last executing test programs: 2m10.743747487s ago: executing program 5 (id=794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x44}}, 0x0) 2m10.151577249s ago: executing program 5 (id=797): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x200007) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 2m9.772126103s ago: executing program 5 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m9.652883004s ago: executing program 5 (id=800): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8006, &(0x7f0000000940)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@block_validity}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400009}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x489, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000780), 0xc008, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m8.721146025s ago: executing program 5 (id=809): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c00170002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030"], 0xa0}}, 0x0) 2m7.551459031s ago: executing program 5 (id=825): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x3, 0x0, &(0x7f0000000440)=[{0x0, 0x1}, {0x4, 0x7}, {0x7, 0xd}]}) 2m7.021232837s ago: executing program 32 (id=825): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x3, 0x0, &(0x7f0000000440)=[{0x0, 0x1}, {0x4, 0x7}, {0x7, 0xd}]}) 3.161242824s ago: executing program 2 (id=2044): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.719235278s ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_IE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 2.554974918s ago: executing program 2 (id=2049): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x200], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.504343162s ago: executing program 6 (id=2050): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) 2.416234224s ago: executing program 3 (id=2051): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10840, &(0x7f00000002c0)={[{@errors_remount}, {@gid}, {@gid}, {}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x1000}}, {@umask={'umask', 0x3d, 0x3}}, {@dmask={'dmask', 0x3d, 0x80000000}}]}, 0x1, 0x154a, &(0x7f0000000400)="$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") syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.315224255s ago: executing program 6 (id=2053): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2.187483161s ago: executing program 0 (id=2054): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000c40)={[{@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@codepage={'codepage', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x10000}}, {}, {}]}, 0x5, 0x304, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/49, 0x31) 2.15214067s ago: executing program 1 (id=2055): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/245, 0xf5) 2.132485366s ago: executing program 4 (id=2056): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_overlay={0x7ff, 0xd, 0x4, 0x2, 0x4, {}, {0x1, 0xc, 0x81, 0x6, 0xf, 0xc, "717480be"}, 0x9, 0x3, {0x0}, 0x4ff}) 2.060618833s ago: executing program 4 (id=2057): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 2.038721731s ago: executing program 3 (id=2058): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_BIND=@ipv4={0x38, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.874883785s ago: executing program 6 (id=2059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.870508785s ago: executing program 1 (id=2060): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) 1.678564686s ago: executing program 0 (id=2061): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0xfffffff8, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x627, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x9, 0x3e, 0x8c, 0x6, 0x10002, 0x6, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x6, 0x6, 0x8, 0x7, 0x1, 0x101], [0x10000007, 0x9, 0x8000012d, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf1, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0x6, 0x0, 0x4, 0x7, 0xc, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x8b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x4, 0x1, 0xfe000000, 0x1000, 0xffffffff, 0x4, 0x9, 0x3, 0x7, 0x9, 0x8, 0x3, 0x6, 0x81, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x7, 0x5, 0xfffffffe, 0xfe, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ec, 0x8, 0x8, 0x86, 0x803, 0x9, 0x3e7, 0xb, 0x5, 0x200002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0xa9, 0x0, 0x9, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x9], [0x9, 0x8, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0xfff, 0x59, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xdfff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x16, 0x0, 0x80000008, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd9, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.674695697s ago: executing program 4 (id=2062): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x80000280) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r0, &(0x7f0000000300)='./file1\x00', 0x1000808) 1.521746296s ago: executing program 3 (id=2063): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1.257874736s ago: executing program 6 (id=2064): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1.13985541s ago: executing program 4 (id=2065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 1.13955075s ago: executing program 0 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) open_by_handle_at(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0800000001"], 0x80) 1.097684246s ago: executing program 2 (id=2067): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0xffffffffffffffda, 0x0, {0x410000003, 0xe, 0x0, {0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x338, 0xffffffff, 0x280, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'bridge_slave_1\x00', 'syzkaller0\x00', {}, {0xff}, 0x2e, 0x2, 0x36}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @local, @port=0x4e23, @icmp_id=0x68}}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'caif0\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x18, @ipv6=@private2, @ipv6=@loopback, @gre_key=0x1, @icmp_id=0x68}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xb}, @multicast2, 0xffffffff, 0xff, 'nr0\x00', 'pim6reg1\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@multicast2, @ipv6=@private0, @gre_key=0x4, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 1.083916191s ago: executing program 1 (id=2068): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x17, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b5120800040008800400048008000200"], 0x48}}, 0x3000c000) 1.020386846s ago: executing program 3 (id=2069): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 938.182843ms ago: executing program 6 (id=2070): writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000f40)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x4}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nostrict}, {@gid}, {@uid_forget}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc59, &(0x7f0000002940)="$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") symlink(&(0x7f0000000400)='.\x02\x00', &(0x7f0000000800)='./bus\x00') mount$9p_virtio(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) 768.955097ms ago: executing program 6 (id=2071): r0 = msgget$private(0x0, 0x200) msgrcv(r0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 0xee01, 0xe9, 0x8}, 0x0, 0x0, 0xa, 0x8001, 0x0, 0xe, 0x4, 0xff70, 0x200, 0x2}) 754.092034ms ago: executing program 0 (id=2072): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008", 0x3d) 750.024731ms ago: executing program 1 (id=2073): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000, @remote, 0xb, 0x5}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 726.800808ms ago: executing program 2 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x25, 0x0, 0x7, 0x8}, {0x35}]}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003b00010027bd7000fddbdf250c00000016950c72a83c385a420edd8fc391934d21f39adb1d3769d16d833670f720f13b69c440b845f7922dd99546852c07070f3fded31f1cf44a7f007ef07594c0d1dbd4fc0303b0a0058b0a7aa5e74405dc732705946ce5793b1dec3d19bc6dd3ecc4293900e24730975de44b4086118ce587c9f388e934a96a5bfc1626e6b565fd76fbbd53bd2a7eeb59f442a5aafb6f7571a7e3cbcb43c315b3c9dd348ad999350000000000000006c91e60501729e5da76ee97ef"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) 679.576975ms ago: executing program 4 (id=2075): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x6, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 594.942505ms ago: executing program 3 (id=2076): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000008}) ioctl$TCSBRKP(r0, 0x5425, 0x3) 581.015344ms ago: executing program 1 (id=2077): write(0xffffffffffffffff, &(0x7f0000000140)="affc81a2f822", 0x6) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 491.75932ms ago: executing program 2 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000006000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 406.041984ms ago: executing program 0 (id=2079): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0x35323645, 0x1, 0xc, [{0x10, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0x9}, {0x63d, 0x801}, {0x100001, 0xb}, {0x7, 0x489aa92e}, {0x5, 0x3}, {0x500001, 0x7}], 0x1, 0x2c, 0x2, 0x2, 0x3}}, 0xffffffff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 276.840998ms ago: executing program 0 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'ip6_vti0\x00'}) 186.079577ms ago: executing program 1 (id=2081): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000100)=@generic={0x8}, 0xc) 177.521008ms ago: executing program 4 (id=2082): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) fadvise64(r0, 0x0, 0x6, 0x0) 0s ago: executing program 2 (id=2083): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): sum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 196.300632][ T8882] BTRFS info (device loop6): turning on sync discard [ 196.300670][ T8882] BTRFS info (device loop6): enabling free space tree [ 196.300691][ T8882] BTRFS info (device loop6): force clearing of disk cache [ 196.744039][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 196.744076][ T31] audit: type=1326 audit(1790771947.175:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 196.744670][ T31] audit: type=1326 audit(1790771947.175:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 196.769236][ T31] audit: type=1326 audit(1790771947.195:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 196.769318][ T31] audit: type=1326 audit(1790771947.195:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 196.769371][ T31] audit: type=1326 audit(1790771947.195:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.3.1117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 197.297280][ T8124] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 197.621047][ T8984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.787023][ T8946] loop1: detected capacity change from 0 to 32768 [ 197.928263][ T8946] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.105007][ T8946] XFS (loop1): Ending clean mount [ 198.311567][ T31] audit: type=1800 audit(1790771948.735:123): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1111" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 198.479883][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1122'. [ 198.584309][ T5612] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.643783][ T9014] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1131'. [ 198.655573][ T8975] loop0: detected capacity change from 0 to 32768 [ 198.703339][ T8975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1120 (8975) [ 198.748876][ T8975] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.748924][ T8975] BTRFS info (device loop0): using sha256 checksum algorithm [ 198.934449][ T9003] loop3: detected capacity change from 0 to 32768 [ 198.997435][ T9003] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 199.006637][ T8975] BTRFS info (device loop0): enabling ssd optimizations [ 199.006668][ T8975] BTRFS info (device loop0): turning on async discard [ 199.006689][ T8975] BTRFS info (device loop0): enabling free space tree [ 199.070422][ T9003] JBD2: Ignoring recovery information on journal [ 199.279345][ T9003] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 199.404423][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.760453][ T9052] loop6: detected capacity change from 0 to 256 [ 199.879542][ T5614] ocfs2: Unmounting device (7,3) on (node local) [ 200.098071][ T9063] loop4: detected capacity change from 0 to 1024 [ 200.288628][ T9066] loop3: detected capacity change from 0 to 2048 [ 200.319500][ T9071] loop0: detected capacity change from 0 to 1024 [ 200.399160][ T9071] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 200.399296][ T9071] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.455796][ T9076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.493747][ T9071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.979631][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.980533][ T9066] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 201.279249][ T9094] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.367749][ T9097] loop0: detected capacity change from 0 to 512 [ 201.664508][ T9108] netlink: 'syz.6.1155': attribute type 4 has an invalid length. [ 201.921110][ T9113] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 201.965587][ T9119] loop3: detected capacity change from 0 to 1024 [ 201.999711][ T9116] binder: BC_ACQUIRE_RESULT not supported [ 201.999732][ T9116] binder: 9115:9116 ioctl c0306201 200000000100 returned -22 [ 202.028497][ T9124] loop2: detected capacity change from 0 to 128 [ 202.056870][ T9124] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 202.104443][ T9124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.490471][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1167'. [ 202.708643][ T9148] loop6: detected capacity change from 0 to 64 [ 202.814689][ T9149] loop4: detected capacity change from 0 to 1024 [ 202.939134][ T9152] loop0: detected capacity change from 0 to 512 [ 202.964113][ T9149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.000402][ T9152] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1172: bg 0: block 5: invalid block bitmap [ 203.000445][ T9152] loop0: lost filesystem error report for type 5 error -117 [ 203.000967][ T9152] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 203.000992][ T9152] loop0: lost filesystem error report for type 5 error -117 [ 203.001406][ T9152] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1172: invalid indirect mapped block 3 (level 2) [ 203.001451][ T9152] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.001998][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 203.002019][ C1] EXT4-fs (loop0): initial error at time 1790771953: ext4_validate_block_bitmap:436 [ 203.002048][ C1] EXT4-fs (loop0): last error at time 1790771953: ext4_free_branches:1023: inode 11 [ 203.164956][ T9152] EXT4-fs (loop0): 1 orphan inode deleted [ 203.164987][ T9152] EXT4-fs (loop0): 1 truncate cleaned up [ 203.239449][ T9152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.318738][ T31] audit: type=1800 audit(1790771953.745:124): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1171" name="file1" dev="loop4" ino=17 res=0 errno=0 [ 203.538460][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.546009][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.945546][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 203.977291][ T9189] loop6: detected capacity change from 0 to 1024 [ 204.002534][ T5724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.153248][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 204.154324][ T5724] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 204.158378][ T5724] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 204.188508][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.188542][ T5724] usb 4-1: Product: syz [ 204.188560][ T5724] usb 4-1: Manufacturer: syz [ 204.188578][ T5724] usb 4-1: SerialNumber: syz [ 204.245883][ T5724] usb 4-1: config 0 descriptor?? [ 204.249702][ T5724] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 204.249749][ T5724] dvb-usb: bulk message failed: -22 (2/0) [ 204.286400][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.288445][ T5724] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 204.288531][ T5724] usb 4-1: media controller created [ 204.329744][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.404921][ T5724] usb 4-1: selecting invalid altsetting 7 [ 204.404950][ T5724] cxusb: set interface failed [ 204.404965][ T5724] dvb-usb: bulk message failed: -22 (1/0) [ 204.645939][ T9196] ip_tables: iptables: counters copy to user failed while replacing table [ 204.687493][ T5724] DVB: Unable to find symbol lgdt330x_attach() [ 204.687516][ T5724] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 204.735251][ T9205] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1194'. [ 204.943814][ T9204] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 204.976472][ T5724] rc_core: IR keymap rc-dvico-portable not found [ 204.976505][ T5724] Registered IR keymap rc-empty [ 204.995945][ T5724] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 205.014388][ T5724] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 205.143369][ T5724] dvb-usb: schedule remote query interval to 100 msecs. [ 205.143402][ T5724] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 205.150364][ T5724] usb 4-1: USB disconnect, device number 7 [ 205.362804][ T5724] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 205.407403][ T9218] set_capacity_and_notify: 2 callbacks suppressed [ 205.407428][ T9218] loop1: detected capacity change from 0 to 2048 [ 205.458600][ T9218] NILFS (loop1): invalid segment: Magic number mismatch [ 205.458634][ T9218] NILFS (loop1): trying rollback from an earlier position [ 205.636177][ T9218] NILFS (loop1): recovery complete [ 205.656694][ T9226] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.706187][ T9218] NILFS (loop1): error -22 preparing GC: cannot read source blocks [ 205.885472][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 205.885839][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 205.885877][ T5620] Bluetooth: hci2: command 0x2016 tx timeout [ 205.885910][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 205.886006][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 205.896442][ T9234] loop3: detected capacity change from 0 to 1024 [ 206.027765][ T9230] loop6: detected capacity change from 0 to 4096 [ 206.141237][ T9241] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.764495][ T9254] loop6: detected capacity change from 0 to 256 [ 206.794268][ T9254] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 206.823161][ T9236] loop0: detected capacity change from 0 to 32768 [ 206.837321][ T9236] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1208 (9236) [ 206.942821][ T9236] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 206.942876][ T9236] BTRFS