last executing test programs: 3.060371437s ago: executing program 2 (id=581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '='}]}}}}}}}}, 0x0) 2.814026993s ago: executing program 1 (id=586): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.719980593s ago: executing program 2 (id=588): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2.673950635s ago: executing program 4 (id=589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8ceb"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) 2.623807624s ago: executing program 3 (id=591): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x2}]) syz_io_uring_setup(0x5793, 0x0, 0x0, 0x0, 0x0) 2.615621579s ago: executing program 1 (id=592): prlimit64(0x0, 0xd, &(0x7f0000000480)={0x8, 0x8d}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x1000000000000, &(0x7f0000000340)="cb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)='m?'}) 2.421402121s ago: executing program 4 (id=593): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 2.421148737s ago: executing program 2 (id=594): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000020c0)='./file1\x00', 0x1c002, &(0x7f0000000400)=ANY=[], 0x1, 0x5f12, &(0x7f0000008040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) 2.406809373s ago: executing program 3 (id=595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) 2.29524886s ago: executing program 0 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md', 0x2) 2.292781608s ago: executing program 4 (id=597): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 2.208014408s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95) 2.118252363s ago: executing program 4 (id=599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x6, 0x0, 0x100, 0x8, 0x500107, r1}) 2.116922378s ago: executing program 0 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x400000b0, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) 1.96758886s ago: executing program 4 (id=601): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 1.841841132s ago: executing program 3 (id=602): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000100)={0x30, r0, 0x809, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x1}, {0x94, 0x2}, {0xfe, 0x2}, {0x3, 0x6}], "f171942f63e5988d"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) 1.787140142s ago: executing program 0 (id=603): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001840)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001800)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 1.701667875s ago: executing program 3 (id=604): flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000380)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@shortname_lower}]}, 0x3, 0x281, &(0x7f0000000940)="$eJzs3c9qK1UYAPBvmv+6SBauROiALlyV1idokQpiQVCyUBdabArShEILgaoYu/IJfAKfx434Aj6A4u52cblzSWeSJpdJetvbNuXe32/Tw3e+L+c7M9N2NSffvTc4Ojg+PTz/+Z9oNpNY247tuEiiE2sx8WuU+vu/8jgA8MhdZFn8n+UaeehsPqO2oLK6du/NAQD3Yvb//6p7AQAexpdfff3Zzt7e7hdp2owY/DbsJpH/zOd3DuOH6EcvNqMdTyOyqXz8yad7u1FNxzrxwWA07I4rB9/+WXz+zr8Rl/Vb0Y5Oef1WmpupHw27tXirWH+7H73P/4h2vFNe/1FJfXTr8eH7M/1vRDv++j6Oox8HRW+T+l+20vTj7PcnP30zjo7rk9Gw25jmFdmVB70xAAAAAAAAAAAAAAAAAAAAAAC81jbSqc78+TuTg/+XzC85H2g0cz7PZpqmWZLnX9VX491qVFe5dwAAAAAAAAAAAAAAAAAAAHgsTs9+PNrv93sndzqYvNZfMhXP5iONiLj9WuvX5tTn24hK0Vo/ibjZWrVoXFZen1y54S5a4356J0k17u4WJNNIa3ZqPfK1xpFWPpiJvPLqzbgcTJ6uo/3kupvbLHtIlm3nJQdZyeNXWVhVfzHSKnZQktxasnr97Vtduqy9YCqJiNr0Yi7/nNrd/i4/3N8gAAAAAAAAAAAAAAAAAAAgd/XSb8nk+QoaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVuPr+/xsMRkXxopysMh5Uo4iseIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8AZ4HAAD//4ftZbQ=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/213, 0xd5) 1.605712241s ago: executing program 1 (id=605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44) 1.496233958s ago: executing program 0 (id=606): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.286529376s ago: executing program 3 (id=607): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x1a, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1.284896747s ago: executing program 0 (id=608): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.279671149s ago: executing program 1 (id=609): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.072673575s ago: executing program 1 (id=610): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 853.082693ms ago: executing program 2 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}}, 0x400c8a4) 852.534604ms ago: executing program 1 (id=612): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8c, 0x3, 0x40}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, 0x0) 746.725557ms ago: executing program 4 (id=613): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x2de, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 474.184187ms ago: executing program 2 (id=614): unshare(0x400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 189.232091ms ago: executing program 2 (id=615): setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) 0s ago: executing program 0 (id=616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000500)={0xffffffff, 0x10000, 0x80000001, 0x1, 0x7fd}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 75.322437][ T5602] cgroup: Unknown subsys name 'net' [ 75.450688][ T5602] cgroup: Unknown subsys name 'cpuset' [ 75.460003][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.954286][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.241956][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.246067][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.258022][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.258665][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.259132][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.261282][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.261702][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.262645][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.263395][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.267920][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.271952][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.277999][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.279789][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.282655][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.286289][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.286476][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.289196][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.302930][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.304706][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.313533][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.327615][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.335245][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.376141][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.399648][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.402556][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.149695][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.151908][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.152897][ T5627] bridge_slave_0: entered allmulticast mode [ 81.158679][ T5627] bridge_slave_0: entered promiscuous mode [ 81.183448][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.183555][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.183689][ T5614] bridge_slave_0: entered allmulticast mode [ 81.188670][ T5614] bridge_slave_0: entered promiscuous mode [ 81.224514][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.224638][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.230867][ T5627] bridge_slave_1: entered allmulticast mode [ 81.235045][ T5627] bridge_slave_1: entered promiscuous mode [ 81.267208][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.267550][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.268495][ T5614] bridge_slave_1: entered allmulticast mode [ 81.273272][ T5614] bridge_slave_1: entered promiscuous mode [ 81.354488][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.363788][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.375983][ T5617] Bluetooth: hci3: command tx timeout [ 81.376265][ T5617] Bluetooth: hci1: command tx timeout [ 81.404840][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.407472][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.409826][ T5613] bridge_slave_0: entered allmulticast mode [ 81.412958][ T5613] bridge_slave_0: entered promiscuous mode [ 81.420394][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.420477][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.420569][ T5613] bridge_slave_1: entered allmulticast mode [ 81.422112][ T5613] bridge_slave_1: entered promiscuous mode [ 81.448744][ T5624] Bluetooth: hci4: command tx timeout [ 81.448828][ T5624] Bluetooth: hci0: command tx timeout [ 81.448926][ T5624] Bluetooth: hci2: command tx timeout [ 81.496275][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.525920][ T5627] team0: Port device team_slave_0 added [ 81.532784][ T5627] team0: Port device team_slave_1 added [ 81.548384][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.605658][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.606944][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.607260][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.612117][ T5615] bridge_slave_0: entered allmulticast mode [ 81.618169][ T5615] bridge_slave_0: entered promiscuous mode [ 81.647882][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.649704][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.650024][ T5616] bridge_slave_0: entered allmulticast mode [ 81.654561][ T5616] bridge_slave_0: entered promiscuous mode [ 81.684201][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.684921][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.685186][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.685530][ T5615] bridge_slave_1: entered allmulticast mode [ 81.690580][ T5615] bridge_slave_1: entered promiscuous mode [ 81.700760][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.700790][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.700902][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.704413][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.704763][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.705047][ T5616] bridge_slave_1: entered allmulticast mode [ 81.715478][ T5616] bridge_slave_1: entered promiscuous mode [ 81.789797][ T5614] team0: Port device team_slave_0 added [ 81.818609][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.818645][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.818668][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.864632][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.874171][ T5614] team0: Port device team_slave_1 added [ 81.919855][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.939496][ T5613] team0: Port device team_slave_0 added [ 81.944529][ T5613] team0: Port device team_slave_1 added [ 81.952202][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.959661][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.990647][ T5615] team0: Port device team_slave_0 added [ 82.005100][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.005208][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.005282][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.054754][ T5615] team0: Port device team_slave_1 added [ 82.087718][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.087757][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.087781][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.159329][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.159437][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.159587][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.168776][ T5616] team0: Port device team_slave_0 added [ 82.172852][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.172879][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.172934][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.197981][ T5627] hsr_slave_0: entered promiscuous mode [ 82.201962][ T5627] hsr_slave_1: entered promiscuous mode [ 82.210131][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.210163][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.210225][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.220021][ T5616] team0: Port device team_slave_1 added [ 82.222628][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.222666][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.222764][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.419484][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.419522][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.419561][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.485884][ T5614] hsr_slave_0: entered promiscuous mode [ 82.489613][ T5614] hsr_slave_1: entered promiscuous mode [ 82.491652][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 82.491924][ T5614] Cannot create hsr debugfs directory [ 82.516691][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.517892][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.517958][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.578172][ T5615] hsr_slave_0: entered promiscuous mode [ 82.580930][ T5615] hsr_slave_1: entered promiscuous mode [ 82.582926][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 82.582973][ T5615] Cannot create hsr debugfs directory [ 82.608336][ T5613] hsr_slave_0: entered promiscuous mode [ 82.615264][ T5613] hsr_slave_1: entered promiscuous mode [ 82.618358][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 82.618401][ T5613] Cannot create hsr debugfs directory [ 