last executing test programs: 15.989026986s ago: executing program 1 (id=902): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0x2, 0xfff2}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800a51c00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.526100738s ago: executing program 1 (id=907): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x0) 15.353999186s ago: executing program 1 (id=909): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x0, 0x4e1d, 0x0, 0x2, 0x20, 0x80, 0x11}, {0x8, 0x8009, 0x8, 0x3, 0x10000000c, 0x7fff, 0xff, 0x2}, {0xb, 0x49, 0x32}, 0x9, 0xfffffffc, 0x2, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4cf, 0xff}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x8, 0x1}}, 0xe8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 2.903633334s ago: executing program 1 (id=915): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x2400c000) 2.643373885s ago: executing program 3 (id=985): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdf9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0xfffffffc, 0x28, 0x9, 0x98c, 0x17, "abb2772080cf93822dc4b669c0a1d3b82ff530"}) 2.568725239s ago: executing program 1 (id=986): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.297947002s ago: executing program 3 (id=990): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/61, 0x42}, {0x0}, {0x0}, {0x0, 0x15}, {&(0x7f0000000080)=""/17, 0x4}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x8140, 0x0) 2.097389641s ago: executing program 3 (id=993): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x2004410, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYBLOB="e19cf083317cbfcbc9980086abe349b8a9732cf1885cc5f2b5a2de40c1feb391a9e270c83e0f85c8413a847cab72deb3c606"], 0xfe, 0x123a, &(0x7f00000024c0)="$eJzs3E9rHGUcB/CfmzSpSfNHrdUK0gd70cuQ5OBFQYKkIF1Q2kZoBWFqNrpk3A2ZJbAijZ7Em2/Bq3jUkyDe9BIPgu/AWy4ePagj3UlrViNRW7s1fD6Xfdjn+Q6/Z2YYeJZ9Zu/5j97eWC+z9bwXjQdeiMZmxPgvKVI04pb34pnnvv7myctXr11cbjZXLqV0YfnK4rMppdlzX7727qdPfdWbfvWz2S8mY3f+9b0fl37YPbN7du/XK2+1y9QuU6fbS3m63u328utFK621y40spVeKVl62UrtTtraG+teL7uZmP+WdtZmpza1WWaa8008brX7qdVNvq5/yN/N2J2VZlmamgjux+slPVVVFVNWJmIiqqqoHYyoacSpmYjbmYj4eiofjkTgdj8aZeCwej7ODUREToy4dAAAAAAAAAAAAAAAAAAAAjpHD9v9PD+////zU/tiD+/8Hzo2wcAAAAAAAAAAAAAAAAAAAADhGLl+9dnG52Vy5lNLJiOKD7dXt1fqz7l9ej3YU0YqFmIufY7D7v1a3J6K5spAG5uP9Ymc/v7O9OjacXxy8TuBP+QsvNVcW63wazk/G1MH8UszF6cPzS3/Inx/kT8bT5w/ks5iL796IbhSxFjezv+dvLKb04svN2/lvd+u5r43wugAAAMDdlKXbDl2/Z9lf9df5o34fuLm+Xjh0fT8eT4yPdu5ElP13NvKiaG2NvHGrovqbnYi4Twr7141GRPS/j4i7dMAPb9Rn6G+nJo4afOLI40yP4NR9PB1xB/GxoRvpvrgT/o+No54cY//dQ4l7Zv+iT466DgAAAAAAAAAAAP6Ze/F3wlHPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//vGrDtw==") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) 1.874403782s ago: executing program 0 (id=995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000001"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.608920984s ago: executing program 0 (id=997): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x80c4, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.549493947s ago: executing program 1 (id=998): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 1.501001309s ago: executing program 3 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400bfd96d6f64650000000000000000000000000000000000000000000000000000000005000300050000001000"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.213386893s ago: executing program 3 (id=1002): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) pread64(r0, 0x0, 0x0, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 1.053375981s ago: executing program 2 (id=1003): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x40102, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) writev(r0, &(0x7f0000000280)=[{&(0x7f0000002080)="e4ad42af", 0x4}], 0x1) 967.278125ms ago: executing program 2 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010000}}], 0x1, 0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 735.355496ms ago: executing program 2 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000080)=0x13) 604.282362ms ago: executing program 2 (id=1006): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe4, 0x1}, {0x0, 0x9}, {0x5, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9b}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20048841) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 579.136643ms ago: executing program 0 (id=1007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x40, r0, 0x801, 0x400, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b51207e19a8ff400"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x40}}, 0x0) 361.093133ms ago: executing program 0 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 248.205119ms ago: executing program 2 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) 210.671981ms ago: executing program 3 (id=1010): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002240)={0x50, 0x0, r1, {0x7, 0x8, 0x11, 0x6001, 0x10, 0x8, 0x4, 0x7fffffff, 0xc00, 0x0, 0x20, 0x1798c}}, 0x50) 149.180483ms ago: executing program 0 (id=1011): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r1, 0x402, 0x80000006) getdents64(r0, 0x0, 0x0) 90.602266ms ago: executing program 2 (id=1012): rseq(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x8, 0x0) 0s ago: executing program 0 (id=1013): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): imeout [ 91.237244][ T5781] Bluetooth: hci3: command tx timeout [ 91.242657][ T5087] Bluetooth: hci2: command tx timeout [ 91.253125][ T5784] Bluetooth: hci0: command tx timeout [ 91.258362][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.268097][ T5777] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 91.276625][ T5777] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 91.284482][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.286055][ T5777] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 91.304173][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.307372][ T5777] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 91.324446][ T5777] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 91.334319][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.354357][ T5777] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 91.364227][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.377213][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.409180][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.426996][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.475397][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.483008][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.515030][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.542425][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.557726][ T5852] loop0: detected capacity change from 0 to 22 [ 91.570049][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.588129][ T5852] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 91.604287][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.625730][ T5852] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 91.646225][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.708518][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.738323][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768802][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.789629][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196398][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.226839][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.291187][ T9] cfg80211: failed to load regulatory.db [ 92.395225][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.436655][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.928991][ T5868] loop2: detected capacity change from 0 to 1764 [ 93.255479][ T5865] comedi comedi1: reset error (fatal) [ 93.282327][ T5861] loop3: detected capacity change from 0 to 32768 [ 93.314671][ T5784] Bluetooth: hci0: command tx timeout [ 93.316231][ T5785] Bluetooth: hci2: command tx timeout [ 93.320421][ T5781] Bluetooth: hci3: command tx timeout [ 93.326242][ T5087] Bluetooth: hci1: command tx timeout [ 93.405377][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.516998][ T27] audit: type=1800 audit(1789403349.828:2): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 93.603784][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 93.629725][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.670068][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.707280][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.737432][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.782174][ T5821] usb 3-1: config 0 descriptor?? [ 93.838270][ T5821] hub 3-1:0.0: USB hub found [ 94.059526][ T5821] hub 3-1:0.0: 27 ports detected [ 94.088257][ T5821] hub 3-1:0.0: insufficient power available to use all downstream ports [ 94.178160][ T5875] loop3: detected capacity change from 0 to 128 [ 94.263914][ T5821] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 94.270621][ T5821] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 94.337361][ T5821] usbhid 3-1:0.0: can't add hid device: -71 [ 94.343463][ T5821] usbhid: probe of 3-1:0.0 failed with error -71 [ 94.446989][ T5821] usb 3-1: USB disconnect, device number 2 [ 94.542510][ T5872] loop1: detected capacity change from 0 to 40427 [ 94.593095][ T5872] F2FS-fs (loop1): invalid crc value [ 94.642595][ T5872] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.838415][ T5872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.121787][ T5775] syz-executor: attempt to access beyond end of device [ 95.121787][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.170764][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.360195][ T5893] netlink: 14 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.658849][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.100676][ T5908] loop0: detected capacity change from 0 to 4096 [ 96.160729][ T5908] EXT4-fs (loop0): Test dummy encryption mode enabled [ 96.208414][ T5908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.537129][ T5908] ======================================================= [ 96.537129][ T5908] WARNING: The mand mount option has been deprecated and [ 96.537129][ T5908] and is ignored by this kernel. Remove the mand [ 96.537129][ T5908] option from the mount to silence this warning. [ 96.537129][ T5908] ======================================================= [ 96.610852][ T5908] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 96.638506][ T5908] EXT4-fs: Cannot change quota options when quota turned on [ 96.672483][ T5916] loop2: detected capacity change from 0 to 256 [ 96.726235][ T5916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 96.910991][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.983754][ T5907] comedi comedi1: reset error (fatal) [ 97.475982][ T5931] netlink: 14 bytes leftover after parsing attributes in process `syz.2.34'. [ 97.693908][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.914294][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 97.951699][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.968424][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.981285][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.023710][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.034678][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.057999][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.068868][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.092151][ T23] usb 1-1: Manufacturer: syz [ 98.111118][ T23] usb 1-1: config 0 descriptor?? [ 98.464303][ T23] rc_core: IR keymap rc-hauppauge not found [ 98.470288][ T23] Registered IR keymap rc-empty [ 98.494628][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.541799][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.599433][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 98.650849][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 98.729310][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.770429][ T5950] bridge0: port 3(syz_tun) entered blocking state [ 98.781678][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.814082][ T5950] bridge0: port 3(syz_tun) entered disabled state [ 98.830890][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.841909][ T5950] syz_tun: entered allmulticast mode [ 98.870046][ T5950] syz_tun: entered promiscuous mode [ 98.889214][ T5950] bridge0: port 3(syz_tun) entered blocking state [ 98.896222][ T5950] bridge0: port 3(syz_tun) entered forwarding state [ 98.911900][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.953817][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.993932][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.043048][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.108542][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.158360][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.193821][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.242915][ T23] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 99.253373][ T23] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.272158][ T23] usb 1-1: USB disconnect, device number 2 [ 99.617498][ T5966] loop2: detected capacity change from 0 to 764 [ 99.860397][ T5972] loop2: detected capacity change from 0 to 512 [ 99.925943][ T5972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.944733][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.49: corrupted inode contents [ 99.978991][ T5972] EXT4-fs (loop2): Remounting filesystem read-only [ 99.996248][ T5972] EXT4-fs (loop2): 1 orphan inode deleted [ 100.003520][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.159467][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.180972][ T5980] capability: warning: `syz.0.61' uses 32-bit capabilities (legacy support in use) [ 100.206525][ T5980] loop0: detected capacity change from 0 to 256 [ 100.518675][ T5989] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.776007][ T5993] loop3: detected capacity change from 0 to 256 [ 100.784319][ T5993] exfat: Deprecated parameter 'namecase' [ 100.856573][ T5993] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 101.407425][ T5984] comedi comedi1: reset error (fatal) [ 101.432106][ T5976] loop1: detected capacity change from 0 to 40427 [ 101.468352][ T5976] F2FS-fs (loop1): Invalid log blocks per segment (32) [ 101.482350][ T5976] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.499248][ T5976] F2FS-fs (loop1): heap/no_heap options were deprecated [ 101.725900][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.929163][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 101.952125][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.983755][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.005981][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.032412][ T23] usb 1-1: config 0 descriptor?? [ 102.041329][ T6006] Bluetooth: MGMT ver 1.22 [ 102.292808][ T23] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.499953][ T6018] loop1: detected capacity change from 0 to 256 [ 102.547697][ T5819] usb 1-1: USB disconnect, device number 3 [ 102.818740][ T6022] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.844130][ T6022] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 103.172745][ T6020] loop2: detected capacity change from 0 to 32768 [ 103.229522][ T6020] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (6020) [ 103.242871][ T6016] loop3: detected capacity change from 0 to 40427 [ 103.278145][ T6016] F2FS-fs (loop3): invalid crc value [ 103.306216][ T6016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.347469][ T6020] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 103.394200][ T6020] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.403604][ T6020] BTRFS info (device loop2): using free space tree [ 103.493617][ T6034] program syz.1.