last executing test programs: 47.000592515s ago: executing program 1 (id=769): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880) 46.949262208s ago: executing program 1 (id=770): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r0, r0, 0x0) 46.823674084s ago: executing program 1 (id=773): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000036c0)={0x8000000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 46.584302377s ago: executing program 1 (id=778): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x48e, &(0x7f0000000d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 46.012845128s ago: executing program 1 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002a00)={0x1, 0x0, [{0x29a}]}) 45.07785183s ago: executing program 1 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x33, 0x29, 0x1, {0x10001, [{{0x1, 0x2, 0x4}, 0x100000000, 0x85, 0x10, './proc_mnt/file0'}]}}, 0x33) 44.266563539s ago: executing program 32 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x33, 0x29, 0x1, {0x10001, [{{0x1, 0x2, 0x4}, 0x100000000, 0x85, 0x10, './proc_mnt/file0'}]}}, 0x33) 4.295832908s ago: executing program 3 (id=1176): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 3.98344695s ago: executing program 3 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) 3.82074203s ago: executing program 3 (id=1187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 3.653191641s ago: executing program 3 (id=1188): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.774220736s ago: executing program 5 (id=1194): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0xc7, 0x4, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x100800, 0x20000}, 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 2.592279417s ago: executing program 2 (id=1198): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 2.39483867s ago: executing program 2 (id=1199): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3918, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000000)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4117, 0x1015}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 2.31322919s ago: executing program 2 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='processors', 0xa) 2.15171951s ago: executing program 2 (id=1203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfd, 0xfe}}}}}]}}]}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x0, 0x1c0, 0x0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffff, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0x0, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], '\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="202328010000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.842675822s ago: executing program 5 (id=1208): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000700)={0x28, r0, 0x1, 0x70bd2b, 0x25dfcbbf, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x480d1}, 0xcc10) 1.6275811s ago: executing program 5 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.462799833s ago: executing program 5 (id=1212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000040)) 1.316289346s ago: executing program 4 (id=1213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c"], 0x198}}, 0x0) 1.202127139s ago: executing program 4 (id=1214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:04.0/enable\x00', 0x20002, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0x81d}}, 0x30) 1.179204816s ago: executing program 0 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) 1.161620961s ago: executing program 5 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x3c) 977.936139ms ago: executing program 5 (id=1217): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000840)=ANY=[]) 891.651947ms ago: executing program 4 (id=1218): syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x60180) r0 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 861.788978ms ago: executing program 0 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000040900706f6c6963796462000704060061616466610006", 0x66) 781.407396ms ago: executing program 4 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 752.612038ms ago: executing program 0 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/4096, 0x1000) 674.534675ms ago: executing program 0 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 673.57132ms ago: executing program 4 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 575.10934ms ago: executing program 0 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 527.964392ms ago: executing program 4 (id=1225): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1, r2}) 374.602411ms ago: executing program 2 (id=1226): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x4, &(0x7f00000004c0)=""/214, 0x41100, 0x29, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x15, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 253.15398ms ago: executing program 3 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './sys/class/thermal/cooling_device0/cur_state'}, 0x31) 173.212501ms ago: executing program 0 (id=1228): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 167.054988ms ago: executing program 2 (id=1229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x11, 0xc94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, [0xffffffff]}}) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) 0s ago: executing program 3 (id=1230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) kernel console output (not intermixed with test programs): bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 119.533665][ T6861] System zones: 0-1, 15-15, 18-18, 34-34 [ 119.534249][ T6861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.534301][ T6861] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 119.534345][ T6861] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 119.534361][ T6861] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 119.623289][ T6861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.430: bg 0: block 40: padding at end of block bitmap is not set [ 119.623313][ T6861] loop3: lost filesystem error report for type 5 error -117 [ 119.627984][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 119.627999][ C0] EXT4-fs (loop3): initial error at time 1790362625: ext4_validate_block_bitmap:445 [ 119.628016][ C0] EXT4-fs (loop3): last error at time 1790362625: ext4_validate_block_bitmap:445 [ 119.691690][ T5751] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 119.695313][ T6857] loop2: detected capacity change from 0 to 8192 [ 119.725613][ T6861] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 119.725631][ T6861] loop3: lost filesystem error report for type 5 error -117 [ 119.740167][ T6861] EXT4-fs (loop3): 1 truncate cleaned up [ 119.741546][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.852792][ T33] audit: type=1800 audit(1790362626.195:6): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 119.854378][ T6861] EXT4-fs (loop3): shut down requested (2) [ 119.989206][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.148227][ T5751] usb 1-1: USB disconnect, device number 4 [ 120.864718][ T6885] xt_hashlimit: size too large, truncated to 1048576 [ 121.061500][ T6894] netlink: 'syz.3.444': attribute type 12 has an invalid length. [ 121.061514][ T6894] netlink: 'syz.3.444': attribute type 29 has an invalid length. [ 121.061522][ T6894] netlink: 148 bytes leftover after parsing attributes in process `syz.3.444'. [ 121.118306][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 121.118322][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 121.118366][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 121.676449][ T6888] loop4: detected capacity change from 0 to 32768 [ 121.686302][ T6891] loop1: detected capacity change from 0 to 32768 [ 121.748559][ T6891] JBD2: Ignoring recovery information on journal [ 121.749899][ T6891] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 121.788597][ T6888] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 121.789449][ T6891] JBD2: bad block at offset 32 [ 121.814437][ T6891] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.817355][ T6888] JBD2: Ignoring recovery information on journal [ 121.946268][ T6888] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 122.079339][ T6891] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 122.079379][ T6891] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 122.079386][ T6891] OCFS2: File system is now read-only. [ 122.079391][ T6891] (syz.1.442,6891,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 122.079407][ T6891] (syz.1.442,6891,0):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 122.079420][ T6891] (syz.1.442,6891,0):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 122.079438][ T6891] (syz.1.442,6891,0):ocfs2_block_group_alloc_contig:553 ERROR: status = -30 [ 122.079458][ T6891] (syz.1.442,6891,0):ocfs2_block_group_alloc:827 ERROR: status = -30 [ 122.192675][ T6891] (syz.1.442,6891,0):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 122.192693][ T6891] (syz.1.442,6891,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 122.192707][ T6891] (syz.1.442,6891,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 122.192720][ T6891] (syz.1.442,6891,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 122.192752][ T6891] (syz.1.442,6891,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 122.192766][ T6891] (syz.1.442,6891,0):ocfs2_expand_inline_dir:2985 ERROR: status = -30 [ 122.192779][ T6891] (syz.1.442,6891,0):ocfs2_extend_dir:3349 ERROR: status = -30 [ 122.192792][ T6891] (syz.1.442,6891,0):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30 [ 122.192806][ T6891] (syz.1.442,6891,0):ocfs2_symlink:1883 ERROR: status = -30 [ 122.192820][ T6891] (syz.1.442,6891,0):ocfs2_symlink:2084 ERROR: status = -30 [ 122.428618][ T5602] ocfs2: Unmounting device (7,4) on (node local) [ 122.488743][ T5604] ocfs2: Unmounting device (7,1) on (node local) [ 122.558342][ T6918] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 122.558358][ T6918] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 122.558686][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.453'. [ 123.218942][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.369698][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 123.370196][ T9] usb 2-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 123.372890][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.375684][ T9] usb 2-1: config 0 descriptor?? [ 123.418781][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 123.439452][ T6916] loop2: detected capacity change from 0 to 32768 [ 123.578154][ T191] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.729156][ T191] usb 1-1: Using ep0 maxpacket: 32 [ 123.731152][ T191] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.733132][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.766765][ T191] usb 1-1: config 0 descriptor?? [ 123.883500][ T6926] loop3: detected capacity change from 0 to 32768 [ 123.964842][ T6926] find_entry called with index >= next_index [ 123.964850][ T6926] find_entry called with index >= next_index [ 123.964855][ T6926] find_entry called with index >= next_index [ 123.964860][ T6926] find_entry called with index >= next_index [ 123.964865][ T6926] find_entry called with index >= next_index [ 123.964875][ T6926] add_index: next_index = 0. Resetting! [ 123.964886][ T6926] find_entry called with index >= next_index [ 123.964890][ T6926] find_entry called with index >= next_index [ 123.964895][ T6926] find_entry called with index >= next_index [ 124.059784][ T191] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 124.080132][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.082895][ T191] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 124.082939][ T191] usb 1-1: media controller created [ 124.085628][ T6926] non-latin1 character 0x3ff found in JFS file name [ 124.085638][ T6926] mount with iocharset=utf8 to access [ 124.175315][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.236890][ T9] gspca_sonixj: reg_r err -71 [ 124.236952][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 124.273446][ T9] usb 2-1: USB disconnect, device number 3 [ 124.347762][ T191] az6027: usb out operation failed. (-71) [ 124.355573][ T191] az6027: usb out operation failed. (-71) [ 124.355582][ T191] stb0899_attach: Driver disabled by Kconfig [ 124.355588][ T191] az6027: no front-end attached [ 124.355588][ T191] [ 124.357284][ T191] az6027: usb out operation failed. (-71) [ 124.357293][ T191] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 124.358735][ T191] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 124.495665][ T191] dvb-usb: schedule remote query interval to 400 msecs. [ 124.495680][ T191] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.536003][ T191] usb 1-1: USB disconnect, device number 5 [ 124.730611][ T191] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 124.794096][ T6953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.470'. [ 124.819515][ T5733] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.968231][ T5733] usb 5-1: Using ep0 maxpacket: 32 [ 124.968808][ T5733] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 124.972466][ T5733] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.972484][ T5733] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.017136][ T5733] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.017152][ T5733] usb 5-1: Product: syz [ 125.017162][ T5733] usb 5-1: Manufacturer: syz [ 125.039866][ T5733] usb 5-1: Device is not authorized for usage [ 125.098560][ T6956] erspan0: entered promiscuous mode [ 125.132730][ T6956] erspan0: left promiscuous mode [ 125.683454][ T6978] loop0: detected capacity change from 0 to 512 [ 125.711641][ T6978] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 125.711653][ T6978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 125.711702][ T6978] System zones: 0-1, 15-15, 18-18, 34-34 [ 125.711863][ T6978] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.711908][ T6978] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 125.711949][ T6978] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.711965][ T6978] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 125.715556][ T6978] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.480: bad orphan inode 16 [ 125.715581][ T6978] loop0: lost filesystem error report for type 5 error -117 [ 125.723805][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 125.723817][ C0] EXT4-fs (loop0): initial error at time 1790362632: ext4_orphan_get:1429 [ 125.723831][ C0] EXT4-fs (loop0): last error at time 1790362632: ext4_orphan_get:1429 [ 125.736868][ T6978] ext4_test_bit(bit=15, block=18) = 1 [ 125.736879][ T6978] is_bad_inode(inode)=0 [ 125.736884][ T6978] NEXT_ORPHAN(inode)=0 [ 125.736889][ T6978] max_ino=32 [ 125.736894][ T6978] i_nlink=2 [ 125.809347][ T6978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.863258][ T6970] can0: slcan on ttyS3. [ 126.029258][ T6978] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5603] was attempted by "֟2?bE=\x22.;ڱ%13GGdžOb\x22҈8C\x09yf|yƓ|W+G5K?hfFWF~~42׆?I~!?uGm~quXks{iNsٺs7Wo,ml[Ccy^\x07\x09u=[w~8D=~%LW^awįĨ<)vB{?C\x0a fڵPBRx8ODNʣ;>c$ngM-V\x1bvj\x1bӑWWdg w?\x0d `NQ҈xȯ\x1byTMU N % [ 126.063990][ T6984] Bluetooth: MGMT ver 1.23 [ 126.212814][ T6967] can0 (unregistered): slcan off ttyS3. [ 126.222839][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.373436][ T6986] kAFS: Invalid Command on /proc/fs/afs/cells file [ 126.396455][ T6989] program syz.2.