last executing test programs: 3m44.823153311s ago: executing program 4 (id=124): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) 3m44.339813493s ago: executing program 4 (id=128): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r1}, 0x8) 1m28.293593056s ago: executing program 5 (id=1062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000200)={0xa, 0x4e1f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x9, @private1, 0x9}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000740)="d697684da3", 0x5}], 0x1}}], 0x2, 0x854) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001880)=""/4127, &(0x7f0000000000)=0x1052) 1m28.123075631s ago: executing program 5 (id=1063): poll(0x0, 0x0, 0xd4) landlock_restrict_self(0xffffffffffffffff, 0xc) r0 = landlock_create_ruleset(&(0x7f0000001540)={0x40, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) 1m27.79828385s ago: executing program 5 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m27.653277817s ago: executing program 5 (id=1071): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000012, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 1m27.288624487s ago: executing program 5 (id=1072): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) 1m26.810391681s ago: executing program 33 (id=1072): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) 27.241708824s ago: executing program 6 (id=1491): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 26.731827699s ago: executing program 6 (id=1494): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x80, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000c80)) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) 25.731468901s ago: executing program 6 (id=1498): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000c000/0x1000)=nil) 25.320341644s ago: executing program 6 (id=1500): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 24.695379553s ago: executing program 6 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$fault_inject(r0, &(0x7f00000000c0)='10\x00', 0x3) 23.775733591s ago: executing program 6 (id=1510): set_mempolicy(0x8006, &(0x7f0000000340)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 23.143229464s ago: executing program 34 (id=1510): set_mempolicy(0x8006, &(0x7f0000000340)=0xfff, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000004000480080002000100000008000100000000000400088058010c8054000b8008000a008fee"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 8.255167563s ago: executing program 0 (id=1602): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r1 = syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x69ec, 0xc00, 0x1, 0x50}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x14, 0x0, @fd=r0, 0xc, 0x0, 0x6, 0x2}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) 7.853033978s ago: executing program 0 (id=1605): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB='p\rY'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.312273115s ago: executing program 7 (id=1511): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff00000007050302000200070584020002"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f00000004c0)="0000000c0000000100070001") syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.730502707s ago: executing program 0 (id=1619): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000d40)={0x40, 0x16, 0x7, "83dee49eb72635"}, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x81, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0}) 4.239205194s ago: executing program 1 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.981397867s ago: executing program 1 (id=1632): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, &(0x7f0000000740)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 3.889749729s ago: executing program 0 (id=1633): socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f00000003c0)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f0000000440)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.605831201s ago: executing program 1 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 3.161013651s ago: executing program 1 (id=1638): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) 2.892780651s ago: executing program 0 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*:*', 0x4) 2.813431463s ago: executing program 1 (id=1643): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4010, &(0x7f0000000080), 0x1, 0x9768, &(0x7f0000000140)="$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") syz_mount_image$exfat(0x0, &(0x7f00000098c0)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000009900)) r0 = openat(0xffffffffffffff9c, &(0x7f0000009940)='.\x00', 0x100, 0x52) fsync(r0) 2.73987478s ago: executing program 0 (id=1644): unshare(0x62020600) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000a80), 0x0, 0x49a, &(0x7f0000000ec0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001400)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x0) 2.721283975s ago: executing program 2 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x39) write$P9_RREADDIR(r0, &(0x7f0000000640)={0x59, 0x29, 0x1, {0xd43, [{{0x8, 0x3, 0x2}, 0xffffffffffffffed, 0x0, 0xf, './proc/../file0'}, {{0x0, 0x3, 0x4}, 0x81d1, 0x0, 0x24, './sys/devices/system/cpu/cpu1/online'}]}}, 0x6e) 2.364137168s ago: executing program 2 (id=1647): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330005006d04000012b0000000000000000000000600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"], 0x14b) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x80080, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000a40)="$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") write$UHID_INPUT2(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0c000000400012"], 0x1a) 1.890579507s ago: executing program 3 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001640)={r1}, 0xc) 1.634291708s ago: executing program 3 (id=1650): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x155, 0xaa, '\x00', "705104", 0xc}}}}}}, 0x0) 1.477926838s ago: executing program 3 (id=1651): r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 1.229387536s ago: executing program 2 (id=1652): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20801, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80001, 0x0, 0x0, @by_dev={r2}, {0x0, @stats_create={'@stats_create ', '0+8', 0x20, '/16', ' 1 histogram:10,100,1000'}}}) 997.126875ms ago: executing program 2 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c616773000702000000000200000000", 0x37) 995.519592ms ago: executing program 1 (id=1654): r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x621, 0x0, 0xffff, 0x0, 0x6}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) rename(&(0x7f00000002c0)='./bus\x00', &(0x7f0000002a80)='./file0\x00') 943.125923ms ago: executing program 3 (id=1655): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0) 653.549844ms ago: executing program 2 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000002a00)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3e42, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 456.529763ms ago: executing program 3 (id=1657): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000078c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002380)=""/223, 0xdf}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002940)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/40, 0x28}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 741.059µs ago: executing program 3 (id=1658): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1018ed8, &(0x7f0000000080)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x17a) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x4, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x61) 0s ago: executing program 2 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000002e") kernel console output (not intermixed with test programs): .684405][ T8999] EXT4-fs (loop3): Remounting filesystem read-only [ 240.688587][ T8999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.861186][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.313519][ T5646] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.335819][ T5766] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.407498][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 241.463603][ T5646] usb 4-1: Using ep0 maxpacket: 16 [ 241.464484][ T5646] usb 4-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 241.466048][ T5646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.471382][ T5646] usb 4-1: config 0 descriptor?? [ 241.486734][ T5766] usb 1-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.491321][ T5766] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.491355][ T5766] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.491376][ T5766] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.503109][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 241.503138][ T5766] usb 1-1: Product: syz [ 241.503151][ T5766] usb 1-1: Manufacturer: syz [ 241.503164][ T5766] usb 1-1: SerialNumber: syz [ 241.510517][ T5766] usb 1-1: config 0 descriptor?? [ 241.531421][ T5766] usb 1-1: selecting invalid altsetting 0 [ 241.620981][ T5646] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 241.688922][ T5646] usb 4-1: Detected FT232B [ 241.867999][ T5766] usb 1-1: USB disconnect, device number 12 [ 241.890471][ T5646] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 241.906042][ T5646] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.124574][ T5646] usb 4-1: USB disconnect, device number 9 [ 242.176652][ T5646] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.178368][ T5646] ftdi_sio 4-1:0.0: device disconnected [ 242.245736][ T7081] udevd[7081]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.421317][ T7094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.421358][ T7094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.421385][ T7094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54033 - 0 [ 242.659123][ T7094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.659164][ T7094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.659189][ T7094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54033 - 0 [ 242.795772][ T5646] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.835911][ T7094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.835951][ T7094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.835979][ T7094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54033 - 0 [ 242.953892][ T5646] usb 1-1: Using ep0 maxpacket: 8 [ 242.955906][ T5646] usb 1-1: New USB device found: idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 242.979574][ T5646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 242.979605][ T5646] usb 1-1: Product: syz [ 242.979619][ T5646] usb 1-1: Manufacturer: syz [ 242.979631][ T5646] usb 1-1: SerialNumber: syz [ 243.030146][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.049863][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.051960][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.072016][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.083906][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.190856][ T7094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.190894][ T7094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.190916][ T7094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54033 - 0 [ 243.230239][ T5646] usb 1-1: config 0 descriptor?? [ 243.271937][ T5646] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 243.483122][ T5646] gspca_sn9c2028: read1 error -32 [ 243.506138][ T5646] gspca_sn9c2028: read1 error -32 [ 243.782463][ T5766] usb 1-1: USB disconnect, device number 13 [ 243.911151][ T7094] bridge_slave_1: left allmulticast mode [ 243.911181][ T7094] bridge_slave_1: left promiscuous mode [ 243.911418][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.962805][ T7094] bridge_slave_0: left allmulticast mode [ 243.962835][ T7094] bridge_slave_0: left promiscuous mode [ 243.963092][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.529960][ T7094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.545269][ T7094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.547218][ T7094] bond0 (unregistering): Released all slaves [ 244.912186][ T7094] rxrpc: Leaked peer e3 {1} 127.0.0.1:7 [ 245.214054][ T5645] Bluetooth: hci1: command tx timeout [ 245.288967][ T9034] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.528806][ T9083] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 246.556601][ T5639] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.676207][ T9072] loop0: detected capacity change from 0 to 32768 [ 246.703900][ T5639] usb 4-1: Using ep0 maxpacket: 32 [ 246.705141][ T5639] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 246.706905][ T5639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.800172][ T5639] usb 4-1: config 0 descriptor?? [ 246.818200][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 247.055259][ T5639] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 247.109426][ T5639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.112152][ T5639] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 247.112225][ T5639] usb 4-1: media controller created [ 247.160329][ T5639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.267599][ T5639] az6027: usb out operation failed. (-71) [ 247.269804][ T5639] az6027: usb out operation failed. (-71) [ 247.269824][ T5639] stb0899_attach: Driver disabled by Kconfig [ 247.269835][ T5639] az6027: no front-end attached [ 247.269835][ T5639] [ 247.270335][ T5639] az6027: usb out operation failed. (-71) [ 247.270351][ T5639] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 247.300065][ T5645] Bluetooth: hci1: command tx timeout [ 247.309154][ T9096] loop0: detected capacity change from 0 to 33792 [ 247.328077][ T5639] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 247.364410][ T5639] dvb-usb: schedule remote query interval to 400 msecs. [ 247.364439][ T5639] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 247.394107][ T5639] usb 4-1: USB disconnect, device number 10 [ 247.498898][ T9096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.850412][ T7094] hsr_slave_0: left promiscuous mode [ 247.864293][ T7094] hsr_slave_1: left promiscuous mode [ 247.865467][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.865494][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.912039][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.912066][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.940151][ T5639] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 247.940520][ T7094] veth1_macvtap: left promiscuous mode [ 247.940625][ T7094] veth0_macvtap: left promiscuous mode [ 247.940916][ T7094] veth1_vlan: left promiscuous mode [ 247.941091][ T7094] veth0_vlan: left promiscuous mode [ 247.976981][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.416793][ T9128] loop2: detected capacity change from 0 to 33280 [ 248.487232][ T9128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.487392][ T9128] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.698362][ T9128] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.1097: Directory hole found for htree leaf block 0 [ 248.800623][ T9138] loop3: detected capacity change from 0 to 1024 [ 248.802882][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.373734][ T5645] Bluetooth: hci1: command tx timeout [ 249.519210][ T9141] loop1: detected capacity change from 0 to 32768 [ 249.532576][ T9141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1100 (9141) [ 249.565768][ T9141] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.565803][ T9141] BTRFS info (device loop1): using crc32c checksum algorithm [ 249.618148][ T7094] team0 (unregistering): Port device team_slave_1 removed [ 249.667910][ T7094] team0 (unregistering): Port device team_slave_0 removed [ 249.734817][ T9141] BTRFS info (device loop1): enabling ssd optimizations [ 249.734851][ T9141] BTRFS info (device loop1): turning on flush-on-commit [ 249.734867][ T9141] BTRFS info (device loop1): enabling free space tree [ 249.734882][ T9141] BTRFS info (device loop1): enabling auto defrag [ 249.734899][ T9141] BTRFS info (device loop1): use lzo compression, level 1 [ 249.734919][ T9141] BTRFS info (device loop1): max_inline set to 4096 [ 249.908621][ T5637] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.218371][ T9124] : renamed from bond0 (while UP) [ 250.320510][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6 [ 250.663515][ T5736] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 250.816689][ T5736] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.816748][ T5736] usb 3-1: New USB device found: idVendor=200c, idProduct=100b, bcdDevice=0.40 [ 250.818344][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.866553][ T5736] usb 3-1: string descriptor 0 read error: -22 [ 250.866711][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.297050][ T9189] loop1: detected capacity change from 0 to 2048 [ 251.307531][ T9189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27743, location=27743 [ 251.357681][ T9189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27999, location=27999 [ 251.357716][ T9189] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 251.357730][ T9189] UDF-fs: Scanning with blocksize 512 failed [ 251.416607][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.416801][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.417020][ T9034] bridge_slave_0: entered allmulticast mode [ 251.419491][ T9034] bridge_slave_0: entered promiscuous mode [ 251.451197][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.451459][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.451639][ T9034] bridge_slave_1: entered allmulticast mode [ 251.453598][ T5645] Bluetooth: hci1: command tx timeout [ 251.472898][ T9189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27743, location=27743 [ 251.476828][ T9034] bridge_slave_1: entered promiscuous mode [ 251.515912][ T9189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.572965][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.588878][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.627527][ T5736] usb 3-1: current rate 47896 is different from the runtime rate 48000 [ 251.693239][ T9034] team0: Port device team_slave_0 added [ 251.726202][ T9034] team0: Port device team_slave_1 added [ 251.995032][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.995053][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.995082][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.011927][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.011944][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.011969][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.176538][ T9205] loop1: detected capacity change from 0 to 2048 [ 252.231094][ T5736] usb 3-1: USB disconnect, device number 11 [ 252.234893][ T9205] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 252.262173][ T9205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.416674][ T9034] hsr_slave_0: entered promiscuous mode [ 252.422776][ T9034] hsr_slave_1: entered promiscuous mode [ 252.434303][ T9034] debugfs: 'hsr0' already exists in 'hsr' [ 252.434325][ T9034] Cannot create hsr debugfs directory [ 252.640081][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7 [ 253.426944][ T9219] loop0: detected capacity change from 0 to 32768 [ 253.443800][ T9219] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1116 (9219) [ 253.528722][ T9219] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.528765][ T9219] BTRFS info (device loop0): using blake2b checksum algorithm [ 253.725372][ T9219] BTRFS info (device loop0): enabling ssd optimizations [ 253.725404][ T9219] BTRFS info (device loop0): turning on async discard [ 253.725420][ T9219] BTRFS info (device loop0): enabling free space tree [ 253.957936][ T9034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.986021][ T34] audit: type=1800 audit(1794431792.746:63): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1116" name="file1" dev="loop0" ino=260 res=0 errno=-22 [ 253.988022][ T9034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.991050][ T9034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 254.045043][ T9034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.052280][ T9034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.070836][ T9034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.080890][ T9034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 254.109132][ T9034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.186252][ T5633] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 254.701291][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.802008][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.891048][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.891179][ T7094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.943052][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.943169][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.004786][ T2256] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 255.155009][ T2256] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 255.158070][ T2256] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.158103][ T2256] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.158128][ T2256] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.161390][ T2256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 255.161421][ T2256] usb 2-1: Product: syz [ 255.161436][ T2256] usb 2-1: Manufacturer: syz [ 255.161450][ T2256] usb 2-1: SerialNumber: syz [ 255.261674][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8 [ 255.287776][ T9285] loop0: detected capacity change from 0 to 256 [ 255.358134][ T9258] loop2: detected capacity change from 0 to 32768 [ 255.389265][ T9285] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 255.389575][ T9285] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 255.402361][ T2256] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.465786][ T9258] ea_get: invalid extended attribute [ 255.465808][ T9258] ffff8880667eb828: 04 00 00 00 .... [ 255.606546][ T5832] usb 2-1: USB disconnect, device number 11 [ 255.631814][ T5832] usblp0: removed [ 255.682485][ T34] audit: type=1800 audit(1794431794.436:64): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1129" name="file1" dev="loop0" ino=58 res=0 errno=-22 [ 256.179740][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.179806][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.661092][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.710229][ T9297] loop3: detected capacity change from 0 to 32768 [ 256.718612][ T9297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1131 (9297) [ 256.813962][ T9297] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.814001][ T9297] BTRFS info (device loop3): using crc32c checksum algorithm [ 256.839580][ T9321] input: syz0 as /devices/virtual/input/input17 [ 257.019642][ T9297] BTRFS info (device loop3): enabling ssd optimizations [ 257.019692][ T9297] BTRFS info (device loop3): turning on flush-on-commit [ 257.019709][ T9297] BTRFS info (device loop3): enabling free space tree [ 257.019725][ T9297] BTRFS info (device loop3): enabling auto defrag [ 257.019744][ T9297] BTRFS info (device loop3): use lzo compression, level 1 [ 257.019763][ T9297] BTRFS info (device loop3): max_inline set to 4096 [ 257.358657][ T5635] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.012813][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.062455][ T9034] veth0_vlan: entered promiscuous mode [ 258.097647][ T9034] veth1_vlan: entered promiscuous mode [ 258.161454][ T9034] veth0_macvtap: entered promiscuous mode [ 258.200778][ T9364] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 258.200811][ T9364] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.221904][ T9034] veth1_macvtap: entered promiscuous mode [ 258.225974][ T9364] vhci_hcd vhci_hcd.0: Device attached [ 258.373506][ T2256] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 258.382098][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.383921][ T1235] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 258.422645][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.446296][ T1235] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 258.450661][ T9345] loop0: detected capacity change from 0 to 40427 [ 258.486564][ T9345] F2FS-fs (loop0): build fault injection rate: 14 [ 258.486593][ T9345] F2FS-fs (loop0): build fault injection type: 0x30e4 [ 258.504205][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.508002][ T9345] F2FS-fs (loop0): invalid crc value [ 258.527458][ T2256] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.532062][ T2256] usb 2-1: config 0 has no interfaces? [ 258.532107][ T2256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.552832][ T2256] usb 2-1: config 0 descriptor?? [ 258.706521][ T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.752850][ T9372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.855898][ T9345] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.906821][ T9345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 258.920358][ T65] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.925327][ T90] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.941892][ T9367] usbip_core: unknown command [ 258.941908][ T9367] vhci_hcd: unknown pdu 0 [ 258.941920][ T9367] usbip_core: unknown command [ 259.012116][ T5766] usb 2-1: USB disconnect, device number 12 [ 259.015524][ T6979] vhci_hcd vhci_hcd.1: stop threads [ 259.015562][ T6979] vhci_hcd vhci_hcd.1: release socket [ 259.025825][ T1235] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 259.041923][ T6979] vhci_hcd vhci_hcd.1: disconnect device [ 259.197167][ T9345] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x10e/0xf80 [ 259.198417][ T6979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.198439][ T6979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.369744][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.369770][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.891382][ T9387] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 259.979411][ T9389] 9pnet_fd: p9_fd_create_unix (9389): problem connecting socket: ./proc/file0: -2 [ 261.191478][ T9421] loop1: detected capacity change from 0 to 33280 [ 261.360555][ T9421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.360698][ T9421] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.669338][ T9407] loop6: detected capacity change from 0 to 40427 [ 261.711248][ T9407] F2FS-fs (loop6): invalid crc value [ 261.787216][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.092997][ T9407] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 262.170180][ T9407] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 262.205921][ T34] audit: type=1400 audit(1794431800.966:65): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=9451 comm="syz.0.1177" name="foo" offset=35 [ 262.439045][ T9407] syz.6.1160: attempt to access beyond end of device [ 262.439045][ T9407] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 262.456703][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.6.1160 Not tainted syzkaller #0 PREEMPT(full) [ 262.456737][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 262.456751][ T9407] Call Trace: [ 262.456763][ T9407] [ 262.456773][ T9407] dump_stack_lvl+0xe8/0x150 [ 262.456811][ T9407] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 262.456842][ T9407] f2fs_write_end_bio+0x2c0/0x1310 [ 262.456875][ T9407] ? blkg_put+0x18d/0x240 [ 262.456904][ T9407] ? bio_endio+0x984/0xac0 [ 262.456929][ T9407] ? f2fs_write_end_io+0x258/0x300 [ 262.456959][ T9407] __submit_merged_bio+0x258/0x6a0 [ 262.456980][ T9407] ? rcu_is_watching+0x16/0xb0 [ 262.457007][ T9407] f2fs_submit_merged_write+0x2cc/0x610 [ 262.457037][ T9407] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 262.457057][ T9407] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 262.457094][ T9407] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 262.457124][ T9407] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 262.457157][ T9407] f2fs_writeback_node_caches+0xf8c/0x1160 [ 262.457204][ T9407] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 262.457261][ T9407] ? f2fs_write_checkpoint+0xe25/0x24d0 [ 262.457294][ T9407] ? up_write+0x19d/0x4a0 [ 262.457324][ T9407] f2fs_write_checkpoint+0xe5b/0x24d0 [ 262.457404][ T9407] f2fs_issue_checkpoint+0x424/0x6f0 [ 262.457439][ T9407] ? ktime_get+0x45/0x220 [ 262.457477][ T9407] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 262.457502][ T9407] ? __lock_acquire+0x747/0x2de0 [ 262.457536][ T9407] ? __lock_acquire+0x747/0x2de0 [ 262.457599][ T9407] ? lock_acquire+0x115/0x350 [ 262.457652][ T9407] ? f2fs_sync_fs+0x1f2/0x3c0 [ 262.457689][ T9407] __f2fs_ioctl+0x49dd/0xded0 [ 262.457722][ T9407] ? lock_acquire+0x115/0x350 [ 262.457763][ T9407] ? is_bpf_text_address+0x26/0x2b0 [ 262.457797][ T9407] ? is_bpf_text_address+0x292/0x2b0 [ 262.457819][ T9407] ? is_bpf_text_address+0x26/0x2b0 [ 262.457844][ T9407] ? __pfx___f2fs_ioctl+0x10/0x10 [ 262.457868][ T9407] ? kernel_text_address+0xa5/0xe0 [ 262.457898][ T9407] ? __kernel_text_address+0xd/0x30 [ 262.457925][ T9407] ? unwind_get_return_address+0x4d/0x90 [ 262.457955][ T9407] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.457986][ T9407] ? arch_stack_walk+0xfb/0x150 [ 262.458031][ T9407] ? stack_trace_save+0xa9/0x100 [ 262.458061][ T9407] ? __pfx_stack_trace_save+0x10/0x10 [ 262.458088][ T9407] ? kasan_save_track+0x51/0x90 [ 262.458120][ T9407] ? stack_depot_save_flags+0x33/0x840 [ 262.458150][ T9407] ? __lock_acquire+0x747/0x2de0 [ 262.458183][ T9407] ? kasan_save_track+0x51/0x90 [ 262.458210][ T9407] ? kasan_save_track+0x3f/0x90 [ 262.458238][ T9407] ? kasan_save_free_info+0x40/0x50 [ 262.458263][ T9407] ? __kasan_slab_free+0x70/0x90 [ 262.458293][ T9407] ? kfree+0x1c7/0x650 [ 262.458315][ T9407] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 262.458336][ T9407] ? security_file_ioctl+0xc3/0x2a0 [ 262.458366][ T9407] ? __se_sys_ioctl+0x47/0x170 [ 262.458386][ T9407] ? do_syscall_64+0x171/0x540 [ 262.458416][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.458493][ T9407] ? kasan_quarantine_put+0xbb/0x1f0 [ 262.458535][ T9407] ? tomoyo_path_number_perm+0x219/0x5f0 [ 262.458559][ T9407] ? tomoyo_path_number_perm+0x219/0x5f0 [ 262.458585][ T9407] ? do_vfs_ioctl+0x11d5/0x15a0 [ 262.458609][ T9407] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 262.458647][ T9407] ? do_futex+0x458/0x4e0 [ 262.458692][ T9407] ? __fget_files+0x29/0x3f0 [ 262.458734][ T9407] ? f2fs_ioctl+0x135/0x250 [ 262.458756][ T9407] ? __pfx_f2fs_ioctl+0x10/0x10 [ 262.458779][ T9407] __se_sys_ioctl+0xfc/0x170 [ 262.458803][ T9407] do_syscall_64+0x171/0x540 [ 262.458824][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.458844][ T9407] ? clear_bhb_loop+0x70/0xc0 [ 262.458869][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.458888][ T9407] RIP: 0033:0x00007f0f37ba8fd9 [ 262.458911][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.458928][ T9407] RSP: 002b:00007f0f38a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.458950][ T9407] RAX: ffffffffffffffda RBX: 00007f0f37e25fa0 RCX: 00007f0f37ba8fd9 [ 262.458965][ T9407] RDX: 0000000000000000 RSI: 000000000000f507 RDI: 0000000000000003 [ 262.458977][ T9407] RBP: 00007f0f37c37fed R08: 0000000000000000 R09: 0000000000000000 [ 262.458989][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.459000][ T9407] R13: 00007f0f37e26038 R14: 00007f0f37e25fa0 R15: 00007ffce49c88a8 [ 262.459037][ T9407] [ 262.462745][ T9407] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 262.610449][ T5832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.763993][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 262.765970][ T5832] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.770561][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.785709][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.785738][ T5832] usb 1-1: Product: syz [ 262.785752][ T5832] usb 1-1: Manufacturer: syz [ 262.785766][ T5832] usb 1-1: SerialNumber: syz [ 262.802631][ T5832] usb 1-1: config 0 descriptor?? [ 262.837909][ T5832] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.837947][ T5832] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 263.079971][ T9468] jffs2: notice: (9468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 263.111806][ T9472] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 263.413549][ T5646] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 263.463009][ T5832] em28xx 1-1:0.0: chip ID is em2750 [ 263.516839][ T9474] loop3: detected capacity change from 0 to 33792 [ 263.570378][ T5646] usb 2-1: New USB device found: idVendor=14e1, idProduct=6000, bcdDevice=0.00 [ 263.573217][ T5646] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.573255][ T5646] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.573282][ T5646] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.575257][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.589232][ T5646] usb 2-1: config 0 descriptor?? [ 263.604522][ T9474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.890007][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.893065][ T5832] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 263.893095][ T5832] em28xx 1-1:0.0: board has no eeprom [ 263.998548][ T5832] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 263.998582][ T5832] em28xx 1-1:0.0: dvb set to bulk mode. [ 264.000498][ T995] em28xx 1-1:0.0: Binding DVB extension [ 264.043233][ T5832] usb 1-1: USB disconnect, device number 14 [ 264.090325][ T5832] em28xx 1-1:0.0: Disconnecting em28xx [ 264.180940][ T5646] input: HID 14e1:6000 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:14E1:6000.000C/input/input18 [ 264.472572][ T995] em28xx 1-1:0.0: Registering input extension [ 264.476261][ T5832] em28xx 1-1:0.0: Closing input extension [ 264.533649][ T5646] hid-penmount 0003:14E1:6000.000C: input,hidraw0: USB HID v36.2c Joystick [HID 14e1:6000] on usb-dummy_hcd.1-1/input0 [ 264.571002][ T5646] usb 2-1: USB disconnect, device number 13 [ 264.624748][ T1235] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.766312][ T9495] fido_id[9495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 264.789491][ T1235] usb 4-1: Using ep0 maxpacket: 32 [ 264.799051][ T1235] usb 4-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 264.802838][ T1235] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 264.802874][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 264.802900][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 264.802923][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 264.802949][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 264.881572][ T1235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.881607][ T1235] usb 4-1: Product: syz [ 264.881622][ T1235] usb 4-1: Manufacturer: syz [ 264.881637][ T1235] usb 4-1: SerialNumber: syz [ 264.958187][ T1235] usb 4-1: config 0 descriptor?? [ 265.098953][ T5832] em28xx: Freeing device [ 265.198876][ T995] hid-generic 0003:0001:0001.000D: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 265.419017][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 265.419075][ T1235] input input20: Device does not respond to id packet M [ 265.420026][ T1235] input input20: Device does not respond to id packet P [ 265.467292][ T6979] tipc: Subscription rejected, illegal request [ 265.468439][ T9502] fido_id[9502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.469463][ T9505] loop6: detected capacity change from 0 to 1024 [ 265.560471][ T9505] hfsplus: bad catalog entry type [ 265.633072][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.633134][ T1235] input input20: Device does not