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.532698][ T6016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 103.578222][ T6020] BTRFS info (device loop2): enabling ssd optimizations [ 103.591801][ T6020] BTRFS info (device loop2): auto enabling async discard [ 103.818401][ T6016] syz.3.70: attempt to access beyond end of device [ 103.818401][ T6016] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.880806][ T6016] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 104.252383][ T5776] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 104.558999][ T5792] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (5792) [ 104.774555][ T6052] comedi comedi1: reset error (fatal) [ 106.072929][ T6068] loop3: detected capacity change from 0 to 32768 [ 106.230923][ T6068] jfs_create: dtInsert returned -EIO [ 106.264155][ T6068] ERROR: (device loop3): jfs_create: [ 106.264155][ T6068] [ 106.293924][ T6068] ERROR: (device loop3): remounting filesystem as read-only [ 106.313744][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.503764][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 106.514198][ T5819] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 106.530950][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.540712][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.562468][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.570698][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.588378][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.599833][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.608686][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.623895][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.635339][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.653763][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.661286][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.670346][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.685064][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.694789][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.703209][ T5819] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 106.712284][ T5819] usb 3-1: config 0 has no interface number 0 [ 106.721514][ T5819] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 106.731016][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.761430][ T5819] usb 3-1: Product: syz [ 106.766517][ T5819] usb 3-1: Manufacturer: syz [ 106.771175][ T5819] usb 3-1: SerialNumber: syz [ 106.829569][ T5819] usb 3-1: config 0 descriptor?? [ 106.867207][ T6098] loop1: detected capacity change from 0 to 512 [ 106.884042][ T5819] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 107.140397][ T5819] etas_es58x 3-1:0.2: could not parse product info: '' [ 107.159781][ T6098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 107.177861][ T6098] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.199080][ T6098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.238176][ T6098] EXT4-fs (loop1): 1 truncate cleaned up [ 107.299236][ T6098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.330247][ T6110] loop3: detected capacity change from 0 to 16 [ 107.387521][ T6110] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 107.447858][ T5792] udevd[5792]: incorrect cramfs checksum on /dev/loop3 [ 107.564579][ T5819] usb 3-1: USB disconnect, device number 3 [ 107.573132][ T5819] etas_es58x 3-1:0.2: Disconnecting syz syz [ 107.776313][ T6098] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 108.007179][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.409532][ T6144] process 'syz.0.106' launched './file0' with NULL argv: empty string added [ 108.524224][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.573841][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.726724][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.758406][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.792084][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 108.802623][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 108.815803][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.864190][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.885706][ T5844] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 108.906443][ T5844] usb 3-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.931235][ T5844] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 108.941488][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.961958][ T5844] usb 3-1: Product: syz [ 108.982343][ T5844] usb 3-1: Manufacturer: syz [ 108.989124][ T5844] usb 3-1: SerialNumber: syz [ 109.126737][ T6161] loop3: detected capacity change from 0 to 64 [ 109.272789][ T6161] hfs: request for non-existent node 131072 in B*Tree [ 109.293159][ T23] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 109.308558][ T5844] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 109.324203][ T6161] hfs: request for non-existent node 131072 in B*Tree [ 109.338373][ T5844] snd-usb-audio: probe of 3-1:5.0 failed with error -22 [ 109.378753][ T23] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 109.451510][ T23] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0001/input/input6 [ 109.640591][ T23] usb 2-1: USB disconnect, device number 2 [ 109.751527][ T6171] loop3: detected capacity change from 0 to 512 [ 109.765912][ T6168] fido_id[6168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 109.806493][ T5844] usb 3-1: USB disconnect, device number 4 [ 109.828938][ T6171] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.843769][ T6171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.890921][ T6171] EXT4-fs (loop3): 1 truncate cleaned up [ 109.912640][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.024814][ T6171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.235869][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.278841][ T6202] loop2: detected capacity change from 0 to 8 [ 111.454712][ T6208] netlink: 96 bytes leftover after parsing attributes in process `syz.1.125'. [ 111.864861][ T6221] loop1: detected capacity change from 0 to 1024 [ 112.374856][ T6231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.136'. [ 112.580530][ T6240] loop1: detected capacity change from 0 to 1024 [ 112.606652][ T6240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.690765][ T6240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 112.726157][ T6240] System zones: 0-1, 3-12 [ 112.765419][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.940867][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 113.115748][ T6251] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 113.174712][ T6251] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 113.283468][ T6252] loop1: detected capacity change from 0 to 4096 [ 113.361181][ T6253] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.480085][ T6252] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 113.503371][ T6252] Remounting filesystem read-only [ 113.707533][ T6243] loop3: detected capacity change from 0 to 40427 [ 113.734583][ T6243] F2FS-fs (loop3): invalid crc value [ 113.804738][ T6243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.980172][ T6243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 114.083530][ T27] audit: type=1800 audit(1789403370.398:3): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 114.205153][ T5777] syz-executor: attempt to access beyond end of device [ 114.205153][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.267242][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 115.293811][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 115.499802][ T6302] loop3: detected capacity change from 0 to 736 [ 115.534002][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.712241][ T27] audit: type=1400 audit(1789403372.028:4): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=6307 comm="syz.2.166" name="p" offset=64 [ 115.733832][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 115.746778][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 115.780187][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.801401][ T5844] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 115.838021][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.866314][ T5844] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 115.921019][ T5844] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 116.501276][ T6322] loop2: detected capacity change from 0 to 512 [ 116.543737][ T6322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 116.567867][ T6322] System zones: 0-2, 18-18, 34-34 [ 116.608695][ T6322] EXT4-fs (loop2): 1 orphan inode deleted [ 116.631455][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.645491][ T6322] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.664316][ T5819] usb 1-1: USB disconnect, device number 4 [ 116.714388][ T5819] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 116.741419][ T5819] kobil_sct 1-1:1.0: device disconnected [ 116.968112][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.592722][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 117.673953][ T5819] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 117.836441][ T6362] netlink: 76 bytes leftover after parsing attributes in process `syz.1.189'. [ 117.868851][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.881809][ T5819] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 117.892892][ T5819] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 117.907078][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.923851][ T5819] usb 4-1: config 0 descriptor?? [ 117.970095][ T5819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 117.985428][ T5819] dvb-usb: bulk message failed: -22 (3/0) [ 118.004018][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.012529][ T5782] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.023114][ T5819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.031905][ T5819] usb 4-1: media controller created [ 118.040120][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.065789][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 118.073973][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.085753][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 118.101993][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 118.109667][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 118.189571][ T5819] usb 4-1: USB disconnect, device number 2 [ 118.206122][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.218886][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.230715][ T5782] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 118.240025][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.278363][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 118.295218][ T971] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.497392][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 118.518699][ T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.529789][ T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.553729][ T971] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 118.562837][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.586177][ T5087] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 118.605548][ T971] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 118.641026][ T971] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 118.701974][ T5782] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 118.734358][ T5782] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 118.771090][ T5782] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0002/input/input10 [ 119.071622][ T971] usb 3-1: USB disconnect, device number 5 [ 119.394179][ T971] usb 2-1: USB disconnect, device number 3 [ 119.429452][ T971] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 119.456505][ T971] kobil_sct 2-1:1.0: device disconnected [ 119.612287][ T6387] program syz.0.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.308941][ T6399] syz.3.205 (6399) used greatest stack depth: 17896 bytes left [ 121.295342][ T6423] binder: 6422:6423 ioctl c0306201 200000000040 returned -14 [ 121.587584][ T6430] loop2: detected capacity change from 0 to 256 [ 121.675850][ T6430] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 123.471836][ T6485] loop1: detected capacity change from 0 to 4096 [ 123.482280][ T6493] program syz.3.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.818580][ T6503] loop2: detected capacity change from 0 to 16 [ 123.837844][ T6503] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 123.974334][ T5844] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.191981][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.223990][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.252813][ T5844] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 124.277881][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.762865][ T5844] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 124.820538][ T5844] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 124.866735][ T5844] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0003/input/input13 [ 124.922556][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 125.145029][ T971] usb 4-1: USB disconnect, device number 3 [ 125.301176][ T6516] loop0: detected capacity change from 0 to 32768 [ 125.396700][ T6516] syz.0.250: attempt to access beyond end of device [ 125.396700][ T6516] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 125.410849][ T6516] lbmIODone: I/O error in JFS log [ 125.417875][ T6516] *** Log Format Error ! *** [ 125.421771][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.425597][ T6516] lmLogInit: exit(-22) [ 125.440202][ T6516] lmLogOpen: exit(-22) [ 125.506415][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.564004][ T6516] jfs_dirty_inode called on read-only volume [ 125.588178][ T6516] Is remount racy? [ 125.623595][ T6540] loop1: detected capacity change from 0 to 1024 [ 126.058744][ T6550] loop2: detected capacity change from 0 to 256 [ 126.136912][ T6550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 126.339469][ T27] audit: type=1326 audit(1789403382.658:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.3.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f771399e159 code=0x0 [ 126.475638][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 126.491736][ T6559] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 126.648111][ T6567] loop2: detected capacity change from 0 to 1024 [ 126.655939][ T6567] EXT4-fs: Ignoring removed orlov option [ 126.694592][ T6567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.734575][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.790302][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.936949][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.953550][ T5844] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.970271][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.980380][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.999739][ T6561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.021196][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 127.329038][ T5844] usb 2-1: USB disconnect, device number 4 [ 127.651556][ T6588] sctp: [Deprecated]: syz.0.283 (pid 6588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.651556][ T6588] Use struct sctp_sack_info instead [ 127.922908][ T6599] loop2: detected capacity change from 0 to 512 [ 127.985818][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.013927][ T6599] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.072173][ T6599] EXT4-fs (loop2): shut down requested (2) [ 128.113497][ T6604] loop0: detected capacity change from 0 to 512 [ 128.122203][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.132490][ T6604] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 128.151869][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.313865][ T6604] EXT4-fs (loop0): 1 truncate cleaned up [ 128.321890][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.469552][ T6603] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 128.597341][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.759772][ T6595] loop3: detected capacity change from 0 to 32768 [ 128.786354][ T6616] loop0: detected capacity change from 0 to 256 [ 128.934436][ T6595] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.182743][ T6595] XFS (loop3): Ending clean mount [ 129.501782][ T5781] block nbd0: Receive control failed (result -32) [ 129.501782][ T5087] block nbd0: Receive control failed (result -32) [ 129.673198][ T971] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 129.754081][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.989305][ T6647] loop2: detected capacity change from 0 to 512 [ 130.055997][ T6647] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 