info (device loop0): using blake2b checksum algorithm [ 206.946870][ T9259] ip_tables: iptables: counters copy to user failed while replacing table [ 207.156659][ T9236] BTRFS info (device loop0): enabling ssd optimizations [ 207.156708][ T9236] BTRFS info (device loop0): turning on async discard [ 207.156727][ T9236] BTRFS info (device loop0): enabling free space tree [ 207.156753][ T9236] BTRFS info (device loop0): use zstd compression, level 3 [ 207.209473][ T9236] BTRFS error (device loop0): unable to set label with more than 255 bytes [ 207.393700][ T9274] loop2: detected capacity change from 0 to 4096 [ 207.416489][ T5613] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.499636][ T9288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.524410][ T9290] Cannot find del_set index 2 as target [ 207.552094][ T981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.715283][ T981] usb 2-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 207.718055][ T981] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.718091][ T981] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.718118][ T981] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.718152][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.718188][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.735920][ T981] usb 2-1: config 0 descriptor?? [ 208.105887][ T9297] loop3: detected capacity change from 0 to 2048 [ 208.232474][ T9306] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.290410][ T981] sony 0003:054C:0002.0015: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 208.354379][ T981] sony 0003:054C:0002.0015: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.1-1/input0 [ 208.354426][ T981] sony 0003:054C:0002.0015: failed to claim input [ 208.498907][ T5736] usb 2-1: USB disconnect, device number 9 [ 208.719557][ T9311] fido_id[9311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.897182][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1240'. [ 209.639613][ T9313] loop0: detected capacity change from 0 to 32768 [ 209.658041][ T9313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1237 (9313) [ 209.724746][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 209.730083][ T9313] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.730150][ T9313] BTRFS info (device loop0): using crc32c checksum algorithm [ 210.004658][ T9313] BTRFS info (device loop0): enabling ssd optimizations [ 210.004695][ T9313] BTRFS info (device loop0): turning on flush-on-commit [ 210.004717][ T9313] BTRFS info (device loop0): enabling free space tree [ 210.004737][ T9313] BTRFS info (device loop0): enabling auto defrag [ 210.004760][ T9313] BTRFS info (device loop0): use lzo compression, level 1 [ 210.004786][ T9313] BTRFS info (device loop0): max_inline set to 4096 [ 210.224483][ T5613] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.240293][ T9372] loop6: detected capacity change from 0 to 1024 [ 210.558951][ T31] audit: type=1800 audit(1790771960.985:125): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1254" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 210.571628][ T9372] syz.6.1254: attempt to access beyond end of device [ 210.571628][ T9372] loop6: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 210.605807][ T9382] 9p: Bad value for 'rfdno' [ 210.924654][ T9391] process 'syz.3.1265' launched '/dev/fd/3' with NULL argv: empty string added [ 211.022708][ T9341] loop2: detected capacity change from 0 to 32768 [ 211.131264][ T9393] loop6: detected capacity change from 0 to 1024 [ 211.155509][ T9393] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 211.197925][ T9341] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.544146][ T9341] XFS (loop2): Ending clean mount [ 211.826272][ T5611] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.315358][ T9390] loop1: detected capacity change from 0 to 32768 [ 212.339696][ T9390] xfs: Deprecated parameter 'noattr2' [ 212.339724][ T9390] XFS: noattr2 mount option is deprecated. [ 212.391947][ T5724] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.546419][ T9390] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.564135][ T5724] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 212.566674][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.566707][ T5724] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.610447][ T5724] usb 5-1: string descriptor 0 read error: -22 [ 212.610601][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.642417][ T5724] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 212.644275][ T5724] etas_es58x 5-1:1.0: could not retrieve the product info string [ 212.720755][ T9390] XFS (loop1): Ending clean mount [ 212.920554][ T9418] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 212.921592][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 212.925421][ T9441] loop2: detected capacity change from 0 to 256 [ 212.955047][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 212.956476][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 212.957473][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 212.959239][ C1] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 212.959389][ T9418] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 212.963891][ T5724] usb 5-1: USB disconnect, device number 11 [ 213.020263][ T5724] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 213.067778][ T9441] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 213.085427][ T5612] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.538182][ T9451] loop2: detected capacity change from 0 to 512 [ 213.703495][ T9451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.703633][ T9451] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.865319][ T9421] loop0: detected capacity change from 0 to 40427 [ 214.023617][ T9421] F2FS-fs (loop0): invalid crc value [ 214.028043][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.490710][ T9421] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 214.502843][ T9421] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 214.502878][ T9421] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 214.502959][ T9421] F2FS-fs (loop0): Start checkpoint disabled! [ 214.684523][ T9421] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 214.707862][ T9421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 214.884758][ T9497] syz.4.1296 uses obsolete (PF_INET,SOCK_PACKET) [ 214.919959][ T9478] loop3: detected capacity change from 0 to 8192 [ 214.939678][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'. [ 214.939927][ T9478] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 215.119076][ T9478] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 215.124285][ T9478] ntfs3(loop3): Failed to load $Extend (-2). [ 215.124310][ T9478] ntfs3(loop3): Failed to initialize $Extend. [ 215.201666][ T9506] loop2: detected capacity change from 0 to 764 [ 215.222889][ T187] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 215.377562][ T187] usb 2-1: not running at top speed; connect to a high speed hub [ 215.377606][ T187] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 215.378947][ T187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.416866][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 215.416901][ T187] usb 2-1: Product: syz [ 215.416919][ T187] usb 2-1: Manufacturer: syz [ 215.419769][ T9509] overlayfs: upper fs does not support tmpfile. [ 215.444827][ T187] hub 2-1:1.0: USB hub found [ 215.483189][ T9509] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.636073][ T187] hub 2-1:1.0: config failed, can't read hub descriptor (err -90) [ 215.641583][ T50] kworker/u8:3: attempt to access beyond end of device [ 215.641583][ T50] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.678652][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.678699][ T50] Tainted: [L]=SOFTLOCKUP [ 215.678710][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.678729][ T50] Workqueue: writeback wb_workfn (flush-7:0) [ 215.678775][ T50] Call Trace: [ 215.678785][ T50] [ 215.678797][ T50] dump_stack_lvl+0xe8/0x150 [ 215.678841][ T50] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 215.678895][ T50] f2fs_write_end_bio+0x1211/0x16e0 [ 215.678934][ T50] ? blkg_put+0x22/0x240 [ 215.678993][ T50] __submit_merged_bio+0x258/0x6a0 [ 215.679034][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679067][ T50] ? rcu_is_watching+0x16/0xb0 [ 215.679111][ T50] __submit_merged_write_cond+0x3c9/0x4e0 [ 215.679163][ T50] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 215.679221][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679264][ T50] f2fs_write_data_pages+0x2a27/0x36f0 [ 215.679335][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.679380][ T50] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 215.679463][ T50] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 215.679528][ T50] ? __lock_acquire+0x747/0x2de0 [ 215.679568][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679617][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.679647][ T50] do_writepages+0x338/0x560 [ 215.679679][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679711][ T50] ? __lock_acquire+0x747/0x2de0 [ 215.679745][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679776][ T50] ? reacquire_held_locks+0x117/0x1a0 [ 215.679810][ T50] ? writeback_sb_inodes+0x450/0x1b00 [ 215.679858][ T50] __writeback_single_inode+0x136/0x1220 [ 215.679902][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.679933][ T50] ? do_raw_spin_unlock+0xf5/0x200 [ 215.679981][ T50] writeback_sb_inodes+0x9de/0x1b00 [ 215.680019][ T50] ? __lock_acquire+0x747/0x2de0 [ 215.680056][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680093][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680140][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 215.680231][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680262][ T50] ? rcu_is_watching+0x16/0xb0 [ 215.680297][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680328][ T50] ? queue_io+0x2d3/0x470 [ 215.680370][ T50] wb_writeback+0x41c/0xad0 [ 215.680412][ T50] ? queue_io+0x241/0x470 [ 215.680463][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 215.680499][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.680561][ T50] wb_workfn+0x431/0x10f0 [ 215.680617][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 215.680656][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680696][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680727][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.680779][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680810][ T50] ? lock_acquire+0x115/0x350 [ 215.680841][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680881][ T50] ? rcu_is_watching+0x16/0xb0 [ 215.680916][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.680950][ T50] ? process_scheduled_works+0x97a/0x1630 [ 215.680988][ T50] process_scheduled_works+0xc3d/0x1630 [ 215.681026][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.681097][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.681142][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.681173][ T50] ? assign_work+0x3cf/0x5d0 [ 215.681217][ T50] worker_thread+0xa47/0xfb0 [ 215.681258][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.681302][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.681333][ T50] ? __kthread_parkme+0x71/0x1f0 [ 215.681386][ T50] kthread+0x38b/0x480 [ 215.681413][ T50] ? __pfx_worker_thread+0x10/0x10 [ 215.681457][ T50] ? __pfx_kthread+0x10/0x10 [ 215.681487][ T50] ret_from_fork+0x514/0xb70 [ 215.681517][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 215.681543][ T50] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.681575][ T50] ? __switch_to+0xc89/0x1420 [ 215.681618][ T50] ? __pfx_kthread+0x10/0x10 [ 215.681649][ T50] ret_from_fork_asm+0x1a/0x30 [ 215.681714][ T50] [ 215.731307][ T50] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 215.758936][ T187] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 215.868510][ T5755] loop0: lost filesystem error report for type 5 error -108 [ 215.966109][ C0] usbtouchscreen 2-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 215.994927][ T187] usb 2-1: Failed to suspend device, error -71 [ 216.000360][ T187] usb 2-1: USB disconnect, device number 10 [ 216.954248][ T5724] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.976044][ T9540] program syz.4.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.070884][ T31] audit: type=1400 audit(1790771967.495:126): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=":" pid=9543 comm="syz.1.1313" name=":" offset=58 [ 217.102330][ T5724] usb 7-1: Using ep0 maxpacket: 8 [ 217.107356][ T5724] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.108538][ T5724] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 217.108598][ T5724] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.108626][ T5724] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.108657][ T5724] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.108687][ T5724] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.108736][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.438261][ T5724] usb 7-1: GET_CAPABILITIES returned 0 [ 217.438322][ T5724] usbtmc 7-1:16.0: can't read capabilities [ 217.701974][ T5724] usb 7-1: USB disconnect, device number 2 [ 217.840354][ T9566] input: syz1 as /devices/virtual/input/input17 [ 218.143005][ T9547] loop0: detected capacity change from 0 to 32768 [ 218.179417][ T9547] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.227211][ T9577] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 218.414706][ T9547] XFS (loop0): Ending clean mount [ 218.607971][ T9593] loop3: detected capacity change from 0 to 256 [ 218.666925][ T5755] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 218.704479][ T9594] loop2: detected capacity change from 0 to 4096 [ 218.833193][ T5613] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.843205][ T5755] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 218.844752][ T5755] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 218.844791][ T5755] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.844830][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.858820][ T5755] usb 5-1: config 0 descriptor?? [ 218.887334][ T9594] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 219.289699][ T9594] ntfs3(loop2): ino=1a, mi_enum_attr [ 219.289869][ T9594] ntfs3(loop2): ino=1a, mi_enum_attr [ 219.289891][ T9594] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 219.361148][ T5755] hid_parser_main: 16 callbacks suppressed [ 219.361177][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361208][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361233][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361257][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361282][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361305][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361330][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361354][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361379][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.361403][ T5755] kovaplus 0003:1E7D:2D50.0016: unknown main item tag 0x0 [ 219.417547][ T5755] kovaplus 0003:1E7D:2D50.0016: hidraw0: USB HID v80.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 219.476427][ T9594] ntfs3: Volume is dirty and "force" flag is not set! [ 219.507621][ T9606] netlink: 'syz.6.1337': attribute type 29 has an invalid length. [ 219.530707][ T9606] netlink: 'syz.6.1337': attribute type 29 has an invalid length. [ 219.543640][ T9606] netlink: 'syz.6.1337': attribute type 29 has an invalid length. [ 219.586904][ T5755] usb 5-1: USB disconnect, device number 12 [ 219.616755][ T9607] fido_id[9607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 219.914156][ T9618] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1339'. [ 220.280443][ T9611] loop3: detected capacity change from 0 to 32768 [ 220.345837][ T9611] JBD2: Ignoring recovery information on journal [ 220.346762][ T9629] loop1: detected capacity change from 0 to 8 [ 220.400942][ T9629] SQUASHFS error: lzo decompression failed, data probably corrupt [ 220.400982][ T9629] SQUASHFS error: Failed to read block 0x91: -5 [ 220.401114][ T9629] SQUASHFS error: Unable to read metadata cache entry [8f] [ 220.401135][ T9629] SQUASHFS error: Unable to read inode 0x11f [ 220.457228][ T9632] syz.0.1351 (9632) used greatest stack depth: 18944 bytes left [ 220.473604][ T9611] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 220.634445][ T30] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.795954][ T30] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 220.813131][ T30] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.813169][ T30] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.813203][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.813242][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.827298][ T30] usb 3-1: config 0 descriptor?? [ 221.054813][ T5614] ocfs2: Unmounting device (7,3) on (node local) [ 221.283760][ T30] hid-multitouch 0003:0EEF:72C4.0017: ignoring exceeding usage max [ 221.326621][ T30] hid-multitouch 0003:0EEF:72C4.0017: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 221.562167][ T981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.593595][ T187] usb 3-1: USB disconnect, device number 12 [ 221.779261][ T981] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 221.782027][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.782063][ T981] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.793432][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.793468][ T981] usb 4-1: Product: syz [ 221.793487][ T981] usb 4-1: Manufacturer: syz [ 221.793505][ T981] usb 4-1: SerialNumber: syz [ 222.085988][ T981] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 222.346383][ T9659] loop4: detected capacity change from 0 to 32768 [ 222.421553][ T5736] usb 4-1: USB disconnect, device number 8 [ 222.447190][ T5736] usblp0: removed [ 223.202204][ T981] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.288415][ T9682] loop1: detected capacity change from 0 to 32768 [ 223.351994][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 223.400812][ T9682] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 223.409672][ T9703] loop3: detected capacity change from 0 to 2048 [ 223.410960][ T9703] EXT4-fs: Ignoring removed i_version option [ 223.426717][ T981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.437519][ T981] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 223.437588][ T981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 223.437620][ T981] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.437651][ T981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 223.437683][ T981] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 223.437713][ T981] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.437766][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.491291][ T9682] JBD2: Ignoring recovery information on journal [ 223.708014][ T9703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.708310][ T9703] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.778089][ T981] usb 5-1: GET_CAPABILITIES returned 0 [ 223.778149][ T981] usbtmc 5-1:16.0: can't read capabilities [ 223.926755][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.028945][ T9682] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 224.127718][ T187] usb 5-1: USB disconnect, device number 13 [ 224.191049][ T9724] loop2: detected capacity change from 0 to 512 [ 224.235620][ T9724] FAT-fs (loop2): Directory bread(block 2080) failed [ 224.235662][ T9724] FAT-fs (loop2): Directory bread(block 2081) failed [ 224.235690][ T9724] FAT-fs (loop2): Directory bread(block 2082) failed [ 224.235718][ T9724] FAT-fs (loop2): Directory bread(block 2083) failed [ 224.235745][ T9724] FAT-fs (loop2): Directory bread(block 2084) failed [ 224.235773][ T9724] FAT-fs (loop2): Directory bread(block 2085) failed [ 224.235800][ T9724] FAT-fs (loop2): Directory bread(block 2086) failed [ 224.235826][ T9724] FAT-fs (loop2): Directory bread(block 2087) failed [ 224.331558][ T9724] gfs2: path_lookup on c::: returned error -2 [ 224.901640][ T9730] loop3: detected capacity change from 0 to 32768 [ 224.963194][ T9730] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.118360][ T5612] ocfs2: Unmounting device (7,1) on (node local) [ 225.190145][ T9730] XFS (loop3): Ending clean mount [ 225.497743][ T5614] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.758311][ T9763] loop6: detected capacity change from 0 to 1024 [ 225.775239][ T9763] EXT4-fs: Ignoring removed orlov option [ 225.809480][ T9763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.301680][ T8124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.945836][ T9795] loop6: detected capacity change from 0 to 128 [ 226.989343][ T9795] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.989416][ T9795] hpfs: filesystem error: improperly stopped [ 226.989434][ T9795] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 226.989452][ T9795] hpfs: You really don't want any checks? You are crazy... [ 226.989474][ T9795] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 226.989489][ T9795] hpfs: code page support is disabled [ 226.989709][ T9795] hpfs: hpfs_map_4sectors(): unaligned read [ 226.989799][ T9795] hpfs: hpfs_map_4sectors(): unaligned read [ 226.989811][ T9795] hpfs: filesystem error: unable to find root dir [ 227.071724][ T9795] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 227.402448][ T9805] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 227.617238][ T9809] loop6: detected capacity change from 0 to 4096 [ 227.793000][ T9821] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.021395][ T9815] loop1: detected capacity change from 0 to 4096 [ 228.038136][ T9815] ntfs3(loop1): ino=3, mi_enum_attr [ 228.457451][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1427'. [ 228.591489][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.592601][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.984583][ T9849] loop2: detected capacity change from 0 to 128 [ 228.995427][ T9849] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.996210][ T9849] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.187029][ T9854] loop6: detected capacity change from 0 to 2048 [ 229.352866][ T9854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.353006][ T9854] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.612522][ T8124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.752457][ T9868] batman_adv: batadv0: Adding interface: gretap1 [ 229.752487][ T9868] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.752525][ T9868] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 229.979559][ T9876] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'R ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„L½ô;ȧ0Gš¤“I¾q6•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long [ 230.751921][ T5755] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 230.902683][ T5755] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 230.907694][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.907841][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.907889][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.967715][ T5755] usb 1-1: config 0 descriptor?? [ 230.985004][ T9884] loop4: detected capacity change from 0 to 32768 [ 231.135945][ T9884] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 231.135945][ T9884] [ 231.260017][ T9884] ERROR: (device loop4): remounting filesystem as read-only [ 231.504763][ T5755] hid_parser_main: 14 callbacks suppressed [ 231.504797][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504830][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504855][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504900][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504925][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504950][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.504980][ T5755] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 231.571333][ T5755] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 231.702463][ T5755] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 231.706625][ T31] audit: type=1326 audit(1790771982.135:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.713733][ T9913] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.754896][ T31] audit: type=1326 audit(1790771982.185:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.794163][ T31] audit: type=1326 audit(1790771982.225:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.794222][ T31] audit: type=1326 audit(1790771982.225:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.795271][ T31] audit: type=1326 audit(1790771982.225:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd47059cfc7 code=0x7ffc0000 [ 231.795327][ T31] audit: type=1326 audit(1790771982.225:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.795378][ T31] audit: type=1326 audit(1790771982.225:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.798284][ T31] audit: type=1326 audit(1790771982.225:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.798340][ T31] audit: type=1326 audit(1790771982.225:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47059e159 code=0x7ffc0000 [ 231.819868][ T31] audit: type=1326 audit(1790771982.255:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd47059cfc7 code=0x7ffc0000 [ 231.925811][ T5755] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 231.986835][ T5755] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 232.032006][ T5755] usb 1-1: USB disconnect, device number 9 [ 232.122500][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 232.692930][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1469'. [ 233.221163][ T9935] syz.2.1471 (9935) used greatest stack depth: 16544 bytes left [ 233.622088][ T9971] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1486'. [ 233.872034][ T9982] program syz.0.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.389835][ T9998] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 235.271973][ T981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.433433][T10036] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 235.433486][T10036] syzkaller0: owner set to 0 [ 235.482219][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 235.484198][ T981] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 235.508639][ T981] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 235.508681][ T981] usb 4-1: config 0 has no interface number 0 [ 235.508734][ T981] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.508812][ T981] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 235.508854][ T981] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 235.508891][ T981] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 235.508939][ T981] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.564681][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.564722][ T981] usb 4-1: Product: syz [ 235.564744][ T981] usb 4-1: Manufacturer: syz [ 235.564763][ T981] usb 4-1: SerialNumber: syz [ 235.568708][ T981] usb 4-1: config 0 descriptor?? [ 235.832850][ T981] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 236.108373][T10053] loop1: detected capacity change from 0 to 512 [ 236.109402][ T5846] usb 4-1: USB disconnect, device number 9 [ 236.228533][T10053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.228652][T10053] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.384045][T10065] binder: 10060:10065 ioctl 4018620d 0 returned -22 [ 236.572725][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.859715][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 236.859741][ T31] audit: type=1400 audit(1790771987.285:171): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=10080 comm="syz.1.1537" name="//o" offset=60 [ 237.002614][ T5846] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.152617][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 237.153344][ T5846] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.155281][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.155333][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.155367][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.155394][ T5846] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.155424][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.159461][ T5846] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.159488][ T5846] usb 1-1: Manufacturer: syz [ 237.169195][ T5846] usb 1-1: config 0 descriptor?? [ 237.629990][ T5846] rc_core: IR keymap rc-hauppauge not found [ 237.630022][ T5846] Registered IR keymap rc-empty [ 237.654678][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.682380][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.705696][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 237.736194][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 237.771137][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.782372][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.810759][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.833606][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.852275][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.879631][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.908201][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.922212][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.933902][T10109] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.954041][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 237.972124][ T5846] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.007673][ T5846] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 238.007702][ T5846] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 238.089714][ T981] usb 1-1: USB disconnect, device number 10 [ 238.375161][T10123] scsi_dev_info_list_add_str: bad dev info string 'ã7ÞLi™|HÕ„ÐgãJ @00D®“üPú‚bô8ïäCv~¡œ&&»+qê^R' '' '' [ 238.978089][T10137] batman_adv: batadv0: Adding interface: vlan2 [ 238.978114][T10137] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.978150][T10137] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 239.312787][T10155] evm: overlay not supported [ 239.521402][T10161] loop6: detected capacity change from 0 to 64 [ 239.732919][ T13] IPVS: starting estimator thread 0... [ 239.922382][T10172] IPVS: using max 27 ests per chain, 64800 per kthread [ 239.992094][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.039741][T10177] loop1: detected capacity change from 0 to 2048 [ 240.060059][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 240.060109][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 240.202178][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 240.222289][ T30] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.277775][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.389831][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1579'. [ 240.389899][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1579'. [ 240.409380][T10184] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.506528][ T30] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.506573][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.533070][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.533109][ T30] usb 1-1: Product: syz [ 240.533128][ T30] usb 1-1: Manufacturer: syz [ 240.533151][ T30] usb 1-1: SerialNumber: syz [ 240.536574][ T30] usb 1-1: config 0 descriptor?? [ 240.784157][T10184] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 240.784200][T10184] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 240.878824][T10184] Remounting filesystem read-only [ 240.959136][ T5612] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 241.032020][ T187] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 241.036375][ T30] gs_usb 1-1:0.0: Configuring for 186 interfaces [ 241.122452][ T981] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.184881][ T187] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.187834][ T187] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.187872][ T187] usb 5-1: config 0 has no interface number 0 [ 241.187920][ T187] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 241.187954][ T187] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.188000][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.191660][ T187] usb 5-1: config 0 descriptor?? [ 241.210248][ T187] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 241.275743][ T30] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 241.333329][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 241.335543][ T981] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 241.336951][ T981] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 241.336991][ T981] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.337023][ T981] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.337060][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.340291][ T981] usb 3-1: config 0 descriptor?? [ 241.412764][ T30] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 241.505351][ T187] usb 1-1: USB disconnect, device number 11 [ 241.521354][T10188] iowarrior 5-1:0.1: Error -90 while submitting URB [ 241.605948][ T5846] usb 5-1: USB disconnect, device number 14 [ 241.848262][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 241.902594][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902646][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902672][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902696][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902720][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902745][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902769][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902794][ T981] hid-alps 0003:044E:120B.0019: unknown main item tag 0x0 [ 241.902817][ T981] hid-alps 0003:044E:120B.0019: unbalanced collection at end of report description [ 241.903714][ T981] hid-alps 0003:044E:120B.0019: parse failed [ 241.903831][ T981] hid-alps 0003:044E:120B.0019: probe with driver hid-alps failed with error -22 [ 241.938036][T10207] gretap0: entered promiscuous mode [ 242.316692][T10216] loop3: detected capacity change from 0 to 1024 [ 242.396644][T10216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.396808][T10216] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.446165][T10216] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.1595: Freeing blocks not in datazone - block = 0, count = 16 [ 242.497986][ T2957] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 242.568935][ T2957] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 242.568974][ T2957] EXT4-fs (loop3): This should not happen!! Data will be lost [ 242.568974][ T2957] [ 242.568992][ T2957] EXT4-fs (loop3): Total free blocks count 0 [ 242.569010][ T2957] EXT4-fs (loop3): Free/Dirty block details [ 242.569054][ T2957] EXT4-fs (loop3): free_blocks=16 [ 242.569093][ T2957] EXT4-fs (loop3): dirty_blocks=16 [ 242.569109][ T2957] EXT4-fs (loop3): Block reservation details [ 242.570723][ T2957] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 242.623600][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.803966][T10231] loop3: detected capacity change from 0 to 512 [ 242.829401][T10231] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1601: corrupted in-inode xattr: invalid ea_ino [ 242.829439][T10231] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.830254][T10231] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1601: couldn't read orphan inode 15 (err -117) [ 242.830291][T10231] loop3: lost filesystem error report for type 5 error -117 [ 242.910900][T10231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.004909][ T5736] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.093580][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.151975][ T5736] usb 7-1: Using ep0 maxpacket: 8 [ 243.153016][ T5736] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.154824][ T5736] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 243.154879][ T5736] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.154907][ T5736] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.154938][ T5736] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.154969][ T5736] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.155018][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.402166][ T5736] usb 7-1: GET_CAPABILITIES returned 0 [ 243.402227][ T5736] usbtmc 7-1:16.0: can't read capabilities [ 243.615158][ T5736] usb 7-1: USB disconnect, device number 3 [ 243.678399][T10219] loop0: detected capacity change from 0 to 32768 [ 243.697019][T10219] (syz.0.1599,10219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.704190][T10219] (syz.0.1599,10219,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.758033][T10219] JBD2: Ignoring recovery information on journal [ 243.896824][ T5736] usb 3-1: USB disconnect, device number 13 [ 243.922760][ T5846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 243.949043][T10219] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 244.111931][ T5846] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 244.117101][ T5846] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 125 [ 244.117134][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.117181][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 244.119421][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.119450][ T5846] usb 4-1: Product: syz [ 244.119470][ T5846] usb 4-1: Manufacturer: syz [ 244.119490][ T5846] usb 4-1: SerialNumber: syz [ 244.177312][ T5846] usb 4-1: config 0 descriptor?? [ 244.204123][ T5846] usb-storage 4-1:0.0: USB Mass Storage device detected [ 244.299584][ T5846] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 244.421071][ T981] usb 4-1: USB disconnect, device number 10 [ 244.549026][T10219] (syz.0.1599,10219,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 244.708067][ T5613] ocfs2: Unmounting device (7,0) on (node local) [ 244.810638][T10225] loop1: detected capacity change from 0 to 256 [ 244.829258][T10225] vfat: Unknown