respond to id packet B [ 265.637727][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.637780][ T1235] input input20: Device does not respond to id packet N [ 265.639771][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.647407][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.649112][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.650170][ T1235] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 265.684942][ T1235] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 265.815561][ T9508] ªªªªªª: renamed from vlan0 (while UP) [ 265.875874][ T1235] usb 4-1: USB disconnect, device number 11 [ 266.130735][ T9517] loop1: detected capacity change from 0 to 256 [ 266.382358][ T9523] ªªªªª»: renamed from vlan0 (while UP) [ 266.554599][ T9531] kvm [9528]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 267.144423][ T9551] loop2: detected capacity change from 0 to 1024 [ 267.306681][ T34] audit: type=1800 audit(1794431806.066:66): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1213" name="file1" dev="loop2" ino=20 res=0 errno=-22 [ 267.316824][ T34] audit: type=1800 audit(1794431806.076:67): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1213" name="file1" dev="loop2" ino=20 res=0 errno=-22 [ 268.063058][ T9536] loop1: detected capacity change from 0 to 32768 [ 268.096879][ T9536] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.207633][ T9536] XFS (loop1): Ending clean mount [ 268.467636][ T5637] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 269.124009][ T9569] loop2: detected capacity change from 0 to 32768 [ 269.130746][ T9569] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1219 (9569) [ 269.180327][ T9569] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 269.180366][ T9569] BTRFS info (device loop2): using sha256 checksum algorithm [ 269.401362][ T9569] BTRFS info (device loop2): enabling ssd optimizations [ 269.401395][ T9569] BTRFS info (device loop2): turning on async discard [ 269.401423][ T9569] BTRFS info (device loop2): enabling free space tree [ 269.555611][ T9377] kernel read not supported for file /sysvipc/msg (pid: 9377 comm: kworker/0:8) [ 269.659692][ T5636] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 270.373535][ T1235] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.571603][ T1235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.571661][ T1235] usb 2-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 270.595328][ T1235] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 270.595374][ T1235] usb 2-1: can't read configurations, error -71 [ 271.187562][ T9653] loop2: detected capacity change from 0 to 32768 [ 271.187687][ T9660] loop3: detected capacity change from 0 to 33280 [ 271.229562][ T9653] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 271.229587][ T9653] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 271.309680][ T9653] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 271.309902][ T9660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.310028][ T9660] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.348804][ T5766] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 271.348832][ T5766] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 271.354363][ T5831] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.370231][ T9660] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.1242: Directory hole found for htree leaf block 0 [ 271.480192][ T9642] loop6: detected capacity change from 0 to 32768 [ 271.504804][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 271.507574][ T5831] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.510683][ T5831] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.510715][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.510738][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.510758][ T5831] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.510799][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.516082][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.517782][ T9642] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1235 (9642) [ 271.589934][ T9642] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 271.589964][ T9642] BTRFS info (device loop6): using blake2b checksum algorithm [ 271.638087][ T5766] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 271.638302][ T5766] gfs2: fsid=syz:syz.0: jid=0: Done [ 271.638351][ T9653] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 271.818422][ T9642] BTRFS info (device loop6): enabling ssd optimizations [ 271.818458][ T9642] BTRFS info (device loop6): using spread ssd allocation scheme [ 271.818477][ T9642] BTRFS info (device loop6): turning off barriers [ 271.818494][ T9642] BTRFS info (device loop6): enabling free space tree [ 271.818511][ T9642] BTRFS info (device loop6): enabling auto defrag [ 271.820901][ T9642] BTRFS info (device loop6): force zlib compression, level 3 [ 271.849591][ T5831] usb 1-1: GET_CAPABILITIES returned 0 [ 271.849644][ T5831] usbtmc 1-1:16.0: can't read capabilities [ 271.917698][ T9034] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 272.191294][ T5831] usb 1-1: USB disconnect, device number 15 [ 273.183042][ T9664] loop1: detected capacity change from 0 to 32768 [ 273.214178][ T9664] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1243 (9664) [ 273.248898][ T9664] BTRFS info (device loop1): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 273.248938][ T9664] BTRFS info (device loop1): using sha256 checksum algorithm [ 273.392359][ T9664] BTRFS info (device loop1): enabling ssd optimizations [ 273.392394][ T9664] BTRFS info (device loop1): turning on async discard [ 273.392412][ T9664] BTRFS info (device loop1): enabling free space tree [ 273.419451][ T9714] jffs2: notice: (9714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.591450][ T5637] BTRFS info (device loop1): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 273.839483][ T9695] device-mapper: table: 248:2: verity: Hash device is too small (-E2BIG) [ 273.839515][ T9695] device-mapper: ioctl: error adding target to table [ 274.211269][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 275.633614][ T5832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 275.785029][ T5832] usb 3-1: New USB device found: idVendor=0b48, idProduct=1006, bcdDevice=1.00 [ 275.789861][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.798139][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.798169][ T5832] usb 3-1: Product: syz [ 275.798183][ T5832] usb 3-1: Manufacturer: syz [ 275.798196][ T5832] usb 3-1: SerialNumber: syz [ 275.912500][ T9761] loop3: detected capacity change from 0 to 40427 [ 275.935355][ T9761] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 275.935391][ T9761] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 275.941211][ T9761] F2FS-fs (loop3): Image doesn't support compression [ 275.971533][ T9761] F2FS-fs (loop3): invalid crc value [ 276.040940][ T5832] dvbdev: DVB: registering new adapter (DEC3000-s) [ 276.059950][ T5832] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 276.205880][ T1235] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.245966][ T5832] ttusb_dec_send_command: command bulk message failed: error -71 [ 276.276041][ T5832] usb 3-1: USB disconnect, device number 12 [ 276.292493][ T9761] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 276.353594][ T1235] usb 1-1: Using ep0 maxpacket: 8 [ 276.355420][ T1235] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.358589][ T1235] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 276.358629][ T1235] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.358643][ T1235] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.358658][ T1235] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.358672][ T1235] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.358700][ T1235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.423558][ T9761] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 276.423590][ T9761] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 276.423642][ T9761] F2FS-fs (loop3): Start checkpoint disabled! [ 276.509970][ T9761] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 276.515891][ T9761] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.515919][ T9761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 276.562104][ T9772] loop6: detected capacity change from 0 to 40427 [ 276.607553][ T1235] usb 1-1: GET_CAPABILITIES returned 0 [ 276.607609][ T1235] usbtmc 1-1:16.0: can't read capabilities [ 276.641735][ T9772] F2FS-fs (loop6): invalid crc value [ 276.836544][ T5832] usb 1-1: USB disconnect, device number 16 [ 276.847047][ T9772] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 276.933101][ T9795] loop1: detected capacity change from 0 to 33280 [ 276.934934][ T9772] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 276.934962][ T9772] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 276.934986][ T9772] F2FS-fs (loop6): Start checkpoint disabled! [ 276.995937][ T9795] EXT4-fs (loop1): invalid journal inode [ 276.996024][ T9795] EXT4-fs (loop1): can't get journal size [ 277.024040][ T9795] EXT4-fs (loop1): 1 truncate cleaned up [ 277.025843][ T9795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.035071][ T9772] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 277.049752][ T9772] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 277.360486][ T14] kworker/u8:1: attempt to access beyond end of device [ 277.360486][ T14] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 277.360574][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 277.360598][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 277.360611][ T14] Workqueue: writeback wb_workfn (flush-7:6) [ 277.360648][ T14] Call Trace: [ 277.360656][ T14] [ 277.360666][ T14] dump_stack_lvl+0xe8/0x150 [ 277.360701][ T14] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 277.360728][ T14] f2fs_write_end_bio+0xf7d/0x1310 [ 277.360790][ T14] __submit_merged_bio+0x258/0x6a0 [ 277.360813][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.360842][ T14] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 277.360869][ T14] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 277.360922][ T14] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 277.360952][ T14] ? ret_from_fork_asm+0x1a/0x30 [ 277.361029][ T14] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 277.361121][ T14] ? lock_acquire+0x115/0x350 [ 277.361179][ T14] ? f2fs_inode_chksum_verify+0x15e/0x850 [ 277.361210][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361246][ T14] ? __pfx_f2fs_inode_chksum_verify+0x10/0x10 [ 277.361286][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361320][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361358][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361409][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361461][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.361488][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.361519][ T14] do_writepages+0x338/0x560 [ 277.361546][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361582][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.361613][ T14] __writeback_single_inode+0x13f/0x12e0 [ 277.361646][ T14] ? do_raw_spin_unlock+0xf5/0x200 [ 277.361678][ T14] writeback_sb_inodes+0x9de/0x1af0 [ 277.361705][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.361752][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.361794][ T14] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 277.361892][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.361915][ T14] ? queue_io+0x2d3/0x470 [ 277.361948][ T14] wb_writeback+0x41c/0xad0 [ 277.361980][ T14] ? queue_io+0x261/0x470 [ 277.362016][ T14] ? __pfx_wb_writeback+0x10/0x10 [ 277.362039][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.362082][ T14] wb_workfn+0x431/0x10f0 [ 277.362129][ T14] ? __pfx_wb_workfn+0x10/0x10 [ 277.362159][ T14] ? trace_hrtimer_start+0x82/0x200 [ 277.362193][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.362228][ T14] ? lock_acquire+0x115/0x350 [ 277.362266][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.362288][ T14] ? process_scheduled_works+0x97a/0x1630 [ 277.362320][ T14] process_scheduled_works+0xc3d/0x1630 [ 277.362388][ T14] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.362428][ T14] ? assign_work+0x3cf/0x5d0 [ 277.362467][ T14] worker_thread+0xa47/0xfb0 [ 277.362522][ T14] kthread+0x38b/0x480 [ 277.362548][ T14] ? __pfx_worker_thread+0x10/0x10 [ 277.362566][ T14] ? __pfx_kthread+0x10/0x10 [ 277.362593][ T14] ret_from_fork+0x514/0xb70 [ 277.362622][ T14] ? __pfx_ret_from_fork+0x10/0x10 [ 277.362646][ T14] ? __switch_to+0xc78/0x1410 [ 277.362671][ T14] ? __pfx_kthread+0x10/0x10 [ 277.362699][ T14] ret_from_fork_asm+0x1a/0x30 [ 277.362743][ T14] [ 277.407073][ T34] audit: type=1800 audit(1794431816.166:68): pid=9807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1262" name="file1" dev="loop3" ino=10 res=0 errno=-22 [ 277.545009][ T9806] loop2: detected capacity change from 0 to 1024 [ 277.553566][ T14] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 277.553938][ T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 277.553962][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 277.553976][ T14] Workqueue: writeback wb_workfn (flush-7:6) [ 277.554013][ T14] Call Trace: [ 277.554021][ T14] [ 277.554029][ T14] dump_stack_lvl+0xe8/0x150 [ 277.554062][ T14] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 277.554090][ T14] f2fs_write_end_bio+0xf7d/0x1310 [ 277.554135][ T14] __submit_merged_bio+0x258/0x6a0 [ 277.554155][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.554180][ T14] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 277.554205][ T14] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 277.554252][ T14] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 277.554289][ T14] ? ret_from_fork_asm+0x1a/0x30 [ 277.554359][ T14] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 277.554438][ T14] ? lock_acquire+0x115/0x350 [ 277.554492][ T14] ? f2fs_inode_chksum_verify+0x15e/0x850 [ 277.554520][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554549][ T14] ? __pfx_f2fs_inode_chksum_verify+0x10/0x10 [ 277.554589][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554620][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554655][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554700][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554745][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.554768][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.554795][ T14] do_writepages+0x338/0x560 [ 277.554819][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.554851][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.554878][ T14] __writeback_single_inode+0x13f/0x12e0 [ 277.554906][ T14] ? do_raw_spin_unlock+0xf5/0x200 [ 277.554935][ T14] writeback_sb_inodes+0x9de/0x1af0 [ 277.554961][ T14] ? __lock_acquire+0x747/0x2de0 [ 277.555004][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.555034][ T14] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 277.555105][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.555125][ T14] ? queue_io+0x2d3/0x470 [ 277.555153][ T14] wb_writeback+0x41c/0xad0 [ 277.555181][ T14] ? queue_io+0x261/0x470 [ 277.555211][ T14] ? __pfx_wb_writeback+0x10/0x10 [ 277.555233][ T14] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 277.555281][ T14] wb_workfn+0x431/0x10f0 [ 277.555322][ T14] ? __pfx_wb_workfn+0x10/0x10 [ 277.555348][ T14] ? trace_hrtimer_start+0x82/0x200 [ 277.555379][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.555411][ T14] ? lock_acquire+0x115/0x350 [ 277.555446][ T14] ? rcu_is_watching+0x16/0xb0 [ 277.555468][ T14] ? process_scheduled_works+0x97a/0x1630 [ 277.555496][ T14] process_scheduled_works+0xc3d/0x1630 [ 277.555560][ T14] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.555595][ T14] ? assign_work+0x3cf/0x5d0 [ 277.555629][ T14] worker_thread+0xa47/0xfb0 [ 277.555680][ T14] kthread+0x38b/0x480 [ 277.555703][ T14] ? __pfx_worker_thread+0x10/0x10 [ 277.555720][ T14] ? __pfx_kthread+0x10/0x10 [ 277.555744][ T14] ret_from_fork+0x514/0xb70 [ 277.555771][ T14] ? __pfx_ret_from_fork+0x10/0x10 [ 277.555793][ T14] ? __switch_to+0xc78/0x1410 [ 277.555815][ T14] ? __pfx_kthread+0x10/0x10 [ 277.555840][ T14] ret_from_fork_asm+0x1a/0x30 [ 277.555879][ T14] [ 277.576887][ T14] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 277.642891][ T9806] fuse: Bad value for 'fd' [ 278.227957][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.292997][ T13] kworker/u8:0: attempt to access beyond end of device [ 278.292997][ T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.293096][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 278.293119][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 278.293133][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 278.293169][ T13] Call Trace: [ 278.293178][ T13] [ 278.293186][ T13] dump_stack_lvl+0xe8/0x150 [ 278.293227][ T13] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 278.293257][ T13] f2fs_write_end_bio+0xf7d/0x1310 [ 278.293307][ T13] __submit_merged_bio+0x258/0x6a0 [ 278.293329][ T13] ? rcu_is_watching+0x16/0xb0 [ 278.293357][ T13] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 278.293384][ T13] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 278.293437][ T13] __f2fs_write_data_pages+0x2cd0/0x72b0 [ 278.293469][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 278.293524][ T13] ? kfree+0x1c7/0x650 [ 278.293548][ T13] ? cfg80211_inform_single_bss_data+0xd9d/0x1df0 [ 278.293574][ T13] ? ieee80211_bss_info_update+0x791/0xa50 [ 278.293603][ T13] ? ieee80211_ibss_rx_queued_mgmt+0x1dc0/0x2df0 [ 278.293633][ T13] ? process_scheduled_works+0xc3d/0x1630 [ 278.293663][ T13] ? worker_thread+0xa47/0xfb0 [ 278.293681][ T13] ? kthread+0x38b/0x480 [ 278.293717][ T13] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 278.293807][ T13] ? ieee80211_inform_bss+0xc79/0x1180 [ 278.293863][ T13] ? cfg80211_inform_single_bss_data+0x1398/0x1df0 [ 278.293894][ T13] ? f2fs_inode_chksum_verify+0x15e/0x850 [ 278.293932][ T13] ? __pfx_f2fs_inode_chksum_verify+0x10/0x10 [ 278.293976][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294011][ T13] ? look_up_lock_class+0x57/0x110 [ 278.294034][ T13] ? register_lock_class+0x31/0x2e0 [ 278.294079][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294113][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294155][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294205][ T13] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 278.294229][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.294259][ T13] do_writepages+0x338/0x560 [ 278.294286][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294321][ T13] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 278.294349][ T13] __writeback_single_inode+0x13f/0x12e0 [ 278.294381][ T13] ? do_raw_spin_unlock+0xf5/0x200 [ 278.294412][ T13] writeback_sb_inodes+0x9de/0x1af0 [ 278.294438][ T13] ? __lock_acquire+0x747/0x2de0 [ 278.294483][ T13] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 278.294514][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 278.294591][ T13] ? rcu_is_watching+0x16/0xb0 [ 278.294612][ T13] ? queue_io+0x2d3/0x470 [ 278.294640][ T13] wb_writeback+0x41c/0xad0 [ 278.294668][ T13] ? queue_io+0x261/0x470 [ 278.294701][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 278.294725][ T13] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 278.294765][ T13] wb_workfn+0x431/0x10f0 [ 278.294810][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 278.294837][ T13] ? trace_hrtimer_start+0x82/0x200 [ 278.294873][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.294907][ T13] ? lock_acquire+0x115/0x350 [ 278.294944][ T13] ? rcu_is_watching+0x16/0xb0 [ 278.294967][ T13] ? process_scheduled_works+0x97a/0x1630 [ 278.294999][ T13] process_scheduled_works+0xc3d/0x1630 [ 278.295068][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.295119][ T13] ? assign_work+0x3cf/0x5d0 [ 278.295155][ T13] worker_thread+0xa47/0xfb0 [ 278.295206][ T13] kthread+0x38b/0x480 [ 278.295231][ T13] ? __pfx_worker_thread+0x10/0x10 [ 278.295249][ T13] ? __pfx_kthread+0x10/0x10 [ 278.295276][ T13] ret_from_fork+0x514/0xb70 [ 278.295304][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 278.295329][ T13] ? __switch_to+0xc78/0x1410 [ 278.295354][ T13] ? __pfx_kthread+0x10/0x10 [ 278.295381][ T13] ret_from_fork_asm+0x1a/0x30 [ 278.295420][ T13] [ 278.301407][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 278.319157][ T9377] loop3: lost filesystem error report for type 5 error -108 [ 278.725781][ T9817] misc userio: Can't change port extra on an already running userio instance [ 279.045614][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1287'. [ 279.285167][ T9837] loop3: detected capacity change from 0 to 33280 [ 279.351771][ T9837] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 279.351890][ T9837] System zones: 0-2, 18-18, 34-35 [ 279.416892][ T9837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.417033][ T9837] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.627827][ T34] audit: type=1400 audit(1794431818.386:69): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9848 comm="syz.6.1296" [ 279.671798][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.995313][ T9863] loop3: detected capacity change from 0 to 32896 [ 280.023006][ T9863] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.023723][ T9863] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.089804][ T9863] fscrypt (loop3, inode 12): Unsupported encryption flags (0x51) [ 280.180009][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.211617][ T9869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.543679][ T1235] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 280.608299][ T9880] loop1: detected capacity change from 0 to 1764 [ 280.694565][ T1235] usb 7-1: Using ep0 maxpacket: 16 [ 280.695548][ T1235] usb 7-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 280.700395][ T1235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.709992][ T1235] usb 7-1: config 0 descriptor?? [ 280.757827][ T1235] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 280.939572][ T1235] usb 7-1: Detected FT232B [ 281.148223][ T1235] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 281.164729][ T1235] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 281.381319][ T1235] usb 7-1: USB disconnect, device number 2 [ 281.425279][ T1235] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 281.425922][ T1235] ftdi_sio 7-1:0.0: device disconnected [ 281.780181][ T9912] input: syz1 as /devices/virtual/input/input24 [ 282.287656][ T9932] syz.3.1336: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.287923][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT(full) [ 282.287948][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 282.287961][ T9932] Call Trace: [ 282.287971][ T9932] [ 282.287981][ T9932] dump_stack_lvl+0xe8/0x150 [ 282.288022][ T9932] warn_alloc+0x24d/0x270 [ 282.288062][ T9932] ? __pfx_warn_alloc+0x10/0x10 [ 282.288101][ T9932] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 282.288127][ T9932] ? __pfx_hlock_conflict+0x10/0x10 [ 282.288160][ T9932] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 282.288217][ T9932] ? lock_acquire+0x115/0x350 [ 282.288271][ T9932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.288306][ T9932] ? down_write+0x166/0x200 [ 282.288333][ T9932] ? __pfx_down_write+0x10/0x10 [ 282.288360][ T9932] ? disksize_store+0x121/0x3e0 [ 282.288387][ T9932] vzalloc_noprof+0xb2/0xe0 [ 282.288414][ T9932] ? disksize_store+0x121/0x3e0 [ 282.288442][ T9932] disksize_store+0x121/0x3e0 [ 282.288465][ T9932] ? sysfs_kf_write+0x166/0x260 [ 282.288493][ T9932] ? __pfx_sysfs_kf_write+0x10/0x10 [ 282.288513][ T9932] kernfs_fop_write_iter+0x3a4/0x540 [ 282.288557][ T9932] vfs_write+0x612/0xba0 [ 282.288602][ T9932] ? __pfx_vfs_write+0x10/0x10 [ 282.288639][ T9932] ? __fget_files+0x37a/0x3f0 [ 282.288678][ T9932] ? fdget+0x1ac/0x250 [ 282.288717][ T9932] ksys_write+0x150/0x270 [ 282.288752][ T9932] ? __pfx_ksys_write+0x10/0x10 [ 282.288800][ T9932] do_syscall_64+0x171/0x540 [ 282.288823][ T9932] ? trace_irq_disable+0x3b/0x140 [ 282.288843][ T9932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.288866][ T9932] ? clear_bhb_loop+0x70/0xc0 [ 282.288893][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.288915][ T9932] RIP: 0033:0x00007fd047da8fd9 [ 282.288943][ T9932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.288962][ T9932] RSP: 002b:00007fd045ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.288984][ T9932] RAX: ffffffffffffffda RBX: 00007fd048025fa0 RCX: 00007fd047da8fd9 [ 282.289000][ T9932] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 282.289014][ T9932] RBP: 00007fd047e37fed R08: 0000000000000000 R09: 0000000000000000 [ 282.289027][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.289040][ T9932] R13: 00007fd048026038 R14: 00007fd048025fa0 R15: 00007ffebe91b1b8 [ 282.289081][ T9932] [ 282.371788][ T9932] Mem-Info: [ 282.371809][ T9932] active_anon:8587 inactive_anon:0 isolated_anon:0 [ 282.371809][ T9932] active_file:816 inactive_file:57524 isolated_file:0 [ 282.371809][ T9932] unevictable:0 dirty:513 writeback:0 [ 282.371809][ T9932] slab_reclaimable:11773 slab_unreclaimable:103297 [ 282.371809][ T9932] mapped:30487 shmem:542 pagetables:1755 [ 282.371809][ T9932] sec_pagetables:0 bounce:0 [ 282.371809][ T9932] kernel_misc_reclaimable:0 [ 282.371809][ T9932] free:1256295 free_pcp:12092 free_cma:0 [ 282.371866][ T9932] Node 0 active_anon:34348kB inactive_anon:0kB active_file:3264kB inactive_file:229896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121948kB dirty:2048kB writeback:0kB shmem:2168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:6568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.371923][ T9932] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.371973][ T9932] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.372032][ T9932] lowmem_reserve[]: 0 2462 2463 2463 2463 [ 282.372070][ T9932] Node 0 DMA32 free:1084728kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34304kB inactive_anon:0kB active_file:3264kB inactive_file:229896kB unevictable:0kB writepending:2048kB zspages:0kB present:3129332kB managed:2521708kB mlocked:0kB bounce:0kB free_pcp:38664kB local_pcp:13180kB free_cma:0kB [ 282.372128][ T9932] lowmem_reserve[]: 0 0 1 1 1 [ 282.372163][ T9932] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 282.372217][ T9932] lowmem_reserve[]: 0 0 0 0 0 [ 282.372251][ T9932] Node 1 Normal free:3925092kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:9696kB local_pcp:1608kB free_cma:0kB [ 282.372328][ T9932] lowmem_reserve[]: 0 0 0 0 0 [ 282.372364][ T9932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.372542][ T9932] Node 0 DMA32: 2557*4kB (UM) 1111*8kB (UME) 536*16kB (UME) 405*32kB (UM) 322*64kB (M) 76*128kB (UM) 30*256kB (ME) 17*512kB (UME) 6*1024kB (UME) 4*2048kB (UME) 240*4096kB (UM) = 1084748kB [ 282.372721][ T9932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 282.385430][ T9932] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 4*64kB (UM) 4*128kB (UM) 7*256kB (UM) 1*512kB (M) 2*1024kB (UM) 2*2048kB (U) 956*4096kB (M) = 3925092kB [ 282.385597][ T9932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.385614][ T9932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.385630][ T9932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.385646][ T9932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.385661][ T9932] 58790 total pagecache pages [ 282.385669][ T9932] 0 pages in swap cache [ 282.385676][ T9932] Free swap = 124996kB [ 282.385684][ T9932] Total swap = 124996kB [ 282.385692][ T9932] 2097051 pages RAM [ 282.385699][ T9932] 0 pages HighMem/MovableOnly [ 282.385706][ T9932] 434667 pages reserved [ 282.385712][ T9932] 0 pages cma reserved [ 282.989443][ T9950] loop0: detected capacity change from 0 to 256 [ 283.544563][ T995] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 283.579872][ T9968] loop6: detected capacity change from 0 to 8 [ 283.669950][ T9968] SQUASHFS error: Failed to read block 0x636: -5 [ 283.669978][ T9968] SQUASHFS error: Unable to read metadata cache entry [634] [ 283.687688][ T9971] mmap: syz.2.1352 (9971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.709615][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 283.720452][ T995] usb 1-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=2.00 [ 283.734339][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.754147][ T995] usb 1-1: config 0 descriptor?? [ 283.775140][ T995] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 283.971168][ T995] usb 1-1: Detected FT232B [ 284.059543][ T9975] loop6: detected capacity change from 0 to 33792 [ 284.114911][ T9975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.182337][ T995] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 284.211822][ T995] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 284.371344][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.451245][ T9377] usb 1-1: USB disconnect, device number 17 [ 284.470073][ T9377] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 284.474197][ T9377] ftdi_sio 1-1:0.0: device disconnected [ 284.833295][ T9991] pimreg: tun_chr_ioctl cmd 2147767520 [ 285.157160][ T9997] loop2: detected capacity change from 0 to 4096 [ 285.180372][ T9987] loop1: detected capacity change from 0 to 32768 [ 285.193154][ T9997] NILFS (loop2): invalid segment: Checksum error in segment payload [ 285.193184][ T9997] NILFS (loop2): trying rollback from an earlier position [ 285.223987][T10001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.319897][ T9997] NILFS (loop2): recovery complete [ 285.333761][T10002] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.373239][ T9987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 285.850911][ T5637] ocfs2: Unmounting device (7,1) on (node local) [ 286.178585][T10023] bonding: unable to delete non-existent b [ 286.288169][ T995] kernel write not supported for file /snd/seq (pid: 995 comm: kworker/1:2) [ 286.782052][T10040] loop2: detected capacity change from 0 to 2048 [ 286.876351][T10046] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.890884][T10024] loop0: detected capacity change from 0 to 32768 [ 286.924658][T10042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.982142][T10040] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 287.032621][T10040] Remounting filesystem read-only [ 287.170815][T10051] loop1: detected capacity change from 0 to 33280 [ 287.263059][T10051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.582831][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.645551][T10067] FAULT_INJECTION: forcing a failure. [ 287.645551][T10067] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 287.645588][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.2.1390 Not tainted syzkaller #0 PREEMPT(full) [ 287.645613][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 287.645626][T10067] Call Trace: [ 287.645636][T10067] [ 287.645646][T10067] dump_stack_lvl+0xe8/0x150 [ 287.645686][T10067] should_fail_ex+0x3eb/0x540 [ 287.645724][T10067] _copy_from_user+0x2d/0xb0 [ 287.645762][T10067] kstrtouint_from_user+0xd6/0x180 [ 287.645786][T10067] ? lock_acquire+0x115/0x350 [ 287.645813][T10067] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 287.645847][T10067] ? get_pid_task+0x20/0x1f0 [ 287.645872][T10067] ? get_pid_task+0x20/0x1f0 [ 287.645902][T10067] proc_fail_nth_write+0x8e/0x210 [ 287.645928][T10067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 287.645953][T10067] ? iov_iter_iovec_advance+0x1e0/0x290 [ 287.645990][T10067] vfs_writev+0x4bc/0x9a0 [ 287.646017][T10067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 287.646046][T10067] ? __pfx_vfs_writev+0x10/0x10 [ 287.646088][T10067] ? __fget_files+0x37a/0x3f0 [ 287.646124][T10067] ? fdget+0x1ac/0x250 [ 287.646159][T10067] do_writev+0x154/0x2e0 [ 287.646186][T10067] ? __pfx_do_writev+0x10/0x10 [ 287.646222][T10067] do_syscall_64+0x171/0x540 [ 287.646242][T10067] ? trace_irq_disable+0x3b/0x140 [ 287.646259][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.646280][T10067] ? clear_bhb_loop+0x70/0xc0 [ 287.646306][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.646326][T10067] RIP: 0033:0x00007f5bb65a8fd9 [ 287.646348][T10067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.646367][T10067] RSP: 002b:00007f5bb74b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 287.646391][T10067] RAX: ffffffffffffffda RBX: 00007f5bb6825fa0 RCX: 00007f5bb65a8fd9 [ 287.646406][T10067] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 287.646418][T10067] RBP: 00007f5bb6637fed R08: 0000000000000000 R09: 0000000000000000 [ 287.646430][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.646442][T10067] R13: 00007f5bb6826038 R14: 00007f5bb6825fa0 R15: 00007ffeb1df0098 [ 287.646477][T10067] [ 287.851166][T10066] loop6: detected capacity change from 0 to 2048 [ 287.942138][T10066] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 287.942337][T10066] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 287.942354][T10066] UDF-fs: Scanning with blocksize 512 failed [ 288.002531][T10066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.444414][T10082] loop3: detected capacity change from 0 to 128 [ 288.464528][T10082] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 288.740808][T10088] tap0: tun_chr_ioctl cmd 1074025677 [ 288.740936][T10088] tap0: linktype set to 6 [ 288.787805][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 288.934966][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.232564][T10101] loop3: detected capacity change from 0 to 33280 [ 289.259207][T10101] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 289.259230][T10101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.296626][T10101] EXT4-fs (loop3): 1 truncate cleaned up [ 289.305902][T10101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.787692][T10108] loop0: detected capacity change from 0 to 32768 [ 289.822969][T10108] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 289.822994][T10108] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 289.912834][T10108] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 289.916722][ T1235] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 289.916741][ T1235] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 290.271570][ T1235] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 354ms [ 290.379087][ T1235] gfs2: fsid=syz:syz.0: jid=0: Done [ 290.379143][T10108] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 290.446744][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.458726][T10123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.903511][ T5766] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.055546][ T5766] usb 4-1: Using ep0 maxpacket: 16 [ 291.056978][ T5766] usb 4-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 291.058655][ T5766] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.058687][ T5766] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.058709][ T5766] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 291.058735][ T5766] usb 4-1: config 0 interface 0 has no altsetting 0 [ 291.058770][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.068766][ T5766] usb 4-1: config 0 descriptor?? [ 291.389184][T10116] loop2: detected capacity change from 0 to 32768 [ 291.559104][ T5766] hid (null): bogus close delimiter [ 291.584968][ T5766] hid (null): unknown global tag 0xe [ 291.833600][ T5766] usb 4-1: USB disconnect, device number 12 [ 292.002115][T10129] loop1: detected capacity change from 0 to 131072 [ 292.053397][T10129] F2FS-fs (loop1): Test dummy encryption mode enabled [ 