82.799266][ T5616] hsr_slave_0: entered promiscuous mode [ 82.804375][ T5616] hsr_slave_1: entered promiscuous mode [ 82.807810][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 82.807868][ T5616] Cannot create hsr debugfs directory [ 83.173221][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.184608][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.190229][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.200670][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.204510][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.218307][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.230609][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.240674][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.307431][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.319947][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.331830][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.341435][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.360051][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.370074][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.384183][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.393419][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.447540][ T5624] Bluetooth: hci3: command tx timeout [ 83.453070][ T5617] Bluetooth: hci1: command tx timeout [ 83.461191][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.470984][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.473656][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.490588][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.495695][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.512515][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.513346][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.527162][ T5624] Bluetooth: hci0: command tx timeout [ 83.527229][ T5624] Bluetooth: hci4: command tx timeout [ 83.527626][ T5617] Bluetooth: hci2: command tx timeout [ 83.544342][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.648828][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.663351][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.680721][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.691372][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.695295][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.706116][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.720640][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.730890][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.765737][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.833932][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.844767][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.859669][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.869916][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.888403][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.901733][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.909917][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.919793][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.928569][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.948904][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.949252][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.989892][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.990085][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.004939][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.073710][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.115563][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.146000][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.155549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.155641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.184187][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.209050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.209303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.223897][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.224016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.269715][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.269949][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.321662][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.385178][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.406254][ T2441] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.406646][ T2441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.443053][ T2441] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.443412][ T2441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.475197][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.523424][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.569036][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569187][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.614878][ T2441] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.614987][ T2441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.245235][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.441291][ T5627] veth0_vlan: entered promiscuous mode [ 85.492470][ T5627] veth1_vlan: entered promiscuous mode [ 85.529347][ T52] Bluetooth: hci3: command tx timeout [ 85.531430][ T5617] Bluetooth: hci1: command tx timeout [ 85.607219][ T52] Bluetooth: hci4: command tx timeout [ 85.607269][ T52] Bluetooth: hci0: command tx timeout [ 85.607580][ T5617] Bluetooth: hci2: command tx timeout [ 85.646271][ T5627] veth0_macvtap: entered promiscuous mode [ 85.672849][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.682304][ T5627] veth1_macvtap: entered promiscuous mode [ 85.700869][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.773887][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.820292][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.960070][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.960983][ T5614] veth0_vlan: entered promiscuous mode [ 86.058812][ T5614] veth1_vlan: entered promiscuous mode [ 86.124769][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.187709][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.196125][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.219972][ T5616] veth0_vlan: entered promiscuous mode [ 86.262322][ T1479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.262357][ T1479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.291394][ T5614] veth0_macvtap: entered promiscuous mode [ 86.304876][ T5616] veth1_vlan: entered promiscuous mode [ 86.315460][ T5614] veth1_macvtap: entered promiscuous mode [ 86.337097][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.360660][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.395408][ T5613] veth0_vlan: entered promiscuous mode [ 86.405960][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.439113][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.459249][ T181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.461406][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.493767][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.505518][ T5613] veth1_vlan: entered promiscuous mode [ 86.515871][ T5615] veth0_vlan: entered promiscuous mode [ 86.554528][ T5616] veth0_macvtap: entered promiscuous mode [ 86.578567][ T5616] veth1_macvtap: entered promiscuous mode [ 86.582853][ T5615] veth1_vlan: entered promiscuous mode [ 86.616744][ T181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.616801][ T181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.616851][ T181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.679579][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.740029][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.829752][ T5815] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.832917][ T5613] veth0_macvtap: entered promiscuous mode [ 86.864032][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.864248][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.900996][ T5613] veth1_macvtap: entered promiscuous mode [ 86.926840][ T1479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.949771][ T5615] veth0_macvtap: entered promiscuous mode [ 87.000144][ T5615] veth1_macvtap: entered promiscuous mode [ 87.055846][ T1479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.064050][ T1479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.077425][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077487][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077586][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077707][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.122823][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.206020][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.314139][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.358258][ T5823] loop3: detected capacity change from 0 to 512 [ 87.362489][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.362558][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.410297][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.459634][ T5823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.477638][ T5823] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.557569][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.557693][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.596883][ T1479] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.597045][ T1479] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.597376][ T1479] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.598261][ T1479] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.624313][ T5617] Bluetooth: hci1: command tx timeout [ 87.624341][ T5617] Bluetooth: hci3: command tx timeout [ 87.632958][ T167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.633075][ T167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.633111][ T167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.633147][ T167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687917][ T5617] Bluetooth: hci0: command tx timeout [ 87.687962][ T5617] Bluetooth: hci4: command tx timeout [ 87.693501][ T5624] Bluetooth: hci2: command tx timeout [ 87.705060][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.831624][ T32] audit: type=1326 audit(1786493487.548:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.860434][ T32] audit: type=1326 audit(1786493487.578:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.888466][ T32] audit: type=1326 audit(1786493487.608:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.914763][ T32] audit: type=1326 audit(1786493487.638:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.914829][ T32] audit: type=1326 audit(1786493487.638:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.914874][ T32] audit: type=1326 audit(1786493487.638:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 87.966130][ T32] audit: type=1326 audit(1786493487.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 88.020328][ T32] audit: type=1326 audit(1786493487.738:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 88.020374][ T32] audit: type=1326 audit(1786493487.738:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 88.047164][ T32] audit: type=1326 audit(1786493487.738:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.3.11" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78e359e0d9 code=0x7ffc0000 [ 88.162147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.162190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.253495][ T5835] Bluetooth: MGMT ver 1.23 [ 88.320608][ T5838] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 88.384899][ T2441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.384942][ T2441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.452399][ T5840] loop1: detected capacity change from 0 to 512 [ 88.472602][ T5840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.486240][ T5840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.561748][ T5840] EXT4-fs (loop1): 1 truncate cleaned up [ 88.583542][ T5840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.669240][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.699407][ T5845] loop2: detected capacity change from 0 to 2048 [ 88.735643][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.735681][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.775118][ T5847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.926403][ T5845] ======================================================= [ 88.926403][ T5845] WARNING: The mand mount option has been deprecated and [ 88.926403][ T5845] and is ignored by this kernel. Remove the mand [ 88.926403][ T5845] option from the mount to silence this warning. [ 88.926403][ T5845] ======================================================= [ 88.975876][ T5847] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 88.976232][ T5847] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 89.002875][ T5847] Remounting filesystem read-only [ 89.067878][ T5845] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 89.181239][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.181282][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.204495][ T5616] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 89.543880][ T5853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.730246][ T5858] input: syz0 as /devices/virtual/input/input5 [ 90.179170][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 90.732566][ T5862] loop3: detected capacity change from 0 to 131072 [ 90.809002][ T5862] F2FS-fs (loop3): invalid crc value [ 90.899312][ T5862] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 90.909065][ T5862] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 91.118375][ T5885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'. [ 