last executing test programs: 4m21.129906283s ago: executing program 2 (id=4449): r0 = open(&(0x7f0000000240)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4m20.221522329s ago: executing program 2 (id=4456): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x3, 0x4) 4m19.695803251s ago: executing program 2 (id=4459): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x1b, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000000000000000000b48a0000850000001b0000009500000000000000"], &(0x7f00000013c0)='syzkaller\x00', 0x4, 0x14, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 4m19.301613688s ago: executing program 2 (id=4464): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m17.828842562s ago: executing program 2 (id=4478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 4m16.469901263s ago: executing program 2 (id=4499): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xf, &(0x7f0000001180)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000012c0)="ddff00001a748296f3d62a7200d7", 0x0, 0x20f000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m15.484178632s ago: executing program 32 (id=4499): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xf, &(0x7f0000001180)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000012c0)="ddff00001a748296f3d62a7200d7", 0x0, 0x20f000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m44.924439562s ago: executing program 1 (id=5432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000240)}, 0x20) 2m44.538930944s ago: executing program 1 (id=5435): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) modify_ldt$write2(0x11, 0x0, 0x0) 2m44.005398637s ago: executing program 1 (id=5441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)="596da3a131f8272886ba9a736361c9a048e1e21d3aedcf9a862246d2ae8042c9a26ce23e0449c35cacc089c3d8ee6dd5c9eb133d9173fbeeb9991706e45dd892bf5ccb37450c4365bb8b7018d77b0ea10c73ae", &(0x7f0000000280), 0x69d, r0}, 0x38) 2m43.310820475s ago: executing program 1 (id=5446): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 2m42.895748742s ago: executing program 1 (id=5448): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f00000001c0)="7472616e73706f72743d66632c7472616464723d6e6e2d33333333333333333333333333333a706e7030783491bfebe398148e1c44445fa13a3434343434343434343434343434342c686f73745f7472616464723d6e6e2d3078313131313131313131313131313131313a706e2d307832e763019032323232323232323232322c6e716e3d6e90247402cd5e7a46be2b9697", 0x92) 2m42.173730001s ago: executing program 1 (id=5453): r0 = syz_open_dev$usbfs(&(0x7f00000020c0), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000002100)={0x0, 0x5, 0x7, 0x8, 0x0, 0x1, 0x0}) 2m25.761021819s ago: executing program 33 (id=5453): r0 = syz_open_dev$usbfs(&(0x7f00000020c0), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000002100)={0x0, 0x5, 0x7, 0x8, 0x0, 0x1, 0x0}) 1m25.124515514s ago: executing program 4 (id=6263): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@nodioread_nolock}]}, 0x1, 0x48c, &(0x7f00000015c0)="$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") ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7fffffffffffffff) 1m24.590792274s ago: executing program 4 (id=6269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@report={0x4c, 0x20, 0x1, 0x70bd2b, 0x25dfdbfb, {0x33, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4e21, 0x9, 0x4e22, 0x9, 0xa, 0x0, 0x20, 0x16}}}, 0x4c}, 0x1, 0x0, 0x0, 0x24040881}, 0x0) 1m24.177162434s ago: executing program 4 (id=6275): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f00000001c0)) 1m23.754812326s ago: executing program 4 (id=6279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000fa000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a300000000074000000060a010400000000000000000100000008000b400000000044000480400001800a000100696e6e657200000030000280100005800c0001007061796c6f6164000800014000000000140005800e000100696d6d6564696174650000000900010073797a3000000000050007"], 0xe8}}, 0x0) 1m23.589237025s ago: executing program 4 (id=6281): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m22.94534287s ago: executing program 4 (id=6286): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x203, 0xa0402) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0x1) 1m6.371366968s ago: executing program 34 (id=6286): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x203, 0xa0402) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0x1) 7.962016459s ago: executing program 7 (id=6863): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 7.565416709s ago: executing program 7 (id=6868): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\\\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c= 504) [ 709.019503][T20127] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 709.028145][T20127] F2FS-fs (loop6): build fault injection rate: 17008 [ 709.028167][T20127] F2FS-fs (loop6): build fault injection type: 0x1f8 [ 709.029059][T20127] F2FS-fs (loop6): invalid crc value [ 709.171480][T19507] usb 6-1: Using ep0 maxpacket: 32 [ 709.172234][T19507] usb 6-1: New USB device found: idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 709.173282][T19507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.179358][T19507] usb 6-1: config 0 descriptor?? [ 709.216446][T19507] gspca_main: sq930x-2.14.0 probing 041e:403c [ 709.559371][T20127] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 709.582309][T20127] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 709.582337][T20127] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 709.685646][T19507] gspca_sq930x: ucbus_write failed -71 [ 709.685730][T19507] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 709.706522][T19507] usb 6-1: USB disconnect, device number 103 [ 709.779139][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 709.915235][T16457] CPU: 1 UID: 0 PID: 16457 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 709.915271][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 709.915287][T16457] Call Trace: [ 709.915298][T16457] [ 709.915309][T16457] dump_stack_lvl+0xe8/0x150 [ 709.915355][T16457] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 709.915403][T16457] f2fs_write_end_bio+0x118e/0x15d0 [ 709.915457][T16457] __submit_merged_bio+0x258/0x6a0 [ 709.915496][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.915527][T16457] ? rcu_is_watching+0x16/0xb0 [ 709.915573][T16457] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 709.915618][T16457] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 709.915676][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.915717][T16457] f2fs_write_data_pages+0x2a13/0x36e0 [ 709.915790][T16457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 709.915818][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.915863][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.915893][T16457] ? is_bpf_text_address+0x292/0x2b0 [ 709.915920][T16457] ? is_bpf_text_address+0x26/0x2b0 [ 709.915978][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916007][T16457] ? stack_trace_save+0xa9/0x100 [ 709.916041][T16457] ? __pfx_stack_trace_save+0x10/0x10 [ 709.916085][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916129][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916158][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916188][T16457] ? __lock_acquire+0x1511/0x2de0 [ 709.916253][T16457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 709.916286][T16457] do_writepages+0x338/0x560 [ 709.916315][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916348][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916382][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916412][T16457] ? do_raw_spin_unlock+0xf5/0x200 [ 709.916444][T16457] filemap_fdatawrite+0x1e9/0x2f0 [ 709.916478][T16457] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 709.916551][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916584][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.916619][T16457] ? do_raw_spin_unlock+0xf5/0x200 [ 709.916651][T16457] f2fs_sync_dirty_inodes+0x471/0x970 [ 709.916706][T16457] f2fs_write_checkpoint+0x860/0x24d0 [ 709.916782][T16457] kill_f2fs_super+0x2dc/0x700 [ 709.916820][T16457] ? rcu_do_enqueue+0x616/0x870 [ 709.916853][T16457] ? lockdep_hardirqs_on+0x7b/0x110 [ 709.916883][T16457] ? __pfx_kill_f2fs_super+0x10/0x10 [ 709.916935][T16457] ? __pfx_call_rcu+0x10/0x10 [ 709.916981][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.917010][T16457] ? shrinker_free+0x2a7/0x3b0 [ 709.917042][T16457] deactivate_locked_super+0xbe/0x110 [ 709.917084][T16457] cleanup_mnt+0x204/0x2a0 [ 709.917126][T16457] task_work_run+0x1d9/0x260 [ 709.917162][T16457] ? __pfx_task_work_run+0x10/0x10 [ 709.917207][T16457] exit_to_user_mode_loop+0x204/0x770 [ 709.917241][T16457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.917270][T16457] ? rcu_is_watching+0x16/0xb0 [ 709.917314][T16457] do_syscall_64+0x328/0x520 [ 709.917343][T16457] ? trace_irq_disable+0x3b/0x140 [ 709.917378][T16457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.917412][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.917438][T16457] RIP: 0033:0x7f01f41a0797 [ 709.917462][T16457] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 709.917484][T16457] RSP: 002b:00007ffc92f46088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 709.917512][T16457] RAX: 0000000000000000 RBX: 00007f01f4235f63 RCX: 00007f01f41a0797 [ 709.917531][T16457] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc92f46140 [ 709.917548][T16457] RBP: 00007ffc92f46140 R08: 00007ffc92f47140 R09: 00000000ffffffff [ 709.917566][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc92f471d0 [ 709.917583][T16457] R13: 00007f01f4235f63 R14: 00000000000a9193 R15: 00007ffc92f47210 [ 709.917624][T16457] [ 709.964700][ T10] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 709.969909][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 709.969935][ T10] usb 4-1: config 1 has no interface number 0 [ 709.981447][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.981473][ T10] usb 4-1: Product: syz [ 709.981491][ T10] usb 4-1: Manufacturer: syz [ 709.981509][ T10] usb 4-1: SerialNumber: syz [ 710.002871][T16457] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 710.013467][ T10] usb 4-1: skipping empty audio interface (v1) [ 710.357727][ T10] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 710.379822][ T10] usb 4-1: USB disconnect, device number 101 [ 710.396260][ T5662] udevd[5662]: setting mode of /dev/bus/usb/004/101 to 020664 failed: No such file or directory [ 710.396379][ T5662] udevd[5662]: setting owner of /dev/bus/usb/004/101 to uid=0, gid=0 failed: No such file or directory [ 710.498660][ T5662] udevd[5662]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.885094][T20196] loop0: detected capacity change from 0 to 32768 [ 710.935669][T20196] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 711.019170][T20196] XFS (loop0): Ending clean mount [ 711.581554][T20234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5986'. [ 711.586411][ T5633] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 711.720100][T20236] loop4: detected capacity change from 0 to 64 [ 711.789887][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5989'. [ 712.176066][T20250] netlink: 'syz.6.5994': attribute type 2 has an invalid length. [ 712.204513][ T1118] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 712.250406][T20252] loop7: detected capacity change from 0 to 4096 [ 712.257350][T20252] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 712.369440][ T1118] usb 6-1: Using ep0 maxpacket: 16 [ 712.370280][ T1118] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89 [ 712.371611][ T1118] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.371637][ T1118] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.372708][ T1118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 712.372735][ T1118] usb 6-1: SerialNumber: syz [ 712.380012][T20252] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 712.443518][ T1118] usb 6-1: 0:2 : does not exist [ 712.461708][T20252] ntfs3(loop7): Failed to load $Extend (-2). [ 712.461732][T20252] ntfs3(loop7): Failed to initialize $Extend. [ 712.633901][ T1118] usb 6-1: USB disconnect, device number 104 [ 712.705573][ T6181] udevd[6181]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.781203][T20264] loop0: detected capacity change from 0 to 64 [ 712.885609][T20264] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 713.096978][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6004'. [ 713.165251][T20279] loop7: detected capacity change from 0 to 256 [ 713.444194][T20281] loop0: detected capacity change from 0 to 4096 [ 713.468564][T20281] ntfs3(loop0): ino=0, mi_enum_attr [ 713.515400][T20288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.533284][T20286] loop4: detected capacity change from 0 to 512 [ 713.544677][T20284] No such timeout policy "syz1" [ 713.555022][T20286] EXT4-fs: Ignoring removed bh option [ 713.563168][T20281] ntfs3(loop0): ino=0, mi_enum_attr [ 713.575798][T20286] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 713.584386][T20281] ntfs3(loop0): ino=0, mi_enum_attr [ 713.588580][T20286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 713.603759][T20286] EXT4-fs (loop4): orphan cleanup on readonly fs [ 713.611738][T20286] EXT4-fs error (device loop4): ext4_clear_blocks:893: inode #11: comm syz.4.6010: attempt to clear invalid blocks 1024 len 1 [ 713.611779][T20286] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 713.612581][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 713.612604][ C0] EXT4-fs (loop4): initial error at time 1793837174: ext4_clear_blocks:893: inode 11 [ 713.612639][ C0] EXT4-fs (loop4): last error at time 1793837174: ext4_clear_blocks:893: inode 11 [ 713.619602][T20286] EXT4-fs (loop4): Remounting filesystem read-only [ 713.631136][T20286] EXT4-fs (loop4): 1 truncate cleaned up [ 713.672926][T20286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 713.696567][T20291] netlink: 'syz.5.6012': attribute type 1 has an invalid length. [ 713.781484][T20281] ntfs3(loop0): ino=1a, mi_enum_attr [ 713.822710][T20281] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 713.822710][T20281] [ 714.017334][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 