130.148284][ T6647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.307: bg 0: block 104: invalid block bitmap [ 130.197506][ T6637] loop0: detected capacity change from 0 to 40427 [ 130.204367][ T6647] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 130.224543][ T6637] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 130.232357][ T6637] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.247167][ T6647] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.307: invalid indirect mapped block 1 (level 1) [ 130.270812][ T6637] F2FS-fs (loop0): invalid crc value [ 130.312295][ T6637] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.321865][ T6647] EXT4-fs (loop2): 1 truncate cleaned up [ 130.376940][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.481661][ T6647] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.575222][ T6647] overlayfs: failed to look up (fi) for ino (-13) [ 130.708465][ T6637] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.743980][ T6637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.764661][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.012856][ T5778] syz-executor: attempt to access beyond end of device [ 131.012856][ T5778] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 131.069521][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 131.316921][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 131.512210][ T6674] loop1: detected capacity change from 0 to 512 [ 131.565040][ T6674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.610022][ T6674] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.643058][ T6674] EXT4-fs (loop1): 1 truncate cleaned up [ 131.676888][ T6674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.770282][ T6674] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 131.794229][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.855399][ T6679] sctp: [Deprecated]: syz.3.316 (pid 6679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.855399][ T6679] Use struct sctp_sack_info instead [ 131.938969][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.037511][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.053566][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.067459][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.098481][ T23] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 132.127648][ T6684] loop0: detected capacity change from 0 to 4096 [ 132.134230][ T23] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 132.162383][ T6684] ntfs3: loop0: ino=3, mi_enum_attr [ 132.171331][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 132.187157][ T23] usb 3-1: config 1 interface 1 has no altsetting 0 [ 132.207366][ T23] usb 3-1: string descriptor 0 read error: -22 [ 132.214935][ T23] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 132.225498][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.494523][ T23] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 132.535744][ T6692] loop3: detected capacity change from 0 to 1764 [ 132.716985][ T23] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 132.756910][ T23] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 132.786120][ T23] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 132.822298][ T23] usb 3-1: USB disconnect, device number 6 [ 132.873976][ T971] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.933808][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.952398][ T6688] loop1: detected capacity change from 0 to 40427 [ 132.981841][ T6688] F2FS-fs (loop1): invalid crc value [ 133.000609][ T6688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.073807][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 133.079151][ T6688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.089402][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.113747][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.133791][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 133.141226][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.157686][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.168273][ T28] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 133.178239][ T28] usb 1-1: config 0 has no interface number 0 [ 133.185840][ T971] usb 4-1: config 0 descriptor?? [ 133.191456][ T28] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 133.210620][ T28] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 133.224233][ T971] hub 4-1:0.0: USB hub found [ 133.245370][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.252241][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.265357][ T6688] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 133.273438][ T28] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 133.293995][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.312717][ T28] usb 1-1: Product: syz [ 133.321867][ T28] usb 1-1: Manufacturer: syz [ 133.327065][ T28] usb 1-1: SerialNumber: syz [ 133.343516][ T28] usb 1-1: config 0 descriptor?? [ 133.365461][ T6694] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.372984][ T6694] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.454533][ T971] hub 4-1:0.0: 27 ports detected [ 133.474158][ T971] hub 4-1:0.0: insufficient power available to use all downstream ports [ 133.615143][ T6694] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.632854][ T6694] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.663801][ T971] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 133.670355][ T971] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 133.705754][ T971] usbhid 4-1:0.0: can't add hid device: -71 [ 133.711887][ T971] usbhid: probe of 4-1:0.0 failed with error -71 [ 133.800273][ T971] usb 4-1: USB disconnect, device number 4 [ 134.265952][ T28] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 134.287008][ T28] asix: probe of 1-1:0.34 failed with error -71 [ 134.328241][ T28] usb 1-1: USB disconnect, device number 5 [ 135.002960][ T6731] loop1: detected capacity change from 0 to 32768 [ 135.080769][ T6731] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.242321][ T6731] XFS (loop1): Ending clean mount [ 135.646161][ T28] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 135.766358][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.808216][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 136.104107][ T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.303926][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 136.319382][ T971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.338248][ T971] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 136.349737][ T971] usb 3-1: config 0 has no interface number 0 [ 136.363065][ T971] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 136.379300][ T971] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 136.392065][ T971] usb 3-1: config 0 interface 88 has no altsetting 0 [ 136.419504][ T971] usb 3-1: string descriptor 0 read error: -22 [ 136.429611][ T6776] loop1: detected capacity change from 0 to 2048 [ 136.436658][ T971] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 136.448884][ T971] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 136.464596][ T971] usb 3-1: config 0 descriptor?? [ 136.477360][ T971] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input16 [ 136.528318][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.544076][ T6776] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.668800][ T5793] udevd[5793]: Error opening device "/dev/input/event4": Input/output error [ 136.682943][ T6782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.354: bg 0: block 345: padding at end of block bitmap is not set [ 136.684427][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 136.706777][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 136.743851][ T6782] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 136.761810][ T5819] usb 3-1: USB disconnect, device number 7 [ 136.762974][ T6782] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.762974][ T6782] [ 136.832574][ T3464] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 12 with error 28 [ 136.848474][ T3464] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.848474][ T3464] [ 136.858834][ T3464] EXT4-fs (loop1): Total free blocks count 0 [ 136.865623][ T3464] EXT4-fs (loop1): Free/Dirty block details [ 136.871663][ T3464] EXT4-fs (loop1): free_blocks=0 [ 136.877416][ T3464] EXT4-fs (loop1): dirty_blocks=16 [ 136.882616][ T3464] EXT4-fs (loop1): Block reservation details [ 137.311262][ T5819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.545666][ T5819] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 137.563749][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.571835][ T5819] usb 4-1: Product: syz [ 137.593708][ T5819] usb 4-1: Manufacturer: syz [ 137.598477][ T5819] usb 4-1: SerialNumber: syz [ 137.610658][ T5819] usb 4-1: config 0 descriptor?? [ 137.687528][ T6784] loop0: detected capacity change from 0 to 32768 [ 137.764914][ T6784] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.867512][ T6784] XFS (loop0): Ending clean mount [ 138.067892][ T5819] usb 4-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 138.191044][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.210208][ T23] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 138.268272][ T5819] usb 4-1: failed to fetch extended address, random address set [ 138.291033][ T5819] usb 4-1: atusb_probe: initialization failed, error = -524 [ 138.299682][ T5819] atusb: probe of 4-1:0.0 failed with error -524 [ 138.317471][ T5819] usb 4-1: USB disconnect, device number 5 [ 138.404779][ T27] audit: type=1326 audit(1789403400.731:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 138.441632][ T6815] capability: warning: `syz.1.369' uses deprecated v2 capabilities in a way that may be insecure [ 138.463176][ T27] audit: type=1326 audit(1789403400.751:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 138.507367][ T6815] loop1: detected capacity change from 0 to 2364 [ 138.528390][ T27] audit: type=1326 audit(1789403400.761:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 138.584611][ T27] audit: type=1326 audit(1789403400.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 138.608867][ T27] audit: type=1326 audit(1789403400.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 138.659600][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.683738][ T27] audit: type=1326 audit(1789403400.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe53399dec2 code=0x7ffc0000 [ 138.803130][ T27] audit: type=1326 audit(1789403400.781:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe53395e98e code=0x7ffc0000 [ 138.876505][ T27] audit: type=1326 audit(1789403400.821:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe53399df87 code=0x7ffc0000 [ 138.971559][ T27] audit: type=1326 audit(1789403400.831:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53395e98e code=0x7ffc0000 [ 139.032567][ T27] audit: type=1326 audit(1789403400.831:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.1.369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe53399ddeb code=0x7ffc0000 [ 140.022276][ T6840] Zero length message leads to an empty skb [ 140.122671][ T6844] loop1: detected capacity change from 0 to 8 [ 141.232426][ T6869] loop5: detected capacity change from 0 to 7 [ 141.292346][ T6869] Dev loop5: unable to read RDB block 7 [ 141.304236][ T6869] loop5: AHDI p1 [ 141.307975][ T6869] loop5: partition table partially beyond EOD, truncated [ 141.395512][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 141.682204][ T6877] loop3: detected capacity change from 0 to 2048 [ 141.779245][ T6877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.847526][ T6877] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.976804][ T6881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.393: bg 0: block 345: padding at end of block bitmap is not set [ 142.034235][ T6881] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 142.103989][ T6881] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.103989][ T6881] [ 142.393326][ T3510] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 308 with error 28 [ 142.450431][ T3510] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.450431][ T3510] [ 142.477023][ T3510] EXT4-fs (loop3): Total free blocks count 0 [ 142.483115][ T3510] EXT4-fs (loop3): Free/Dirty block details [ 142.497757][ T3510] EXT4-fs (loop3): free_blocks=0 [ 142.502782][ T3510] EXT4-fs (loop3): dirty_blocks=320 [ 142.512128][ T3510] EXT4-fs (loop3): Block reservation details [ 142.593842][ T5781] Bluetooth: hci1: command tx timeout [ 142.823815][ T5821] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 142.974382][ T6889] loop0: detected capacity change from 0 to 32768 [ 143.017243][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.038174][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.050638][ T6889] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.077139][ T5821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 143.088399][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.107023][ T5821] usb 2-1: config 0 descriptor?? [ 143.162535][ T6889] XFS (loop0): Ending clean mount [ 143.192412][ T6889] XFS (loop0): Quotacheck needed: Please wait. [ 143.259254][ T6889] XFS (loop0): Quotacheck: Done. [ 143.550391][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.566549][ T5821] isku 0003:1E7D:319C.0004: unbalanced delimiter at end of report description [ 143.605003][ T5821] isku 0003:1E7D:319C.0004: parse failed [ 143.610812][ T5821] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 143.848925][ T28] usb 2-1: USB disconnect, device number 5 [ 144.593983][ T971] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 144.652602][ T971] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.674911][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 144.692005][ T6797] Set syz1 is full, maxelem 65536 reached [ 145.052059][ T6925] loop2: detected capacity change from 0 to 2048 [ 145.151077][ T6913] loop3: detected capacity change from 0 to 32768 [ 145.218633][ T6925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.231825][ T6913] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.251055][ T6925] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.501889][ T6941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.408: bg 0: block 345: padding at end of block bitmap is not set [ 145.521925][ T6913] XFS (loop3): Ending clean mount [ 145.539734][ T6913] XFS (loop3): Quotacheck needed: Please wait. [ 145.578989][ T6941] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 83 with error 117 [ 145.634133][ T6941] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.634133][ T6941] [ 145.713178][ T6913] XFS (loop3): Quotacheck: Done. [ 145.720901][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 145.911140][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 83 with max blocks 1 with error 28 [ 145.925185][ T6940] loop1: detected capacity change from 0 to 32768 [ 145.961548][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.961548][ T12] [ 145.972162][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 145.981881][ T12] EXT4-fs (loop2): Free/Dirty block details [ 145.992799][ T12] EXT4-fs (loop2): free_blocks=0 [ 146.001179][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 146.011297][ T12] EXT4-fs (loop2): Block reservation details [ 146.102537][ T6940] JBD2: Ignoring recovery information on journal [ 146.195553][ T6940] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 146.214438][ T6940] JBD2: bad block at offset 32 [ 146.248993][ T6940] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.330425][ T6949] loop5: detected capacity change from 0 to 7 [ 146.359238][ T6949] Dev loop5: unable to read RDB block 7 [ 146.363843][ T6940] (syz.1.410,6940,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 146.378168][ T6949] loop5: AHDI p1 [ 146.397395][ T6949] loop5: partition table partially beyond EOD, truncated [ 146.673532][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.686502][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 146.726235][ T6956] loop2: detected capacity change from 0 to 512 [ 147.135631][ T6960] loop2: detected capacity change from 0 to 1024 [ 147.182470][ T6960] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.347544][ T6960] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.420: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.443838][ T6960] __quota_error: 10 callbacks suppressed [ 147.443856][ T6960] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 147.485189][ T6960] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.420: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.533839][ T6960] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 147.578425][ T6960] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.420: Failed to acquire dquot type 0 [ 147.598178][ T6974] loop0: detected capacity change from 0 to 256 [ 147.606032][ T6960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 147.649567][ T6960] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.420: mark_inode_dirty error [ 147.668327][ T6974] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 147.714125][ T6960] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 147.763765][ T6960] EXT4-fs (loop2): 1 orphan inode deleted [ 147.771013][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.814136][ T3464] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.842418][ T27] audit: type=1326 audit(1789403410.161:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 147.900643][ T3464] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 147.923865][ T3464] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 147.944283][ T27] audit: type=1326 audit(1789403410.161:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 148.049889][ T27] audit: type=1326 audit(1789403410.171:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 148.153041][ T27] audit: type=1326 audit(1789403410.171:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 148.191919][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.204760][ T11] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.229465][ T27] audit: type=1326 audit(1789403410.171:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 148.256474][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 148.284726][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0 [ 148.307038][ T27] audit: type=1326 audit(1789403410.231:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.433" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53399e159 code=0x7ffc0000 [ 148.341187][ T5776] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.378045][ T5776] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 148.394291][ T5776] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 148.622562][ T6990] loop0: detected capacity change from 0 to 512 [ 148.644252][ T6987] loop1: detected capacity change from 0 to 512 [ 148.716357][ T6990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 148.793847][ T6990] System zones: 0-2, 18-18, 34-35 [ 148.837656][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.851290][ T6990] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.049042][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.271803][ T6979] loop3: detected capacity change from 0 to 32768 [ 149.339155][ T6979] JBD2: Ignoring recovery information on journal [ 149.352983][ T6979] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 149.362747][ T6979] JBD2: bad block at offset 32 [ 149.412006][ T6979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 149.571872][ T6979] (syz.3.425,6979,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 149.867830][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 149.881236][ T7006] loop0: detected capacity change from 0 to 1024 [ 149.963854][ T7006] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 150.081208][ T7006] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.437: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.150378][ T6996] loop2: detected capacity change from 0 to 40427 [ 150.181679][ T7006] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.437: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.227550][ T7006] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.437: Failed to acquire dquot type 0 [ 150.257059][ T6996] F2FS-fs (loop2): invalid crc value [ 150.271161][ T7006] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.298002][ T7006] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.437: mark_inode_dirty error [ 150.331284][ T7006] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 150.339920][ T6996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.354006][ T7006] EXT4-fs (loop0): 1 orphan inode deleted [ 150.370436][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.413272][ T1093] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.443802][ T971] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 150.474207][ T1093] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 0 [ 150.535023][ T7000] loop1: detected capacity change from 0 to 32768 [ 150.609483][ T6996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.624269][ T7000] JBD2: Ignoring recovery information on journal [ 150.694531][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.701966][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.736915][ T12] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.752137][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.769021][ T971] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 150.781931][ T7000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 150.800302][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 150.812107][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.837933][ T5778] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.852182][ T971] usb 4-1: config 0 descriptor?? [ 150.916558][ T5778] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 150.983939][ T5778] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 151.075724][ T7016] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 151.114833][ T7016] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 151.145346][ T7016] OCFS2: File system is now read-only. [ 151.150937][ T7016] (syz.1.435,7016,1):ocfs2_find_entry_id:407 ERROR: status = -30 [ 151.278489][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 151.310218][ T971] isku 0003:1E7D:319C.0006: unbalanced delimiter at end of report description [ 151.330614][ T971] isku 0003:1E7D:319C.0006: parse failed [ 151.337528][ T971] isku: probe of 0003:1E7D:319C.0006 failed with error -22 [ 151.551760][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.562352][ T5819] usb 4-1: USB disconnect, device number 6 [ 151.768065][ T7027] loop0: detected capacity change from 0 to 256 [ 152.575393][ T7029] loop2: detected capacity change from 0 to 32768 [ 152.608311][ T7029] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.695416][ T7029] XFS (loop2): Ending clean mount [ 152.710165][ T7029] XFS (loop2): Quotacheck needed: Please wait. [ 152.892109][ T7029] XFS (loop2): Quotacheck: Done. [ 153.087229][ T7060] loop1: detected capacity change from 0 to 256 [ 153.327602][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.515115][ T7041] loop0: detected capacity change from 0 to 32768 [ 153.628779][ T7041] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.662572][ T7074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.977570][ T7041] XFS (loop0): Ending clean mount [ 154.010172][ T7041] XFS (loop0): Quotacheck needed: Please wait. [ 154.128004][ T7041] XFS (loop0): Quotacheck: Done. [ 154.541140][ T7099] loop3: detected capacity change from 0 to 16 [ 154.608534][ T7099] erofs: (device loop3): mounted with root inode @ nid 36. [ 154.948746][ T5778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.123862][ T5782] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.234168][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.326014][ T5782] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.345688][ T5782] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 155.370357][ T5782] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 155.389770][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.403705][ T5782] usb 3-1: Product: syz [ 155.407956][ T5782] usb 3-1: Manufacturer: syz [ 155.421743][ T5782] usb 3-1: SerialNumber: syz [ 155.461105][ T28] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.492732][ T28] usb 4-1: config 0 has no interface number 0 [ 155.528630][ T28] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 155.547514][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.562166][ T28] usb 4-1: Product: syz [ 155.567280][ T28] usb 4-1: Manufacturer: syz [ 155.573192][ T28] usb 4-1: SerialNumber: syz [ 155.594559][ T28] usb 4-1: config 0 descriptor?? [ 155.648910][ T5782] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 155.833374][ T28] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 155.850498][ T5782] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 155.867501][ T7129] loop1: detected capacity change from 0 to 16 [ 155.875257][ T28] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.892833][ T5782] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 155.894539][ T28] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.927865][ T28] usb 4-1: media controller created [ 155.938085][ T7129] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.995013][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.248113][ T5782] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 156.300512][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.312315][ T5782] usb 3-1: USB disconnect, device number 8 [ 156.414942][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.667069][ T7143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.112140][ T28] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 157.304318][ T28] usb 4-1: USB disconnect, device number 7 [ 157.983021][ T7188] loop3: detected capacity change from 0 to 16 [ 158.001978][ T7188] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.042731][ T7188] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 46 [ 158.146826][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 158.190169][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.670991][ T7189] loop0: detected capacity change from 0 to 32768 [ 158.738736][ T7189] JBD2: Ignoring recovery information on journal [ 158.838394][ T7189] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 158.863812][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.065896][ T5819] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.091104][ T5819] usb 3-1: config 0 has no interface number 0 [ 159.109841][ T5819] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 159.132906][ T7204] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 159.151630][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.160304][ T5819] usb 3-1: Product: syz [ 159.164913][ T7204] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 159.174869][ T5819] usb 3-1: Manufacturer: syz [ 159.179736][ T5819] usb 3-1: SerialNumber: syz [ 159.184895][ T7204] OCFS2: File system is now read-only. [ 159.192954][ T5819] usb 3-1: config 0 descriptor?? [ 159.198888][ T7204] (syz.0.510,7204,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 159.280759][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 159.300759][ T7197] loop1: detected capacity change from 0 to 32768 [ 159.349629][ T7197] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.444621][ T5819] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 159.457885][ T5819] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.468920][ T5819] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 159.487156][ T5819] usb 3-1: media controller created [ 159.512239][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.624331][ T7197] XFS (loop1): Ending clean mount [ 159.643744][ T7197] XFS (loop1): Quotacheck needed: Please wait. [ 159.740005][ T7197] XFS (loop1): Quotacheck: Done. [ 160.076771][ T7223] loop3: detected capacity change from 0 to 1024 [ 160.212999][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.581244][ T7234] loop3: detected capacity change from 0 to 256 [ 160.598866][ T7234] exfat: Deprecated parameter 'utf8' [ 160.606433][ T5819] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 160.618924][ T7234] exfat: Deprecated parameter 'namecase' [ 160.651241][ T7234] exfat: Deprecated parameter 'namecase' [ 160.697114][ T7234] exfat: Deprecated parameter 'utf8' [ 160.722926][ T7234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 160.737197][ T5819] usb 3-1: USB disconnect, device number 9 [ 161.438614][ T7248] loop1: detected capacity change from 0 to 2048 [ 161.512292][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.534158][ T7248] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.921030][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.202482][ T7274] loop3: detected capacity change from 0 to 2048 [ 162.212581][ T7276] loop1: detected capacity change from 0 to 1024 [ 162.227955][ T7253] loop2: detected capacity change from 0 to 32768 [ 162.272733][ T7274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.297002][ T7274] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.304678][ T7253] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.409135][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.424135][ T971] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.607639][ T7253] XFS (loop2): Ending clean mount [ 162.627636][ T971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.636557][ T971] usb 1-1: config 0 has no interface number 0 [ 162.645680][ T971] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 162.655668][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.676062][ T7253] XFS (loop2): Quotacheck needed: Please wait. [ 162.698443][ T971] usb 1-1: Product: syz [ 162.707545][ T971] usb 1-1: Manufacturer: syz [ 162.713259][ T971] usb 1-1: SerialNumber: syz [ 162.722876][ T971] usb 1-1: config 0 descriptor?? [ 162.764016][ T7253] XFS (loop2): Quotacheck: Done. [ 162.800631][ T7292] size and base must be multiples of 4 kiB [ 162.823499][ T7292] CPU: 0 PID: 7292 Comm: syz.3.549 Not tainted syzkaller #0 [ 162.830889][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.841019][ T7292] Call Trace: [ 162.844345][ T7292] [ 162.847319][ T7292] dump_stack_lvl+0x18c/0x250 [ 162.852117][ T7292] ? show_regs_print_info+0x20/0x20 [ 162.857385][ T7292] ? load_image+0x420/0x420 [ 162.861949][ T7292] ? __might_fault+0xaa/0x120 [ 162.866678][ T7292] ? __might_fault+0xc6/0x120 [ 162.871406][ T7292] ? __might_fault+0xaa/0x120 [ 162.876134][ T7292] mtrr_del+0xc3/0xf0 [ 162.880173][ T7292] mtrr_ioctl+0xcb6/0x13a0 [ 162.884654][ T7292] ? mtrr_close+0x200/0x200 [ 162.889236][ T7292] ? __fget_files+0x28/0x460 [ 162.893895][ T7292] ? mtrr_close+0x200/0x200 [ 162.898459][ T7292] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 162.903981][ T7292] ? proc_reg_poll+0x290/0x290 [ 162.908841][ T7292] __se_sys_ioctl+0xfd/0x170 [ 162.913492][ T7292] do_syscall_64+0x55/0xb0 [ 162.917966][ T7292] ? clear_bhb_loop+0x40/0x90 [ 162.922813][ T7292] ? clear_bhb_loop+0x40/0x90 [ 162.927556][ T7292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.933550][ T7292] RIP: 0033:0x7f771399e159 [ 162.938056][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.957721][ T7292] RSP: 002b:00007f77147e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.966208][ T7292] RAX: ffffffffffffffda RBX: 00007f7713c25fa0 RCX: 00007f771399e159 [ 162.974256][ T7292] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 162.982291][ T7292] RBP: 00007f7713a3503b R08: 0000000000000000 R09: 0000000000000000 [ 162.990316][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.998346][ T7292] R13: 00007f7713c26038 R14: 00007f7713c25fa0 R15: 00007fff097c5538 [ 163.006342][ T971] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 163.014992][ T7292] [ 163.018109][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.048467][ T971] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.075479][ T971] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 163.093761][ T971] usb 1-1: media controller created [ 163.121529][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.409827][ T7299] loop3: detected capacity change from 0 to 512 [ 163.453879][ T7299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.617567][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.646312][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.838923][ T5821] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 163.896106][ T5821] wiimote 0005:057E:0306.0007: New device registered [ 164.103913][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.278403][ T971] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 164.329783][ T5819] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 164.348155][ T5819] usb 4-1: config 1 has no interface number 0 [ 164.367275][ T5819] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 164.375108][ T971] usb 1-1: USB disconnect, device number 6 [ 164.378287][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.424846][ T5819] usb 4-1: Product: syz [ 164.429090][ T5819] usb 4-1: Manufacturer: syz [ 164.456521][ T5819] usb 4-1: SerialNumber: syz [ 164.577524][ T7309] loop1: detected capacity change from 0 to 40427 [ 164.593883][ T7309] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 164.602312][ T7309] F2FS-fs (loop1): Image doesn't support compression [ 164.611872][ T7309] F2FS-fs (loop1): heap/no_heap options were deprecated [ 164.621849][ T7309] F2FS-fs (loop1): invalid crc value [ 164.631084][ T7309] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.698473][ T7309] F2FS-fs (loop1): Start checkpoint disabled! [ 164.711295][ T5819] usb 4-1: cannot find UAC_HEADER [ 164.724430][ T7306] wiimote 0005:057E:0306.0007: Device removed [ 164.746954][ T7309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 164.771771][ T5819] snd-usb-audio: probe of 4-1:1.3 failed with error -22 [ 164.782497][ T5819] usb 4-1: USB disconnect, device number 8 [ 164.820030][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.862108][ T7309] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 164.917247][ T5782] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) [ 164.960866][ T5782] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input20 [ 165.000723][ T5782] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input21 [ 165.051490][ T5782] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input19 [ 165.162202][ T62] kworker/u4:5: attempt to access beyond end of device [ 165.162202][ T62] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 165.179559][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.187570][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.210341][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.772061][ T7338] db_root: cannot open: [ 166.179094][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.575'. [ 167.842341][ T7415] loop2: detected capacity change from 0 to 512 [ 167.896989][ T7415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.002543][ T7422] i2c i2c-0: delete_device: Can't parse I2C address [ 168.040008][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.461676][ T7436] loop2: detected capacity change from 0 to 128 [ 168.480224][ T7436] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.657173][ T7440] loop1: detected capacity change from 0 to 512 [ 168.697543][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.801662][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.822101][ T7447] loop0: detected capacity change from 0 to 128 [ 168.879930][ T7449] db_root: cannot open: [ 168.931779][ T7447] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 168.990610][ T7451] i2c i2c-0: delete_device: Can't parse I2C address [ 169.115971][ T7453] db_root: cannot open: [ 169.290287][ T7459] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 169.331874][ T7459] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 169.422677][ T7462] pimreg: tun_chr_ioctl cmd 1074025681 [ 170.037446][ T7477] loop0: detected capacity change from 0 to 256 [ 170.210891][ T7482] loop0: detected capacity change from 0 to 512 [ 170.224527][ T7482] EXT4-fs: Ignoring removed nobh option [ 170.241290][ T7482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.292428][ T7482] EXT4-fs (loop0): 1 truncate cleaned up [ 170.308203][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.388757][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.523344][ T7490] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(6) [ 170.539135][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 170.937150][ T7505] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 170.973341][ T7505] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 171.483459][ T7501] loop2: detected capacity change from 0 to 40427 [ 171.515178][ T7501] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 171.560983][ T7501] F2FS-fs (loop2): Image doesn't support compression [ 171.575889][ T7501] F2FS-fs (loop2): heap/no_heap options were deprecated [ 171.598998][ T7501] F2FS-fs (loop2): invalid crc value [ 171.639956][ T7501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.780795][ T7501] F2FS-fs (loop2): Start checkpoint disabled! [ 171.797430][ T7501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 171.882577][ T7501] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 172.121313][ T12] kworker/u4:1: attempt to access beyond end of device [ 172.121313][ T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 172.141767][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.155020][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.162254][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.181548][ T7535] loop1: detected capacity change from 0 to 512 [ 172.192336][ T7535] EXT4-fs: Ignoring removed nobh option [ 172.210950][ T7535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.249412][ T7535] EXT4-fs (loop1): 1 truncate cleaned up [ 172.257571][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.429507][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.755541][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.975853][ T7555] loop1: detected capacity change from 0 to 164 [ 172.994253][ T788] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.003393][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.043546][ T788] usb 1-1: config 0 descriptor?? [ 173.280375][ T788] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 173.307122][ T788] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 173.351842][ T5782] wiimote 0005:057E:0306.0008: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 173.370986][ T5782] wiimote 0005:057E:0306.0008: New device registered [ 173.529268][ T788] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 173.564351][ T788] [drm] Initialized udl on minor 2 [ 173.624125][ T5819] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.830165][ T5819] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 173.843072][ T5819] usb 3-1: config 1 has no interface number 0 [ 173.853988][ T5819] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 173.872730][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.891535][ T5819] usb 3-1: Product: syz [ 173.895978][ T5819] usb 3-1: Manufacturer: syz [ 173.905306][ T788] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 173.923778][ T5819] usb 3-1: SerialNumber: syz [ 173.937641][ T788] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 173.961916][ T7561] loop1: detected capacity change from 0 to 32768 [ 173.981675][ T788] usb 1-1: USB disconnect, device number 7 [ 173.987940][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.001430][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 174.066026][ T7561] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.172899][ T5819] usb 3-1: cannot find UAC_HEADER [ 174.180878][ T7564] wiimote 0005:057E:0306.0008: Device removed [ 174.198777][ T7561] XFS (loop1): Ending clean mount [ 174.226119][ T5819] snd-usb-audio: probe of 3-1:1.3 failed with error -22 [ 174.267858][ T5819] usb 3-1: USB disconnect, device number 10 [ 174.279915][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.335205][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.443662][ T5821] wiimote 0005:057E:0306.0008: detected device: Nintendo Wii Remote (Gen 1) [ 174.473352][ T5821] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input23 [ 174.546840][ T5821] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input24 [ 174.595240][ T5821] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input22 [ 175.030659][ T7595] jffs2: notice: (7595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.142239][ T7595] jffs2: error: (7595) jffs2_do_read_inode: requested to read a nonexistent ino 6 [ 175.291179][ T5873] IPVS: starting estimator thread 0... [ 175.333068][ T7606] loop3: detected capacity change from 0 to 2048 [ 175.390655][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.403866][ T7607] IPVS: using max 20 ests per chain, 48000 per kthread [ 175.481564][ T7606] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 175.549115][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.788707][ T7622] Illegal XDP return value 5 on prog (id 57) dev N/A, expect packet loss! [ 175.839384][ T7624] overlayfs: workdir and upperdir must reside under the same mount [ 176.055170][ T7630] jffs2: notice: (7630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.089802][ T7628] loop3: detected capacity change from 0 to 4096 [ 176.142495][ T7628] ntfs3: loop3: ino=19, mi_enum_attr [ 176.153441][ T7628] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 176.500292][ T7638] loop0: detected capacity change from 0 to 2048 [ 176.545336][ T7638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.578952][ T7638] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 176.626408][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.954788][ T7647] loop0: detected capacity change from 0 to 32768 [ 176.973767][ T7647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.700 (7647) [ 176.981889][ T5819] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.008770][ T7647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.019308][ T7647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 177.028275][ T7647] BTRFS info (device loop0): setting nodatasum [ 177.035026][ T7647] BTRFS info (device loop0): disabling tree log [ 177.041877][ T7647] BTRFS info (device loop0): max_inline at 0 [ 177.048504][ T7647] BTRFS info (device loop0): using free space tree [ 177.111530][ T7647] BTRFS info (device loop0): enabling ssd optimizations [ 177.118811][ T7647] BTRFS info (device loop0): auto enabling async discard [ 177.183742][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 177.196205][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.207365][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.217299][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.230385][ T5819] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.239584][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.260623][ T5819] usb 4-1: config 0 descriptor?? [ 177.277670][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.714088][ T971] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.749100][ T5819] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input26 [ 177.877174][ T5819] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 177.915867][ T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.933779][ T971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.950347][ T971] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.974354][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.993019][ T971] usb 1-1: SerialNumber: syz [ 178.008154][ T5819] usb 4-1: USB disconnect, device number 9 [ 178.019007][ T7672] fido_id[7672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/report_descriptor': No such file or directory [ 178.228420][ T971] usb 1-1: 0:2 : does not exist [ 178.239215][ T971] usb 1-1: unit 9 not found! [ 178.243941][ T971] usb 1-1: unit 196 not found! [ 178.248752][ T971] usb 1-1: unit 237 not found! [ 178.253538][ T971] usb 1-1: unit 128 not found! [ 178.258715][ T971] usb 1-1: unit 144 not found! [ 178.263535][ T971] usb 1-1: unit 4 not found! [ 178.269208][ T971] usb 1-1: unit 2 not found! [ 178.285904][ T971] usb 1-1: USB disconnect, device number 8 [ 178.303836][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.324166][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.503811][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 178.512543][ T28] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.525288][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.531964][ T28] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 178.541401][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.551855][ T28] usb 2-1: config 0 descriptor?? [ 178.769801][ T28] usbhid 2-1:0.0: can't add hid device: -71 [ 178.776681][ T28] usbhid: probe of 2-1:0.0 failed with error -71 [ 178.789199][ T28] usb 2-1: USB disconnect, device number 6 [ 179.063301][ T7676] loop3: detected capacity change from 0 to 32768 [ 179.614620][ T7687] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.649879][ T7681] loop3: detected capacity change from 0 to 32768 [ 179.694353][ T7681] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.936841][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 180.629583][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 180.793996][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.994216][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 181.002308][ T5873] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 181.011725][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.034601][ T5873] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 181.310980][ T7724] loop0: detected capacity change from 0 to 32768 [ 181.570766][ T7730] loop1: detected capacity change from 0 to 64 [ 181.849628][ T5873] gspca_nw80x: reg_r err -71 [ 181.867192][ T5873] nw80x: probe of 4-1:3.0 failed with error -71 [ 181.877976][ T5873] usb 4-1: USB disconnect, device number 10 [ 182.584955][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.606777][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.619538][ T7755] loop2: detected capacity change from 0 to 64 [ 182.743412][ T971] wiimote 0005:057E:0306.000A: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 182.784297][ T971] wiimote 0005:057E:0306.000A: New device registered [ 182.791957][ T9] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.834075][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.886769][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.898629][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 182.918891][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.955161][ T9] usb 2-1: config 0 descriptor?? [ 183.084731][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.295616][ T28] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 183.305442][ T28] usb 1-1: config 1 has no interface number 0 [ 183.314850][ T28] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 183.324606][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.332631][ T28] usb 1-1: Product: syz [ 183.337095][ T28] usb 1-1: Manufacturer: syz [ 183.341955][ T28] usb 1-1: SerialNumber: syz [ 183.472081][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 183.476337][ T9] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 183.513730][ T9] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 183.531020][ T7762] loop3: detected capacity change from 0 to 32768 [ 183.572189][ T7762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.746 (7762) [ 183.597851][ T28] usb 1-1: cannot find UAC_HEADER [ 183.607387][ T7758] wiimote 0005:057E:0306.000A: Device removed [ 183.634517][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.668975][ T7762] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.697164][ T28] snd-usb-audio: probe of 1-1:1.3 failed with error -22 [ 183.711367][ T7762] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 183.731764][ T28] usb 1-1: USB disconnect, device number 9 [ 183.748220][ C0] hid-picolcd 0003:04D8:F002.000B: invalid size value (65) for picolcd raw event (0) [ 183.758213][ T7762] BTRFS info (device loop3): setting nodatasum [ 183.764802][ T7762] BTRFS info (device loop3): disabling tree log [ 183.771438][ T7762] BTRFS info (device loop3): max_inline at 0 [ 183.791846][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.812483][ T7762] BTRFS info (device loop3): using free space tree [ 183.814012][ T5873] wiimote 0005:057E:0306.000A: detected device: Nintendo Wii Remote (Gen 1) [ 183.913049][ T5873] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input28 [ 183.953457][ T5821] usb 2-1: USB disconnect, device number 7 [ 183.969457][ T7762] BTRFS info (device loop3): enabling ssd optimizations [ 183.989205][ T7789] loop2: detected capacity change from 0 to 64 [ 183.992098][ T5873] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input29 [ 184.007787][ T7762] BTRFS info (device loop3): auto enabling async discard [ 184.075462][ T5873] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000A/input/input27 [ 184.268853][ T7792] scsi_strcpy_devinfo: vendor string 'QT?]