0xd0/0x110 [ 399.947063][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 399.947074][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 399.947088][ T34] file_update_time_flags+0x399/0x440 [ 399.947153][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 399.947173][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 399.947183][ T34] ? __lock_acquire+0x747/0x2de0 [ 399.947201][ T34] do_page_mkwrite+0x147/0x310 [ 399.947222][ T34] do_wp_page+0x1a77/0x4c30 [ 399.947242][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 399.947251][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.947263][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.947279][ T34] handle_mm_fault+0x19c9/0x2f80 [ 399.947296][ T34] ? handle_mm_fault+0xee/0x2f80 [ 399.947311][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.947321][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 399.947337][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 399.947370][ T34] do_user_addr_fault+0xb35/0x1480 [ 399.947394][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 399.947408][ T34] exc_page_fault+0x6a/0xc0 [ 399.947443][ T34] asm_exc_page_fault+0x26/0x30 [ 399.947469][ T34] RIP: 0033:0x00007f1084c71a63 [ 399.947481][ T34] RSP: 002b:00007fffd7ec1240 EFLAGS: 00010216 [ 399.947518][ T34] RAX: 00007f1081ff4a74 RBX: 00007fffd7ec1370 RCX: 0000000000000000 [ 399.947525][ T34] RDX: 00007f1081ff4a70 RSI: 0000000000000008 RDI: 00007fffd7ec1370 [ 399.947532][ T34] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 399.947539][ T34] R10: 00007fffd7ec1350 R11: 0000000000000000 R12: 0000000000000000 [ 399.947545][ T34] R13: 000000000000b58c R14: ffffffffffff4a74 R15: 0000000000000000 [ 399.947562][ T34] [ 399.947592][ T34] INFO: task syz.3.1877:10543 blocked in I/O wait for more than 143 seconds. [ 399.947601][ T34] Tainted: G L syzkaller #0 [ 399.947607][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.947612][ T34] task:syz.3.1877 state:D stack:24680 pid:10543 tgid:10543 ppid:5633 task_flags:0x440040 flags:0x00080002 [ 399.947641][ T34] Call Trace: [ 399.947645][ T34] [ 399.947651][ T34] __schedule+0x17dd/0x5830 [ 399.947671][ T34] ? lock_acquire+0x115/0x350 [ 399.947689][ T34] ? __pfx___schedule+0x10/0x10 [ 399.947705][ T34] ? schedule+0x90/0x2b0 [ 399.947717][ T34] schedule+0x164/0x2b0 [ 399.947729][ T34] io_schedule+0x7f/0xd0 [ 399.947741][ T34] bit_wait_io+0x13/0x110 [ 399.947753][ T34] __wait_on_bit+0xac/0x300 [ 399.947764][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.947777][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.947790][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.947801][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.947814][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.947834][ T34] do_get_write_access+0x658/0x10c0 [ 399.947870][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 399.947886][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 399.947900][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 399.947910][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 399.947922][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 399.947939][ T34] ext4_reserve_inode_write+0x294/0x360 [ 399.947955][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 399.947974][ T34] ext4_dirty_inode+0xd0/0x110 [ 399.947985][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 399.947996][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 399.948009][ T34] file_update_time_flags+0x399/0x440 [ 399.948027][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 399.948043][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 399.948061][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 399.948072][ T34] ? lruvec_stat_mod_folio+0x222/0x2d0 [ 399.948089][ T34] do_page_mkwrite+0x147/0x310 [ 399.948104][ T34] do_pte_missing+0x70f/0x3570 [ 399.948126][ T34] handle_mm_fault+0x1807/0x2f80 [ 399.948143][ T34] ? handle_mm_fault+0xee/0x2f80 [ 399.948159][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.948168][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 399.948179][ T34] ? __pfx_do_futex+0x10/0x10 [ 399.948215][ T34] do_user_addr_fault+0xb35/0x1480 [ 399.948234][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 399.948247][ T34] exc_page_fault+0x6a/0xc0 [ 399.948259][ T34] asm_exc_page_fault+0x26/0x30 [ 399.948269][ T34] RIP: 0033:0x00007f91fda740b1 [ 399.948278][ T34] RSP: 002b:00007ffe9629db10 EFLAGS: 00010202 [ 399.948287][ T34] RAX: 0000001b34f24000 RBX: ffffffff826039aa RCX: 0000001b34f23ff8 [ 399.948295][ T34] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f91fe955700 [ 399.948302][ T34] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f91fde12000 [ 399.948308][ T34] R10: 00007f91fe955700 R11: 0000000000000000 R12: 00007f91fde26038 [ 399.948315][ T34] R13: 0000000000000000 R14: ffffffff826030c0 R15: 00007f91fe955720 [ 399.948323][ T34] ? __x64_sys_mount+0x20/0xc0 [ 399.948365][ T34] ? __se_sys_fsmount+0x2aa/0xbf0 [ 399.948388][ T34] [ 399.948393][ T34] INFO: task syz.1.1883:10559 blocked in I/O wait for more than 143 seconds. [ 399.948402][ T34] Tainted: G L syzkaller #0 [ 399.948408][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.948412][ T34] task:syz.1.1883 state:D stack:24488 pid:10559 tgid:10559 ppid:5637 task_flags:0x440040 flags:0x00080002 [ 399.948442][ T34] Call Trace: [ 399.948446][ T34] [ 399.948452][ T34] __schedule+0x17dd/0x5830 [ 399.948477][ T34] ? __pfx___schedule+0x10/0x10 [ 399.948494][ T34] ? schedule+0x90/0x2b0 [ 399.948506][ T34] schedule+0x164/0x2b0 [ 399.948517][ T34] io_schedule+0x7f/0xd0 [ 399.948529][ T34] bit_wait_io+0x13/0x110 [ 399.948542][ T34] __wait_on_bit+0xac/0x300 [ 399.948552][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.948566][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.948578][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.948589][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.948602][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.948622][ T34] do_get_write_access+0x658/0x10c0 [ 399.948645][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 399.948661][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 399.948675][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 399.948685][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 399.948697][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 399.948714][ T34] ext4_reserve_inode_write+0x294/0x360 [ 399.948730][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 399.948749][ T34] ext4_dirty_inode+0xd0/0x110 [ 399.948760][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 399.948770][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 399.948783][ T34] file_update_time_flags+0x399/0x440 [ 399.948801][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 399.948817][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 399.948833][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 399.948850][ T34] do_page_mkwrite+0x147/0x310 [ 399.948869][ T34] do_pte_missing+0x70f/0x3570 [ 399.948887][ T34] ? handle_mm_fault+0xee/0x2f80 [ 399.948900][ T34] handle_mm_fault+0x1807/0x2f80 [ 399.948916][ T34] ? handle_mm_fault+0xee/0x2f80 [ 399.948931][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.948941][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 399.948951][ T34] ? __pfx_do_futex+0x10/0x10 [ 399.948973][ T34] do_user_addr_fault+0xb35/0x1480 [ 399.948991][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 399.949004][ T34] exc_page_fault+0x6a/0xc0 [ 399.949016][ T34] asm_exc_page_fault+0x26/0x30 [ 399.949026][ T34] RIP: 0033:0x00007f06ca8740b1 [ 399.949035][ T34] RSP: 002b:00007ffc483bb2e0 EFLAGS: 00010202 [ 399.949043][ T34] RAX: 0000001b34c1e000 RBX: ffffffff8c05422e RCX: 0000001b34c1dff8 [ 399.949051][ T34] RDX: 0000001b3462421c RSI: 0000000000000008 RDI: 00007f06cb755720 [ 399.949057][ T34] RBP: 00000000000000ab R08: 00007f06cac10000 R09: 00007f06cac12000 [ 399.949064][ T34] R10: 000000008c054232 R11: 0000000000000003 R12: 00007f06cac26128 [ 399.949071][ T34] R13: 000000000000033c R14: ffffffff8c054da2 R15: 00007f06cb755720 [ 399.949079][ T34] ? vsnprintf+0xe42/0xef0 [ 399.949126][ T34] ? vsnprintf+0x2ce/0xef0 [ 399.949146][ T34] [ 399.949150][ T34] INFO: task syz.2.1884:10561 blocked in I/O wait for more than 143 seconds. [ 399.949159][ T34] Tainted: G L syzkaller #0 [ 399.949164][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.949168][ T34] task:syz.2.1884 state:D stack:24680 pid:10561 tgid:10561 ppid:5632 task_flags:0x440040 flags:0x00080002 [ 399.949197][ T34] Call Trace: [ 399.949200][ T34] [ 399.949207][ T34] __schedule+0x17dd/0x5830 [ 399.949232][ T34] ? __pfx___schedule+0x10/0x10 [ 399.949248][ T34] ? schedule+0x90/0x2b0 [ 399.949261][ T34] schedule+0x164/0x2b0 [ 399.949272][ T34] io_schedule+0x7f/0xd0 [ 399.949284][ T34] bit_wait_io+0x13/0x110 [ 399.949296][ T34] __wait_on_bit+0xac/0x300 [ 399.949307][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.949320][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.949332][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.949344][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.949357][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.949381][ T34] do_get_write_access+0x658/0x10c0 [ 399.949404][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 399.949419][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 399.949433][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 399.949443][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 399.949455][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 399.949472][ T34] ext4_reserve_inode_write+0x294/0x360 [ 399.949488][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 399.949507][ T34] ext4_dirty_inode+0xd0/0x110 [ 399.949517][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 399.949528][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 399.949541][ T34] file_update_time_flags+0x399/0x440 [ 399.949558][ T34] ext4_page_mkwrite+0x21f/0x1470 [ 399.949575][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 399.949591][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 399.949602][ T34] ? lruvec_stat_mod_folio+0x222/0x2d0 [ 399.949618][ T34] do_page_mkwrite+0x147/0x310 [ 399.949633][ T34] do_pte_missing+0x70f/0x3570 [ 399.949654][ T34] handle_mm_fault+0x1807/0x2f80 [ 399.949671][ T34] ? handle_mm_fault+0xee/0x2f80 [ 399.949687][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.949696][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 399.949713][ T34] ? clockevents_program_event+0x491/0x630 [ 399.949730][ T34] do_user_addr_fault+0xb35/0x1480 [ 399.949748][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 399.949761][ T34] exc_page_fault+0x6a/0xc0 [ 399.949773][ T34] asm_exc_page_fault+0x26/0x30 [ 399.949782][ T34] RIP: 0033:0x00007f96ed074111 [ 399.949791][ T34] RSP: 002b:00007ffdc52960f0 EFLAGS: 00010202 [ 399.949800][ T34] RAX: 0000001b34b24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 399.949806][ T34] RDX: 0000001b34b23ffc RSI: 00000000003ffde8 RDI: 00007f96edf55700 [ 399.949813][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f96ed412000 [ 399.949820][ T34] R10: 00007f96edf55700 R11: 0000000000000000 R12: 0000000000000000 [ 399.949826][ T34] R13: 0000000000005084 R14: ffffffff816ddefe R15: 00007f96edf55720 [ 399.949833][ T34] ? fpregs_assert_state_consistent+0xee/0x150 [ 399.949857][ T34] [ 399.949866][ T34] INFO: task syz.4.1885:10564 blocked in I/O wait for more than 143 seconds. [ 399.949874][ T34] Tainted: G L syzkaller #0 [ 399.949880][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.949884][ T34] task:syz.4.1885 state:D stack:26936 pid:10564 tgid:10564 ppid:5634 task_flags:0x440040 flags:0x00080002 [ 399.949913][ T34] Call Trace: [ 399.949917][ T34] [ 399.949923][ T34] __schedule+0x17dd/0x5830 [ 399.949945][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 399.949969][ T34] ? __pfx___schedule+0x10/0x10 [ 399.949985][ T34] ? schedule+0x90/0x2b0 [ 399.949997][ T34] schedule+0x164/0x2b0 [ 399.950009][ T34] io_schedule+0x7f/0xd0 [ 399.950020][ T34] bit_wait_io+0x13/0x110 [ 399.950033][ T34] __wait_on_bit+0xac/0x300 [ 399.950044][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.950057][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 399.950069][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 399.950080][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 399.950094][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 399.950114][ T34] do_get_write_access+0x658/0x10c0 [ 399.950137][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 399.950152][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 399.950166][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 399.950182][ T34] ext4_reserve_inode_write+0x294/0x360 [ 399.950198][ T34] __ext4_mark_inode_dirty+0x141/0x7e0 [ 399.950217][ T34] ext4_dirty_inode+0xd0/0x110 [ 399.950228][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 399.950238][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 399.950248][ T34] ? mnt_get_write_access+0x216/0x280 [ 399.950263][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 399.950278][ T34] touch_atime+0x568/0x670 [ 399.950291][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 399.950308][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 399.950326][ T34] mmap_region+0x1191/0x2820 [ 399.950339][ T34] ? lock_acquire+0x115/0x350 [ 399.950359][ T34] ? __pfx_mmap_region+0x10/0x10 [ 399.950367][ T34] ? __page_table_check_zero+0x6c/0x430 [ 399.950431][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 399.950445][ T34] ? __page_table_check_zero+0x6c/0x430 [ 399.950462][ T34] ? post_alloc_hook+0x208/0x250 [ 399.950495][ T34] ? try_charge_memcg+0x250/0x1a90 [ 399.950542][ T34] ? mt_find+0x17e/0x5f0 [ 399.950581][ T34] ? mt_find+0x545/0x5f0 [ 399.950595][ T34] ? mt_find+0x17e/0x5f0 [ 399.950608][ T34] ? __pfx_mt_find+0x10/0x10 [ 399.950625][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 399.950639][ T34] ? security_mmap_addr+0x71/0x240 [ 399.950690][ T34] ? memfd_check_seals_mmap+0x8e/0x1f0 [ 399.950727][ T34] do_mmap+0xe0a/0x1300 [ 399.950743][ T34] ? __pfx_do_mmap+0x10/0x10 [ 399.950759][ T34] ? vm_mmap_pgoff+0x1ed/0x520 [ 399.950772][ T34] ? down_write_killable+0x179/0x230 [ 399.950786][ T34] ? lock_acquire+0x115/0x350 [ 399.950798][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 399.950811][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 399.950876][ T34] vm_mmap_pgoff+0x27a/0x520 [ 399.950893][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 399.950907][ T34] ? __fget_files+0x2a/0x420 [ 399.950922][ T34] ? __fget_files+0x3a2/0x420 [ 399.950934][ T34] ? __fget_files+0x2a/0x420 [ 399.950948][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 399.950963][ T34] do_syscall_64+0x16a/0x530 [ 399.951001][ T34] ? trace_irq_disable+0x3b/0x140 [ 399.951015][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.951026][ T34] ? clear_bhb_loop+0x70/0xc0 [ 399.951038][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.951048][ T34] RIP: 0033:0x00007fc2e339f882 [ 399.951057][ T34] RSP: 002b:00007fffdab49078 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 399.951068][ T34] RAX: ffffffffffffffda RBX: 0000001b34a64000 RCX: 00007fc2e339f882 [ 399.951076][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b34a64000 [ 399.951082][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 399.951089][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000166 [ 399.951095][ T34] R13: 00000000000927c0 R14: 000000000003b78c R15: 00007fffdab49350 [ 399.951111][ T34] [ 399.951127][ T34] [ 399.951127][ T34] Showing all locks held in the system: [ 399.951160][ T34] locks held by kworker/u8:1/14: 4, on CPU#0: [ 399.951220][ T34] #0: ffff888021abd950 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 399.951278][ T34] #1: ffffc90000137c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 399.951307][ T34] #2: ffff888035d9c100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 399.951400][ T34] #3: ffff8880375e0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 399.951429][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 399.951436][ T34] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 399.951493][ T34] locks held by syz-executor/5618: 3, on CPU#0: [ 399.951500][ T34] #0: ffff88807aa43088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 399.951524][ T34] #1: ffff888035d9c570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 399.951549][ T34] #2: ffff888035d9a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 399.951583][ T34] locks held by syz.3.1877/10543: 3, on CPU#0: [ 399.951589][ T34] #0: ffff88807711f6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 399.951612][ T34] #1: ffff888035d9c570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 399.951636][ T34] #2: ffff888035d9a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 399.951662][ T34] locks held by syz.1.1883/10559: 3, on CPU#1: [ 399.951669][ T34] #0: ffff88807cc66d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 399.951692][ T34] #1: ffff888035d9c570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 399.951715][ T34] #2: ffff888035d9a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 399.951740][ T34] locks held by syz.2.1884/10561: 3, on CPU#1: [ 399.951747][ T34] #0: ffff88803701d088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 399.951770][ T34] #1: ffff888035d9c570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 399.951794][ T34] #2: ffff888035d9a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 