714.056803][T19507] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 714.220615][T19507] usb 8-1: Using ep0 maxpacket: 8 [ 714.221370][T19507] usb 8-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 714.222423][T19507] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.222457][T19507] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1029, setting to 1024 [ 714.227207][T19507] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.227235][T19507] usb 8-1: Product: syz [ 714.227253][T19507] usb 8-1: Manufacturer: syz [ 714.227299][T19507] usb 8-1: SerialNumber: syz [ 714.301083][ T30] audit: type=1326 audit(1793837174.770:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20305 comm="syz.3.6019" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aa39f559 code=0x7ffc0000 [ 714.301151][ T30] audit: type=1326 audit(1793837174.770:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20305 comm="syz.3.6019" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9aa39f559 code=0x7ffc0000 [ 714.304487][T19507] usb 8-1: config 0 descriptor?? [ 714.305270][T20297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 714.431354][ T12] IPVS: starting estimator thread 0... [ 714.468315][T19507] rc_core: IR keymap rc-streamzap not found [ 714.468339][T19507] Registered IR keymap rc-empty [ 714.473354][T19507] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 714.477333][T19507] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input41 [ 714.533838][T20314] IPVS: using max 29 ests per chain, 69600 per kthread [ 714.724155][ T5787] usb 8-1: USB disconnect, device number 4 [ 714.866460][T20328] loop3: detected capacity change from 0 to 256 [ 714.867513][T20328] exfat: Deprecated parameter 'namecase' [ 714.867601][T20328] exfat: Deprecated parameter 'namecase' [ 714.981584][T20328] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 715.016274][T20332] xt_hashlimit: size too large, truncated to 1048576 [ 715.017096][T20333] netlink: 'syz.5.6029': attribute type 6 has an invalid length. [ 715.959358][T20365] xt_hashlimit: max too large, truncated to 1048576 [ 715.959686][T20365] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 716.116598][T20372] usb usb1: usbfs: process 20372 (syz.6.6049) did not claim interface 0 before use [ 716.330170][T20379] autofs4:pid:20379:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 716.591302][ T5787] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 716.621122][T20392] IPv6: Can't replace route, no match found [ 716.759980][ T5787] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 716.767385][ T5787] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 716.767420][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 716.767468][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.783919][ T5787] usb 6-1: config 0 descriptor?? [ 716.827424][T20355] loop3: detected capacity change from 0 to 32768 [ 716.837512][T20355] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6042 (20355) [ 716.859220][T20355] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 716.859257][T20355] BTRFS info (device loop3): using sha256 checksum algorithm [ 717.038392][T20355] BTRFS info (device loop3): turning off barriers [ 717.038437][T20355] BTRFS info (device loop3): enabling free space tree [ 717.043971][ T5787] ath6kl: Failed to submit usb control message: -71 [ 717.044022][ T5787] ath6kl: unable to send the bmi data to the device: -71 [ 717.044040][ T5787] ath6kl: Unable to send get target info: -71 [ 717.047213][ T5787] ath6kl: Failed to init ath6kl core: -71 [ 717.048563][ T5787] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 717.143596][ T5787] usb 6-1: USB disconnect, device number 105 [ 717.252407][T20408] bond2: option arp_all_targets: invalid value (18446744073709551615) [ 717.280599][T20408] bond2 (unregistering): Released all slaves [ 717.340114][T20423] netlink: 'syz.7.6067': attribute type 1 has an invalid length. [ 717.340143][T20423] netlink: 'syz.7.6067': attribute type 1 has an invalid length. [ 717.440259][ T5631] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 718.880221][T20462] loop5: detected capacity change from 0 to 4096 [ 718.884937][T20462] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 718.966560][T20462] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 719.100899][ T30] audit: type=1326 audit(1793837179.192:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.101079][ T30] audit: type=1326 audit(1793837179.201:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.161531][ T30] audit: type=1326 audit(1793837179.256:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.161590][ T30] audit: type=1326 audit(1793837179.256:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.165330][ T30] audit: type=1326 audit(1793837179.256:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.165388][ T30] audit: type=1326 audit(1793837179.256:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.165437][ T30] audit: type=1326 audit(1793837179.256:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.168019][ T30] audit: type=1326 audit(1793837179.256:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20474 comm="syz.4.6093" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f275139f559 code=0x7ffc0000 [ 719.602623][T19509] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 719.766940][T19509] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=1.00 [ 719.768092][T19509] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.776020][T19509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.776047][T19509] usb 4-1: Product: syz [ 719.776066][T19509] usb 4-1: Manufacturer: syz [ 719.776084][T19509] usb 4-1: SerialNumber: syz [ 719.846276][T20495] loop0: detected capacity change from 0 to 1024 [ 719.933158][T20495] hfsplus: failed to extend attributes file [ 719.994638][T20502] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 720.056721][T19509] snd-usb-6fire 4-1:1.0: invalid firmware version in device: e5 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 720.056768][T19509] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -22 [ 720.316076][T19509] usb 4-1: USB disconnect, device number 102 [ 720.371265][T20509] loop4: detected capacity change from 0 to 4096 [ 720.384408][T20509] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 720.453966][T20517] loop6: detected capacity change from 0 to 64 [ 720.471154][T20516] sctp: [Deprecated]: syz.7.6113 (pid 20516) Use of int in max_burst socket option. [ 720.471154][T20516] Use struct sctp_assoc_value instead [ 720.560642][T20509] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 720.599920][T20521] 8021q: VLANs not supported on ipvlan1 [ 720.663917][T20509] ntfs3(loop4): ino=5, "/" indx_read_ra [ 720.663953][T20509] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 720.791154][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6116'. [ 721.115460][T20541] usb usb7: usbfs: process 20541 (syz.7.6125) did not claim interface 0 before use [ 721.587061][T20553] : entered promiscuous mode [ 721.597605][T20549] loop4: detected capacity change from 0 to 4096 [ 721.614133][T20549] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 721.764079][T20558] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 721.764119][T20558] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 721.779885][T20549] ntfs3(loop4): ino=19, mi_enum_attr [ 721.917637][T20549] ntfs3: Cannot use different iocharset when remounting! [ 722.022866][T20562] netlink: 830 bytes leftover after parsing attributes in process `syz.7.6135'. [ 722.320708][T20571] loop7: detected capacity change from 0 to 64 [ 722.381038][T20559] loop6: detected capacity change from 0 to 32768 [ 722.400807][T20559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6134 (20559) [ 722.449266][T20559] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 722.449304][T20559] BTRFS info (device loop6): using sha256 checksum algorithm [ 722.595423][T20559] BTRFS info (device loop6): enabling ssd optimizations [ 722.595455][T20559] BTRFS info (device loop6): turning on async discard [ 722.595475][T20559] BTRFS info (device loop6): enabling free space tree [ 722.867244][T16457] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 722.879163][T20596] loop5: detected capacity change from 0 to 1024 [ 723.011826][T20596] hfsplus: xattr search failed [ 723.225526][T20603] bridge_slave_0: left allmulticast mode [ 723.225557][T20603] bridge_slave_0: left promiscuous mode [ 723.225821][T20603] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.321344][T20596] bio_check_eod: 167 callbacks suppressed [ 723.321369][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321369][T20596] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=1024 [ 723.321399][T20596] buffer_io_error: 166 callbacks suppressed [ 723.321413][T20596] Buffer I/O error on dev loop5, logical block 512, async page read [ 723.321439][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321439][T20596] loop5: rw=8388608, sector=1026, nr_sectors = 2 limit=1024 [ 723.321467][T20596] Buffer I/O error on dev loop5, logical block 513, async page read [ 723.321578][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321578][T20596] loop5: rw=8388608, sector=1028, nr_sectors = 2 limit=1024 [ 723.321606][T20596] Buffer I/O error on dev loop5, logical block 514, async page read [ 723.321631][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321631][T20596] loop5: rw=8388608, sector=1030, nr_sectors = 2 limit=1024 [ 723.321659][T20596] Buffer I/O error on dev loop5, logical block 515, async page read [ 723.321684][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321684][T20596] loop5: rw=8388608, sector=1032, nr_sectors = 2 limit=1024 [ 723.321711][T20596] Buffer I/O error on dev loop5, logical block 516, async page read [ 723.321735][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321735][T20596] loop5: rw=8388608, sector=1034, nr_sectors = 2 limit=1024 [ 723.321762][T20596] Buffer I/O error on dev loop5, logical block 517, async page read [ 723.321874][T20596] syz.5.6144: attempt to access beyond end of device [ 723.321874][T20596] loop5: rw=8388608, sector=1036, nr_sectors = 2 limit=1024 [ 723.332974][T20596] Buffer I/O error on dev loop5, logical block 518, async page read [ 723.333014][T20596] syz.5.6144: attempt to access beyond end of device [ 723.333014][T20596] loop5: rw=8388608, sector=1038, nr_sectors = 2 limit=1024 [ 723.333043][T20596] Buffer I/O error on dev loop5, logical block 519, async page read [ 723.333068][T20596] syz.5.6144: attempt to access beyond end of device [ 723.333068][T20596] loop5: rw=8388608, sector=1040, nr_sectors = 2 limit=1024 [ 723.333094][T20596] Buffer I/O error on dev loop5, logical block 520, async page read [ 723.333124][T20596] syz.5.6144: attempt to access beyond end of device [ 723.333124][T20596] loop5: rw=8388608, sector=1042, nr_sectors = 2 limit=1024 [ 723.333149][T20596] Buffer I/O error on dev loop5, logical block 521, async page read [ 723.390211][T20603] bridge_slave_1: left allmulticast mode [ 723.390257][T20603] bridge_slave_1: left promiscuous mode [ 723.405321][T20603] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.476178][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 723.476198][ T30] audit: type=1800 audit(1793837183.235:98): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6144" name="file1" dev="loop5" ino=20 res=0 errno=-5 [ 723.624145][T20603] bond0: (slave bond_slave_0): Releasing backup interface [ 723.644821][T20611] loop7: detected capacity change from 0 to 512 [ 723.711104][T20611] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.6153: bg 0: block 5: invalid block bitmap [ 723.711143][T20611] loop7: lost filesystem error report for type 5 error -117 [ 723.718643][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 723.718667][ C0] EXT4-fs (loop7): initial error at time 1793837183: ext4_validate_block_bitmap:436 [ 723.718697][ C0] EXT4-fs (loop7): last error at time 1793837183: ext4_validate_block_bitmap:436 [ 723.778911][T20611] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 723.778941][T20611] loop7: lost filesystem error report for type 5 error -117 [ 723.782204][T20615] loop3: detected capacity change from 0 to 64 [ 723.787465][T20611] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.6153: invalid indirect mapped block 3 (level 2) [ 723.787501][T20611] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 723.796572][T20611] EXT4-fs (loop7): 1 orphan inode deleted [ 723.796594][T20611] EXT4-fs (loop7): 1 truncate cleaned up [ 723.803094][T20611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.855402][T20603] bond0: (slave bond_slave_1): Releasing backup interface [ 723.978321][T20603] team0: Port device team_slave_0 removed [ 724.003254][T20603] team0: Port device team_slave_1 removed [ 724.004242][T20603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.004265][T20603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.084604][T19248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.088461][T20603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.088484][T20603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.194640][T20603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 724.609492][T20634] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 725.000069][T20645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6168'. [ 725.407774][T20658] loop3: detected capacity change from 0 to 512 [ 725.422766][T20659] program syz.5.6174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.473142][T20658] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.6175: bad orphan inode 11862016 [ 725.473181][T20658] loop3: lost filesystem error report for type 5 error -117 [ 725.473613][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 725.473642][ C0] EXT4-fs (loop3): initial error at time 1793837185: ext4_orphan_get:1430 [ 725.473670][ C0] EXT4-fs (loop3): last error at time 1793837185: ext4_orphan_get:1430 [ 725.544515][T20658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 725.544650][T20658] ext4 filesystem being mounted at /1043/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.755327][T20632] syz.6.6162 (20632): drop_caches: 2 [ 725.879239][T20669] loop4: detected capacity change from 0 to 8 [ 725.964495][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 