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.407909][ T5733] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 126.538769][ T5733] usb 4-1: device descriptor read/64, error -71 [ 126.654996][ T6998] erspan0: entered promiscuous mode [ 126.668461][ T6998] erspan0: left promiscuous mode [ 126.727779][ T6995] loop1: detected capacity change from 0 to 4096 [ 126.778365][ T5733] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.907968][ T5733] usb 4-1: device descriptor read/64, error -71 [ 127.019504][ T5733] usb usb4-port1: attempt power cycle [ 127.119074][ T33] audit: type=1400 audit(1790362633.455:7): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7004 comm="syz.0.504" name="p" offset=64 [ 127.303230][ T7009] loop0: detected capacity change from 0 to 1024 [ 127.334222][ T7009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.358033][ T5733] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.381964][ T5733] usb 4-1: device descriptor read/8, error -71 [ 127.419827][ T7016] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 127.517620][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.618240][ T5733] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 127.634346][ T9] usb 5-1: USB disconnect, device number 2 [ 127.654092][ T5733] usb 4-1: device descriptor read/8, error -71 [ 127.759206][ T5733] usb usb4-port1: unable to enumerate USB device [ 127.864950][ T7026] loop2: detected capacity change from 0 to 1024 [ 127.913766][ T7026] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 127.933334][ T7026] hfsplus: hfsplus: invalid btree header node [ 127.933341][ T7026] hfsplus: (loop2): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 127.933353][ T7026] hfsplus: Run fsck.hfsplus to repair. [ 128.158637][ T7036] loop0: detected capacity change from 0 to 164 [ 128.650355][ T7049] loop1: detected capacity change from 0 to 1024 [ 128.686048][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.686103][ T7049] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.751371][ T33] audit: type=1800 audit(1790362635.095:8): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 128.795805][ T33] audit: type=1800 audit(1790362635.135:9): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 128.846303][ T7049] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.515: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.880153][ T7049] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 128.880173][ T7049] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.880173][ T7049] [ 128.988303][ T7049] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 1: comm syz.1.515: lblock 1 mapped to illegal pblock 1 (length 3) [ 129.028719][ T7049] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 129.028739][ T7049] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.028739][ T7049] [ 129.123061][ T33] audit: type=1400 audit(1790362635.465:10): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=7057 comm="syz.2.518" offset=16 [ 129.190579][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.720949][ T7050] loop0: detected capacity change from 0 to 32768 [ 129.726453][ T7050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.513 (7050) [ 129.771688][ T7050] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.771707][ T7050] BTRFS info (device loop0): using sha256 checksum algorithm [ 129.898759][ T7050] BTRFS info (device loop0): rebuilding free space tree [ 129.987110][ T7094] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 130.021827][ T7050] BTRFS info (device loop0): disabling free space tree [ 130.021864][ T7050] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.021878][ T7050] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.086497][ T7050] BTRFS info (device loop0): setting nodatasum [ 130.086512][ T7050] BTRFS info (device loop0): setting nodatacow [ 130.086522][ T7050] BTRFS info (device loop0): turning off barriers [ 130.086533][ T7050] BTRFS info (device loop0): force clearing of disk cache [ 130.295786][ T7096] loop1: detected capacity change from 0 to 4096 [ 130.480538][ T7105] loop2: detected capacity change from 0 to 512 [ 130.554972][ T5603] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 131.080052][ T7125] loop1: detected capacity change from 0 to 1024 [ 131.178987][ T7111] loop4: detected capacity change from 0 to 32768 [ 131.180516][ T7111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.538 (7111) [ 131.221069][ T7111] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.221098][ T7111] BTRFS info (device loop4): using crc32c checksum algorithm [ 131.374127][ T7111] BTRFS info (device loop4): enabling ssd optimizations [ 131.374153][ T7111] BTRFS info (device loop4): turning on flush-on-commit [ 131.374169][ T7111] BTRFS info (device loop4): enabling free space tree [ 131.374184][ T7111] BTRFS info (device loop4): enabling auto defrag [ 131.374199][ T7111] BTRFS info (device loop4): use lzo compression, level 1 [ 131.374217][ T7111] BTRFS info (device loop4): max_inline set to 4096 [ 131.817561][ T5602] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.834087][ T7152] loop0: detected capacity change from 0 to 128 [ 131.871221][ T7152] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.871249][ T7152] hpfs: filesystem error: improperly stopped [ 131.871263][ T7152] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.871277][ T7152] hpfs: You really don't want any checks? You are crazy... [ 131.871288][ T7152] hpfs: Code page index out of array [ 131.871311][ T7152] hpfs: code page support is disabled [ 131.871594][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 131.871660][ T7152] hpfs: hpfs_map_4sectors(): unaligned read [ 131.871670][ T7152] hpfs: filesystem error: unable to find root dir [ 132.082793][ T7149] loop1: detected capacity change from 0 to 32768 [ 132.084876][ T7149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.548 (7149) [ 132.107718][ T7149] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.107743][ T7149] BTRFS info (device loop1): using sha256 checksum algorithm [ 132.212618][ T7149] BTRFS info (device loop1): rebuilding free space tree [ 132.287410][ T7149] BTRFS info (device loop1): disabling free space tree [ 132.287464][ T7149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.287486][ T7149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.346074][ T7149] BTRFS info (device loop1): setting nodatasum [ 132.346096][ T7149] BTRFS info (device loop1): setting nodatacow [ 132.346111][ T7149] BTRFS info (device loop1): turning off barriers [ 132.346128][ T7149] BTRFS info (device loop1): force clearing of disk cache [ 132.600383][ T5604] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.778466][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778516][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.248304][ T5751] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.401614][ T5751] usb 2-1: New USB device found: idVendor=1223, idProduct=3f07, bcdDevice=0.00 [ 133.404786][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.404813][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.404833][ T5751] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.404869][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.407952][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.427127][ T5751] usb 2-1: config 0 descriptor?? [ 133.547136][ T33] audit: type=1326 audit(1790362639.885:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.3.567" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b7859e159 code=0x0 [ 133.587939][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 133.588559][ T32] usb 5-1: New USB device found: idVendor=046d, idProduct=c51b, bcdDevice=0.00 [ 133.589559][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.589592][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.595080][ T32] usb 5-1: Device is not authorized for usage [ 133.866103][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.869484][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.911465][ T5751] ortek 0003:1223:3F07.0003: Fixing up logical maximum in report descriptor (Skycable) [ 133.912217][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912246][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912270][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x1 [ 133.912293][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912316][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912339][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912361][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912384][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912408][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912430][ T5751] ortek 0003:1223:3F07.0003: unknown main item tag 0x0 [ 133.912511][ T5751] ortek 0003:1223:3F07.0003: unexpected long global item [ 133.916818][ T5751] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22 [ 134.090301][ T191] usb 2-1: USB disconnect, device number 4 [ 134.148030][ T33] audit: type=1326 audit(1790362640.485:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x0 [ 134.441216][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 134.441988][ T7232] loop3: detected capacity change from 0 to 512 [ 134.491167][ T7232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.491243][ T7232] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.576820][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.700123][ T7241] loop3: detected capacity change from 0 to 2048 [ 134.724239][ T7241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.742639][ T7243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.578'. [ 135.054492][ T7253] syz.3.583 uses obsolete (PF_INET,SOCK_PACKET) [ 135.591987][ T7277] tun0: tun_chr_ioctl cmd 1074025677 [ 135.592074][ T7277] tun0: linktype set to 773 [ 135.656098][ T7269] loop2: detected capacity change from 0 to 32768 [ 135.671500][ T7269] (syz.2.587,7269,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.675089][ T7269] (syz.2.587,7269,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.705053][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.736120][ T7269] JBD2: Ignoring recovery information on journal [ 135.817282][ T7269] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.858134][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 135.858778][ T27] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.860289][ T27] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 135.860337][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.860364][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.860387][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.860411][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.860433][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.860470][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.083329][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 136.155328][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 136.155371][ T27] usbtmc 4-1:16.0: can't read capabilities [ 136.222233][ T27] usb 5-1: USB disconnect, device number 3 [ 136.384091][ T9] usb 4-1: USB disconnect, device number 7 [ 136.530848][ T7301] loop4: detected capacity change from 0 to 1024 [ 136.592060][ T7301] hfsplus: xattr search failed [ 136.617521][ T7295] loop2: detected capacity change from 0 to 32768 [ 136.630288][ T7295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.600 (7295) [ 136.634984][ T7301] hfsplus: xattr search failed [ 136.667118][ T7295] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.667145][ T7295] BTRFS info (device loop2): using sha256 checksum algorithm [ 136.820423][ T7295] BTRFS info (device loop2): rebuilding free space tree [ 136.847451][ T7318] loop1: detected capacity change from 0 to 2048 [ 136.880526][ T7295] BTRFS info (device loop2): disabling free space tree [ 136.880581][ T7295] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.880602][ T7295] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.992891][ T7320] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.012603][ T7295] BTRFS info (device loop2): setting nodatasum [ 137.012623][ T7295] BTRFS info (device loop2): setting nodatacow [ 137.012638][ T7295] BTRFS info (device loop2): turning off barriers [ 137.012670][ T7295] BTRFS info (device loop2): force clearing of disk cache [ 137.210216][ T7323] loop4: detected capacity change from 0 to 512 [ 137.222019][ T7323] EXT4-fs: Ignoring removed bh option [ 137.222765][ T7323] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.253261][ T7323] EXT4-fs (loop4): 1 truncate cleaned up [ 137.280331][ T7320] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 137.280351][ T7320] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 137.311004][ T7320] Remounting filesystem read-only [ 137.336890][ T7323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.348702][ T5604] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 137.498703][ T5619] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.561230][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.087273][ T7351] loop0: detected capacity change from 0 to 512 [ 138.143110][ T7351] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61417200 (sector = 1) [ 138.393159][ T7360] loop2: detected capacity change from 0 to 512 [ 138.396756][ T7360] EXT4-fs: Ignoring removed bh option [ 138.407754][ T7360] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 138.436675][ T7360] EXT4-fs (loop2): 1 truncate cleaned up [ 138.464903][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.483764][ T7363] loop0: detected capacity change from 0 to 1024 [ 138.502229][ T7363] gfs2: path_lookup on c::: returned error -2 [ 138.518215][ T191] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.601393][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.665435][ T7365] comedi: valid board names for 8255 driver are: [ 138.665447][ T7365] 8255 [ 138.665454][ T7365] comedi: valid board names for vmk80xx driver are: [ 138.665462][ T7365] vmk80xx [ 138.665469][ T7365] comedi: valid board names for usbduxsigma driver are: [ 138.665477][ T7365] usbduxsigma [ 138.665484][ T7365] comedi: valid board names for usbduxfast driver are: [ 138.665492][ T7365] usbduxfast [ 138.665498][ T7365] comedi: valid board names for usbdux driver are: [ 138.665506][ T7365] usbdux [ 138.665512][ T7365] comedi: valid board names for ni6501 driver are: [ 138.665521][ T7365] ni6501 [ 138.665527][ T7365] comedi: valid board names for dt9812 driver are: [ 138.665535][ T7365] dt9812 [ 138.665541][ T7365] comedi: valid board names for ni_labpc_cs driver are: [ 138.665550][ T7365] ni_labpc_cs [ 138.665556][ T7365] comedi: valid board names for ni_daq_700 driver are: [ 138.665565][ T7365] ni_daq_700 [ 138.665571][ T7365] comedi: valid board names for labpc_pci driver are: [ 138.665580][ T7365] labpc_pci [ 138.665586][ T7365] comedi: valid board names for adl_pci9118 driver are: [ 138.665594][ T7365] pci9118dg [ 138.665600][ T7365] pci9118hg [ 138.665607][ T7365] pci9118hr [ 138.665613][ T7365] comedi: valid board names for 8255_pci driver are: [ 138.665621][ T7365] 8255_pci [ 138.665627][ T7365] comedi: valid board names for s526 driver are: [ 138.665635][ T7365] s526 [ 138.665641][ T7365] comedi: valid board names for multiq3 driver are: [ 138.665650][ T7365] multiq3 [ 138.665656][ T7365] comedi: valid board names for pcmuio driver are: [ 138.665664][ T7365] pcmuio48 [ 138.665670][ T7365] pcmuio96 [ 138.665676][ T7365] comedi: valid board names for pcmmio driver are: [ 138.665684][ T7365] pcmmio [ 138.665691][ T7365] comedi: valid board names for pcmda12 driver are: [ 138.665698][ T7365] pcmda12 [ 138.665705][ T7365] comedi: valid board names for pcmad driver are: [ 138.665712][ T7365] pcmad12 [ 138.665719][ T7365] pcmad16 [ 138.665725][ T7365] comedi: valid board names for ni_labpc driver are: [ 138.665734][ T7365] lab-pc-1200 [ 138.665740][ T7365] lab-pc-1200ai [ 138.665746][ T7365] lab-pc+ [ 138.665752][ T7365] comedi: valid board names for atmio16 driver are: [ 138.665760][ T7365] atmio16 [ 138.665766][ T7365] atmio16d [ 138.665772][ T7365] comedi: valid board names for ni_at_ao driver are: [ 138.665780][ T7365] at-ao-6 [ 138.665786][ T7365] at-ao-10 [ 138.665793][ T7365] comedi: valid board names for ni_at_a2150 driver are: [ 138.665801][ T7365] ni_at_a2150 [ 138.665807][ T7365] comedi: valid board names for adq12b driver are: [ 138.665815][ T7365] adq12b [ 138.665821][ T7365] comedi: valid board names for mpc624 driver are: [ 138.665829][ T7365] mpc624 [ 138.665835][ T7365] comedi: valid board names for c6xdigio driver are: [ 138.665843][ T7365] c6xdigio [ 138.665849][ T7365] comedi: valid board names for aio_iiro_16 driver are: [ 138.665857][ T7365] aio_iiro_16 [ 138.665863][ T7365] comedi: valid board names for aio_aio12_8 driver are: [ 138.665871][ T7365] aio_aio12_8 [ 138.665877][ T7365] aio_ai12_8 [ 138.665883][ T7365] aio_ao12_4 [ 138.665890][ T7365] comedi: valid board names for fl512 driver are: [ 138.665898][ T7365] fl512 [ 138.665904][ T7365] comedi: valid board names for dmm32at driver are: [ 138.665911][ T7365] dmm32at [ 138.665917][ T7365] comedi: valid board names for dt282x driver are: [ 138.665925][ T7365] dt2821 [ 138.665931][ T7365] dt2821-f [ 138.665937][ T7365] dt2821-g [ 138.665943][ T7365] dt2823 [ 138.665949][ T7365] dt2824-pgh [ 138.665955][ T7365] dt2824-pgl [ 138.665962][ T7365] dt2825 [ 138.665967][ T7365] dt2827 [ 138.665973][ T7365] dt2828 [ 138.665979][ T7365] dt2829 [ 138.665985][ T7365] dt21-ez [ 138.665991][ T7365] dt23-ez [ 138.665997][ T7365] dt24-ez [ 138.666003][ T7365] dt24-ez-pgl [ 138.666010][ T7365] comedi: valid board names for dt2817 driver are: [ 138.666017][ T7365] dt2817 [ 138.666024][ T7365] comedi: valid board names for dt2815 driver are: [ 138.666031][ T7365] dt2815 [ 138.666037][ T7365] comedi: valid board names for dt2814 driver are: [ 138.666045][ T7365] dt2814 [ 138.666051][ T7365] comedi: valid board names for dt2811 driver are: [ 138.666059][ T7365] dt2811-pgh [ 138.666065][ T7365] dt2811-pgl [ 138.666071][ T7365] comedi: valid board names for dt2801 driver are: [ 138.666079][ T7365] dt2801 [ 138.666085][ T7365] comedi: valid board names for das6402 driver are: [ 138.666093][ T7365] das6402-12 [ 138.666099][ T7365] das6402-16 [ 138.666106][ T7365] comedi: valid board names for das1800 driver are: [ 138.666114][ T7365] das-1701st [ 138.666120][ T7365] das-1701st-da [ 138.666126][ T7365] das-1702st [ 138.666132][ T7365] das-1702st-da [ 138.666138][ T7365] das-1702hr [ 138.666145][ T7365] das-1702hr-da [ 138.666151][ T7365] das-1701ao [ 138.666157][ T7365] das-1702ao [ 138.666163][ T7365] das-1801st [ 138.666169][ T7365] das-1801st-da [ 138.666188][ T7365] das-1802st [ 138.666195][ T7365] das-1802st-da [ 138.666201][ T7365] das-1802hr [ 138.666207][ T7365] das-1802hr-da [ 138.666214][ T7365] das-1801hc [ 138.666225][ T7365] das-1802hc [ 138.666231][ T7365] das-1801ao [ 138.666237][ T7365] das-1802ao [ 138.666244][ T7365] comedi: valid board names for das800 driver are: [ 138.666252][ T7365] das-800 [ 138.666258][ T7365] cio-das800 [ 138.666264][ T7365] das-801 [ 138.666270][ T7365] cio-das801 [ 138.666276][ T7365] das-802 [ 138.666282][ T7365] cio-das802 [ 138.666288][ T7365] cio-das802/16 [ 138.666295][ T7365] comedi: valid board names for isa-das08 driver are: [ 138.666302][ T7365] isa-das08 [ 138.666309][ T7365] das08-pgm [ 138.666315][ T7365] das08-pgh [ 138.666321][ T7365] das08-pgl [ 138.666327][ T7365] das08-aoh [ 138.666333][ T7365] das08-aol [ 138.666339][ T7365] das08-aom [ 138.666345][ T7365] das08/jr-ao [ 138.666351][ T7365] das08jr-16-ao [ 138.666358][ T7365] pc104-das08 [ 138.666392][ T7365] das08jr/16 [ 138.666398][ T7365] comedi: valid board names for das16m1 driver are: [ 138.666407][ T7365] das16m1 [ 138.666413][ T7365] comedi: valid board names for dac02 driver are: [ 138.666422][ T7365] dac02 [ 138.666428][ T7365] comedi: valid board names for rti802 driver are: [ 138.666435][ T7365] rti802 [ 138.666441][ T7365] comedi: valid board names for rti800 driver are: [ 138.666449][ T7365] rti800 [ 138.666455][ T7365] rti815 [ 138.666461][ T7365] comedi: valid board names for pcm3724 driver are: [ 138.666469][ T7365] pcm3724 [ 138.666476][ T7365] comedi: valid board names for pcl818 driver are: [ 138.666484][ T7365] pcl818l [ 138.666490][ T7365] pcl818h [ 138.666496][ T7365] pcl818hd [ 138.666502][ T7365] pcl818hg [ 138.666508][ T7365] pcl818 [ 138.666515][ T7365] pcl718 [ 138.666521][ T7365] pcm3718 [ 138.666527][ T7365] comedi: valid board names for pcl816 driver are: [ 138.700676][ T191] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 138.722920][ T191] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 138.722977][ T191] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 138.723086][ T191] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.726808][ T7365] pcl816 [ 138.726827][ T7365] pcl814b [ 138.726845][ T7365] comedi: valid board names for pcl812 driver are: [ 138.726871][ T7365] pcl812 [ 138.726883][ T7365] pcl812pg [ 138.726899][ T7365] acl8112pg [ 138.726962][ T7365] acl8112dg [ 138.726979][ T7365] acl8112hg [ 138.726996][ T7365] a821pgl [ 138.727007][ T7365] a821pglnda [ 138.727025][ T7365] a821pgh [ 138.727042][ T7365] a822pgl [ 138.727053][ T7365] a822pgh [ 138.727116][ T7365] a823pgl [ 138.727133][ T7365] a823pgh [ 138.727150][ T7365] pcl813 [ 138.727161][ T7365] pcl813b [ 138.727178][ T7365] acl8113 [ 138.727196][ T7365] iso813 [ 138.727214][ T7365] acl8216 [ 138.727230][ T7365] a826pg [ 138.727277][ T7365] comedi: valid board names for pcl730 driver are: [ 138.727304][ T7365] pcl730 [ 138.727315][ T7365] iso730 [ 138.727332][ T7365] acl7130 [ 138.727349][ T7365] pcm3730 [ 138.727360][ T7365] pcl725 [ 138.727377][ T7365] p8r8dio [ 138.727388][ T7365] acl7225b [ 138.727450][ T7365] p16r16dio [ 138.727469][ T7365] pcl733 [ 138.727486][ T7365] pcl734 [ 138.727497][ T7365] opmm-1616-xt [ 138.727514][ T7365] pearl-mm-p [ 138.727525][ T7365] ir104-pbf [ 138.727542][ T7365] comedi: valid board names for pcl726 driver are: [ 138.727585][ T7365] pcl726 [ 138.727592][ T7365] pcl727 [ 138.727598][ T7365] pcl728 [ 138.727617][ T7365] acl6126 [ 138.727641][ T7365] acl6128 [ 138.727666][ T7365] comedi: valid board names for pcl724 driver are: [ 138.727690][ T7365] pcl724 [ 138.727756][ T7365] pcl722 [ 138.727779][ T7365] pcl731 [ 138.727790][ T7365] acl7122 [ 138.727806][ T7365] acl7124 [ 138.727818][ T7365] pet48dio [ 138.727835][ T7365] pcmio48 [ 138.777560][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.777615][ T191] usb 5-1: Product: syz [ 138.777644][ T191] usb 5-1: Manufacturer: syz [ 138.777679][ T191] usb 5-1: SerialNumber: syz [ 138.823035][ T7365] onyx-mm-dio [ 138.823063][ T7365] comedi: valid board names for pcl711 driver are: [ 138.823188][ T7365] pcl711 [ 138.823206][ T7365] pcl711b [ 138.823226][ T7365] acl8112hg [ 138.823250][ T7365] acl8112dg [ 138.823261][ T7365] comedi: valid board names for amplc_pc263 driver are: [ 138.823285][ T7365] pc263 [ 138.823297][ T7365] comedi: valid board names for amplc_pc236 driver are: [ 138.823322][ T7365] pc36at [ 138.823339][ T7365] comedi: valid board names for amplc_dio200 driver are: [ 138.823358][ T7365] pc212e [ 138.823375][ T7365] pc214e [ 138.823386][ T7365] pc215e [ 138.823449][ T7365] pc218e [ 138.823466][ T7365] pc272e [ 138.823485][ T7365] comedi: valid board names for comedi_parport driver are: [ 138.823508][ T7365] comedi_parport [ 138.823514][ T7365] comedi: valid board names for comedi_test driver are: [ 138.823523][ T7365] comedi_test [ 138.823529][ T7365] comedi: valid board names for comedi_bond driver are: [ 138.823538][ T7365] comedi_bond [ 139.082877][ T191] usb 5-1: Device is not authorized for usage [ 139.754660][ T7375] loop1: detected capacity change from 0 to 4096 [ 139.803907][ T7376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.101771][ T7388] netlink: 88 bytes leftover after parsing attributes in process `syz.0.634'. [ 140.163457][ T7391] loop1: detected capacity change from 0 to 1024 [ 140.206570][ T33] audit: type=1800 audit(1790362646.545:13): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 140.268804][ T7373] loop3: detected capacity change from 0 to 32768 [ 140.271783][ T7373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.625 (7373) [ 140.301081][ T7373] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.301109][ T7373] BTRFS info (device loop3): using sha256 checksum algorithm [ 140.383987][ T7373] BTRFS info (device loop3): rebuilding free space tree [ 140.420590][ T7373] BTRFS info (device loop3): disabling free space tree [ 140.420646][ T7373] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.420666][ T7373] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.456610][ T7373] BTRFS info (device loop3): setting nodatasum [ 140.456631][ T7373] BTRFS info (device loop3): setting nodatacow [ 140.456645][ T7373] BTRFS info (device loop3): turning off barriers [ 140.456660][ T7373] BTRFS info (device loop3): force clearing of disk cache [ 140.656245][ T7413] loop1: detected capacity change from 0 to 128 [ 140.742139][ T5605] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.126257][ T32] usb 5-1: USB disconnect, device number 4 [ 141.161012][ T7428] pim6reg: entered allmulticast mode [ 141.190508][ T7427] pim6reg: left allmulticast mode [ 141.314785][ T7433] jffs2: notice: (7433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 141.549090][ T7450] loop3: detected capacity change from 0 to 64 [ 141.686407][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 142.058242][ T7474] netlink: 2 bytes leftover after parsing attributes in process `syz.3.660'. [ 142.099868][ T5607] block nbd0: Receive control failed (result -32) [ 142.155189][ T7470] loop0: detected capacity change from 0 to 4096 [ 142.165908][ T7470] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 142.190798][ T7479] loop3: detected capacity change from 0 to 256 [ 142.212355][ T7476] sctp: [Deprecated]: syz.2.663 (pid 7476) Use of int in max_burst socket option deprecated. [ 142.212355][ T7476] Use struct sctp_assoc_value instead [ 142.256301][ T7470] ntfs3(loop0): Failed to initialize $Secure::$SDH (-22). [ 142.256398][ T7470] ntfs3(loop0): Failed to initialize $Secure (-22). [ 142.278210][ T7479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 142.505088][ T7492] loop1: detected capacity change from 0 to 128 [ 142.536267][ T7492] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.536607][ T7492] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.625897][ T33] audit: type=1800 audit(1790362648.965:14): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.672" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 142.803011][ T5604] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.909422][ T7504] program syz.2.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.144983][ T7470] loop0: detected capacity change from 0 to 32768 [ 143.159514][ T7470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.661 (7470) [ 143.190410][ T7470] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.190439][ T7470] BTRFS info (device loop0): using crc32c checksum algorithm [ 143.329146][ T7470] BTRFS info (device loop0): enabling ssd optimizations [ 143.329171][ T7470] BTRFS info (device loop0): turning on flush-on-commit [ 143.329187][ T7470] BTRFS info (device loop0): enabling free space tree [ 143.329202][ T7470] BTRFS info (device loop0): enabling auto defrag [ 143.329218][ T7470] BTRFS info (device loop0): use lzo compression, level 1 [ 143.329236][ T7470] BTRFS info (device loop0): max_inline set to 4096 [ 143.482909][ T7538] loop2: detected capacity change from 0 to 1024 [ 143.560425][ T7538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.560509][ T7538] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.626413][ T5603] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.784591][ T7547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.784673][ T7547] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.838951][ T1008] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.849278][ T1008] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 143.849341][ T1008] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.849341][ T1008] [ 143.889195][ T7547] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.687: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.919216][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.919508][ T7551] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.687: lblock 0 mapped to illegal pblock 0 (length 1) [ 143.923992][ T7547] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 143.924062][ T7547] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.924062][ T7547] [ 144.156374][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.317658][ T7561] bond0: option arp_interval: invalid value ( ) [ 144.317681][ T7561] bond0: option arp_interval: allowed values 0 - 2147483647 [ 145.074302][ T7598] jffs2: notice: (7598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.269097][ T7577] set_capacity_and_notify: 1 callbacks suppressed [ 145.269116][ T7577] loop3: detected capacity change from 0 to 32768 [ 145.449525][ T32] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 145.528807][ T7616] loop4: detected capacity change from 0 to 512 [ 145.530943][ T12] IPVS: starting estimator thread 0... [ 145.600303][ T32] usb 3-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00 [ 145.601258][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.601285][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.601305][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.601343][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.604008][ T32] usb 3-1: config 0 descriptor?? [ 145.644402][ T7617] IPVS: using max 32 ests per chain, 76800 per kthread [ 146.043226][ T32] hid_parser_main: 7 callbacks suppressed [ 146.043247][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043274][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043298][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043322][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043346][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043368][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043392][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043415][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043449][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.043472][ T32] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 146.182891][ T32] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 146.200361][ T5719] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.243046][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 146.265641][ T32] usb 3-1: USB disconnect, device number 6 [ 146.445620][ T7636] fido_id[7636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.464097][ T5719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.464144][ T5719] usb 4-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 146.466222][ T5719] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 146.466259][ T5719] usb 4-1: can't read configurations, error -71 [ 146.594895][ T7631] loop1: detected capacity change from 0 to 32768 [ 146.654799][ T7631] ialloc: diAlloc returned -17! [ 146.665634][ T7631] ea_get: invalid extended attribute [ 146.665649][ T7631] ffff888058945b88: 03 00 00 ... [ 146.988565][ T7650] pim6reg1: tun_chr_ioctl cmd 2148553947 [ 147.660003][ T7657] loop3: detected capacity change from 0 to 32768 [ 147.735448][ T7657] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.812666][ T5607] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.814950][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.908188][ T7657] XFS (loop3): Ending clean mount [ 148.099934][ T5605] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.315382][ T7690] loop1: detected capacity change from 0 to 1764 [ 148.465219][ T7696] loop4: detected capacity change from 0 to 4096 [ 148.489914][ T7696] ntfs3(loop4): ino=0, mi_enum_attr [ 148.544819][ T7696] ntfs3(loop4): ino=0, mi_enum_attr [ 148.544846][ T7696] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 148.560811][ T7696] ntfs3(loop4): ino=0, mi_enum_attr [ 149.061108][ T7717] xt_hashlimit: size too large, truncated to 1048576 [ 149.091516][ T7719] loop1: detected capacity change from 0 to 512 [ 149.101785][ T7719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.122966][ T7721] xt_connbytes: Forcing CT accounting to be enabled [ 149.123178][ T7721] ip6t_hbh: Not strict - not implemented [ 149.138145][ T7719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 149.138413][ T7719] System zones: 1-12 [ 149.149722][ T7719] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.756: bad orphan inode 131072 [ 149.149783][ T7719] loop1: lost filesystem error report for type 5 error -117 [ 149.157915][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 149.157961][ C0] EXT4-fs (loop1): initial error at time 1790362655: ext4_orphan_get:1429 [ 149.158008][ C0] EXT4-fs (loop1): last error at time 1790362655: ext4_orphan_get:1429 [ 149.177261][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.289836][ T5733] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.368311][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.438309][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 149.443804][ T5733] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 149.451300][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.474381][ T5733] usb 3-1: config 0 descriptor?? [ 149.710683][ T5733] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 149.753744][ T5733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.768122][ T5733] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 149.768168][ T5733] usb 3-1: media controller created [ 149.816937][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.981086][ T5733] az6027: usb out operation failed. (-71) [ 149.982877][ T5733] az6027: usb out operation failed. (-71) [ 149.982890][ T5733] stb0899_attach: Driver disabled by Kconfig [ 149.982899][ T5733] az6027: no front-end attached [ 149.982899][ T5733] [ 149.984315][ T5733] az6027: usb out operation failed. (-71) [ 149.984329][ T5733] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 150.002528][ T5733] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 150.061482][ T5733] dvb-usb: schedule remote query interval to 400 msecs. [ 150.061500][ T5733] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.081482][ T5733] usb 3-1: USB disconnect, device number 7 [ 150.282355][ T5733] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 150.418308][ T5719] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.436329][ T7769] loop1: detected capacity change from 0 to 512 [ 150.482830][ T7769] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.778: bg 0: block 104: invalid block bitmap [ 150.483475][ T7769] loop1: lost filesystem error report for type 5 error -117 [ 150.498498][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 150.498517][ C1] EXT4-fs (loop1): initial error at time 1790362656: ext4_validate_block_bitmap:436 [ 150.498539][ C1] EXT4-fs (loop1): last error at time 1790362656: ext4_validate_block_bitmap:436 [ 150.534737][ T7769] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 150.534759][ T7769] loop1: lost filesystem error report for type 5 error -117 [ 150.535394][ T7769] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.778: invalid indirect mapped block 1 (level 1) [ 150.535425][ T7769] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.537746][ T7769] EXT4-fs (loop1): 1 truncate cleaned up [ 150.588589][ T7769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.610125][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 150.615676][ T5719] usb 4-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 150.625905][ T5719] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 150.625939][ T5719] usb 4-1: config 1 has no interface number 0 [ 150.625980][ T5719] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 150.626006][ T5719] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 150.626032][ T5719] usb 4-1: config 1 interface 105 has no altsetting 0 [ 150.671735][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.671758][ T5719] usb 4-1: Product: syz [ 150.671772][ T5719] usb 4-1: Manufacturer: syz [ 150.671786][ T5719] usb 4-1: SerialNumber: syz [ 150.678781][ T7761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.678881][ T7761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.838945][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.882931][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.895774][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.902058][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.937672][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.951835][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.955886][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.963739][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.975200][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 150.996728][ T5604] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: comm syz-executor: invalid size [ 151.132679][ T7761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.132793][ T7761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.337440][ T5719] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 151.352555][ T5719] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 151.382555][ T5719] usb 4-1: USB disconnect, device number 10 [ 151.389750][ T5733] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.548835][ T5733] usb 5-1: Using ep0 maxpacket: 32 [ 151.549599][ T5733] usb 5-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 151.550955][ T5733] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 151.550985][ T5733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.551017][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.556035][ T5733] usb 5-1: Device is not authorized for usage [ 151.695733][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.715571][ T7787] loop2: detected capacity change from 0 to 40427 [ 151.746792][ T7787] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 151.746815][ T7787] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.781764][ T7787] F2FS-fs (loop2): invalid crc value [ 151.782929][ T7787] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 151.894483][ T1008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.024577][ T7787] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.053989][ T7787] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.054014][ T7787] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.099284][ T1008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.171073][ T5619] syz-executor: attempt to access beyond end of device [ 152.171073][ T5619] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 152.171361][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 152.171388][ T5619] Tainted: [L]=SOFTLOCKUP [ 152.171396][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.171407][ T5619] Call Trace: [ 152.171414][ T5619] [ 152.171422][ T5619] dump_stack_lvl+0xe8/0x150 [ 152.171459][ T5619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 152.171485][ T5619] ? __submit_merged_bio+0x258/0x6a0 [ 152.171505][ T5619] f2fs_cache_write_end_io+0x2a5/0x6e0 [ 152.171535][ T5619] ? bio_endio+0x984/0xac0 [ 152.171561][ T5619] __submit_merged_bio+0x258/0x6a0 [ 152.171580][ T5619] ? rcu_is_watching+0x16/0xb0 [ 152.171613][ T5619] f2fs_submit_merged_write+0x2cc/0x610 [ 152.171639][ T5619] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 152.171670][ T5619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 152.171691][ T5619] ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0 [ 152.171719][ T5619] f2fs_writeback_node_caches+0xf85/0x1120 [ 152.171766][ T5619] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 152.171815][ T5619] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 152.171846][ T5619] ? up_write+0x19d/0x4a0 [ 152.171864][ T5619] ? trace_f2fs_write_checkpoint+0x82/0x200 [ 152.171893][ T5619] f2fs_write_checkpoint+0xe51/0x24d0 [ 152.171954][ T5619] f2fs_issue_checkpoint+0x424/0x6f0 [ 152.171990][ T5619] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 152.172017][ T5619] ? sync_inodes_sb+0xb6a/0xbe0 [ 152.172051][ T5619] ? __mutex_unlock_slowpath+0x731/0x900 [ 152.172078][ T5619] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.172098][ T5619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.172153][ T5619] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 152.172191][ T5619] ? f2fs_sync_fs+0x1f2/0x3c0 [ 152.172224][ T5619] sync_filesystem+0x1d2/0x240 [ 152.172254][ T5619] generic_shutdown_super+0x77/0x2d0 [ 152.172280][ T5619] kill_block_super+0x44/0xa0 [ 152.172306][ T5619] kill_f2fs_super+0x3b2/0x700 [ 152.172335][ T5619] ? rcu_do_enqueue+0x616/0x870 [ 152.172359][ T5619] ? lockdep_hardirqs_on+0x7b/0x110 [ 152.172380][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 152.172413][ T5619] ? __pfx_shrinker_free_rcu_cb+0x10/0x10 [ 152.172434][ T5619] ? call_rcu+0x20e/0x300 [ 152.172466][ T5619] ? __pfx_call_rcu+0x10/0x10 [ 152.172500][ T5619] ? shrinker_free+0x2a7/0x3b0 [ 152.172524][ T5619] deactivate_locked_super+0xbe/0x110 [ 152.172548][ T5619] cleanup_mnt+0x3d3/0x460 [ 152.172578][ T5619] task_work_run+0x1d9/0x260 [ 152.172606][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 152.172640][ T5619] exit_to_user_mode_loop+0x204/0x770 [ 152.172665][ T5619] ? rcu_is_watching+0x16/0xb0 [ 152.172698][ T5619] do_syscall_64+0x328/0x520 [ 152.172718][ T5619] ? trace_irq_disable+0x3b/0x140 [ 152.172743][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.172770][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 152.172794][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.172813][ T5619] RIP: 0033:0x7f4badd9f397 [ 152.172830][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 152.172846][ T5619] RSP: 002b:00007ffeacf52bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.172867][ T5619] RAX: 0000000000000000 RBX: 00007f4bade344bb RCX: 00007f4badd9f397 [ 152.172879][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeacf52c90 [ 152.172891][ T5619] RBP: 00007ffeacf52c90 R08: 00007ffeacf53c90 R09: 00000000ffffffff [ 152.172904][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeacf53d20 [ 152.172915][ T5619] R13: 00007f4bade344bb R14: 0000000000025210 R15: 00007ffeacf53d60 [ 152.172946][ T5619] [ 152.176694][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.252257][ T5733] loop2: lost filesystem error report for type 5 error -108 [ 152.473834][ T1008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.733925][ T1008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.774859][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.790432][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.805325][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.806526][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.807168][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.829707][ T7797] syz.3.793 (7797) used greatest stack depth: 18496 bytes left [ 153.110415][ T7809] bond0: option arp_validate: invalid value () [ 153.388331][ T1008] bridge_slave_1: left allmulticast mode [ 153.388404][ T1008] bridge_slave_1: left promiscuous mode [ 153.390206][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.511034][ T33] audit: type=1400 audit(1790362659.845:15): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7824 comm="syz.2.802" name="unknown" offset=28 [ 153.588765][ T1008] bridge_slave_0: left allmulticast mode [ 153.588787][ T1008] bridge_slave_0: left promiscuous mode [ 153.588973][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.034367][ T7848] loop3: detected capacity change from 0 to 2048 [ 154.037042][ T7848] EXT4-fs: Ignoring removed oldalloc option [ 154.095789][ T7848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.180371][ T7848] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 154.184992][ T7848] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 154.194670][ T7848] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.194670][ T7848] [ 154.194726][ T7848] EXT4-fs (loop3): Total free blocks count 0 [ 154.194761][ T7848] EXT4-fs (loop3): Free/Dirty block details [ 154.195028][ T7848] EXT4-fs (loop3): free_blocks=4096 [ 154.195137][ T7848] EXT4-fs (loop3): dirty_blocks=16 [ 154.195168][ T7848] EXT4-fs (loop3): Block reservation details [ 154.195195][ T7848] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 154.267484][ T9] usb 5-1: USB disconnect, device number 5 [ 154.344570][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.456568][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 154.521385][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.542289][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.558076][ T1008] bond0 (unregistering): Released all slaves [ 154.609211][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.819131][ T7870] loop0: detected capacity change from 0 to 16 [ 154.820843][ T7870] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 154.930382][ T5610] Bluetooth: hci1: command tx timeout [ 155.007431][ T7877] loop2: detected capacity change from 0 to 1024 [ 155.079470][ T7877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.121513][ T33] audit: type=1800 audit(1790362661.465:16): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.817" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 155.221159][ T7888] loop0: detected capacity change from 0 to 256 [ 155.371084][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.635919][ T7895] loop2: detected capacity change from 0 to 512 [ 155.657933][ T7895] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.821: bg 0: block 104: invalid block bitmap [ 155.657965][ T7895] loop2: lost filesystem error report for type 5 error -117 [ 155.670720][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 155.670741][ C0] EXT4-fs (loop2): initial error at time 1790362662: ext4_validate_block_bitmap:436 [ 155.670764][ C0] EXT4-fs (loop2): last error at time 1790362662: ext4_validate_block_bitmap:436 [ 155.721347][ T7895] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 155.721368][ T7895] loop2: lost filesystem error report for type 5 error -117 [ 155.731702][ T7899] loop3: detected capacity change from 0 to 256 [ 155.749917][ T7895] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.821: invalid indirect mapped block 1 (level 1) [ 155.749948][ T7895] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.753900][ T7899] FAT-fs (loop3): Directory bread(block 1285) failed [ 155.753931][ T7899] FAT-fs (loop3): Directory bread(block 1286) failed [ 155.753953][ T7899] FAT-fs (loop3): Directory bread(block 1287) failed [ 155.754129][ T7899] FAT-fs (loop3): Directory bread(block 1288) failed [ 155.755675][ T7895] EXT4-fs (loop2): 1 truncate cleaned up [ 155.766909][ T7895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.859729][ T7899] FAT-fs (loop3): Directory bread(block 1285) failed [ 155.859756][ T7899] FAT-fs (loop3): Directory bread(block 1286) failed [ 155.859777][ T7899] FAT-fs (loop3): Directory bread(block 1287) failed [ 155.859799][ T7899] FAT-fs (loop3): Directory bread(block 1288) failed [ 155.938447][ T9] kernel read not supported for file /sysvipc/msg (pid: 9 comm: kworker/0:0) [ 155.946783][ T7899] FAT-fs (loop3): Directory bread(block 1285) failed [ 155.946873][ T7899] FAT-fs (loop3): Directory bread(block 1286) failed [ 156.223808][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.390046][ T1008] hsr_slave_0: left promiscuous mode [ 156.394490][ T1008] hsr_slave_1: left promiscuous mode [ 156.395602][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.395632][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.427819][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.437285][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.465531][ T7883] loop4: detected capacity change from 0 to 32768 [ 156.499695][ T7883] [ 156.499695][ T7883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.499695][ T7883] [ 156.534409][ T7883] ERROR: (device loop4): diWrite: ixpxd invalid [ 156.534409][ T7883] [ 156.534697][ T7883] ERROR: (device loop4): txCommit: [ 156.534697][ T7883] [ 156.554690][ T7883] ERROR: (device loop4): dtReadFirst: btstack overrun [ 156.554690][ T7883] [ 156.554730][ T7883] btstack dump: [ 156.554736][ T7883] bn = 0, index = 0 [ 156.554746][ T7883] bn = 0, index = 0 [ 156.554754][ T7883] bn = 0, index = 0 [ 156.554762][ T7883] bn = 0, index = 0 [ 156.554770][ T7883] bn = 0, index = 0 [ 156.554779][ T7883] bn = 0, index = 0 [ 156.554795][ T7883] bn = 0, index = 0 [ 156.554803][ T7883] bn = 0, index = 0 [ 156.628638][ T45] ERROR: (device loop4): diWrite: ixpxd invalid [ 156.628638][ T45] [ 156.628663][ T45] ERROR: (device loop4): txCommit: [ 156.628663][ T45] [ 156.628699][ T45] jfs_write_inode: jfs_commit_inode failed! [ 156.629568][ T5602] [ 156.629568][ T5602] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.629568][ T5602] [ 156.633096][ T5602] [ 156.633096][ T5602] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.633096][ T5602] [ 156.633890][ T1008] veth1_macvtap: left promiscuous mode [ 156.633946][ T1008] veth0_macvtap: left promiscuous mode [ 156.634164][ T1008] veth1_vlan: left promiscuous mode [ 156.634254][ T1008] veth0_vlan: left promiscuous mode [ 156.879486][ T7927] loop2: detected capacity change from 0 to 1764 [ 157.007973][ T5610] Bluetooth: hci1: command tx timeout [ 157.212657][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 157.238457][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 157.365814][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.632661][ T7943] netlink: 'syz.4.837': attribute type 83 has an invalid length. [ 157.958922][ T1008] IPVS: stop unused estimator thread 0... [ 158.012322][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.012504][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.012645][ T7800] bridge_slave_0: entered allmulticast mode [ 158.019722][ T7800] bridge_slave_0: entered promiscuous mode [ 158.043045][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.043960][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.045961][ T7800] bridge_slave_1: entered allmulticast mode [ 158.050967][ T7800] bridge_slave_1: entered promiscuous mode [ 158.233191][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.253581][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.393034][ T7800] team0: Port device team_slave_0 added [ 158.395673][ T7800] team0: Port device team_slave_1 added [ 158.534167][ T7976] loop4: detected capacity change from 0 to 256 [ 158.552170][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.552184][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.552208][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.556017][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.556031][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.556055][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.700652][ T7976] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.954092][ T7800] hsr_slave_0: entered promiscuous mode [ 158.955061][ T7800] hsr_slave_1: entered promiscuous mode [ 158.959529][ T7800] debugfs: 'hsr0' already exists in 'hsr' [ 158.959591][ T7800] Cannot create hsr debugfs directory [ 159.076799][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 159.088252][ T5610] Bluetooth: hci1: command tx timeout [ 159.095446][ T7989] serio: Serial port ttyS3 [ 159.677932][ T1675] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.809639][ T7800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.814489][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.815530][ T7800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.841676][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.843438][ T7800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.847108][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.850486][ T1675] usb 3-1: Using ep0 maxpacket: 8 [ 159.858540][ T1675] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.863002][ T1675] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 159.863117][ T1675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 159.863179][ T1675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.863231][ T1675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 159.863294][ T1675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 159.863347][ T1675] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.863443][ T1675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.914631][ T7800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.971026][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.996293][ T8017] loop3: detected capacity change from 0 to 4096 [ 160.040121][ T8017] EXT4-fs (loop3): Test dummy encryption mode enabled [ 160.051558][ T8017] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 160.084381][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.134291][ T1675] usb 3-1: GET_CAPABILITIES returned 0 [ 160.134334][ T1675] usbtmc 3-1:16.0: can't read capabilities [ 160.176516][ T8017] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 160.222549][ T8017] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 160.222566][ T8017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.258139][ T8017] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 160.258251][ T8017] System zones: 0-5 [ 160.273884][ T8017] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 160.313739][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.416608][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.426824][ T8033] loop0: detected capacity change from 0 to 512 [ 160.427693][ T8033] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.440739][ T5719] usb 3-1: USB disconnect, device number 8 [ 160.489124][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.489240][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.508582][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.508804][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.513841][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.595530][ T8033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.595619][ T8033] ext4 filesystem being mounted at /174/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.789946][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.928510][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 161.072523][ T8056] could not open pipe file descriptor [ 161.169396][ T5610] Bluetooth: hci1: command tx timeout [ 161.389010][ T5705] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.543610][ T5705] usb 5-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 161.547181][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 161.547224][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.582630][ T5705] usb 5-1: Device is not authorized for usage [ 161.909411][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.918587][ T8083] loop0: detected capacity change from 0 to 4096 [ 162.383511][ T7800] veth0_vlan: entered promiscuous mode [ 162.444574][ T7800] veth1_vlan: entered promiscuous mode [ 162.525364][ T7800] veth0_macvtap: entered promiscuous mode [ 162.557697][ T7800] veth1_macvtap: entered promiscuous mode [ 162.593126][ T8107] netlink: 52 bytes leftover after parsing attributes in process `syz.3.883'. [ 162.639332][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.677369][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.689168][ T8111] loop0: detected capacity change from 0 to 1024 [ 162.728650][ T8111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.729247][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.729547][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.729581][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.729612][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.945347][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.945365][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.965225][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.103650][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.103668][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.775819][ T8124] loop0: detected capacity change from 0 to 32768 [ 163.788199][ T8124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.888 (8124) [ 163.807359][ T8124] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.807390][ T8124] BTRFS info (device loop0): using crc32c checksum algorithm [ 163.905531][ T8124] BTRFS info (device loop0): enabling ssd optimizations [ 163.905555][ T8124] BTRFS info (device loop0): turning on flush-on-commit [ 163.905570][ T8124] BTRFS info (device loop0): enabling free space tree [ 163.905586][ T8124] BTRFS info (device loop0): enabling auto defrag [ 163.905602][ T8124] BTRFS info (device loop0): use lzo compression, level 1 [ 163.905620][ T8124] BTRFS info (device loop0): max_inline set to 4096 [ 164.102534][ T8162] loop5: detected capacity change from 0 to 1024 [ 164.231437][ T5719] usb 5-1: USB disconnect, device number 6 [ 164.286005][ T5603] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.400289][ T8141] loop2: detected capacity change from 0 to 32768 [ 164.485731][ T8141] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.520944][ T8141] (syz.2.895,8141,1):ocfs2_reflink_ioctl:4473 ERROR: status = -2 [ 164.732964][ T8177] loop3: detected capacity change from 0 to 256 [ 164.794923][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 164.824041][ T8179] loop4: detected capacity change from 0 to 64 [ 164.855947][ T8182] loop5: detected capacity change from 0 to 64 [ 164.873823][ T8179] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 164.936318][ T8179] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 165.149344][ T8185] tap0: tun_chr_ioctl cmd 2147767506 [ 165.367569][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 165.403581][ T7800] hfs: node 4:3 still has 1 user(s)! [ 165.645191][ T5733] lg-g15 0003:046D:0A07.