292.138633][T10129] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 292.154282][T10129] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 292.264536][ T995] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 292.399019][ T5646] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.416830][ T995] usb 7-1: Using ep0 maxpacket: 16 [ 292.420351][ T995] usb 7-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.422929][ T995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.430504][ T995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.430532][ T995] usb 7-1: Product: syz [ 292.430545][ T995] usb 7-1: Manufacturer: syz [ 292.430558][ T995] usb 7-1: SerialNumber: syz [ 292.462181][ T995] usb 7-1: config 0 descriptor?? [ 292.488594][ T995] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.488635][ T995] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 292.513663][ T5766] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 292.564844][ T5646] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 292.566326][ T5646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.572179][ T5646] usb 3-1: config 0 descriptor?? [ 292.635034][T10143] loop3: detected capacity change from 0 to 34816 [ 292.703845][ T5766] usb 1-1: Using ep0 maxpacket: 16 [ 292.711147][ T5766] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 292.713855][T10143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.714034][T10143] ext4 filesystem being mounted at /318/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.769714][ T5766] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.769774][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.769804][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.769826][ T5766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 292.769848][ T5766] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.802120][ T5766] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.802150][ T5766] usb 1-1: Manufacturer: syz [ 292.827523][ T5646] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 292.830024][ T5766] usb 1-1: config 0 descriptor?? [ 292.991032][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.134803][ T995] em28xx 7-1:0.0: chip ID is em28178 [ 293.147233][ T5646] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 293.147258][ T5646] [drm] Initialized udl on minor 1 [ 293.243446][ T5766] rc_core: IR keymap rc-hauppauge not found [ 293.243516][ T5766] Registered IR keymap rc-empty [ 293.244041][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.263755][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.287440][ T5766] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 293.295320][ T5766] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 293.324905][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.344305][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.363765][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.385382][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.403655][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.417980][ T995] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.418048][ T995] em28xx 7-1:0.0: board has no eeprom [ 293.423596][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.443591][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.465153][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.483766][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.484878][ T5646] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 293.485366][ T5646] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 293.492308][ T5831] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.505987][ T5766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.524877][ T995] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 293.524910][ T995] em28xx 7-1:0.0: dvb set to bulk mode. [ 293.548191][ T5831] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.548434][ T5831] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 293.548525][ T5831] em28xx 7-1:0.0: Binding DVB extension [ 293.571628][ T5646] usb 3-1: USB disconnect, device number 13 [ 293.595307][ T995] usb 7-1: USB disconnect, device number 3 [ 293.601108][ T5766] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 293.601139][ T5766] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.610018][ T995] em28xx 7-1:0.0: Disconnecting em28xx [ 293.623562][ T5766] usb 1-1: USB disconnect, device number 18 [ 293.757300][T10159] tipc: Started in network mode [ 293.757329][T10159] tipc: Node identity 1000001, cluster identity 4369 [ 293.757343][T10159] tipc: Node number set to 16777217 [ 293.760588][T10159] tipc: Cannot configure node identity twice [ 293.763232][T10159] tipc: Enabled bearer , priority 10 [ 293.843423][ T5831] em28xx 7-1:0.0: Registering input extension [ 294.084340][ T5831] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 294.084365][ T5831] Registered IR keymap rc-empty [ 294.124847][ T5831] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 294.128078][ T5831] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 294.197657][ T5831] em28xx 7-1:0.0: Input extension successfully initialized [ 294.202575][ T995] em28xx 7-1:0.0: Closing input extension [ 294.280043][ T995] em28xx: Freeing device [ 294.596207][T10169] loop2: detected capacity change from 0 to 4096 [ 294.721402][T10177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.179041][T10167] loop1: detected capacity change from 0 to 32768 [ 296.224030][ T995] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.386485][ T995] usb 4-1: New USB device found: idVendor=0b48, idProduct=1006, bcdDevice=1.00 [ 296.390423][ T995] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.395353][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.395382][ T995] usb 4-1: Product: syz [ 296.395411][ T995] usb 4-1: Manufacturer: syz [ 296.395424][ T995] usb 4-1: SerialNumber: syz [ 296.646385][ T995] dvbdev: DVB: registering new adapter (DEC3000-s) [ 296.667080][ T995] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 296.863577][ T995] ttusb_dec_send_command: command bulk message failed: error -71 [ 296.901689][ T995] usb 4-1: USB disconnect, device number 13 [ 296.918328][T10244] loop1: detected capacity change from 0 to 256 [ 297.047856][T10244] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 297.782927][T10264] bonding: b% is being created... [ 297.823839][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1457'. [ 297.849635][T10264] bonding: b% creation failed [ 298.114993][T10272] loop3: detected capacity change from 0 to 164 [ 298.299849][ T34] audit: type=1400 audit(1794431837.056:70): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=10273 comm="syz.6.1460" [ 298.647133][T10283] loop6: detected capacity change from 0 to 33280 [ 298.697481][T10283] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1463: Directory hole found for htree index block 0 [ 298.697523][T10283] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 298.703378][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 298.703408][ C0] EXT4-fs (loop6): initial error at time 1794431837: dx_probe:791: inode 2 [ 298.703442][ C0] EXT4-fs (loop6): last error at time 1794431837: dx_probe:791: inode 2 [ 298.770601][T10283] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 298.778998][T10283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.832226][T10283] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1463: Directory hole found for htree index block 0 [ 298.837225][T10283] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1463: Directory hole found for htree index block 0 [ 299.015117][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.158263][T10299] loop0: detected capacity change from 0 to 33280 [ 299.191237][T10299] EXT4-fs (loop0): invalid journal inode [ 299.191329][T10299] EXT4-fs (loop0): can't get journal size [ 299.213291][T10299] EXT4-fs (loop0): 1 truncate cleaned up [ 299.233213][T10299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.246355][ T995] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 299.394942][ T995] usb 4-1: Using ep0 maxpacket: 32 [ 299.400407][ T995] usb 4-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 299.418611][ T995] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 299.418644][ T995] usb 4-1: config 0 has no interface number 0 [ 299.418691][ T995] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 299.418716][ T995] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.418739][ T995] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.418763][ T995] usb 4-1: config 0 interface 196 has no altsetting 0 [ 299.424264][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.424291][ T995] usb 4-1: Product: syz [ 299.424305][ T995] usb 4-1: Manufacturer: syz [ 299.424318][ T995] usb 4-1: SerialNumber: syz [ 299.428153][ T995] usb 4-1: config 0 descriptor?? [ 299.451853][T10297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.807451][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.114989][T10328] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 300.119377][ T995] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 300.211524][ T995] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 300.345658][ T995] usb 4-1: USB disconnect, device number 14 [ 300.570118][ T995] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 300.901046][T10346] loop6: detected capacity change from 0 to 33280 [ 300.935394][T10346] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.940650][T10346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 300.940976][T10346] EXT4-fs (loop6): orphan cleanup on readonly fs [ 301.199097][T10346] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4221: comm syz.6.1488: Allocating blocks 42-43 which overlap fs metadata [ 301.199143][T10346] loop6: lost filesystem error report for type 5 error -117 [ 301.203444][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 301.203473][ C1] EXT4-fs (loop6): initial error at time 1794431839: ext4_mb_mark_diskspace_used:4221 [ 301.203500][ C1] EXT4-fs (loop6): last error at time 1794431839: ext4_mb_mark_diskspace_used:4221 [ 301.332662][T10346] EXT4-fs (loop6): Remounting filesystem read-only [ 301.332805][T10346] Quota error (device loop6): write_blk: dquota write failed [ 301.333002][T10346] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 301.387968][T10346] EXT4-fs (loop6): 1 truncate cleaned up [ 301.404354][T10322] loop1: detected capacity change from 0 to 32768 [ 301.496738][T10346] EXT4-fs (loop6): pa ffff88803561e0e8: logic 1, phys. 41, len 23 [ 301.517960][T10346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.580838][T10322] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 301.713125][T10339] loop2: detected capacity change from 0 to 32768 [ 301.833211][T10322] XFS (loop1): Ending clean mount [ 301.975700][ T34] audit: type=1800 audit(1794431840.736:71): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1477" name="file1" dev="loop1" ino=6150 res=0 errno=-22 [ 302.098054][ T9034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.159826][T10322] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 302.181733][T10336] loop0: detected capacity change from 0 to 40427 [ 302.224848][T10336] F2FS-fs (loop0): invalid crc value [ 302.538336][T10373] xt_hashlimit: size too large, truncated to 1048576 [ 302.568405][ T5637] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.628438][T10375] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1493'. [ 302.628673][T10375] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 302.768363][T10375] 0ªX¹¦Dö»: entered allmulticast mode [ 302.919880][T10336] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 302.931153][T10379] loop6: detected capacity change from 0 to 2048 [ 302.940998][ T90] IPVS: starting estimator thread 0... [ 302.998316][T10379] NILFS (loop6): invalid segment: Magic number mismatch [ 302.998347][T10379] NILFS (loop6): trying rollback from an earlier position [ 303.037712][T10381] IPVS: using max 31 ests per chain, 74400 per kthread [ 303.080142][T10336] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 303.080176][T10336] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 303.080203][T10336] F2FS-fs (loop0): Start checkpoint disabled! [ 303.156170][T10336] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 303.159195][T10336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 303.201246][T10379] NILFS (loop6): recovery complete [ 303.275427][T10385] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.479119][T10387] loop2: detected capacity change from 0 to 256 [ 304.146235][T10398] loop6: detected capacity change from 0 to 36864 [ 304.191251][T10398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.425913][T10408] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 304.507197][T10413] loop2: detected capacity change from 0 to 128 [ 304.542794][T10413] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 304.659045][T10413] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 304.771779][ T9034] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 304.771918][ T9034] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 304.771939][ T9034] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz-executor: Failed to acquire dquot type 1 [ 305.044279][ T1235] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 305.108399][T10426] loop3: detected capacity change from 0 to 256 [ 305.182145][T10426] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 305.224601][ T1235] usb 1-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 305.227282][ T1235] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 305.227315][ T1235] usb 1-1: config 0 has no interface number 0 [ 305.233668][ T1235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.233696][ T1235] usb 1-1: Product: syz [ 305.233710][ T1235] usb 1-1: Manufacturer: syz [ 305.233723][ T1235] usb 1-1: SerialNumber: syz [ 305.251806][ T1235] usb 1-1: config 0 descriptor?? [ 305.717800][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.854309][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.990676][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.027449][T10424] loop2: detected capacity change from 0 to 32768 [ 306.048562][T10424] (syz.2.1505,10424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 306.051050][T10424] (syz.2.1505,10424,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 306.089519][T10424] JBD2: Ignoring recovery information on journal [ 306.140090][ T1235] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 306.140129][ T1235] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 306.140785][ T1235] asix 1-1:0.251: probe with driver asix failed with error -71 [ 306.271404][ T1235] usb 1-1: USB disconnect, device number 19 [ 306.391567][T10424] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 306.464241][T10443] netlink: 'syz.1.1514': attribute type 3 has an invalid length. [ 306.464268][T10443] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 306.464283][T10443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1514'. [ 306.501355][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.577049][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.601303][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.613244][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.629522][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.630746][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.727173][T10448] loop3: detected capacity change from 0 to 1024 [ 307.218073][ T13] bridge_slave_1: left allmulticast mode [ 307.218104][ T13] bridge_slave_1: left promiscuous mode [ 307.218359][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.231344][ T13] bridge_slave_0: left allmulticast mode [ 307.231375][ T13] bridge_slave_0: left promiscuous mode [ 307.258901][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.505901][T10458] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1518'. [ 307.563944][T10460] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1518'. [ 307.894310][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 307.957854][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.996257][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.009457][ T13] bond0 (unregistering): Released all slaves [ 308.307504][T10473] loop1: detected capacity change from 0 to 33280 [ 308.386867][T10473] EXT4-fs (loop1): Test dummy encryption mode enabled [ 308.386892][T10473] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 308.386905][T10473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.516824][T10473] EXT4-fs (loop1): 1 truncate cleaned up [ 308.532057][T10473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.611261][T10473] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 308.655965][ T5645] Bluetooth: hci1: command tx timeout [ 308.796310][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.130678][T10444] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.436491][T10496] loop1: detected capacity change from 0 to 33280 [ 309.457810][T10496] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 309.682086][T10496] EXT4-fs (loop1): 1 orphan inode deleted [ 309.696636][T10496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.697072][T10496] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.860425][ T14] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 309.860567][ T14] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 1 [ 310.019309][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.068940][T10489] loop3: detected capacity change from 0 to 131072 [ 310.077839][T10489] F2FS-fs (loop3): invalid crc value [ 310.219795][T10504] loop2: detected capacity change from 0 to 1024 [ 310.226493][T10489] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 310.252854][T10489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 310.267037][T10504] hfsplus: failed to load extents file [ 310.397266][T10504] loop2: detected capacity change