parameter 'nonultail' [ 245.278425][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 245.600212][T10269] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1611'. [ 246.901175][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 247.209201][T10306] netlink: 'syz.2.1629': attribute type 2 has an invalid length. [ 247.351188][T10310] loop6: detected capacity change from 0 to 512 [ 247.390006][T10310] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 247.390047][T10310] FAT-fs (loop6): Filesystem has been set read-only [ 247.517861][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 247.566537][T10313] bridge0: port 3(batadv1) entered blocking state [ 247.566754][T10313] bridge0: port 3(batadv1) entered disabled state [ 247.566931][T10313] batadv1: entered allmulticast mode [ 247.580875][T10313] batadv1: entered promiscuous mode [ 247.604055][T10318] input: syz1 as /devices/virtual/input/input20 [ 247.777539][ T5736] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 247.870560][ T31] audit: type=1400 audit(1790771998.295:172): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10323 comm="syz.2.1637" name="p" offset=43 [ 247.964331][ T5736] usb 2-1: not running at top speed; connect to a high speed hub [ 247.964379][ T5736] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 247.968644][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.995205][ T5736] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 248.028338][ T3000] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 248.028366][ T3000] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 248.031106][ T5736] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 248.347022][T10333] loop2: detected capacity change from 0 to 24 [ 248.351691][T10333] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 248.407093][ T5846] usb 2-1: USB disconnect, device number 11 [ 248.435854][ T5846] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 248.443445][ T5846] cyberjack 2-1:1.0: device disconnected [ 248.463039][T10333] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 249.008477][T10322] loop4: detected capacity change from 0 to 40427 [ 249.026245][T10322] F2FS-fs (loop4): invalid crc value [ 249.542435][T10322] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 249.706776][T10322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.707703][T10338] loop3: detected capacity change from 0 to 40427 [ 249.736556][T10338] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 249.736595][T10338] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 249.773943][T10338] F2FS-fs (loop3): invalid crc value [ 249.997447][T10342] f2fs_ckpt-7:4: attempt to access beyond end of device [ 249.997447][T10342] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.047058][T10342] CPU: 1 UID: 0 PID: 10342 Comm: f2fs_ckpt-7:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.047119][T10342] Tainted: [L]=SOFTLOCKUP [ 250.047130][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.047148][T10342] Call Trace: [ 250.047160][T10342] [ 250.047171][T10342] dump_stack_lvl+0xe8/0x150 [ 250.047226][T10342] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 250.047279][T10342] f2fs_write_end_bio+0x1211/0x16e0 [ 250.047315][T10342] ? blkg_put+0x22/0x240 [ 250.047373][T10342] __submit_merged_bio+0x258/0x6a0 [ 250.047418][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.047464][T10342] ? rcu_is_watching+0x16/0xb0 [ 250.047507][T10342] __submit_merged_write_cond+0x3c9/0x4e0 [ 250.047559][T10342] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 250.047616][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.047657][T10342] f2fs_write_data_pages+0x2a27/0x36f0 [ 250.047684][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.047713][T10342] ? __lock_acquire+0x747/0x2de0 [ 250.047785][T10342] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.047828][T10342] ? arch_stack_walk+0x11b/0x150 [ 250.047889][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.047920][T10342] ? add_lock_to_list+0xc7/0x100 [ 250.047957][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.047989][T10342] ? __lock_acquire+0x1511/0x2de0 [ 250.048050][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048083][T10342] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.048130][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048166][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048197][T10342] ? do_raw_spin_unlock+0xf5/0x200 [ 250.048238][T10342] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.048269][T10342] do_writepages+0x338/0x560 [ 250.048304][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048338][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048372][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048404][T10342] ? do_raw_spin_unlock+0xf5/0x200 [ 250.048472][T10342] filemap_fdatawrite+0x1e9/0x2f0 [ 250.048510][T10342] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 250.048585][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048620][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048657][T10342] ? do_raw_spin_unlock+0xf5/0x200 [ 250.048704][T10342] f2fs_sync_dirty_inodes+0x30e/0x830 [ 250.048752][T10342] f2fs_write_checkpoint+0xa3d/0x2710 [ 250.048823][T10342] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.048897][T10342] ? __pfx_down_write+0x10/0x10 [ 250.048943][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.048980][T10342] ? rcu_is_watching+0x16/0xb0 [ 250.049016][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049052][T10342] __checkpoint_and_complete_reqs+0x135/0x480 [ 250.049099][T10342] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 250.049150][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049187][T10342] ? schedule+0x90/0x2b0 [ 250.049229][T10342] issue_checkpoint_thread+0xd5/0x270 [ 250.049262][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049298][T10342] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 250.049330][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049365][T10342] ? __pfx_autoremove_wake_function+0x10/0x10 [ 250.049406][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049447][T10342] ? __kthread_parkme+0x71/0x1f0 [ 250.049493][T10342] ? __kthread_parkme+0x199/0x1f0 [ 250.049540][T10342] kthread+0x38b/0x480 [ 250.049569][T10342] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 250.049600][T10342] ? __pfx_kthread+0x10/0x10 [ 250.049630][T10342] ret_from_fork+0x514/0xb70 [ 250.049664][T10342] ? __pfx_ret_from_fork+0x10/0x10 [ 250.049691][T10342] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.049724][T10342] ? __switch_to+0xc89/0x1420 [ 250.049770][T10342] ? __pfx_kthread+0x10/0x10 [ 250.049799][T10342] ret_from_fork_asm+0x1a/0x30 [ 250.049867][T10342] [ 250.119373][T10342] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 250.481265][T10322] syz.4.1638: attempt to access beyond end of device [ 250.481265][T10322] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 250.481572][T10322] syz.4.1638: attempt to access beyond end of device [ 250.481572][T10322] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 250.946717][T10338] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.051607][T10376] loop0: detected capacity change from 0 to 4096 [ 251.069153][T10376] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 251.231014][T10376] ntfs3(loop0): ino=19, mi_enum_attr [ 251.231095][T10376] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 251.272760][T10376] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 251.413299][ T981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 251.499254][T10338] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 251.499357][T10338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.605242][ T981] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 251.607657][ T981] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.607762][ T981] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.658256][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.658293][ T981] usb 7-1: Product: syz [ 251.658311][ T981] usb 7-1: Manufacturer: syz [ 251.658329][ T981] usb 7-1: SerialNumber: syz [ 251.713308][ T981] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 251.753329][ T981] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 251.753329][ T981] Please send a copy of this message to and [ 252.004840][ T981] usb 7-1: USB disconnect, device number 4 [ 252.592070][T10401] loop0: detected capacity change from 0 to 1024 [ 252.593364][T10401] EXT4-fs: Ignoring removed nobh option [ 252.593402][T10401] EXT4-fs: Ignoring removed bh option [ 252.740135][T10401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.891333][T10391] Zero length message leads to an empty skb [ 252.979016][T10409] loop3: detected capacity change from 0 to 128 [ 253.262785][ T5846] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 253.395303][ T31] audit: type=1326 audit(1790772003.805:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395380][ T31] audit: type=1326 audit(1790772003.805:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395434][ T31] audit: type=1326 audit(1790772003.815:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395487][ T31] audit: type=1326 audit(1790772003.815:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395541][ T31] audit: type=1326 audit(1790772003.815:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395595][ T31] audit: type=1326 audit(1790772003.815:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395648][ T31] audit: type=1326 audit(1790772003.815:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395700][ T31] audit: type=1326 audit(1790772003.815:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395753][ T31] audit: type=1326 audit(1790772003.815:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.395806][ T31] audit: type=1326 audit(1790772003.815:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f8b9e159 code=0x7ffc0000 [ 253.434412][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 253.458083][ T5846] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.476305][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.476376][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.476408][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.476435][ T5846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.476463][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.479413][ T5846] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.479440][ T5846] usb 3-1: Manufacturer: syz [ 253.592115][ T5846] usb 3-1: config 0 descriptor?? [ 253.807653][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.808190][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.922429][ T5846] rc_core: IR keymap rc-hauppauge not found [ 253.922472][ T5846] Registered IR keymap rc-empty [ 253.923124][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 253.952411][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 253.976045][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 253.981353][T10425] loop3: detected capacity change from 0 to 1024 [ 253.986264][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 253.989961][T10425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.012823][T10425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.023388][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.042582][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.062503][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.082372][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.112305][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.112973][T10425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 254.113133][T10425] System zones: 0-1, 3-36 [ 254.123289][T10425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.146068][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.172639][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.191987][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.215949][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.235689][ T5846] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 254.255174][ T5846] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 254.255212][ T5846] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 254.334374][ T5846] usb 3-1: USB disconnect, device number 14 [ 254.466233][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.523007][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.007503][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.018953][ T981] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.184309][ T981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.184370][ T981] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 255.185752][ T981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.185780][ T981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.200010][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.200041][ T981] usb 2-1: Product: syz [ 255.200060][ T981] usb 2-1: Manufacturer: syz [ 255.200078][ T981] usb 2-1: SerialNumber: syz [ 255.286132][ T981] usb 2-1: selecting invalid altsetting 1 [ 255.286977][ T981] usb 2-1: unit 6 not found! [ 255.641069][T10464] netlink: 'syz.6.1693': attribute type 83 has an invalid length. [ 255.701921][ T5846] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 255.853558][ T5846] usb 3-1: not running at top speed; connect to a high speed hub [ 255.853609][ T5846] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 255.854779][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.856581][ T5846] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 255.856611][ T5846] usb 3-1: Product: syz [ 255.856630][ T5846] usb 3-1: Manufacturer: syz [ 255.911235][ T5846] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 255.911318][ T5846] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 256.099847][ T5724] usb 3-1: USB disconnect, device number 15 [ 256.199713][ T981] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 256.336199][ T981] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 256.354373][ T981] usb 2-1: USB disconnect, device number 12 [ 256.416422][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.578261][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1701'. [ 257.241070][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 257.241118][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 257.260151][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 257.260197][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 257.689362][T10510] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 257.689457][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.2.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.689496][T10510] Tainted: [L]=SOFTLOCKUP [ 257.689506][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.689523][T10510] Call Trace: [ 257.689535][T10510] [ 257.689547][T10510] dump_stack_lvl+0xe8/0x150 [ 257.689596][T10510] sysfs_create_dir_ns+0x271/0x2a0 [ 257.689647][T10510] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 257.689695][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.689730][T10510] ? do_raw_spin_unlock+0xf5/0x200 [ 257.689780][T10510] kobject_add_internal+0x622/0xcd0 [ 257.689819][T10510] kobject_add+0x163/0x240 [ 257.689844][T10510] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.689891][T10510] ? __pfx_kobject_add+0x10/0x10 [ 257.689934][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.689983][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.690014][T10510] ? get_device_parent+0x366/0x3a0 [ 257.690048][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.690085][T10510] device_add+0x3fa/0xb80 [ 257.690120][T10510] tty_register_device_attr+0x425/0x990 [ 257.690164][T10510] ? __pfx_tty_register_device_attr+0x10/0x10 [ 257.690206][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.690238][T10510] ? tty_port_init+0x136/0x1a0 [ 257.690269][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.690301][T10510] ? gsm_dlci_alloc+0x330/0x640 [ 257.690340][T10510] gsm_activate_mux+0x110/0x2a0 [ 257.690380][T10510] gsmld_ioctl+0xcf5/0x1930 [ 257.690422][T10510] ? __pfx_gsmld_ioctl+0x10/0x10 [ 257.690469][T10510] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 257.690509][T10510] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.690551][T10510] ? ldsem_down_read+0x12/0x40 [ 257.690588][T10510] ? __pfx_gsmld_ioctl+0x10/0x10 [ 257.690617][T10510] tty_ioctl+0x9bd/0xdd0 [ 257.690647][T10510] ? __pfx_tty_ioctl+0x10/0x10 [ 257.690676][T10510] __se_sys_ioctl+0xfc/0x170 [ 257.690711][T10510] do_syscall_64+0x166/0x520 [ 257.690750][T10510] ? trace_irq_disable+0x3b/0x140 [ 257.690781][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.690816][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.690844][T10510] RIP: 0033:0x7fe2f239e159 [ 257.690869][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.690918][T10510] RSP: 002b:00007fe2f334f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.690954][T10510] RAX: ffffffffffffffda RBX: 00007fe2f2625fa0 RCX: 00007fe2f239e159 [ 257.690975][T10510] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000003 [ 257.690994][T10510] RBP: 00007fe2f243506b R08: 0000000000000000 R09: 0000000000000000 [ 257.691012][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.691029][T10510] R13: 00007fe2f2626038 R14: 00007fe2f2625fa0 R15: 00007ffdc2e79218 [ 257.691070][T10510] [ 257.788032][T10510] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 258.035891][T10519] loop6: detected capacity change from 0 to 512 [ 258.079391][T10517] MTRR 1 not used [ 259.282553][ T981] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 259.435541][ T981] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 259.436912][ T981] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 259.436967][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29625, setting to 64 [ 259.439129][ T981] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 259.439153][ T981] usb 7-1: Manufacturer: syz [ 259.490030][ T981] usb 7-1: config 0 descriptor?? [ 259.497286][T10536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 259.501274][ T981] igorplugusb 7-1:0.0: endpoint incorrect [ 259.768685][T10552] sd 0:0:1:0: PR command failed: 1026 [ 259.768747][T10552] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 259.768806][T10552] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 259.825931][T10536] loop6: detected capacity change from 0 to 64 [ 259.845593][ T5846] usb 7-1: USB disconnect, device number 5 [ 259.866384][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.012043][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 260.012985][ T30] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 260.014522][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 260.018601][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.018632][ T30] usb 5-1: Product: syz [ 260.018651][ T30] usb 5-1: Manufacturer: syz [ 260.018670][ T30] usb 5-1: SerialNumber: syz [ 260.094909][ T30] usb 5-1: config 0 descriptor?? [ 260.108521][ T30] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 260.125637][ T30] usb 