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 165.690897][ T5733] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0005/input/input11 [ 165.956861][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.920'. [ 166.397544][ T8204] loop3: detected capacity change from 0 to 32768 [ 166.430454][ T8204] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 166.463339][ T8197] loop4: detected capacity change from 0 to 40427 [ 166.464050][ T8197] f2fs: Unknown parameter '18446744073709551615' [ 166.544974][ T8204] XFS (loop3): Ending clean mount [ 166.573250][ T8204] XFS (loop3): User initiated shutdown received. [ 166.573544][ T8204] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 166.573589][ T8204] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 166.691202][ T5605] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 167.115542][ T8241] loop5: detected capacity change from 0 to 8192 [ 167.129790][ T8241] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.347348][ T8258] loop4: detected capacity change from 0 to 1024 [ 167.357370][ T8258] EXT4-fs: Ignoring removed bh option [ 167.364063][ T8258] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 167.414953][ T8258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.600379][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.165742][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 168.259883][ T8299] loop2: detected capacity change from 0 to 64 [ 168.289534][ T8277] loop3: detected capacity change from 0 to 32768 [ 168.435436][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435436][ T8277] [ 168.435476][ T8277] xtLookup: xtSearch returned -5 [ 168.435486][ T8277] free_index: error reading directory table [ 168.435495][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435495][ T8277] [ 168.435523][ T8277] xtLookup: xtSearch returned -5 [ 168.435531][ T8277] free_index: error reading directory table [ 168.435539][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435539][ T8277] [ 168.435575][ T8277] xtLookup: xtSearch returned -5 [ 168.435584][ T8277] free_index: error reading directory table [ 168.435591][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435591][ T8277] [ 168.435617][ T8277] xtLookup: xtSearch returned -5 [ 168.435625][ T8277] free_index: error reading directory table [ 168.435633][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435633][ T8277] [ 168.435659][ T8277] xtLookup: xtSearch returned -5 [ 168.435668][ T8277] free_index: error reading directory table [ 168.435676][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435676][ T8277] [ 168.435703][ T8277] xtLookup: xtSearch returned -5 [ 168.435711][ T8277] add_index: get/read_metapage failed! [ 168.435721][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435721][ T8277] [ 168.435748][ T8277] xtLookup: xtSearch returned -5 [ 168.435756][ T8277] free_index: error reading directory table [ 168.435764][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435764][ T8277] [ 168.435790][ T8277] xtLookup: xtSearch returned -5 [ 168.435798][ T8277] free_index: error reading directory table [ 168.435806][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435806][ T8277] [ 168.435832][ T8277] xtLookup: xtSearch returned -5 [ 168.435840][ T8277] free_index: error reading directory table [ 168.435848][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435848][ T8277] [ 168.435874][ T8277] xtLookup: xtSearch returned -5 [ 168.435882][ T8277] free_index: error reading directory table [ 168.435890][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.435890][ T8277] [ 168.436026][ T8277] xtLookup: xtSearch returned -5 [ 168.436036][ T8277] free_index: error reading directory table [ 168.539804][ T8277] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 168.539804][ T8277] [ 168.539895][ T8277] xtLookup: xtSearch returned -5 [ 168.539915][ T8277] add_index: get/read_metapage failed! [ 168.655294][ T8304] loop0: detected capacity change from 0 to 2048 [ 168.682636][ T8304] EXT4-fs: Ignoring removed oldalloc option [ 168.780462][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.838678][ T8304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 168.840702][ T8304] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 168.840728][ T8304] EXT4-fs (loop0): This should not happen!! Data will be lost [ 168.840728][ T8304] [ 168.840742][ T8304] EXT4-fs (loop0): Total free blocks count 0 [ 168.840755][ T8304] EXT4-fs (loop0): Free/Dirty block details [ 168.840767][ T8304] EXT4-fs (loop0): free_blocks=4096 [ 168.840781][ T8304] EXT4-fs (loop0): dirty_blocks=16 [ 168.840793][ T8304] EXT4-fs (loop0): Block reservation details [ 168.840804][ T8304] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 168.973463][ T61] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.215455][ T8323] loop9: detected capacity change from 0 to 524287998 [ 169.242735][ T8326] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 169.304448][ T8328] loop2: detected capacity change from 0 to 128 [ 169.488300][ T8332] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 170.036271][ T8355] tap0: tun_chr_ioctl cmd 1074025675 [ 170.036293][ T8355] tap0: persist disabled [ 170.644400][ T8369] loop4: detected capacity change from 0 to 4096 [ 170.661838][ T8369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.661856][ T8369] EXT4-fs (loop4): Test dummy encryption mode enabled [ 170.696284][ T8369] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 170.696398][ T8369] System zones: 0-5 [ 170.730512][ T8369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.876459][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.894615][ T8378] loop2: detected capacity change from 0 to 512 [ 170.942571][ T8378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 170.942680][ T8378] System zones: 1-12 [ 170.946078][ T8378] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.988: missing EA_INODE flag [ 170.946104][ T8378] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.948291][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 170.948310][ C1] EXT4-fs (loop2): initial error at time 1790362677: ext4_xattr_inode_iget:437: inode 12 [ 170.948370][ C1] EXT4-fs (loop2): last error at time 1790362677: ext4_xattr_inode_iget:437: inode 12 [ 171.040059][ T8378] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.988: error while reading EA inode 12 err=-117 [ 171.040090][ T8378] loop2: lost filesystem error report for type 5 error -117 [ 171.065014][ T8378] EXT4-fs (loop2): 1 orphan inode deleted [ 171.083041][ T8378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.160909][ T8378] fscrypt (loop2, inode 15): Direct key flag not allowed with different contents and filenames modes [ 171.338430][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.393720][ T8387] loop3: detected capacity change from 0 to 512 [ 171.466948][ T33] audit: type=1400 audit(1790362677.805:17): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=8388 comm="syz.5.994" [ 171.553671][ T8385] JBD2: Ignoring recovery information on journal [ 171.694545][ T8394] syz_tun: entered promiscuous mode [ 171.694717][ T8394] macsec3: entered allmulticast mode [ 171.694731][ T8394] syz_tun: entered allmulticast mode [ 171.696594][ T8385] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 171.721081][ T8394] syz_tun: left allmulticast mode [ 171.721141][ T8394] syz_tun: left promiscuous mode [ 171.940202][ T5602] ocfs2: Unmounting device (7,4) on (node local) [ 172.164144][ T8404] set_capacity_and_notify: 1 callbacks suppressed [ 172.164164][ T8404] loop2: detected capacity change from 0 to 1024 [ 172.553140][ T8414] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1004'. [ 172.553180][ T8414] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1004'. [ 173.085664][ T8432] loop2: detected capacity change from 0 to 512 [ 173.094773][ T5733] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 173.111364][ T8432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.128797][ T8432] EXT4-fs (loop2): 1 truncate cleaned up [ 173.130457][ T8432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.181763][ T8432] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 173.259114][ T5733] usb 4-1: not running at top speed; connect to a high speed hub [ 173.259145][ T5733] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 173.262638][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.262661][ T5733] usb 4-1: Product: syz [ 173.262674][ T5733] usb 4-1: Manufacturer: syz [ 173.262687][ T5733] usb 4-1: SerialNumber: syz [ 173.323338][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.341445][ T5733] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 173.404092][ T5733] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 173.431591][ T8439] loop4: detected capacity change from 0 to 2048 [ 173.433451][ T5733] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 173.456255][ T8439] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 173.456895][ T8439] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 173.456911][ T8439] UDF-fs: Scanning with blocksize 512 failed [ 173.484277][ T5733] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 173.502374][ T5733] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 173.524980][ T8408] loop5: detected capacity change from 0 to 40427 [ 173.558822][ T8408] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 173.558844][ T8408] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 173.563934][ T8439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.570769][ T8408] F2FS-fs (loop5): invalid crc value [ 174.051770][ T8408] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.104044][ T8408] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 174.104141][ T8408] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 174.241579][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.409614][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 174.410718][ T27] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.436227][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.436250][ T27] usb 5-1: Product: syz [ 174.436263][ T27] usb 5-1: Manufacturer: syz [ 174.436278][ T27] usb 5-1: SerialNumber: syz [ 174.471201][ T27] usb 5-1: Device is not authorized for usage [ 174.750955][ T8473] veth1_macvtap: left promiscuous mode [ 174.750983][ T8473] macsec0: entered promiscuous mode [ 174.806463][ T8474] veth1_macvtap: entered promiscuous mode [ 174.806785][ T8474] macsec0: left promiscuous mode [ 175.663003][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.689599][ T1675] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.811614][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 175.813671][ T27] usb 6-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 175.814173][ T27] usb 6-1: config 0 has no interfaces? [ 175.816241][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.816263][ T27] usb 6-1: Product: syz [ 175.816278][ T27] usb 6-1: Manufacturer: syz [ 175.816291][ T27] usb 6-1: SerialNumber: syz [ 175.877805][ T1675] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 175.879249][ T1675] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.879300][ T1675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 175.890352][ T1675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.890375][ T1675] usb 3-1: Product: syz [ 175.890389][ T1675] usb 3-1: Manufacturer: syz [ 175.890402][ T1675] usb 3-1: SerialNumber: syz [ 175.912155][ T27] usb 6-1: config 0 descriptor?? [ 175.946987][ T1675] cdc_mbim 3-1:1.0: skipping garbage [ 176.032958][ T27] usb 4-1: USB disconnect, device number 11 [ 176.145438][ T27] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 176.195536][ T27] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 176.242456][ T5698] usb 6-1: USB disconnect, device number 2 [ 176.260982][ T27] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 176.333662][ T27] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 176.350264][ T27] keyspan 4-1:1.0: device disconnected [ 176.758833][ T1675] cdc_mbim 3-1:1.0: SET_CRC_MODE failed [ 176.762136][ T1675] cdc_mbim 3-1:1.0: SET_NTB_FORMAT failed [ 176.791805][ T1675] cdc_mbim 3-1:1.0: bind() failure [ 176.826590][ T1675] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 176.826631][ T1675] cdc_ncm 3-1:1.1: bind() failure [ 176.867077][ T1675] usb 3-1: USB disconnect, device number 9 [ 176.990847][ T27] usb 5-1: USB disconnect, device number 7 [ 177.304860][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 177.304883][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 177.529091][ T8564] loop4: detected capacity change from 0 to 1024 [ 177.535108][ T8564] EXT4-fs: Ignoring removed orlov option [ 177.543408][ T8564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.552337][ T8564] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 177.562237][ T8564] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 177.567574][ T8564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.617546][ T8564] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1041: Invalid inode table block 0 in block_group 0 [ 177.617576][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.618231][ C1] EXT4-fs (loop4): initial error at time 1790362683: __ext4_get_inode_loc:4916 [ 177.618258][ C1] EXT4-fs (loop4): last error at time 1790362683: __ext4_get_inode_loc:4916 [ 177.649740][ T8564] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 177.649761][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.670130][ T8564] EXT4-fs error (device loop4): ext4_quota_write:7458: inode #3: comm syz.4.1041: mark_inode_dirty error [ 177.670159][ T8564] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 177.671001][ T8564] Quota error (device loop4): write_blk: dquota write failed [ 177.671212][ T8564] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 177.671298][ T8564] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1041: Failed to acquire dquot type 0 [ 177.671353][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.674350][ T8564] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1041: Invalid inode table block 0 in block_group 0 [ 177.674422][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.686472][ T8564] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 177.686548][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.687418][ T8564] EXT4-fs error (device loop4): ext4_ext_truncate:4565: inode #15: comm syz.4.1041: mark_inode_dirty error [ 177.687482][ T8564] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.695775][ T8564] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1041: Invalid inode table block 0 in block_group 0 [ 177.695846][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.789671][ T8564] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 177.789725][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.866113][ T8564] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 177.866137][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.868645][ T8564] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz.4.1041: Invalid inode table block 0 in block_group 0 [ 177.868672][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.872356][ T8564] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 