from 0 to 16 [ 310.733944][ T5645] Bluetooth: hci1: command tx timeout [ 311.343270][ T13] hsr_slave_0: left promiscuous mode [ 311.365105][ T13] hsr_slave_1: left promiscuous mode [ 311.366270][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.366292][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.370346][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.370366][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.416619][ T13] veth1_macvtap: left promiscuous mode [ 311.416721][ T13] veth0_macvtap: left promiscuous mode [ 311.421242][ T13] veth1_vlan: left promiscuous mode [ 311.421401][ T13] veth0_vlan: left promiscuous mode [ 311.482109][T10509] loop1: detected capacity change from 0 to 32768 [ 311.536698][T10509] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.595270][T10522] loop2: detected capacity change from 0 to 4096 [ 311.614597][T10522] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 311.654574][T10532] loop0: detected capacity change from 0 to 33280 [ 311.672299][T10532] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 311.672323][T10532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 311.728242][T10522] ntfs3(loop2): $AttrDef is corrupted. [ 311.789342][T10532] EXT4-fs (loop0): 1 truncate cleaned up [ 311.809715][T10532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.851237][T10509] XFS (loop1): Ending clean mount [ 311.905782][T10509] XFS (loop1): Quotacheck needed: Please wait. [ 312.230549][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.313163][T10509] XFS (loop1): Quotacheck: Done. [ 312.572395][T10543] loop2: detected capacity change from 0 to 33792 [ 312.574922][T10543] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.581522][T10543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.581891][T10543] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 312.605647][T10543] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.1548: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 312.605695][T10543] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.606110][T10543] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1548: couldn't read orphan inode 11 (err -117) [ 312.606136][T10543] loop2: lost filesystem error report for type 5 error -117 [ 312.616501][T10543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.755535][T10543] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.1548: Invalid block bitmap block 0 in block_group 0 [ 312.804641][ T995] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 312.814888][ T5645] Bluetooth: hci1: command tx timeout [ 312.845563][ T5637] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 312.851065][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1540'. [ 312.862322][T10543] Quota error (device loop2): write_blk: dquota write failed [ 312.862366][T10543] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 312.885481][T10543] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.1548: Failed to acquire dquot type 0 [ 312.963042][T10547] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1548: Invalid inode bitmap blk 137438953472 in block_group 0 [ 313.015789][ T995] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 313.033021][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.055652][ T995] usb 4-1: config 0 descriptor?? [ 313.206691][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.212342][ T5636] EXT4-fs error (device loop2): ext4_get_inode_loc_noio:5882: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 313.212379][ T5636] loop2: lost filesystem error report for type 5 error -117 [ 313.290303][ T995] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 313.440123][ T13] team0 (unregistering): Port device team_slave_1 removed [ 313.469293][ T13] team0 (unregistering): Port device team_slave_0 removed [ 313.588050][ T995] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 313.588081][ T995] [drm] Initialized udl on minor 1 [ 313.690561][T10559] loop2: detected capacity change from 0 to 34816 [ 313.739484][T10559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.914124][ T995] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 313.914634][ T995] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 313.944894][ T5831] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.945913][ T5831] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.946138][ T5831] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 313.948197][ T995] usb 4-1: USB disconnect, device number 15 [ 314.163676][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 314.164565][T10549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1540'. [ 314.894738][ T5645] Bluetooth: hci1: command tx timeout [ 314.952565][ T14] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 314.993791][ T14] EXT4-fs (loop2): Remounting filesystem read-only [ 315.147311][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 315.430305][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.430512][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.430689][T10444] bridge_slave_0: entered allmulticast mode [ 315.437501][T10444] bridge_slave_0: entered promiscuous mode [ 315.446624][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.448804][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.448969][T10444] bridge_slave_1: entered allmulticast mode [ 315.449841][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.455103][T10444] bridge_slave_1: entered promiscuous mode [ 315.456824][T10608] loop0: detected capacity change from 0 to 128 [ 315.599571][T10608] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 315.599641][T10608] hpfs: filesystem error: improperly stopped [ 315.599657][T10608] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 315.599673][T10608] hpfs: You really don't want any checks? You are crazy... [ 315.600072][T10608] hpfs: hpfs_map_sector(): read error [ 315.600083][T10608] hpfs: code page support is disabled [ 315.607276][T10608] hpfs: hpfs_map_4sectors(): unaligned read [ 315.607370][T10608] hpfs: hpfs_map_4sectors(): unaligned read [ 315.607379][T10608] hpfs: filesystem error: unable to find root dir [ 315.671932][T10612] phram: illegal start address [ 315.691097][T10444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.712537][T10444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.866369][T10444] team0: Port device team_slave_0 added [ 315.869736][T10444] team0: Port device team_slave_1 added [ 315.914912][T10615] ipvlan2: entered allmulticast mode [ 315.914947][T10615] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 315.922099][T10615] batman_adv: batadv0: Adding interface: ipvlan2 [ 315.922121][T10615] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.922155][T10615] batman_adv: batadv0: Interface activated: ipvlan2 [ 316.154717][T10444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.154740][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.154770][T10444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.167697][T10444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.167715][T10444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.167740][T10444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.578483][T10444] hsr_slave_0: entered promiscuous mode [ 316.585054][T10444] hsr_slave_1: entered promiscuous mode [ 316.588224][T10444] debugfs: 'hsr0' already exists in 'hsr' [ 316.588244][T10444] Cannot create hsr debugfs directory [ 316.669687][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 317.371431][T10660] loop3: detected capacity change from 0 to 4096 [ 317.471196][T10660] ntfs3(loop3): ino=9, mi_enum_attr [ 317.471265][T10660] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 317.588273][T10660] ntfs3(loop3): ino=9, mi_enum_attr [ 317.588406][T10660] ntfs3(loop3): ino=b, mi_enum_attr [ 317.588519][T10660] ntfs3(loop3): Failed to load $Extend (-22). [ 317.588540][T10660] ntfs3(loop3): Failed to initialize $Extend. [ 317.616178][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661845][T10444] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.672946][T10673] loop0: detected capacity change from 0 to 164 [ 317.683194][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.691520][T10444] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.718868][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.750460][T10444] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 317.799070][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.808755][T10444] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.868698][T10444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.349283][T10444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.431167][ T34] audit: type=1326 audit(1794431857.186:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1585" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb65a8fd9 code=0x0 [ 318.448169][T10444] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.491986][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.492109][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.543864][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.543980][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.661308][T10701] xt_hashlimit: size too large, truncated to 1048576 [ 319.278817][ T5298] 8021q: adding VLAN 0 to HW filter on device eth11 [ 319.332943][T10719] loop1: detected capacity change from 0 to 33280 [ 319.352649][T10719] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 319.352674][T10719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.439109][T10719] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #16: comm syz.1.1590: invalid indirect mapped block 32768 (level 2) [ 319.439154][T10719] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 319.443375][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 319.443403][ C1] EXT4-fs (loop1): initial error at time 1794431858: ext4_free_branches:1040: inode 16 [ 319.443437][ C1] EXT4-fs (loop1): last error at time 1794431858: ext4_free_branches:1040: inode 16 [ 319.588288][T10703] loop3: detected capacity change from 0 to 32768 [ 319.605024][T10719] EXT4-fs (loop1): 1 orphan inode deleted [ 319.605055][T10719] EXT4-fs (loop1): 1 truncate cleaned up [ 319.630737][T10719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.659707][T10726] device-mapper: table: 248:4: crypt: Error decoding and setting key (-EINVAL) [ 319.659738][T10726] device-mapper: ioctl: error adding target to table [ 319.704945][ T34] audit: type=1800 audit(1794431858.466:73): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1587" name="file1" dev="loop3" ino=4 res=0 errno=-22 [ 319.861296][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.007932][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.397465][T10444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.480783][T10745] loop1: detected capacity change from 0 to 4096 [ 320.499345][T10745] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 320.561355][T10760] jffs2: notice: (10760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 320.600929][T10760] jffs2: error: (10760) jffs2_do_read_inode: requested to read a nonexistent ino 4096 [ 321.474854][T10780] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 321.483222][ T5766] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 321.513673][T10757] loop3: detected capacity change from 0 to 32768 [ 321.549873][T10757] (syz.3.1600,10757,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 321.550327][T10757] (syz.3.1600,10757,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 321.621852][T10757] JBD2: Ignoring recovery information on journal [ 321.779139][T10757] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 321.831926][ T5298] 8021q: adding VLAN 0 to HW filter on device eth12 [ 321.873490][ T5766] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 321.971412][T10444] veth0_vlan: entered promiscuous mode [ 322.013157][T10444] veth1_vlan: entered promiscuous mode [ 322.026314][ T5766] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 322.027716][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.033001][ T5766] usb 1-1: config 0 descriptor?? [ 322.108022][ T5635] ocfs2: Unmounting device (7,3) on (node local) [ 322.141877][T10444] veth0_macvtap: entered promiscuous mode [ 322.156336][T10444] veth1_macvtap: entered promiscuous mode [ 322.229361][T10444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.261687][T10444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.281688][ T5766] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 322.321197][ T6979] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.350892][ T1056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.350946][ T1056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.395667][ T65] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.575743][ T5766] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 322.575770][ T5766] [drm] Initialized udl on minor 1 [ 322.920033][ T5766] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 322.985581][ T5766] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 323.002606][ T2256] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 323.016993][ T2256] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 323.017204][ T2256] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 323.026256][ T5766] usb 1-1: USB disconnect, device number 20 [ 323.224547][ T1056] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.438231][ T1056] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.656652][T10819] sctp: [Deprecated]: syz.2.1617 (pid 10819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.656652][T10819] Use struct sctp_sack_info instead [ 323.689478][ T1056] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.917726][ T1056] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.965615][ T2256] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 324.132188][ T2256] usb 1-1: Using ep0 maxpacket: 16 [ 324.139469][ T2256] usb 1-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 324.140666][ T2256] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 324.165130][ T2256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.165163][ T2256] usb 1-1: Product: syz [ 324.165178][ T2256] usb 1-1: Manufacturer: syz [ 324.165193][ T2256] usb 1-1: SerialNumber: syz [ 324.169799][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.187767][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.190391][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.191643][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.192762][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.205601][ T2256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 324.205628][ T2256] r8152-cfgselector 1-1: config 0 descriptor?? [ 324.322169][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 324.413195][T10838] ip6gre1: entered promiscuous mode [ 324.413222][T10838] ip6gre1: entered allmulticast mode [ 324.508273][ T2256] r8152-cfgselector 1-1: Needed 2 retries to read version [ 324.508336][ T2256] r8152-cfgselector 1-1: Unknown version 0x1ce0 [ 324.508841][ T2256] r8152-cfgselector 1-1: No union descriptors [ 324.718859][ T5766] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 324.836201][T10849] loop1: detected capacity change from 0 to 256 [ 324.852258][ T1056] bridge_slave_1: left allmulticast mode [ 324.852287][ T1056] bridge_slave_1: left promiscuous mode [ 324.852534][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.887307][ T1056] bridge_slave_0: left allmulticast mode [ 324.887338][ T1056] bridge_slave_0: left promiscuous mode [ 324.890060][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.261591][T10854] loop2: detected capacity change from 0 to 4096 [ 325.370273][T10854] ntfs3(loop2): ino=9, mi_enum_attr [ 325.370311][T10854] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 325.413732][T10854] ntfs3(loop2): ino=9, mi_enum_attr [ 325.413875][T10854] ntfs3(loop2): ino=b, mi_enum_attr [ 325.413971][T10854] ntfs3(loop2): Failed to load $Extend (-22). [ 325.413990][T10854] ntfs3(loop2): Failed to initialize $Extend. [ 325.569063][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.587724][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.590291][ T1056] bond0 (unregistering): Released all slaves [ 325.611539][ T65] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.612330][ T65] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.633586][ T5766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.036673][ T5766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.259490][T10830] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.334003][ T56] Bluetooth: hci1: command tx timeout [ 326.654018][ T5766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.726744][T10899] loop0: detected capacity change from 0 to 33280 [ 326.766555][T10899] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.1644: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 326.766625][T10899] loop0: lost filesystem error report for type 5 error -117 [ 326.773392][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 326.773420][ C0] EXT4-fs (loop0): initial error at time 1794431865: ext4_xattr_inode_iget:473 [ 326.773448][ C0] EXT4-fs (loop0): last error at time 1794431865: ext4_xattr_inode_iget:473 [ 326.775030][T10899] EXT4-fs (loop0): 1 orphan inode deleted [ 326.778106][T10899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.049108][T10897] rxe_eth0 speed is unknown, defaulting to 1000 [ 327.146215][T10909] loop2: detected capacity change from 0 to 33280 [ 327.415977][ T5831] logitech-hidpp-device 0005:046D:B012.