5-1: Detected FT232R [ 260.377747][ T30] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 260.378685][ T30] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 260.381259][ T30] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 260.416815][ T30] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.421265][ T30] usb 5-1: USB disconnect, device number 15 [ 260.471656][ T30] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.493220][ T30] ftdi_sio 5-1:0.0: device disconnected [ 261.287376][T10575] loop3: detected capacity change from 0 to 512 [ 261.331605][T10575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.405280][T10575] EXT4-fs (loop3): 1 truncate cleaned up [ 261.413632][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.628461][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.750567][T10588] bond0: option all_slaves_active: invalid value (255) [ 262.111170][T10598] loop6: detected capacity change from 0 to 524288000 [ 262.712466][T10615] loop4: detected capacity change from 0 to 16 [ 262.725873][T10615] erofs (device loop4): mounted with root inode @ nid 36. [ 263.108951][T10626] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1756'. [ 263.312744][ T5724] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 263.462329][ T5724] usb 3-1: Using ep0 maxpacket: 16 [ 263.463226][ T5724] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.464539][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.464575][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.464604][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.464656][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.468924][ T5724] usb 3-1: config 0 descriptor?? [ 263.981358][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.982126][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.032150][ T5724] microsoft 0003:045E:07DA.001A: unknown main item tag 0x4 [ 264.032194][ T5724] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 264.057836][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input22 [ 264.104607][ T5724] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 264.173989][T10629] loop3: detected capacity change from 0 to 32768 [ 264.218351][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 264.262193][ T5736] usb 3-1: USB disconnect, device number 16 [ 264.310066][T10629] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 264.387396][T10639] fido_id[10639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 264.432732][T10629] XFS (loop3): Ending clean mount [ 264.537818][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 264.537847][ T31] audit: type=1800 audit(1790772014.965:184): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1760" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 264.687673][ T5614] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 264.943661][T10636] loop0: detected capacity change from 0 to 32768 [ 264.974104][T10636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1763 (10636) [ 264.996680][T10636] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.996715][T10636] BTRFS info (device loop0): using crc32c checksum algorithm [ 265.133492][T10636] BTRFS info (device loop0): enabling ssd optimizations [ 265.133525][T10636] BTRFS info (device loop0): turning on async discard [ 265.133546][T10636] BTRFS info (device loop0): enabling free space tree [ 265.133565][T10636] BTRFS info (device loop0): enabling auto defrag [ 265.133586][T10636] BTRFS info (device loop0): use zlib compression, level 3 [ 265.133611][T10636] BTRFS info (device loop0): max_inline set to 0 [ 265.220677][ T31] audit: type=1326 audit(1790772015.645:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.220742][ T31] audit: type=1326 audit(1790772015.645:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.239033][ T31] audit: type=1326 audit(1790772015.655:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.406415][ T31] audit: type=1326 audit(1790772015.825:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.424637][ T31] audit: type=1326 audit(1790772015.845:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa4bbf5e98e code=0x7ffc0000 [ 265.523427][ T31] audit: type=1326 audit(1790772015.955:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.569240][ T31] audit: type=1326 audit(1790772015.995:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.569311][ T31] audit: type=1326 audit(1790772015.995:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10670 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.595232][ T31] audit: type=1326 audit(1790772016.005:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.6.1770" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa4bbf9e159 code=0x7ffc0000 [ 265.683241][ T5736] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.832725][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 265.833676][ T5736] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.837208][ T5736] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 265.837251][ T5736] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 265.837321][ T5736] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.837387][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.907183][ T5736] usbtmc 3-1:16.0: bulk endpoints not found [ 266.205962][ T5613] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.506642][T10695] loop4: detected capacity change from 0 to 128 [ 266.553800][T10695] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 266.598337][T10698] loop6: detected capacity change from 0 to 164 [ 266.640228][T10698] isofs: Unable to find the "." directory for NFS. [ 267.176310][T10710] loop6: detected capacity change from 0 to 2048 [ 267.369711][T10710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.478670][T10723] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 267.478705][T10723] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 267.546731][ T8124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.600496][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1788'. [ 268.386048][ T5736] usb 3-1: USB disconnect, device number 17 [ 268.390426][T10751] loop6: detected capacity change from 0 to 512 [ 268.398401][T10751] EXT4-fs (loop6): Test dummy encryption mode enabled [ 268.409268][T10751] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 268.410169][T10751] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 268.510173][T10751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.727534][ T8124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.389670][T10749] loop1: detected capacity change from 0 to 32768 [ 269.412101][T10749] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1799 (10749) [ 269.421487][T10754] loop0: detected capacity change from 0 to 32768 [ 269.489962][T10749] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 269.490034][T10749] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 269.618865][T10754] JBD2: Ignoring recovery information on journal [ 269.799419][T10749] BTRFS info (device loop1): enabling ssd optimizations [ 269.799540][T10749] BTRFS info (device loop1): turning on async discard [ 269.799567][T10749] BTRFS info (device loop1): enabling free space tree [ 269.897778][T10754] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 269.942191][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 269.942217][ T31] audit: type=1800 audit(1790772020.365:197): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1799" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 270.225984][T10802] loop4: detected capacity change from 0 to 4096 [ 270.341506][T10802] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 270.341544][T10802] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 270.525170][ T5613] ocfs2: Unmounting device (7,0) on (node local) [ 270.602217][T10809] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 270.602363][T10809] syzkaller1: linktype set to 780 [ 270.636430][ T5612] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 270.748690][T10811] loop6: detected capacity change from 0 to 512 [ 270.764499][T10811] EXT4-fs: Ignoring removed oldalloc option [ 270.829912][T10811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.851219][T10811] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.069886][ T13] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 271.112868][ T5610] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 271.112915][ T5610] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 271.112936][ T5610] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 271.113107][ T50] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 271.459142][ T8124] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.482342][ T5736] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.654850][ T5736] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 271.666920][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 271.666985][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.674698][ T5736] usb 2-1: config 0 descriptor?? [ 271.676009][T10818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.130201][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.130239][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.130264][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.130289][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.130314][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.130340][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.131571][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.131597][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.131620][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.131645][ T5736] uclogic 0003:5543:0064.001B: unknown main item tag 0x0 [ 272.146081][ T5736] uclogic 0003:5543:0064.001B: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 272.384075][ T5736] usb 2-1: USB disconnect, device number 13 [ 272.559182][T10850] fido_id[10850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 273.037621][T10858] sctp: Trying to GSO but underlying device doesn't support it. [ 273.501979][ T5736] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.682306][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 273.704714][ T5736] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 273.706357][ T5736] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 273.706388][ T5736] usb 5-1: config 0 has no interface number 0 [ 273.706436][ T5736] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 273.706475][ T5736] usb 5-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.706502][ T5736] usb 5-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 273.706532][ T5736] usb 5-1: config 0 interface 86 has no altsetting 0 [ 273.708620][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.708653][ T5736] usb 5-1: Product: syz [ 273.708672][ T5736] usb 5-1: Manufacturer: syz [ 273.708691][ T5736] usb 5-1: SerialNumber: syz [ 273.799244][ T5736] usb 5-1: config 0 descriptor?? [ 273.800869][T10866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.863056][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1852'. [ 274.012929][ T5736] ljca 5-1:0.86: submit rx urb failed: -90 [ 274.013004][ T5736] ljca 5-1:0.86: probe with driver ljca failed with error -90 [ 274.040340][ T5736] usb 5-1: USB disconnect, device number 16 [ 274.116861][T10874] loop1: detected capacity change from 0 to 32768 [ 274.139094][T10874] (syz.1.1847,10874,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.139402][T10874] (syz.1.1847,10874,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.230264][T10874] JBD2: Ignoring recovery information on journal [ 274.298064][T10874] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 274.299599][T10898] kAFS: bad VL server IP address [ 274.343276][T10890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.343456][T10890] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 274.420624][T10890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.420812][T10890] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.511056][T10903] loop2: detected capacity change from 0 to 4096 [ 274.526001][T10903] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 274.721592][T10903] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 274.754903][T10890] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.756695][T10890] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 274.799325][T10890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.799455][T10890] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.912615][T10890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.912742][T10890] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 274.987196][T10890] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 274.987325][T10890] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 275.059168][ T5611] ntfs3(loop2): ino=1a, ntfs_sync_fs failed, -22. [ 275.072042][T10890] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 275.214738][T10874] (syz.1.1847,10874,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 275.447037][T10920] loop2: detected capacity change from 0 to 512 [ 275.638736][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.679849][T10928] netlink: 'syz.0.1868': attribute type 12 has an invalid length. [ 275.745906][ T5612] ocfs2: Unmounting device (7,1) on (node local) [ 275.976659][T10915] loop4: detected capacity change from 0 to 32768 [ 276.049797][T10915] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 276.290353][T10941] loop6: detected capacity change from 0 to 128 [ 276.334531][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 276.362684][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 276.410584][T10941] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.411124][T10941] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.452399][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 276.587610][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.739332][ T8124] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.800806][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 276.842514][ T5616] Bluetooth: hci2: command 0x2016 tx timeout [ 276.925084][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 277.017315][ T5616] Bluetooth: hci5: command 0x0c1a tx timeout [ 277.055207][ T5610] ocfs2: Unmounting device (7,4) on (node local) [ 277.283810][T10935] loop0: detected capacity change from 0 to 32768 [ 277.320802][T10935] JBD2: Ignoring recovery information on journal [ 277.520384][T10935] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 277.975249][ T5613] ocfs2: Unmounting device (7,0) on (node local) [ 278.421317][T10959] loop2: detected capacity change from 0 to 32768 [ 278.432855][T10984] loop3: detected capacity change from 0 to 1024 [ 278.442624][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 278.463324][T10959] (syz.2.1879,10959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.463876][T10959] (syz.2.1879,10959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.532428][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 278.533122][T10959] JBD2: Ignoring recovery information on journal [ 278.618086][T10959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 278.639706][T10984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.842267][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 278.909364][T10984] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 278.928712][ T5616] Bluetooth: hci2: command 0x2016 tx timeout [ 279.002074][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 279.070526][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.081916][ T5616] Bluetooth: hci5: command 0x0c1a tx timeout [ 279.115520][T10959] (syz.2.1879,10959,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 279.297388][ T5611] ocfs2: Unmounting device (7,2) on (node local) [ 279.458070][T10982] loop1: detected capacity change from 0 to 32768 [ 279.502351][T10982] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 279.553559][T10982] XFS (loop1): Ending clean mount [ 279.943177][T11028] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 279.943177][T11028] The task syz.2.1902 (11028) triggered the difference, watch for misbehavior. [ 279.958206][ T5612] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 280.339410][T11027] loop6: detected capacity change from 0 to 32768 [ 280.397099][T11027] JBD2: Ignoring recovery information on journal [ 280.489729][T11027] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 280.714987][T11041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.854589][T11047] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [54] [ 280.854618][T11047] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 280.854638][T11047] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 280.854653][T11047] One or more global auth toks could not properly register; rc = [-22] [ 280.854708][T11047] Error validating options; rc = [-22] [ 280.861692][ T8124] ocfs2: Unmounting device (7,6) on (node local) [ 280.966936][T11051] loop3: detected capacity change from 0 to 512 [ 280.968108][T11051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.989629][T11051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.011354][T11051] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1914: bad orphan inode 131083 [ 281.011395][T11051] loop3: lost filesystem error report for type 5 error -117 [ 281.012034][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 281.012059][ C0] EXT4-fs (loop3): initial error at time 1790772031: ext4_orphan_get:1429 [ 281.012087][ C0] EXT4-fs (loop3): last error at time 1790772031: ext4_orphan_get:1429 [ 281.038577][T11051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.303496][T11054] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1914: Logical block already allocated [ 281.479344][T11054] CacheFiles: mkdir cache failed with error -117 [ 281.479416][T11054] CacheFiles: Failed to register: -117 [ 281.598713][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.640048][T11069] loop1: detected capacity change from 0 to 128 [ 281.759532][T11069] affs: No valid root block on device loop1 [ 281.842446][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1924'. [ 282.101889][T11090] loop2: detected capacity change from 0 to 512 [ 282.105324][T11090] EXT4-fs: Ignoring removed i_version option [ 282.125599][T11090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.161585][T11092] loop4: detected capacity change from 0 to 512 [ 282.175199][T11092] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.229106][T11090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.229220][T11090] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.294829][T11092] EXT4-fs (loop4): 1 truncate cleaned up [ 282.326770][T11092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.470685][T11103] loop0: detected capacity change from 0 to 1024 [ 282.561952][T11103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.635036][ T31] audit: type=1800 audit(1790772034.074:198): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1931" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 