last executing test programs: 15m20.889950405s ago: executing program 32 (id=3716): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200883, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000006bc0)="$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") ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000000)={0x4d, 0x0, 0x9}) 11m23.914818509s ago: executing program 1 (id=7539): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 11m23.705779095s ago: executing program 1 (id=7541): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x1}) 11m23.442627863s ago: executing program 1 (id=7543): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000008100003a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 11m23.164487743s ago: executing program 1 (id=7547): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) 11m22.588322242s ago: executing program 1 (id=7550): syz_open_dev$swradio(0x0, 0x0, 0x2) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) 11m21.644553769s ago: executing program 1 (id=7563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 11m20.970459753s ago: executing program 33 (id=7563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8m36.095323424s ago: executing program 0 (id=9871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000ac0)=""/138, 0x8a}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004000)=""/211, 0xd3}, {&(0x7f0000004100)=""/159, 0x9f}, {&(0x7f00000041c0)=""/44, 0x2c}, {&(0x7f0000004200)=""/172, 0xac}, {&(0x7f00000042c0)=""/130, 0x82}], 0x7}, 0x20000020) 8m35.906692669s ago: executing program 0 (id=9874): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x1, 0xbb7, 0xffffffffffffffff, r1}) 8m35.66264482s ago: executing program 0 (id=9878): r0 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) io_uring_enter(r0, 0x8, 0x8bc, 0x3, &(0x7f0000000040)={[0x9]}, 0x8) 8m35.450365602s ago: executing program 0 (id=9880): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x6, 0x4200, 0x2, &(0x7f0000000300)="b73f"}, {0x2, 0xa201, 0x0, 0x0}, {0x9f, 0x8200, 0x0, 0x0}], 0x3}) 8m32.310831435s ago: executing program 0 (id=9923): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 8m32.137576559s ago: executing program 0 (id=9927): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x60561000) 8m17.045641985s ago: executing program 34 (id=9927): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x60561000) 6m43.867181745s ago: executing program 2 (id=11404): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x10) 6m43.308023095s ago: executing program 2 (id=11411): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000002c0)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@fat=@uid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@rodir}, {@utf8no}, {@utf8}]}, 0x2, 0x29a, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m43.044160847s ago: executing program 2 (id=11417): r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x9, 0x0) 6m42.790076233s ago: executing program 2 (id=11421): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='nls=koi8-u,nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030323532322c666f7263652c6e6f6465636f6d706f73652c00a2d4ac56c239b7c56875110de091cf2a7a475abb8f593a8d053f1daf07018f15e6e9202ff3072e7923ae5994a9f9f1a7696b5b40a43c11e3b1996b160778bf3b01ede57726bdecc9126378096aaeba8b85d26ce42f5874b76b65d40578553d8db172b7b689f69479323dd46dc6c8cf1f3efde4"], 0x1, 0x5e6, &(0x7f0000000f40)="$eJzs3U1vXFcZB/D/nUycOEiJ2yZtQJViNRJQLBLbE0pgQ0AIeYFQJSRWVSUrmdRWJm5lT5FbITDvWz5CWfgLsOuuUll0BWtW3lZI7L0LunfuvCR2HZsYz7j5/aQz55x75pz73Gfm3nmxrAnw3FqaS3MrRZbmiqK3pdXZ2W49LFs7261OknNJGkmzV6VYS4pPkzvplXy13FgvV3zRfl7//NLH197+7K1er1mX6v6Ng+YdzlZdMpvkTF0f13p3n3m94rEjvN5PHIzboz22jjL9Gc9bYBIUvdfNPWaSC0nO1+8DUl8dGicb3fE70lUOAAAATqlLu9nNZi6OOw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Terf/y/q0ui3Z1P0f/9/qt6Wun2qfTLuAAAAAAAAAADgGFzbzW42c7Hff1RUf/N/repcrm6/kvezkXbWcyObWU433axnIcnMyEJTm8vd7vrCIWYu7jtz8WSOFwAAAAAAAAC+pH6XpeHf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBIUyZleVZXL/fZMGs0k55NMlffbSv7Zb59mn4w7AAAAADgBl3azm81c7PcfFdVn/perz/3n837W0s1quumknXvVdwG9T/2Nne1WZ2e79bAse9f94X+OFEa1YnrfPey/56v1tw+lcsuN3M276eReGtXM0tV+PPvH9dsypuIHtcMFlXt1pzzyv9T1ZJipcnY297NaZWS+jq3MxgsHZ+KIj86Te1pIY/DNz+XjzXnlQl2Xx/Onic754siz7+WDM5F85xf/WlnprD1Yub8xNzmHdDSDuJ/MRGskE688D5kYmK8ycWXQX8pP8vPMZTZvZj2r+WWW0007s/lx1Vquk1jezhycqTuP9d58WiRT9ePSu4oeLabXqrkXs5qf5d3cSzu3873cyu3czq0sZj7zI4/wlUOc9Y2jnfXXv1k3ppP8ua4nQ5nXF0byOnrNnanGRrcMs/Ti8V8bm1+rG+U+fl/Xk+HJTCyMZOKlgzPx10fl7UZn7cH6yvJ7h9zfN+q6PI/+OFGvEuXz5cXywap6jz87yrGX9h1bqMYuD8Yae8auDMaedqZO1e/h9q60WI29su9Yqxq7OjI2PRgbvt8CYOJd+NaFqel/T/9j+qPpP0yvTP/0/I/O3T736lTO/v3s95vzZ77eeLX4Wz7Kr4ef/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP/dxgcfPljudNrrGhrPXaMxGWGMufGbfYfGfWUC/t9udh++d3Pjgw+/vfpw+Z32O+211q2F1hu3Ft5offfm/dVOe753O5wwNc5ogeM0fNEfdyQAAAAAAAAAAADAYZ3EPxiM+xgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA021pLs2tFFmYvzFf9ne2W52y9NvDezaTNJIUv0qKT5M76ZXMjCxXfNF+Xv/80sfX3v7sreFazf79GwfNO5ytumQ2yZm6Pq717j7zesXgCMuEXe8nDsbtvwEAAP//WqsILQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) 6m42.628862561s ago: executing program 2 (id=11424): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1000800, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000108c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x3ff, 0x3}) 6m42.222403626s ago: executing program 2 (id=11427): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) 6m41.731110161s ago: executing program 35 (id=11427): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) 4m31.63646695s ago: executing program 3 (id=13293): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x1f7, 0x2, 0x0, 0x0) 4m31.526687383s ago: executing program 3 (id=13296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) sync_file_range(r0, 0xee1, 0x7ff, 0x6) 4m31.39857067s ago: executing program 3 (id=13300): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2ce8c000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f00000001c0)=0x3ff, 0x6, 0x3) 4m31.2155134s ago: executing program 3 (id=13302): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000340)={[{@time_offset={'time_offset', 0x3d, 0x1}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xee00}}, {@sys_tz}, {@fmask={'fmask', 0x3d, 0x6d0}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xbab7}}, {@umask={'umask', 0x3d, 0x7}}]}, 0x1, 0x152d, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 4m31.076309186s ago: executing program 3 (id=13304): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r0, 0x11, 0x600, 0x7c000) 4m30.642018182s ago: executing program 3 (id=13306): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000540)=0x2) 4m30.242698565s ago: executing program 36 (id=13306): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x1}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000540)=0x2) 4m18.365215296s ago: executing program 5 (id=13347): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80801) io_submit(r0, 0x1, &(0x7f00000018c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x207f, r1, &(0x7f0000000080)="6f18ff078d8dcdd2", 0x8, 0x8001, 0x0, 0x0, r1}]) 4m17.969616908s ago: executing program 5 (id=13350): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 4m17.654935541s ago: executing program 5 (id=13353): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000580)={[{@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000400)=""/213, 0xd5) 4m17.127021054s ago: executing program 5 (id=13356): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000340)={[{@time_offset={'time_offset', 0x3d, 0x1}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xee00}}, {@sys_tz}, {@fmask={'fmask', 0x3d, 0x6d0}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xbab7}}, {@umask={'umask', 0x3d, 0x7}}]}, 0x1, 0x152d, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 4m16.398614024s ago: executing program 5 (id=13361): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0003}]}) r0 = timerfd_create(0x8, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 4m15.767233295s ago: executing program 5 (id=13372): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000003980)=0xffffffff, 0x4) 4m15.556994906s ago: executing program 37 (id=13372): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000003980)=0xffffffff, 0x4) 4.853478312s ago: executing program 9 (id=16451): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 4.847721953s ago: executing program 6 (id=16453): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x1, 0x1, 0x0, r0}, 0x10) 4.665513405s ago: executing program 6 (id=16456): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nogc_merge}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@nobarrier}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000340)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x5}}, 0x20) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 3.463303703s ago: executing program 9 (id=16471): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x143403, 0x147) fcntl$setlease(r0, 0x400, 0x1) 3.248758895s ago: executing program 4 (id=16472): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_id(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00', 0x0, 0xdeff) 3.133557157s ago: executing program 4 (id=16473): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) 3.046227046s ago: executing program 4 (id=16474): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0xc0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 2.573058751s ago: executing program 6 (id=16479): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_dellink={0x44, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x4, 0x0, 0x1, {0x1c, 0xa, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x1}, {0x8, 0x3, 0x0, 0x0, 0x20002000}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) 2.565747877s ago: executing program 8 (id=16480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e65", 0x4, 0x2) 2.404680988s ago: executing program 9 (id=16481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="f8", 0x1) 2.231589811s ago: executing program 4 (id=16482): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x248, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1.99910663s ago: executing program 8 (id=16484): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x2}) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.87421806s ago: executing program 9 (id=16485): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@my=0x1}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44acaa55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) 1.781290365s ago: executing program 6 (id=16486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='.', 0x1) 1.73214428s ago: executing program 8 (id=16487): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x8006) 1.730438506s ago: executing program 4 (id=16488): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x36, 0x0, 0x8}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 1.700633149s ago: executing program 9 (id=16489): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.616329309s ago: executing program 7 (id=16490): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{}, 0x1, 0x0, 0x10001}) 1.614520407s ago: executing program 6 (id=16491): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.517341165s ago: executing program 4 (id=16492): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000300)={[{@barrier}, {}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@discard_sync}, {@nodiscard}, {@noflushoncommit}, {@discard}, {@notreelog}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001000)={{0xffffffff}, '/dev/nullb0\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x5, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}}) 1.464759298s ago: executing program 7 (id=16493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}]}}]}, 0xa4}}, 0x0) 1.453375011s ago: executing program 9 (id=16494): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x61e3, &(0x7f0000000300)={0x0, 0xbfffdffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone3(&(0x7f00000012c0)={0x20000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.257743557s ago: executing program 7 (id=16495): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1.117050868s ago: executing program 6 (id=16496): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 832.043734ms ago: executing program 8 (id=16497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400010000000202000008000c"], 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 796.31609ms ago: executing program 7 (id=16498): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 542.967636ms ago: executing program 8 (id=16499): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0xfffffffffffffff5, 0x0, {{0x1, 0x0, 0x7, 0x9, 0x401, 0x3, {0xfffffffffffffffe, 0x7f, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0x2e88a2f8, 0x7f, 0xc000, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x5}}, {0x0, 0x4}}}, 0xa0) fallocate(r0, 0x0, 0xa, 0x5) 542.649654ms ago: executing program 7 (id=16500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 312.852076ms ago: executing program 7 (id=16501): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlink(&(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0)='./file0\x00') mount$nfs4(0x0, &(0x7f0000004700)='./file0\x00', 0x0, 0x206c808, 0x0) 0s ago: executing program 8 (id=16502): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37d}, {&(0x7f0000000a00)="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", 0x1d9}, {&(0x7f00000006c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6dd3f985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9e4b11948f01d4dd184856b3809b923e106c1bb5120a0aef186f2c8f", 0x83}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3", 0x4f}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): sted (2) [ 1107.680125][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.695789][ T778] Bluetooth: hci0: Zero size dump init pkt [ 1108.068231][T10674] loop9: detected capacity change from 0 to 512 [ 1108.077396][T10674] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1108.077417][T10674] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1108.097552][T10674] EXT4-fs (loop9): 1 truncate cleaned up [ 1108.098720][T10674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.192130][ T4533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.272927][T10659] loop7: detected capacity change from 0 to 32768 [ 1108.356958][T10659] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1108.400414][T10659] XFS (loop7): Ending clean mount [ 1108.468569][T29027] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1108.589521][T29630] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1108.798056][T29630] usb 10-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 1108.799320][T29630] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1108.799350][T29630] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.801110][T29630] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1108.801133][T29630] usb 10-1: Product: syz [ 1108.801147][T29630] usb 10-1: Manufacturer: syz [ 1108.840714][T29630] hub 10-1:4.0: USB hub found [ 1108.845984][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1109.006714][ T9] usb 5-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1109.011448][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.011476][ T9] usb 5-1: Product: syz [ 1109.011491][ T9] usb 5-1: Manufacturer: syz [ 1109.011504][ T9] usb 5-1: SerialNumber: syz [ 1109.026321][T29630] hub 10-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1109.057095][ T9] usb 5-1: config 0 descriptor?? [ 1109.059641][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 1109.271246][T10701] vxcan2: entered allmulticast mode [ 1109.355679][T29630] usb 10-1: USB disconnect, device number 14 [ 1109.582324][T10703] loop8: detected capacity change from 0 to 32768 [ 1109.583878][T10703] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15591 (10703) [ 1109.612559][T10703] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1109.612592][T10703] BTRFS info (device loop8): using crc32c checksum algorithm [ 1109.718784][T10703] BTRFS info (device loop8): enabling ssd optimizations [ 1109.718814][T10703] BTRFS info (device loop8): turning on flush-on-commit [ 1109.718907][T10703] BTRFS info (device loop8): enabling free space tree [ 1109.718924][T10703] BTRFS info (device loop8): enabling auto defrag [ 1109.718941][T10703] BTRFS info (device loop8): use lzo compression, level 1 [ 1109.718960][T10703] BTRFS info (device loop8): max_inline set to 4096 [ 1109.791998][ T33] audit: type=1800 audit(2000000004.180:970): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.15591" name="file2" dev="loop8" ino=261 res=0 errno=-22 [ 1109.895619][ T9] usb 5-1: failed to send control message: -71 [ 1109.895681][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1109.897824][ T9] usb 5-1: USB disconnect, device number 42 [ 1109.899521][ T9] ch341 5-1:0.0: device disconnected [ 1110.086152][T10729] loop7: detected capacity change from 0 to 2048 [ 1110.130062][T10729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.156708][T10729] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.15597: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1110.236102][T10729] EXT4-fs (loop7): Remounting filesystem read-only [ 1110.318131][T29027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.379067][T10735] loop9: detected capacity change from 0 to 1764 [ 1110.460438][T32319] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1110.481111][T10737] loop7: detected capacity change from 0 to 256 [ 1111.067496][T10749] loop7: detected capacity change from 0 to 256 [ 1111.071413][T10749] exfat: Deprecated parameter 'utf8' [ 1111.071437][T10749] exfat: Deprecated parameter 'utf8' [ 1111.071515][T10749] exfat: Deprecated parameter 'namecase' [ 1111.112369][T10749] exfat: Deprecated parameter 'namecase' [ 1111.158837][T10744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.249805][T10754] ieee802154 phy0 wpan0: encryption failed: -22 [ 1111.267342][T10749] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1111.655841][T10762] loop4: detected capacity change from 0 to 512 [ 1111.677689][T10762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1111.710083][T10762] EXT4-fs (loop4): 1 truncate cleaned up [ 1111.727909][T10762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.816920][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.269593][T10763] loop8: detected capacity change from 0 to 32768 [ 1112.296763][T10763] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1112.369830][T10763] XFS (loop8): Ending clean mount [ 1112.462546][T10796] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1112.462546][T10796] program syz.6.15621 not setting count and/or reply_len properly [ 1112.507798][T32319] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1112.592978][T10775] loop9: detected capacity change from 0 to 32768 [ 1112.607353][T10775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15615 (10775) [ 1112.654285][T10775] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1112.655037][T10775] BTRFS info (device loop9): using crc32c checksum algorithm [ 1112.840724][T10775] BTRFS info (device loop9): enabling ssd optimizations [ 1112.840743][T10775] BTRFS info (device loop9): turning on flush-on-commit [ 1112.840753][T10775] BTRFS info (device loop9): enabling free space tree [ 1112.840762][T10775] BTRFS info (device loop9): enabling auto defrag [ 1112.840772][T10775] BTRFS info (device loop9): use lzo compression, level 1 [ 1112.840783][T10775] BTRFS info (device loop9): max_inline set to 4096 [ 1112.899161][T10813] profile_transition: unconfined exec no attachment [ 1113.079338][T10817] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 1113.345258][ T4533] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1114.149514][T10834] loop6: detected capacity change from 0 to 32768 [ 1114.149647][T10830] loop8: detected capacity change from 0 to 32768 [ 1114.207000][T10830] JBD2: Ignoring recovery information on journal [ 1114.312413][T10830] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 1114.402376][T10834] JBD2: Ignoring recovery information on journal [ 1114.523068][T10834] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1114.583168][T32319] ocfs2: Unmounting device (7,8) on (node local) [ 1114.632742][T29630] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1114.724567][ T5802] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1114.756446][T22709] ocfs2: Unmounting device (7,6) on (node local) [ 1114.803991][T10854] netlink: 'syz.8.15639': attribute type 4 has an invalid length. [ 1114.825394][T29630] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1114.828979][T29630] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1114.829030][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1114.829057][T29630] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1114.829080][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1114.829105][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1114.830086][T29630] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1114.830130][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1114.830156][T29630] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1114.830179][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1114.830203][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1114.831191][T29630] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1114.831242][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1114.831268][T29630] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1114.831291][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1114.831321][T29630] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1114.851791][T29630] usb 5-1: string descriptor 0 read error: -22 [ 1114.851932][T29630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.878032][ T5802] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1114.881228][ T5802] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.898098][ T5802] usb 10-1: config 0 descriptor?? [ 1115.055922][T29630] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1115.121326][ T5802] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1115.219487][T10860] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1115.219512][T10860] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1115.459287][ T5802] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1115.459312][ T5802] [drm] Initialized udl on minor 1 [ 1115.674708][T10862] loop6: detected capacity change from 0 to 40427 [ 1115.691814][T10862] F2FS-fs (loop6): invalid crc value [ 1115.706075][T10868] netlink: 'syz.7.15646': attribute type 29 has an invalid length. [ 1115.708949][T10868] netlink: 'syz.7.15646': attribute type 29 has an invalid length. [ 1115.746469][ T5802] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1115.860902][T10862] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1115.894146][T10862] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1115.932320][T10877] loop8: detected capacity change from 0 to 512 [ 1116.016513][ T5802] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1116.039317][T22709] syz-executor: attempt to access beyond end of device [ 1116.039317][T22709] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1116.070643][T22709] CPU: 1 UID: 0 PID: 22709 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.070678][T22709] Tainted: [L]=SOFTLOCKUP [ 1116.070686][T22709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.070698][T22709] Call Trace: [ 1116.070707][T22709] [ 1116.070716][T22709] dump_stack_lvl+0xe8/0x150 [ 1116.070758][T22709] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1116.070784][T22709] f2fs_write_end_bio+0xda7/0x11c0 [ 1116.070821][T22709] __submit_merged_bio+0x258/0x6a0 [ 1116.070841][T22709] ? rcu_is_watching+0x16/0xb0 [ 1116.070868][T22709] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1116.070892][T22709] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1116.070938][T22709] f2fs_write_data_pages+0x2a13/0x36e0 [ 1116.070991][T22709] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1116.071007][T22709] ? is_bpf_text_address+0x26/0x2b0 [ 1116.071035][T22709] ? arch_stack_walk+0xfb/0x150 [ 1116.071079][T22709] ? add_lock_to_list+0xc7/0x100 [ 1116.071102][T22709] ? lockdep_unlock+0x5c/0xd0 [ 1116.071119][T22709] ? __lock_acquire+0x1511/0x2de0 [ 1116.071167][T22709] ? do_raw_spin_lock+0x12b/0x2f0 [ 1116.071201][T22709] ? do_raw_spin_unlock+0xf5/0x200 [ 1116.071221][T22709] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1116.071243][T22709] do_writepages+0x338/0x560 [ 1116.071281][T22709] ? do_raw_spin_unlock+0xf5/0x200 [ 1116.071305][T22709] filemap_fdatawrite+0x1e9/0x2f0 [ 1116.071329][T22709] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1116.071400][T22709] ? do_raw_spin_unlock+0xf5/0x200 [ 1116.071424][T22709] f2fs_sync_dirty_inodes+0x471/0x970 [ 1116.071462][T22709] f2fs_write_checkpoint+0x860/0x24d0 [ 1116.071520][T22709] kill_f2fs_super+0x2dc/0x700 [ 1116.071545][T22709] ? rcu_do_enqueue+0x616/0x870 [ 1116.071564][T22709] ? lockdep_hardirqs_on+0x7b/0x110 [ 1116.071584][T22709] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1116.071622][T22709] ? __pfx_call_rcu+0x10/0x10 [ 1116.071647][T22709] ? shrinker_free+0x2a7/0x3b0 [ 1116.071670][T22709] deactivate_locked_super+0xbe/0x110 [ 1116.071693][T22709] cleanup_mnt+0x3d3/0x460 [ 1116.071719][T22709] task_work_run+0x1d9/0x260 [ 1116.071743][T22709] ? __pfx_task_work_run+0x10/0x10 [ 1116.071773][T22709] exit_to_user_mode_loop+0x204/0x770 [ 1116.071793][T22709] ? rcu_is_watching+0x16/0xb0 [ 1116.071817][T22709] do_syscall_64+0x328/0x520 [ 1116.071835][T22709] ? trace_irq_disable+0x3b/0x140 [ 1116.071852][T22709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.071872][T22709] ? clear_bhb_loop+0x70/0xc0 [ 1116.071895][T22709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.071915][T22709] RIP: 0033:0x7f8f5dd9f397 [ 1116.071934][T22709] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1116.071950][T22709] RSP: 002b:00007ffdaaa68018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1116.071972][T22709] RAX: 0000000000000000 RBX: 00007f8f5de344bb RCX: 00007f8f5dd9f397 [ 1116.071986][T22709] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaaa680d0 [ 1116.071999][T22709] RBP: 00007ffdaaa680d0 R08: 00007ffdaaa690d0 R09: 00000000ffffffff [ 1116.072013][T22709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdaaa69160 [ 1116.072026][T22709] R13: 00007f8f5de344bb R14: 00000000001106c7 R15: 00007ffdaaa691a0 [ 1116.072060][T22709] [ 1116.220949][T22709] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1116.373209][ T5802] usb 10-1: USB disconnect, device number 15 [ 1116.700287][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.821690][T10887] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1116.894929][T10881] loop8: detected capacity change from 0 to 32768 [ 1116.926497][T10881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15650 (10881) [ 1116.946077][T10881] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1116.946113][T10881] BTRFS info (device loop8): using crc32c checksum algorithm [ 1117.088755][T10881] BTRFS info (device loop8): enabling ssd optimizations [ 1117.088782][T10881] BTRFS info (device loop8): turning on flush-on-commit [ 1117.088798][T10881] BTRFS info (device loop8): enabling free space tree [ 1117.088813][T10881] BTRFS info (device loop8): enabling auto defrag [ 1117.088830][T10881] BTRFS info (device loop8): use lzo compression, level 1 [ 1117.088851][T10881] BTRFS info (device loop8): max_inline set to 4096 [ 1117.235683][T10912] profile_transition: unconfined exec no attachment [ 1117.279783][T32319] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1117.311184][T26504] usb 5-1: USB disconnect, device number 43 [ 1117.715697][T10924] loop9: detected capacity change from 0 to 4096 [ 1117.718378][T10925] loop6: detected capacity change from 0 to 2048 [ 1117.832276][T10925] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1117.870856][T10925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.886579][T10930] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1118.233139][T10941] aa_policy_admin_capable: cap_mac_admin? 1 [ 1118.246679][T10941] aa_policy_admin_capable: policy locked? 0 [ 1118.247128][T10941] unpack_pdb: unpacking tags [ 1118.247401][T10941] unpack_pdb: done unpacking tags [ 1118.254185][ T33] audit: type=1400 audit(2000000012.640:971): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10939 comm="syz.7.15672" name="p" offset=58 [ 1118.255493][T26504] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1118.316247][T10941] aa_free_profile: aa_free_profile(ffff888058470400) [ 1118.406114][T26504] usb 9-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 1118.407515][T26504] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.407563][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1118.407588][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1118.407610][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1118.407632][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1118.407654][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1118.407676][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1118.407696][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1118.407718][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1118.407739][T26504] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.407759][T26504] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.407810][T26504] usb 9-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 1118.410268][T26504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.410292][T26504] usb 9-1: Product: syz [ 1118.410306][T26504] usb 9-1: Manufacturer: syz [ 1118.410321][T26504] usb 9-1: SerialNumber: syz [ 1118.494933][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495059][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495159][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495256][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495349][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495441][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495537][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.495631][T10933] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1118.535474][T10950] profile_transition: unconfined exec no attachment [ 1118.650702][T26504] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 1118.651894][T26504] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 1118.653955][T26504] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 5 [ 1118.688644][T26504] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1118.691304][T26504] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 3 [ 1118.691391][T26504] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 1118.691501][T26504] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1118.707503][T10955] program syz.7.15677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1118.748001][T26504] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1118.814209][T10958] profile_transition: unconfined exec no attachment [ 1119.109057][ T5722] usb 9-1: USB disconnect, device number 30 [ 1119.182507][ T5722] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1119.216277][ T5722] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1119.226848][ T5722] keyspan 9-1:1.0: device disconnected [ 1119.492090][T10978] profile_transition: unconfined exec no attachment [ 1119.586012][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15689'. [ 1119.732211][T10989] loop7: detected capacity change from 0 to 1024 [ 1119.787987][T10989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.896917][T10999] loop8: detected capacity change from 0 to 512 [ 1119.900502][T10999] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1120.330873][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15701'. [ 1120.387882][T29027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.135385][T11022] loop9: detected capacity change from 0 to 40427 [ 1121.142666][T11022] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1121.142689][T11022] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1121.170084][T11022] F2FS-fs (loop9): invalid crc value [ 1121.334040][T11048] loop7: detected capacity change from 0 to 256 [ 1121.359870][T11050] loop8: detected capacity change from 0 to 512 [ 1121.379317][T11048] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1121.416845][T11050] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1121.417032][T11050] System zones: 0-2, 18-18, 34-35 [ 1121.432757][T11050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.432862][T11050] ext4 filesystem being mounted at /936/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.508153][T11022] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1121.535903][T11022] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 1121.535933][T11022] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1121.544989][T11048] exFAT-fs (loop7): start_clu is invalid cluster(0x0) [ 1121.620757][ T4533] syz-executor: attempt to access beyond end of device [ 1121.620757][ T4533] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1121.645492][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.645525][ T4533] Tainted: [L]=SOFTLOCKUP [ 1121.645531][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1121.645540][ T4533] Call Trace: [ 1121.645547][ T4533] [ 1121.645554][ T4533] dump_stack_lvl+0xe8/0x150 [ 1121.645576][ T4533] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1121.645598][ T4533] f2fs_write_end_bio+0xda7/0x11c0 [ 1121.645627][ T4533] __submit_merged_bio+0x258/0x6a0 [ 1121.645642][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1121.645662][ T4533] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1121.645680][ T4533] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1121.645714][ T4533] f2fs_write_data_pages+0x2a13/0x36e0 [ 1121.645757][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1121.645771][ T4533] ? is_bpf_text_address+0x26/0x2b0 [ 1121.645795][ T4533] ? arch_stack_walk+0xfb/0x150 [ 1121.645831][ T4533] ? add_lock_to_list+0xc7/0x100 [ 1121.645850][ T4533] ? lockdep_unlock+0x5c/0xd0 [ 1121.645865][ T4533] ? __lock_acquire+0x1511/0x2de0 [ 1121.645907][ T4533] ? do_raw_spin_lock+0x12b/0x2f0 [ 1121.645935][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1121.645953][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1121.645973][ T4533] do_writepages+0x338/0x560 [ 1121.645998][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1121.646016][ T4533] filemap_fdatawrite+0x1e9/0x2f0 [ 1121.646037][ T4533] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1121.646096][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1121.646119][ T4533] f2fs_sync_dirty_inodes+0x471/0x970 [ 1121.646154][ T4533] f2fs_write_checkpoint+0x860/0x24d0 [ 1121.646208][ T4533] kill_f2fs_super+0x2dc/0x700 [ 1121.646233][ T4533] ? rcu_do_enqueue+0x616/0x870 [ 1121.646251][ T4533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1121.646272][ T4533] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1121.646308][ T4533] ? __pfx_call_rcu+0x10/0x10 [ 1121.646333][ T4533] ? shrinker_free+0x2a7/0x3b0 [ 1121.646354][ T4533] deactivate_locked_super+0xbe/0x110 [ 1121.646377][ T4533] cleanup_mnt+0x3d3/0x460 [ 1121.646401][ T4533] task_work_run+0x1d9/0x260 [ 1121.646424][ T4533] ? __pfx_task_work_run+0x10/0x10 [ 1121.646453][ T4533] exit_to_user_mode_loop+0x204/0x770 [ 1121.646480][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1121.646503][ T4533] do_syscall_64+0x328/0x520 [ 1121.646522][ T4533] ? trace_irq_disable+0x3b/0x140 [ 1121.646539][ T4533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.646559][ T4533] ? clear_bhb_loop+0x70/0xc0 [ 1121.646580][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.646600][ T4533] RIP: 0033:0x7fd16279f397 [ 1121.646619][ T4533] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1121.646635][ T4533] RSP: 002b:00007fff36efec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1121.646656][ T4533] RAX: 0000000000000000 RBX: 00007fd1628344bb RCX: 00007fd16279f397 [ 1121.646670][ T4533] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36efece0 [ 1121.646683][ T4533] RBP: 00007fff36efece0 R08: 00007fff36effce0 R09: 00000000ffffffff [ 1121.646697][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36effd70 [ 1121.646709][ T4533] R13: 00007fd1628344bb R14: 0000000000111ca2 R15: 00007fff36effdb0 [ 1121.646742][ T4533] [ 1121.646773][ T4533] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1121.653966][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.053596][T11058] sock: sock_set_timeout: `syz.8.15720' (pid 11058) tries to set negative timeout [ 1122.775065][T26504] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1122.924475][T26504] usb 5-1: Using ep0 maxpacket: 16 [ 1122.938062][T26504] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1122.938114][T26504] usb 5-1: New USB device found: idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 1122.940943][T26504] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 1122.940970][T26504] usb 5-1: config 3 has no interface number 0 [ 1122.941009][T26504] usb 5-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 1122.941034][T26504] usb 5-1: config 3 interface 74 has no altsetting 0 [ 1122.955665][T26504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.955693][T26504] usb 5-1: Product: syz [ 1122.955709][T26504] usb 5-1: Manufacturer: syz [ 1122.955722][T26504] usb 5-1: SerialNumber: syz [ 1123.274753][T26504] usb 5-1: USB disconnect, device number 44 [ 1123.346459][T11085] loop9: detected capacity change from 0 to 40427 [ 1123.362480][T11085] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 1123.362501][T11085] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1123.382998][T11085] F2FS-fs (loop9): invalid crc value [ 1123.465561][T11085] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1123.490983][T11085] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 1123.491012][T11085] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1123.510370][T11093] loop7: detected capacity change from 0 to 32768 [ 1123.562215][T11093] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1123.708958][ T4533] syz-executor: attempt to access beyond end of device [ 1123.708958][ T4533] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1123.710783][ T4533] CPU: 1 UID: 0 PID: 4533 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.710814][ T4533] Tainted: [L]=SOFTLOCKUP [ 1123.710822][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1123.710833][ T4533] Call Trace: [ 1123.710840][ T4533] [ 1123.710849][ T4533] dump_stack_lvl+0xe8/0x150 [ 1123.710874][ T4533] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1123.710897][ T4533] f2fs_write_end_bio+0xda7/0x11c0 [ 1123.710932][ T4533] __submit_merged_bio+0x258/0x6a0 [ 1123.710951][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1123.710974][ T4533] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1123.710999][ T4533] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1123.711041][ T4533] f2fs_write_data_pages+0x2a13/0x36e0 [ 1123.711091][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1123.711109][ T4533] ? is_bpf_text_address+0x26/0x2b0 [ 1123.711139][ T4533] ? arch_stack_walk+0xfb/0x150 [ 1123.711186][ T4533] ? add_lock_to_list+0xc7/0x100 [ 1123.711207][ T4533] ? lockdep_unlock+0x5c/0xd0 [ 1123.711224][ T4533] ? __lock_acquire+0x1511/0x2de0 [ 1123.711268][ T4533] ? do_raw_spin_lock+0x12b/0x2f0 [ 1123.711297][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1123.711316][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1123.711336][ T4533] do_writepages+0x338/0x560 [ 1123.711367][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1123.711388][ T4533] filemap_fdatawrite+0x1e9/0x2f0 [ 1123.711409][ T4533] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1123.711482][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1123.711505][ T4533] f2fs_sync_dirty_inodes+0x471/0x970 [ 1123.711541][ T4533] f2fs_write_checkpoint+0x860/0x24d0 [ 1123.711595][ T4533] kill_f2fs_super+0x2dc/0x700 [ 1123.711620][ T4533] ? rcu_do_enqueue+0x616/0x870 [ 1123.711638][ T4533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1123.711657][ T4533] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1123.711693][ T4533] ? __pfx_call_rcu+0x10/0x10 [ 1123.711717][ T4533] ? shrinker_free+0x2a7/0x3b0 [ 1123.711740][ T4533] deactivate_locked_super+0xbe/0x110 [ 1123.711760][ T4533] cleanup_mnt+0x3d3/0x460 [ 1123.711784][ T4533] task_work_run+0x1d9/0x260 [ 1123.711807][ T4533] ? __pfx_task_work_run+0x10/0x10 [ 1123.711833][ T4533] exit_to_user_mode_loop+0x204/0x770 [ 1123.711851][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1123.711873][ T4533] do_syscall_64+0x328/0x520 [ 1123.711889][ T4533] ? trace_irq_disable+0x3b/0x140 [ 1123.711905][ T4533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.711924][ T4533] ? clear_bhb_loop+0x70/0xc0 [ 1123.711944][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.711962][ T4533] RIP: 0033:0x7fd16279f397 [ 1123.711980][ T4533] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1123.711995][ T4533] RSP: 002b:00007fff36efec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1123.712016][ T4533] RAX: 0000000000000000 RBX: 00007fd1628344bb RCX: 00007fd16279f397 [ 1123.712030][ T4533] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36efece0 [ 1123.712042][ T4533] RBP: 00007fff36efece0 R08: 00007fff36effce0 R09: 00000000ffffffff [ 1123.712054][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36effd70 [ 1123.712065][ T4533] R13: 00007fd1628344bb R14: 0000000000112487 R15: 00007fff36effdb0 [ 1123.712096][ T4533] [ 1123.712367][ T4533] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1124.136723][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.139556][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.140726][T11112] bridge0: entered allmulticast mode [ 1124.538417][T29027] ocfs2: Unmounting device (7,7) on (node local) [ 1124.717747][T11121] loop4: detected capacity change from 0 to 64 [ 1125.365157][T11146] program syz.6.15757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.390492][T11149] loop7: detected capacity change from 0 to 128 [ 1125.660316][T11159] loop7: detected capacity change from 0 to 512 [ 1125.689944][T11159] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1125.689967][T11159] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1125.718943][T11159] EXT4-fs (loop7): 1 truncate cleaned up [ 1125.721053][T11162] MTRR 1 not used [ 1125.723061][T11159] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.788381][T26504] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1125.833227][T29027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.935722][T26504] usb 9-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1125.936741][T26504] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1125.936765][T26504] usb 9-1: config 0 has no interface number 0 [ 1125.938809][T26504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.938832][T26504] usb 9-1: Product: syz [ 1125.938846][T26504] usb 9-1: Manufacturer: syz [ 1125.938859][T26504] usb 9-1: SerialNumber: syz [ 1125.943519][T26504] usb 9-1: config 0 descriptor?? [ 1126.183116][T26504] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1126.199387][T26504] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1126.199740][T26504] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1126.199787][T26504] usb 9-1: media controller created [ 1126.200855][T11179] netlink: 25 bytes leftover after parsing attributes in process `syz.7.15771'. [ 1126.256983][T26504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.257153][T11179] eql: entered promiscuous mode [ 1126.260832][T11181] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.15771'. [ 1126.260924][T11181] 0ªX¹¦Dö»: renamed from eql [ 1126.327843][T11181] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 1126.327879][T11181] 0ªX¹¦Dö»: left promiscuous mode [ 1126.327895][T11181] 0ªX¹¦Dö»: entered allmulticast mode [ 1126.369440][T11183] profile_transition: unconfined exec no attachment [ 1126.436061][T11184] profile_transition: unconfined exec no attachment [ 1126.583419][T11191] aa_policy_admin_capable: cap_mac_admin? 1 [ 1126.583443][T11191] aa_policy_admin_capable: policy locked? 0 [ 1126.612828][T11192] profile_transition: unconfined exec no attachment [ 1126.722802][T11167] loop4: detected capacity change from 0 to 32768 [ 1126.763448][T11167] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1126.839929][T11167] XFS (loop4): Ending clean mount [ 1126.950060][T11207] profile_transition: unconfined exec no attachment [ 1127.093099][ T4744] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1127.149629][T11212] profile_transition: unconfined exec no attachment [ 1127.392194][T26504] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1127.421796][T11220] profile_transition: unconfined exec no attachment [ 1127.478954][T26504] usb 9-1: USB disconnect, device number 31 [ 1127.812330][T11232] profile_transition: unconfined exec no attachment [ 1127.895946][T11228] loop7: detected capacity change from 0 to 4096 [ 1127.993026][T11236] profile_transition: unconfined exec no attachment [ 1128.050834][T11237] profile_transition: unconfined exec no attachment [ 1128.217797][T26504] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1128.334995][T11239] can0: slcan on ttyS3. [ 1128.374583][T26504] usb 10-1: Using ep0 maxpacket: 8 [ 1128.379440][T26504] usb 10-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1128.381843][T26504] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1128.381879][T26504] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1128.381916][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1128.381942][T26504] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1128.381966][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1128.381990][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1128.382015][T26504] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1128.382041][T26504] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1128.383064][T26504] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1128.383095][T26504] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1128.383131][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1128.383157][T26504] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1128.383181][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1128.383204][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1128.383226][T26504] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1128.383259][T26504] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1128.473895][T11245] aa_policy_admin_capable: cap_mac_admin? 