+,r' is too long [ 184.359527][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.595096][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.680856][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.701229][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.746653][ T5794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5794) [ 184.763509][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.846459][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.871227][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.894514][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.921762][ T7804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.321882][ T7813] loop1: detected capacity change from 0 to 4096 [ 185.404339][ T7813] ntfs3: loop1: ino=19, mi_enum_attr [ 185.410768][ T7813] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 185.749525][ T7801] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.768413][ T7811] loop2: detected capacity change from 0 to 32768 [ 185.835486][ T7811] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 185.946231][ T7801] usb 4-1: Using ep0 maxpacket: 16 [ 185.969143][ T7801] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.980693][ T7801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.988937][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 185.995459][ T7801] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 186.033717][ T7801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.060661][ T7801] usb 4-1: config 0 descriptor?? [ 186.308624][ T7801] usbhid 4-1:0.0: can't add hid device: -71 [ 186.320634][ T7801] usbhid: probe of 4-1:0.0 failed with error -71 [ 186.341009][ T7801] usb 4-1: USB disconnect, device number 11 [ 187.006865][ T7845] loop2: detected capacity change from 0 to 1024 [ 187.223801][ T1328] hfsplus: b-tree write err: -5, ino 25 [ 187.230323][ T1328] hfsplus: b-tree write err: -5, ino 4 [ 187.261088][ T1328] hfsplus: b-tree write err: -5, ino 2 [ 187.301249][ T7851] loop1: detected capacity change from 0 to 1024 [ 187.495904][ T1093] hfsplus: b-tree write err: -5, ino 25 [ 187.501753][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 187.510792][ T1093] hfsplus: b-tree write err: -5, ino 2 [ 187.552406][ T7856] mmap: syz.3.778 (7856) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.633865][ T9] net_ratelimit: 4 callbacks suppressed [ 187.633882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.778211][ T7863] loop2: detected capacity change from 0 to 4096 [ 187.794072][ T7801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.796121][ T7863] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 187.835722][ T7863] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 187.853567][ T7863] ntfs3: loop2: Failed to load $Extend (-22). [ 187.861944][ T7863] ntfs3: loop2: Failed to initialize $Extend. [ 187.917169][ T7863] ntfs3: loop2: ino=1b, mi_enum_attr [ 187.940600][ T7863] overlayfs: upper fs does not support tmpfile. [ 187.957190][ T7863] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.972513][ T7863] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 187.982516][ T7863] overlayfs: failed to verify origin (/, ino=5, err=-95) [ 187.995284][ T7863] overlayfs: failed to verify upper root origin [ 188.408024][ T7859] loop1: detected capacity change from 0 to 32768 [ 188.452886][ T7859] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.582049][ T7875] loop3: detected capacity change from 0 to 256 [ 188.636532][ T7875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 188.765076][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 188.834217][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.918270][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.943739][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 189.154021][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 189.161302][ T5844] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.186768][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.193543][ T5844] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 189.216978][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.230903][ T5844] usb 3-1: config 0 descriptor?? [ 189.459709][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 189.467152][ T5844] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.476494][ T5844] usb 3-1: USB disconnect, device number 11 [ 189.528389][ T7895] loop1: detected capacity change from 0 to 2048 [ 189.602586][ T7896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.626604][ T7898] loop3: detected capacity change from 0 to 256 [ 189.689355][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 189.689371][ T27] audit: type=1800 audit(1789403452.011:81): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.802" name="bus" dev="loop1" ino=2097152 res=0 errno=0 [ 189.744547][ T7895] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 189.874734][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.192398][ T7904] loop3: detected capacity change from 0 to 4096 [ 190.251084][ T7904] ntfs3: loop3: ino=19, mi_enum_attr [ 190.258171][ T7904] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 190.672936][ T7915] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 190.674589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.686940][ T7915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.803'. [ 190.924591][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.497901][ T7907] loop2: detected capacity change from 0 to 65536 [ 191.566231][ T7907] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 191.641569][ T7934] netlink: 'syz.0.809': attribute type 6 has an invalid length. [ 191.650234][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 191.691854][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 191.731430][ T7907] XFS (loop2): Ending clean mount [ 191.943989][ T5776] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 191.960467][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.234659][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 192.540292][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.821'. [ 192.838232][ T7971] block nbd3: shutting down sockets [ 192.994089][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.103339][ T7982] loop0: detected capacity change from 0 to 128 [ 193.132332][ T7982] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 193.179794][ T7982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.397585][ T7987] loop2: detected capacity change from 0 to 4096 [ 193.449903][ T7987] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 193.508371][ T7987] ntfs3: loop2: ino=1a, mi_enum_attr [ 193.519727][ T7987] ntfs3: loop2: ino=1a, mi_enum_attr [ 193.543997][ T7987] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 193.714312][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.034599][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.047463][ T8002] loop2: detected capacity change from 0 to 512 [ 194.195433][ T8002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.207200][ T8011] IPVS: stopping master sync thread 8012 ... [ 194.208067][ T8012] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 194.261199][ T8002] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.548313][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.684658][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.691176][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.079297][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.150651][ T8040] netlink: 100 bytes leftover after parsing attributes in process `syz.0.854'. [ 195.191609][ T8042] loop1: detected capacity change from 0 to 2048 [ 195.254487][ T8042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.349191][ T8042] CacheFiles: Failed to register: -95 [ 195.401085][ T8047] program syz.0.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.605889][ T9] IPVS: starting estimator thread 0... [ 195.713933][ T8053] IPVS: using max 19 ests per chain, 45600 per kthread [ 196.118248][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.250355][ T8076] loop3: detected capacity change from 0 to 512 [ 196.282634][ T8076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.359491][ T8076] EXT4-fs (loop3): 1 truncate cleaned up [ 196.408939][ T8076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.704210][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.724143][ T8095] loop1: detected capacity change from 0 to 8 [ 196.754350][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.123828][ T971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.163307][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.338777][ T971] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 197.350836][ T971] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 197.376271][ T971] usb 2-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config [ 197.401061][ T971] usb 2-1: config 220 has no interface number 2 [ 197.405043][ T5819] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.433701][ T971] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 197.480864][ T971] usb 2-1: config 220 interface 0 has no altsetting 0 [ 197.493839][ T971] usb 2-1: config 220 interface 76 has no altsetting 0 [ 197.500797][ T971] usb 2-1: config 220 interface 1 has no altsetting 0 [ 197.540373][ T971] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 197.553997][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.562078][ T971] usb 2-1: Product: syz [ 197.567110][ T971] usb 2-1: Manufacturer: syz [ 197.571771][ T971] usb 2-1: SerialNumber: syz [ 197.624017][ T8122] program syz.2.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.648047][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.673740][ T5819] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.711509][ T5819] usb 1-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 197.728641][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.760012][ T5819] usb-storage 1-1:1.0: USB Mass Storage device detected [ 197.819372][ T971] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 197.839481][ T971] usb 2-1: No valid video chain found. [ 197.862127][ T971] usb 2-1: selecting invalid altsetting 0 [ 197.910883][ T971] usb 2-1: selecting invalid altsetting 0 [ 197.922288][ T971] usbtest: probe of 2-1:220.1 failed with error -22 [ 197.948004][ T971] usb 2-1: USB disconnect, device number 8 [ 198.195559][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.252069][ T5819] usb-storage: probe of 1-1:1.0 failed with error -5 [ 198.278403][ T5819] usb 1-1: USB disconnect, device number 10 [ 198.522409][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.656790][ T8134] loop2: detected capacity change from 0 to 32768 [ 198.675589][ T8134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.887 (8134) [ 198.718275][ T8134] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.760400][ T8134] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 198.799738][ T8134] BTRFS info (device loop2): using free space tree [ 198.976841][ T8134] BTRFS info (device loop2): enabling ssd optimizations [ 198.984319][ T8134] BTRFS info (device loop2): auto enabling async discard [ 199.156766][ T8171] kernel write not supported for file /408/net/netstat (pid: 8171 comm: syz.2.887) [ 199.234151][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.287900][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.743980][ T8154] loop1: detected capacity change from 0 to 32768 [ 199.795153][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.804036][ T5819] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 199.840734][ T8154] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.043956][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 200.058868][ T5819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 200.086868][ T5819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.120428][ T5819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.133476][ T8154] XFS (loop1): Ending clean mount [ 200.160709][ T5819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.174625][ T8154] XFS (loop1): Quotacheck needed: Please wait. [ 200.193720][ T5819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.215759][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.281057][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.339221][ T8154] XFS (loop1): Quotacheck: Done. [ 200.453788][ T12] bond0: (slave bond_slave_0): interface is now down [ 200.474933][ T12] bond0: (slave bond_slave_1): interface is now down [ 200.485843][ T5819] usb 1-1: GET_CAPABILITIES returned 0 [ 200.501882][ T5819] usbtmc 1-1:16.0: can't read capabilities [ 200.510085][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.533220][ T12] bond0: now running without any active interface! [ 200.769118][ T971] usb 1-1: USB disconnect, device number 11 [ 200.821041][ T5781] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 200.832001][ T8203] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 200.880961][ T8203] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.904'. [ 201.319230][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.408292][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 201.491455][ T5775] syz_tun (unregistering): left allmulticast mode [ 201.523655][ T5775] syz_tun (unregistering): left promiscuous mode [ 201.530255][ T5775] bridge0: port 3(syz_tun) entered disabled state [ 201.801399][ T1093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.018090][ T1093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.264043][ T1093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.396056][ T1093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.700965][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.711522][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.720369][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.730707][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.740847][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.752268][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.071062][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 203.303535][ T8260] loop0: detected capacity change from 0 to 64 [ 203.422258][ T8260] hfs: request for non-existent node 131072 in B*Tree [ 203.459669][ T8260] hfs: request for non-existent node 131072 in B*Tree [ 203.618940][ T5781] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 203.627248][ T8271] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 203.627271][ T5781] Bluetooth: hci1: unexpected event for opcode 0x203e [ 203.639701][ T8271] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.928'. [ 204.240180][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 204.417069][ T8292] vxcan0: tx address claim with dest, not broadcast [ 204.560460][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.577020][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.592567][ T8246] bridge_slave_0: entered allmulticast mode [ 204.605107][ T8246] bridge_slave_0: entered promiscuous mode [ 204.623767][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.632120][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.646089][ T8246] bridge_slave_1: entered allmulticast mode [ 204.653315][ T8246] bridge_slave_1: entered promiscuous mode [ 204.744212][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.837646][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.848090][ T5781] Bluetooth: hci2: command tx timeout [ 204.851157][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 204.866331][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 204.878504][ T5087] Bluetooth: hci3: hardware error 0x00 [ 204.981663][ T8246] team0: Port device team_slave_0 