91.118427][ T5885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'. [ 91.568354][ T5889] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 91.672991][ T5859] loop2: detected capacity change from 0 to 32768 [ 91.688659][ T5619] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.728737][ T5859] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.769499][ T5883] loop4: detected capacity change from 0 to 32768 [ 91.847557][ T5619] usb 2-1: Using ep0 maxpacket: 16 [ 91.851912][ T5619] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 91.874963][ T5619] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 91.875011][ T5619] usb 2-1: config 0 has no interface number 0 [ 91.875111][ T5619] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 91.875188][ T5619] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 91.898469][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.898527][ T5619] usb 2-1: Product: syz [ 91.898566][ T5619] usb 2-1: Manufacturer: syz [ 91.898597][ T5619] usb 2-1: SerialNumber: syz [ 91.949439][ T5859] XFS (loop2): Ending clean mount [ 91.961329][ T10] cfg80211: failed to load regulatory.db [ 92.011422][ T5619] usb 2-1: config 0 descriptor?? [ 92.020300][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.020779][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.037238][ T5883] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.069678][ T5859] XFS (loop2): Quotacheck needed: Please wait. [ 92.168850][ T5883] (syz.4.29,5883,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume. [ 92.168926][ T5883] (syz.4.29,5883,0):ocfs2_group_add:513 ERROR: status = -22 [ 92.217018][ T5859] XFS (loop2): Quotacheck: Done. [ 92.364509][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.373414][ T5887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.592196][ T5619] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 92.793650][ T5619] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 162 [ 92.984002][ T5616] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.133047][ T9] usb 2-1: USB disconnect, device number 2 [ 93.135086][ T5907] loop0: detected capacity change from 0 to 131072 [ 93.197144][ T5615] ocfs2: Unmounting device (7,4) on (node local) [ 93.293831][ T5907] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 93.309181][ T5907] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.394826][ T5907] F2FS-fs (loop0): recover xattr in inode (7), error(0) [ 93.395252][ T5907] F2FS-fs (loop0): set inode (7) has corrupted xattr [ 93.948772][ T5923] loop1: detected capacity change from 0 to 2048 [ 93.995939][ T5923] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 94.018538][ T5923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.222999][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 94.260240][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.749070][ T5921] loop3: detected capacity change from 0 to 40427 [ 94.770964][ T5921] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 94.771015][ T5921] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.787791][ T5921] F2FS-fs (loop3): invalid crc value [ 94.789171][ T5921] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 94.886138][ T5946] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 94.944525][ T5948] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 95.229100][ T5921] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 95.246243][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.254759][ T5921] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.254811][ T5921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.494007][ T5614] syz-executor: attempt to access beyond end of device [ 95.494007][ T5614] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.516767][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 95.516793][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.516812][ T5614] Call Trace: [ 95.516841][ T5614] [ 95.516850][ T5614] dump_stack_lvl+0xe8/0x150 [ 95.516892][ T5614] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 95.516925][ T5614] f2fs_write_end_bio+0x1211/0x16e0 [ 95.516948][ T5614] ? blkg_put+0x22/0x240 [ 95.516996][ T5614] __submit_merged_bio+0x258/0x6a0 [ 95.517024][ T5614] ? rcu_is_watching+0x16/0xb0 [ 95.517053][ T5614] __submit_merged_write_cond+0x3c9/0x4e0 [ 95.517089][ T5614] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 95.517139][ T5614] f2fs_write_data_pages+0x2a27/0x36f0 [ 95.517170][ T5614] ? is_bpf_text_address+0x292/0x2b0 [ 95.517225][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 95.517293][ T5614] ? check_noncircular+0xdb/0x150 [ 95.517318][ T5614] ? __bfs+0x153/0x290 [ 95.517336][ T5614] ? __pfx_hlock_conflict+0x10/0x10 [ 95.517376][ T5614] ? lockdep_unlock+0x5c/0xd0 [ 95.517403][ T5614] ? __lock_acquire+0x14b9/0x2e50 [ 95.517449][ T5614] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 95.517481][ T5614] do_writepages+0x338/0x560 [ 95.517516][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 95.517558][ T5614] filemap_fdatawrite+0x1e9/0x2f0 [ 95.517588][ T5614] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 95.517656][ T5614] ? do_raw_spin_unlock+0xf5/0x200 [ 95.517689][ T5614] f2fs_sync_dirty_inodes+0x30e/0x830 [ 95.517720][ T5614] f2fs_write_checkpoint+0xa3d/0x2710 [ 95.517737][ T5614] ? __lock_acquire+0x6df/0x2e50 [ 95.517779][ T5614] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 95.517827][ T5614] ? try_to_wake_up+0x8b6/0x14d0 [ 95.517863][ T5614] kill_f2fs_super+0x2dd/0x700 [ 95.517904][ T5614] ? __pfx_kill_f2fs_super+0x10/0x10 [ 95.517948][ T5614] ? call_rcu+0x64d/0x8b0 [ 95.517971][ T5614] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.518006][ T5614] deactivate_locked_super+0xbc/0x110 [ 95.518040][ T5614] cleanup_mnt+0x3d3/0x460 [ 95.518069][ T5614] task_work_run+0x1d9/0x270 [ 95.518093][ T5614] ? __pfx_task_work_run+0x10/0x10 [ 95.518124][ T5614] exit_to_user_mode_loop+0x204/0x770 [ 95.518144][ T5614] ? rcu_is_watching+0x16/0xb0 [ 95.518171][ T5614] do_syscall_64+0x328/0x520 [ 95.518191][ T5614] ? trace_irq_disable+0x3b/0x140 [ 95.518209][ T5614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.518230][ T5614] ? clear_bhb_loop+0x70/0xc0 [ 95.518255][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.518275][ T5614] RIP: 0033:0x7f78e359f317 [ 95.518302][ T5614] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 95.518319][ T5614] RSP: 002b:00007ffd46263268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 95.518345][ T5614] RAX: 0000000000000000 RBX: 00007f78e3634474 RCX: 00007f78e359f317 [ 95.518359][ T5614] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd46263320 [ 95.518371][ T5614] RBP: 00007ffd46263320 R08: 00007ffd46264320 R09: 00000000ffffffff [ 95.518385][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd462643b0 [ 95.518398][ T5614] R13: 00007f78e3634474 R14: 000000000001748a R15: 00007ffd462643f0 [ 95.518430][ T5614] [ 95.526713][ T5614] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.021249][ T5960] Zero length message leads to an empty skb [ 96.312644][ T5969] loop2: detected capacity change from 0 to 8 [ 96.318890][ T5968] loop0: detected capacity change from 0 to 256 [ 96.439914][ T5969] SQUASHFS error: Failed to read block 0x260685: -5 [ 96.439972][ T5969] SQUASHFS error: Unable to read metadata cache entry [260685] [ 96.440010][ T5969] SQUASHFS error: Unable to read directory block [260685:0] [ 96.508572][ T5971] loop3: detected capacity change from 0 to 1024 [ 96.562028][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.586056][ T5971] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.648981][ T5978] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 96.655323][ T5978] overlayfs: conflicting lowerdir path [ 96.742207][ T5980] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 96.896241][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.265982][ T5993] ipvlan2: entered promiscuous mode [ 97.275710][ T5993] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 97.285058][ T5993] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.466172][ T5982] loop2: detected capacity change from 0 to 32768 [ 97.997121][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 98.073650][ T6023] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 98.605512][ T6049] loop1: detected capacity change from 0 to 4096 [ 98.752648][ T6049] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 98.804146][ T6049] ntfs3(loop1): Failed to load $Extend (-22). [ 98.812912][ T6049] ntfs3(loop1): Failed to initialize $Extend. [ 98.901462][ T5720] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.976923][ T6059] loop0: detected capacity change from 0 to 512 [ 99.009341][ T6059] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.97: iget: bad extended attribute block 134217728 [ 99.023603][ T6059] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.025050][ T6059] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.97: couldn't read orphan inode 15 (err -117) [ 99.034422][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.034443][ C0] EXT4-fs (loop0): initial error at time 1786493498: ext4_orphan_get:1403: inode 15 [ 99.034474][ C0] EXT4-fs (loop0): last error at time 1786493498: ext4_orphan_get:1403: inode 15 [ 99.085773][ T5720] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 99.097450][ T5720] usb 4-1: config index 0 descriptor too short (expected 45, got 28) [ 99.097493][ T5720] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 99.097538][ T5720] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.109483][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.109562][ T5720] usb 4-1: Product: syz [ 99.109596][ T5720] usb 4-1: Manufacturer: syz [ 99.109637][ T5720] usb 4-1: SerialNumber: syz [ 99.138167][ T6059] loop0: lost filesystem error report for type 5 error -117 [ 99.168684][ T5720] rtl8150 4-1:1.0: couldn't find required endpoints [ 99.169188][ T5720] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 99.216112][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.258255][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 99.323653][ T32] kauditd_printk_skb: 232 callbacks suppressed [ 99.323696][ T32] audit: type=1800 audit(1786493499.038:244): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.97" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 99.372176][ T6059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.97: bg 0: block 465: padding at end of block bitmap is not set [ 99.416014][ T6059] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 99.451236][ T5720] usb 4-1: USB disconnect, device number 2 [ 99.472556][ T6059] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.97: invalid indirect mapped block 234881024 (level 0) [ 99.473840][ T6059] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.97: invalid indirect mapped block 768 (level 1) [ 99.712748][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 99.892154][ T6085] loop2: detected capacity change from 0 to 256 [ 100.000706][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.046608][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.196608][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 100.204587][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.219520][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.227416][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.241024][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.252848][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.265079][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.278512][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.290433][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.305704][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 100.315603][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.315646][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.315713][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.315744][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.315783][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.315810][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.315837][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.315865][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 100.418919][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.418967][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.419019][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.419050][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.419079][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.419107][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.419136][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.419166][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 100.525781][ T9] usb 5-1: string descriptor 0 read error: -22 [ 100.525938][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.655571][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.805320][ T6073] loop1: detected capacity change from 0 to 131072 [ 100.814599][ T6073] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 100.814633][ T6073] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.843557][ T32] audit: type=1326 audit(1786493500.558:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.843613][ T32] audit: type=1326 audit(1786493500.558:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.847390][ T6073] F2FS-fs (loop1): invalid crc value [ 100.869297][ T32] audit: type=1326 audit(1786493500.558:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869362][ T32] audit: type=1326 audit(1786493500.558:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869406][ T32] audit: type=1326 