1 [ 1128.473916][T11245] aa_policy_admin_capable: policy locked? 0 [ 1128.474169][T11245] aa_free_profile: aa_free_profile(0000000000000000) [ 1128.474412][ T33] audit: type=1400 audit(2000000022.870:972): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11243 comm="syz.8.15790" name="unknown" offset=16 [ 1128.491105][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15791'. [ 1128.630454][T26504] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1128.630496][T26504] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1128.630532][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1128.630558][T26504] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1128.630579][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1128.630603][T26504] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1128.630628][T26504] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1128.630654][T26504] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1128.731379][T26504] usb 10-1: string descriptor 0 read error: -22 [ 1128.731509][T26504] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.786073][T26504] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1128.879646][T11251] profile_transition: unconfined exec no attachment [ 1128.945405][T11241] can0 (unregistered): slcan off ttyS3. [ 1129.027126][T29630] usb 10-1: USB disconnect, device number 16 [ 1129.190762][T11264] ip_tables: iptables: counters copy to user failed while replacing table [ 1129.256856][T11235] adutux: No device or device unplugged -19 [ 1129.433862][T11279] macvlan0: entered promiscuous mode [ 1130.050764][T11306] loop9: detected capacity change from 0 to 4096 [ 1130.413596][T11316] loop6: detected capacity change from 0 to 4096 [ 1130.438620][T11316] ntfs3(loop6): ino=3, mi_enum_attr [ 1130.638982][T11324] loop4: detected capacity change from 0 to 1024 [ 1130.686307][T11302] loop8: detected capacity change from 0 to 40427 [ 1130.692773][T11302] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1130.692801][T11302] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1130.761574][T11302] F2FS-fs (loop8): invalid crc_offset: 33558524 [ 1131.157322][T11302] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1131.332611][T11302] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1131.332642][T11302] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1131.473765][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473787][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473796][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473804][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473812][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473820][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473829][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473837][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473846][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.473854][T11302] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 1131.573474][T11354] profile_transition: 13 callbacks suppressed [ 1131.573496][T11354] profile_transition: unconfined exec no attachment [ 1131.654070][T11359] profile_transition: unconfined exec no attachment [ 1132.025330][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1132.334972][T11373] loop9: detected capacity change from 0 to 4096 [ 1132.379094][T11374] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1132.891665][T11392] loop8: detected capacity change from 0 to 128 [ 1133.224101][T11399] loop8: detected capacity change from 0 to 1024 [ 1133.228280][T11399] EXT4-fs: Ignoring removed orlov option [ 1133.263533][T11399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.346536][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.601951][T11419] zero sized request [ 1133.804471][T29630] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1133.954783][T29630] usb 5-1: Using ep0 maxpacket: 32 [ 1133.960647][T29630] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1133.960700][T29630] usb 5-1: New USB device found: idVendor=2a39, idProduct=3f8c, bcdDevice=0.40 [ 1133.989483][T29630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.989500][T29630] usb 5-1: Product: syz [ 1133.989509][T29630] usb 5-1: Manufacturer: syz [ 1133.989517][T29630] usb 5-1: SerialNumber: syz [ 1134.012912][T11428] loop8: detected capacity change from 0 to 2048 [ 1134.021802][T11428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1134.267172][T29630] usb 5-1: 1:1 : bogus bTerminalLink 5 [ 1134.381250][T29630] usb 5-1: USB disconnect, device number 45 [ 1134.417105][ T4980] udevd[4980]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.029241][T11458] loop9: detected capacity change from 0 to 1024 [ 1135.129428][T11458] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 1135.129479][T11458] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1135.129498][T11458] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.15869: Failed to acquire dquot type 0 [ 1135.129519][T11458] loop9: lost filesystem error report for type 5 error -117 [ 1135.139046][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1135.139073][ C1] EXT4-fs (loop9): initial error at time 2000000029: ext4_acquire_dquot:7069 [ 1135.139100][ C1] EXT4-fs (loop9): last error at time 2000000029: ext4_acquire_dquot:7069 [ 1135.200273][T11458] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1135.200538][T11458] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.15869: corrupted inode contents [ 1135.200562][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.202443][T11458] EXT4-fs error (device loop9): ext4_dirty_inode:6736: inode #13: comm syz.9.15869: mark_inode_dirty error [ 1135.202473][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.202846][T11458] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.15869: corrupted inode contents [ 1135.202871][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.203270][T11458] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #13: comm syz.9.15869: mark_inode_dirty error [ 1135.203294][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.203749][T11458] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.15869: corrupted inode contents [ 1135.203775][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.204133][T11458] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 1135.204153][T11458] loop9: lost filesystem error report for type 5 error -117 [ 1135.206488][T11458] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #13: comm syz.9.15869: corrupted inode contents [ 1135.206516][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.207057][T11458] EXT4-fs error (device loop9): ext4_truncate:4721: inode #13: comm syz.9.15869: mark_inode_dirty error [ 1135.207080][T11458] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1135.208993][T11458] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 1135.209014][T11458] loop9: lost filesystem error report for type 5 error -117 [ 1135.210188][T11458] EXT4-fs (loop9): 1 truncate cleaned up [ 1135.216428][T11458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.239588][T11458] EXT4-fs (loop9): shut down requested (2) [ 1135.302180][ T4533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.526137][T11463] loop8: detected capacity change from 0 to 32768 [ 1135.531270][T11463] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15871 (11463) [ 1135.551029][T11463] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1135.551065][T11463] BTRFS info (device loop8): using blake2b checksum algorithm [ 1135.648717][T11463] BTRFS info (device loop8): enabling ssd optimizations [ 1135.648745][T11463] BTRFS info (device loop8): turning on async discard [ 1135.648761][T11463] BTRFS info (device loop8): enabling free space tree [ 1135.648779][T11463] BTRFS info (device loop8): use zstd compression, level 3 [ 1135.710058][T11484] profile_transition: unconfined exec no attachment [ 1135.765621][T29630] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1135.805441][T11486] loop4: detected capacity change from 0 to 2048 [ 1135.847337][T11488] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1135.936541][T29630] usb 10-1: Using ep0 maxpacket: 32 [ 1135.940441][T29630] usb 10-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1135.946571][T29630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.946598][T29630] usb 10-1: Product: syz [ 1135.946612][T29630] usb 10-1: Manufacturer: syz [ 1135.946626][T29630] usb 10-1: SerialNumber: syz [ 1135.953157][T29630] usb 10-1: config 0 descriptor?? [ 1136.016824][T11488] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1136.016853][T11488] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1136.028213][T11488] Remounting filesystem read-only [ 1136.056062][ T4744] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1136.179428][T32319] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1136.338160][T11494] loop4: detected capacity change from 0 to 256 [ 1136.599008][T29630] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1136.599063][T29630] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1136.599132][T29630] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1136.961196][T29630] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 1136.965187][T29630] usb 10-1: USB disconnect, device number 17 [ 1137.368724][T11518] netlink: 'syz.6.15891': attribute type 3 has an invalid length. [ 1137.691989][T11539] loop6: detected capacity change from 0 to 256 [ 1137.707871][T11539] exfat: Deprecated parameter 'utf8' [ 1137.729671][T11539] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1137.877387][T11542] profile_transition: unconfined exec no attachment [ 1137.972995][T11543] profile_transition: unconfined exec no attachment [ 1138.019413][T11545] ip_tables: iptables: counters copy to user failed while replacing table [ 1138.021506][T11545] ip_tables: iptables: counters copy to user failed while replacing table [ 1138.282694][T11559] profile_transition: unconfined exec no attachment [ 1138.483227][T11571] profile_transition: unconfined exec no attachment [ 1138.583284][T11578] profile_transition: unconfined exec no attachment [ 1138.706560][T11582] profile_transition: unconfined exec no attachment [ 1138.780045][T11584] profile_transition: unconfined exec no attachment [ 1138.846033][T11588] profile_transition: unconfined exec no attachment [ 1138.933508][T11589] profile_transition: unconfined exec no attachment [ 1139.117096][T11597] profile_transition: unconfined exec no attachment [ 1139.257457][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15921'. [ 1139.954922][T11637] netlink: 2 bytes leftover after parsing attributes in process `syz.6.15935'. [ 1139.987532][ T778] block nbd0: Receive control failed (result -32) [ 1140.065860][T26504] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1140.214418][T26504] usb 5-1: Using ep0 maxpacket: 8 [ 1140.215281][T26504] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1140.216431][T26504] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1140.216485][T26504] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1140.216510][T26504] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1140.216533][T26504] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1140.216557][T26504] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1140.216579][T26504] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.216618][T26504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.262231][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15942'. [ 1140.449307][T26504] usb 5-1: GET_CAPABILITIES returned 0 [ 1140.449354][T26504] usbtmc 5-1:16.0: can't read capabilities [ 1140.716699][T11661] loop8: detected capacity change from 0 to 4096 [ 1140.734955][T11661] ntfs3(loop8): Primary boot: invalid bytes per MFT record 2 (-1). [ 1140.735136][T11661] ntfs3(loop8): try to read out of volume at offset 0x1ffe00 [ 1140.805979][ T5791] usb 5-1: USB disconnect, device number 46 [ 1140.916749][T11642] loop9: detected capacity change from 0 to 32768 [ 1140.923622][T11642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15938 (11642) [ 1140.958904][T11642] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1140.958937][T11642] BTRFS info (device loop9): using sha256 checksum algorithm [ 1141.189563][T11642] BTRFS info (device loop9): enabling ssd optimizations [ 1141.189590][T11642] BTRFS info (device loop9): turning on async discard [ 1141.189605][T11642] BTRFS info (device loop9): enabling free space tree [ 1141.335476][ T4533] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1141.871748][T11694] aa_policy_admin_capable: cap_mac_admin? 1 [ 1141.871767][T11694] aa_policy_admin_capable: policy locked? 0 [ 1141.871986][T11694] aa_free_profile: aa_free_profile(0000000000000000) [ 1141.873581][ T33] audit: type=1400 audit(2000000036.260:973): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11692 comm="syz.8.15952" name="unknown" offset=16 [ 1141.957976][T11698] loop4: detected capacity change from 0 to 128 [ 1141.963026][T11698] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1142.005530][T11698] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.269891][T29630] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1142.435209][T29630] usb 10-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 1142.438368][T29630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.438394][T29630] usb 10-1: Product: syz [ 1142.438410][T29630] usb 10-1: Manufacturer: syz [ 1142.438424][T29630] usb 10-1: SerialNumber: syz [ 1142.445390][T29630] ums-karma 10-1:1.0: USB Mass Storage device detected [ 1142.451724][T29630] ums-karma 10-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1142.451724][T29630] Please send a copy of this message to and [ 1142.574194][ T4349] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.725959][T11726] netlink: 64 bytes leftover after parsing attributes in process `syz.8.15967'. [ 1142.760878][T11728] aa_policy_admin_capable: cap_mac_admin? 1 [ 1142.760898][T11728] aa_policy_admin_capable: policy locked? 