726.039364][T20673] loop4: detected capacity change from 0 to 64 [ 726.405370][T19509] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 726.433551][T20687] sctp: [Deprecated]: syz.7.6188 (pid 20687) Use of int in maxseg socket option. [ 726.433551][T20687] Use struct sctp_assoc_value instead [ 726.569020][T19509] usb 7-1: not running at top speed; connect to a high speed hub [ 726.569060][T19509] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 726.570136][T19509] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.570200][T19509] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.635550][T19509] uvcvideo 7-1:1.1: Unknown video format 32595559-0000-0000-0000-000000000000 [ 726.635649][T19509] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 726.635710][T19509] uvcvideo 7-1:1.1: No supported video formats found. [ 726.635727][T19509] uvcvideo 7-1:1.1: Failed to initialize the device (-22). [ 726.636329][T19509] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -22 [ 726.833946][T20701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6194'. [ 726.833986][T20701] vlan0: entered promiscuous mode [ 726.875179][ T1118] usb 7-1: USB disconnect, device number 4 [ 727.065404][T20705] loop0: detected capacity change from 0 to 2048 [ 727.083748][T20705] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 727.088149][T20705] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 727.211277][T20714] netlink: 'syz.5.6202': attribute type 75 has an invalid length. [ 727.880397][ T30] audit: type=1326 audit(1793837187.307:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.880458][ T30] audit: type=1326 audit(1793837187.307:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.889496][ T30] audit: type=1326 audit(1793837187.307:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.889551][ T30] audit: type=1326 audit(1793837187.307:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.889601][ T30] audit: type=1326 audit(1793837187.307:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.889658][ T30] audit: type=1326 audit(1793837187.316:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 727.889708][ T30] audit: type=1326 audit(1793837187.316:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 728.018539][ T30] audit: type=1326 audit(1793837187.418:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 728.018611][ T30] audit: type=1326 audit(1793837187.418:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.0.6213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fe2b9f559 code=0x7ffc0000 [ 728.234806][T20700] loop7: detected capacity change from 0 to 32768 [ 728.243611][T19509] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 728.285202][T20700] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 728.399531][T20723] loop4: detected capacity change from 0 to 32768 [ 728.410940][T19509] usb 6-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 728.415438][T19509] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 728.415492][T19509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.481594][T19509] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 728.494086][T20723] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 728.538655][T20700] XFS (loop7): Ending clean mount [ 728.607338][T20723] XFS (loop4): Ending clean mount [ 728.787058][T19248] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 728.907933][ T5630] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 729.502011][T20785] tmpfs: Bad value for 'mpol' [ 729.615392][T19509] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 729.846749][T19509] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 729.846776][T19509] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 729.869951][T19509] usb 6-1: USB disconnect, device number 106 [ 730.699523][T20817] loop5: detected capacity change from 0 to 128 [ 730.722548][T20817] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 730.722582][T20817] hpfs: filesystem error: improperly stopped [ 730.722601][T20817] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 730.722625][T20817] hpfs: You really don't want any checks? You are crazy... [ 730.722640][T20817] hpfs: Code page index out of array [ 730.722650][T20817] hpfs: code page support is disabled [ 730.822354][T20817] hpfs: hpfs_map_4sectors(): unaligned read [ 730.822452][T20817] hpfs: hpfs_map_4sectors(): unaligned read [ 730.822466][T20817] hpfs: filesystem error: unable to find root dir [ 731.163634][T20823] netlink: 'syz.5.6246': attribute type 2 has an invalid length. [ 731.163660][T20823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6246'. [ 731.347480][T20826] netlink: 'syz.0.6248': attribute type 1 has an invalid length. [ 731.427978][T20831] loop0: detected capacity change from 0 to 256 [ 731.521740][T20834] loop3: detected capacity change from 0 to 128 [ 731.523600][T20835] loop7: detected capacity change from 0 to 512 [ 731.572594][T20803] loop6: detected capacity change from 0 to 32768 [ 731.592522][T20803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6238 (20803) [ 731.640636][T20803] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.640675][T20803] BTRFS info (device loop6): using sha256 checksum algorithm [ 731.674447][T20835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.681132][T20835] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.733607][T20851] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5634] was attempted by ""[20851] [ 731.859009][T20803] BTRFS info (device loop6): enabling ssd optimizations [ 731.859042][T20803] BTRFS info (device loop6): turning on async discard [ 731.859062][T20803] BTRFS info (device loop6): enabling free space tree [ 732.088660][T19248] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.177549][T16457] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 732.250476][T20868] loop4: detected capacity change from 0 to 512 [ 732.308167][T20868] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 732.341102][T20868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.6263: bg 0: block 104: invalid block bitmap [ 732.341139][T20868] loop4: lost filesystem error report for type 5 error -117 [ 732.342591][T20868] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 732.342616][T20868] loop4: lost filesystem error report for type 5 error -117 [ 732.355529][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 732.355553][ C1] EXT4-fs (loop4): initial error at time 1793837191: ext4_validate_block_bitmap:436 [ 732.355583][ C1] EXT4-fs (loop4): last error at time 1793837191: ext4_mb_clear_bb:6678 [ 732.355876][T20868] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.6263: invalid indirect mapped block 1 (level 1) [ 732.355911][T20868] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 732.380097][T20868] EXT4-fs (loop4): 1 truncate cleaned up [ 732.458913][T20868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.777970][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.892769][T20884] loop5: detected capacity change from 0 to 8 [ 732.951514][T20884] SQUASHFS error: Failed to read block 0x26067d: -5 [ 732.951537][T20884] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 732.951553][T20884] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 733.171420][T20891] bridge2: entered promiscuous mode [ 733.381986][T20893] bond1: option arp_all_targets: invalid value (18446744073709551615) [ 733.462673][T20893] bond1 (unregistering): Released all slaves [ 733.637849][T20904] loop3: detected capacity change from 0 to 1024 [ 733.757878][T20904] hfsplus: xattr search failed [ 733.904829][T20910] loop6: detected capacity change from 0 to 4096 [ 734.057508][T20916] netlink: 'syz.0.6282': attribute type 19 has an invalid length. [ 734.057553][T20917] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 734.105586][T20904] bio_check_eod: 168 callbacks suppressed [ 734.105612][T20904] syz.3.6277: attempt to access beyond end of device [ 734.105612][T20904] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=1024 [ 734.105665][T20904] buffer_io_error: 168 callbacks suppressed [ 734.105681][T20904] Buffer I/O error on dev loop3, logical block 512, async page read [ 734.105709][T20904] syz.3.6277: attempt to access beyond end of device [ 734.105709][T20904] loop3: rw=8388608, sector=1026, nr_sectors = 2 limit=1024 [ 734.158314][T20904] Buffer I/O error on dev loop3, logical block 513, async page read [ 734.158460][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158460][T20904] loop3: rw=8388608, sector=1028, nr_sectors = 2 limit=1024 [ 734.158491][T20904] Buffer I/O error on dev loop3, logical block 514, async page read [ 734.158517][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158517][T20904] loop3: rw=8388608, sector=1030, nr_sectors = 2 limit=1024 [ 734.158544][T20904] Buffer I/O error on dev loop3, logical block 515, async page read [ 734.158570][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158570][T20904] loop3: rw=8388608, sector=1032, nr_sectors = 2 limit=1024 [ 734.158597][T20904] Buffer I/O error on dev loop3, logical block 516, async page read [ 734.158628][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158628][T20904] loop3: rw=8388608, sector=1034, nr_sectors = 2 limit=1024 [ 734.158655][T20904] Buffer I/O error on dev loop3, logical block 517, async page read [ 734.158768][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158768][T20904] loop3: rw=8388608, sector=1036, nr_sectors = 2 limit=1024 [ 734.158796][T20904] Buffer I/O error on dev loop3, logical block 518, async page read [ 734.158821][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158821][T20904] loop3: rw=8388608, sector=1038, nr_sectors = 2 limit=1024 [ 734.158848][T20904] Buffer I/O error on dev loop3, logical block 519, async page read [ 734.158873][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158873][T20904] loop3: rw=8388608, sector=1040, nr_sectors = 2 limit=1024 [ 734.158899][T20904] Buffer I/O error on dev loop3, logical block 520, async page read [ 734.158923][T20904] syz.3.6277: attempt to access beyond end of device [ 734.158923][T20904] loop3: rw=8388608, sector=1042, nr_sectors = 2 limit=1024 [ 734.158950][T20904] Buffer I/O error on dev loop3, logical block 521, async page read [ 734.381071][ T30] audit: type=1800 audit(1793837193.308:108): pid=20904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6277" name="file1" dev="loop3" ino=20 res=0 errno=-5 [ 734.443168][T20910] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 734.544438][T20921] netlink: 'syz.0.6285': attribute type 10 has an invalid length. [ 734.544465][T20921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6285'. [ 734.572795][T20921] team0: entered promiscuous mode [ 734.572826][T20921] team0: entered allmulticast mode [ 734.573746][T20921] bridge0: port 1(team0) entered blocking state [ 734.575470][T20921] bridge0: port 1(team0) entered disabled state [ 734.691251][T20919] loop7: detected capacity change from 0 to 32768 [ 734.769552][T20919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6284 (20919) [ 734.800719][T20919] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 734.800751][T20919] BTRFS info (device loop7): using sha256 checksum algorithm [ 735.014569][T20919] BTRFS info (device loop7 state E): enabling free space tree [ 735.014600][T20919] BTRFS info (device loop7 state E): force clearing of disk cache [ 735.014631][T20919] BTRFS info (device loop7 state E): ignoring unknown super block flags [ 735.198587][T20949] loop3: detected capacity change from 0 to 64 [ 735.332794][T19248] BTRFS info (device loop7 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 735.707966][T20959] netlink: zone id is out of range [ 736.054019][T20968] xt_hashlimit: max too large, truncated to 1048576 [ 736.129773][T20968] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 736.537053][T20984] bond1: option arp_all_targets: invalid value (18446744073709551615) [ 736.539067][T20983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.572294][T20984] bond1 (unregistering): Released all slaves [ 736.605791][T20983] cgroup2: Unknown parameter 'measure' [ 736.702034][T16457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.951042][T20997] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 737.053784][T21006] veth1_to_hsr: entered promiscuous mode [ 738.088695][T21022] set_capacity_and_notify: 1 callbacks suppressed [ 738.088717][T21022] loop6: detected capacity change from 0 to 2048 [ 738.176477][T21034] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.223177][T21032] bond1: option arp_all_targets: invalid value (18446744073709551615) [ 738.258828][T21032] bond1 (unregistering): Released all slaves [ 739.341545][T21050] ubi0: attaching mtd0 [ 739.501582][T21050] ubi0: scanning is finished [ 739.501608][T21050] ubi0: empty MTD device detected [ 739.995417][T21050] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 739.995448][T21050] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 739.995470][T21050] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 739.995490][T21050] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 739.995512][T21050] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 739.995532][T21050] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 739.995553][T21050] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2789795110 [ 739.995578][T21050] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 740.008293][T21053] ubi0: background thread "ubi_bgt0d" started, PID 21053 [ 740.420875][T21039] loop3: detected capacity change from 0 to 32768 [ 740.634387][T21039] JBD2: Ignoring recovery information on journal [ 740.663672][T21039] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 740.663704][T21039] JBD2: bad block at offset 32 [ 740.726287][T21039] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 741.116097][T21055] nvme nvme0: rdma_resolve_addr failed (-99). [ 741.381151][T21039] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 741.381198][T21039] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 741.381212][T21039] OCFS2: File system is now read-only. [ 741.381224][T21039] (syz.3.6331,21039,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 741.381251][T21039] (syz.3.6331,21039,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 