177.872409][ T8564] loop4: lost filesystem error report for type 5 error -117 [ 177.876779][ T8564] EXT4-fs error (device loop4): ext4_truncate:4721: inode #15: comm syz.4.1041: mark_inode_dirty error [ 177.876859][ T8564] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.877963][ T8564] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 177.881749][ T8564] EXT4-fs (loop4): 1 truncate cleaned up [ 177.915476][ T8564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.015768][ T8564] EXT4-fs (loop4): shut down requested (2) [ 178.145621][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.173707][ T8580] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 178.173738][ T8580] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 178.482350][ T8592] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 178.684877][ T8586] loop4: detected capacity change from 0 to 32768 [ 178.707374][ T8586] (syz.4.1049,8586,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.723449][ T8586] (syz.4.1049,8586,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.765336][ T8600] loop5: detected capacity change from 0 to 2048 [ 178.767627][ T8586] (syz.4.1049,8586,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 178.801933][ T8602] loop2: detected capacity change from 0 to 4096 [ 178.804059][ T8602] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 178.808931][ T8586] JBD2: Ignoring recovery information on journal [ 178.871051][ T8600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.941971][ T8586] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.990833][ T8602] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 179.004961][ T8602] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 179.157515][ T8596] loop3: detected capacity change from 0 to 32768 [ 179.276763][ T8596] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.431789][ T5602] ocfs2: Unmounting device (7,4) on (node local) [ 179.733567][ T5605] ocfs2: Unmounting device (7,3) on (node local) [ 180.555804][ T8628] loop5: detected capacity change from 0 to 40427 [ 180.568779][ T8628] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 180.568801][ T8628] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 180.587474][ T8628] F2FS-fs (loop5): invalid crc value [ 180.716935][ T8628] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 180.743554][ T8628] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 180.743576][ T8628] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 180.825846][ T7800] syz-executor: attempt to access beyond end of device [ 180.825846][ T7800] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.845792][ T8640] loop3: detected capacity change from 0 to 32768 [ 180.859792][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 180.859818][ T7800] Tainted: [L]=SOFTLOCKUP [ 180.859824][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.859834][ T7800] Call Trace: [ 180.859842][ T7800] [ 180.859849][ T7800] dump_stack_lvl+0xe8/0x150 [ 180.859878][ T7800] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 180.859904][ T7800] f2fs_write_end_bio+0xda7/0x11c0 [ 180.859940][ T7800] __submit_merged_bio+0x258/0x6a0 [ 180.859956][ T7800] ? rcu_is_watching+0x16/0xb0 [ 180.859989][ T7800] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 180.860023][ T7800] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 180.860074][ T7800] f2fs_write_data_pages+0x2a13/0x36e0 [ 180.860131][ T7800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.860166][ T7800] ? is_bpf_text_address+0x292/0x2b0 [ 180.860184][ T7800] ? is_bpf_text_address+0x26/0x2b0 [ 180.860228][ T7800] ? stack_trace_save+0xa9/0x100 [ 180.860252][ T7800] ? __pfx_stack_trace_save+0x10/0x10 [ 180.860291][ T7800] ? lockdep_unlock+0x5c/0xd0 [ 180.860311][ T7800] ? __lock_acquire+0x1511/0x2de0 [ 180.860359][ T7800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.860384][ T7800] do_writepages+0x338/0x560 [ 180.860414][ T7800] ? do_raw_spin_unlock+0xf5/0x200 [ 180.860439][ T7800] filemap_fdatawrite+0x1e9/0x2f0 [ 180.860463][ T7800] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 180.860527][ T7800] ? do_raw_spin_unlock+0xf5/0x200 [ 180.860551][ T7800] f2fs_sync_dirty_inodes+0x471/0x970 [ 180.860591][ T7800] f2fs_write_checkpoint+0x860/0x24d0 [ 180.860651][ T7800] kill_f2fs_super+0x2dc/0x700 [ 180.860681][ T7800] ? rcu_do_enqueue+0x616/0x870 [ 180.860711][ T7800] ? lockdep_hardirqs_on+0x7b/0x110 [ 180.860735][ T7800] ? __pfx_kill_f2fs_super+0x10/0x10 [ 180.860775][ T7800] ? __pfx_call_rcu+0x10/0x10 [ 180.860809][ T7800] ? shrinker_free+0x2a7/0x3b0 [ 180.860834][ T7800] deactivate_locked_super+0xbe/0x110 [ 180.860859][ T7800] cleanup_mnt+0x3d3/0x460 [ 180.860890][ T7800] task_work_run+0x1d9/0x260 [ 180.860918][ T7800] ? __pfx_task_work_run+0x10/0x10 [ 180.860951][ T7800] exit_to_user_mode_loop+0x204/0x770 [ 180.860976][ T7800] ? rcu_is_watching+0x16/0xb0 [ 180.861008][ T7800] do_syscall_64+0x328/0x520 [ 180.861028][ T7800] ? trace_irq_disable+0x3b/0x140 [ 180.861052][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.861072][ T7800] ? clear_bhb_loop+0x70/0xc0 [ 180.861096][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.861115][ T7800] RIP: 0033:0x7fb23b39f397 [ 180.861133][ T7800] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 180.861149][ T7800] RSP: 002b:00007ffce8811d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 180.861170][ T7800] RAX: 0000000000000000 RBX: 00007fb23b4344bb RCX: 00007fb23b39f397 [ 180.861183][ T7800] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce8811dd0 [ 180.861195][ T7800] RBP: 00007ffce8811dd0 R08: 00007ffce8812dd0 R09: 00000000ffffffff [ 180.861209][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce8812e60 [ 180.861221][ T7800] R13: 00007fb23b4344bb R14: 000000000002c20b R15: 00007ffce8812ea0 [ 180.861252][ T7800] [ 180.863751][ T7800] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 180.891694][ T8640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1072 (8640) [ 181.126190][ T8640] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.126277][ T8640] BTRFS info (device loop3): using crc32c checksum algorithm [ 181.291692][ T8640] BTRFS info (device loop3): enabling ssd optimizations [ 181.291715][ T8640] BTRFS info (device loop3): turning on flush-on-commit [ 181.291732][ T8640] BTRFS info (device loop3): enabling free space tree [ 181.291747][ T8640] BTRFS info (device loop3): enabling auto defrag [ 181.291763][ T8640] BTRFS info (device loop3): use lzo compression, level 1 [ 181.291781][ T8640] BTRFS info (device loop3): max_inline set to 4096 [ 181.374915][ T8665] tipc: Started in network mode [ 181.374946][ T8665] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.376632][ T8665] tipc: New replicast peer: 172.20.20.187 [ 181.377391][ T8665] tipc: Enabled bearer , priority 10 [ 181.650466][ T8673] loop0: detected capacity change from 0 to 128 [ 181.653951][ T8673] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.656900][ T8673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.698211][ T1675] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.850728][ T1675] usb 5-1: Using ep0 maxpacket: 32 [ 181.851342][ T1675] usb 5-1: New USB device found: idVendor=0499, idProduct=1010, bcdDevice=a.f5 [ 181.852303][ T1675] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 181.854547][ T1675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.854570][ T1675] usb 5-1: Product: syz [ 181.854585][ T1675] usb 5-1: Manufacturer: syz [ 181.854599][ T1675] usb 5-1: SerialNumber: syz [ 181.905531][ T1675] usb 5-1: Device is not authorized for usage [ 181.933644][ T5605] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.192569][ T8683] loop0: detected capacity change from 0 to 64 [ 182.285839][ T33] audit: type=1800 audit(1790362688.625:18): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 182.383505][ T32] tipc: Node number set to 2886997162 [ 182.533190][ T8693] loop5: detected capacity change from 0 to 256 [ 182.550302][ T8693] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 182.899016][ T33] audit: type=1326 audit(1790362689.245:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.899142][ T33] audit: type=1326 audit(1790362689.245:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.904228][ T33] audit: type=1326 audit(1790362689.245:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.904381][ T33] audit: type=1326 audit(1790362689.245:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.904739][ T33] audit: type=1326 audit(1790362689.245:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.904925][ T33] audit: type=1326 audit(1790362689.245:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.905089][ T33] audit: type=1326 audit(1790362689.245:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.906006][ T33] audit: type=1326 audit(1790362689.245:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.971409][ T33] audit: type=1326 audit(1790362689.315:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 182.972078][ T33] audit: type=1326 audit(1790362689.315:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4badd9e159 code=0x7ffc0000 [ 183.149573][ T8710] block nbd5: NBD_DISCONNECT [ 183.321899][ T8713] loop0: detected capacity change from 0 to 1024 [ 183.521941][ T8721] loop2: detected capacity change from 0 to 256 [ 183.571214][ T8721] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 183.655163][ T8723] rnbd_client L213: map_device: Parameters missing [ 183.695655][ T8719] loop5: detected capacity change from 0 to 32768 [ 184.197955][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 184.357903][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 184.358443][ T32] usb 3-1: New USB device found: idVendor=0eb1, idProduct=7007, bcdDevice=2.00 [ 184.359436][ T32] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 184.359452][ T32] usb 3-1: config 253 has no interface number 0 [ 184.359469][ T32] usb 3-1: config 253 interface 184 has no altsetting 0 [ 184.361390][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.361413][ T32] usb 3-1: Product: syz [ 184.361426][ T32] usb 3-1: Manufacturer: syz [ 184.361438][ T32] usb 3-1: SerialNumber: syz [ 184.427771][ T32] go7007 3-1:253.184: probe with driver go7007 failed with error -12 [ 184.501718][ T5705] usb 5-1: USB disconnect, device number 8 [ 184.572086][ T1675] usb 3-1: USB disconnect, device number 10 [ 185.269505][ T8772] loop2: detected capacity change from 0 to 764 [ 185.295316][ T8772] rock: directory entry would overflow storage [ 185.295329][ T8772] rock: sig=0x5245, size=8, remaining=5 [ 185.363182][ T8776] jffs2: notice: (8776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.730555][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.849504][ T8774] loop4: detected capacity change from 0 to 32768 [ 185.884798][ T8774] JBD2: Ignoring recovery information on journal [ 185.898258][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.898300][ T32] usb 4-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 185.899425][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.900874][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 185.900897][ T32] usb 4-1: Product: syz [ 185.900911][ T32] usb 4-1: Manufacturer: syz [ 186.010602][ T32] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 186.044620][ T8774] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 186.061984][ T8770] loop0: detected capacity change from 0 to 32768 [ 186.104129][ T8770] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.189475][ T8770] XFS (loop0): Ending clean mount [ 186.203975][ T5602] ocfs2: Unmounting device (7,4) on (node local) [ 186.405872][ T32] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 186.503884][ T32] videodev: could not get a free minor [ 186.503901][ T32] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 186.574646][ T5603] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.622599][ T8812] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 186.630405][ T32] usb 4-1: USB disconnect, device number 12 [ 186.725241][ T8816] loop4: detected capacity change from 0 to 256 [ 186.726247][ T8816] exfat: Deprecated parameter 'utf8' [ 186.764731][ T8816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 187.320072][ T8831] loop2: detected capacity change from 0 to 512 [ 187.406746][ T8831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.406828][ T8831] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.623835][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.678956][ T8820] loop5: detected capacity change from 0 to 40427 [ 187.682139][ T8820] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 187.682160][ T8820] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 187.721949][ T8820] F2FS-fs (loop5): invalid crc value [ 187.823660][ T8846] loop2: detected capacity change from 0 to 128 [ 187.825832][ T8846] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.865279][ T8820] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 187.905223][ T8820] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 187.905245][ T8820] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.951703][ T8858] netlink: 'syz.0.1155': attribute type 2 has an invalid length. [ 187.996672][ T33] kauditd_printk_skb: 24 callbacks suppressed [ 187.996687][ T33] audit: type=1800 audit(1790362694.335:53): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1142" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 187.999479][ T13] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.089216][ T8820] syz.5.1142: attempt to access beyond end of device [ 188.089216][ T8820] loop5: rw=8423425, sector=77824, nr_sectors = 128 limit=40427 [ 188.495718][ T8876] loop2: detected capacity change from 0 to 512 [ 188.519686][ T7800] syz-executor: attempt to access beyond end of device [ 188.519686][ T7800] loop5: rw=8390659, sector=77824, nr_sectors = 128 limit=40427 [ 188.523991][ T8876] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.1164: casefold flag without casefold feature [ 188.524056][ T8876] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.537934][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 188.537952][ C1] EXT4-fs (loop2): initial error at time 1790362694: ext4_orphan_get:1403: inode 15 [ 188.537979][ C1] EXT4-fs (loop2): last error at time 1790362694: ext4_orphan_get:1403: inode 15 [ 188.538687][ T8876] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1164: couldn't read orphan inode 15 (err -117) [ 188.538717][ T8876] fserror_report: 1 callbacks suppressed [ 188.538729][ T8876] loop2: lost filesystem error report for type 5 error -117 [ 188.565102][ T8876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.595419][ T7800] F2FS-fs (loop5): Issue discard(9728, 9728, 16) failed, ret: -5 sing dummy_hcd [ 191.718094][ T8882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 191.718202][ T8882] System zones: 0-1, 3-12 [ 191.723822][ T8884] usb usb8: usbfs: process 8884 (syz.3.1167) did not claim interface 0 before use [ 191.730162][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.795859][ T27] usb 3-1: device descriptor read/all, error -71 [ 191.866921][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.914629][ T5602] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 192.090062][ T8901] loop3: detected capacity change from 0 to 512 [ 192.112994][ T8901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.113088][ T8901] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.159698][ T8903] loop4: detected capacity change from 0 to 1024 [ 192.176152][ T8903] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 192.176226][ T8903] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 192.176733][ T8903] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.1171: iget: special inode unallocated [ 192.176759][ T8903] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 192.176960][ T8903] EXT4-fs (loop4): Remounting filesystem read-only [ 192.177021][ T8903] EXT4-fs (loop4): no journal found [ 192.177033][ T8903] EXT4-fs (loop4): can't get journal size [ 192.187903][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 192.187964][ C1] EXT4-fs (loop4): initial error at time 1790362698: ext4_get_journal_inode:5927: inode 32 [ 192.188029][ C1] EXT4-fs (loop4): last error at time 1790362698: ext4_get_journal_inode:5927: inode 32 [ 192.231043][ T8903] EXT4-fs (loop4): filesystem is read-only [ 192.278332][ T8901] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.1172: corrupted inode contents [ 192.282710][ T8901] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz.3.1172: mark_inode_dirty error [ 192.322194][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.372398][ T8903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.376248][ T8901] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.1172: corrupted inode contents [ 192.433669][ T8907] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.1172: corrupted inode contents [ 192.440520][ T8907] EXT4-fs error (device loop3): ext4_setattr:6073: inode #2: comm syz.3.1172: mark_inode_dirty error [ 192.564952][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.146462][ T8912] loop5: detected capacity change from 0 to 32768 [ 193.190606][ T8912] JBD2: Ignoring recovery information on journal [ 193.257006][ T8941] loop4: detected capacity change from 0 to 4096 [ 193.265678][ T8941] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 193.307030][ T8912] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 193.376000][ T8941] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 193.543202][ T8925] loop0: detected capacity change from 0 to 32768 [ 193.563814][ T7800] ocfs2: Unmounting device (7,5) on (node local) [ 193.602213][ T8925] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.649089][ T5705] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.680288][ T8925] XFS (loop0): Ending clean mount [ 193.798868][ T5705] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 193.802381][ T5705] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.802406][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.802423][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.802463][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.863808][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.863832][ T5705] usb 4-1: Product: syz [ 193.863847][ T5705] usb 4-1: Manufacturer: syz [ 193.903928][ T5705] cdc_wdm 4-1:1.0: skipping garbage [ 193.903944][ T5705] cdc_wdm 4-1:1.0: skipping garbage [ 193.921386][ T5705] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 193.921413][ T5705] cdc_wdm 4-1:1.0: Unknown control protocol [ 193.999117][ T8986] syz_tun: entered allmulticast mode [ 194.000089][ T8984] syz_tun: left allmulticast mode [ 194.035226][ T33] audit: type=1400 audit(1790362700.375:54): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8987 comm="syz.5.1190" name="p" offset=79 [ 194.122088][ T5603] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.214489][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214539][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.977898][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 195.020683][ T9042] loop4: detected capacity change from 0 to 256 [ 195.021955][ T9042] exfat: Deprecated parameter 'utf8' [ 195.021974][ T9042] exfat: Deprecated parameter 'utf8' [ 195.022044][ T9042] exfat: Deprecated parameter 'namecase' [ 195.022093][ T9042] exfat: Deprecated parameter 'namecase' [ 195.085671][ T9042] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 195.130881][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 195.136703][ T27] usb 3-1: New USB device found: idVendor=1038, idProduct=12c2, bcdDevice=0.00 [ 195.148334][ T27] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.148365][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.148396][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.157070][ T27] usb 3-1: config 0 descriptor?? [ 195.289465][ T9030] loop0: detected capacity change from 0 to 32768 [ 195.334960][ T9030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.565861][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1213'. [ 195.565884][ T9071] netlink: 'syz.4.1213': attribute type 2 has an invalid length. [ 195.605796][ T27] hid_parser_main: 17 callbacks suppressed [ 195.605817][ T27] hid-steelseries-arctis 0003:1038:12C2.0006: unknown main item tag 0x0 [ 195.605846][ T27] hid-steelseries-arctis 0003:1038:12C2.0006: unknown main item tag 0x0 [ 195.605870][ T27] hid-steelseries-arctis 0003:1038:12C2.0006: unexpected long global item [ 195.606524][ T27] hid-steelseries-arctis 0003:1038:12C2.0006: probe with driver hid-steelseries-arctis failed with error -22 [ 195.757335][ T5603] ocfs2: Unmounting device (7,0) on (node local) [ 195.832363][ T9] usb 3-1: USB disconnect, device number 13 [ 196.051609][ T33] audit: type=1400 audit(1790362702.395:55): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=9103 comm="syz.0.1219" name="p" offset=92 [ 196.211399][ T191] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.302556][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 196.302593][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.302617][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 196.302639][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 196.361329][ T191] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 196.362374][ T191] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.362398][ T191] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 196.364770][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.364793][ T191] usb 6-1: Product: syz [ 196.364807][ T191] usb 6-1: Manufacturer: syz [ 196.364821][ T191] usb 6-1: SerialNumber: syz [ 196.480073][ T5698] usb 4-1: USB disconnect, device number 13 [ 196.653345][ T191] usb 6-1: Limiting number of CPorts to U8_MAX [ 197.208214][ T191] usb 6-1: failed to set cport flags for port 0 [ 197.208302][ T191] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 197.242066][ T191] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 255.649172][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649235][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.207915][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 317.089090][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.089144][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.487908][ T34] INFO: task kworker/u8:3:51 blocked in I/O wait for more than 143 seconds. ** replaying previous printk message ** [ 355.487908][ T34] INFO: task kworker/u8:3:51 blocked in I/O wait for more than 143 seconds. [ 355.487935][ T34] Tainted: G L syzkaller #0 [ 355.487946][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.487959][ T34] task:kworker/u8:3 state:D stack:21640 pid:51 tgid:51 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 355.488010][ T34] Workqueue: writeback wb_workfn (flush-8:0) [ 355.488051][ T34] Call Trace: [ 355.488058][ T34] [ 355.488073][ T34] __schedule+0x1b47/0x5c60 [ 355.488097][ T34] ? blk_mq_flush_plug_list+0x415/0x540 [ 355.488136][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 355.488167][ T34] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 355.488197][ T34] ? __blk_flush_plug+0x416/0x4d0 [ 355.488223][ T34] ? __pfx___schedule+0x10/0x10 [ 355.488252][ T34] ? schedule+0x90/0x2b0 [ 355.488273][ T34] schedule+0x164/0x2b0 [ 355.488295][ T34] io_schedule+0x7f/0xd0 [ 355.488317][ T34] bit_wait_io+0x13/0x110 [ 355.488341][ T34] __wait_on_bit+0xac/0x300 [ 355.488362][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.488387][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.488411][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.488432][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.488476][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.488543][ T34] do_get_write_access+0x658/0x10c0 [ 355.488612][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 355.488646][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 355.488684][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 355.488715][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.488747][ T34] ext4_reserve_inode_write+0x294/0x360 [ 355.488786][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 355.488822][ T34] ext4_dirty_inode+0xd0/0x110 [ 355.488851][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 355.488879][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 355.488947][ T34] ext4_new_meta_blocks+0x2f8/0x410 [ 355.488984][ T34] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 355.489016][ T34] ? kasan_quarantine_put+0xbb/0x1f0 [ 355.489060][ T34] ? lockdep_hardirqs_on+0x7b/0x110 [ 355.489088][ T34] ? ext4_inode_to_goal_block+0x319/0x460 [ 355.489118][ T34] ext4_ext_insert_extent+0x14fd/0x4bf0 [ 355.489174][ T34] ? ext4_ext_search_right+0x39a/0x860 [ 355.489237][ T34] ? __asan_memcpy+0x40/0x70 [ 355.489264][ T34] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 355.489301][ T34] ? ext4_ext_find_goal+0xf0/0x1e0 [ 355.489335][ T34] ext4_ext_map_blocks+0x1575/0x5680 [ 355.489366][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 355.489390][ T34] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.489450][ T34] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 355.489474][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 355.489501][ T34] ? kasan_save_track+0x3e/0x80 [ 355.489528][ T34] ? __kasan_slab_alloc+0x6c/0x80 [ 355.489570][ T34] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 355.489593][ T34] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 355.489619][ T34] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 355.489654][ T34] ? lock_acquire+0x115/0x350 [ 355.489701][ T34] ? down_write+0x166/0x200 [ 355.489734][ T34] ext4_map_create_blocks+0x116/0x530 [ 355.489760][ T34] ? ext4_fc_track_inode+0xf3/0x3f0 [ 355.489798][ T34] ext4_map_blocks+0x791/0x12c0 [ 355.489828][ T34] ? ext4_alloc_io_end_vec+0x2b/0x160 [ 355.489857][ T34] ? __pfx_ext4_map_blocks+0x10/0x10 [ 355.489878][ T34] ? kmem_cache_alloc_noprof+0x151/0x600 [ 355.489915][ T34] ? ext4_inode_journal_mode+0x376/0x470 [ 355.489947][ T34] ext4_do_writepages+0x2398/0x4770 [ 355.490000][ T34] ? ieee80211_inform_bss+0xbda/0x10d0 [ 355.490046][ T34] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 355.490074][ T34] ? __pfx_ext4_do_writepages+0x10/0x10 [ 355.490099][ T34] ? __lock_acquire+0x747/0x2de0 [ 355.490134][ T34] ? __lock_acquire+0x747/0x2de0 [ 355.490168][ T34] ? __lock_acquire+0x747/0x2de0 [ 355.490207][ T34] ? lock_acquire+0x115/0x350 [ 355.490258][ T34] ext4_writepages+0x1fe/0x4e0 [ 355.490293][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 355.490346][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 355.490365][ T34] ? __pfx_ext4_writepages+0x10/0x10 [ 355.490388][ T34] do_writepages+0x338/0x560 [ 355.490406][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.490426][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 355.490449][ T34] ? writeback_sb_inodes+0x450/0x1af0 [ 355.490471][ T34] __writeback_single_inode+0x136/0x1220 [ 355.490492][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 355.490512][ T34] writeback_sb_inodes+0x9de/0x1af0 [ 355.490553][ T34] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 355.490598][ T34] ? __pfx_down_read_trylock+0x10/0x10 [ 355.490635][ T34] __writeback_inodes_wb+0x114/0x240 [ 355.490660][ T34] wb_writeback+0x42f/0xad0 [ 355.490679][ T34] ? queue_io+0x241/0x470 [ 355.490702][ T34] ? __pfx_wb_writeback+0x10/0x10 [ 355.490718][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.490746][ T34] wb_workfn+0xc92/0x10f0 [ 355.490785][ T34] ? __pfx_wb_workfn+0x10/0x10 [ 355.490827][ T34] ? lock_acquire+0x115/0x350 [ 355.490854][ T34] ? rcu_is_watching+0x16/0xb0 [ 355.490885][ T34] ? process_scheduled_works+0x97a/0x1630 [ 355.490910][ T34] process_scheduled_works+0xc3d/0x1630 [ 355.490980][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.491018][ T34] ? assign_work+0x3cf/0x5d0 [ 355.491046][ T34] worker_thread+0xa47/0xfb0 [ 355.491081][ T34] ? __kthread_parkme+0x71/0x1f0 [ 355.491105][ T34] kthread+0x38b/0x480 [ 355.491124][ T34] ? __pfx_worker_thread+0x10/0x10 [ 355.491146][ T34] ? __pfx_kthread+0x10/0x10 [ 355.491166][ T34] ret_from_fork+0x514/0xb70 [ 355.491184][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 355.491199][ T34] ? __switch_to+0xc78/0x1410 [ 355.491223][ T34] ? __pfx_kthread+0x10/0x10 [ 355.491242][ T34] ret_from_fork_asm+0x1a/0x30 [ 355.491279][ T34] [ 355.491333][ T34] INFO: task jbd2/sda1-8:4937 blocked in I/O wait for more than 143 seconds. [ 355.491348][ T34] Tainted: G L syzkaller #0 [ 355.491357][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.491364][ T34] task:jbd2/sda1-8 state:D stack:25288 pid:4937 tgid:4937 ppid:2 task_flags:0x240040 flags:0x00080000 [ 355.491409][ T34] Call Trace: [ 355.491414][ T34] [ 355.491423][ T34] __schedule+0x1b47/0x5c60 [ 355.491447][ T34] ? percpu_ref_put_many+0x21/0x240 [ 355.491466][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 355.491491][ T34] ? __pfx___schedule+0x10/0x10 [ 355.491515][ T34] ? schedule+0x90/0x2b0 [ 355.491538][ T34] schedule+0x164/0x2b0 [ 355.491555][ T34] io_schedule+0x7f/0xd0 [ 355.491574][ T34] bit_wait_io+0x13/0x110 [ 355.491593][ T34] __wait_on_bit+0xac/0x300 [ 355.491610][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.491630][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.491650][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.491668][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.491688][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.491716][ T34] ? __wait_on_buffer+0xe/0x80 [ 355.491743][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 355.491767][ T34] ? trace_hrtimer_start+0x82/0x200 [ 355.491814][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 355.491846][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.491881][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.491899][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 355.491915][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 355.491941][ T34] kjournald2+0x3bc/0x740 [ 355.491970][ T34] ? __pfx_kjournald2+0x10/0x10 [ 355.491988][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 355.492014][ T34] ? __kthread_parkme+0x71/0x1f0 [ 355.492031][ T34] ? __kthread_parkme+0x199/0x1f0 [ 355.492053][ T34] kthread+0x38b/0x480 [ 355.492072][ T34] ? __pfx_kjournald2+0x10/0x10 [ 355.492087][ T34] ? __pfx_kthread+0x10/0x10 [ 355.492107][ T34] ret_from_fork+0x514/0xb70 [ 355.492123][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 355.492139][ T34] ? __switch_to+0xc78/0x1410 [ 355.492163][ T34] ? __pfx_kthread+0x10/0x10 [ 355.492183][ T34] ret_from_fork_asm+0x1a/0x30 [ 355.492219][ T34] [ 355.492230][ T34] INFO: task syz-executor:5592 blocked in I/O wait for more than 143 seconds. [ 355.492244][ T34] Tainted: G L syzkaller #0 [ 355.492252][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.492259][ T34] task:syz-executor state:D stack:22368 pid:5592 tgid:5592 ppid:5591 task_flags:0x440100 flags:0x00080000 [ 355.492299][ T34] Call Trace: [ 355.492304][ T34] [ 355.492313][ T34] __schedule+0x1b47/0x5c60 [ 355.492339][ T34] ? lock_acquire+0x115/0x350 [ 355.492370][ T34] ? __pfx___schedule+0x10/0x10 [ 355.492394][ T34] ? schedule+0x90/0x2b0 [ 355.492412][ T34] schedule+0x164/0x2b0 [ 355.492430][ T34] io_schedule+0x7f/0xd0 [ 355.492447][ T34] bit_wait_io+0x13/0x110 [ 355.492467][ T34] __wait_on_bit+0xac/0x300 [ 355.492484][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.492505][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.492524][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.492547][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.492567][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.492600][ T34] do_get_write_access+0x658/0x10c0 [ 355.492633][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 355.492658][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 355.492684][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 355.492704][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 355.492721][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 355.492747][ T34] ext4_reserve_inode_write+0x294/0x360 [ 355.492775][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 355.492799][ T34] ext4_dirty_inode+0xd0/0x110 [ 355.492820][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 355.492840][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 355.492869][ T34] file_update_time_flags+0x399/0x440 [ 355.492895][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 355.492917][ T34] ? reacquire_held_locks+0x117/0x1a0 [ 355.492950][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 355.492970][ T34] ? __lock_acquire+0x747/0x2de0 [ 355.492997][ T34] do_page_mkwrite+0x147/0x310 [ 355.493019][ T34] do_wp_page+0x1a85/0x4b60 [ 355.493059][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 355.493081][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.493099][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 355.493124][ T34] handle_mm_fault+0x15d7/0x3750 [ 355.493157][ T34] ? handle_mm_fault+0xf1/0x3750 [ 355.493190][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 355.493213][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 355.493229][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 355.493268][ T34] do_user_addr_fault+0xb35/0x1480 [ 355.493295][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 355.493313][ T34] exc_page_fault+0x6a/0xc0 [ 355.493333][ T34] asm_exc_page_fault+0x26/0x30 [ 355.493349][ T34] RIP: 0033:0x7fdcae87c6e2 [ 355.493364][ T34] RSP: 002b:00007ffedefea660 EFLAGS: 00010202 [ 355.493377][ T34] RAX: 00007fdcac934000 RBX: 00005555754cd380 RCX: 0000000000000002 [ 355.493389][ T34] RDX: 0000000000001519 RSI: 00005555754c9850 RDI: 0000000000000004 [ 355.493400][ T34] RBP: 00007ffedefeab60 R08: 00005555754c98d8 R09: 00000000000000a1 [ 355.493411][ T34] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffedefea9a0 [ 355.493421][ T34] R13: 00007ffedefea790 R14: 585858582e7a7973 R15: 00007ffedefea6e0 [ 355.493446][ T34] [ 355.493476][ T34] INFO: task syz.5.1217:9094 blocked in I/O wait for more than 143 seconds. [ 355.493490][ T34] Tainted: G L syzkaller #0 [ 355.493498][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.493505][ T34] task:syz.5.1217 state:D stack:24584 pid:9094 tgid:9094 ppid:7800 task_flags:0x440040 flags:0x00080002 [ 355.493564][ T34] Call Trace: [ 355.493569][ T34] [ 355.493578][ T34] __schedule+0x1b47/0x5c60 [ 355.493605][ T34] ? lock_acquire+0x115/0x350 [ 355.493634][ T34] ? __pfx___schedule+0x10/0x10 [ 355.493658][ T34] ? schedule+0x90/0x2b0 [ 355.493676][ T34] schedule+0x164/0x2b0 [ 355.493694][ T34] io_schedule+0x7f/0xd0 [ 355.493711][ T34] bit_wait_io+0x13/0x110 [ 355.493731][ T34] __wait_on_bit+0xac/0x300 [ 355.493748][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.493769][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.493788][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.493805][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.493826][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.493858][ T34] do_get_write_access+0x658/0x10c0 [ 355.493892][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 355.493916][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 355.493942][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 355.493963][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 355.493979][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 355.494005][ T34] ext4_reserve_inode_write+0x294/0x360 [ 