0 [ 1142.761015][T11728] unpack_pdb: unpacking tags [ 1142.761027][T11728] unpack_pdb: done unpacking tags [ 1142.761150][ T33] audit: type=1400 audit(2000000037.150:974): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=11727 comm="syz.4.15963" name="foo" offset=35 [ 1142.761577][T11728] aa_free_profile: aa_free_profile(ffff8880122c8c00) [ 1142.812102][T29630] ums-karma 10-1:1.0: probe with driver ums-karma failed with error -5 [ 1142.818784][T29630] usb 10-1: USB disconnect, device number 18 [ 1142.889383][T11731] loop8: detected capacity change from 0 to 512 [ 1142.903848][T11731] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1142.959344][T11731] EXT4-fs (loop8): 1 truncate cleaned up [ 1142.962818][T11731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.088651][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.197270][T11732] loop4: detected capacity change from 0 to 32768 [ 1143.200244][T11732] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15968 (11732) [ 1143.225676][T11732] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1143.225718][T11732] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 1143.367000][ T33] audit: type=1326 audit(2000000037.760:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11716 comm="syz.7.15961" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42019e159 code=0x7fc00000 [ 1143.405117][T11732] BTRFS info (device loop4): enabling ssd optimizations [ 1143.405145][T11732] BTRFS info (device loop4): turning on async discard [ 1143.405161][T11732] BTRFS info (device loop4): enabling free space tree [ 1143.427634][T11755] profile_transition: 6 callbacks suppressed [ 1143.427654][T11755] profile_transition: unconfined exec no attachment [ 1143.733810][ T4744] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1143.824873][T11768] profile_transition: unconfined exec no attachment [ 1144.572962][T11779] program syz.8.15982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.098208][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15990'. [ 1145.340972][T11794] loop8: detected capacity change from 0 to 32768 [ 1145.349691][T11794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15989 (11794) [ 1145.401281][T11794] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1145.401317][T11794] BTRFS info (device loop8): using crc32c checksum algorithm [ 1145.459267][T11818] loop9: detected capacity change from 0 to 128 [ 1145.556918][T11820] profile_transition: unconfined exec no attachment [ 1145.597534][T11794] BTRFS info (device loop8): enabling ssd optimizations [ 1145.597565][T11794] BTRFS info (device loop8): turning on flush-on-commit [ 1145.597581][T11794] BTRFS info (device loop8): enabling free space tree [ 1145.597596][T11794] BTRFS info (device loop8): enabling auto defrag [ 1145.597613][T11794] BTRFS info (device loop8): use lzo compression, level 1 [ 1145.597631][T11794] BTRFS info (device loop8): max_inline set to 4096 [ 1145.920258][T32319] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1146.027846][T11827] profile_transition: unconfined exec no attachment [ 1146.575833][ T5762] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1146.725313][ T5762] usb 5-1: Using ep0 maxpacket: 32 [ 1146.726508][ T5762] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1146.727198][ T5762] usb 5-1: config 0 has no interfaces? [ 1146.732321][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.732351][ T5762] usb 5-1: Product: syz [ 1146.732365][ T5762] usb 5-1: Manufacturer: syz [ 1146.732380][ T5762] usb 5-1: SerialNumber: syz [ 1146.813333][ T5762] usb 5-1: config 0 descriptor?? [ 1147.029132][ T5762] usb 5-1: USB disconnect, device number 47 [ 1147.053664][T11852] kAFS: bad VL server IP address [ 1147.344741][T11857] batman_adv: batadv0: Adding interface: vlan4 [ 1147.344761][T11857] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.344786][T11857] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 1147.437714][T11860] loop8: detected capacity change from 0 to 256 [ 1147.484117][T11860] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1147.853572][T11875] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16019'. [ 1148.102642][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16025'. [ 1148.102696][T11888] bond0: Unable to set up delay as MII monitoring is disabled [ 1148.234460][ T5762] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1148.285869][T11872] loop8: detected capacity change from 0 to 32768 [ 1148.311165][T11872] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1148.380315][T11872] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1148.397878][ T5762] usb 5-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 1148.409238][ T5762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.409291][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.440060][T11872] XFS (loop8): Starting recovery (logdev: internal) [ 1148.443132][ T5762] as10x_usb: device has been detected [ 1148.444213][ T5762] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1148.486036][ T5762] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1148.488888][T11872] XFS (loop8): Ending recovery (logdev: internal) [ 1148.760726][T32319] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1148.878373][ T5762] as10x_usb: error during firmware upload part1 [ 1148.879012][ T5762] Registered device Abilis Systems DVB-Titan [ 1148.882149][ T5762] usb 5-1: USB disconnect, device number 48 [ 1148.950743][ T5762] Unregistered device Abilis Systems DVB-Titan [ 1148.953160][ T5762] as10x_usb: device has been disconnected [ 1149.082093][T11914] kAFS: bad VL server IP address [ 1149.329437][T11918] program syz.9.16036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1149.427357][T11922] loop7: detected capacity change from 0 to 512 [ 1149.593943][T11932] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1149.596891][T11922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.598620][T11922] ext4 filesystem being mounted at /1070/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1149.836111][T11922] EXT4-fs error (device loop7): ext4_empty_dir:3087: inode #12: comm syz.7.16038: Directory hole found for htree leaf block 0 [ 1150.010602][T29027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.479589][T11979] loop8: detected capacity change from 0 to 512 [ 1150.512359][T11979] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1150.512923][T11979] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 1150.537594][T11979] EXT4-fs (loop8): external journal has bad superblock [ 1150.814680][ T5791] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1150.964413][ T5791] usb 9-1: Using ep0 maxpacket: 8 [ 1150.965272][ T5791] usb 9-1: New USB device found: idVendor=056a, idProduct=00fa, bcdDevice=0.00 [ 1150.965309][ T5791] usb 9-1: too many configurations: 234, using maximum allowed: 8 [ 1150.970134][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.970164][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.974033][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.974063][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.980268][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.980298][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.985620][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.985651][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.989461][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.989492][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.992837][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.992866][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1150.997368][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.997398][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1151.002583][ T5791] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.002615][ T5791] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1151.002647][ T5791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.012936][ T5791] usb 9-1: config 0 descriptor?? [ 1151.252944][T11987] loop6: detected capacity change from 0 to 32768 [ 1151.297753][T11987] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1151.345828][T11987] XFS (loop6): Ending clean mount [ 1151.458699][ T5791] hid_parser_main: 222 callbacks suppressed [ 1151.458727][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458757][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458782][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458815][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458840][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458865][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x0 [ 1151.458891][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x6 [ 1151.458917][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x7 [ 1151.458943][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x7 [ 1151.458968][ T5791] wacom 0003:056A:00FA.0049: unknown main item tag 0x7 [ 1151.558317][T22709] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1151.690465][T26504] usb 9-1: USB disconnect, device number 32 [ 1151.949898][T12021] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1152.432050][T12027] loop8: detected capacity change from 0 to 32768 [ 1152.443589][T12027] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.16081 (12027) [ 1152.462938][T12027] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1152.462972][T12027] BTRFS info (device loop8): using blake2b checksum algorithm [ 1152.545335][T12039] profile_transition: unconfined exec no attachment [ 1152.559042][T12027] BTRFS info (device loop8): enabling ssd optimizations [ 1152.559117][T12027] BTRFS info (device loop8): turning on async discard [ 1152.559134][T12027] BTRFS info (device loop8): enabling free space tree [ 1152.559152][T12027] BTRFS info (device loop8): use zstd compression, level 3 [ 1152.617558][T32319] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1153.116599][T12050] input: syz0 as /devices/virtual/input/input88 [ 1153.524691][T26504] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1153.674410][T26504] usb 5-1: Using ep0 maxpacket: 32 [ 1153.675307][T26504] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1153.676782][T26504] usb 5-1: config 0 has no interfaces? [ 1153.676816][T26504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.679622][T26504] usb 5-1: config 0 descriptor?? [ 1153.945099][T26504] usb 5-1: USB disconnect, device number 49 [ 1154.180935][T12076] loop8: detected capacity change from 0 to 4096 [ 1154.210216][T12077] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1154.555195][T12090] loop4: detected capacity change from 0 to 1024 [ 1154.601826][T12090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.673759][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.822418][T12102] program syz.4.16106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1154.913735][T12109] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1154.925147][T12109] netlink: 'syz.6.16108': attribute type 12 has an invalid length. [ 1155.082727][T12128] loop9: detected capacity change from 0 to 1024 [ 1155.135358][T12128] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1155.305561][T12130] sd 0:0:1:0: PR command failed: 1026 [ 1155.305623][T12130] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1155.305667][T12130] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1155.533753][T12139] profile_transition: unconfined exec no attachment [ 1156.242894][T12132] loop6: detected capacity change from 0 to 40427 [ 1156.251473][T12132] F2FS-fs: heap/no_heap options were deprecated [ 1156.414033][T12132] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1156.453706][T12132] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1156.453797][T12132] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1156.453820][T12132] F2FS-fs (loop6): Start checkpoint disabled! [ 1156.513758][T12132] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1156.524757][T12132] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1156.677066][ T52] kworker/u8:3: attempt to access beyond end of device [ 1156.677066][ T52] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1156.677144][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.677171][ T52] Tainted: [L]=SOFTLOCKUP [ 1156.677179][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1156.677192][ T52] Workqueue: writeback wb_workfn (flush-7:6) [ 1156.677224][ T52] Call Trace: [ 1156.677233][ T52] [ 1156.677243][ T52] dump_stack_lvl+0xe8/0x150 [ 1156.677267][ T52] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1156.677297][ T52] f2fs_write_end_bio+0xda7/0x11c0 [ 1156.677337][ T52] __submit_merged_bio+0x258/0x6a0 [ 1156.677356][ T52] ? rcu_is_watching+0x16/0xb0 [ 1156.677384][ T52] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1156.677418][ T52] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1156.677467][ T52] f2fs_write_data_pages+0x2a13/0x36e0 [ 1156.677527][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.677603][ T52] ? __lock_acquire+0x747/0x2de0 [ 1156.677637][ T52] ? irqentry_exit+0x218/0x920 [ 1156.677655][ T52] ? trace_irq_disable+0x3b/0x140 [ 1156.677699][ T52] ? unwind_next_frame+0x8f/0x2550 [ 1156.677720][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1156.677742][ T52] do_writepages+0x338/0x560 [ 1156.677764][ T52] ? __lock_acquire+0x747/0x2de0 [ 1156.677787][ T52] ? reacquire_held_locks+0x117/0x1a0 [ 1156.677806][ T52] ? writeback_sb_inodes+0x450/0x1af0 [ 1156.677832][ T52] __writeback_single_inode+0x136/0x1220 [ 1156.677855][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 1156.677880][ T52] writeback_sb_inodes+0x9de/0x1af0 [ 1156.677897][ T52] ? __lock_acquire+0x747/0x2de0 [ 1156.677945][ T52] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1156.678012][ T52] ? rcu_is_watching+0x16/0xb0 [ 1156.678031][ T52] ? queue_io+0x2d3/0x470 [ 1156.678055][ T52] wb_writeback+0x41c/0xad0 [ 1156.678076][ T52] ? queue_io+0x2c1/0x470 [ 1156.678101][ T52] ? __pfx_wb_writeback+0x10/0x10 [ 1156.678118][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.678156][ T52] wb_workfn+0x431/0x10f0 [ 1156.678194][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 1156.678229][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 1156.678259][ T52] ? lock_acquire+0x115/0x350 [ 1156.678288][ T52] ? rcu_is_watching+0x16/0xb0 [ 1156.678309][ T52] ? process_scheduled_works+0x97a/0x1630 [ 1156.678331][ T52] process_scheduled_works+0xc3d/0x1630 [ 1156.678385][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 1156.678420][ T52] ? assign_work+0x3cf/0x5d0 [ 1156.678447][ T52] worker_thread+0xa47/0xfb0 [ 1156.678496][ T52] kthread+0x38b/0x480 [ 1156.678514][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1156.678529][ T52] ? __pfx_kthread+0x10/0x10 [ 1156.678548][ T52] ret_from_fork+0x514/0xb70 [ 1156.678568][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1156.678585][ T52] ? __switch_to+0xc78/0x1410 [ 1156.678608][ T52] ? __pfx_kthread+0x10/0x10 [ 1156.678627][ T52] ret_from_fork_asm+0x1a/0x30 [ 1156.678670][ T52] [ 1156.680076][ T52] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1156.684784][ T5791] loop6: lost filesystem error report for type 5 error -108 [ 1157.051201][T12177] loop8: detected capacity change from 0 to 512 [ 1158.040889][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16154'. [ 1158.109577][T12220] dvmrp8: entered allmulticast mode [ 1158.301677][T12233] program syz.7.16161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.412678][T12237] aa_policy_admin_capable: cap_mac_admin? 1 [ 1158.412698][T12237] aa_policy_admin_capable: policy locked? 