741.381278][T21039] (syz.3.6331,21039,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 741.381305][T21039] (syz.3.6331,21039,1):ocfs2_add_clusters_in_btree:4877 ERROR: status = -30 [ 741.381332][T21039] (syz.3.6331,21039,1):ocfs2_symlink:1984 ERROR: Failed to extend file to 531 [ 741.381359][T21039] (syz.3.6331,21039,1):ocfs2_symlink:1985 ERROR: status = -30 [ 741.806876][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 742.685449][T19507] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 742.850829][T19507] usb 6-1: Using ep0 maxpacket: 8 [ 742.851597][T19507] usb 6-1: New USB device found: idVendor=2a39, idProduct=3fd3, bcdDevice=0.40 [ 742.855790][T19507] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 742.890578][T19507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.890617][T19507] usb 6-1: Product: syz [ 742.890636][T19507] usb 6-1: Manufacturer: syz [ 742.890654][T19507] usb 6-1: SerialNumber: syz [ 742.973419][T21094] process 'syz.6.6358' launched './file0' with NULL argv: empty string added [ 743.374313][T19507] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 743.378074][T19507] usb 6-1: 2:1: invalid format type 0x1003 is detected, processed as PCM [ 743.378108][T19507] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 743.378130][T19507] usb 6-1: 2:1 : invalid channels 0 [ 743.520382][T19507] usb 6-1: USB disconnect, device number 107 [ 743.642677][ T5662] udevd[5662]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.765959][T21106] usb usb8: usbfs: process 21106 (syz.3.6364) did not claim interface 0 before use [ 743.986859][T21108] loop3: detected capacity change from 0 to 4096 [ 744.172460][T21108] ntfs3(loop3): ino=b, mi_enum_attr [ 744.172499][T21108] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 744.174176][T21108] ntfs3(loop3): Failed to load $Extend (-22). [ 744.174198][T21108] ntfs3(loop3): Failed to initialize $Extend. [ 744.249950][T21108] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 745.651739][T21111] loop6: detected capacity change from 0 to 32768 [ 745.708119][T21111] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6366 (21111) [ 745.928236][T21111] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 745.928276][T21111] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 746.104507][T21111] BTRFS info (device loop6): setting nodatasum [ 746.104543][T21111] BTRFS info (device loop6): allowing degraded mounts [ 746.104563][T21111] BTRFS info (device loop6): setting nodatacow [ 746.104584][T21111] BTRFS info (device loop6): turning on async discard [ 746.104604][T21111] BTRFS info (device loop6): enabling free space tree [ 746.523350][T21121] loop3: detected capacity change from 0 to 32768 [ 747.149461][T16457] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 747.300535][ T93] read_mapping_page failed! [ 747.300552][ T93] ERROR: (device loop3): txCommit: [ 747.300552][ T93] [ 747.342653][ T93] ERROR: (device loop3): remounting filesystem as read-only [ 747.342685][ T93] jfs_write_inode: jfs_commit_inode failed! [ 747.817599][T21160] loop5: detected capacity change from 0 to 512 [ 747.846212][T21160] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 747.907208][T21160] EXT4-fs (loop5): 1 truncate cleaned up [ 747.947285][T21160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.265873][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.389070][T21169] UBIFS error (pid: 21169): cannot open "ubi:0", error -19 [ 749.008104][T21189] loop5: detected capacity change from 0 to 256 [ 749.709678][T21202] loop7: detected capacity change from 0 to 164 [ 749.765372][T21202] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 750.467034][T21220] loop7: detected capacity change from 0 to 1024 [ 750.607541][T21224] loop3: detected capacity change from 0 to 4096 [ 750.658836][T21224] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 750.694293][T21224] ntfs3(loop3): Failed to load $Extend (-22). [ 750.694314][T21224] ntfs3(loop3): Failed to initialize $Extend. [ 750.779689][T21224] ntfs3(loop3): ino=5, "/" indx_read_ra [ 751.585958][T21240] netlink: 'syz.3.6421': attribute type 58 has an invalid length. [ 751.781385][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 751.803041][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 751.817529][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 751.906157][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 751.929153][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 752.256747][T21251] loop6: detected capacity change from 0 to 4096 [ 752.281526][T21251] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 752.553346][T21251] ntfs3(loop6): ino=19, mi_enum_attr [ 752.553381][T21251] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 754.151728][T21299] xfrm0: entered promiscuous mode [ 754.151754][T21299] xfrm0: entered allmulticast mode [ 754.222388][ T5644] Bluetooth: hci7: command tx timeout [ 754.313323][T21241] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.324661][T21241] wg1 speed is unknown, defaulting to 1000 [ 755.496967][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6460'. [ 755.497011][T21331] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6460'. [ 755.497032][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6460'. [ 756.475578][ T5644] Bluetooth: hci7: command tx timeout [ 756.694928][T21241] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.695061][T21241] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.695190][T21241] bridge_slave_0: entered allmulticast mode [ 756.698943][T21241] bridge_slave_0: entered promiscuous mode [ 756.749920][T21241] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.750051][T21241] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.750190][T21241] bridge_slave_1: entered allmulticast mode [ 756.790867][T21241] bridge_slave_1: entered promiscuous mode [ 756.826647][T21357] loop5: detected capacity change from 0 to 1024 [ 756.961798][T21357] hfsplus: invalid file type 0177755 for inode 17 [ 757.098877][T21241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.152910][T21241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.218070][T21373] netlink: 'syz.6.6475': attribute type 1 has an invalid length. [ 757.518149][T21377] vlan0: entered promiscuous mode [ 757.630728][T21241] team0: Port device team_slave_0 added [ 757.648135][T21241] team0: Port device team_slave_1 added [ 757.735954][T21241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.735975][T21241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.736010][T21241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.795651][T21241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.795691][T21241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.830953][T21241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.139795][T21392] loop5: detected capacity change from 0 to 64 [ 758.637909][T21398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.727570][ T5644] Bluetooth: hci7: command tx timeout [ 758.849630][T21407] netlink: 'syz.6.6492': attribute type 1 has an invalid length. [ 758.931029][T21396] ip6gre1: entered allmulticast mode [ 758.954369][T21403] lo speed is unknown, defaulting to 1000 [ 759.098616][T21412] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6491'. [ 759.133547][T21410] loop6: detected capacity change from 0 to 256 [ 759.209482][T21403] lo speed is unknown, defaulting to 1000 [ 759.210336][T21403] lo speed is unknown, defaulting to 1000 [ 759.214197][T21403] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 759.214235][T21403] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 759.214283][T21403] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 759.298621][T21403] lo speed is unknown, defaulting to 1000 [ 759.308847][T21403] lo speed is unknown, defaulting to 1000 [ 759.310705][T21403] lo speed is unknown, defaulting to 1000 [ 759.324777][T21403] lo speed is unknown, defaulting to 1000 [ 759.326840][T21403] lo speed is unknown, defaulting to 1000 [ 759.328743][T21403] lo speed is unknown, defaulting to 1000 [ 759.331143][T21403] lo speed is unknown, defaulting to 1000 [ 759.333004][T21403] lo speed is unknown, defaulting to 1000 [ 759.655797][T21420] netlink: 'syz.5.6497': attribute type 1 has an invalid length. [ 759.671348][T21419] loop3: detected capacity change from 0 to 1024 [ 759.749846][T21241] hsr_slave_0: entered promiscuous mode [ 759.751094][T21241] hsr_slave_1: entered promiscuous mode [ 759.751915][T21241] debugfs: 'hsr0' already exists in 'hsr' [ 759.751937][T21241] Cannot create hsr debugfs directory [ 760.196971][T21419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 760.197097][T21419] ext4 filesystem being mounted at /1103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.515342][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 760.983606][ T5644] Bluetooth: hci7: command tx timeout [ 760.988670][T21445] bond1: option packets_per_slave: invalid value (18446744073709551613) [ 760.988695][T21445] bond1: option packets_per_slave: allowed values 0 - 65535 [ 761.019575][T21445] bond1 (unregistering): Released all slaves [ 761.602671][T21457] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6513'. [ 761.755009][T21465] syz.5.6517: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 761.755107][T21465] CPU: 1 UID: 0 PID: 21465 Comm: syz.5.6517 Not tainted syzkaller #0 PREEMPT(full) [ 761.755135][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 761.755152][T21465] Call Trace: [ 761.755168][T21465] [ 761.755180][T21465] dump_stack_lvl+0xe8/0x150 [ 761.755227][T21465] warn_alloc+0x24d/0x270 [ 761.755258][T21465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 761.755292][T21465] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 761.755330][T21465] ? security_file_ioctl+0xc3/0x2a0 [ 761.755365][T21465] ? _end+0x633fc14a/0x0 [ 761.755399][T21465] ? __pfx_warn_alloc+0x10/0x10 [ 761.755454][T21465] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 761.755489][T21465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 761.755520][T21465] ? __mutex_trylock_common+0x15f/0x270 [ 761.755564][T21465] ? __pfx___mutex_trylock_common+0x10/0x10 [ 761.755605][T21465] ? _end+0x633fc14a/0x0 [ 761.755635][T21465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 761.755668][T21465] ? trace_contention_end+0x3d/0x140 [ 761.755710][T21465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 761.755741][T21465] ? __mutex_lock+0x305/0x15a0 [ 761.755772][T21465] ? srso_alias_return_thunk+0x5/0xfbef5 [ 761.755806][T21465] ? tomoyo_path_number_perm+0x219/0x5f0 [ 761.755849][T21465] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 761.755878][T21465] ? dvb_demux_do_ioctl+0x320/0x540 [ 761.755916][T21465] ? __pfx___mutex_lock+0x10/0x10 [ 761.755949][T21465] ? _end+0x633fc14a/0x0 [ 761.755978][T21465] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 761.756016][T21465] vmalloc_noprof+0xb2/0xe0 [ 761.756044][T21465] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 761.756081][T21465] ? _end+0x633fc14a/0x0 [ 761.756111][T21465] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 761.756157][T21465] dvb_demux_do_ioctl+0x45d/0x540 [ 761.756194][T21465] ? _end+0x633fc14a/0x0 [ 761.756226][T21465] ? _end+0x633fc14a/0x0 [ 761.756256][T21465] dvb_usercopy+0x199/0x2e0 [ 761.756285][T21465] ? _end+0x633fc14a/0x0 [ 761.756315][T21465] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 761.756349][T21465] ? __pfx_dvb_usercopy+0x10/0x10 [ 761.756396][T21465] ? __fget_files+0x2a/0x420 [ 761.756429][T21465] ? _end+0x633fc14a/0x0 [ 761.756458][T21465] ? _end+0x633fc14a/0x0 [ 761.756487][T21465] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 761.756520][T21465] ? _end+0x633fc14a/0x0 [ 761.756549][T21465] dvb_demux_ioctl+0x29/0x40 [ 761.756584][T21465] __se_sys_ioctl+0xfc/0x170 [ 761.756627][T21465] do_syscall_64+0x166/0x520 [ 761.756657][T21465] ? trace_irq_disable+0x3b/0x140 [ 761.756693][T21465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.756728][T21465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.756755][T21465] RIP: 0033:0x7ff40b99f559 [ 761.756779][T21465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.756800][T21465] RSP: 002b:00007ff40c7a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.756827][T21465] RAX: ffffffffffffffda RBX: 00007ff40bc25fa0 RCX: 00007ff40b99f559 [ 761.756847][T21465] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 761.756865][T21465] RBP: 00007ff40ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 761.756882][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.756899][T21465] R13: 00007ff40bc26038 R14: 00007ff40bc25fa0 R15: 00007ffd64baf838 [ 761.756930][T21465] ? _end+0x633fc14a/0x0 [ 761.756969][T21465] [ 762.174151][T21465] Mem-Info: [ 762.174573][T21465] active_anon:10353 inactive_anon:0 isolated_anon:0 [ 762.174573][T21465] active_file:1 inactive_file:59385 isolated_file:0 [ 762.174573][T21465] unevictable:0 dirty:450 writeback:0 [ 762.174573][T21465] slab_reclaimable:12265 slab_unreclaimable:111223 [ 762.174573][T21465] mapped:46524 shmem:531 pagetables:1668 [ 762.174573][T21465] sec_pagetables:0 bounce:0 [ 762.174573][T21465] kernel_misc_reclaimable:0 [ 762.174573][T21465] free:1204791 free_pcp:11058 free_cma:0 [ 762.174854][T21465] Node 0 active_anon:41412kB inactive_anon:0kB active_file:4kB inactive_file:237272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186032kB dirty:1800kB writeback:0kB shmem:2124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14168kB pagetables:6552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 762.175186][T21465] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 762.175404][T21465] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.175737][T21465] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 762.176541][T21465] Node 0 DMA32 free:869984kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41412kB inactive_anon:0kB active_file:4kB inactive_file:237272kB unevictable:0kB writepending:1800kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:42172kB local_pcp:20608kB free_cma:0kB [ 762.176855][T21465] lowmem_reserve[]: 0 0 1 1 1 [ 762.177696][T21465] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 762.283124][T21465] lowmem_reserve[]: 0 0 0 0 0 [ 762.284823][T21465] Node 1 Normal free:3933824kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:268kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 