355.494033][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 355.494057][ T34] ext4_dirty_inode+0xd0/0x110 [ 355.494077][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 355.494097][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 355.494126][ T34] file_update_time_flags+0x399/0x440 [ 355.494152][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 355.494180][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 355.494206][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 355.494236][ T34] do_page_mkwrite+0x147/0x310 [ 355.494258][ T34] do_pte_missing+0x70f/0x3570 [ 355.494285][ T34] ? handle_mm_fault+0xf1/0x3750 [ 355.494314][ T34] handle_mm_fault+0x1a53/0x3750 [ 355.494346][ T34] ? handle_mm_fault+0xf1/0x3750 [ 355.494378][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 355.494402][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 355.494435][ T34] do_user_addr_fault+0xb35/0x1480 [ 355.494461][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 355.494479][ T34] exc_page_fault+0x6a/0xc0 [ 355.494498][ T34] asm_exc_page_fault+0x26/0x30 [ 355.494513][ T34] RIP: 0033:0x7fb23b272f32 [ 355.494525][ T34] RSP: 002b:00007ffce8812b00 EFLAGS: 00010202 [ 355.494543][ T34] RAX: 0000000000004008 RBX: 00007fb23c155720 RCX: 0000000000000000 [ 355.494554][ T34] RDX: 0000001b34420000 RSI: 0000000000000008 RDI: 00007fb23c155720 [ 355.494565][ T34] RBP: 0000000000000137 R08: 00007fb23b610000 R09: 00007fb23b626038 [ 355.494576][ T34] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8be734f0 [ 355.494586][ T34] R13: 00007fb23b626038 R14: 000000000000002f R15: ffffffffffffc000 [ 355.494600][ T34] ? vsnprintf+0xde0/0xef0 [ 355.494632][ T34] [ 355.494638][ T34] INFO: task syz.2.1229:9144 blocked in I/O wait for more than 143 seconds. [ 355.494651][ T34] Tainted: G L syzkaller #0 [ 355.494660][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.494667][ T34] task:syz.2.1229 state:D stack:26936 pid:9144 tgid:9144 ppid:5619 task_flags:0x440040 flags:0x00080002 [ 355.494714][ T34] Call Trace: [ 355.494719][ T34] [ 355.494728][ T34] __schedule+0x1b47/0x5c60 [ 355.494762][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 355.494781][ T34] ? __pfx___schedule+0x10/0x10 [ 355.494805][ T34] ? schedule+0x90/0x2b0 [ 355.494824][ T34] schedule+0x164/0x2b0 [ 355.494841][ T34] io_schedule+0x7f/0xd0 [ 355.494871][ T34] bit_wait_io+0x13/0x110 [ 355.494890][ T34] __wait_on_bit+0xac/0x300 [ 355.494906][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.494926][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.494945][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.494961][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.494981][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.495012][ T34] do_get_write_access+0x658/0x10c0 [ 355.495045][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 355.495075][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 355.495118][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 355.495147][ T34] ext4_reserve_inode_write+0x294/0x360 [ 355.495174][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 355.495198][ T34] ext4_dirty_inode+0xd0/0x110 [ 355.495218][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 355.495238][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 355.495262][ T34] ? mnt_get_write_access+0x216/0x280 [ 355.495285][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 355.495304][ T34] touch_atime+0x568/0x670 [ 355.495324][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 355.495346][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 355.495368][ T34] mmap_region+0xf11/0x2c30 [ 355.495398][ T34] ? __update_page_owner_handle+0x512/0x580 [ 355.495425][ T34] ? lock_acquire+0x115/0x350 [ 355.495446][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.495470][ T34] ? __pfx_mmap_region+0x10/0x10 [ 355.495494][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.495519][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.495546][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 355.495567][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.495611][ T34] ? lock_acquire+0x115/0x350 [ 355.495686][ T34] ? mt_find+0x186/0x630 [ 355.495708][ T34] ? mt_find+0x5ff/0x630 [ 355.495729][ T34] ? mt_find+0x186/0x630 [ 355.495748][ T34] ? __pfx_mt_find+0x10/0x10 [ 355.495772][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 355.495794][ T34] ? security_mmap_addr+0x71/0x240 [ 355.495819][ T34] ? shmem_mapping+0xd/0x50 [ 355.495835][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 355.495854][ T34] do_mmap+0xe0a/0x1300 [ 355.495884][ T34] ? __pfx_do_mmap+0x10/0x10 [ 355.495915][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 355.495933][ T34] ? down_write_killable+0x179/0x230 [ 355.495956][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 355.495977][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 355.496003][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 355.496023][ T34] ? lock_acquire+0x115/0x350 [ 355.496046][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.496067][ T34] ? __fget_files+0x2a/0x420 [ 355.496088][ T34] ? __fget_files+0x3a2/0x420 [ 355.496106][ T34] ? __fget_files+0x2a/0x420 [ 355.496127][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 355.496157][ T34] do_syscall_64+0x166/0x520 [ 355.496174][ T34] ? trace_irq_disable+0x3b/0x140 [ 355.496195][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.496211][ T34] ? clear_bhb_loop+0x70/0xc0 [ 355.496230][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.496246][ T34] RIP: 0033:0x7f4badd9dec2 [ 355.496258][ T34] RSP: 002b:00007ffeacf53a88 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 355.496286][ T34] RAX: ffffffffffffffda RBX: 0000001b32b64000 RCX: 00007f4badd9dec2 [ 355.496297][ T34] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32b64000 [ 355.496307][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 355.496317][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000fa [ 355.496327][ T34] R13: 00000000000927c0 R14: 000000000002ffe5 R15: 00007ffeacf53d60 [ 355.496351][ T34] [ 355.496357][ T34] INFO: task syz.0.1228:9147 blocked in I/O wait for more than 143 seconds. [ 355.496370][ T34] Tainted: G L syzkaller #0 [ 355.496378][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.496385][ T34] task:syz.0.1228 state:D stack:26936 pid:9147 tgid:9147 ppid:5603 task_flags:0x440040 flags:0x00080002 [ 355.496440][ T34] Call Trace: [ 355.496444][ T34] [ 355.496452][ T34] __schedule+0x1b47/0x5c60 [ 355.496483][ T34] ? is_bpf_text_address+0x26/0x2b0 [ 355.496498][ T34] ? __pfx___schedule+0x10/0x10 [ 355.496520][ T34] ? schedule+0x90/0x2b0 [ 355.496541][ T34] schedule+0x164/0x2b0 [ 355.496557][ T34] io_schedule+0x7f/0xd0 [ 355.496573][ T34] bit_wait_io+0x13/0x110 [ 355.496590][ T34] __wait_on_bit+0xac/0x300 [ 355.496606][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.496624][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 355.496641][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 355.496657][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 355.496676][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 355.496705][ T34] do_get_write_access+0x658/0x10c0 [ 355.496735][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 355.496757][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 355.496781][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 355.496807][ T34] ext4_reserve_inode_write+0x294/0x360 [ 355.496850][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 355.496873][ T34] ext4_dirty_inode+0xd0/0x110 [ 355.496907][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 355.496925][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 355.496945][ T34] ? mnt_get_write_access+0x216/0x280 [ 355.496966][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 355.496982][ T34] touch_atime+0x568/0x670 [ 355.497000][ T34] ? ext4_file_mmap_prepare+0x277/0x450 [ 355.497020][ T34] ext4_file_mmap_prepare+0x277/0x450 [ 355.497039][ T34] mmap_region+0xf11/0x2c30 [ 355.497065][ T34] ? __update_page_owner_handle+0x512/0x580 [ 355.497089][ T34] ? lock_acquire+0x115/0x350 [ 355.497108][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.497129][ T34] ? __pfx_mmap_region+0x10/0x10 [ 355.497151][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.497174][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.497193][ T34] ? __page_table_check_zero+0x3c3/0x430 [ 355.497213][ T34] ? __page_table_check_zero+0x6c/0x430 [ 355.497251][ T34] ? lock_acquire+0x115/0x350 [ 355.497317][ T34] ? mt_find+0x186/0x630 [ 355.497337][ T34] ? mt_find+0x5ff/0x630 [ 355.497356][ T34] ? mt_find+0x186/0x630 [ 355.497374][ T34] ? __pfx_mt_find+0x10/0x10 [ 355.497396][ T34] ? bpf_lsm_mmap_addr+0x9/0x50 [ 355.497415][ T34] ? security_mmap_addr+0x71/0x240 [ 355.497437][ T34] ? shmem_mapping+0xd/0x50 [ 355.497451][ T34] ? memfd_check_seals_mmap+0xc5/0x220 [ 355.497468][ T34] do_mmap+0xe0a/0x1300 [ 355.497496][ T34] ? __pfx_do_mmap+0x10/0x10 [ 355.497525][ T34] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 355.497545][ T34] ? down_write_killable+0x179/0x230 [ 355.497565][ T34] ? __pfx_down_write_killable+0x10/0x10 [ 355.497584][ T34] ? apparmor_mmap_file+0x2e7/0x390 [ 355.497608][ T34] vm_mmap_pgoff+0x272/0x4e0 [ 355.497626][ T34] ? lock_acquire+0x115/0x350 [ 355.497646][ T34] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 355.497665][ T34] ? __fget_files+0x2a/0x420 [ 355.497685][ T34] ? __fget_files+0x3a2/0x420 [ 355.497701][ T34] ? __fget_files+0x2a/0x420 [ 355.497720][ T34] ksys_mmap_pgoff+0x4dc/0x760 [ 355.498293][ T34] do_syscall_64+0x166/0x520 [ 355.498358][ T34] ? trace_irq_disable+0x3b/0x140 [ 355.498417][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.498473][ T34] ? clear_bhb_loop+0x70/0xc0 [ 355.498538][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.498586][ T34] RIP: 0033:0x7f0e44d9dec2 [ 355.498626][ T34] RSP: 002b:00007ffff0cfcb08 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 355.498678][ T34] RAX: ffffffffffffffda RBX: 0000001b32964000 RCX: 00007f0e44d9dec2 [ 355.498750][ T34] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32964000 [ 355.498784][ T34] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 355.498819][ T34] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000fb [ 355.498854][ T34] R13: 00000000000927c0 R14: 000000000002ffd0 R15: 00007ffff0cfcde0 [ 355.498942][ T34] [ 355.498984][ T34] [ 355.498984][ T34] Showing all locks held in the system: [ 355.499016][ T34] locks held by pr/ttyS0/16: 2, last CPU#0: [ 355.499065][ T34] #0: ffffffff8ec35e98 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 355.499229][ T34] #1: ffffffff9ad56f58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 355.499434][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 355.499476][ T34] #0: ffffffff8ed5c2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 355.499741][ T34] locks held by kworker/u8:3/51: 6, on CPU#0: [ 355.499783][ T34] #0: ffff888020ad5948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 355.499951][ T34] #1: ffffc90000bb7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 355.500119][ T34] #2: ffff8880357c00e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 355.500285][ T34] #3: ffff8880357cec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 355.500409][ T34] #4: ffff8880357cc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 355.500529][ T34] #5: ffff88807691dcb8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 355.500692][ T34] locks held by getty/5360: 2, on CPU#0: [ 355.500726][ T34] #0: ffff8880357730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 355.500864][ T34] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 355.500988][ T34] locks held by syz-executor/5592: 3, on CPU#0: [ 355.501030][ T34] #0: ffff88807b904a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 355.501129][ T34] #1: ffff8880357c0558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 355.501263][ T34] #2: ffff8880357cc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 355.501414][ T34] locks held by syz.5.1217/9094: 3, on CPU#0: [ 355.501450][ T34] #0: ffff88807c3fd6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 355.501557][ T34] #1: ffff8880357c0558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 355.501692][ T34] #2: ffff8880357cc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 355.501816][ T34] locks held by syz.2.1229/9144: 3, on CPU#0: [ 355.501853][ T34] #0: ffff88802be3a800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 355.501996][ T34] #1: ffff8880357c0460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 355.502256][ T34] #2: ffff8880357cc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 355.502427][ T34] locks held by syz.0.1228/9147: 3, on CPU#1: [ 355.502465][ T34] #0: ffff888035027180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 355.502605][ T34] #1: ffff8880357c0460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 355.502731][ T34] #2: ffff8880357cc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 355.502856][ T34] [ 355.502872][ T34] ============================================= [ 355.502872][ T34] [ 355.502893][ T34] NMI backtrace for cpu 1 [ 355.502952][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 355.503025][ T34] Tainted: [L]=SOFTLOCKUP [ 355.503031][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.503059][ T34] Call Trace: [ 355.503079][ T34] [ 355.503097][ T34] dump_stack_lvl+0xe8/0x150 [ 355.503181][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 355.503267][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.503342][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 355.503423][ T34] sys_info+0x135/0x170 [ 355.503485][ T34] watchdog+0x1058/0x10d0 [ 355.503575][ T34] ? watchdog+0x209/0x10d0 [ 355.503675][ T34] kthread+0x38b/0x480 [ 355.503741][ T34] ? __pfx_watchdog+0x10/0x10 [ 355.503796][ T34] ? __pfx_kthread+0x10/0x10 [ 355.503851][ T34] ret_from_fork+0x514/0xb70 [ 355.503905][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 355.503956][ T34] ? __switch_to+0xc78/0x1410 [ 355.504031][ T34] ? __pfx_kthread+0x10/0x10 [ 355.504092][ T34] ret_from_fork_asm+0x1a/0x30 [ 355.504198][ T34] [ 355.504210][ T34] Sending NMI from CPU 1 to CPUs 0: [ 355.504272][ C0] NMI backtrace for cpu 0 [ 355.504285][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.504306][ C0] Tainted: [L]=SOFTLOCKUP [ 355.504312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.504320][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 355.504339][ C0] Code: e8 be 46 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 37 c2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 355.504352][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 355.504365][ C0] RAX: 1ffffffff35aad00 RBX: 00000000000003fd RCX: 0000000000000000 [ 355.504376][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 355.504386][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 355.504396][ C0] R10: dffffc0000000000 R11: ffffffff85788d30 R12: dffffc0000000000 [ 355.504408][ C0] R13: 0000000000000000 R14: ffffffff9ad56f80 R15: 0000000000000000 [ 355.504418][ C0] FS: 0000000000000000(0000) GS:ffff888124cb7000(0000) knlGS:0000000000000000 [ 355.504431][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.504442][ C0] CR2: 000055f005706168 CR3: 000000000eb46000 CR4: 00000000003526f0 [ 355.504456][ C0] Call Trace: [ 355.504461][ C0] [ 355.504468][ C0] wait_for_lsr+0x184/0x2f0 [ 355.504494][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 355.504519][ C0] serial8250_console_write+0xaa1/0x1200 [ 355.504540][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 355.504555][ C0] ? rcu_is_watching+0x16/0xb0 [ 355.504584][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 355.504612][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 355.504635][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 355.504663][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 355.504689][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 355.504712][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 355.504731][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 355.504753][ C0] ? __kthread_parkme+0x71/0x1f0 [ 355.504769][ C0] ? __kthread_parkme+0x199/0x1f0 [ 355.504786][ C0] kthread+0x38b/0x480 [ 355.504803][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 355.504822][ C0] ? __pfx_kthread+0x10/0x10 [ 355.504839][ C0] ret_from_fork+0x514/0xb70 [ 355.504854][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 355.504868][ C0] ? __switch_to+0xc78/0x1410 [ 355.504890][ C0] ? __pfx_kthread+0x10/0x10 [ 355.504908][ C0] ret_from_fork_asm+0x1a/0x30 [ 355.504938][ C0] [ 355.505295][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 358.397007][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 358.407792][ T34] Tainted: [L]=SOFTLOCKUP [ 358.412154][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.422202][ T34] Call Trace: [ 358.425484][ T34] [ 358.428438][ T34] vpanic+0x26f/0x710 [ 358.432426][ T34] panic+0xc5/0xd0 [ 358.436148][ T34] ? __pfx_panic+0x10/0x10 [ 358.440567][ T34] ? wq_watchdog_touch+0xf9/0x160 [ 358.445604][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 358.451806][ T34] watchdog+0x10cc/0x10d0 [ 358.456154][ T34] ? watchdog+0x209/0x10d0 [ 358.460574][ T34] kthread+0x38b/0x480 [ 358.464646][ T34] ? __pfx_watchdog+0x10/0x10 [ 358.469344][ T34] ? __pfx_kthread+0x10/0x10 [ 358.473956][ T34] ret_from_fork+0x514/0xb70 [ 358.478563][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 358.483677][ T34] ? __switch_to+0xc78/0x1410 [ 358.488373][ T34] ? __pfx_kthread+0x10/0x10 [ 358.492976][ T34] ret_from_fork_asm+0x1a/0x30 [ 358.497777][ T34] [ 358.501380][ T34] Kernel Offset: disabled [ 358.505722][ T34] Rebooting in 86400 seconds..