399.951819][ T34] locks held by syz.4.1885/10564: 3, on CPU#1: [ 399.951826][ T34] #0: ffff888036d0d900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 399.951851][ T34] #1: ffff888035d9c478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 399.951885][ T34] #2: ffff888035d9a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 399.951912][ T34] [ 399.951915][ T34] ============================================= [ 399.951915][ T34] [ 399.951925][ T34] NMI backtrace for cpu 0 [ 399.951936][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 399.951951][ T34] Tainted: [L]=SOFTLOCKUP [ 399.951955][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 399.951960][ T34] Call Trace: [ 399.951965][ T34] [ 399.951969][ T34] dump_stack_lvl+0xe8/0x150 [ 399.951986][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 399.951997][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 399.952016][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 399.952028][ T34] sys_info+0x135/0x170 [ 399.952040][ T34] watchdog+0x1073/0x10f0 [ 399.952063][ T34] ? watchdog+0x209/0x10f0 [ 399.952079][ T34] kthread+0x38b/0x480 [ 399.952091][ T34] ? __pfx_watchdog+0x10/0x10 [ 399.952103][ T34] ? __pfx_kthread+0x10/0x10 [ 399.952114][ T34] ret_from_fork+0x514/0xb70 [ 399.952127][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 399.952137][ T34] ? __switch_to+0xc78/0x1410 [ 399.952148][ T34] ? __pfx_kthread+0x10/0x10 [ 399.952160][ T34] ret_from_fork_asm+0x1a/0x30 [ 399.952178][ T34] [ 399.952182][ T34] Sending NMI from CPU 0 to CPUs 1: [ 399.952236][ C1] NMI backtrace for cpu 1 [ 399.952251][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.952276][ C1] Tainted: [L]=SOFTLOCKUP [ 399.952282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 399.952291][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 399.952314][ C1] Code: fa 8e 02 e9 43 17 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 2a 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 399.952329][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246 [ 399.952344][ C1] RAX: 00000000000c12e1 RBX: ffffffff819cb8f0 RCX: 8000000000000001 [ 399.952357][ C1] RDX: 0000000000000001 RSI: ffffffff8e6ae1c1 RDI: ffffffff8c8eba80 [ 399.952377][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8333d9b R09: 1ffff110170667b3 [ 399.952390][ C1] R10: dffffc0000000000 R11: ffffed10170667b4 R12: 0000000000000000 [ 399.952403][ C1] R13: 1ffff11003ed73e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 399.952416][ C1] FS: 0000000000000000(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000 [ 399.952430][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.952443][ C1] CR2: 00007fd425a7de9c CR3: 000000000ff48000 CR4: 00000000003526f0 [ 399.952459][ C1] Call Trace: [ 399.952465][ C1] [ 399.952472][ C1] default_idle+0x9/0x20 [ 399.952493][ C1] default_idle_call+0x72/0xb0 [ 399.952516][ C1] do_idle+0x2e0/0x540 [ 399.952553][ C1] ? __pfx_do_idle+0x10/0x10 [ 399.952578][ C1] cpu_startup_entry+0x43/0x60 [ 399.952599][ C1] start_secondary+0x101/0x110 [ 399.952618][ C1] common_startup_64+0x13e/0x157 [ 399.952653][ C1] [ 399.962078][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 402.767105][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 402.777770][ T34] Tainted: [L]=SOFTLOCKUP [ 402.782077][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 402.792124][ T34] Call Trace: [ 402.795407][ T34] [ 402.798332][ T34] vpanic+0x26f/0x710 [ 402.802310][ T34] panic+0xc5/0xd0 [ 402.806020][ T34] ? __pfx_panic+0x10/0x10 [ 402.810782][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 402.816233][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 402.821604][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 402.827757][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 402.833918][ T34] watchdog+0x10e7/0x10f0 [ 402.838256][ T34] ? watchdog+0x209/0x10f0 [ 402.842679][ T34] kthread+0x38b/0x480 [ 402.846746][ T34] ? __pfx_watchdog+0x10/0x10 [ 402.851433][ T34] ? __pfx_kthread+0x10/0x10 [ 402.856014][ T34] ret_from_fork+0x514/0xb70 [ 402.860597][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 402.865698][ T34] ? __switch_to+0xc78/0x1410 [ 402.870396][ T34] ? __pfx_kthread+0x10/0x10 [ 402.874980][ T34] ret_from_fork_asm+0x1a/0x30 [ 402.879748][ T34] [ 402.882785][ T34] Kernel Offset: disabled [ 402.887122][ T34] Rebooting in 86400 seconds..