audit(1786493500.558:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869451][ T32] audit: type=1326 audit(1786493500.558:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869493][ T32] audit: type=1326 audit(1786493500.558:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869538][ T32] audit: type=1326 audit(1786493500.558:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 100.869580][ T32] audit: type=1326 audit(1786493500.558:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b4b9e0d9 code=0x7ffc0000 [ 101.112947][ T6073] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.128996][ T6073] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.129040][ T6073] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 101.186042][ T6101] loop0: detected capacity change from 0 to 128 [ 101.194515][ T6101] EXT4-fs (loop0): Test dummy encryption mode enabled [ 101.211591][ T990] usb 5-1: USB disconnect, device number 2 [ 101.239693][ T6101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.257050][ T6101] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.315808][ T6105] loop3: detected capacity change from 0 to 64 [ 101.348105][ T6101] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 101.363968][ T6105] mmap: syz.3.115 (6105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.467302][ T6081] adutux: No device or device unplugged -19 [ 101.550385][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.797477][ T6114] loop0: detected capacity change from 0 to 1024 [ 101.806909][ T6114] EXT4-fs: Ignoring removed bh option [ 101.853952][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.991704][ T6114] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.225443][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.291635][ T6126] loop1: detected capacity change from 0 to 4096 [ 102.301661][ T6126] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 102.556626][ T5720] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.720229][ T5720] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 102.736867][ T5720] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 102.736910][ T5720] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 102.761916][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.761969][ T5720] usb 4-1: Product: syz [ 102.762009][ T5720] usb 4-1: Manufacturer: syz [ 102.762027][ T5720] usb 4-1: SerialNumber: syz [ 102.791170][ T5720] usb 4-1: config 0 descriptor?? [ 102.805891][ T6131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.806235][ T6131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.046247][ T6131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.048020][ T6131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.474619][ T5720] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 103.487638][ T6152] loop2: detected capacity change from 0 to 4096 [ 103.564772][ T6152] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 103.623059][ T6152] ntfs3(loop2): Failed to load $Extend (-22). [ 103.623099][ T6152] ntfs3(loop2): Failed to initialize $Extend. [ 103.684400][ T5720] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 103.703323][ T6160] loop0: detected capacity change from 0 to 4096 [ 103.714164][ T6160] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 103.725370][ T5720] usb 4-1: USB disconnect, device number 3 [ 103.834205][ T6160] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 104.195175][ T6140] loop4: detected capacity change from 0 to 32768 [ 104.242572][ T6140] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.242615][ T6140] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.283439][ T6171] netlink: 72 bytes leftover after parsing attributes in process `syz.0.142'. [ 104.339619][ T6140] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms [ 104.360382][ T5619] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.360414][ T5619] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.513325][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 104.513377][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 104.564384][ T5624] Bluetooth: hci3: Malformed Event: 0x2f [ 104.661173][ T5619] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 300ms [ 104.702073][ T5619] gfs2: fsid=syz:syz.0: jid=0: Done [ 104.704445][ T6140] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 104.958738][ T6140] gfs2: fsid=syz:syz.0: found 1 quota changes [ 105.083557][ T5615] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 105.083616][ T5615] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 105.083644][ T5615] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5615 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 105.083809][ T5615] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 105.083924][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 105.083988][ T5615] Tainted: [L]=SOFTLOCKUP [ 105.084008][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.084037][ T5615] Call Trace: [ 105.084057][ T5615] [ 105.084083][ T5615] dump_stack_lvl+0xe8/0x150 [ 105.084186][ T5615] gfs2_withdraw+0xc3/0x1b0 [ 105.084246][ T5615] inode_go_instantiate+0xbc1/0x12b0 [ 105.084303][ T5615] ? queue_delayed_work_on+0x12f/0x1e0 [ 105.084388][ T5615] ? preempt_schedule_common+0x7f/0xd0 [ 105.084476][ T5615] ? __pfx_inode_go_instantiate+0x10/0x10 [ 105.084555][ T5615] gfs2_instantiate+0x168/0x220 [ 105.084625][ T5615] gfs2_glock_wait+0x1d4/0x2a0 [ 105.084687][ T5615] do_sync+0x49c/0xbb0 [ 105.084767][ T5615] ? gfs2_quota_sync+0x353/0x450 [ 105.084855][ T5615] ? __pfx_do_sync+0x10/0x10 [ 105.084949][ T5615] ? gfs2_quota_sync+0x353/0x450 [ 105.085025][ T5615] ? preempt_schedule_thunk+0x16/0x40 [ 105.085093][ T5615] gfs2_quota_sync+0x353/0x450 [ 105.085215][ T5615] gfs2_sync_fs+0x4c/0xb0 [ 105.085294][ T5615] sync_filesystem+0xf1/0x240 [ 105.085359][ T5615] generic_shutdown_super+0x77/0x2d0 [ 105.085417][ T5615] kill_block_super+0x44/0xa0 [ 105.085474][ T5615] deactivate_locked_super+0xbc/0x110 [ 105.085552][ T5615] cleanup_mnt+0x3d3/0x460 [ 105.085619][ T5615] task_work_run+0x1d9/0x270 [ 105.085673][ T5615] ? __pfx_task_work_run+0x10/0x10 [ 105.085743][ T5615] exit_to_user_mode_loop+0x204/0x770 [ 105.085790][ T5615] ? rcu_is_watching+0x16/0xb0 [ 105.085864][ T5615] do_syscall_64+0x328/0x520 [ 105.085911][ T5615] ? trace_irq_disable+0x3b/0x140 [ 105.085952][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.086015][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 105.086071][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.086118][ T5615] RIP: 0033:0x7f31e6d9f317 [ 105.086171][ T5615] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.086226][ T5615] RSP: 002b:00007ffd0bef4678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.086287][ T5615] RAX: 0000000000000000 RBX: 00007f31e6e34474 RCX: 00007f31e6d9f317 [ 105.086324][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0bef4730 [ 105.086365][ T5615] RBP: 00007ffd0bef4730 R08: 00007ffd0bef5730 R09: 00000000ffffffff [ 105.086399][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0bef57c0 [ 105.086431][ T5615] R13: 00007f31e6e34474 R14: 0000000000019a17 R15: 00007ffd0bef5800 [ 105.086524][ T5615] [ 105.092666][ T5615] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 105.514052][ T6196] loop2: detected capacity change from 0 to 1024 [ 105.537377][ T990] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 105.538701][ T25] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 105.700975][ T990] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 105.709500][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32314, setting to 64 [ 105.709820][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.711139][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.741636][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.741688][ T25] usb 2-1: Product: syz [ 105.741721][ T25] usb 2-1: Manufacturer: syz [ 105.741770][ T25] usb 2-1: SerialNumber: syz [ 105.788477][ T990] usb 4-1: config 0 descriptor?? [ 105.790634][ T6188] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 105.819193][ T25] usb 2-1: config 0 descriptor?? [ 106.036124][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.224809][ T990] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 106.224876][ T990] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 106.224932][ T990] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 106.225093][ T990] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 106.225215][ T990] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 106.322946][ T6213] loop0: detected capacity change from 0 to 64 [ 106.354435][ T990] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 106.458473][ T990] usb 4-1: USB disconnect, device number 4 [ 106.503221][ T32] kauditd_printk_skb: 11 callbacks suppressed [ 106.503296][ T32] audit: type=1800 audit(1786493506.218:265): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.161" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 106.591383][ T6214] fido_id[6214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 106.665025][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.732987][ T25] usb 2-1: USB disconnect, device number 3 [ 107.162426][ T6222] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.202606][ T6225] loop3: detected capacity change from 0 to 256 [ 107.276639][ T6225] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 107.694443][ T6239] loop2: detected capacity change from 0 to 1024 [ 107.767313][ T6228] loop4: detected capacity change from 0 to 32768 [ 107.839230][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 108.191844][ T6261] loop2: detected capacity change from 0 to 512 [ 108.200698][ T6261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 108.201009][ T6261] System zones: 1-12 [ 108.214598][ T6261] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.178: missing EA_INODE flag [ 108.214654][ T6261] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 108.226537][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.226556][ C1] EXT4-fs (loop2): initial error at time 1786493507: ext4_xattr_inode_iget:437: inode 12 [ 108.226586][ C1] EXT4-fs (loop2): last error at time 1786493507: ext4_xattr_inode_iget:437: inode 12 [ 108.251167][ T6261] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.178: error while reading EA inode 12 err=-117 [ 108.251248][ T6261] loop2: lost filesystem error report for type 5 error -117 [ 108.252320][ T6261] EXT4-fs (loop2): 1 orphan inode deleted [ 108.293695][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.356223][ T6261] fscrypt (loop2, inode 18): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 108.529443][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.765619][ T6288] loop4: detected capacity change from 0 to 764 [ 108.775643][ T6288] iso9660: Unknown parameter 'crudt' [ 108.902356][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.177'. [ 109.204283][ T6301] loop4: detected capacity change from 0 to 512 [ 109.241727][ T6301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 109.250411][ T6305] xt_hashlimit: size too large, truncated to 1048576 [ 109.259878][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 109.259896][ C0] EXT4-fs (loop4): initial error at time 1786493508: ext4_mb_generate_buddy:1317 [ 109.259919][ C0] EXT4-fs (loop4): last error at time 1786493508: ext4_mb_generate_buddy:1317 [ 109.260788][ T6301] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.190: corrupted inode contents [ 109.260832][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.335895][ T6301] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #16: comm syz.4.190: mark_inode_dirty error [ 109.335940][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.345396][ T6301] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.190: corrupted inode contents [ 109.345425][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.357495][ T6301] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.190: mark_inode_dirty error [ 109.357523][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.366942][ T6301] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.190: corrupted inode contents [ 109.366970][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.367324][ T6301] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.190: mark_inode_dirty error [ 109.367352][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.367793][ T6301] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.190: corrupted inode contents [ 109.367819][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.369436][ T6301] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 109.369462][ T6301] loop4: lost filesystem error report for type 5 error -117 [ 109.381521][ T6301] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.190: corrupted inode contents [ 109.381549][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.382174][ T6301] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.190: mark_inode_dirty error [ 109.382200][ T6301] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.391543][ T6301] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 109.391568][ T6301] loop4: lost filesystem error report for type 5 error -117 [ 109.413195][ T6301] EXT4-fs (loop4): 1 truncate cleaned up [ 109.415035][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.415144][ T6301] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.577031][ T6273] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 109.577310][ T6273] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:12: Failed to release dquot type 1 [ 109.675670][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.990711][ T6316] loop1: detected capacity change from 0 to 64 [ 110.299846][ T6321] Illegal XDP return value 4294967294 on prog (id 13) dev N/A, expect packet loss! [ 110.644841][ T6335] loop0: detected capacity change from 0 to 256 [ 110.703188][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 110.712736][ T6335] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 110.825658][ T32] audit: type=1800 audit(1786493510.538:266): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file2" dev="loop0" ino=1048619 res=0 errno=0 [ 110.837747][ T6335] exFAT-fs (loop0): error, bogus directory size (clus : ondisk(7) != counted(8)) [ 110.837816][ T6335] exFAT-fs (loop0): Filesystem has been set read-only [ 110.837846][ T6335] exFAT-fs (loop0): write: fail to zero from 9000 to 39936(-5) [ 110.974948][ T6345] loop1: detected capacity change from 0 to 512 [ 111.079519][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.220823][ T6345] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.209: verity is only allowed on extent-based files [ 111.414960][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.524768][ T6354] C: renamed from veth1_to_team (while UP) [ 111.546845][ T6354] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 111.554663][ T6354] netlink: 'syz.4.214': attribute type 8 has an invalid length. [ 111.562891][ T6354] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 112.119505][ T6377] loop3: detected capacity change from 0 to 2048 [ 112.162726][ T6377] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c029, mo2=0003] [ 112.186428][ T6379] kvm: kvm [6378]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006d) = 0x6 [ 112.202509][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.230115][ T6377] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.224: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.246678][ T6377] EXT4-fs (loop3): Remounting filesystem read-only [ 112.355917][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.825912][ T6405] loop3: detected capacity change from 0 to 512 [ 112.848518][ T6405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 112.848658][ T6405] System zones: 1-12 [ 112.864346][ T6405] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.235: missing EA_INODE flag [ 112.866598][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 112.866643][ C0] EXT4-fs (loop3): initial error at time 1786493512: ext4_xattr_inode_iget:437: inode 12 [ 112.866735][ C0] EXT4-fs (loop3): last error at time 1786493512: ext4_xattr_inode_iget:437: inode 12 [ 112.877830][ T6405] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.235: error while reading EA inode 12 err=-117 [ 112.877860][ T6405] loop3: lost filesystem error report for type 5 error -117 [ 112.878412][ T6405] EXT4-fs (loop3): 1 orphan inode deleted [ 112.899297][ T6405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.012335][ T6405] fscrypt (loop3, inode 15): Unsupported log2_data_unit_size in encryption policy: 20 [ 113.180708][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.423306][ T6417] loop4: detected capacity change from 0 to 4096 [ 113.434863][ T6417] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 113.481511][ T6417] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 113.957041][ T6438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.250'. [ 114.219737][ T6446] loop2: detected capacity change from 0 to 128 [ 114.275157][ T6446] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.314543][ T6446] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.452646][ T6450] loop4: detected capacity change from 0 to 2048 [ 114.485727][ T5616] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.555154][ T6450] Alternate GPT is invalid, using primary GPT. [ 114.555318][ T6450] loop4: p1 p2 p3 [ 114.555371][ T6450] loop4: partition table partially beyond EOD, truncated [ 114.688110][ T5624] Bluetooth: hci1: unexpected cc 0x080f length: 90 > 1 [ 114.904723][ T6464] netlink: 332 bytes leftover after parsing attributes in process `syz.1.262'. [ 114.970537][ T6464] netlink: 196 bytes leftover after parsing attributes in process `syz.1.262'. [ 115.136321][ T5634] udevd[5634]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 115.148422][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 115.171772][ T5866] udevd[5866]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 115.530943][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.677110][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 115.679058][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 115.694313][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.730125][ T9] usb 2-1: config 0 descriptor?? [ 115.763884][ T6493] loop0: detected capacity change from 0 to 4096 [ 115.823032][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 115.866137][ T6493] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 116.404276][ T6510] loop2: detected capacity change from 0 to 512 [ 116.435125][ T6510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.435182][ T6510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.521749][ T6510] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.281: bad orphan inode 131072 [ 116.521804][ T6510] loop2: lost filesystem error report for type 5 error -117 [ 116.526717][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 116.528135][ C0] EXT4-fs (loop2): initial error at time 1786493516: ext4_orphan_get:1429 [ 116.528231][ C0] EXT4-fs (loop2): last error at time 1786493516: ext4_orphan_get:1429 [ 116.566969][ T9] gspca_sunplus: reg_r err -71 [ 116.567042][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 116.589093][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.598071][ T9] usb 2-1: USB disconnect, device number 4 [ 116.842509][ T6525] loop3: detected capacity change from 0 to 1024 [ 116.860804][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.032933][ T32] audit: type=1800 audit(1786493516.748:267): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 117.526420][ T6549] loop1: detected capacity change from 0 to 256 [ 117.535931][ T6549] exfat: Deprecated parameter 'utf8' [ 117.542659][ T6549] exfat: Deprecated parameter 'utf8' [ 117.549236][ T6549] exfat: Deprecated parameter 'namecase' [ 117.577979][ T6549] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 118.150672][ T6555] loop1: detected capacity change from 0 to 512 [ 118.201587][ T6545] loop0: detected capacity change from 0 to 32768 [ 118.298795][ T6545] JBD2: Ignoring recovery information on journal [ 118.395044][ T6560] loop2: detected capacity change from 0 to 128 [ 118.469928][ T6548] loop3: detected capacity change from 0 to 40427 [ 118.473051][ T6548] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 118.493277][ T6548] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.493990][ T6548] F2FS-fs (loop3): Image doesn't support compression [ 118.512429][ T6560] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 118.518284][ T6548] F2FS-fs (loop3): invalid crc value [ 118.547720][ T6560] ; already mounted read-only [ 118.552684][ T6560] hpfs: filesystem error: improperly stopped [ 118.558075][ T6560] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.558108][ T6560] hpfs: You really don't want any checks? You are crazy... [ 118.558158][ T6560] hpfs: Code page index out of array [ 118.558179][ T6560] hpfs: code page support is disabled [ 118.588908][ T6560] hpfs: hpfs_map_4sectors(): unaligned read [ 118.595307][ T6560] hpfs: hpfs_map_4sectors(): unaligned read [ 118.601398][ T6560] hpfs: filesystem error: unable to find root dir [ 118.620257][ T6545] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.719940][ T6548] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.730494][ T5624] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 118.730562][ T5624] Bluetooth: hci1: Injecting HCI hardware error event [ 118.742101][ T52] Bluetooth: hci1: hardware error 0x00 [ 118.774906][ T6548] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 118.783163][ T6548] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 118.783220][ T6548] F2FS-fs (loop3): Start checkpoint disabled! [ 118.843707][ T6548] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 118.859727][ T6548] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.859765][ T6548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 119.359358][ T5613] ocfs2: Unmounting device (7,0) on (node local) [ 119.932685][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.084130][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.095608][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.095675][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.095697][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.095872][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.095953][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.190778][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.190834][ T10] usb 2-1: Product: syz [ 120.190868][ T10] usb 2-1: Manufacturer: syz [ 120.228603][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 120.229778][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 120.245903][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 120.245951][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 120.482070][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.482193][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.482414][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.482437][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.482717][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.482739][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.482972][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.482994][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.483087][ T5720] usb 2-1: USB disconnect, device number 5 [ 120.483197][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 120.483218][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 120.483235][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 120.636588][ T5758] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.689209][ T6605] jffs2: notice: (6605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.708040][ T6607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.806716][ T5758] usb 4-1: Using ep0 maxpacket: 32 [ 120.813377][ T5758] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.823748][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.837069][ T5758] usb 4-1: config 0 descriptor?? [ 120.966781][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.055989][ T5758] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 121.102605][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.113102][ T5758] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 121.126695][ T5758] usb 4-1: media controller created [ 121.153564][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.261171][ T5758] az6027: usb out operation failed. (-71) [ 121.268007][ T5758] az6027: usb out operation failed. (-71) [ 121.268024][ T5758] stb0899_attach: Driver disabled by Kconfig [ 121.268035][ T5758] az6027: no front-end attached [ 121.268035][ T5758] [ 121.294671][ T5758] az6027: usb out operation failed. (-71) [ 121.294689][ T5758] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 121.328689][ T5758] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 121.362858][ T5758] dvb-usb: schedule remote query interval to 400 msecs. [ 121.374084][ T5758] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 121.397796][ T5758] usb 4-1: USB disconnect, device number 5 [ 121.512084][ T6599] loop2: detected capacity change from 0 to 32768 [ 121.576395][ T6599] JBD2: Ignoring recovery information on journal [ 121.602817][ T6599] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 121.603669][ T6599] JBD2: bad block at offset 32 [ 121.639588][ T6599] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.677893][ T5758] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 122.009219][ T5616] ocfs2: Unmounting device (7,2) on (node local) [ 123.309043][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.390170][ T6636] loop3: detected capacity change from 0 to 32768 [ 123.460241][ T6636] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 123.469242][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 123.475018][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 123.488780][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.488837][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.509447][ T10] usb 3-1: config 0 descriptor?? [ 123.605457][ T6636] XFS (loop3): Ending clean mount [ 123.873038][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 124.003077][ T10] kye 0003:0458:5012.