762.285305][T21465] lowmem_reserve[]: 0 0 0 0 0 [ 762.407828][T21465] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 762.471849][T21465] Node 0 DMA32: 2121*4kB (ME) 1788*8kB (UME) 1249*16kB (UME) 1210*32kB (UM) 642*64kB (UME) 254*128kB (UME) 135*256kB (UM) 53*512kB (UME) 8*1024kB (UM) 1*2048kB (E) 157*4096kB (M) = 870100kB [ 762.472066][T21465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 762.472199][T21465] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 10*16kB (UM) 4*32kB (UM) 1*64kB (U) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3933824kB [ 762.472410][T21465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.472432][T21465] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 762.472454][T21465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.472475][T21465] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 762.472496][T21465] 59669 total pagecache pages [ 762.472507][T21465] 0 pages in swap cache [ 762.472517][T21465] Free swap = 124996kB [ 762.472528][T21465] Total swap = 124996kB [ 762.472539][T21465] 2097051 pages RAM [ 762.472549][T21465] 0 pages HighMem/MovableOnly [ 762.472559][T21465] 434240 pages reserved [ 762.472570][T21465] 0 pages cma reserved [ 762.858133][T21241] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 762.897934][T21241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.898842][T21241] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 762.939914][T21241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.941022][T19509] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 762.948619][T21475] netlink: 'syz.7.6521': attribute type 1 has an invalid length. [ 762.948640][T21475] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6521'. [ 762.981422][T21241] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 763.038111][T21241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.048172][T21241] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 763.091988][T21241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.157889][T19509] usb 7-1: Using ep0 maxpacket: 32 [ 763.158632][T19509] usb 7-1: New USB device found: idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 763.159801][T19509] usb 7-1: config 87 has an invalid interface number: 229 but max is 1 [ 763.159829][T19509] usb 7-1: config 87 has no interface number 1 [ 763.159872][T19509] usb 7-1: config 87 interface 229 has no altsetting 0 [ 763.205557][T19509] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.205586][T19509] usb 7-1: Product: syz [ 763.205618][T19509] usb 7-1: Manufacturer: syz [ 763.205636][T19509] usb 7-1: SerialNumber: syz [ 763.533946][T19509] rndis_host 7-1:87.229: probe with driver rndis_host failed with error -22 [ 763.534466][T19509] cdc_acm 7-1:87.229: probe with driver cdc_acm failed with error -22 [ 763.618873][T19509] usb 7-1: USB disconnect, device number 5 [ 763.801703][T21491] vivid-000: ================= START STATUS ================= [ 763.801727][T21491] vivid-000: RDS Tx I/O Mode: Controls [ 763.801757][T21491] vivid-000: RDS Program ID: 32904 [ 763.801783][T21491] vivid-000: RDS Program Type: 3 [ 763.801809][T21491] vivid-000: RDS PS Name: VIVID-TX [ 763.801833][T21491] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 763.801861][T21491] vivid-000: RDS Stereo: true [ 763.801885][T21491] vivid-000: RDS Artificial Head: false [ 763.801909][T21491] vivid-000: RDS Compressed: false [ 763.801934][T21491] vivid-000: RDS Dynamic PTY: false [ 763.801958][T21491] vivid-000: RDS Traffic Announcement: false [ 763.801983][T21491] vivid-000: RDS Traffic Program: true [ 763.802007][T21491] vivid-000: RDS Music: true [ 763.802044][T21491] vivid-000: ================== END STATUS ================== [ 763.943071][T21241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.120583][T21241] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.153517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.153611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.234433][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.234544][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.275027][T19509] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 764.441423][T19509] usb 1-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 764.444688][T19509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.444714][T19509] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 764.444777][T19509] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 764.501797][T19509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.501829][T19509] usb 1-1: Product: syz [ 764.501847][T19509] usb 1-1: Manufacturer: syz [ 764.501865][T19509] usb 1-1: SerialNumber: syz [ 764.848581][T19509] usb 1-1: 0:2 : does not exist [ 764.875754][T21504] loop3: detected capacity change from 0 to 64 [ 765.002373][ T30] audit: type=1800 audit(1793837221.576:109): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6533" name="file1" dev="loop3" ino=5 res=0 errno=-5 [ 765.063549][T19509] usb 1-1: USB disconnect, device number 98 [ 765.131987][T21477] loop5: detected capacity change from 0 to 32768 [ 765.135209][T21477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6523 (21477) [ 765.244903][T21477] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 765.244942][T21477] BTRFS info (device loop5): using sha256 checksum algorithm [ 765.387237][ T5662] udevd[5662]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.462126][T21477] BTRFS info (device loop5): enabling ssd optimizations [ 765.462158][T21477] BTRFS info (device loop5): disabling tree log [ 765.462183][T21477] BTRFS info (device loop5): turning on async discard [ 765.462203][T21477] BTRFS info (device loop5): enabling free space tree [ 765.889578][ T5634] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 767.094777][T21547] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6544'. [ 768.150570][T21540] loop5: detected capacity change from 0 to 32768 [ 768.211819][T21540] JBD2: Ignoring recovery information on journal [ 768.262965][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.263076][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.406657][T21540] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 768.609070][T21241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.009493][ T5634] ocfs2: Unmounting device (7,5) on (node local) [ 769.252254][T21555] loop6: detected capacity change from 0 to 32768 [ 769.435737][T21578] bond1: option tlb_dynamic_lb: invalid value (8) [ 769.436971][T21555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6546 (21555) [ 769.488071][T21578] bond1 (unregistering): Released all slaves [ 769.507371][T21555] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 769.507406][T21555] BTRFS info (device loop6): using sha256 checksum algorithm [ 769.728009][T21555] BTRFS info (device loop6): enabling ssd optimizations [ 769.728039][T21555] BTRFS info (device loop6): turning on sync discard [ 769.728059][T21555] BTRFS info (device loop6): enabling free space tree [ 769.728080][T21555] BTRFS info (device loop6): use zlib compression, level 3 [ 770.010002][T16457] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 770.390809][T21569] loop3: detected capacity change from 0 to 32768 [ 770.453754][T21603] bridge_slave_1: left allmulticast mode [ 770.453785][T21603] bridge_slave_1: left promiscuous mode [ 770.454031][T21603] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.496015][T21569] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.530400][T21603] bridge_slave_0: left allmulticast mode [ 770.530428][T21603] bridge_slave_0: left promiscuous mode [ 770.550885][T21603] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.855906][T21569] XFS (loop3): Ending clean mount [ 771.163068][T21618] loop6: detected capacity change from 0 to 8 [ 771.300007][ T5631] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.338329][T21618] SQUASHFS error: xz decompression failed, data probably corrupt [ 771.338376][T21618] SQUASHFS error: Failed to read block 0x60: -5 [ 771.339283][T21618] SQUASHFS error: xz decompression failed, data probably corrupt [ 771.339314][T21618] SQUASHFS error: Failed to read block 0x60: -5 [ 771.342363][ T30] audit: type=1800 audit(1793837227.429:110): pid=21618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6560" name="file1" dev="loop6" ino=1 res=0 errno=-5 [ 771.910073][T21241] veth0_vlan: entered promiscuous mode [ 771.977127][T21241] veth1_vlan: entered promiscuous mode [ 772.180996][T21241] veth0_macvtap: entered promiscuous mode [ 772.241121][T21241] veth1_macvtap: entered promiscuous mode [ 772.329646][T21241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.369445][T21241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.665326][T21628] loop7: detected capacity change from 0 to 64 [ 772.669477][T21472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.670789][T21472] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.701900][T18205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.703127][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.736943][T21628] hfs: unable to locate alternate MDB [ 772.736961][T21628] hfs: continuing without an alternate MDB [ 772.882411][T21632] netlink: 'syz.5.6566': attribute type 1 has an invalid length. [ 772.882438][T21632] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6566'. [ 773.258796][T21637] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present [ 773.574311][T18205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.574338][T18205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.882281][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.882308][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.788753][T19509] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 775.956623][T19509] usb 4-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 776.029975][T19509] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 776.030010][T19509] usb 4-1: Product: syz [ 776.030028][T19509] usb 4-1: SerialNumber: syz [ 776.070371][T19509] usb 4-1: config 0 descriptor?? [ 776.424449][T21665] loop6: detected capacity change from 0 to 32768 [ 776.450704][T21665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6574 (21665) [ 776.539289][T21689] loop8: detected capacity change from 0 to 512 [ 776.577161][T21665] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 776.577223][T21665] BTRFS info (device loop6): using sha256 checksum algorithm [ 776.630164][T19509] hso 4-1:0.0: Failed to find BULK eps [ 776.717441][T21689] EXT4-fs error (device loop8): ext4_orphan_get:1404: inode #15: comm syz.8.6590: inode has both inline data and extents flags [ 776.717488][T21689] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 776.718382][T21689] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.6590: couldn't read orphan inode 15 (err -117) [ 776.718416][T21689] loop8: lost filesystem error report for type 5 error -117 [ 776.772829][T21689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.884262][T21665] BTRFS info (device loop6): enabling ssd optimizations [ 776.884296][T21665] BTRFS info (device loop6): turning on async discard [ 776.884316][T21665] BTRFS info (device loop6): enabling free space tree [ 776.948639][ T1118] usb 4-1: USB disconnect, device number 103 [ 777.155177][T21241] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.339397][T16457] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 777.605405][ T1118] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 777.817834][ T1118] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 777.826727][ T1118] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 777.826759][ T1118] usb 1-1: config 0 has no interface number 0 [ 777.827546][ T1118] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.035156][ T1118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.035190][ T1118] usb 1-1: Product: syz [ 778.035209][ T1118] usb 1-1: Manufacturer: syz [ 778.035227][ T1118] usb 1-1: SerialNumber: syz [ 778.076906][ T1118] usb 1-1: config 0 descriptor?? [ 778.118415][ T1118] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 778.304737][T21722] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6597'. [ 778.386074][ C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 778.631015][ T1118] usb 1-1: USB disconnect, device number 99 [ 778.695186][T21729] loop8: detected capacity change from 0 to 256 [ 778.709756][ T1118] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 779.120442][T21728] loop3: detected capacity change from 0 to 4096 [ 779.425615][T21728] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 779.528303][T21728] ntfs3(loop3): Failed to load $Extend (-22). [ 779.528340][T21728] ntfs3(loop3): Failed to initialize $Extend. [ 779.767903][ T30] audit: type=1800 audit(1793837235.212:111): pid=21728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6600" name="file1" dev="loop3" ino=30 res=0 errno=-22 [ 779.903326][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6607'. [ 781.006671][T21770] ip6t_hbh: too many supported opts specified [ 781.365771][T21780] loop6: detected capacity change from 0 to 256 [ 781.383235][T21780] exfat: Deprecated parameter 'namecase' [ 781.383307][T21780] exfat: Deprecated parameter 'namecase' [ 781.432976][T21779] loop7: detected capacity change from 0 to 2048 [ 781.458260][T21779] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 781.474603][T21779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 781.479488][T21780] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 781.750190][T21786] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6625'. [ 782.023797][T21793] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6627'. [ 782.024042][T21793] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6627'. [ 783.132055][T19509] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 783.323736][T19509] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 783.346436][T19509] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.369288][T19509] usb 9-1: config 0 descriptor?? [ 783.403599][T21820] loop3: detected capacity change from 0 to 4096 [ 783.457353][T21820] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 783.658778][T19509] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 783.659283][T19509] [drm:udl_init] *ERROR* Selecting