282.678209][T11092] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.1930: bad extra_isize 62 (inode size 256) [ 282.828317][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.902147][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.917072][T11092] EXT4-fs (loop4): Remounting filesystem read-only [ 282.934621][T11117] loop3: detected capacity change from 0 to 512 [ 282.974680][T11117] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 283.010250][T11117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.010543][T11117] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.1940: Block bitmap for bg 0 marked uninitialized [ 283.010574][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.011801][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 283.011825][ C1] EXT4-fs (loop3): initial error at time 1790772034: ext4_read_block_bitmap_nowait:521 [ 283.011854][ C1] EXT4-fs (loop3): last error at time 1790772034: ext4_read_block_bitmap_nowait:521 [ 283.020174][T11117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 283.020203][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.020698][T11117] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.1940: Block bitmap for bg 0 marked uninitialized [ 283.020730][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.037097][T11117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 283.037130][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.047307][ T5736] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.049979][T11117] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.1940: Block bitmap for bg 0 marked uninitialized [ 283.050013][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.108592][T11117] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 283.108623][T11117] loop3: lost filesystem error report for type 5 error -117 [ 283.109197][T11117] EXT4-fs (loop3): 1 orphan inode deleted [ 283.120243][T11117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 283.200867][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.211867][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 283.212623][ T5736] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 283.213811][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.249189][ T5736] usb 2-1: config 0 descriptor?? [ 283.417807][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.459165][ T5736] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 283.473842][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.474859][ T5736] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 283.474912][ T5736] usb 2-1: media controller created [ 283.513276][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.673115][ T5736] az6027: usb out operation failed. (-71) [ 283.673522][ T5736] az6027: usb out operation failed. (-71) [ 283.673539][ T5736] stb0899_attach: Driver disabled by Kconfig [ 283.673551][ T5736] az6027: no front-end attached [ 283.673551][ T5736] [ 283.674061][ T5736] az6027: usb out operation failed. (-71) [ 283.674078][ T5736] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 283.724069][ T5736] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 283.728601][ T5736] dvb-usb: schedule remote query interval to 400 msecs. [ 283.728640][ T5736] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 283.767795][ T5736] usb 2-1: USB disconnect, device number 14 [ 283.934981][ T5736] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 283.968382][T11143] loop2: detected capacity change from 0 to 2048 [ 284.017461][T11143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.017568][T11143] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.193145][T11154] tipc: Started in network mode [ 284.193181][T11154] tipc: Node identity ac1414aa, cluster identity 4711 [ 284.193991][T11154] tipc: New replicast peer: 172.20.20.187 [ 284.220863][T11154] tipc: Enabled bearer , priority 10 [ 284.259168][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.351156][T11159] loop3: detected capacity change from 0 to 256 [ 284.367811][T11159] exfat: Deprecated parameter 'utf8' [ 284.367835][T11159] exfat: Deprecated parameter 'utf8' [ 284.367922][T11159] exfat: Deprecated parameter 'namecase' [ 284.425451][T11159] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 284.835984][T11173] nvme_fcloop: unknown parameter or missing value 'wwnn=' [ 285.008808][T11182] loop2: detected capacity change from 0 to 256 [ 285.021484][T11182] FAT-fs (loop2): Directory bread(block 1285) failed [ 285.021525][T11182] FAT-fs (loop2): Directory bread(block 1286) failed [ 285.021552][T11182] FAT-fs (loop2): Directory bread(block 1287) failed [ 285.032469][T11182] FAT-fs (loop2): Directory bread(block 1288) failed [ 285.076738][T11182] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 285.318761][ T187] tipc: Node number set to 2886997162 [ 285.508728][T11195] loop2: detected capacity change from 0 to 256 [ 285.515861][T11195] exfat: Deprecated parameter 'namecase' [ 285.551644][T11195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 285.754330][ T30] hid_parser_main: 443 callbacks suppressed [ 285.754359][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754389][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754413][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754437][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754462][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754486][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754510][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754534][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754558][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.754582][ T30] hid-generic 0006:000C:0008.001C: unknown main item tag 0x0 [ 285.831438][ T30] hid-generic 0006:000C:0008.001C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 286.176887][T11201] fido_id[11201]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 286.350634][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1981'. [ 286.384728][ T30] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 286.535430][ T30] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 286.536789][ T30] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 286.536818][ T30] usb 3-1: config 0 has no interface number 0 [ 286.555280][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.555313][ T30] usb 3-1: Product: syz [ 286.555331][ T30] usb 3-1: Manufacturer: syz [ 286.555349][ T30] usb 3-1: SerialNumber: syz [ 286.567724][ T30] usb 3-1: config 0 descriptor?? [ 286.652280][ T5736] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 286.788225][ T30] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 286.818039][ T30] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 286.820514][ T30] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 286.820633][ T30] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 286.839982][ T5736] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 286.861032][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.861076][ T5736] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 286.861138][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.861171][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.861204][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 286.861255][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.867432][ T30] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 286.884108][ T5846] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 286.953630][ T5736] usb 2-1: config 0 descriptor?? [ 287.042589][ T5846] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 287.046673][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.046704][ T5846] usb 1-1: Product: syz [ 287.046749][ T5846] usb 1-1: Manufacturer: syz [ 287.046768][ T5846] usb 1-1: SerialNumber: syz [ 287.094862][ T5846] usb 1-1: config 0 descriptor?? [ 287.217812][ T30] usb 3-1: USB disconnect, device number 18 [ 287.257116][ T30] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 287.316245][ T30] keyspan 3-1:0.133: device disconnected [ 287.345895][ T5846] usb 1-1: USB disconnect, device number 12 [ 287.395113][ T5736] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 287.395395][ T5736] hid-thrustmaster 0003:044F:B65D.001D: Wrong number of endpoints? [ 287.586802][ C0] hid-thrustmaster 0003:044F:B65D.001D: Unknown packet type 0x0, unable to proceed further with wheel init [ 287.700545][T11258] loop3: detected capacity change from 0 to 1024 [ 287.706874][T11258] EXT4-fs: Ignoring removed nobh option [ 287.706918][T11258] EXT4-fs: Ignoring removed bh option [ 287.784141][T11258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.789973][ T5846] usb 2-1: USB disconnect, device number 15 [ 288.016245][T11258] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 288.245022][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.688859][T11287] loop4: detected capacity change from 0 to 512 [ 288.727568][T11287] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2006: iget: bad i_size value: 38620345925642 [ 288.727613][T11287] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.731377][T11287] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2006: couldn't read orphan inode 15 (err -117) [ 288.731416][T11287] loop4: lost filesystem error report for type 5 error -117 [ 288.731953][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 288.731981][ C1] EXT4-fs (loop4): initial error at time 1790772040: ext4_orphan_get:1403: inode 15 [ 288.732017][ C1] EXT4-fs (loop4): last error at time 1790772040: ext4_orphan_get:1408 [ 288.739937][T11287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.778981][T11271] loop6: detected capacity change from 0 to 32768 [ 288.856284][T11271] JBD2: Ignoring recovery information on journal [ 288.959278][T11271] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 289.025711][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.171871][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.331992][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 289.332804][ T30] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 289.334069][ T30] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.334104][ T30] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.334132][ T30] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 289.334165][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.334230][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.337468][ T30] usb 3-1: config 0 descriptor?? [ 289.412121][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 289.412224][ T5616] Bluetooth: hci1: Injecting HCI hardware error event [ 289.414817][ T5618] Bluetooth: hci1: hardware error 0x00 [ 289.478411][ T8124] ocfs2: Unmounting device (7,6) on (node local) [ 289.556407][T11311] loop1: detected capacity change from 0 to 512 [ 289.608252][T11311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 289.608384][T11311] System zones: 1-12 [ 289.627644][T11311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.2020: missing EA_INODE flag [ 289.627677][T11311] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 289.632415][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 289.632437][ C0] EXT4-fs (loop1): initial error at time 1790772041: ext4_xattr_inode_iget:437: inode 12 [ 289.632479][ C0] EXT4-fs (loop1): last error at time 1790772041: ext4_xattr_inode_iget:437: inode 12 [ 289.728486][T11311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2020: error while reading EA inode 12 err=-117 [ 289.728556][T11311] loop1: lost filesystem error report for type 5 error -117 [ 289.734265][T11311] EXT4-fs (loop1): 1 orphan inode deleted [ 289.744614][T11311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.780448][T11317] loop0: detected capacity change from 0 to 512 [ 289.810759][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2019: iget: bad extended attribute block 134217728 [ 289.810802][T11317] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.811368][T11311] fscrypt (loop1, inode 15): Mutually exclusive encryption flags (0x1a) [ 289.824957][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 289.824980][ C0] EXT4-fs (loop0): initial error at time 1790772041: ext4_orphan_get:1403: inode 15 [ 289.825011][ C0] EXT4-fs (loop0): last error at time 1790772041: ext4_orphan_get:1403: inode 15 [ 289.858131][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2019: couldn't read orphan inode 15 (err -117) [ 289.858173][T11317] loop0: lost filesystem error report for type 5 error -117 [ 289.914269][T11317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.968458][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.063235][ T31] audit: type=1800 audit(1790772041.504:199): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2019" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 290.074343][ T30] usb 3-1: USB disconnect, device number 19 [ 290.091306][T11320] batman_adv: batadv0: Adding interface: macsec1 [ 290.091327][T11320] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.091363][T11320] batman_adv: batadv0: Interface activated: macsec1 [ 290.270780][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.387349][T11331] loop6: detected capacity change from 0 to 64 [ 290.506886][T11336] bond0: entered promiscuous mode [ 290.506912][T11336] bond_slave_0: entered promiscuous mode [ 290.507137][T11336] bond_slave_1: entered promiscuous mode [ 290.555097][T11336] batadv0: entered promiscuous mode [ 290.582744][T11336] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 290.624554][T11336] bond0: left promiscuous mode [ 290.624583][T11336] bond_slave_0: left promiscuous mode [ 290.624814][T11336] bond_slave_1: left promiscuous mode [ 290.629116][T11336] batadv0: left promiscuous mode [ 291.095630][T11360] loop2: detected capacity change from 0 to 128 [ 291.167727][T11361] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 291.326946][T11370] loop6: detected capacity change from 0 to 256 [ 291.419744][T11370] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 291.420167][T11370] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 291.500619][ T5618] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 291.626777][T11376] loop2: detected capacity change from 0 to 128 [ 292.165095][T11391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.190698][T11391] loop3: detected capacity change from 0 to 256 [ 292.215761][T11391] exfat: Deprecated parameter 'namecase' [ 292.257387][T11391] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 292.365342][ T5846] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 292.468476][T11399] loop0: detected capacity change from 0 to 64 [ 292.512652][ T5846] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.513852][ T5846] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.513880][ T5846] usb 3-1: config 0 has no interface number 0 [ 292.513926][ T5846] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.513959][ T5846] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 292.514006][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.520652][ T5846] usb 3-1: config 0 descriptor?? [ 292.521540][T11389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.625267][ T5846] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 292.761355][ T5846] usb 3-1: USB disconnect, device number 20 [ 293.488699][T11423] jffs2: notice: (11423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.589362][T11435] loop6: detected capacity change from 0 to 2048 [ 293.633957][T11435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.960734][ T31] audit: type=1400 audit(1790772045.394:200): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=11440 comm="syz.0.2072" name=223A6F offset=61 [ 294.085582][T11450] loop1: detected capacity change from 0 to 512 [ 294.148988][T11454] tipc: Started in network mode [ 294.149023][T11454] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 294.149078][T11454] tipc: Enabling of bearer rejected, failed to enable media [ 316.446766][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.883764][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.328112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.723207][ T32] INFO: task jbd2/sda1-8:4939 blocked in I/O wait for more than 143 seconds. [ 445.723234][ T32] Tainted: G ** replaying previous printk message ** [ 445.723234][ T32] Tainted: G L syzkaller #0 [ 445.723247][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.723256][ T32] task:jbd2/sda1-8 state:D stack:26184 pid:4939 tgid:4939 ppid:2 task_flags:0x240040 flags:0x00080000 [ 445.723314][ T32] Call Trace: [ 445.723321][ T32] [ 445.723336][ T32] __schedule+0x17db/0x58f0 [ 445.723377][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.723413][ T32] ? percpu_ref_put_many+0x18e/0x240 [ 445.723449][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.723483][ T32] ? __pfx___schedule+0x10/0x10 [ 445.723516][ T32] ? schedule+0x90/0x2b0 [ 445.723552][ T32] schedule+0x164/0x2b0 [ 445.723580][ T32] io_schedule+0x7f/0xd0 [ 445.723609][ T32] bit_wait_io+0x11/0xd0 [ 445.723639][ T32] __wait_on_bit+0xac/0x300 [ 445.723667][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.723698][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.723728][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.723756][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.723788][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.723816][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.723842][ T32] ? __wait_on_buffer+0xe/0x80 [ 445.723871][ T32] jbd2_journal_commit_transaction+0x2f1d/0x5b70 [ 445.723894][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.723918][ T32] ? trace_hrtimer_start+0x82/0x200 [ 445.723970][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 445.724003][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.724043][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724072][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724099][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724128][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.724173][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724198][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724221][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.724247][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724270][ T32] ? __timer_delete_sync+0x4a7/0x520 [ 445.724297][ T32] kjournald2+0x3bc/0x750 [ 445.724340][ T32] ? __pfx_kjournald2+0x10/0x10 [ 445.724365][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724390][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 445.724419][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724443][ T32] ? __kthread_parkme+0x71/0x1f0 [ 445.724474][ T32] ? __kthread_parkme+0x199/0x1f0 [ 445.724509][ T32] kthread+0x38b/0x480 [ 445.724534][ T32] ? __pfx_kjournald2+0x10/0x10 [ 445.724560][ T32] ? __pfx_kthread+0x10/0x10 [ 445.724582][ T32] ret_from_fork+0x514/0xb70 [ 445.724604][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 445.724624][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724647][ T32] ? __switch_to+0xc89/0x1420 [ 445.724678][ T32] ? __pfx_kthread+0x10/0x10 [ 445.724700][ T32] ret_from_fork_asm+0x1a/0x30 [ 445.724747][ T32] [ 445.724766][ T32] INFO: task syz-executor:5598 blocked in I/O wait for more than 143 seconds. [ 445.724784][ T32] Tainted: G L syzkaller #0 [ 445.724795][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.724803][ T32] task:syz-executor state:D stack:22352 pid:5598 tgid:5598 ppid:5597 task_flags:0x440100 flags:0x00080000 [ 445.724856][ T32] Call Trace: [ 445.724863][ T32] [ 445.724875][ T32] __schedule+0x17db/0x58f0 [ 445.724910][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724933][ T32] ? lock_acquire+0x115/0x350 [ 445.724961][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.724992][ T32] ? __pfx___schedule+0x10/0x10 [ 445.725026][ T32] ? schedule+0x90/0x2b0 [ 445.725055][ T32] schedule+0x164/0x2b0 [ 445.725082][ T32] io_schedule+0x7f/0xd0 [ 445.725111][ T32] bit_wait_io+0x11/0xd0 [ 445.725161][ T32] __wait_on_bit+0xac/0x300 [ 445.725189][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.725220][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.725250][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.725278][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.725310][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.725338][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.725369][ T32] do_get_write_access+0x662/0x1070 [ 445.725418][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.725454][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.725493][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.725530][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 445.725549][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 445.725580][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.725611][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.725651][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.725688][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.725708][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.725726][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.725757][ T32] file_update_time_flags+0x399/0x440 [ 445.725785][ T32] ext4_page_mkwrite+0x224/0x1140 [ 445.725806][ T32] ? reacquire_held_locks+0x117/0x1a0 [ 445.725838][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.725867][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 445.725885][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.725916][ T32] do_page_mkwrite+0x147/0x310 [ 445.725942][ T32] do_wp_page+0x1a9c/0x4b80 [ 445.725989][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 445.726014][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 445.726048][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.726077][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726111][ T32] handle_mm_fault+0x15d7/0x3750 [ 445.726170][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.726209][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.726237][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 445.726257][ T32] ? __pfx_set_user_sigmask+0x10/0x10 [ 445.726296][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726330][ T32] do_user_addr_fault+0xa4f/0x1340 [ 445.726359][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726385][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726408][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 445.726432][ T32] exc_page_fault+0x6a/0xc0 [ 445.726461][ T32] asm_exc_page_fault+0x26/0x30 [ 445.726481][ T32] RIP: 0033:0x7f268b27c6e2 [ 445.726499][ T32] RSP: 002b:00007ffe10aa7d90 EFLAGS: 00010246 [ 445.726517][ T32] RAX: 00007f26892a4000 RBX: 000055555bb38810 RCX: 0000000000000000 [ 445.726535][ T32] RDX: 00000000000010d8 RSI: 000055555bb3c3f0 RDI: 0000000000000001 [ 445.726549][ T32] RBP: 00007ffe10aa8290 R08: 000055555bb3c820 R09: 000000000000009f [ 445.726563][ T32] R10: 0000000000040000 R11: 0000000000000001 R12: 00007ffe10aa80d0 [ 445.726576][ T32] R13: 00007ffe10aa7ec0 R14: 585858582e7a7973 R15: 00007ffe10aa7e10 [ 445.726608][ T32] [ 445.726660][ T32] INFO: task syz.6.2071:11439 blocked in I/O wait for more than 143 seconds. [ 445.726677][ T32] Tainted: G L syzkaller #0 [ 445.726688][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.726697][ T32] task:syz.6.2071 state:D stack:25608 pid:11439 tgid:11439 ppid:8124 task_flags:0x440040 flags:0x00080002 [ 445.726754][ T32] Call Trace: [ 445.726760][ T32] [ 445.726772][ T32] __schedule+0x17db/0x58f0 [ 445.726808][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726831][ T32] ? lock_acquire+0x115/0x350 [ 445.726859][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.726890][ T32] ? __pfx___schedule+0x10/0x10 [ 445.726923][ T32] ? schedule+0x90/0x2b0 [ 445.726951][ T32] schedule+0x164/0x2b0 [ 445.726979][ T32] io_schedule+0x7f/0xd0 [ 445.727007][ T32] bit_wait_io+0x11/0xd0 [ 445.727037][ T32] __wait_on_bit+0xac/0x300 [ 445.727065][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.727096][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.727125][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.727173][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.727204][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.727233][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.727265][ T32] do_get_write_access+0x662/0x1070 [ 445.727313][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.727350][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.727389][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.727421][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 445.727440][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 445.727471][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.727501][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.727546][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.727582][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.727603][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.727621][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.727652][ T32] file_update_time_flags+0x399/0x440 [ 445.727679][ T32] ext4_page_mkwrite+0x224/0x1140 [ 445.727708][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 445.727742][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 445.727772][ T32] do_page_mkwrite+0x147/0x310 [ 445.727798][ T32] do_pte_missing+0x757/0x34b0 [ 445.727827][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.727853][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.727887][ T32] handle_mm_fault+0x1a53/0x3750 [ 445.727926][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.727966][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.727994][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 445.728027][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.728062][ T32] do_user_addr_fault+0xa4f/0x1340 [ 445.728090][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.728116][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.728158][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 445.728182][ T32] exc_page_fault+0x6a/0xc0 [ 445.728212][ T32] asm_exc_page_fault+0x26/0x30 [ 445.728231][ T32] RIP: 0033:0x7fa4bbe727a9 [ 445.728248][ T32] RSP: 002b:00007ffe7a331060 EFLAGS: 00010202 [ 445.728266][ T32] RAX: 0000001b30323000 RBX: ffffffff817b3581 RCX: 0000001b30322ff8 [ 445.728280][ T32] RDX: 0000001b2fd2421c RSI: 0000000000000008 RDI: 00007fa4bcd55720 [ 445.728294][ T32] RBP: 000000000000004b R08: 00007fa4bc210000 R09: 00007fa4bc212000 [ 445.728308][ T32] R10: 00000000817b3585 R11: 0000000000000001 R12: 00007fa4bc226038 [ 445.728322][ T32] R13: 000000000000004c R14: ffffffff817b38ca R15: 00007fa4bcd55720 [ 445.728337][ T32] ? __cpu_to_node+0x1a/0xe0 [ 445.728369][ T32] ? numa_cpu_node+0x151/0x170 [ 445.728409][ T32] [ 445.728417][ T32] INFO: task syz.3.2076:11444 blocked in I/O wait for more than 143 seconds. [ 445.728434][ T32] Tainted: G L syzkaller #0 [ 445.728445][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.728453][ T32] task:syz.3.2076 state:D stack:25608 pid:11444 tgid:11444 ppid:5614 task_flags:0x440040 flags:0x00080002 [ 445.728509][ T32] Call Trace: [ 445.728516][ T32] [ 445.728532][ T32] __schedule+0x17db/0x58f0 [ 445.728567][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.728590][ T32] ? lock_acquire+0x115/0x350 [ 445.728626][ T32] ? __pfx___schedule+0x10/0x10 [ 445.728659][ T32] ? schedule+0x90/0x2b0 [ 445.728687][ T32] schedule+0x164/0x2b0 [ 445.728715][ T32] io_schedule+0x7f/0xd0 [ 445.728743][ T32] bit_wait_io+0x11/0xd0 [ 445.728772][ T32] __wait_on_bit+0xac/0x300 [ 445.728799][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.728830][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.728859][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.728887][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.728919][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.728947][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.728978][ T32] do_get_write_access+0x662/0x1070 [ 445.729027][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.729064][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.729102][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.729153][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 445.729172][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 445.729202][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.729233][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.729273][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.729309][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.729328][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.729346][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.729377][ T32] file_update_time_flags+0x399/0x440 [ 445.729403][ T32] ext4_page_mkwrite+0x224/0x1140 [ 445.729432][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 445.729465][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 445.729494][ T32] do_page_mkwrite+0x147/0x310 [ 445.729520][ T32] do_pte_missing+0x757/0x34b0 [ 445.729553][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.729579][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.729613][ T32] handle_mm_fault+0x1a53/0x3750 [ 445.729652][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.729691][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.729719][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 445.729751][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.729785][ T32] do_user_addr_fault+0xa4f/0x1340 [ 445.729812][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.729837][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.729860][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 445.729884][ T32] exc_page_fault+0x6a/0xc0 [ 445.729913][ T32] asm_exc_page_fault+0x26/0x30 [ 445.729932][ T32] RIP: 0033:0x7fc3f8a727a9 [ 445.729949][ T32] RSP: 002b:00007ffe8ce8d8a0 EFLAGS: 00010202 [ 445.729966][ T32] RAX: 0000001b3391e000 RBX: ffffffff8be2a9fe RCX: 0000001b3391dff8 [ 445.729981][ T32] RDX: 0000001b3332421c RSI: 0000000000000008 RDI: 00007fc3f9955720 [ 445.729995][ T32] RBP: 0000000000000081 R08: 00007fc3f8e10000 R09: 00007fc3f8e12000 [ 445.730009][ T32] R10: 000000008be2aa02 R11: 0000000000000003 R12: 00007fc3f8e26038 [ 445.730022][ T32] R13: 000000000000029d R14: ffffffff8be2a3ef R15: 00007fc3f9955720 [ 445.730039][ T32] ? number+0x12f/0xed0 [ 445.730062][ T32] ? number+0x73e/0xed0 [ 445.730093][ T32] [ 445.730102][ T32] INFO: task syz.0.2080:11456 blocked in I/O wait for more than 143 seconds. [ 445.730119][ T32] Tainted: G L syzkaller #0 [ 445.730149][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.730157][ T32] task:syz.0.2080 state:D stack:26080 pid:11456 tgid:11456 ppid:5613 task_flags:0x440040 flags:0x00080002 [ 445.730214][ T32] Call Trace: [ 445.730221][ T32] [ 445.730233][ T32] __schedule+0x17db/0x58f0 [ 445.730268][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.730292][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.730320][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.730347][ T32] ? __pfx___schedule+0x10/0x10 [ 445.730380][ T32] ? schedule+0x90/0x2b0 [ 445.730409][ T32] schedule+0x164/0x2b0 [ 445.730437][ T32] io_schedule+0x7f/0xd0 [ 445.730464][ T32] bit_wait_io+0x11/0xd0 [ 445.730494][ T32] __wait_on_bit+0xac/0x300 [ 445.730521][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.730556][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.730586][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.730613][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.730645][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.730673][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.730704][ T32] do_get_write_access+0x662/0x1070 [ 445.730752][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.730788][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.730827][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.730858][ T32] ? trace_kmem_cache_alloc+0x29/0xe0 [ 445.730877][ T32] ? jbd2__journal_start+0x145/0x5d0 [ 445.730907][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.730938][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.730993][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.731030][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.731049][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.731068][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.731098][ T32] file_update_time_flags+0x399/0x440 [ 445.731125][ T32] ext4_page_mkwrite+0x224/0x1140 [ 445.731173][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 445.731206][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 445.731226][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.731250][ T32] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 445.731289][ T32] do_page_mkwrite+0x147/0x310 [ 445.731315][ T32] do_pte_missing+0x757/0x34b0 [ 445.731341][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 445.731367][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.731392][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.731415][ T32] ? __pmd_alloc+0x40a/0x5c0 [ 445.731448][ T32] handle_mm_fault+0x1a53/0x3750 [ 445.731487][ T32] ? handle_mm_fault+0xf1/0x3750 [ 445.731530][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.731558][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 445.731602][ T32] do_user_addr_fault+0xa4f/0x1340 [ 445.731629][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.731779][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.731815][ T32] ? trace_page_fault_user+0x84/0x1e0 [ 445.731847][ T32] exc_page_fault+0x6a/0xc0 [ 445.731887][ T32] asm_exc_page_fault+0x26/0x30 [ 445.731914][ T32] RIP: 0033:0x7f45e5c6baa3 [ 445.731937][ T32] RSP: 002b:00007fffada89c60 EFLAGS: 00010246 [ 445.731960][ T32] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b33064000 [ 445.731979][ T32] RDX: 0000001b33024000 RSI: 0000000000600000 RDI: 00007f45e5fe0708 [ 445.731999][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.732016][ T32] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 445.732032][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffada89ef0 [ 445.732072][ T32] [ 445.732084][ T32] INFO: task syz.4.2082:11457 blocked in I/O wait for more than 143 seconds. [ 445.732108][ T32] Tainted: G L syzkaller #0 [ 445.732152][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.732163][ T32] task:syz.4.2082 state:D stack:27216 pid:11457 tgid:11457 ppid:5610 task_flags:0x440040 flags:0x00080002 [ 445.732243][ T32] Call Trace: [ 445.732252][ T32] [ 445.732268][ T32] __schedule+0x17db/0x58f0 [ 445.732350][ T32] ? __pfx___schedule+0x10/0x10 [ 445.732407][ T32] ? schedule+0x90/0x2b0 [ 445.732445][ T32] schedule+0x164/0x2b0 [ 445.732483][ T32] io_schedule+0x7f/0xd0 [ 445.732521][ T32] bit_wait_io+0x11/0xd0 [ 445.732568][ T32] __wait_on_bit+0xac/0x300 [ 445.732607][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.732649][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.732691][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.732730][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.732774][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.732813][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.732856][ T32] do_get_write_access+0x662/0x1070 [ 445.732921][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.732971][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.733024][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.733072][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.733114][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.733193][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.733242][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.733270][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.733295][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.733327][ T32] ? mnt_get_write_access+0x216/0x280 [ 445.733357][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.733397][ T32] touch_atime+0x568/0x670 [ 445.733425][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.733470][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 445.733516][ T32] mmap_region+0xe94/0x25b0 [ 445.733573][ T32] ? __page_table_check_zero+0x6c/0x430 [ 445.733612][ T32] ? __pfx_mmap_region+0x10/0x10 [ 445.733649][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.733682][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.733733][ T32] ? lock_acquire+0x115/0x350 [ 445.733772][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.733803][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.733885][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.733937][ T32] ? mt_find+0x186/0x630 [ 445.733983][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734014][ T32] ? mt_find+0x5ff/0x630 [ 445.734058][ T32] ? mt_find+0x186/0x630 [ 445.734099][ T32] ? __pfx_mt_find+0x10/0x10 [ 445.734175][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734208][ T32] ? security_mmap_addr+0x71/0x240 [ 445.734242][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734273][ T32] ? shmem_mapping+0xd/0x50 [ 445.734302][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734334][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 445.734377][ T32] do_mmap+0xe0a/0x1300 [ 445.734414][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734457][ T32] ? __pfx_do_mmap+0x10/0x10 [ 445.734492][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734536][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734577][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 445.734609][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734640][ T32] ? down_write_killable+0x17e/0x240 [ 445.734688][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 445.734729][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734773][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 445.734808][ T32] ? lock_acquire+0x115/0x350 [ 445.734844][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 445.734880][ T32] ? __fget_files+0x2a/0x420 [ 445.734925][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.734957][ T32] ? __fget_files+0x3a2/0x420 [ 445.734996][ T32] ? __fget_files+0x2a/0x420 [ 