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 124.015748][ T10] kye 0003:0458:5012.0002: unknown main item tag 0x2 [ 124.033260][ T10] kye 0003:0458:5012.0002: unknown main item tag 0x6 [ 124.033414][ T10] kye 0003:0458:5012.0002: ignoring exceeding usage max [ 124.055104][ T10] kye 0003:0458:5012.0002: hidraw0: USB HID vcc.5e Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 124.066300][ T10] kye 0003:0458:5012.0002: tablet-enabling feature report not found [ 124.074437][ T10] kye 0003:0458:5012.0002: tablet enabling failed [ 124.144664][ T6684] loop4: detected capacity change from 0 to 1024 [ 124.153201][ T6684] EXT4-fs: Ignoring removed bh option [ 124.178364][ T10] usb 3-1: USB disconnect, device number 2 [ 124.222186][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.522831][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.545036][ T6688] fido_id[6688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.653928][ T6692] input: syz0 as /devices/virtual/input/input7 [ 125.231626][ T6713] loop1: detected capacity change from 0 to 512 [ 125.277179][ T6713] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.359: bad orphan inode 15 [ 125.277232][ T6713] loop1: lost filesystem error report for type 5 error -117 [ 125.287520][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.287545][ C1] EXT4-fs (loop1): initial error at time 1786493524: ext4_orphan_get:1429 [ 125.287570][ C1] EXT4-fs (loop1): last error at time 1786493524: ext4_orphan_get:1429 [ 125.330339][ T6713] ext4_test_bit(bit=14, block=5) = 0 [ 125.354980][ T6713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.425701][ T6713] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.359: reserved inode found cleared - inode=1 [ 125.477594][ T6713] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 125.688432][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.141238][ T6739] loop0: detected capacity change from 0 to 256 [ 126.155584][ T6739] exfat: Deprecated parameter 'namecase' [ 126.229443][ T6739] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 126.358557][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 126.574746][ T6748] loop4: detected capacity change from 0 to 128 [ 126.593735][ T6748] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 126.625788][ T6748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.924992][ T6752] loop0: detected capacity change from 0 to 4096 [ 126.942420][ T6752] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 127.086016][ T6756] loop1: detected capacity change from 0 to 512 [ 127.137535][ T6752] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 127.180823][ T6756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.181043][ T6756] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.240631][ T6752] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 127.283218][ T6756] EXT4-fs (loop1): shut down requested (2) [ 127.416668][ T5734] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 127.464394][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.579645][ T5734] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.590224][ T5734] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 127.590297][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.590345][ T5734] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.590376][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.590408][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.647846][ T5734] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 127.647914][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.647960][ T5734] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.647991][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.648021][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.691023][ T5734] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 127.691077][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.691105][ T5734] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.691132][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.691159][ T5734] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.759565][ T6768] loop1: detected capacity change from 0 to 128 [ 127.769387][ T5734] usb 3-1: string descriptor 0 read error: -22 [ 127.775756][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.794258][ T5734] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 127.848760][ T6768] hpfs: hpfs_map_sector(): read error [ 128.031905][ T9] usb 3-1: USB disconnect, device number 3 [ 128.181383][ T6778] loop4: detected capacity change from 0 to 256 [ 128.907554][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.071397][ T6799] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.071595][ T6799] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.116636][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 129.122518][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 129.133343][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 129.133395][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.133420][ T9] usb 2-1: config 0 has no interface number 0 [ 129.156102][ T6802] capability: warning: `syz.4.397' uses 32-bit capabilities (legacy support in use) [ 129.171351][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.171394][ T9] usb 2-1: Product: syz [ 129.171414][ T9] usb 2-1: Manufacturer: syz [ 129.171433][ T9] usb 2-1: SerialNumber: syz [ 129.208577][ T9] usb 2-1: config 0 descriptor?? [ 129.222292][ T9] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 129.229871][ T9] uvcvideo 2-1:0.105: No valid video chain found. [ 129.424810][ T9] usb 2-1: USB disconnect, device number 6 [ 130.312317][ T6800] loop0: detected capacity change from 0 to 32768 [ 130.418949][ T6800] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.394 (6800) [ 130.802337][ T6800] BTRFS info (device loop0): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 130.802413][ T6800] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 131.246018][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 131.354554][ T6800] BTRFS info (device loop0): enabling ssd optimizations [ 131.371774][ T6800] BTRFS info (device loop0): turning on async discard [ 131.371818][ T6800] BTRFS info (device loop0): enabling free space tree [ 131.611886][ T5613] BTRFS info (device loop0): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1 [ 131.672025][ T6858] loop1: detected capacity change from 0 to 4096 [ 131.736195][ T6858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.951177][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.482518][ T6860] loop2: detected capacity change from 0 to 131072 [ 132.492741][ T6860] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 132.492790][ T6860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.553002][ T6860] F2FS-fs (loop2): invalid crc value [ 132.661131][ T6860] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 132.686321][ T6860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.686371][ T6860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 132.795106][ T32] audit: type=1800 audit(1786493532.508:268): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 132.822888][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822998][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.540754][ T6898] veth1_macvtap: left promiscuous mode [ 133.551278][ T6898] macsec0: entered allmulticast mode [ 133.602989][ T6898] veth1_macvtap: entered promiscuous mode [ 133.603043][ T6898] veth1_macvtap: entered allmulticast mode [ 133.603368][ T6898] macsec0: left allmulticast mode [ 133.603410][ T6898] veth1_macvtap: left allmulticast mode [ 133.870324][ T6906] loop1: detected capacity change from 0 to 1024 [ 134.127880][ T6909] loop4: detected capacity change from 0 to 4096 [ 134.174781][ T6909] ntfs3(loop4): ino=0, mi_enum_attr [ 134.217451][ T6909] ntfs3(loop4): ino=0, mi_enum_attr [ 134.222951][ T6909] ntfs3(loop4): ino=0, mi_enum_attr [ 134.773056][ T6893] loop3: detected capacity change from 0 to 40427 [ 134.784274][ T6893] F2FS-fs: heap/no_heap options were deprecated [ 134.941635][ T6935] program syz.2.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.996625][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.080815][ T6893] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.097849][ T6893] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 135.105710][ T6893] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 135.119858][ T6893] F2FS-fs (loop3): Start checkpoint disabled! [ 135.148205][ T6893] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 135.156730][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 135.165996][ T6893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.184659][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.184722][ T10] usb 5-1: Product: syz [ 135.184755][ T10] usb 5-1: Manufacturer: syz [ 135.184800][ T10] usb 5-1: SerialNumber: syz [ 135.213172][ T10] usb 5-1: config 0 descriptor?? [ 135.276863][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 135.438907][ T6893] syz.3.433: attempt to access beyond end of device [ 135.438907][ T6893] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 135.641645][ T6275] kworker/u8:14: attempt to access beyond end of device [ 135.641645][ T6275] loop3: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 135.668908][ T6275] kworker/u8:14: attempt to access beyond end of device [ 135.668908][ T6275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.684795][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.684828][ T6275] Tainted: [L]=SOFTLOCKUP [ 135.684837][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.684849][ T6275] Workqueue: writeback wb_workfn (flush-7:3) [ 135.684890][ T6275] Call Trace: [ 135.684899][ T6275] [ 135.684908][ T6275] dump_stack_lvl+0xe8/0x150 [ 135.684944][ T6275] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 135.684985][ T6275] f2fs_write_end_bio+0x1211/0x16e0 [ 135.685011][ T6275] ? blkg_put+0x22/0x240 [ 135.685061][ T6275] __submit_merged_bio+0x258/0x6a0 [ 135.685091][ T6275] ? rcu_is_watching+0x16/0xb0 [ 135.685124][ T6275] __submit_merged_write_cond+0x3c9/0x4e0 [ 135.685165][ T6275] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 135.685224][ T6275] f2fs_write_data_pages+0x2a27/0x36f0 [ 135.685302][ T6275] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.685352][ T6275] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 135.685418][ T6275] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 135.685471][ T6275] ? __lock_acquire+0x6df/0x2e50 [ 135.685518][ T6275] ? __lock_acquire+0x6df/0x2e50 [ 135.685540][ T6275] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.685575][ T6275] do_writepages+0x338/0x560 [ 135.685621][ T6275] ? reacquire_held_locks+0x117/0x1a0 [ 135.685648][ T6275] ? writeback_sb_inodes+0x450/0x1b00 [ 135.685688][ T6275] __writeback_single_inode+0x136/0x1220 [ 135.685726][ T6275] ? do_raw_spin_unlock+0xf5/0x200 [ 135.685762][ T6275] writeback_sb_inodes+0x9de/0x1b00 [ 135.685795][ T6275] ? __lock_acquire+0x6df/0x2e50 [ 135.685847][ T6275] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 135.685933][ T6275] ? rcu_is_watching+0x16/0xb0 [ 135.685960][ T6275] ? queue_io+0x2d3/0x470 [ 135.685997][ T6275] wb_writeback+0x41c/0xad0 [ 135.686034][ T6275] ? queue_io+0x251/0x470 [ 135.686074][ T6275] ? __pfx_wb_writeback+0x10/0x10 [ 135.686105][ T6275] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.686168][ T6275] wb_workfn+0x431/0x10f0 [ 135.686240][ T6275] ? __pfx_wb_workfn+0x10/0x10 [ 135.686273][ T6275] ? irqentry_exit+0x218/0x910 [ 135.686296][ T6275] ? lockdep_hardirqs_on+0x7b/0x110 [ 135.686327][ T6275] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.686370][ T6275] ? lock_acquire+0x115/0x350 [ 135.686404][ T6275] ? rcu_is_watching+0x16/0xb0 [ 135.686433][ T6275] ? process_scheduled_works+0x97a/0x1630 [ 135.686464][ T6275] process_scheduled_works+0xc3d/0x1630 [ 135.686533][ T6275] ? __pfx_process_scheduled_works+0x10/0x10 [ 135.686572][ T6275] ? assign_work+0x3cf/0x5d0 [ 135.686614][ T6275] worker_thread+0xa47/0xfb0 [ 135.686680][ T6275] kthread+0x38b/0x480 [ 135.686703][ T6275] ? __pfx_worker_thread+0x10/0x10 [ 135.686731][ T6275] ? __pfx_kthread+0x10/0x10 [ 135.686755][ T6275] ret_from_fork+0x514/0xb70 [ 135.686794][ T6275] ? __pfx_ret_from_fork+0x10/0x10 [ 135.686829][ T6275] ? __switch_to+0xc89/0x1420 [ 135.686865][ T6275] ? __pfx_kthread+0x10/0x10 [ 135.686890][ T6275] ret_from_fork_asm+0x1a/0x30 [ 135.686944][ T6275] [ 135.798227][ T6275] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.109962][ T10] usb 5-1: failed to send control message: -71 [ 136.110050][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 136.174809][ T10] usb 5-1: USB disconnect, device number 3 [ 136.211936][ T6924] loop1: detected capacity change from 0 to 32768 [ 136.219319][ T10] ch341 5-1:0.0: device disconnected [ 136.280393][ T6924] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.385192][ T6924] XFS (loop1): Ending clean mount [ 136.460387][ T5627] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 137.079090][ T6988] overlayfs: workdir and upperdir must reside under the same mount [ 137.273755][ T52] Bluetooth: hci0: Zero size dump init pkt [ 137.326611][ T5758] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.477387][ T5758] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 137.488001][ T5758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.500969][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.514901][ T5758] usb 4-1: config 0 descriptor?? [ 137.870246][ T990] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 137.976421][ T7026] loop0: detected capacity change from 0 to 128 [ 137.993441][ T7026] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.101525][ T7022] fido_id[7022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.148447][ T5758] ath6kl: mismatched byte count 0 vs. expected 12 [ 138.160841][ T5758] ath6kl: Failed to init ath6kl core: -22 [ 138.178372][ T5758] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 138.383576][ T5734] usb 4-1: USB disconnect, device number 6 [ 138.481093][ T7040] program syz.2.