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 327.638853][T10895] loop1: detected capacity change from 0 to 32768 [ 327.729886][T10895] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 327.814403][T10914] fido_id[10914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 327.939994][T10895] XFS (loop1): Ending clean mount [ 328.198385][T10933] device-mapper: ioctl: Invalid target message parameters. [ 328.268465][ T5637] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 328.349292][ T5298] 8021q: adding VLAN 0 to HW filter on device eth13 [ 328.379461][ T1056] hsr_slave_0: left promiscuous mode [ 328.380433][ T1056] hsr_slave_1: left promiscuous mode [ 328.382162][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.382185][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.412860][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.412887][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.416862][ T56] Bluetooth: hci1: command tx timeout [ 328.419312][ T34] audit: type=1400 audit(1794431867.166:74): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="f/o" pid=10936 comm="syz.2.1653" name="f/o" offset=55 [ 328.494053][ T1056] veth1_macvtap: left promiscuous mode [ 328.494150][ T1056] veth0_macvtap: left promiscuous mode [ 328.494501][ T1056] veth1_vlan: left promiscuous mode [ 328.505015][ T1056] veth0_vlan: left promiscuous mode [ 328.656717][T10943] ip_tables: iptables: counters copy to user failed while replacing table [ 329.456870][T10941] loop1: detected capacity change from 0 to 40427 [ 329.486720][T10941] F2FS-fs (loop1): invalid crc value [ 329.589159][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 329.626302][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 329.651356][T10941] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 329.662980][T10941] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 329.663012][T10941] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 329.663039][T10941] F2FS-fs (loop1): Start checkpoint disabled! [ 329.677729][T10941] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 329.678624][T10941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 329.933529][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.495980][ T56] Bluetooth: hci1: command tx timeout [ 330.526222][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.526434][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.526760][T10830] bridge_slave_0: entered allmulticast mode [ 330.532332][T10830] bridge_slave_0: entered promiscuous mode [ 330.544089][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.545718][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.545868][T10830] bridge_slave_1: entered allmulticast mode [ 330.549518][T10830] bridge_slave_1: entered promiscuous mode [ 330.672669][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.688763][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.784685][T10830] team0: Port device team_slave_0 added [ 330.788425][T10830] team0: Port device team_slave_1 added [ 330.840129][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.840144][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.840161][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.842768][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.893433][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.893468][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.966479][ T5298] 8021q: adding VLAN 0 to HW filter on device eth14 [ 330.976882][T10830] hsr_slave_0: entered promiscuous mode [ 330.979600][T10830] hsr_slave_1: entered promiscuous mode [ 330.980304][T10830] debugfs: 'hsr0' already exists in 'hsr' [ 330.980320][T10830] Cannot create hsr debugfs directory [ 331.050752][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.903063][T10830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.915662][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.916942][T10830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.920779][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.921720][T10830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.928810][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.932142][T10830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.942300][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.085850][T10830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.124115][T10830] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.132551][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.132681][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.171054][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.171179][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.573909][ T56] Bluetooth: hci1: command tx timeout [ 332.829365][T10830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.264008][T10830] veth0_vlan: entered promiscuous mode [ 333.272302][T10830] veth1_vlan: entered promiscuous mode [ 333.339826][T10830] veth0_macvtap: entered promiscuous mode [ 333.353087][T10830] veth1_macvtap: entered promiscuous mode [ 333.384064][T10830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.397812][T10830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.503736][ T1090] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.551236][ T1090] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.551552][ T1090] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.551927][ T1090] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.228753][ T1090] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.996902][ T1090] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.205069][ T1090] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.311866][ T1090] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.546754][ T1090] bridge_slave_1: left allmulticast mode [ 336.546784][ T1090] bridge_slave_1: left promiscuous mode [ 336.547506][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.550971][ T1090] bridge_slave_0: left allmulticast mode [ 336.550997][ T1090] bridge_slave_0: left promiscuous mode [ 336.555757][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.897847][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.901009][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.924697][ T1090] bond0 (unregistering): Released all slaves [ 337.461787][ T1090] hsr_slave_0: left promiscuous mode [ 337.462656][ T1090] hsr_slave_1: left promiscuous mode [ 337.464298][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.464318][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.470675][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.470697][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.505740][ T1090] veth1_macvtap: left promiscuous mode [ 337.505843][ T1090] veth0_macvtap: left promiscuous mode [ 337.507746][ T1090] veth1_vlan: left promiscuous mode [ 337.507876][ T1090] veth0_vlan: left promiscuous mode [ 337.969240][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 337.988234][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 338.090303][ T5298] 8021q: adding VLAN 0 to HW filter on device eth13 [ 338.629061][ T5298] 8021q: adding VLAN 0 to HW filter on device eth14 [ 338.735340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.013919][ T5298] 8021q: adding VLAN 0 to HW filter on device eth15 [ 339.394453][ T5298] 8021q: adding VLAN 0 to HW filter on device eth16 [ 356.653592][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.056537][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.573643][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.495299][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.973765][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.573492][ T36] INFO: task kworker/u8:1:1 ** replaying previous printk message ** [ 486.573492][ T36] INFO: task kworker/u8:1:14 blocked in I/O wait for more than 143 seconds. [ 486.573521][ T36] Tainted: G L syzkaller #0 [ 486.573530][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.573538][ T36] task:kworker/u8:1 state:D stack:20560 pid:14 tgid:14 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 486.573588][ T36] Workqueue: writeback wb_workfn (flush-8:0) [ 486.573749][ T36] Call Trace: [ 486.573783][ T36] [ 486.573823][ T36] __schedule+0x1ba5/0x5f70 [ 486.573981][ T36] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 486.574186][ T36] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 486.574217][ T36] ? __blk_flush_plug+0x416/0x4d0 [ 486.574276][ T36] ? __pfx___schedule+0x10/0x10 [ 486.574309][ T36] ? schedule+0x90/0x2b0 [ 486.574335][ T36] schedule+0x164/0x2b0 [ 486.574359][ T36] io_schedule+0x7f/0xd0 [ 486.574383][ T36] bit_wait_io+0x13/0x110 [ 486.574407][ T36] __wait_on_bit+0xac/0x300 [ 486.574428][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.574454][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.574478][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.574500][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.574526][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.574600][ T36] do_get_write_access+0x658/0x10c0 [ 486.574703][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 486.574740][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 486.574809][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 486.574847][ T36] ext4_reserve_inode_write+0x294/0x360 [ 486.574950][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 486.575019][ T36] ext4_ext_insert_extent+0x26f5/0x4bf0 [ 486.575052][ T36] ? ext4_mb_new_blocks+0x292a/0x4520 [ 486.575117][ T36] ? ext4_ext_search_right+0x39a/0x860 [ 486.575146][ T36] ? __asan_memcpy+0x40/0x70 [ 486.575206][ T36] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 486.575239][ T36] ? ext4_ext_find_goal+0xf0/0x1e0 [ 486.575270][ T36] ext4_ext_map_blocks+0x15bf/0x5480 [ 486.575323][ T36] ? stack_trace_save+0xa9/0x100 [ 486.575368][ T36] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 486.575418][ T36] ? kmem_cache_alloc_noprof+0xb1/0x600 [ 486.575453][ T36] ? stack_depot_save_flags+0x33/0x840 [ 486.575555][ T36] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 486.575604][ T36] ? down_write+0x166/0x200 [ 486.575635][ T36] ext4_map_create_blocks+0x116/0x530 [ 486.575668][ T36] ? ext4_fc_track_inode+0xf3/0x3f0 [ 486.575697][ T36] ext4_map_blocks+0xe8e/0x1c60 [ 486.575755][ T36] ? __pfx_ext4_map_blocks+0x10/0x10 [ 486.575784][ T36] ? kmem_cache_alloc_noprof+0x151/0x600 [ 486.575823][ T36] ? ext4_inode_journal_mode+0x3d6/0x4d0 [ 486.575853][ T36] ext4_do_writepages+0x1978/0x44a0 [ 486.575934][ T36] ? __pfx_ext4_do_writepages+0x10/0x10 [ 486.575957][ T36] ? __lock_acquire+0x747/0x2de0 [ 486.576000][ T36] ? __lock_acquire+0x747/0x2de0 [ 486.576040][ T36] ? lock_acquire+0x115/0x350 [ 486.576093][ T36] ext4_writepages+0x1fe/0x4e0 [ 486.576126][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 486.576184][ T36] ? do_raw_spin_unlock+0xf5/0x200 [ 486.576210][ T36] ? __pfx_ext4_writepages+0x10/0x10 [ 486.576240][ T36] do_writepages+0x338/0x560 [ 486.576290][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.576318][ T36] ? reacquire_held_locks+0x117/0x1a0 [ 486.576338][ T36] ? writeback_sb_inodes+0x450/0x1af0 [ 486.576371][ T36] __writeback_single_inode+0x13f/0x12e0 [ 486.576403][ T36] ? do_raw_spin_unlock+0xf5/0x200 [ 486.576432][ T36] writeback_sb_inodes+0x9de/0x1af0 [ 486.576488][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 486.576557][ T36] ? __pfx_down_read_trylock+0x10/0x10 [ 486.576599][ T36] __writeback_inodes_wb+0x114/0x250 [ 486.576639][ T36] wb_writeback+0x42f/0xad0 [ 486.576670][ T36] ? queue_io+0x261/0x470 [ 486.576704][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 486.576728][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.576773][ T36] wb_workfn+0xc92/0x10f0 [ 486.576819][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 486.576875][ T36] ? lock_acquire+0x115/0x350 [ 486.576916][ T36] ? rcu_is_watching+0x16/0xb0 [ 486.576941][ T36] ? process_scheduled_works+0x97a/0x1630 [ 486.577000][ T36] process_scheduled_works+0xc3d/0x1630 [ 486.577073][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.577114][ T36] ? assign_work+0x3cf/0x5d0 [ 486.577153][ T36] worker_thread+0xa47/0xfb0 [ 486.577218][ T36] kthread+0x38b/0x480 [ 486.577246][ T36] ? __pfx_worker_thread+0x10/0x10 [ 486.577266][ T36] ? __pfx_kthread+0x10/0x10 [ 486.577294][ T36] ret_from_fork+0x514/0xb70 [ 486.577354][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 486.577379][ T36] ? __switch_to+0xc78/0x1410 [ 486.577404][ T36] ? __pfx_kthread+0x10/0x10 [ 486.577431][ T36] ret_from_fork_asm+0x1a/0x30 [ 486.577496][ T36] [ 486.577631][ T36] INFO: task jbd2/sda1-8:4966 blocked in I/O wait for more than 143 seconds. [ 486.577652][ T36] Tainted: G L syzkaller #0 [ 486.577663][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.577671][ T36] task:jbd2/sda1-8 state:D stack:25224 pid:4966 tgid:4966 ppid:2 task_flags:0x240040 flags:0x00080000 [ 486.577734][ T36] Call Trace: [ 486.577741][ T36] [ 486.577755][ T36] __schedule+0x1ba5/0x5f70 [ 486.577796][ T36] ? percpu_ref_put_many+0x18e/0x240 [ 486.577871][ T36] ? __pfx___schedule+0x10/0x10 [ 486.577906][ T36] ? schedule+0x90/0x2b0 [ 486.577931][ T36] schedule+0x164/0x2b0 [ 486.577955][ T36] io_schedule+0x7f/0xd0 [ 486.577979][ T36] bit_wait_io+0x13/0x110 [ 486.578005][ T36] __wait_on_bit+0xac/0x300 [ 486.578028][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.578055][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.578080][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.578102][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.578130][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.578157][ T36] ? __wait_on_buffer+0xe/0x80 [ 486.578244][ T36] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 486.578336][ T36] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 486.578372][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.578427][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.578462][ T36] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.578493][ T36] ? __timer_delete_sync+0x4a7/0x520 [ 486.578531][ T36] kjournald2+0x3bc/0x740 [ 486.578622][ T36] ? __pfx_kjournald2+0x10/0x10 [ 486.578650][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 486.578674][ T36] ? __kthread_parkme+0x71/0x1f0 [ 486.578700][ T36] ? __kthread_parkme+0x199/0x1f0 [ 486.578731][ T36] kthread+0x38b/0x480 [ 486.578757][ T36] ? __pfx_kjournald2+0x10/0x10 [ 486.578783][ T36] ? __pfx_kthread+0x10/0x10 [ 486.578810][ T36] ret_from_fork+0x514/0xb70 [ 486.578838][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 486.578862][ T36] ? __switch_to+0xc78/0x1410 [ 486.578887][ T36] ? __pfx_kthread+0x10/0x10 [ 486.578915][ T36] ret_from_fork_asm+0x1a/0x30 [ 486.578959][ T36] [ 486.578978][ T36] INFO: task syz-executor:5623 blocked in I/O wait for more than 143 seconds. [ 486.578997][ T36] Tainted: G L syzkaller #0 [ 486.579007][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.579016][ T36] task:syz-executor state:D stack:20832 pid:5623 tgid:5623 ppid:5622 task_flags:0x440100 flags:0x00080002 [ 486.579072][ T36] Call Trace: [ 486.579079][ T36] [ 486.579091][ T36] __schedule+0x1ba5/0x5f70 [ 486.579128][ T36] ? lock_acquire+0x115/0x350 [ 486.579178][ T36] ? __pfx___schedule+0x10/0x10 [ 486.579214][ T36] ? schedule+0x90/0x2b0 [ 486.579240][ T36] schedule+0x164/0x2b0 [ 486.579262][ T36] io_schedule+0x7f/0xd0 [ 486.579286][ T36] bit_wait_io+0x13/0x110 [ 486.579311][ T36] __wait_on_bit+0xac/0x300 [ 486.579334][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.579361][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.579386][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.579408][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.579434][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.579469][ T36] do_get_write_access+0x658/0x10c0 [ 486.579524][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 486.579562][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 486.579597][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 486.579622][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 486.579648][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 486.579689][ T36] ext4_reserve_inode_write+0x294/0x360 [ 486.579728][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 486.579772][ T36] ext4_dirty_inode+0xd0/0x110 [ 486.579796][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 486.579819][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 486.579838][ T36] file_update_time_flags+0x399/0x440 [ 486.579884][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 486.579910][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 486.579926][ T36] ? __lock_acquire+0x747/0x2de0 [ 486.579949][ T36] do_page_mkwrite+0x147/0x310 [ 486.579975][ T36] do_wp_page+0x1a77/0x4c30 [ 486.580000][ T36] ? __pfx_do_wp_page+0x10/0x10 [ 486.580011][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.580028][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.580047][ T36] handle_mm_fault+0x19c9/0x2f80 [ 486.580065][ T36] ? handle_mm_fault+0xee/0x2f80 [ 486.580080][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.580090][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 486.580101][ T36] ? __pfx_set_user_sigmask+0x10/0x10 [ 486.580127][ T36] do_user_addr_fault+0xb35/0x1480 [ 486.580154][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 486.580172][ T36] exc_page_fault+0x6a/0xc0 [ 486.580200][ T36] asm_exc_page_fault+0x26/0x30 [ 486.580226][ T36] RIP: 0033:0x00007f261407e311 [ 486.580237][ T36] RSP: 002b:00007fffeb46eba0 EFLAGS: 00010206 [ 486.580262][ T36] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 486.580269][ T36] RDX: 00007f26120c4000 RSI: 00000000000011f3 RDI: ffffffff84dfffff [ 486.580276][ T36] RBP: 00007fffeb46f0a0 R08: 0000000000001000 R09: 000055558e466ad0 [ 486.580283][ T36] R10: 00000000000000a6 R11: 000055558e466c28 R12: 00007fffeb46eee0 [ 486.580290][ T36] R13: 00007fffeb46ecd0 R14: 585858582e7a7973 R15: 00007fffeb46ec20 [ 486.580302][ T36] ? throtl_pending_timer_fn+0xf6f/0x1b70 [ 486.580334][ T36] [ 486.580365][ T36] INFO: task syz.1.1654:10940 blocked in I/O wait for more than 143 seconds. [ 486.580374][ T36] Tainted: G L syzkaller #0 [ 486.580379][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.580383][ T36] task:syz.1.1654 