channel failed [ 783.774628][T19509] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 783.774658][T19509] [drm] Initialized udl on minor 1 [ 783.826733][T19509] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 783.829969][T19509] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 783.872723][T19509] usb 9-1: USB disconnect, device number 2 [ 784.030173][T21820] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 784.303344][T21830] loop5: detected capacity change from 0 to 512 [ 784.446242][T21830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.446365][T21830] ext4 filesystem being mounted at /1174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.675310][T21838] tmpfs: Using encoding : utf8-12.1.0 [ 784.675339][T21838] tmpfs: Unknown parameter 'str�¶Ø–R_ict_encoding' [ 784.815753][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.960497][T21847] netlink: 'syz.0.6655': attribute type 11 has an invalid length. [ 784.960523][T21847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6655'. [ 785.316900][ T30] audit: type=1326 audit(1793837240.326:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.5.6654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b99f559 code=0x7ffc0000 [ 785.316962][ T30] audit: type=1326 audit(1793837240.326:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.5.6654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b99f559 code=0x7ffc0000 [ 785.488201][ T30] audit: type=1326 audit(1793837240.483:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.5.6654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff40b99f559 code=0x7ffc0000 [ 785.488264][ T30] audit: type=1326 audit(1793837240.483:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.5.6654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b99f559 code=0x7ffc0000 [ 785.488314][ T30] audit: type=1326 audit(1793837240.483:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21854 comm="syz.5.6654" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b99f559 code=0x7ffc0000 [ 786.540385][T21881] [U] ^C [ 786.550548][T21887] loop8: detected capacity change from 0 to 256 [ 786.567053][T21887] exfat: Deprecated parameter 'utf8' [ 786.655246][T21887] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d) [ 786.768746][T21890] netlink: 'syz.0.6673': attribute type 15 has an invalid length. [ 786.797028][T21887] 9pnet_fd: p9_fd_create_unix (21887): problem connecting socket: ./file0: -111 [ 787.240892][T21903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6678'. [ 787.481410][T21908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 787.558099][T21913] loop8: detected capacity change from 0 to 64 [ 787.793493][ T1118] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 787.965905][ T1118] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 787.987977][ T1118] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.988036][ T1118] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.988063][ T1118] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 787.988111][ T1118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.345186][ T1118] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 788.345228][ T1118] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 788.345510][ T1118] cxacru 6-1:1.0: probe with driver cxacru failed with error -22 [ 788.403918][ T1118] usb 6-1: USB disconnect, device number 108 [ 788.459056][T21927] loop7: detected capacity change from 0 to 64 [ 788.665035][T21472] bio_check_eod: 168 callbacks suppressed [ 788.665059][T21472] kworker/u8:10: attempt to access beyond end of device [ 788.665059][T21472] loop7: rw=8388609, sector=2320, nr_sectors = 1 limit=64 [ 788.665090][T21472] buffer_io_error: 168 callbacks suppressed [ 788.665104][T21472] Buffer I/O error on dev loop7, logical block 2320, lost async page write [ 788.665159][T21472] kworker/u8:10: attempt to access beyond end of device [ 788.665159][T21472] loop7: rw=8388609, sector=2321, nr_sectors = 1 limit=64 [ 788.665187][T21472] Buffer I/O error on dev loop7, logical block 2321, lost async page write [ 788.665212][T21472] kworker/u8:10: attempt to access beyond end of device [ 788.665212][T21472] loop7: rw=8388609, sector=2322, nr_sectors = 1 limit=64 [ 788.665240][T21472] Buffer I/O error on dev loop7, logical block 2322, lost async page write [ 788.665264][T21472] kworker/u8:10: attempt to access beyond end of device [ 788.665264][T21472] loop7: rw=8388609, sector=2323, nr_sectors = 1 limit=64 [ 788.665291][T21472] Buffer I/O error on dev loop7, logical block 2323, lost async page write [ 788.783821][T19629] kworker/u8:7: attempt to access beyond end of device [ 788.783821][T19629] loop7: rw=8390657, sector=2320, nr_sectors = 1 limit=64 [ 788.783860][T19629] Buffer I/O error on dev loop7, logical block 2320, lost async page write [ 788.783887][T19629] kworker/u8:7: attempt to access beyond end of device [ 788.783887][T19629] loop7: rw=8390657, sector=2321, nr_sectors = 1 limit=64 [ 788.783915][T19629] Buffer I/O error on dev loop7, logical block 2321, lost async page write [ 788.783938][T19629] kworker/u8:7: attempt to access beyond end of device [ 788.783938][T19629] loop7: rw=8390657, sector=2322, nr_sectors = 1 limit=64 [ 788.783966][T19629] Buffer I/O error on dev loop7, logical block 2322, lost async page write [ 788.783990][T19629] kworker/u8:7: attempt to access beyond end of device [ 788.783990][T19629] loop7: rw=8390657, sector=2323, nr_sectors = 1 limit=64 [ 788.784017][T19629] Buffer I/O error on dev loop7, logical block 2323, lost async page write [ 789.321689][T21936] loop3: detected capacity change from 0 to 1024 [ 789.496137][T21936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.617405][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.166589][T21961] ipt_REJECT: ECHOREPLY no longer supported. [ 790.348907][T21969] loop8: detected capacity change from 0 to 64 [ 790.553804][T19507] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 790.725131][T19507] usb 7-1: Using ep0 maxpacket: 8 [ 790.727432][T19507] usb 7-1: New USB device found: idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 790.737284][T19507] usb 7-1: config 0 has an invalid interface number: 125 but max is 0 [ 790.737312][T19507] usb 7-1: config 0 has no interface number 0 [ 790.737360][T19507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.782948][T19507] usb 7-1: config 0 descriptor?? [ 790.803142][T19507] gspca_main: spca501-2.14.0 probing 0497:c001 [ 791.296806][T19507] gspca_spca501: reg write: error -71 [ 791.296827][T19507] spca501 7-1:0.125: Reg write failed for 0x02,0xa048,0x00 [ 791.296911][T19507] spca501 7-1:0.125: probe with driver spca501 failed with error -22 [ 791.320736][ T1118] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 791.341358][T19507] usb 7-1: USB disconnect, device number 6 [ 791.495308][ T1118] usb 1-1: Using ep0 maxpacket: 16 [ 791.497395][ T1118] usb 1-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 791.529840][ T1118] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 791.546199][ T1118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.546228][ T1118] usb 1-1: Product: syz [ 791.546246][ T1118] usb 1-1: Manufacturer: syz [ 791.546264][ T1118] usb 1-1: SerialNumber: syz [ 791.582420][ T1118] r8152-cfgselector 1-1: Unknown version 0x0000 [ 791.582448][ T1118] r8152-cfgselector 1-1: config 0 descriptor?? [ 792.093987][ T1118] r8152-cfgselector 1-1: USB disconnect, device number 100 [ 792.208166][T21997] loop3: detected capacity change from 0 to 256 [ 792.423892][T21980] loop8: detected capacity change from 0 to 32768 [ 792.453268][T21980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6713 (21980) [ 792.512516][T21980] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 792.512553][T21980] BTRFS info (device loop8): using sha256 checksum algorithm [ 792.657667][T22010] loop5: detected capacity change from 0 to 2048 [ 792.820565][T21980] BTRFS info (device loop8): enabling ssd optimizations [ 792.820596][T21980] BTRFS info (device loop8): turning on async discard [ 792.820617][T21980] BTRFS info (device loop8): enabling free space tree [ 792.835263][T22017] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 793.066617][T22022] loop3: detected capacity change from 0 to 256 [ 793.419338][T21241] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 793.585686][T22027] loop6: detected capacity change from 0 to 256 [ 793.696006][T22027] FAT-fs (loop6): Directory bread(block 1285) failed [ 793.696046][T22027] FAT-fs (loop6): Directory bread(block 1286) failed [ 793.696074][T22027] FAT-fs (loop6): Directory bread(block 1287) failed [ 793.696285][T22027] FAT-fs (loop6): Directory bread(block 1288) failed [ 793.781128][T22027] FAT-fs (loop6): Directory bread(block 1285) failed [ 793.781167][T22027] FAT-fs (loop6): Directory bread(block 1286) failed [ 793.781196][T22027] FAT-fs (loop6): Directory bread(block 1287) failed [ 793.781226][T22027] FAT-fs (loop6): Directory bread(block 1288) failed [ 793.781304][T22027] FAT-fs (loop6): Directory bread(block 1285) failed [ 793.781332][T22027] FAT-fs (loop6): Directory bread(block 1286) failed [ 794.396852][T19509] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 794.560838][T19509] usb 4-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 794.561900][T19509] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.563850][T19509] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 794.563877][T19509] usb 4-1: Product: syz [ 794.563895][T19509] usb 4-1: Manufacturer: syz [ 794.642106][T19509] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 794.748658][T19507] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 794.861343][T19509] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 794.861799][T19509] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 794.861854][T19509] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 794.891395][T19509] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 794.927709][T19507] usb 1-1: Using ep0 maxpacket: 32 [ 794.946600][T19509] usb 4-1: USB disconnect, device number 104 [ 794.984856][T19507] usb 1-1: New USB device found: idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 794.987452][T19507] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 794.989547][T19507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.989573][T19507] usb 1-1: Product: syz [ 794.989591][T19507] usb 1-1: Manufacturer: syz [ 794.989608][T19507] usb 1-1: SerialNumber: syz [ 795.333225][T19507] usb 1-1: selecting invalid altsetting 1 [ 795.553831][T19507] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 795.553950][T19507] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 795.607356][T19507] usb 1-1: USB disconnect, device number 101 [ 796.391294][ T1118] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 796.558926][ T1118] usb 8-1: New USB device found: idVendor=08b7, idProduct=ec00, bcdDevice=0.00 [ 796.562918][ T1118] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.562945][ T1118] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.608263][ T1118] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.608296][ T1118] usb 8-1: SerialNumber: syz [ 796.901200][ T1118] usb 8-1: 0:2 : does not exist [ 797.166801][ T1118] usb 8-1: USB disconnect, device number 5 [ 797.213728][T22085] loop3: detected capacity change from 0 to 1764 [ 797.341246][ T5662] udevd[5662]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.540560][T22083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.543628][T22085] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 797.567604][T22083] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.608151][T22083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.984807][T22083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.016801][T22083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.121537][T22083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 798.121568][T22083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 798.175135][T22083] veth1_macvtap: left promiscuous mode [ 798.183324][T22083] veth0_macvtap: left promiscuous mode [ 798.187494][T22083] veth0_macvtap: entered promiscuous mode [ 798.201158][T22083] veth1_macvtap: entered promiscuous mode [ 798.219735][T22083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.228654][T22083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.230220][T22083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.250896][T22083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.342246][T22083] bond1: left allmulticast mode [ 798.342611][T22083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.368599][T22083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 798.399629][ T13] bridge0: port 1() entered blocking state [ 798.399750][ T13] bridge0: port 1() entered forwarding state [ 798.423648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.423761][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.622480][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.622689][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.622776][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.622927][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.134396][T22118] loop5: detected capacity change from 0 to 128 [ 799.166999][T22118] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 799.205463][T22118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.862637][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6782'. [ 800.230248][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 800.462306][T22150] netlink: 'syz.6.6790': attribute type 6 has an invalid length. [ 800.462334][T22150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6790'. [ 800.701522][T19507] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 800.832162][ T10] usb 4-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 800.888541][T19507] usb 9-1: not running at top speed; connect to a high speed hub [ 800.888588][T19507] usb 9-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 800.894590][T19507] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.894661][T19507] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.968258][T19507] uvcvideo 9-1:1.0: Found UVC 1.00 device (046d:0825) [ 801.095789][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.114688][ T10] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 801.116703][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.311195][T19507] uvcvideo 9-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 801.313143][T19507] uvcvideo 9-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 801.313201][T19507] uvcvideo 9-1:1.1: Failed to initialize the device (-71). [ 801.330367][T19507] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -71 [ 801.464942][T19507] usb 9-1: USB disconnect, device number 3 [ 801.782130][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6803'. [ 802.272108][T19510] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 802.434320][T19507] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 802.443013][T19510] usb 8-1: unable to get BOS descriptor or descriptor too short [ 802.443710][T19510] usb 8-1: not running at top speed; connect to a high speed hub [ 802.443744][T19510] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 802.487964][T19510] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 802.487995][T19510] usb 8-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 802.517150][T19510] usb 8-1: string descriptor 0 read error: -22 [ 802.517295][T19510] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.599359][T19507] usb 9-1: New USB device found: idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 802.600779][T19507] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 802.600807][T19507] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 802.605849][T19507] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.605878][T19507] usb 9-1: Product: syz [ 802.605896][T19507] usb 9-1: Manufacturer: syz [ 802.605939][T19507] usb 9-1: SerialNumber: syz [ 802.666533][T19507] usb 9-1: config 0 descriptor?? [ 802.776251][T19510] snd-usb-6fire 8-1:2.0: unknown device firmware state received from device: [ 802.776304][T19510] 00 00 00 00 00 00 00 00 [ 802.776388][T19510] snd-usb-6fire 8-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 802.920451][T19507] mos7840 9-1:0.0: required endpoints missing [ 803.011855][T19507] usb 8-1: USB disconnect, device number 6 [ 803.144932][T22199] loop5: detected capacity change from 0 to 164 [ 803.288948][T19507] usb 9-1: USB disconnect, device number 4 [ 803.391672][T22201] AppArmor: change_hat: Invalid input '©' [ 803.434459][ C0] usb 4-1: received EP1 urb->status = -71 [ 803.506366][ T10] usb 4-1: unable to init card! (ret=-71) [ 803.506919][ T10] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -71 [ 803.789976][ T10] usb 4-1: USB disconnect, device number 105 [ 804.133610][T22212] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6819'. [ 805.037644][T22231] netlink: 'syz.3.6829': attribute type 1 has an invalid length. [ 805.037673][T22231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6829'. [ 805.152096][T22233] Invalid source name [ 806.237611][T19507] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 806.266046][T22222] loop5: detected capacity change from 0 to 32768 [ 806.413776][T19507] usb 9-1: New USB device found: idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 806.418336][T19507] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 806.459256][T19507] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.459288][T19507] usb 9-1: Product: syz [ 806.459306][T19507] usb 9-1: Manufacturer: syz [ 806.459324][T19507] usb 9-1: SerialNumber: syz [ 806.492217][T19507] usb 9-1: config 0 descriptor?? [ 806.512846][T19507] powermate 9-1:0.0: probe with driver powermate failed with error -5 [ 806.582273][T22222] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 806.793575][T19507] usb 9-1: USB disconnect, device number 5 [ 807.252341][ T5634] ocfs2: Unmounting device (7,5) on (node local) [ 807.528153][T22227] loop6: detected capacity change from 0 to 40427 [ 807.553417][T22227] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 807.553444][T22227] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 807.678969][T22227] F2FS-fs (loop6): invalid crc value [ 808.323683][T22227] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 809.021115][T22296] netlink: 'syz.5.6857': attribute type 2 has an invalid length. [ 809.334142][ T5644] Bluetooth: hci6: command 0x0406 tx timeout [ 810.314256][T22289] loop3: detected capacity change from 0 to 32768 [ 810.345426][T22289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6854 (22289) [ 810.439752][T22289] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 810.439809][T22289] BTRFS info (device loop3): using sha256 checksum algorithm [ 810.730959][T22289] BTRFS info (device loop3): allowing degraded mounts [ 810.730991][T22289] BTRFS info (device loop3): enabling ssd optimizations [ 810.731011][T22289] BTRFS info (device loop3): disabling tree log [ 810.731031][T22289] BTRFS info (device loop3): turning on sync discard [ 810.731051][T22289] BTRFS info (device loop3): enabling free space tree [ 810.842677][T19511] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 810.969772][T19511] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 811.012980][T22341] netlink: 'syz.6.6872': attribute type 1 has an invalid length. [ 811.013043][T22341] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6872'. [ 811.702522][ T5631] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 811.760910][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.402908][T22366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.887437][ T93] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.887687][ T93] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.919469][T19511] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.023092][T22374] loop5: detected capacity change from 0 to 256 [ 813.024205][T22374] exfat: Deprecated parameter 'utf8' [ 813.024226][T22374] exfat: Deprecated parameter 'utf8' [ 813.024319][T22374] exfat: Deprecated parameter 'namecase' [ 813.187354][T22374] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d) [ 813.545262][T22380] loop8: detected capacity change from 0 to 512 [ 813.996439][T22347] loop7: detected capacity change from 0 to 32768 [ 814.060663][T22347] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 814.129952][T22382] loop6: detected capacity change from 0 to 4096 [ 814.159139][T22382] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 814.343234][T22382] ntfs3(loop6): ino=19, mi_enum_attr [ 814.344422][T22347] XFS (loop7): Ending clean mount [ 814.363995][T22382] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 814.724093][T19248] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 814.844888][T22403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6898'. [ 814.966636][T22404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6894'. [ 816.243656][T22426] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 816.281153][T22426] bond1 (unregistering): Released all slaves [ 816.600917][ T30] audit: type=1326 audit(1793837269.204:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 816.600981][ T30] audit: type=1326 audit(1793837269.204:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 816.630090][ T1118] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 816.822480][ T1118] usb 4-1: Using ep0 maxpacket: 32 [ 816.824642][ T1118] usb 4-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 816.850306][ T1118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.850338][ T1118] usb 4-1: Product: syz [ 816.850356][ T1118] usb 4-1: Manufacturer: syz [ 816.850374][ T1118] usb 4-1: SerialNumber: syz [ 816.886213][ T1118] usb 4-1: config 0 descriptor?? [ 816.932813][T22438] loop8: detected capacity change from 0 to 512 [ 816.945864][ T30] audit: type=1326 audit(1793837269.518:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 816.946220][ T30] audit: type=1326 audit(1793837269.527:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 816.946522][ T30] audit: type=1326 audit(1793837269.527:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 816.947009][ T30] audit: type=1326 audit(1793837269.527:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 817.008750][ T30] audit: type=1326 audit(1793837269.564:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 817.096818][ T30] audit: type=1326 audit(1793837269.665:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 817.096905][ T30] audit: type=1326 audit(1793837269.665:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22432 comm="syz.7.6910" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd51799f559 code=0x7ffc0000 [ 817.153526][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 817.169425][T22438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 817.364318][T21241] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.403522][T22410] loop6: detected capacity change from 0 to 32768 [ 817.461782][T22410] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 817.466786][ T1118] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 817.466818][ T1118] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 817.495492][ T33] INFO: task syz.1.5453:18829 blocked for more than 143 seconds. [ 817.495519][ T33] Not tainted syzkaller #0 [ 817.495533][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.495545][ T33] task:syz.1.5453 state:D stack:28584 pid:18829 tgid:18828 ppid:5629 task_flags:0x400040 flags:0x00080002 [ 817.495623][ T33] Call Trace: [ 817.495634][ T33] [ 817.495651][ T33] __schedule+0x17dd/0x5830 [ 817.495718][ T33] ? __pfx___schedule+0x10/0x10 [ 817.495758][ T33] ? schedule+0x90/0x2b0 [ 817.495789][ T33] schedule+0x164/0x2b0 [ 817.495820][ T33] schedule_preempt_disabled+0x13/0x30 [ 817.495848][ T33] __mutex_lock+0x7c4/0x15a0 [ 817.495885][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 817.495922][ T33] ? usbdev_open+0x151/0x760 [ 817.495957][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 817.495989][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.496021][ T33] ? bus_find_device+0x27d/0x2d0 [ 817.496063][ T33] ? __pfx_bus_find_device+0x10/0x10 [ 817.496104][ T33] ? usbdev_open+0xa7/0x760 [ 817.496143][ T33] ? usbdev_open+0xa7/0x760 [ 817.496183][ T33] usbdev_open+0x151/0x760 [ 817.496215][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.496245][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.496282][ T33] ? __pfx_usbdev_open+0x10/0x10 [ 817.496312][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.496347][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.496378][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 817.496411][ T33] chrdev_open+0x4d9/0x600 [ 817.496456][ T33] ? __pfx_chrdev_open+0x10/0x10 [ 817.496496][ T33] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 817.496536][ T33] ? devcgroup_check_permission+0x31/0x8f0 [ 817.496577][ T33] ? __pfx_chrdev_open+0x10/0x10 [ 817.496617][ T33] do_dentry_open+0x80e/0x1360 [ 817.496658][ T33] vfs_open_consume+0x4a/0x350 [ 817.496683][ T33] ? path_openat+0x16e1/0x20f0 [ 817.496723][ T33] path_openat+0x16fc/0x20f0 [ 817.496784][ T33] do_file_open+0x23e/0x4a0 [ 817.496829][ T33] ? __pfx_do_file_open+0x10/0x10 [ 817.553546][ T33] ? _raw_spin_unlock+0x28/0x50 [ 817.553786][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.553972][ T33] ? alloc_fd+0x6af/0x760 [ 817.699972][ T33] do_sys_openat2+0x115/0x200 [ 817.700815][ T33] ? __pfx_do_sys_openat2+0x10/0x10 [ 817.701873][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 817.702082][ T33] ? do_user_addr_fault+0xd3f/0x1480 [ 817.702937][ T33] __x64_sys_openat+0x138/0x170 [ 817.768155][ T33] do_syscall_64+0x166/0x520 [ 817.768486][ T33] ? trace_irq_disable+0x3b/0x140 [ 817.768698][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.769399][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.769602][ T33] RIP: 0033:0x7febed95fd8e [ 817.769805][ T33] RSP: 002b:00007febee84fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 817.770099][ T33] RAX: ffffffffffffffda RBX: 00007febee8506c0 RCX: 00007febed95fd8e [ 817.770270][ T33] RDX: 0000000000001781 RSI: 00007febee84fc00 RDI: ffffffffffffff9c [ 817.770425][ T33] RBP: 00007febee84fc00 R08: 0000000000000000 R09: 0000000000000000 [ 817.770574][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 817.770724][ T33] R13: 00007febedc26038 R14: 00007febedc25fa0 R15: 00007ffd62b63078 [ 817.838932][ T33] [ 817.841626][ T33] [ 817.841626][ T33] Showing all locks held in the system: [ 817.897429][T22410] JBD2: Ignoring recovery information on journal [ 817.922423][ T33] locks held by kworker/u8:0/12: 4, last CPU#0: [ 817.922448][ T33] #0: ffff888033739948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.922534][ T33] #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.922613][ T33] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x336/0xb40 [ 817.922687][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 817.922762][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 817.922782][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 817.922851][ T33] locks held by kworker/u8:4/62: 2, last CPU#0: [ 817.922870][ T33] #0: ffff888050d16948 ((wq_completion)loop6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.922945][ T33] #1: ffffc9000203fc40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.923035][ T33] locks held by kworker/u8:5/93: 4, last CPU#0: [ 817.923054][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.923129][ T33] #1: ffffc90002577c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.923205][ T33] #2: ffff888051790800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 817.923480][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 817.984115][ T33] locks held by kworker/1:2/1118: 7, on CPU#1: [ 817.984138][ T33] #0: ffff888023efa148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.984217][ T33] #1: ffffc90005617c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 817.984299][ T33] #2: ffff88802a5521d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 817.984361][ T33] #3: ffff8880270f11d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 817.984427][ T33] #4: ffff88807ce891a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 818.047575][ T33] #5: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 818.047654][ T33] #6: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 818.047721][ T33] locks held by kworker/u8:8/1151: 4, last CPU#0: [ 818.047740][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.047817][ T33] #1: ffffc90005767c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.047894][ T33] #2: ffff888067990800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 818.047964][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 818.048052][ T33] locks held by dhcpcd/5289: 1, last CPU#0: [ 818.048070][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 818.048143][ T33] locks held by getty/5383: 2, on CPU#0: [ 818.048161][ T33] #0: ffff8880217f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 818.318246][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 818.318350][ T33] locks held by syz-executor/5634: 1, last CPU#0: [ 818.318370][ T33] #0: ffff8880b8228618 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_run_softirq+0x71/0x2e0 [ 818.318442][ T33] locks held by udevd/5662: 4, on CPU#1: [ 818.318461][ T33] #0: ffff888051833098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 818.318538][ T33] #1: ffff888032bb4880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 818.318615][ T33] #2: ffff88807ee99e18 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 818.318690][ T33] #3: ffff8880270f11d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 818.318775][ T33] locks held by kworker/0:6/5787: 2, last CPU#0: [ 818.318794][ T33] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.318872][ T33] #1: ffffc90004f3fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.318952][ T33] locks held by udevd/6181: 3, last CPU#1: [ 818.318970][ T33] #0: ffff888025ab8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 818.319049][ T33] #1: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 818.319125][ T33] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 818.319199][ T33] locks held by udevd/6218: 2, last CPU#0: [ 818.319217][ T33] #0: ffff888025142a68 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x394/0x590 [ 818.319293][ T33] #1: ffff88813ff71bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 818.319369][ T33] locks held by udevd/6237: 4, on CPU#1: [ 818.319388][ T33] #0: ffff8880227cfe18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 818.319463][ T33] #1: ffff8880679f1880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 818.319538][ T33] #2: ffff8880554233c8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 818.319613][ T33] #3: ffff88807cfa11d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 818.319689][ T33] locks held by kworker/0:0/13523: 6, last CPU#0: [ 818.319708][ T33] #0: ffff888023efa148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.344988][ T33] #1: ffffc9000c9efc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.345079][ T33] #2: ffff88802a5ee1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 818.345142][ T33] #3: ffff88807cfa11d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 818.345208][ T33] #4: ffff88807cfa71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 818.345277][ T33] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 818.345358][ T33] locks held by kworker/u8:3/18205: 3, last CPU#0: [ 818.345392][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.345467][ T33] #1: ffffc90004affc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.345545][ T33] #2: ffff8880529d4258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 818.345621][ T33] locks held by syz.1.5453/18829: 1, on CPU#1: [ 818.345640][ T33] #0: ffff88802a5ee1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x760 [ 818.345711][ T33] locks held by syz.4.6286/20923: 1, on CPU#1: [ 818.345730][ T33] #0: ffff88802a5ee1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x760 [ 818.345798][ T33] locks held by syz-executor/21241: 3, last CPU#1: [ 818.345816][ T33] #0: ffff888085584460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 818.345896][ T33] #1: ffff88802b5f0eb8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 818.346248][ T33] #2: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 818.346333][ T33] locks held by kworker/u8:10/21472: 3, last CPU#0: [ 818.346352][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.346428][ T33] #1: ffffc900039bfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.346506][ T33] #2: ffff888034a71258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 818.431542][ T33] locks held by kworker/u8:11/21824: 3, last CPU#0: [ 818.510227][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.511204][ T33] #1: ffffc9001c127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.512067][ T33] #2: ffff8880531ca258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 818.513244][ T33] locks held by kworker/u8:12/22103: 3, last CPU#0: [ 818.513377][ T33] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.514283][ T33] #1: ffffc9002abe7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.616555][ T33] #2: ffff88802b145258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 818.617721][ T33] locks held by syz.6.6901/22410: 1, last CPU#0: [ 818.617858][ T33] #0: ffff88804fc8a0e8 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: sget_fc+0x9cf/0x1a60 [ 818.619074][ T33] locks held by syz.3.6909/22431: 2, last CPU#0: [ 818.619227][ T33] #0: ffff88807fe75900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 818.762862][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 818.763986][ T33] locks held by syz.7.6910/22436: 1, last CPU#0: [ 818.764188][ T33] #0: ffff88807fe71bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 818.765165][ T33] locks held by syz.5.6914/22443: 2, last CPU#0: [ 818.765337][ T33] #0: ffff88807fe73440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 818.766101][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 818.767056][ T33] locks held by syz.0.6913/22442: 1, last CPU#0: [ 818.879957][ T33] #0: ffff8880b823c360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 818.881094][ T33] locks held by kworker/u8:13/22445: 2, last CPU#0: [ 818.881224][ T33] #0: ffff88813fe03948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 818.882124][ T33] #1: ffffc9000ddf7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 819.013258][ T33] [ 819.013464][ T33] ============================================= [ 819.013464][ T33] [ 819.013604][ T33] NMI backtrace for cpu 0 [ 819.013622][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 819.013651][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 819.013666][ T33] Call Trace: [ 819.013677][ T33] [ 819.013688][ T33] dump_stack_lvl+0xe8/0x150 [ 819.013736][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 819.013787][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.013821][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 819.013866][ T33] sys_info+0x135/0x170 [ 819.013900][ T33] watchdog+0x1073/0x10f0 [ 819.013946][ T33] ? watchdog+0x209/0x10f0 [ 819.013989][ T33] kthread+0x38b/0x480 [ 819.014020][ T33] ? __pfx_watchdog+0x10/0x10 [ 819.014053][ T33] ? __pfx_kthread+0x10/0x10 [ 819.014084][ T33] ret_from_fork+0x514/0xb70 [ 819.014119][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 819.014147][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.014178][ T33] ? __switch_to+0xc78/0x1410 [ 819.014222][ T33] ? __pfx_kthread+0x10/0x10 [ 819.014254][ T33] ret_from_fork_asm+0x1a/0x30 [ 819.014301][ T33] [ 819.014381][ T33] Sending NMI from CPU 0 to CPUs 1: [ 819.014473][ C1] NMI backtrace for cpu 1 [ 819.014489][ C1] CPU: 1 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 819.014517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 819.014533][ C1] RIP: 0010:__lock_acquire+0x45f/0x2de0 [ 819.014569][ C1] Code: 8a fc 0f 48 c7 c6 fb 9b 7c 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 48 8b 45 20 25 ff 1f 00 00 48 0f a3 05 f1 96 21 14 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 90 b9 66 95 84 db 75 3f e9 09 ** replaying previous printk message ** [ 819.014569][ C1] Code: 8a fc 0f 48 c7 c6 fb 9b 7c 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 48 8b 45 20 25 ff 1f 00 00 48 0f a3 05 f1 96 21 14 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 90 b9 66 95 84 db 75 3f e9 09 [ 819.014591][ C1] RSP: 0018:ffffc9000351f058 EFLAGS: 00000003 [ 819.014615][ C1] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000000007 [ 819.014632][ C1] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 7a00000000000000 [ 819.014651][ C1] RBP: ffff888035f5ca30 R08: ffffffff817879cf R09: 0000000000000000 [ 819.014670][ C1] R10: dffffc0000000000 R11: ffffffff81b3a880 R12: 0000000000000007 [ 819.014689][ C1] R13: ffff888035f5ca30 R14: ffff888035f5be80 R15: ffff888035f5be80 [ 819.014711][ C1] FS: 00005555837cb500(0000) GS:ffff888123720000(0000) knlGS:0000000000000000 [ 819.014734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.014753][ C1] CR2: 00007f7fe2df62f8 CR3: 00000000596c1000 CR4: 0000000000350ef0 [ 819.014774][ C1] Call Trace: [ 819.014783][ C1] [ 819.014808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.014839][ C1] ? lock_acquire+0x115/0x350 [ 819.014874][ C1] lock_acquire+0x115/0x350 [ 819.014904][ C1] ? unwind_next_frame+0x8f/0x2550 [ 819.014944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.014977][ C1] ? unwind_next_frame+0x8f/0x2550 [ 819.015012][ C1] ? __get_vm_area_node+0x200/0x2f0 [ 819.015037][ C1] ? unwind_next_frame+0x8f/0x2550 [ 819.015073][ C1] unwind_next_frame+0xac/0x2550 [ 819.015108][ C1] ? unwind_next_frame+0x8f/0x2550 [ 819.015146][ C1] ? alloc_vmap_area+0xd10/0x1410 [ 819.015170][ C1] ? unwind_next_frame+0x8f/0x2550 [ 819.015207][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 819.015243][ C1] arch_stack_walk+0x11b/0x150 [ 819.015285][ C1] ? __get_vm_area_node+0x200/0x2f0 [ 819.015313][ C1] stack_trace_save+0xa9/0x100 [ 819.015345][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 819.015376][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015443][ C1] save_stack+0x122/0x230 [ 819.015482][ C1] ? __pfx_save_stack+0x10/0x10 [ 819.015518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015547][ C1] ? __free_frozen_pages+0xc97/0xd90 [ 819.015576][ C1] ? __kasan_populate_vmalloc+0x12d/0x1c0 [ 819.015608][ C1] ? alloc_vmap_area+0xd10/0x1410 [ 819.015631][ C1] ? __get_vm_area_node+0x200/0x2f0 [ 819.015662][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015694][ C1] ? page_ext_put+0x97/0xc0 [ 819.015733][ C1] __reset_page_owner+0x73/0x2a0 [ 819.015773][ C1] __free_frozen_pages+0xc97/0xd90 [ 819.015805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015838][ C1] __kasan_populate_vmalloc+0x12d/0x1c0 [ 819.015875][ C1] alloc_vmap_area+0xd10/0x1410 [ 819.015906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.015939][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 819.015962][ C1] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 819.015996][ C1] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 819.016029][ C1] ? __get_vm_area_node+0x155/0x2f0 [ 819.016058][ C1] __get_vm_area_node+0x200/0x2f0 [ 819.016088][ C1] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 819.016117][ C1] ? __do_replace+0xb2/0x9a0 [ 819.016154][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016185][ C1] ? xt_find_target+0x20f/0x260 [ 819.016223][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016268][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 819.016302][ C1] ? __do_replace+0xb2/0x9a0 [ 819.016334][ C1] vzalloc_noprof+0xb2/0xe0 [ 819.016361][ C1] ? __do_replace+0xb2/0x9a0 [ 819.016394][ C1] __do_replace+0xb2/0x9a0 [ 819.016433][ C1] ? __pfx___do_replace+0x10/0x10 [ 819.016468][ C1] ? _copy_from_user+0x94/0xb0 [ 819.016500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016534][ C1] do_ip6t_set_ctl+0xb45/0xe30 [ 819.016572][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016602][ C1] ? rcu_is_watching+0x16/0xb0 [ 819.016642][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 819.016678][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016715][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.016745][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 819.016778][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 819.016818][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 819.016859][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 819.016900][ C1] nf_setsockopt+0x26f/0x290 [ 819.016932][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 819.016972][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 819.016997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.017031][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 819.017060][ C1] do_syscall_64+0x166/0x520 [ 819.017089][ C1] ? trace_irq_disable+0x3b/0x140 [ 819.017126][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.017156][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.017182][ C1] RIP: 0033:0x7f7fe2ba0d9a [ 819.017204][ C1] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 819.017226][ C1] RSP: 002b:00007ffc1391a3c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 819.017251][ C1] RAX: ffffffffffffffda RBX: 00007ffc1391a450 RCX: 00007f7fe2ba0d9a [ 819.017276][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 819.017292][ C1] RBP: 0000000000000003 R08: 00000000000002e8 R09: 0000000000000000 [ 819.017309][ C1] R10: 00007f7fe2df62a0 R11: 0000000000000202 R12: 00007f7fe2df6240 [ 819.017327][ C1] R13: 00007ffc1391a3ec R14: 0000000000000000 R15: 00007f7fe2df6fc0 [ 819.017358][ C1] [ 819.198693][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 819.749840][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 819.758943][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 819.768985][ T33] Call Trace: [ 819.772253][ T33] [ 819.775173][ T33] vpanic+0x26f/0x710 [ 819.779153][ T33] panic+0xc5/0xd0 [ 819.782867][ T33] ? __pfx_panic+0x10/0x10 [ 819.787292][ T33] watchdog+0x10e7/0x10f0 [ 819.791639][ T33] ? watchdog+0x209/0x10f0 [ 819.796061][ T33] kthread+0x38b/0x480 [ 819.800127][ T33] ? __pfx_watchdog+0x10/0x10 [ 819.804799][ T33] ? __pfx_kthread+0x10/0x10 [ 819.809385][ T33] ret_from_fork+0x514/0xb70 [ 819.813975][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 819.819080][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 819.824714][ T33] ? __switch_to+0xc78/0x1410 [ 819.829403][ T33] ? __pfx_kthread+0x10/0x10 [ 819.833991][ T33] ret_from_fork_asm+0x1a/0x30 [ 819.838766][ T33] [ 819.842015][ T33] Kernel Offset: disabled [ 819.846321][ T33] Rebooting in 86400 seconds..