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.500698][ T32] audit: type=1326 audit(1786493538.218:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.501370][ T32] audit: type=1326 audit(1786493538.218:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.544368][ T32] audit: type=1326 audit(1786493538.248:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.555126][ T32] audit: type=1326 audit(1786493538.278:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.555189][ T32] audit: type=1326 audit(1786493538.278:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.555234][ T32] audit: type=1326 audit(1786493538.278:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.555385][ T32] audit: type=1326 audit(1786493538.248:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.574465][ T32] audit: type=1326 audit(1786493538.278:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.574602][ T32] audit: type=1326 audit(1786493538.278:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.605850][ T32] audit: type=1326 audit(1786493538.308:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f31e6d9e0d9 code=0x7ffc0000 [ 138.797048][ T7044] loop0: detected capacity change from 0 to 1024 [ 138.927376][ T7044] hfsplus: bad catalog file entry [ 139.042437][ T6275] hfsplus: bad catalog file entry [ 139.137690][ T7054] loop1: detected capacity change from 0 to 4096 [ 139.176010][ T7054] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 139.301444][ T7054] ntfs3(loop1): ino=19, mi_enum_attr [ 139.308331][ T7054] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 139.332371][ T7054] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 139.492249][ T7063] loop3: detected capacity change from 0 to 1024 [ 139.522708][ T7063] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.574808][ T7070] loop4: detected capacity change from 0 to 256 [ 139.585985][ T7070] exfat: Deprecated parameter 'utf8' [ 139.586407][ T7070] exfat: Deprecated parameter 'utf8' [ 139.634035][ T7070] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 139.646232][ T7063] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.505: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.646273][ T7063] fserror_report: 1 callbacks suppressed [ 139.646286][ T7063] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.648851][ C0] EXT4-fs (loop3): initial error at time 1786493539: ext4_map_blocks:790: inode 3: block 2 [ 139.648955][ C0] EXT4-fs (loop3): last error at time 1786493539: ext4_map_blocks:790: inode 3: block 2 [ 139.689972][ T7063] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.505: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.690081][ T7063] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.723157][ T7063] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.505: Failed to acquire dquot type 0 [ 139.745041][ T7063] loop3: lost filesystem error report for type 5 error -117 [ 139.747131][ T7063] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 139.747167][ T7063] loop3: lost filesystem error report for type 5 error -117 [ 139.751588][ T7063] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.505: mark_inode_dirty error [ 139.751663][ T7063] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 139.760650][ T7063] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 139.760910][ T7063] EXT4-fs (loop3): 1 orphan inode deleted [ 139.775636][ T60] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.775714][ T60] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 139.832947][ T60] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 139.833584][ T60] loop3: lost filesystem error report for type 5 error -117 [ 139.864628][ T7063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.953455][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.992887][ T5614] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.992950][ T5614] loop3: lost filesystem error report for type 5 error -117 [ 140.061287][ T5614] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 140.061342][ T5614] loop3: lost filesystem error report for type 5 error -117 [ 140.069155][ T5614] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 140.069254][ T5614] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.074022][ T5614] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.074098][ T5614] loop3: lost filesystem error report for type 5 error -117 [ 140.464120][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.481256][ T7089] bond0: (slave bond1): Enslaving as an active interface with an up link [ 140.527527][ T7094] WARNING! power/level is deprecated; use power/control instead [ 140.687990][ T7088] loop3: detected capacity change from 0 to 40427 [ 140.698523][ T7088] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 140.698563][ T7088] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.722201][ T7088] F2FS-fs (loop3): invalid crc value [ 140.837968][ T7088] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 140.872369][ T7088] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.879689][ T7088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.298551][ T7112] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.324668][ T7114] program syz.2.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.522826][ T7120] loop2: detected capacity change from 0 to 256 [ 141.567364][ T7121] loop4: detected capacity change from 0 to 4096 [ 141.590229][ T7121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.590265][ T7121] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.623722][ T7121] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 141.623965][ T7121] System zones: 0-5 [ 141.640306][ T7120] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.660534][ T7120] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 141.671889][ T7121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.861970][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.977827][ T7126] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 142.015070][ T7126] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 143.076581][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.228020][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 143.248068][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.248147][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.260318][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 143.260405][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.260496][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 7 [ 143.260558][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.286921][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.286989][ T10] usb 5-1: Product: syz [ 143.287032][ T10] usb 5-1: Manufacturer: syz [ 143.287074][ T10] usb 5-1: SerialNumber: syz [ 143.320460][ T5734] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.384476][ T7174] loop2: detected capacity change from 0 to 2048 [ 143.399288][ T7174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.498213][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 143.535121][ T5734] usb 4-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=fb.34 [ 143.550601][ T5734] usb 4-1: config 251 has an invalid interface number: 94 but max is 0 [ 143.550653][ T5734] usb 4-1: config 251 has no interface number 0 [ 143.550795][ T5734] usb 4-1: config 251 interface 94 altsetting 2 bulk endpoint 0xA has invalid maxpacket 8 [ 143.550948][ T5734] usb 4-1: config 251 interface 94 has no altsetting 0 [ 143.603135][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.603184][ T5734] usb 4-1: Product: syz [ 143.603202][ T5734] usb 4-1: Manufacturer: syz [ 143.603266][ T5734] usb 4-1: SerialNumber: syz [ 143.661401][ T7167] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.950343][ T5734] ldusb 4-1:251.94: Interrupt in endpoint not found [ 143.977895][ T5734] usb 4-1: USB disconnect, device number 7 [ 144.014476][ T7184] loop0: detected capacity change from 0 to 512 [ 144.051601][ T7184] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 144.122032][ T7184] EXT4-fs (loop0): invalid journal inode [ 144.122315][ T7184] EXT4-fs (loop0): can't get journal size [ 144.201631][ T10] usb 5-1: USB disconnect, device number 4 [ 144.354373][ T7184] EXT4-fs (loop0): 1 truncate cleaned up [ 144.448130][ T7184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.475774][ T7184] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.559: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=1040, size=1024 fake=0 [ 144.729934][ T7197] loop4: detected capacity change from 0 to 512 [ 144.742417][ T7197] EXT4-fs: Ignoring removed nobh option [ 144.760276][ T7197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.779723][ T7197] EXT4-fs (loop4): 1 truncate cleaned up [ 144.793810][ T7197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.848883][ T32] kauditd_printk_skb: 23 callbacks suppressed [ 144.848922][ T32] audit: type=1800 audit(1786493544.568:299): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 144.884908][ T32] audit: type=1804 audit(1786493544.598:300): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.565" name="/newroot/99/file2/file2" dev="loop4" ino=16 res=1 errno=0 [ 145.074721][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.732809][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.826018][ T7216] loop3: detected capacity change from 0 to 8 [ 147.143122][ T7271] loop3: detected capacity change from 0 to 256 [ 147.164267][ T7271] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 147.535235][ T7261] loop2: detected capacity change from 0 to 32768 [ 147.712973][ T7281] loop3: detected capacity change from 0 to 256 [ 148.856699][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.017986][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 149.025314][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.036129][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.049505][ T25] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.059628][ T25] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.072917][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.079695][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.093854][ T25] usb 5-1: config 0 descriptor?? [ 149.308621][ T7298] loop1: detected capacity change from 0 to 32768 [ 149.331038][ T7298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.612 (7298) [ 149.359640][ T7298] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.370526][ T7298] BTRFS info (device loop1): using sha256 checksum algorithm [ 149.489059][ T7298] BTRFS info (device loop1): enabling ssd optimizations [ 149.499519][ T7298] BTRFS info (device loop1): turning on async discard [ 149.506685][ T7298] BTRFS info (device loop1): enabling free space tree [ 149.525854][ T25] hid (null): report_id 34376 is invalid [ 149.532485][ T25] hid (null): invalid report_size 29285 [ 149.538497][ T25] hid (null): invalid report_size 29285 [ 149.545814][ T25] hid (null): report_id 34376 is invalid [ 149.553754][ T25] hid (null): report_id 0 is invalid [ 149.559954][ T25] hid (null): global environment stack underflow [ 149.566682][ T25] hid (null): unknown global tag 0xc [ 149.572265][ T25] hid (null): unknown global tag 0xe [ 149.577819][ T25] hid (null): unknown global tag 0xc [ 149.583248][ T25] hid (null): unknown global tag 0xc [ 149.635894][ T5627] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.738127][ T25] usb 5-1: USB disconnect, device number 5 [ 194.248993][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249076][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.456201][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 201.456270][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 206.571103][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 206.577696][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 255.687701][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.687781][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.486739][ T33] INFO: task jbd2/sda1-8:4943 blocked in I/O wait for more than 143 seconds. [ 300.490845][ T33] Tainted: G L syzkaller #0 [ 300.490916][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.490951][ T33] task:jbd2/sda1-8 state:D stack:25184 pid:4943 tgid:4943 ppid:2 task_flags:0x240040 flags:0x00080000 [ 300.491148][ T33] Call Trac ** replaying previous printk message ** [ 300.491148][ T33] Call Trace: [ 300.491173][ T33] [ 300.491216][ T33] __schedule+0x1b4d/0x59e0 [ 300.491335][ T33] ? percpu_ref_put_many+0x21/0x240 [ 300.491467][ T33] ? percpu_ref_put_many+0x18e/0x240 [ 300.491566][ T33] ? blk_mq_dispatch_list+0xd31/0xe10 [ 300.491665][ T33] ? __pfx___schedule+0x10/0x10 [ 300.491777][ T33] ? schedule+0x90/0x2b0 [ 300.491877][ T33] schedule+0x164/0x2b0 [ 300.491967][ T33] io_schedule+0x7f/0xd0 [ 300.492067][ T33] bit_wait_io+0x11/0xd0 [ 300.492127][ T33] __wait_on_bit+0xac/0x300 [ 300.492184][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.492258][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 300.492324][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.492394][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 300.492470][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 300.492556][ T33] ? __wait_on_buffer+0xe/0x80 [ 300.492640][ T33] jbd2_journal_commit_transaction+0x2f1d/0x5b70 [ 300.492716][ T33] ? trace_hrtimer_start+0x82/0x200 [ 300.492889][ T33] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 300.492980][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.493120][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.493211][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 300.493295][ T33] ? __timer_delete_sync+0x4a7/0x520 [ 300.493367][ T33] kjournald2+0x3bc/0x750 [ 300.493488][ T33] ? __pfx_kjournald2+0x10/0x10 [ 300.494054][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 300.494128][ T33] ? __kthread_parkme+0x71/0x1f0 [ 300.494218][ T33] ? __kthread_parkme+0x199/0x1f0 [ 300.494317][ T33] kthread+0x38b/0x480 [ 300.494375][ T33] ? __pfx_kjournald2+0x10/0x10 [ 300.494455][ T33] ? __pfx_kthread+0x10/0x10 [ 300.494522][ T33] ret_from_fork+0x514/0xb70 [ 300.494614][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 