0 [ 1158.580883][T12251] program syz.9.16167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1158.918971][T12267] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1159.010017][T12272] loop7: detected capacity change from 0 to 16 [ 1159.013864][T12272] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1159.104775][ T5722] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1159.116018][T12276] profile_transition: unconfined exec no attachment [ 1159.194128][T12259] loop9: detected capacity change from 0 to 32768 [ 1159.221351][T12279] profile_transition: unconfined exec no attachment [ 1159.255638][ T5722] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1159.256780][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.256823][ T5722] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1159.256844][ T5722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1159.256864][ T5722] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.256900][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.832889][T12298] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1159.832889][T12298] program syz.8.16188 not setting count and/or reply_len properly [ 1159.877841][ T5722] gud 5-1:1.0: Failed to add properties (error=-5) [ 1159.877873][ T5722] gud 5-1:1.0: probe with driver gud failed with error -5 [ 1160.087866][T26504] usb 5-1: USB disconnect, device number 50 [ 1160.243763][T12314] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.16196'. [ 1160.639272][T12329] loop9: detected capacity change from 0 to 2048 [ 1160.679886][T12329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.695826][T12329] EXT4-fs error (device loop9): ext4_ext_precache:631: inode #2: comm syz.9.16203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1160.721278][T12329] EXT4-fs (loop9): Remounting filesystem read-only [ 1160.793239][ T4533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.880331][T12338] loop4: detected capacity change from 0 to 4096 [ 1160.899122][T12335] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1160.985584][T12345] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1161.181893][T12353] loop6: detected capacity change from 0 to 8 [ 1161.323720][T12353] SQUASHFS error: Unable to read directory block [629:fe] [ 1161.372640][T12362] loop7: detected capacity change from 0 to 2048 [ 1161.395177][T12362] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1161.421464][T12362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1161.626741][T12369] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1161.626741][T12369] program syz.4.16218 not setting count and/or reply_len properly [ 1161.681384][T12373] loop7: detected capacity change from 0 to 164 [ 1161.979941][T12387] program syz.6.16228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1162.247148][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16231'. [ 1162.334761][T12381] loop9: detected capacity change from 0 to 40427 [ 1162.363935][T12381] F2FS-fs (loop9): build fault injection rate: 174 [ 1162.363961][T12381] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 1162.380043][T12381] F2FS-fs (loop9): invalid crc value [ 1162.475884][T12381] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1162.514595][T12381] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1162.905269][T26504] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1162.967332][T12420] bridge0: port 3(bond0) entered disabled state [ 1162.970957][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.971252][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.003655][T12420] bridge0: entered allmulticast mode [ 1163.087113][T26504] usb 9-1: Using ep0 maxpacket: 16 [ 1163.087844][T26504] usb 9-1: New USB device found: idVendor=05ac, idProduct=027b, bcdDevice=0.00 [ 1163.089051][T26504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.091593][T26504] usb 9-1: config 0 descriptor?? [ 1163.529062][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529109][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529149][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529177][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529204][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529230][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529256][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529283][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529309][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.529335][T26504] apple 0003:05AC:027B.004A: unknown main item tag 0x0 [ 1163.542244][T26504] apple 0003:05AC:027B.004A: hidraw0: USB HID v7f.fd Device [HID 05ac:027b] on usb-dummy_hcd.8-1/input0 [ 1163.550221][T12436] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1163.550221][T12436] program syz.7.16248 not setting count and/or reply_len properly [ 1163.590815][T12437] profile_transition: unconfined exec no attachment [ 1163.705559][ T52] wlan1: Trigger new scan to find an IBSS to join [ 1163.720686][T26504] usb 9-1: USB disconnect, device number 33 [ 1163.821699][T12431] loop9: detected capacity change from 0 to 40427 [ 1163.831185][T12431] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 1163.831209][T12431] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1163.850598][T12431] F2FS-fs (loop9): invalid crc value [ 1163.851192][T12431] F2FS-fs (loop9): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 1163.962366][T12431] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1163.987317][T12431] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1163.987347][T12431] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1164.042380][ T4533] syz-executor: attempt to access beyond end of device [ 1164.042380][ T4533] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1164.055635][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.055670][ T4533] Tainted: [L]=SOFTLOCKUP [ 1164.055678][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.055690][ T4533] Call Trace: [ 1164.055698][ T4533] [ 1164.055707][ T4533] dump_stack_lvl+0xe8/0x150 [ 1164.055735][ T4533] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1164.055761][ T4533] ? __submit_merged_bio+0x258/0x6a0 [ 1164.055780][ T4533] f2fs_cache_write_end_io+0x2a5/0x6e0 [ 1164.055806][ T4533] ? bio_endio+0x984/0xac0 [ 1164.055832][ T4533] __submit_merged_bio+0x258/0x6a0 [ 1164.055861][ T4533] f2fs_submit_cache_write+0xb14/0x1430 [ 1164.055913][ T4533] ? __pfx_f2fs_submit_cache_write+0x10/0x10 [ 1164.055945][ T4533] ? __f2fs_is_valid_blkaddr+0xcea/0x1520 [ 1164.055973][ T4533] do_write_block+0x41b/0xa90 [ 1164.056003][ T4533] f2fs_do_write_node_cache+0x125/0x2c0 [ 1164.056031][ T4533] __write_node_cache+0xfce/0x18b0 [ 1164.056069][ T4533] ? __pfx___write_node_cache+0x10/0x10 [ 1164.056127][ T4533] f2fs_writeback_node_caches+0xb44/0x1120 [ 1164.056171][ T4533] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 1164.056223][ T4533] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 1164.056248][ T4533] ? up_write+0x19d/0x4a0 [ 1164.056274][ T4533] f2fs_write_checkpoint+0xe51/0x24d0 [ 1164.056334][ T4533] kill_f2fs_super+0x2dc/0x700 [ 1164.056360][ T4533] ? rcu_do_enqueue+0x616/0x870 [ 1164.056379][ T4533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1164.056400][ T4533] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1164.056465][ T4533] ? __pfx_call_rcu+0x10/0x10 [ 1164.056491][ T4533] ? shrinker_free+0x2a7/0x3b0 [ 1164.056515][ T4533] deactivate_locked_super+0xbe/0x110 [ 1164.056538][ T4533] cleanup_mnt+0x3d3/0x460 [ 1164.056563][ T4533] task_work_run+0x1d9/0x260 [ 1164.056586][ T4533] ? __pfx_task_work_run+0x10/0x10 [ 1164.056616][ T4533] exit_to_user_mode_loop+0x204/0x770 [ 1164.056638][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1164.056662][ T4533] do_syscall_64+0x328/0x520 [ 1164.056679][ T4533] ? trace_irq_disable+0x3b/0x140 [ 1164.056696][ T4533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.056718][ T4533] ? clear_bhb_loop+0x70/0xc0 [ 1164.056740][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.056759][ T4533] RIP: 0033:0x7fd16279f397 [ 1164.056777][ T4533] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1164.056794][ T4533] RSP: 002b:00007fff36efec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1164.056814][ T4533] RAX: 0000000000000000 RBX: 00007fd1628344bb RCX: 00007fd16279f397 [ 1164.056829][ T4533] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36efece0 [ 1164.056842][ T4533] RBP: 00007fff36efece0 R08: 00007fff36effce0 R09: 00000000ffffffff [ 1164.056855][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36effd70 [ 1164.056868][ T4533] R13: 00007fd1628344bb R14: 000000000011c26d R15: 00007fff36effdb0 [ 1164.056901][ T4533] [ 1164.057037][ T4533] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1164.057410][ T4533] syz-executor: attempt to access beyond end of device [ 1164.057410][ T4533] loop9: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 1164.063393][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.063433][ T4533] Tainted: [L]=SOFTLOCKUP [ 1164.063441][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.063453][ T4533] Call Trace: [ 1164.063462][ T4533] [ 1164.063472][ T4533] dump_stack_lvl+0xe8/0x150 [ 1164.063499][ T4533] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1164.063525][ T4533] ? __submit_merged_bio+0x258/0x6a0 [ 1164.063545][ T4533] f2fs_cache_write_end_io+0x2a5/0x6e0 [ 1164.063570][ T4533] ? bio_endio+0x984/0xac0 [ 1164.063592][ T4533] __submit_merged_bio+0x258/0x6a0 [ 1164.063612][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1164.063637][ T4533] f2fs_submit_merged_write+0x2cc/0x610 [ 1164.063664][ T4533] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1164.063682][ T4533] ? __up_read+0x29c/0x930 [ 1164.063713][ T4533] ? trace_lock_elapsed_time_end+0xf1/0xbc0 [ 1164.063733][ T4533] ? restore_priority+0x1af/0x450 [ 1164.063758][ T4533] __write_node_cache+0x1356/0x18b0 [ 1164.063795][ T4533] ? __pfx___write_node_cache+0x10/0x10 [ 1164.063851][ T4533] f2fs_writeback_node_caches+0xb44/0x1120 [ 1164.063892][ T4533] ? __pfx_f2fs_writeback_node_caches+0x10/0x10 [ 1164.063943][ T4533] ? f2fs_write_checkpoint+0xe1e/0x24d0 [ 1164.063968][ T4533] ? up_write+0x19d/0x4a0 [ 1164.063990][ T4533] f2fs_write_checkpoint+0xe51/0x24d0 [ 1164.064047][ T4533] kill_f2fs_super+0x2dc/0x700 [ 1164.064071][ T4533] ? rcu_do_enqueue+0x616/0x870 [ 1164.064089][ T4533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1164.064108][ T4533] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1164.064145][ T4533] ? __pfx_call_rcu+0x10/0x10 [ 1164.064169][ T4533] ? shrinker_free+0x2a7/0x3b0 [ 1164.064191][ T4533] deactivate_locked_super+0xbe/0x110 [ 1164.064215][ T4533] cleanup_mnt+0x3d3/0x460 [ 1164.064238][ T4533] task_work_run+0x1d9/0x260 [ 1164.064261][ T4533] ? __pfx_task_work_run+0x10/0x10 [ 1164.064290][ T4533] exit_to_user_mode_loop+0x204/0x770 [ 1164.064309][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1164.064333][ T4533] do_syscall_64+0x328/0x520 [ 1164.064350][ T4533] ? trace_irq_disable+0x3b/0x140 [ 1164.064368][ T4533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.064388][ T4533] ? clear_bhb_loop+0x70/0xc0 [ 1164.064409][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.064434][ T4533] RIP: 0033:0x7fd16279f397 [ 1164.064453][ T4533] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1164.064468][ T4533] RSP: 002b:00007fff36efec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1164.064490][ T4533] RAX: 0000000000000000 RBX: 00007fd1628344bb RCX: 00007fd16279f397 [ 1164.064503][ T4533] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36efece0 [ 1164.064515][ T4533] RBP: 00007fff36efece0 R08: 00007fff36effce0 R09: 00000000ffffffff [ 1164.064529][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36effd70 [ 1164.064542][ T4533] R13: 00007fd1628344bb R14: 000000000011c26d R15: 00007fff36effdb0 [ 1164.064575][ T4533] [ 1164.096327][ T4533] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1164.523278][T12443] netlink: 'syz.4.16250': attribute type 4 has an invalid length. [ 1164.523302][T12443] netlink: 'syz.4.16250': attribute type 8 has an invalid length. [ 1164.523315][T12443] netlink: 212 bytes leftover after parsing attributes in process `syz.4.16250'. [ 1164.834407][T26504] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1164.984581][T26504] usb 9-1: Using ep0 maxpacket: 32 [ 1164.986632][T26504] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1164.987883][T26504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.990568][T26504] usb 9-1: config 0 descriptor?? [ 1165.198257][T26504] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1165.205993][T26504] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1165.208504][T26504] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1165.208574][T26504] usb 9-1: media controller created [ 1165.250248][T26504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1165.261090][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.261967][T12460] bridge0: entered allmulticast mode [ 1165.441436][T26504] az6027: usb out operation failed. (-71) [ 1165.441829][T26504] az6027: usb out operation failed. (-71) [ 1165.441843][T26504] stb0899_attach: Driver disabled by Kconfig [ 1165.441853][T26504] az6027: no front-end attached [ 1165.441853][T26504] [ 1165.442217][T26504] az6027: usb out operation failed. (-71) [ 1165.442230][T26504] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1165.447521][T26504] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input89 [ 1165.451750][T26504] dvb-usb: schedule remote query interval to 400 msecs. [ 1165.451772][T26504] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1165.466725][T26504] usb 9-1: USB disconnect, device number 34 [ 1165.495424][T12464] loop9: detected capacity change from 0 to 512 [ 1165.527055][T12464] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.16258: inode has both inline data and extents flags [ 1165.527088][T12464] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1165.529291][T12464] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.16258: couldn't read orphan inode 15 (err -117) [ 1165.529321][T12464] loop9: lost filesystem error report for type 5 error -117 [ 1165.581290][T12464] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.650232][T26504] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1165.683037][T12462] loop4: detected capacity change from 0 to 32768 [ 1165.698511][T12462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16257 (12462) [ 1165.722148][T12462] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1165.722183][T12462] BTRFS info (device loop4): using crc32c checksum algorithm [ 1165.753112][ T4533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.852888][T12479] profile_transition: unconfined exec no attachment [ 1165.875990][T12462] BTRFS info (device loop4): enabling ssd optimizations [ 1165.876019][T12462] BTRFS info (device loop4): turning on flush-on-commit [ 1165.876036][T12462] BTRFS info (device loop4): enabling free space tree [ 1165.876052][T12462] BTRFS info (device loop4): enabling auto defrag [ 1165.876068][T12462] BTRFS info (device loop4): use lzo compression, level 1 [ 1165.876087][T12462] BTRFS info (device loop4): max_inline set to 4096 [ 1165.960782][ T4744] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1166.016017][T12485] program syz.9.16260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1166.146837][T12489] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1166.146837][T12489] program syz.9.16262 not setting count and/or reply_len properly [ 1166.411581][T12496] profile_transition: unconfined exec no attachment [ 1166.815135][T12513] nbd1: detected capacity change from 0 to 618483679232 [ 1166.831089][ T778] block nbd1: Receive control failed (result -32) [ 1166.881704][ T2021] block nbd1: Dead connection, failed to find a fallback [ 1166.881731][ T2021] block nbd1: shutting down sockets [ 