state:D stack:24680 pid:10940 tgid:10940 ppid:5637 task_flags:0x440040 flags:0x00080002 [ 486.580408][ T36] Call Trace: [ 486.580411][ T36] [ 486.580417][ T36] __schedule+0x1ba5/0x5f70 [ 486.580434][ T36] ? lock_acquire+0x115/0x350 [ 486.580453][ T36] ? __pfx___schedule+0x10/0x10 [ 486.580468][ T36] ? schedule+0x90/0x2b0 [ 486.580479][ T36] schedule+0x164/0x2b0 [ 486.580490][ T36] io_schedule+0x7f/0xd0 [ 486.580500][ T36] bit_wait_io+0x13/0x110 [ 486.580512][ T36] __wait_on_bit+0xac/0x300 [ 486.580522][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.580535][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.580546][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.580558][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.580576][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.580600][ T36] do_get_write_access+0x658/0x10c0 [ 486.580629][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 486.580646][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 486.580662][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 486.580676][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 486.580687][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 486.580706][ T36] ext4_reserve_inode_write+0x294/0x360 [ 486.580723][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 486.580744][ T36] ext4_dirty_inode+0xd0/0x110 [ 486.580756][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 486.580768][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 486.580782][ T36] file_update_time_flags+0x399/0x440 [ 486.580795][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 486.580812][ T36] ? __pfx_filemap_fault+0x10/0x10 [ 486.580829][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 486.580842][ T36] ? lruvec_stat_mod_folio+0x222/0x2d0 [ 486.580883][ T36] do_page_mkwrite+0x147/0x310 [ 486.580898][ T36] do_pte_missing+0x6e0/0x3520 [ 486.580920][ T36] handle_mm_fault+0x1807/0x2f80 [ 486.580937][ T36] ? handle_mm_fault+0xee/0x2f80 [ 486.580952][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.580962][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 486.580972][ T36] ? __pfx_do_futex+0x10/0x10 [ 486.581003][ T36] do_user_addr_fault+0xb35/0x1480 [ 486.581021][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 486.581035][ T36] exc_page_fault+0x6a/0xc0 [ 486.581046][ T36] asm_exc_page_fault+0x26/0x30 [ 486.581055][ T36] RIP: 0033:0x00007f20e9674431 [ 486.581064][ T36] RSP: 002b:00007ffd90894cc0 EFLAGS: 00010202 [ 486.581073][ T36] RAX: 0000001b34f24000 RBX: ffffffff8266677a RCX: 0000001b34f23ff8 [ 486.581080][ T36] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f20ea555700 [ 486.581086][ T36] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f20e9a12000 [ 486.581092][ T36] R10: 00007f20ea555700 R11: 0000000000000000 R12: 00007f20e9a26038 [ 486.581099][ T36] R13: 0000000000000000 R14: ffffffff82666e10 R15: 00007f20ea555720 [ 486.581106][ T36] ? __x64_sys_mount+0x20/0xc0 [ 486.581137][ T36] ? mount_subtree+0x4a/0x3b0 [ 486.581156][ T36] [ 486.581160][ T36] INFO: task syz.3.1658:10949 blocked in I/O wait for more than 143 seconds. [ 486.581173][ T36] Tainted: G L syzkaller #0 [ 486.581178][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.581182][ T36] task:syz.3.1658 state:D stack:26400 pid:10949 tgid:10949 ppid:5635 task_flags:0x440040 flags:0x00080002 [ 486.581208][ T36] Call Trace: [ 486.581212][ T36] [ 486.581220][ T36] __schedule+0x1ba5/0x5f70 [ 486.581250][ T36] ? __pfx___schedule+0x10/0x10 [ 486.581269][ T36] ? schedule+0x90/0x2b0 [ 486.581284][ T36] schedule+0x164/0x2b0 [ 486.581298][ T36] io_schedule+0x7f/0xd0 [ 486.581311][ T36] bit_wait_io+0x13/0x110 [ 486.581326][ T36] __wait_on_bit+0xac/0x300 [ 486.581340][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.581355][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.581370][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.581384][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.581400][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.581420][ T36] do_get_write_access+0x658/0x10c0 [ 486.581451][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 486.581474][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 486.581494][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 486.581516][ T36] ext4_reserve_inode_write+0x294/0x360 [ 486.581538][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 486.581564][ T36] ext4_dirty_inode+0xd0/0x110 [ 486.581580][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 486.581595][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 486.581609][ T36] ? mnt_get_write_access+0x216/0x280 [ 486.581623][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 486.581637][ T36] touch_atime+0x568/0x670 [ 486.581649][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 486.581669][ T36] ext4_file_mmap_prepare+0x277/0x450 [ 486.581687][ T36] mmap_region+0x1191/0x2820 [ 486.581700][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 486.581742][ T36] ? __page_table_check_zero+0x6c/0x430 [ 486.581773][ T36] ? __pfx_mmap_region+0x10/0x10 [ 486.581788][ T36] ? __page_table_check_zero+0x6c/0x430 [ 486.581800][ T36] ? __page_table_check_zero+0x3c3/0x430 [ 486.581812][ T36] ? __page_table_check_zero+0x6c/0x430 [ 486.581828][ T36] ? post_alloc_hook+0x208/0x250 [ 486.581855][ T36] ? __pfx_flush_tlb_func+0x10/0x10 [ 486.581871][ T36] ? smp_call_function_many_cond+0xfc7/0x1500 [ 486.581899][ T36] ? __pfx_flush_tlb_func+0x10/0x10 [ 486.581951][ T36] ? mt_find+0x17e/0x5f0 [ 486.581987][ T36] ? mt_find+0x545/0x5f0 [ 486.582004][ T36] ? mt_find+0x17e/0x5f0 [ 486.582020][ T36] ? __pfx_mt_find+0x10/0x10 [ 486.582040][ T36] ? bpf_lsm_mmap_addr+0x9/0x50 [ 486.582063][ T36] ? security_mmap_addr+0x71/0x240 [ 486.582102][ T36] ? memfd_check_seals_mmap+0x8e/0x1f0 [ 486.582136][ T36] do_mmap+0xe0a/0x1300 [ 486.582156][ T36] ? __pfx_do_mmap+0x10/0x10 [ 486.582182][ T36] ? vm_mmap_pgoff+0x1ed/0x520 [ 486.582204][ T36] ? down_write_killable+0x179/0x230 [ 486.582220][ T36] ? lock_acquire+0x115/0x350 [ 486.582237][ T36] ? __pfx_down_write_killable+0x10/0x10 [ 486.582254][ T36] ? apparmor_mmap_file+0x2e7/0x390 [ 486.582305][ T36] vm_mmap_pgoff+0x27a/0x520 [ 486.582327][ T36] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 486.582346][ T36] ? __fget_files+0x29/0x3f0 [ 486.582366][ T36] ? __fget_files+0x37a/0x3f0 [ 486.582384][ T36] ? __fget_files+0x29/0x3f0 [ 486.582403][ T36] ksys_mmap_pgoff+0x4dc/0x760 [ 486.582422][ T36] do_syscall_64+0x171/0x540 [ 486.582452][ T36] ? trace_irq_disable+0x3b/0x140 [ 486.582473][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.582487][ T36] ? clear_bhb_loop+0x70/0xc0 [ 486.582503][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.582516][ T36] RIP: 0033:0x00007fd047da8d42 [ 486.582527][ T36] RSP: 002b:00007ffebe91b2d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 486.582541][ T36] RAX: ffffffffffffffda RBX: 0000001b34b64000 RCX: 00007fd047da8d42 [ 486.582550][ T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34b64000 [ 486.582559][ T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 486.582567][ T36] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000017b [ 486.582575][ T36] R13: 00000000000927c0 R14: 0000000000050598 R15: 00007ffebe91b5b0 [ 486.582596][ T36] [ 486.582601][ T36] INFO: task syz.2.1668:10950 blocked in I/O wait for more than 143 seconds. [ 486.582611][ T36] Tainted: G L syzkaller #0 [ 486.582618][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.582623][ T36] task:syz.2.1668 state:D stack:26112 pid:10950 tgid:10950 ppid:5636 task_flags:0x440040 flags:0x00080002 [ 486.582654][ T36] Call Trace: [ 486.582657][ T36] [ 486.582667][ T36] __schedule+0x1ba5/0x5f70 [ 486.582693][ T36] ? lock_acquire+0x115/0x350 [ 486.582718][ T36] ? __pfx___schedule+0x10/0x10 [ 486.582737][ T36] ? schedule+0x90/0x2b0 [ 486.582751][ T36] schedule+0x164/0x2b0 [ 486.582765][ T36] io_schedule+0x7f/0xd0 [ 486.582779][ T36] bit_wait_io+0x13/0x110 [ 486.582794][ T36] __wait_on_bit+0xac/0x300 [ 486.582808][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.582824][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 486.582839][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 486.582852][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 486.582868][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 486.582888][ T36] do_get_write_access+0x658/0x10c0 [ 486.582920][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 486.582942][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 486.582962][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 486.582977][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 486.582992][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 486.583017][ T36] ext4_reserve_inode_write+0x294/0x360 [ 486.583039][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 486.583065][ T36] ext4_dirty_inode+0xd0/0x110 [ 486.583081][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 486.583096][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 486.583115][ T36] file_update_time_flags+0x399/0x440 [ 486.583131][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 486.583153][ T36] ? __pfx_filemap_fault+0x10/0x10 [ 486.583181][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 486.583198][ T36] ? lruvec_stat_mod_folio+0x222/0x2d0 [ 486.583388][ T36] do_page_mkwrite+0x147/0x310 [ 486.583419][ T36] do_pte_missing+0x6e0/0x3520 [ 486.583455][ T36] ? _raw_spin_unlock+0x28/0x50 [ 486.583482][ T36] ? __pmd_alloc+0x43c/0x530 [ 486.583506][ T36] handle_mm_fault+0x1807/0x2f80 [ 486.583541][ T36] ? handle_mm_fault+0xee/0x2f80 [ 486.583572][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.583591][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 486.583639][ T36] do_user_addr_fault+0xb35/0x1480 [ 486.583675][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 486.583703][ T36] exc_page_fault+0x6a/0xc0 [ 486.583724][ T36] asm_exc_page_fault+0x26/0x30 [ 486.583743][ T36] RIP: 0033:0x00007f5bb646cb23 [ 486.583760][ T36] RSP: 002b:00007ffeb1df0200 EFLAGS: 00010246 [ 486.583777][ T36] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b34a64000 [ 486.583790][ T36] RDX: 0000001b34a24000 RSI: 0000000000600000 RDI: 00007f5bb67ea708 [ 486.583803][ T36] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.583815][ T36] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.583825][ T36] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb1df0490 [ 486.583858][ T36] [ 486.583875][ T36] [ 486.583875][ T36] Showing all locks held in the system: [ 486.583918][ T36] locks held by kworker/u8:1/14: 6, last CPU#0: [ 486.583976][ T36] #0: ffff888020285150 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 486.584058][ T36] #1: ffffc90000137c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 486.584113][ T36] #2: ffff8880353e2100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 486.584229][ T36] #3: ffff888035314cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 486.584282][ T36] #4: ffff8880353e0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 486.584335][ T36] #5: ffff8880136477e8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60 [ 486.584398][ T36] locks held by pr/ttyS0/35: 2, on CPU#1: [ 486.584411][ T36] #0: ffffffff90034778 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 486.584465][ T36] #1: ffffffff9c23ff58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 486.584602][ T36] locks held by khungtaskd/36: 1, on CPU#0: [ 486.584615][ T36] #0: ffffffff9015ade0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 486.584711][ T36] locks held by syz-executor/5623: 3, last CPU#1: [ 486.584726][ T36] #0: ffff8880360b0a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 486.584818][ T36] #1: ffff8880353e2570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 486.584869][ T36] #2: ffff8880353e0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 486.584933][ T36] locks held by getty/8620: 2, last CPU#0: [ 486.584946][ T36] #0: ffff888033b740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 486.585039][ T36] #1: ffffc90003db32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 486.585091][ T36] locks held by syz.1.1654/10940: 3, last CPU#1: [ 486.585104][ T36] #0: ffff8880346d96c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 486.585149][ T36] #1: ffff8880353e2570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 486.585206][ T36] #2: ffff8880353e0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 486.585258][ T36] locks held by syz.3.1658/10949: 3, last CPU#0: [ 486.585271][ T36] #0: ffff88813fe43440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 486.585319][ T36] #1: ffff8880353e2478 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 486.585367][ T36] #2: ffff8880353e0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 486.585419][ T36] locks held by syz.2.1668/10950: 3, last CPU#0: [ 486.585432][ T36] #0: ffff88807f7d6588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 486.585476][ T36] #1: ffff8880353e2570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 486.585524][ T36] #2: ffff8880353e0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 486.585578][ T36] [ 486.585583][ T36] ============================================= [ 486.585583][ T36] [ 486.585593][ T36] NMI backtrace for cpu 0 [ 486.585608][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 486.585632][ T36] Tainted: [L]=SOFTLOCKUP [ 486.585639][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 486.585650][ T36] Call Trace: [ 486.585657][ T36] [ 486.585664][ T36] dump_stack_lvl+0xe8/0x150 [ 486.585696][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 486.585751][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.585784][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 486.585815][ T36] sys_info+0x135/0x170 [ 486.585837][ T36] watchdog+0x1073/0x10f0 [ 486.585881][ T36] ? watchdog+0x209/0x10f0 [ 486.585915][ T36] kthread+0x38b/0x480 [ 486.585939][ T36] ? __pfx_watchdog+0x10/0x10 [ 486.585964][ T36] ? __pfx_kthread+0x10/0x10 [ 486.585988][ T36] ret_from_fork+0x514/0xb70 [ 486.586015][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 486.586036][ T36] ? __switch_to+0xc78/0x1410 [ 486.586058][ T36] ? __pfx_kthread+0x10/0x10 [ 486.586082][ T36] ret_from_fork_asm+0x1a/0x30 [ 486.586118][ T36] [ 486.586125][ T36] Sending NMI from CPU 0 to CPUs 1: [ 486.586153][ C1] NMI backtrace for cpu 1 [ 486.586170][ C1] CPU: 1 UID: 0 PID: 35 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.586195][ C1] Tainted: [L]=SOFTLOCKUP [ 486.586201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 486.586211][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 486.586270][ C1] Code: e8 9e a6 3a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f bf b8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 486.586286][ C1] RSP: 0018:ffffc90000ab78b8 EFLAGS: 00000002 [ 486.586301][ C1] RAX: 1ffffffff3847f00 RBX: 00000000000003fd RCX: 0000000000000000 [ 486.586314][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 486.586326][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 486.586337][ C1] R10: dffffc0000000000 R11: ffffffff858edb30 R12: dffffc0000000000 [ 486.586351][ C1] R13: 0000000000000000 R14: ffffffff9c23ff80 R15: 0000000000000000 [ 486.586363][ C1] FS: 0000000000000000(0000) GS:ffff8881234cf000(0000) knlGS:0000000000000000 [ 486.586378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.586390][ C1] CR2: 0000555724ae3168 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 486.586407][ C1] Call Trace: [ 486.586414][ C1] [ 486.586423][ C1] wait_for_lsr+0x184/0x2f0 [ 486.586453][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 486.586481][ C1] serial8250_console_write+0xa7e/0x1200 [ 486.586504][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 486.586523][ C1] ? rcu_is_watching+0x16/0xb0 [ 486.586547][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 486.586580][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 486.586608][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 486.586641][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 486.586677][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 486.586704][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 486.586727][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 486.586755][ C1] ? __kthread_parkme+0x71/0x1f0 [ 486.586774][ C1] ? __kthread_parkme+0x199/0x1f0 [ 486.586795][ C1] kthread+0x38b/0x480 [ 486.586816][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 486.586838][ C1] ? __pfx_kthread+0x10/0x10 [ 486.586859][ C1] ret_from_fork+0x514/0xb70 [ 486.586880][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 486.586900][ C1] ? __switch_to+0xc78/0x1410 [ 486.586918][ C1] ? __pfx_kthread+0x10/0x10 [ 486.586939][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.586965][ C1] [ 486.587147][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 489.270771][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 489.281459][ T36] Tainted: [L]=SOFTLOCKUP [ 489.285782][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 489.295852][ T36] Call Trace: [ 489.299140][ T36] [ 489.302086][ T36] vpanic+0x26f/0x710 [ 489.306084][ T36] panic+0xc5/0xd0 [ 489.309822][ T36] ? __pfx_panic+0x10/0x10 [ 489.314245][ T36] ? wq_watchdog_touch+0xf9/0x160 [ 489.319289][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 489.325460][ T36] watchdog+0x10e7/0x10f0 [ 489.329809][ T36] ? watchdog+0x209/0x10f0 [ 489.334420][ T36] kthread+0x38b/0x480 [ 489.338510][ T36] ? __pfx_watchdog+0x10/0x10 [ 489.343196][ T36] ? __pfx_kthread+0x10/0x10 [ 489.347817][ T36] ret_from_fork+0x514/0xb70 [ 489.352448][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 489.357581][ T36] ? __switch_to+0xc78/0x1410 [ 489.362272][ T36] ? __pfx_kthread+0x10/0x10 [ 489.366870][ T36] ret_from_fork_asm+0x1a/0x30 [ 489.371654][ T36] [ 489.374950][ T36] Kernel Offset: disabled [ 489.379359][ T36] Rebooting in 86400 seconds..