300.494713][ T33] ? __switch_to+0xc89/0x1420 [ 300.494801][ T33] ? __pfx_kthread+0x10/0x10 [ 300.494859][ T33] ret_from_fork_asm+0x1a/0x30 [ 300.494983][ T33] [ 300.495039][ T33] INFO: task syz-executor:5602 blocked in I/O wait for more than 143 seconds. [ 300.495096][ T33] Tainted: G L syzkaller #0 [ 300.495130][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.495154][ T33] task:syz-executor state:D stack:21952 pid:5602 tgid:5602 ppid:5601 task_flags:0x440100 flags:0x00080000 [ 300.495369][ T33] Call Trace: [ 300.495391][ T33] [ 300.495425][ T33] __schedule+0x1b4d/0x59e0 [ 300.495612][ T33] ? lock_acquire+0x115/0x350 [ 300.495710][ T33] ? __pfx___schedule+0x10/0x10 [ 300.495811][ T33] ? schedule+0x90/0x2b0 [ 300.495907][ T33] schedule+0x164/0x2b0 [ 300.495994][ T33] io_schedule+0x7f/0xd0 [ 300.496091][ T33] bit_wait_io+0x11/0xd0 [ 300.496134][ T33] __wait_on_bit+0xac/0x300 [ 300.496198][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.496263][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 300.496329][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.496397][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 300.498219][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 300.498333][ T33] do_get_write_access+0x662/0x1070 [ 300.498442][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 300.498510][ T33] __ext4_journal_get_write_access+0xf1/0x620 [ 300.498661][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 300.498737][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 300.498803][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 300.498924][ T33] ext4_reserve_inode_write+0x294/0x360 [ 300.499010][ T33] __ext4_mark_inode_dirty+0x146/0x7b0 [ 300.499145][ T33] ext4_dirty_inode+0xd0/0x110 [ 300.499201][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 300.499266][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 300.499366][ T33] file_update_time_flags+0x399/0x440 [ 300.499453][ T33] ext4_page_mkwrite+0x224/0x1140 [ 300.499585][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 300.499644][ T33] ? __lock_acquire+0x6df/0x2e50 [ 300.499729][ T33] do_page_mkwrite+0x147/0x310 [ 300.499814][ T33] do_wp_page+0x1a9c/0x4b80 [ 300.499946][ T33] ? __pfx_do_wp_page+0x10/0x10 [ 300.500027][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.500104][ T33] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.500205][ T33] handle_mm_fault+0x15d7/0x3750 [ 300.500327][ T33] ? handle_mm_fault+0xf1/0x3750 [ 300.500439][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 300.500526][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 300.500585][ T33] ? __pfx_set_user_sigmask+0x10/0x10 [ 300.500729][ T33] do_user_addr_fault+0xa4f/0x1340 [ 300.500825][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 300.500916][ T33] exc_page_fault+0x6a/0xc0 [ 300.501007][ T33] asm_exc_page_fault+0x26/0x30 [ 300.501065][ T33] RIP: 0033:0x7f0e28470163 [ 300.501120][ T33] RSP: 002b:00007ffce69b5330 EFLAGS: 00010202 [ 300.501172][ T33] RAX: 00007f0e221fb53c RBX: 00007ffce69b5460 RCX: 0000000000000000 [ 300.501217][ T33] RDX: 00007f0e221fb538 RSI: 0000000000000008 RDI: 00007ffce69b5460 [ 300.501260][ T33] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 300.501294][ T33] R10: 00007ffce69b5440 R11: 0000000000000000 R12: 0000000000000000 [ 300.501329][ T33] R13: 0000000000004ac4 R14: ffffffffffffb53c R15: 0000000000000000 [ 300.501418][ T33] [ 300.501558][ T33] INFO: task syz.4.613:7299 blocked in I/O wait for more than 143 seconds. [ 300.501614][ T33] Tainted: G L syzkaller #0 [ 300.501658][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.501681][ T33] task:syz.4.613 state:D stack:25608 pid:7299 tgid:7299 ppid:5615 task_flags:0x440040 flags:0x00080002 [ 300.501886][ T33] Call Trace: [ 300.501908][ T33] [ 300.501942][ T33] __schedule+0x1b4d/0x59e0 [ 300.502063][ T33] ? __lock_acquire+0x6df/0x2e50 [ 300.502156][ T33] ? __pfx___schedule+0x10/0x10 [ 300.502284][ T33] ? schedule+0x90/0x2b0 [ 300.502388][ T33] schedule+0x164/0x2b0 [ 300.502487][ T33] io_schedule+0x7f/0xd0 [ 300.502580][ T33] bit_wait_io+0x11/0xd0 [ 300.502659][ T33] __wait_on_bit+0xac/0x300 [ 300.502716][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.502777][ T33] out_of_line_wait_on_bit+0x13b/0x190 [ 300.502844][ T33] ? __pfx_bit_wait_io+0x10/0x10 [ 300.502919][ T33] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 300.502986][ T33] ? __pfx_wake_bit_function+0x10/0x10 [ 300.503090][ T33] do_get_write_access+0x662/0x1070 [ 300.503225][ T33] jbd2_journal_get_write_access+0x1d7/0x230 [ 300.503299][ T33] __ext4_journal_get_write_access+0xf1/0x620 [ 300.503375][ T33] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 300.503431][ T33] ? trace_kmem_cache_alloc+0x29/0xe0 [ 300.503498][ T33] ? jbd2__journal_start+0x145/0x5d0 [ 300.503636][ T33] ext4_reserve_inode_write+0x294/0x360 [ 300.503721][ T33] __ext4_mark_inode_dirty+0x146/0x7b0 [ 300.503829][ T33] ext4_dirty_inode+0xd0/0x110 [ 300.503893][ T33] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 300.503934][ T33] __mark_inode_dirty+0x3a8/0x13b0 [ 300.504026][ T33] file_update_time_flags+0x399/0x440 [ 300.504113][ T33] ext4_page_mkwrite+0x224/0x1140 [ 300.504193][ T33] ? __pfx_filemap_fault+0x10/0x10 [ 300.504262][ T33] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 300.504353][ T33] do_page_mkwrite+0x147/0x310 [ 300.504432][ T33] do_pte_missing+0x757/0x34b0 [ 300.504493][ T33] ? handle_mm_fault+0xf1/0x3750 [ 300.504530][ T33] handle_mm_fault+0x1a53/0x3750 [ 300.504575][ T33] ? handle_mm_fault+0xf1/0x3750 [ 300.504618][ T33] ? __pfx_handle_mm_fault+0x10/0x10 [ 300.519741][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 300.519866][ T33] ? sched_clock_cpu+0x74/0x440 [ 300.519954][ T33] do_user_addr_fault+0xa4f/0x1340 [ 300.520056][ T33] ? trace_page_fault_user+0x84/0x1e0 [ 300.520137][ T33] exc_page_fault+0x6a/0xc0 [ 300.520203][ T33] asm_exc_page_fault+0x26/0x30 [ 300.520260][ T33] RIP: 0033:0x7f31e6c72eb2 [ 300.520313][ T33] RSP: 002b:00007ffd0bef54a0 EFLAGS: 00010202 [ 300.520376][ T33] RAX: 0000000000012008 RBX: 00007f31e7b55720 RCX: 0000000000000000 [ 300.520418][ T33] RDX: 0000001b33e12000 RSI: 0000000000000008 RDI: 00007f31e7b55720 [ 300.520453][ T33] RBP: 00000000000005e6 R08: 00007f31e7010000 R09: 00007f31e7025f40 [ 300.520495][ T33] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff8bd86269 [ 300.520538][ T33] R13: 00007f31e7025f40 R14: 0000000000000014 R15: fffffffffffee000 [ 300.520584][ T33] ? put_dec_trunc8+0x69/0x340 [ 300.520704][ T33] [ 300.520778][ T33] [ 300.520778][ T33] Showing all locks held in the system: [ 300.520802][ T33] locks held by pr/ttyS0/16: 2, last CPU#1: [ 300.520845][ T33] #0: ffffffff8ea36478 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 300.521014][ T33] #1: ffffffff9ab00b58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 300.521816][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 300.521860][ T33] #0: ffffffff8eb5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 300.522067][ T33] locks held by klogd/4970: 2, last CPU#0: [ 300.522110][ T33] #0: ffffffff8eca48b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 300.522264][ T33] #1: ffffffff8eb5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 300.522427][ T33] locks held by getty/5371: 2, on CPU#0: [ 300.522468][ T33] #0: ffff888031f1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 300.522617][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 300.522803][ T33] locks held by syz-executor/5602: 3, on CPU#0: [ 300.522853][ T33] #0: ffff888025102d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 300.523010][ T33] #1: ffff888024f9e558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 300.523164][ T33] #2: ffff888035b8c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 300.523423][ T33] locks held by kworker/u8:10/6271: 4, on CPU#1: [ 300.523472][ T33] #0: ffff88801eecf940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 300.523626][ T33] #1: ffffc90006817c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 300.523792][ T33] #2: ffff888024f9e0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 300.523944][ T33] #3: ffff888024f9cc98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 300.524083][ T33] locks held by syz.4.613/7299: 3, on CPU#1: [ 300.524127][ T33] #0: ffff8880772dabc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 300.524299][ T33] #1: ffff888024f9e558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 300.524440][ T33] #2: ffff888035b8c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 300.524613][ T33] [ 300.524627][ T33] ============================================= [ 300.524627][ T33] [ 300.524671][ T33] NMI backtrace for cpu 0 [ 300.524713][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 300.524790][ T33] Tainted: [L]=SOFTLOCKUP [ 300.524811][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.524842][ T33] Call Trace: [ 300.524865][ T33] [ 300.524887][ T33] dump_stack_lvl+0xe8/0x150 [ 300.524983][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 300.525063][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.525165][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 300.525260][ T33] sys_info+0x135/0x170 [ 300.525323][ T33] watchdog+0xfd7/0x1030 [ 300.525399][ T33] ? watchdog+0x1c7/0x1030 [ 300.525464][ T33] kthread+0x38b/0x480 [ 300.525523][ T33] ? __pfx_watchdog+0x10/0x10 [ 300.525574][ T33] ? __pfx_kthread+0x10/0x10 [ 300.525640][ T33] ret_from_fork+0x514/0xb70 [ 300.525719][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 300.525802][ T33] ? __switch_to+0xc89/0x1420 [ 300.525883][ T33] ? __pfx_kthread+0x10/0x10 [ 300.525937][ T33] ret_from_fork_asm+0x1a/0x30 [ 300.526052][ T33] [ 300.526072][ T33] Sending NMI from CPU 0 to CPUs 1: [ 300.526133][ C1] NMI backtrace for cpu 1 [ 300.526155][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.526181][ C1] Tainted: [L]=SOFTLOCKUP [ 300.526187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.526198][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 300.526222][ C1] Code: e8 2e c3 5a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f 31 c9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 12 72 06 cc 44 89 f9 80 e1 07 [ 300.526238][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 300.526254][ C1] RAX: 1ffffffff3560100 RBX: 00000000000003fd RCX: 0000000000000000 [ 300.526267][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 300.526278][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 300.526290][ C1] R10: dffffc0000000000 R11: ffffffff856ce650 R12: dffffc0000000000 [ 300.526304][ C1] R13: 0000000000000000 R14: ffffffff9ab00b80 R15: 0000000000000000 [ 300.526316][ C1] FS: 0000000000000000(0000) GS:ffff88812500a000(0000) knlGS:0000000000000000 [ 300.526331][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.526344][ C1] CR2: 0000564a286b5168 CR3: 000000007f6f0000 CR4: 00000000003526f0 [ 300.526361][ C1] Call Trace: [ 300.526368][ C1] [ 300.526376][ C1] wait_for_lsr+0x184/0x2f0 [ 300.526399][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 300.526433][ C1] serial8250_console_write+0xaa1/0x1200 [ 300.526457][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.526483][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 300.526507][ C1] ? __schedule+0x1b63/0x59e0 [ 300.526543][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 300.526570][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 300.526593][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 300.526620][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 300.526656][ C1] nbcon_kthread_func+0x679/0x880 [ 300.526678][ C1] ? nbcon_kthread_func+0x163/0x880 [ 300.526696][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 300.526718][ C1] ? __kthread_parkme+0x71/0x1f0 [ 300.526745][ C1] ? __kthread_parkme+0x199/0x1f0 [ 300.526773][ C1] kthread+0x38b/0x480 [ 300.526790][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 300.526806][ C1] ? __pfx_kthread+0x10/0x10 [ 300.526824][ C1] ret_from_fork+0x514/0xb70 [ 300.526863][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 300.526890][ C1] ? __switch_to+0xc89/0x1420 [ 300.526920][ C1] ? __pfx_kthread+0x10/0x10 [ 300.526938][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.526973][ C1] [ 300.528722][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 301.942283][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 301.952991][ T33] Tainted: [L]=SOFTLOCKUP [ 301.957339][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.967438][ T33] Call Trace: [ 301.970734][ T33] [ 301.973680][ T33] vpanic+0x56d/0xa60 [ 301.977692][ T33] ? __pfx___schedule+0x10/0x10 [ 301.982570][ T33] ? __pfx_vpanic+0x10/0x10 [ 301.987113][ T33] panic+0xc5/0xd0 [ 301.990858][ T33] ? __pfx_panic+0x10/0x10 [ 301.995304][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 302.000818][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 302.006353][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 302.012553][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 302.018742][ T33] watchdog+0x1030/0x1030 [ 302.023131][ T33] ? watchdog+0x1c7/0x1030 [ 302.027581][ T33] kthread+0x38b/0x480 [ 302.031684][ T33] ? __pfx_watchdog+0x10/0x10 [ 302.036390][ T33] ? __pfx_kthread+0x10/0x10 [ 302.041032][ T33] ret_from_fork+0x514/0xb70 [ 302.045663][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 302.050809][ T33] ? __switch_to+0xc89/0x1420 [ 302.055520][ T33] ? __pfx_kthread+0x10/0x10 [ 302.060147][ T33] ret_from_fork_asm+0x1a/0x30 [ 302.064959][ T33] [ 302.068593][ T33] Kernel Offset: disabled [ 302.072939][ T33] Rebooting in 86400 seconds..