1166.881858][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.881891][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.882466][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.882493][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883025][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883052][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883157][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883180][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883281][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883304][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883437][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883460][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883577][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883600][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883700][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883723][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883752][ T4980] ldm_validate_partition_table(): Disk read failed. [ 1166.883836][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883859][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.883957][ T2021] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1166.883980][ T2021] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1166.884206][ T4980] Dev nbd1: unable to read RDB block 0 [ 1166.884790][ T4980] nbd1: unable to read partition table [ 1166.927789][ T4980] ldm_validate_partition_table(): Disk read failed. [ 1166.928166][ T4980] Dev nbd1: unable to read RDB block 0 [ 1166.928786][ T4980] nbd1: unable to read partition table [ 1167.505465][T12531] loop6: detected capacity change from 0 to 2048 [ 1167.543649][T12518] loop4: detected capacity change from 0 to 32768 [ 1167.551217][T12531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.561338][T12518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16275 (12518) [ 1167.593554][T12518] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1167.593590][T12518] BTRFS info (device loop4): using crc32c checksum algorithm [ 1167.775845][T12518] BTRFS info (device loop4): enabling ssd optimizations [ 1167.775863][T12518] BTRFS info (device loop4): turning on flush-on-commit [ 1167.775873][T12518] BTRFS info (device loop4): enabling free space tree [ 1167.775882][T12518] BTRFS info (device loop4): enabling auto defrag [ 1167.775892][T12518] BTRFS info (device loop4): use lzo compression, level 1 [ 1167.775903][T12518] BTRFS info (device loop4): max_inline set to 4096 [ 1167.818717][T12549] profile_transition: unconfined exec no attachment [ 1167.890598][T12550] loop6: detected capacity change from 0 to 2048 [ 1167.977294][T12551] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1168.167415][T12551] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1168.167444][T12551] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1168.196200][T12551] Remounting filesystem read-only [ 1168.207652][T22709] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1168.219802][ T4744] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1168.583411][T12555] can0: slcan on ttyS3. [ 1168.684839][T12562] profile_transition: unconfined exec no attachment [ 1168.693231][T26835] wlan1: Trigger new scan to find an IBSS to join [ 1168.783478][T12566] profile_transition: unconfined exec no attachment [ 1168.825171][ T5802] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1168.960750][T12570] profile_transition: unconfined exec no attachment [ 1168.990917][ T5802] usb 9-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1169.013450][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.031651][T12556] can0 (unregistered): slcan off ttyS3. [ 1169.039905][ T5802] usb 9-1: config 0 descriptor?? [ 1169.043432][ T5802] cp210x 9-1:0.0: cp210x converter detected [ 1169.112530][T12573] profile_transition: unconfined exec no attachment [ 1169.575132][ T5802] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1169.776453][ T5802] usb 9-1: USB disconnect, device number 35 [ 1169.900179][ T5802] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1169.902311][ T5802] cp210x 9-1:0.0: device disconnected [ 1170.023626][T12583] loop9: detected capacity change from 0 to 1024 [ 1170.038622][T12583] EXT4-fs: Ignoring removed bh option [ 1170.045393][T12575] loop4: detected capacity change from 0 to 131072 [ 1170.057745][ T45] wlan1: Creating new IBSS network, BSSID a6:db:a8:ea:e6:b8 [ 1170.074718][T12575] F2FS-fs (loop4): invalid crc value [ 1170.134035][T12575] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1170.139084][T12575] loop4: lost filesystem error report for type 5 error -117 [ 1170.146094][T12575] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1170.169271][T12575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1170.177476][T12595] profile_transition: unconfined exec no attachment [ 1170.242296][T12583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.338400][T12583] EXT4-fs error (device loop9): __ext4_remount:6872: comm syz.9.16297: Abort forced by user [ 1170.556390][T12583] EXT4-fs (loop9): Remounting filesystem read-only [ 1170.556416][T12583] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 1170.566456][T12602] profile_transition: unconfined exec no attachment [ 1170.650074][T12600] loop8: detected capacity change from 0 to 4096 [ 1170.770461][ T4533] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.850535][T12600] ntfs3(loop8): Failed to load $Extend (-22). [ 1170.850572][T12600] ntfs3(loop8): Failed to initialize $Extend. [ 1170.933832][T12600] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1170.933883][T12600] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1170.982772][T12613] profile_transition: unconfined exec no attachment [ 1171.071288][T12616] profile_transition: unconfined exec no attachment [ 1171.137426][T12619] profile_transition: unconfined exec no attachment [ 1171.185394][T12600] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1171.185448][T12600] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1171.185471][T12600] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1171.185492][T12600] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 1171.185512][T12600] ntfs3(loop8): ino=5, "/" attr_set_size_ex [ 1171.266105][T12620] profile_transition: unconfined exec no attachment [ 1171.626573][T12631] profile_transition: unconfined exec no attachment [ 1171.743110][T12635] profile_transition: unconfined exec no attachment [ 1171.825092][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16310'. [ 1171.825124][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16310'. [ 1171.883615][T12643] profile_transition: unconfined exec no attachment [ 1171.975689][T12645] profile_transition: unconfined exec no attachment [ 1172.035294][T12646] profile_transition: unconfined exec no attachment [ 1172.093198][T12647] profile_transition: unconfined exec no attachment [ 1172.433567][T12668] aa_policy_admin_capable: cap_mac_admin? 1 [ 1172.433588][T12668] aa_policy_admin_capable: policy locked? 0 [ 1172.433704][T12668] unpack_pdb: unpacking tags [ 1172.433714][T12668] unpack_pdb: done unpacking tags [ 1172.433831][T12668] aa_free_profile: aa_free_profile(ffff888079a72800) [ 1172.433837][ T33] audit: type=1400 audit(2000000066.820:976): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=12664 comm="syz.8.16320" name="p" offset=33 [ 1172.435405][T12667] ip_tables: iptables: counters copy to user failed while replacing table [ 1172.582077][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1172.582284][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1172.582301][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1172.582317][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1172.582691][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1172.582709][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1172.582725][T12672] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1172.673320][T12672] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1172.673338][T12672] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1172.725232][ T778] Bluetooth: hci0: connection err: -111 [ 1172.741443][T12677] loop6: detected capacity change from 0 to 512 [ 1172.890868][T12682] program syz.9.16327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.024990][T12686] loop6: detected capacity change from 0 to 64 [ 1173.367117][T12697] loop9: detected capacity change from 0 to 128 [ 1173.452281][T12702] profile_transition: name lookup ix on error [ 1173.771946][T12719] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 1173.866325][T12717] loop6: detected capacity change from 0 to 4096 [ 1173.925475][T12726] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1173.961029][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16348'. [ 1173.962021][T12725] loop8: detected capacity change from 0 to 512 [ 1173.973150][T12725] EXT4-fs: Ignoring removed mblk_io_submit option [ 1173.995383][T12728] ipvlan2: entered allmulticast mode [ 1173.995408][T12728] syz_tun: entered allmulticast mode [ 1174.043417][T12725] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.16347: corrupted in-inode xattr: e_value size too large [ 1174.043473][T12725] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1174.044334][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1174.044354][ C1] EXT4-fs (loop8): initial error at time 245025794: ext4_iget_extra_inode:5210: inode 15 [ 1174.044381][ C1] EXT4-fs (loop8): last error at time 245025794: ext4_iget_extra_inode:5210: inode 15 [ 1174.049232][T12725] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.16347: couldn't read orphan inode 15 (err -117) [ 1174.049263][T12725] loop8: lost filesystem error report for type 5 error -117 [ 1174.087441][T12725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.200427][T12733] netlink: 'syz.9.16349': attribute type 10 has an invalid length. [ 1174.218829][T12733] syz_tun: entered promiscuous mode [ 1174.312211][T12738] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.408114][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.654539][T12723] loop7: detected capacity change from 0 to 32768 [ 1174.662989][T12723] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.16345 (12723) [ 1174.709260][T12723] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1174.709295][T12723] BTRFS info (device loop7): using blake2b checksum algorithm [ 1174.857475][T12723] BTRFS info (device loop7): enabling ssd optimizations [ 1174.857503][T12723] BTRFS info (device loop7): turning on async discard [ 1174.857518][T12723] BTRFS info (device loop7): enabling free space tree [ 1174.857536][T12723] BTRFS info (device loop7): use zstd compression, level 3 [ 1174.924194][T12769] can0: slcan on ttyS3. [ 1175.255417][T12765] can0 (unregistered): slcan off ttyS3. [ 1175.464037][T12786] loop6: detected capacity change from 0 to 1024 [ 1175.684422][T26504] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1175.770500][T12796] loop9: detected capacity change from 0 to 164 [ 1175.835381][T26504] usb 9-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1175.837019][T26504] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.837077][T26504] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1175.837102][T26504] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.841164][T29027] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1175.841815][T26504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.841839][T26504] usb 9-1: Product: syz [ 1175.841853][T26504] usb 9-1: Manufacturer: syz [ 1175.841866][T26504] usb 9-1: SerialNumber: syz [ 1176.039433][T12801] netlink: 128 bytes leftover after parsing attributes in process `syz.9.16367'. [ 1176.243123][T12806] profile_transition: 8 callbacks suppressed [ 1176.243146][T12806] profile_transition: unconfined exec no attachment [ 1176.351614][T12788] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1176.453888][T12812] profile_transition: unconfined exec no attachment [ 1176.479386][T12814] block2mtd: parameter too long [ 1176.641879][T12815] profile_transition: unconfined exec no attachment [ 1176.779339][T26504] ATM dev 0: failed to start ADSL synchronisation: -71 [ 1176.780151][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803436f400 failed (-71)! [ 1176.780231][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803436f100 failed (-71)! [ 1176.780283][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880339a5f00 failed (-71)! [ 1176.780333][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880339a5900 failed (-71)! [ 1176.868613][T12820] profile_transition: unconfined exec no attachment [ 1176.885554][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803436f400 failed (-71)! [ 1176.885621][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803436f100 failed (-71)! [ 1176.885669][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880339a5f00 failed (-71)! [ 1176.885717][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880339a5900 failed (-71)! [ 1176.893047][T26504] usb 9-1: USB disconnect, device number 36 [ 1176.910264][ T778] block nbd2: Receive control failed (result -32) [ 1177.181919][T12827] profile_transition: unconfined exec no attachment [ 1177.281997][T12834] profile_transition: unconfined exec no attachment [ 1177.397108][T12838] profile_transition: unconfined exec no attachment [ 1177.506477][T12844] profile_transition: unconfined exec no attachment [ 1177.586917][T12819] loop9: detected capacity change from 0 to 32768 [ 1177.623081][T12819] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1177.669825][T12819] XFS (loop9): Ending clean mount [ 1177.700222][T12856] profile_transition: unconfined exec no attachment [ 1177.701733][T12819] XFS (loop9): Quotacheck needed: Please wait. [ 1177.802332][T12860] profile_transition: unconfined exec no attachment [ 1178.080238][T12819] XFS (loop9): Quotacheck: Done. [ 1178.108961][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.179849][ T4533] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1178.260297][T12866] can0: slcan on ttyS3. [ 1178.539450][T12857] loop8: detected capacity change from 0 to 32768 [ 1178.559560][T12869] bond0: option arp_interval: invalid value () [ 1178.559583][T12869] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1178.599057][T12867] can0 (unregistered): slcan off ttyS3. [ 1178.651129][T12857] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1178.778299][T12857] XFS (loop8): Ending clean mount [ 1179.001016][T12857] XFS (loop8): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1179.129865][T32319] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1179.710781][T12910] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 1179.809748][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16404'. [ 1180.059890][T12926] overlayfs: failed to clone lowerpath [ 1180.494468][ T5722] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1180.644858][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 1180.645851][ T5722] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1180.647598][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.652351][ T5722] usb 5-1: config 0 descriptor?? [ 1180.862343][ T5722] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1180.873407][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1180.875152][ T5722] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1180.875200][ T5722] usb 5-1: media controller created [ 1180.923917][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1181.070359][ T5722] az6027: usb out