added [ 205.027525][ T8246] team0: Port device team_slave_1 added [ 205.311314][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.342352][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.419478][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.522598][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.550042][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.604025][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.650458][ T1093] hsr_slave_0: left promiscuous mode [ 205.677959][ T1093] hsr_slave_1: left promiscuous mode [ 205.708437][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.733833][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.801977][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.824520][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.867241][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.927885][ T1093] bridge_slave_0: left allmulticast mode [ 205.940094][ T8321] loop3: detected capacity change from 0 to 128 [ 205.947305][ T1093] bridge_slave_0: left promiscuous mode [ 205.953127][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.005633][ T8319] loop0: detected capacity change from 0 to 4096 [ 206.057519][ T8319] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 206.087608][ T8319] ntfs3: loop0: Failed to load $Bitmap (-2). [ 206.215443][ T1093] veth1_macvtap: left promiscuous mode [ 206.222197][ T1093] veth0_macvtap: left promiscuous mode [ 206.234558][ T1093] veth1_vlan: left promiscuous mode [ 206.277723][ T1093] veth0_vlan: left promiscuous mode [ 206.913895][ T5781] Bluetooth: hci2: command tx timeout [ 207.000432][ T5087] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 207.012707][ T8341] zero sized request [ 207.648348][ T5087] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 207.664975][ T5087] Bluetooth: hci1: Injecting HCI hardware error event [ 207.680284][ T5087] Bluetooth: hci1: hardware error 0x00 [ 207.739195][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 207.833387][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 207.899822][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.977558][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.366994][ T1093] bond0 (unregistering): Released all slaves [ 208.694928][ T8246] hsr_slave_0: entered promiscuous mode [ 208.711790][ T8246] hsr_slave_1: entered promiscuous mode [ 208.738011][ T8246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.752325][ T8246] Cannot create hsr debugfs directory [ 208.944588][ T28] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 208.997597][ T5781] Bluetooth: hci2: command tx timeout [ 209.148598][ T28] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 209.156646][ T8375] loop0: detected capacity change from 0 to 8 [ 209.183811][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.218175][ T28] usb 4-1: Product: syz [ 209.223913][ T28] usb 4-1: Manufacturer: syz [ 209.234797][ T28] usb 4-1: SerialNumber: syz [ 209.259385][ T28] usb 4-1: config 0 descriptor?? [ 209.470327][ T1093] IPVS: stop unused estimator thread 0... [ 209.517777][ T28] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 209.717031][ T5087] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 209.942354][ T28] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 209.966248][ T28] usb 4-1: USB disconnect, device number 12 [ 210.286514][ T8246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.339207][ T8246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.404322][ T8246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.451965][ T8246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.778847][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.857847][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.915485][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.922719][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.008798][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.016061][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.073824][ T5781] Bluetooth: hci2: command tx timeout [ 211.517878][ T8424] loop3: detected capacity change from 0 to 256 [ 211.545646][ T8397] loop0: detected capacity change from 0 to 40427 [ 211.609395][ T8397] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 211.639874][ T8397] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 211.693711][ T8397] F2FS-fs (loop0): invalid crc value [ 211.703550][ T8397] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 211.767679][ T8397] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.009157][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.026151][ T8397] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 212.033282][ T8397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 212.115791][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 212.201705][ T8246] veth0_vlan: entered promiscuous mode [ 212.207859][ T5821] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.215824][ T27] audit: type=1804 audit(1789403474.511:82): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.965" name="/newroot/260/file1/file1" dev="loop0" ino=10 res=1 errno=0 [ 212.278635][ T5778] syz-executor: attempt to access beyond end of device [ 212.278635][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.302758][ T8246] veth1_vlan: entered promiscuous mode [ 212.331553][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 212.388329][ T8246] veth0_macvtap: entered promiscuous mode [ 212.427032][ T8246] veth1_macvtap: entered promiscuous mode [ 212.434014][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 212.446888][ T5821] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.483981][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.501416][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.513396][ T5821] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.530086][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.541258][ T5821] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.560311][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.571308][ T5821] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.582660][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.593062][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.602218][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.630487][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.651706][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.672165][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.710133][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.734563][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.777212][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.814000][ T8246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.835097][ T8246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.855614][ T5821] usb 3-1: GET_CAPABILITIES returned 0 [ 212.856737][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.861219][ T5821] usbtmc 3-1:16.0: can't read capabilities [ 212.931600][ T8246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.973690][ T8246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.982971][ T8246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.012176][ T8246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.117774][ T5821] usb 3-1: USB disconnect, device number 12 [ 213.334252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.362828][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.476584][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.494775][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.698489][ T8463] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 214.127593][ T27] audit: type=1326 audit(1789403476.441:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8478 comm="syz.1.986" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98ba79e159 code=0x0 [ 214.302270][ T8486] warning: `syz.0.988' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 214.578900][ T8493] kAFS: bad VL server IP address [ 214.788424][ T8502] binder: 8501:8502 ioctl c0306201 200000000080 returned -14 [ 214.790754][ T8495] loop3: detected capacity change from 0 to 8192 [ 215.614751][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.129137][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.155358][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 218.163252][ T5844] usb 2-1: can't read configurations, error -71 [ 256.119070][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.125582][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.557431][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.564712][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.874128][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 367.473657][ T29] INFO: task kworker/u4:1:12 blocked for more than 143 seconds. [ 367.481394][ T29] Not tainted syzkaller #0 [ 367.486638][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.495659][ T29] task:kworker/u4:1 state:D stack:22248 pid:12 ppid:2 flags:0x00004000 [ 367.505446][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 367.511534][ T29] Call Trace: [ 367.514915][ T29] [ 367.517943][ T29] __schedule+0x15ae/0x4660 [ 367.522556][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 367.528924][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 367.537274][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 367.543351][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 367.548731][ T29] ? asan.module_dtor+0x20/0x20 [ 367.553688][ T29] ? blk_check_plugged+0x250/0x250 [ 367.563909][ T29] ? rq_wait_inc_below+0x11f/0x1a0 [ 367.569124][ T29] ? wq_worker_sleeping+0x63/0x240 [ 367.577642][ T29] schedule+0xbd/0x170 [ 367.581854][ T29] io_schedule+0x80/0xd0 [ 367.586248][ T29] rq_qos_wait+0x22b/0x360 [ 367.590727][ T29] ? wbt_inflight_cb+0x2f0/0x2f0 [ 367.600191][ T29] ? rq_depth_scale_down+0x2f0/0x2f0 [ 367.606874][ T29] ? rq_qos_wait+0x360/0x360 [ 367.611547][ T29] ? wbt_exit+0xb0/0xb0 [ 367.620245][ T29] ? blk_bio_list_merge+0xd0/0xd0 [ 367.625455][ T29] wbt_wait+0x34a/0x580 [ 367.629690][ T29] ? rwb_trace_step+0x320/0x320 [ 367.639337][ T29] ? dd_depth_updated+0x110/0x110 [ 367.648037][ T29] ? rwb_trace_step+0x320/0x320 [ 367.652972][ T29] __rq_qos_throttle+0x65/0xb0 [ 367.662299][ T29] blk_mq_submit_bio+0x8fb/0x2220 [ 367.668804][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 367.678519][ T29] ? blk_mq_plug_issue_direct+0x550/0x550 [ 367.684360][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 367.690663][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 367.696118][ T29] ? ktime_get+0x7f/0x280 [ 367.700502][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 367.712327][ T29] ? ktime_get_real_ts64+0x440/0x440 [ 367.718255][ T29] __submit_bio+0x12b/0x260 [ 367.722865][ T29] ? blk_free_queue_rcu+0x40/0x40 [ 367.728143][ T29] submit_bio_noacct_nocheck+0x6e8/0x9c0 [ 367.733994][ T29] ? __folio_end_writeback+0xe10/0xe10 [ 367.739507][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 367.745225][ T29] ? should_fail_request+0x70/0x70 [ 367.751168][ T29] ? submit_bio_noacct+0xfba/0x1b30 [ 367.760427][ T29] ext4_bio_write_folio+0x16a4/0x22d0 [ 367.769432][ T29] mpage_submit_folio+0x231/0x3c0 [ 367.776880][ T29] mpage_process_page_bufs+0x6bf/0x8c0 [ 367.782432][ T29] mpage_prepare_extent_to_map+0xecd/0x1f80 [ 367.791910][ T29] ? trace_ext4_writepages+0x1c0/0x1c0 [ 367.798689][ T29] ? kmem_cache_alloc+0x1a6/0x2c0 [ 367.807095][ T29] ext4_do_writepages+0xb46/0x3990 [ 367.812723][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 367.821716][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 367.830658][ T29] ? __lock_acquire+0x1336/0x7d80 [ 367.836965][ T29] ext4_writepages+0x1dd/0x350 [ 367.841884][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 367.850187][ T29] ? __rwlock_init+0x150/0x150 [ 367.857082][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 367.862361][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 367.873483][ T29] do_writepages+0x351/0x590 [ 367.878341][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 367.885316][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 367.890772][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 367.896118][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 367.901220][ T29] __writeback_single_inode+0x14e/0xee0 [ 367.907058][ T29] writeback_sb_inodes+0x813/0x1020 [ 367.917841][ T29] ? queue_io+0x530/0x530 [ 367.922281][ T29] __writeback_inodes_wb+0x114/0x240 [ 367.927739][ T29] wb_writeback+0x472/0xbe0 [ 367.932348][ T29] ? queue_io+0x2d1/0x530 [ 367.936958][ T29] ? percpu_ref_tryget+0x250/0x250 [ 367.942131][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 367.948220][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 367.953321][ T29] wb_workfn+0xad7/0xe60 [ 367.958158][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 367.963989][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 367.970025][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 367.977195][ T29] ? read_lock_is_recursive+0x20/0x20 [ 367.982637][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.987965][ T29] ? process_scheduled_works+0x975/0x1600 [ 367.999156][ T29] ? process_scheduled_works+0x975/0x1600 [ 368.005023][ T29] process_scheduled_works+0xa60/0x1600 [ 368.010640][ T29] ? worker_attach_to_pool+0x370/0x370 [ 368.017763][ T29] ? assign_work+0x3cc/0x5d0 [ 368.022471][ T29] worker_thread+0xa5e/0xfe0 [ 368.027274][ T29] kthread+0x2fa/0x390 [ 368.031389][ T29] ? pr_cont_work+0x550/0x550 [ 368.036242][ T29] ? kthread_blkcg+0xd0/0xd0 [ 368.040890][ T29] ret_from_fork+0x48/0x80 [ 368.045402][ T29] ? kthread_blkcg+0xd0/0xd0 [ 368.050047][ T29] ret_from_fork_asm+0x11/0x20 [ 368.055000][ T29] [ 368.059330][ T29] INFO: task jbd2/sda1-8:5104 blocked for more than 143 seconds. [ 368.067153][ T29] Not tainted syzkaller #0 [ 368.072307][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.081093][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5104 ppid:2 flags:0x00004000 [ 368.091395][ T29] Call Trace: [ 368.094814][ T29] [ 368.097801][ T29] __schedule+0x15ae/0x4660 [ 368.102391][ T29] ? asan.module_dtor+0x20/0x20 [ 368.107402][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.112492][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 368.118933][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 368.124257][ T29] schedule+0xbd/0x170 [ 368.128391][ T29] io_schedule+0x80/0xd0 [ 368.132687][ T29] bit_wait_io+0x11/0xd0 [ 368.137252][ T29] __wait_on_bit+0x9f/0x2c0 [ 368.141815][ T29] ? bit_wait+0xd0/0xd0 [ 368.146071][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 368.151571][ T29] ? bit_wait+0xd0/0xd0 [ 368.155803][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 368.162422][ T29] ? do_raw_write_lock+0x11e/0x260 [ 368.167722][ T29] ? bit_waitqueue+0x30/0x30 [ 368.172374][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 368.177625][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 368.184099][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 368.190912][ T29] ? lock_chain_count+0x20/0x20 [ 368.196284][ T29] ? _raw_spin_unlock+0x40/0x40 [ 368.201211][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 368.207445][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 368.212800][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.217969][ T29] ? timer_delete_sync+0x20/0x20 [ 368.223308][ T29] ? do_raw_read_unlock+0x80/0x80 [ 368.228511][ T29] ? prepare_to_wait+0x1aa/0x200 [ 368.234528][ T29] kjournald2+0x40f/0x810 [ 368.238985][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 368.244290][ T29] ? wake_bit_function+0x200/0x200 [ 368.249457][ T29] ? _raw_spin_unlock+0x40/0x40 [ 368.255703][ T29] ? __kthread_parkme+0x71/0x1c0 [ 368.260710][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 368.266499][ T29] kthread+0x2fa/0x390 [ 368.270615][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 368.276255][ T29] ? kthread_blkcg+0xd0/0xd0 [ 368.280918][ T29] ret_from_fork+0x48/0x80 [ 368.285714][ T29] ? kthread_blkcg+0xd0/0xd0 [ 368.290386][ T29] ret_from_fork_asm+0x11/0x20 [ 368.295598][ T29] [ 368.298676][ T29] INFO: task syz-executor:5763 blocked for more than 144 seconds. [ 368.307733][ T29] Not tainted syzkaller #0 [ 368.312737][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.322036][ T29] task:syz-executor