445.735041][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 445.735090][ T32] do_syscall_64+0x166/0x520 [ 445.735151][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.735181][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.735216][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.735244][ T32] RIP: 0033:0x7fd47059dec2 [ 445.735267][ T32] RSP: 002b:00007fff384d19f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 445.735295][ T32] RAX: ffffffffffffffda RBX: 0000001b33464000 RCX: 00007fd47059dec2 [ 445.735315][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33464000 [ 445.735333][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 445.735351][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000151 [ 445.735369][ T32] R13: 00000000000927c0 R14: 0000000000047d13 R15: 00007fff384d1cd0 [ 445.735409][ T32] [ 445.735421][ T32] INFO: task syz.1.2081:11458 blocked in I/O wait for more than 143 seconds. [ 445.735444][ T32] Tainted: G L syzkaller #0 [ 445.735458][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.735470][ T32] task:syz.1.2081 state:D stack:27216 pid:11458 tgid:11458 ppid:5612 task_flags:0x440040 flags:0x00080002 [ 445.735550][ T32] Call Trace: [ 445.735559][ T32] [ 445.735575][ T32] __schedule+0x17db/0x58f0 [ 445.735644][ T32] ? __pfx___schedule+0x10/0x10 [ 445.735689][ T32] ? schedule+0x90/0x2b0 [ 445.735728][ T32] schedule+0x164/0x2b0 [ 445.735765][ T32] io_schedule+0x7f/0xd0 [ 445.735803][ T32] bit_wait_io+0x11/0xd0 [ 445.735843][ T32] __wait_on_bit+0xac/0x300 [ 445.735880][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.735922][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.735963][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.736000][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.736043][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.736082][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.736124][ T32] do_get_write_access+0x662/0x1070 [ 445.736214][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.736263][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.736316][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.736362][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.736403][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.736457][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.736506][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.736537][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.736563][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.736595][ T32] ? mnt_get_write_access+0x216/0x280 [ 445.736626][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.736667][ T32] touch_atime+0x568/0x670 [ 445.736693][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.736739][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 445.736784][ T32] mmap_region+0xe94/0x25b0 [ 445.736832][ T32] ? __page_table_check_zero+0x6c/0x430 [ 445.736871][ T32] ? __pfx_mmap_region+0x10/0x10 [ 445.736907][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.736939][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.736989][ T32] ? lock_acquire+0x115/0x350 [ 445.737027][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737059][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.737164][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737217][ T32] ? mt_find+0x186/0x630 [ 445.737262][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737294][ T32] ? mt_find+0x5ff/0x630 [ 445.737337][ T32] ? mt_find+0x186/0x630 [ 445.737378][ T32] ? __pfx_mt_find+0x10/0x10 [ 445.737429][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737460][ T32] ? security_mmap_addr+0x71/0x240 [ 445.737495][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737530][ T32] ? shmem_mapping+0xd/0x50 [ 445.737560][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737591][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 445.737634][ T32] do_mmap+0xe0a/0x1300 [ 445.737671][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737714][ T32] ? __pfx_do_mmap+0x10/0x10 [ 445.737749][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737788][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737828][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 445.737860][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.737891][ T32] ? down_write_killable+0x17e/0x240 [ 445.737939][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 445.737980][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.738023][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 445.738059][ T32] ? lock_acquire+0x115/0x350 [ 445.738093][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 445.738152][ T32] ? __fget_files+0x2a/0x420 [ 445.738198][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.738229][ T32] ? __fget_files+0x3a2/0x420 [ 445.738268][ T32] ? __fget_files+0x2a/0x420 [ 445.738313][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 445.738361][ T32] do_syscall_64+0x166/0x520 [ 445.738399][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.738429][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.738463][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.738491][ T32] RIP: 0033:0x7fa253d9dec2 [ 445.738514][ T32] RSP: 002b:00007fff1f4229b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 445.738546][ T32] RAX: ffffffffffffffda RBX: 0000001b33164000 RCX: 00007fa253d9dec2 [ 445.738566][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33164000 [ 445.738584][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 445.738602][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000143 [ 445.738619][ T32] R13: 00000000000927c0 R14: 0000000000047d1c R15: 00007fff1f422c90 [ 445.738660][ T32] [ 445.738671][ T32] INFO: task syz.2.2083:11459 blocked in I/O wait for more than 143 seconds. [ 445.738694][ T32] Tainted: G L syzkaller #0 [ 445.738708][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.738720][ T32] task:syz.2.2083 state:D stack:27216 pid:11459 tgid:11459 ppid:5611 task_flags:0x440040 flags:0x00080002 [ 445.738797][ T32] Call Trace: [ 445.738806][ T32] [ 445.738823][ T32] __schedule+0x17db/0x58f0 [ 445.738881][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 445.738925][ T32] ? __pfx___schedule+0x10/0x10 [ 445.738969][ T32] ? schedule+0x90/0x2b0 [ 445.739008][ T32] schedule+0x164/0x2b0 [ 445.739046][ T32] io_schedule+0x7f/0xd0 [ 445.739084][ T32] bit_wait_io+0x11/0xd0 [ 445.739123][ T32] __wait_on_bit+0xac/0x300 [ 445.739185][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.739227][ T32] out_of_line_wait_on_bit+0x13b/0x190 [ 445.739268][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 445.739305][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 445.739348][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 445.739386][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.739428][ T32] do_get_write_access+0x662/0x1070 [ 445.739493][ T32] jbd2_journal_get_write_access+0x1d7/0x230 [ 445.739547][ T32] __ext4_journal_get_write_access+0xf1/0x620 [ 445.739599][ T32] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 445.739646][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.739686][ T32] ext4_reserve_inode_write+0x294/0x360 [ 445.739741][ T32] __ext4_mark_inode_dirty+0x146/0x7b0 [ 445.739789][ T32] ext4_dirty_inode+0xd0/0x110 [ 445.739816][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 445.739841][ T32] __mark_inode_dirty+0x3a8/0x13b0 [ 445.739873][ T32] ? mnt_get_write_access+0x216/0x280 [ 445.739904][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.739943][ T32] touch_atime+0x568/0x670 [ 445.739970][ T32] ? ext4_file_mmap_prepare+0x277/0x450 [ 445.740016][ T32] ext4_file_mmap_prepare+0x277/0x450 [ 445.740061][ T32] mmap_region+0xe94/0x25b0 [ 445.740109][ T32] ? __page_table_check_zero+0x6c/0x430 [ 445.740173][ T32] ? __pfx_mmap_region+0x10/0x10 [ 445.740209][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740241][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.740292][ T32] ? lock_acquire+0x115/0x350 [ 445.740331][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740362][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.740443][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740495][ T32] ? mt_find+0x186/0x630 [ 445.740545][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740577][ T32] ? mt_find+0x5ff/0x630 [ 445.740620][ T32] ? mt_find+0x186/0x630 [ 445.740662][ T32] ? __pfx_mt_find+0x10/0x10 [ 445.740712][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740743][ T32] ? security_mmap_addr+0x71/0x240 [ 445.740776][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740808][ T32] ? shmem_mapping+0xd/0x50 [ 445.740837][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740869][ T32] ? memfd_check_seals_mmap+0xc5/0x220 [ 445.740911][ T32] do_mmap+0xe0a/0x1300 [ 445.740948][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.740991][ T32] ? __pfx_do_mmap+0x10/0x10 [ 445.741026][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.741065][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.741105][ T32] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 445.741160][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.741192][ T32] ? down_write_killable+0x17e/0x240 [ 445.741239][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 445.741281][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.741324][ T32] vm_mmap_pgoff+0x272/0x4e0 [ 445.741360][ T32] ? lock_acquire+0x115/0x350 [ 445.741394][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 445.741431][ T32] ? __fget_files+0x2a/0x420 [ 445.741475][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.741507][ T32] ? __fget_files+0x3a2/0x420 [ 445.741551][ T32] ? __fget_files+0x2a/0x420 [ 445.741596][ T32] ksys_mmap_pgoff+0x4dc/0x760 [ 445.741644][ T32] do_syscall_64+0x166/0x520 [ 445.741794][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.741825][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.741861][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.741889][ T32] RIP: 0033:0x7fe2f239dec2 [ 445.741912][ T32] RSP: 002b:00007ffdc2e79338 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 445.741938][ T32] RAX: ffffffffffffffda RBX: 0000001b33264000 RCX: 00007fe2f239dec2 [ 445.741960][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33264000 [ 445.741978][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 445.741996][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000163 [ 445.742013][ T32] R13: 00000000000927c0 R14: 0000000000047dca R15: 00007ffdc2e79610 [ 445.742053][ T32] [ 445.742067][ T32] [ 445.742067][ T32] Showing all locks held in the system: [ 445.742079][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 445.742098][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 445.742205][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 445.742223][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.742287][ T32] locks held by kworker/u8:2/43: 4, on CPU#0: [ 445.742305][ T32] #0: ffff888020aef940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 445.742379][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 445.742454][ T32] #2: ffff8880359dc0e8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 445.742545][ T32] #3: ffff8880359dac98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 445.742635][ T32] locks held by klogd/4966: 1, last CPU#0: [ 445.742653][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 445.742719][ T32] locks held by getty/5366: 2, on CPU#0: [ 445.742736][ T32] #0: ffff8880320bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.742800][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 445.742876][ T32] locks held by syz-executor/5598: 3, on CPU#0: [ 445.742895][ T32] #0: ffff888034363588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 445.742957][ T32] #1: ffff8880359dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 445.743020][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.743110][ T32] locks held by syz.6.2071/11439: 3, on CPU#0: [ 445.743153][ T32] #0: ffff88807ea2ce48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 445.743216][ T32] #1: ffff8880359dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 445.743280][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.743357][ T32] locks held by syz.3.2076/11444: 3, on CPU#0: [ 445.743376][ T32] #0: ffff888075779e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 445.743439][ T32] #1: ffff8880359dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 445.743504][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.743588][ T32] locks held by syz.0.2080/11456: 3, on CPU#0: [ 445.743607][ T32] #0: ffff88807a92dbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 445.743670][ T32] #1: ffff8880359dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 445.743736][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.743815][ T32] locks held by syz.4.2082/11457: 3, on CPU#0: [ 445.743834][ T32] #0: ffff8880793f3440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 445.743905][ T32] #1: ffff8880359dc460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 445.743988][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.744067][ T32] locks held by syz.1.2081/11458: 3, on CPU#0: [ 445.744086][ T32] #0: ffff888034234cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 445.744182][ T32] #1: ffff8880359dc460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 445.744264][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.744344][ T32] locks held by syz.2.2083/11459: 3, on CPU#0: [ 445.744362][ T32] #0: ffff88807f95b440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 445.744433][ T32] #1: ffff8880359dc460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 445.744515][ T32] #2: ffff8880359d8938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 445.744599][ T32] [ 445.744606][ T32] ============================================= [ 445.744606][ T32] [ 445.744617][ T32] NMI backtrace for cpu 1 [ 445.744635][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 445.744668][ T32] Tainted: [L]=SOFTLOCKUP [ 445.744679][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.744694][ T32] Call Trace: [ 445.744704][ T32] [ 445.744714][ T32] dump_stack_lvl+0xe8/0x150 [ 445.744754][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 445.744786][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.744832][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 445.744866][ T32] sys_info+0x135/0x170 [ 445.744891][ T32] watchdog+0xfd7/0x1030 [ 445.744929][ T32] ? watchdog+0x1c7/0x1030 [ 445.744966][ T32] kthread+0x38b/0x480 [ 445.744994][ T32] ? __pfx_watchdog+0x10/0x10 [ 445.745019][ T32] ? __pfx_kthread+0x10/0x10 [ 445.745049][ T32] ret_from_fork+0x514/0xb70 [ 445.745078][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 445.745103][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.745137][ T32] ? __switch_to+0xc89/0x1420 [ 445.745177][ T32] ? __pfx_kthread+0x10/0x10 [ 445.745206][ T32] ret_from_fork_asm+0x1a/0x30 [ 445.745266][ T32] [ 445.745298][ T32] Sending NMI from CPU 1 to CPUs 0: [ 445.745324][ C0] NMI backtrace for cpu 0 [ 445.745341][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.745370][ C0] Tainted: [L]=SOFTLOCKUP [ 445.745379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.745392][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 445.745424][ C0] Code: e8 5e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 05 d9 9c fb cc 44 89 f9 80 e1 07 [ 445.745443][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 445.745462][ C0] RAX: 1ffffffff35a8600 RBX: 00000000000003fd RCX: 0000000000000000 [ 445.745478][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 445.745492][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 445.745508][ C0] R10: dffffc0000000000 R11: ffffffff85736780 R12: dffffc0000000000 [ 445.745525][ C0] R13: 0000000000000000 R14: ffffffff9ad43300 R15: 0000000000000000 [ 445.745543][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 445.745562][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.745578][ C0] CR2: 00005604f19b7168 CR3: 000000007f38d000 CR4: 0000000000350ef0 [ 445.745597][ C0] Call Trace: [ 445.745605][ C0] [ 445.745616][ C0] wait_for_lsr+0x184/0x2f0 [ 445.745647][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 445.745690][ C0] serial8250_console_write+0xaa1/0x1200 [ 445.745717][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 445.745756][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 445.745784][ C0] ? __schedule+0x17f1/0x58f0 [ 445.745819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.745852][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 445.745891][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 445.745924][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.745951][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 445.745989][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.746016][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 445.746052][ C0] nbcon_kthread_func+0x679/0x880 [ 445.746084][ C0] ? nbcon_kthread_func+0x163/0x880 [ 445.746110][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 445.746138][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.746171][ C0] ? __kthread_parkme+0x71/0x1f0 [ 445.746208][ C0] ? __kthread_parkme+0x199/0x1f0 [ 445.746247][ C0] kthread+0x38b/0x480 [ 445.746270][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 445.746295][ C0] ? __pfx_kthread+0x10/0x10 [ 445.746319][ C0] ret_from_fork+0x514/0xb70 [ 445.746343][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 445.746365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.746393][ C0] ? __switch_to+0xc89/0x1420 [ 445.746428][ C0] ? __pfx_kthread+0x10/0x10 [ 445.746452][ C0] ret_from_fork_asm+0x1a/0x30 [ 445.746501][ C0] [ 445.747320][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 449.589242][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 449.599916][ T32] Tainted: [L]=SOFTLOCKUP [ 449.604257][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.614303][ T32] Call Trace: [ 449.617570][ T32] [ 449.620487][ T32] vpanic+0x56d/0xa60 [ 449.624486][ T32] ? __pfx_vpanic+0x10/0x10 [ 449.628999][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.634635][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 449.640189][ T32] panic+0xc5/0xd0 [ 449.643918][ T32] ? __pfx_panic+0x10/0x10 [ 449.648355][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 449.653385][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 449.659549][ T32] watchdog+0x1030/0x1030 [ 449.663883][ T32] ? watchdog+0x1c7/0x1030 [ 449.668307][ T32] kthread+0x38b/0x480 [ 449.672373][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.677047][ T32] ? __pfx_kthread+0x10/0x10 [ 449.681632][ T32] ret_from_fork+0x514/0xb70 [ 449.686224][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 449.691330][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.696959][ T32] ? __switch_to+0xc89/0x1420 [ 449.701644][ T32] ? __pfx_kthread+0x10/0x10 [ 449.706236][ T32] ret_from_fork_asm+0x1a/0x30 [ 449.711022][ T32] [ 449.714238][ T32] Kernel Offset: disabled [ 449.718544][ T32] Rebooting in 86400 seconds..