state:D stack:22064 pid:5763 ppid:5762 flags:0x00004002 [ 368.331921][ T29] Call Trace: [ 368.335473][ T29] [ 368.338457][ T29] __schedule+0x15ae/0x4660 [ 368.343031][ T29] ? mark_lock+0x94/0x320 [ 368.347498][ T29] ? asan.module_dtor+0x20/0x20 [ 368.352507][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.358318][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 368.364914][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 368.370185][ T29] schedule+0xbd/0x170 [ 368.374625][ T29] io_schedule+0x80/0xd0 [ 368.378940][ T29] bit_wait_io+0x11/0xd0 [ 368.383240][ T29] __wait_on_bit+0x9f/0x2c0 [ 368.387858][ T29] ? bit_wait+0xd0/0xd0 [ 368.392054][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 368.397615][ T29] ? bit_wait+0xd0/0xd0 [ 368.401815][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 368.406637][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 368.411706][ T29] ? bit_waitqueue+0x30/0x30 [ 368.417449][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 368.422719][ T29] do_get_write_access+0x5c9/0xe00 [ 368.428709][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 368.441229][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 368.447544][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 368.453884][ T29] ? __might_sleep+0xe0/0xe0 [ 368.458547][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 368.464219][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 368.470139][ T29] ext4_dirty_inode+0xcb/0x110 [ 368.474993][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 368.480852][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 368.485999][ T29] file_update_time+0x187/0x1a0 [ 368.490897][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 368.496091][ T29] ? do_wp_page+0x4ce/0x34d0 [ 368.500753][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 368.507123][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.512225][ T29] do_page_mkwrite+0x153/0x3f0 [ 368.517094][ T29] do_wp_page+0xd4d/0x34d0 [ 368.521588][ T29] ? folio_put+0xd0/0xd0 [ 368.526168][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 368.534699][ T29] ? __rwlock_init+0x150/0x150 [ 368.539568][ T29] handle_mm_fault+0x1306/0x4a50 [ 368.544676][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 368.549685][ T29] ? numa_migrate_prep+0x350/0x350 [ 368.554993][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 368.560336][ T29] do_user_addr_fault+0x736/0x12d0 [ 368.565563][ T29] exc_page_fault+0x64/0x100 [ 368.570408][ T29] ? clear_bhb_loop+0x40/0x90 [ 368.575241][ T29] asm_exc_page_fault+0x26/0x30 [ 368.580147][ T29] RIP: 0033:0x7f3c8de7c6e2 [ 368.584666][ T29] RSP: 002b:00007fffb40492b0 EFLAGS: 00010202 [ 368.590791][ T29] RAX: 00007f3c8bcf4000 RBX: 000055556f3f5100 RCX: 0000000000000006 [ 368.598898][ T29] RDX: 0000000000000a39 RSI: 000055556f3ff7b8 RDI: 0000000000000040 [ 368.607010][ T29] RBP: 00007fffb40497b0 R08: 000055556f3ff7e8 R09: 0000000000000092 [ 368.616331][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffb40495f0 [ 368.624392][ T29] R13: 00007fffb40493e0 R14: 585858582e7a7973 R15: 00007fffb4049330 [ 368.633087][ T29] [ 368.638751][ T29] INFO: task syz.3.1010:8554 blocked for more than 144 seconds. [ 368.646497][ T29] Not tainted syzkaller #0 [ 368.651469][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.662450][ T29] task:syz.3.1010 state:D stack:27048 pid:8554 ppid:5777 flags:0x00004004 [ 368.671941][ T29] Call Trace: [ 368.675819][ T29] [ 368.678813][ T29] __schedule+0x15ae/0x4660 [ 368.683403][ T29] ? mark_lock+0x94/0x320 [ 368.687930][ T29] ? asan.module_dtor+0x20/0x20 [ 368.692837][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.698000][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 368.704029][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 368.709273][ T29] schedule+0xbd/0x170 [ 368.713366][ T29] io_schedule+0x80/0xd0 [ 368.717717][ T29] bit_wait_io+0x11/0xd0 [ 368.722047][ T29] __wait_on_bit+0x9f/0x2c0 [ 368.726727][ T29] ? bit_wait+0xd0/0xd0 [ 368.730928][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 368.737156][ T29] ? bit_wait+0xd0/0xd0 [ 368.741384][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 368.746341][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 368.751457][ T29] ? bit_waitqueue+0x30/0x30 [ 368.759026][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 368.764595][ T29] do_get_write_access+0x5c9/0xe00 [ 368.769786][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 368.776766][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 368.783010][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 368.789343][ T29] ? __might_sleep+0xe0/0xe0 [ 368.794064][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 368.799669][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 368.805301][ T29] ext4_dirty_inode+0xcb/0x110 [ 368.810119][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 368.816065][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 368.821164][ T29] file_update_time+0x187/0x1a0 [ 368.826165][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 368.831247][ T29] ? filemap_fault+0x103c/0x1540 [ 368.836896][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 368.842686][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 368.849070][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 368.855256][ T29] ? __pte_offset_map+0x20d/0x280 [ 368.860355][ T29] do_page_mkwrite+0x153/0x3f0 [ 368.866300][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 368.871308][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 368.876967][ T29] ? numa_migrate_prep+0x350/0x350 [ 368.882138][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 368.889387][ T29] do_user_addr_fault+0x736/0x12d0 [ 368.894721][ T29] exc_page_fault+0x64/0x100 [ 368.899538][ T29] asm_exc_page_fault+0x26/0x30 [ 368.904608][ T29] RIP: 0033:0x7f7713872f32 [ 368.909076][ T29] RSP: 002b:00007fff097c55e0 EFLAGS: 00010202 [ 368.915275][ T29] RAX: 0000000000003008 RBX: 00007f7714755720 RCX: 0000000000000000 [ 368.923290][ T29] RDX: 0000001b2e021000 RSI: 0000000000000008 RDI: 00007f7714755720 [ 368.931400][ T29] RBP: 0000000000000680 R08: 00007f7713c10000 R09: 00007f7713c26038 [ 368.939889][ T29] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff85508d7b [ 368.948043][ T29] R13: 00007f7713c26038 R14: 0000000000000175 R15: ffffffffffffd000 [ 368.956131][ T29] ? dev_uevent_filter+0x1b/0xb0 [ 368.961134][ T29] [ 368.965308][ T29] INFO: task syz.0.1013:8562 blocked for more than 144 seconds. [ 368.972983][ T29] Not tainted syzkaller #0 [ 368.981238][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.990343][ T29] task:syz.0.1013 state:D stack:27560 pid:8562 ppid:5778 flags:0x00004004 [ 368.999675][ T29] Call Trace: [ 369.003199][ T29] [ 369.006307][ T29] __schedule+0x15ae/0x4660 [ 369.010900][ T29] ? mark_lock+0x94/0x320 [ 369.015351][ T29] ? asan.module_dtor+0x20/0x20 [ 369.020275][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 369.025415][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 369.031363][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 369.036699][ T29] schedule+0xbd/0x170 [ 369.041476][ T29] io_schedule+0x80/0xd0 [ 369.045877][ T29] bit_wait_io+0x11/0xd0 [ 369.050211][ T29] __wait_on_bit+0x9f/0x2c0 [ 369.054867][ T29] ? bit_wait+0xd0/0xd0 [ 369.059079][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 369.064660][ T29] ? bit_wait+0xd0/0xd0 [ 369.068896][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 369.073876][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 369.078967][ T29] ? bit_waitqueue+0x30/0x30 [ 369.083877][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 369.089156][ T29] do_get_write_access+0x5c9/0xe00 [ 369.094470][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 369.100541][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 369.106855][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 369.113096][ T29] ? __might_sleep+0xe0/0xe0 [ 369.117810][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 369.123424][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 369.129144][ T29] ext4_dirty_inode+0xcb/0x110 [ 369.134159][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 369.140027][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 369.145933][ T29] file_update_time+0x187/0x1a0 [ 369.150855][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 369.156001][ T29] ? filemap_fault+0x103c/0x1540 [ 369.161006][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 369.166902][ T29] ? pte_alloc_one+0x3b6/0x540 [ 369.171731][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 369.178111][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 369.183410][ T29] do_page_mkwrite+0x153/0x3f0 [ 369.188361][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 369.193387][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 369.200095][ T29] ? numa_migrate_prep+0x350/0x350 [ 369.205326][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 369.210682][ T29] do_user_addr_fault+0x736/0x12d0 [ 369.216055][ T29] exc_page_fault+0x64/0x100 [ 369.220701][ T29] ? clear_bhb_loop+0x40/0x90 [ 369.225477][ T29] asm_exc_page_fault+0x26/0x30 [ 369.230389][ T29] RIP: 0033:0x7fafda86baa3 [ 369.235493][ T29] RSP: 002b:00007fffc010c7e0 EFLAGS: 00010246 [ 369.241632][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d764000 [ 369.250144][ T29] RDX: 0000001b2d724000 RSI: 0000000000600000 RDI: 00007fafdabe0708 [ 369.258463][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.266642][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 369.274773][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc010ca70 [ 369.282780][ T29] [ 369.286449][ T29] [ 369.286449][ T29] Showing all locks held in the system: [ 369.294623][ T29] 4 locks held by kworker/u4:1/12: [ 369.299780][ T29] #0: ffff888144650138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 369.311241][ T29] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 369.324116][ T29] #2: ffff88807eb4a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 369.334999][ T29] #3: ffff88807eb4cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 369.345596][ T29] 1 lock held by khungtaskd/29: [ 369.350953][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 369.361017][ T29] 2 locks held by getty/5531: [ 369.365832][ T29] #0: ffff88807eab80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.375729][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 369.386028][ T29] 3 locks held by syz-executor/5763: [ 369.391686][ T29] #0: ffff88807694a7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 369.401940][ T29] #1: ffff88807eb4a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 369.411863][ T29] #2: ffff88807eb4e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 369.421688][ T29] 3 locks held by syz.3.1010/8554: [ 369.426897][ T29] #0: ffff88805a846a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 369.436959][ T29] #1: ffff88807eb4a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 369.447045][ T29] #2: ffff88807eb4e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 369.457482][ T29] 3 locks held by syz.0.1013/8562: [ 369.462640][ T29] #0: ffff88807d9694a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 369.473133][ T29] #1: ffff88807eb4a510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 369.483060][ T29] #2: ffff88807eb4e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 369.493399][ T29] [ 369.495853][ T29] ============================================= [ 369.495853][ T29] [ 369.504369][ T29] NMI backtrace for cpu 0 [ 369.508733][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 369.515974][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.526056][ T29] Call Trace: [ 369.529369][ T29] [ 369.532330][ T29] dump_stack_lvl+0x18c/0x250 [ 369.537041][ T29] ? __wake_up_klogd+0xd9/0x100 [ 369.541924][ T29] ? show_regs_print_info+0x20/0x20 [ 369.547168][ T29] ? load_image+0x420/0x420 [ 369.551709][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 369.556701][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 369.562889][ T29] ? load_image+0x420/0x420 [ 369.567418][ T29] ? wq_watchdog_touch+0xef/0x170 [ 369.572479][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 369.578671][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 369.584693][ T29] watchdog+0xf59/0xfa0 [ 369.588905][ T29] ? watchdog+0x1e1/0xfa0 [ 369.593273][ T29] kthread+0x2fa/0x390 [ 369.597370][ T29] ? hungtask_pm_notify+0x50/0x50 [ 369.602449][ T29] ? kthread_blkcg+0xd0/0xd0 [ 369.607065][ T29] ret_from_fork+0x48/0x80 [ 369.611512][ T29] ? kthread_blkcg+0xd0/0xd0 [ 369.616128][ T29] ret_from_fork_asm+0x11/0x20 [ 369.620944][ T29] [ 369.625088][ T29] Sending NMI from CPU 0 to CPUs 1: [ 369.630375][ C1] NMI backtrace for cpu 1 [ 369.630386][ C1] CPU: 1 PID: 1093 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 369.630403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.630414][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 369.630440][ C1] RIP: 0010:memset_orig+0x3a/0xac [ 369.630461][ C1] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 6c 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 48 89 47 08 <48> 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 [ 369.630475][ C1] RSP: 0018:ffffc900046c7960 EFLAGS: 00000202 [ 369.630488][ C1] RAX: 0000000000000000 RBX: ffffc900046c79e0 RCX: 000000000000002c [ 369.630500][ C1] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff88807dfd64c0 [ 369.630511][ C1] RBP: 0000000000000001 R08: ffffc900046c79e0 R09: 0000000000000000 [ 369.630522][ C1] R10: ffff88807dfd6000 R11: 0000000000000000 R12: 0000000000000001 [ 369.630532][ C1] R13: 0000000000001000 R14: 0000000000000000 R15: 0000000000000001 [ 369.630542][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.630555][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.630567][ C1] CR2: 0000557aa1b77180 CR3: 000000002e68c000 CR4: 00000000003506e0 [ 369.630582][ C1] Call Trace: [ 369.630588][ C1] [ 369.630592][ C1] slab_post_alloc_hook+0x86/0x4d0 [ 369.630625][ C1] __kmem_cache_alloc_node+0x194/0x250 [ 369.630650][ C1] ? __alloc_skb+0x138/0x2c0 [ 369.630673][ C1] ? __alloc_skb+0x138/0x2c0 [ 369.630692][ C1] __kmalloc_node_track_caller+0xa4/0x230 [ 369.630718][ C1] ? rcu_is_watching+0x15/0xb0 [ 369.630742][ C1] ? __alloc_skb+0x138/0x2c0 [ 369.630761][ C1] kmalloc_reserve+0x116/0x240 [ 369.630784][ C1] __alloc_skb+0x138/0x2c0 [ 369.630806][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 369.630833][ C1] ? process_scheduled_works+0x975/0x1600 [ 369.630857][ C1] process_scheduled_works+0xa60/0x1600 [ 369.630893][ C1] ? worker_attach_to_pool+0x370/0x370 [ 369.630919][ C1] ? assign_work+0x3cc/0x5d0 [ 369.630943][ C1] worker_thread+0xa5e/0xfe0 [ 369.630970][ C1] ? _raw_spin_unlock+0x40/0x40 [ 369.630990][ C1] ? __kthread_parkme+0x71/0x1c0 [ 369.631011][ C1] kthread+0x2fa/0x390 [ 369.631027][ C1] ? pr_cont_work+0x550/0x550 [ 369.631048][ C1] ? kthread_blkcg+0xd0/0xd0 [ 369.631064][ C1] ret_from_fork+0x48/0x80 [ 369.631085][ C1] ? kthread_blkcg+0xd0/0xd0 [ 369.631101][ C1] ret_from_fork_asm+0x11/0x20 [ 369.631132][ C1] [ 369.635784][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 369.635817][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 369.635871][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.635904][ T29] Call Trace: [ 369.635924][ T29] [ 369.635946][ T29] dump_stack_lvl+0x18c/0x250 [ 369.636040][ T29] ? show_regs_print_info+0x20/0x20 [ 369.636115][ T29] ? load_image+0x420/0x420 [ 369.636211][ T29] panic+0x2ca/0x720 [ 369.636276][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 369.636332][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 369.636414][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 369.636521][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 369.636625][ T29] watchdog+0xf98/0xfa0 [ 369.636699][ T29] ? watchdog+0x1e1/0xfa0 [ 369.636793][ T29] kthread+0x2fa/0x390 [ 369.636846][ T29] ? hungtask_pm_notify+0x50/0x50 [ 369.636919][ T29] ? kthread_blkcg+0xd0/0xd0 [ 369.636987][ T29] ret_from_fork+0x48/0x80 [ 369.637050][ T29] ? kthread_blkcg+0xd0/0xd0 [ 369.637104][ T29] ret_from_fork_asm+0x11/0x20 [ 369.637211][ T29] [ 369.638036][ T29] Kernel Offset: disabled [ 369.991656][ T29] Rebooting in 86400 seconds..