operation failed. (-71) [ 1181.070749][ T5722] az6027: usb out operation failed. (-71) [ 1181.070762][ T5722] stb0899_attach: Driver disabled by Kconfig [ 1181.070773][ T5722] az6027: no front-end attached [ 1181.070773][ T5722] [ 1181.071147][ T5722] az6027: usb out operation failed. (-71) [ 1181.071160][ T5722] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1181.082185][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input90 [ 1181.106652][ T5722] dvb-usb: schedule remote query interval to 400 msecs. [ 1181.106676][ T5722] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1181.115832][ T5722] usb 5-1: USB disconnect, device number 51 [ 1181.272470][ T5722] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1181.372613][T12951] loop8: detected capacity change from 0 to 32768 [ 1181.404697][T12951] [ 1181.404697][T12951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1181.404697][T12951] [ 1181.413025][T12951] ERROR: (device loop8): diWrite: ixpxd invalid [ 1181.413025][T12951] [ 1181.447412][T12951] ERROR: (device loop8): txCommit: [ 1181.447412][T12951] [ 1181.472728][T12951] jfs_create: dtSearch returned -17 [ 1181.499619][T12962] loop6: detected capacity change from 0 to 512 [ 1181.500783][T12962] EXT4-fs: Ignoring removed mblk_io_submit option [ 1181.601697][T12962] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.16426: corrupted in-inode xattr: e_value size too large [ 1181.601735][T12962] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1181.603125][T12962] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.16426: couldn't read orphan inode 15 (err -117) [ 1181.603157][T12962] loop6: lost filesystem error report for type 5 error -117 [ 1181.614516][T12962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.629178][T32319] [ 1181.629178][T32319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1181.629178][T32319] [ 1181.643790][T32319] [ 1181.643790][T32319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1181.643790][T32319] [ 1181.930413][T22709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.056720][T12968] loop9: detected capacity change from 0 to 2048 [ 1182.081208][T12974] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.131417][T12968] Alternate GPT is invalid, using primary GPT. [ 1182.131555][T12968] loop9: p2 p3 p7 [ 1182.686510][T12987] loop4: detected capacity change from 0 to 256 [ 1182.688223][T12987] exfat: Deprecated parameter 'utf8' [ 1182.688275][T12987] exfat: Deprecated parameter 'namecase' [ 1182.688376][T12987] exfat: Deprecated parameter 'namecase' [ 1182.688399][T12987] exfat: Deprecated parameter 'utf8' [ 1182.767966][T12987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1182.768287][T12987] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 1182.929604][ T5722] kernel read not supported for file /sysvipc/msg (pid: 5722 comm: kworker/1:5) [ 1183.072308][T12985] loop8: detected capacity change from 0 to 32768 [ 1183.113497][T12985] JBD2: Ignoring recovery information on journal [ 1183.182294][T12985] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1183.616111][T32319] ocfs2: Unmounting device (7,8) on (node local) [ 1183.867647][T13012] loop4: detected capacity change from 0 to 2640 [ 1183.884036][ T4980] buffer_io_error: 23 callbacks suppressed [ 1183.884054][ T4980] Buffer I/O error on dev loop4, logical block 0, async page read [ 1183.899936][ T4980] Buffer I/O error on dev loop4, logical block 0, async page read [ 1183.900466][ T4980] Buffer I/O error on dev loop4, logical block 0, async page read [ 1183.907460][ T4980] Buffer I/O error on dev loop4, logical block 0, async page read [ 1183.908033][ T4980] Buffer I/O error on dev loop4, logical block 0, async page read [ 1184.163931][T12996] loop9: detected capacity change from 0 to 40427 [ 1184.178543][T12996] F2FS-fs (loop9): build fault injection rate: 174 [ 1184.178568][T12996] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 1184.179326][T12996] F2FS-fs (loop9): invalid crc value [ 1184.408273][T12996] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1184.465566][T12996] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1184.573884][ T4533] syz-executor: attempt to access beyond end of device [ 1184.573884][ T4533] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1184.600843][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.600870][ T4533] Tainted: [L]=SOFTLOCKUP [ 1184.600876][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.600885][ T4533] Call Trace: [ 1184.600892][ T4533] [ 1184.600899][ T4533] dump_stack_lvl+0xe8/0x150 [ 1184.600928][ T4533] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1184.600949][ T4533] f2fs_write_end_bio+0xda7/0x11c0 [ 1184.600978][ T4533] __submit_merged_bio+0x258/0x6a0 [ 1184.600992][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1184.601011][ T4533] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1184.601029][ T4533] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1184.601062][ T4533] f2fs_write_data_pages+0x2a13/0x36e0 [ 1184.601105][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1184.601117][ T4533] ? is_bpf_text_address+0x26/0x2b0 [ 1184.601141][ T4533] ? arch_stack_walk+0xfb/0x150 [ 1184.601178][ T4533] ? add_lock_to_list+0xc7/0x100 [ 1184.601194][ T4533] ? lockdep_unlock+0x5c/0xd0 [ 1184.601205][ T4533] ? __lock_acquire+0x1511/0x2de0 [ 1184.601240][ T4533] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.601271][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1184.601285][ T4533] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1184.601301][ T4533] do_writepages+0x338/0x560 [ 1184.601324][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1184.601341][ T4533] filemap_fdatawrite+0x1e9/0x2f0 [ 1184.601359][ T4533] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1184.601409][ T4533] ? do_raw_spin_unlock+0xf5/0x200 [ 1184.601426][ T4533] f2fs_sync_dirty_inodes+0x471/0x970 [ 1184.601454][ T4533] f2fs_write_checkpoint+0x860/0x24d0 [ 1184.601501][ T4533] kill_f2fs_super+0x2dc/0x700 [ 1184.601519][ T4533] ? rcu_do_enqueue+0x616/0x870 [ 1184.601533][ T4533] ? lockdep_hardirqs_on+0x7b/0x110 [ 1184.601549][ T4533] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1184.601576][ T4533] ? __pfx_call_rcu+0x10/0x10 [ 1184.601594][ T4533] ? shrinker_free+0x2a7/0x3b0 [ 1184.601612][ T4533] deactivate_locked_super+0xbe/0x110 [ 1184.601629][ T4533] cleanup_mnt+0x3d3/0x460 [ 1184.601648][ T4533] task_work_run+0x1d9/0x260 [ 1184.601666][ T4533] ? __pfx_task_work_run+0x10/0x10 [ 1184.601688][ T4533] exit_to_user_mode_loop+0x204/0x770 [ 1184.601702][ T4533] ? rcu_is_watching+0x16/0xb0 [ 1184.601720][ T4533] do_syscall_64+0x328/0x520 [ 1184.601734][ T4533] ? trace_irq_disable+0x3b/0x140 [ 1184.601748][ T4533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.601764][ T4533] ? clear_bhb_loop+0x70/0xc0 [ 1184.601780][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.601795][ T4533] RIP: 0033:0x7fd16279f397 [ 1184.601811][ T4533] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1184.601824][ T4533] RSP: 002b:00007fff36efec28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1184.601841][ T4533] RAX: 0000000000000000 RBX: 00007fd1628344bb RCX: 00007fd16279f397 [ 1184.601851][ T4533] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36efece0 [ 1184.601860][ T4533] RBP: 00007fff36efece0 R08: 00007fff36effce0 R09: 00000000ffffffff [ 1184.601871][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff36effd70 [ 1184.601880][ T4533] R13: 00007fd1628344bb R14: 0000000000121276 R15: 00007fff36effdb0 [ 1184.601906][ T4533] [ 1184.622682][T13029] netlink: 'syz.4.16452': attribute type 2 has an invalid length. [ 1184.773577][ T4533] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1184.892517][T13034] program syz.7.16455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.262547][T13048] program syz.4.16462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.464590][T26504] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1185.615023][T26504] usb 9-1: Using ep0 maxpacket: 8 [ 1185.618819][T26504] usb 9-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 1185.622354][T26504] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.622379][T26504] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.627164][T13054] can0: slcan on ttyS3. [ 1185.675320][T26504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.675346][T26504] usb 9-1: Product: syz [ 1185.675360][T26504] usb 9-1: Manufacturer: syz [ 1185.675372][T26504] usb 9-1: SerialNumber: syz [ 1185.677679][T13061] loop7: detected capacity change from 0 to 2048 [ 1185.785324][T13056] can0 (unregistered): slcan off ttyS3. [ 1185.796390][T13061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1185.859066][T13035] loop6: detected capacity change from 0 to 40427 [ 1185.890356][T13035] F2FS-fs (loop6): invalid crc value [ 1185.927614][T26504] usb 9-1: unit 6 not found! [ 1185.977140][T26504] usb 9-1: USB disconnect, device number 37 [ 1186.052995][ T4697] udevd[4697]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.217390][T13035] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1186.314026][T13035] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1186.314048][T13035] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1186.314063][T13035] F2FS-fs (loop6): Start checkpoint disabled! [ 1186.400230][ T778] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 1186.400939][T13035] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1186.407200][T13035] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1186.519059][T13078] loop8: detected capacity change from 0 to 128 [ 1186.540050][T13078] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1186.540083][T13078] hpfs: filesystem error: improperly stopped [ 1186.540096][T13078] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1186.540111][T13078] hpfs: You really don't want any checks? You are crazy... [ 1186.540122][T13078] hpfs: Code page index out of array [ 1186.540130][T13078] hpfs: code page support is disabled [ 1186.541532][T13078] hpfs: hpfs_map_4sectors(): unaligned read [ 1186.541606][T13078] hpfs: hpfs_map_4sectors(): unaligned read [ 1186.541617][T13078] hpfs: filesystem error: unable to find root dir [ 1186.619833][T13078] hpfs: hpfs_map_4sectors(): unaligned read [ 1186.665212][T13079] syz.6.16456: attempt to access beyond end of device [ 1186.665212][T13079] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 1186.768971][T13085] loop7: detected capacity change from 0 to 1024 [ 1186.787709][T13085] EXT4-fs: Ignoring removed orlov option [ 1186.787735][T13085] EXT4-fs: Ignoring removed i_version option [ 1186.838081][ T52] kworker/u8:3: attempt to access beyond end of device [ 1186.838081][ T52] loop6: rw=1, sector=53256, nr_sectors = 8 limit=40427 [ 1186.838447][ T52] kworker/u8:3: attempt to access beyond end of device [ 1186.838447][ T52] loop6: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 1186.838954][T13085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.842019][ T52] kworker/u8:3: attempt to access beyond end of device [ 1186.842019][ T52] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1186.842093][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.842120][ T52] Tainted: [L]=SOFTLOCKUP [ 1186.842128][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.842140][ T52] Workqueue: writeback wb_workfn (flush-7:6) [ 1186.842171][ T52] Call Trace: [ 1186.842179][ T52] [ 1186.842188][ T52] dump_stack_lvl+0xe8/0x150 [ 1186.842211][ T52] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1186.842238][ T52] f2fs_write_end_bio+0xda7/0x11c0 [ 1186.842275][ T52] __submit_merged_bio+0x258/0x6a0 [ 1186.842293][ T52] ? rcu_is_watching+0x16/0xb0 [ 1186.842316][ T52] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1186.842339][ T52] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1186.842384][ T52] f2fs_write_data_pages+0x2a13/0x36e0 [ 1186.842437][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1186.842472][ T52] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 1186.842533][ T52] ? __pfx_read_node_cache+0x10/0x10 [ 1186.842585][ T52] ? __lock_acquire+0x747/0x2de0 [ 1186.842621][ T52] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1186.842644][ T52] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1186.842663][ T52] do_writepages+0x338/0x560 [ 1186.842684][ T52] ? update_se+0x90/0x1080 [ 1186.842708][ T52] ? reacquire_held_locks+0x117/0x1a0 [ 1186.842724][ T52] ? writeback_sb_inodes+0x450/0x1af0 [ 1186.842753][ T52] __writeback_single_inode+0x136/0x1220 [ 1186.842775][ T52] ? do_raw_spin_unlock+0xf5/0x200 [ 1186.842799][ T52] writeback_sb_inodes+0x9de/0x1af0 [ 1186.842816][ T52] ? __lock_acquire+0x747/0x2de0 [ 1186.842858][ T52] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1186.842918][ T52] ? rcu_is_watching+0x16/0xb0 [ 1186.842940][ T52] ? queue_io+0x2d3/0x470 [ 1186.842963][ T52] wb_writeback+0x41c/0xad0 [ 1186.842985][ T52] ? queue_io+0x2c1/0x470 [ 1186.843010][ T52] ? __pfx_wb_writeback+0x10/0x10 [ 1186.843025][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 1186.843060][ T52] wb_workfn+0x431/0x10f0 [ 1186.843099][ T52] ? __pfx_wb_workfn+0x10/0x10 [ 1186.843125][ T52] ? trace_hrtimer_start+0x82/0x200 [ 1186.843152][ T52] ? do_raw_spin_lock+0x12b/0x2f0 [ 1186.843182][ T52] ? lock_acquire+0x115/0x350 [ 1186.843213][ T52] ? rcu_is_watching+0x16/0xb0 [ 1186.843233][ T52] ? process_scheduled_works+0x97a/0x1630 [ 1186.843250][ T52] process_scheduled_works+0xc3d/0x1630 [ 1186.843303][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 1186.843329][ T52] ? assign_work+0x3cf/0x5d0 [ 1186.843359][ T52] worker_thread+0xa47/0xfb0 [ 1186.843406][ T52] kthread+0x38b/0x480 [ 1186.843426][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1186.843443][ T52] ? __pfx_kthread+0x10/0x10 [ 1186.843463][ T52] ret_from_fork+0x514/0xb70 [ 1186.843487][ T52] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.843507][ T52] ? __switch_to+0xc78/0x1410 [ 1186.843530][ T52] ? __pfx_kthread+0x10/0x10 [ 1186.843550][ T52] ret_from_fork_asm+0x1a/0x30 [ 1186.843598][ T52] [ 1186.843920][ T52] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1186.852178][ T5722] loop6: lost filesystem error report for type 5 error -108 [ 1187.239388][T29027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.300824][T13094] loop4: detected capacity change from 0 to 64 [ 1187.380546][T13094] syz.4.16482: attempt to access beyond end of device [ 1187.380546][T13094] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1187.380581][T13094] Buffer I/O error on dev loop4, logical block 512, async page read [ 1187.380675][T13094] syz.4.16482: attempt to access beyond end of device [ 1187.380675][T13094] loop4: rw=8388608, sector=32768, nr_sectors = 2 limit=64 [ 1187.380699][T13094] Buffer I/O error on dev loop4, logical block 16384, async page read [ 1187.563648][T13096] profile_transition: unconfined exec no attachment [ 1188.223844][T13123] bond0: entered promiscuous mode [ 1188.223870][T13123] bond_slave_0: entered promiscuous mode [ 1188.224085][T13123] bond_slave_1: entered promiscuous mode [ 1188.271566][T13123] bond0: left promiscuous mode [ 1188.271593][T13123] bond_slave_0: left promiscuous mode [ 1188.271897][T13123] bond_slave_1: left promiscuous mode [ 1188.309431][T13116] loop4: detected capacity change from 0 to 32768 [ 1188.317589][T13116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16492 (13116) [ 1188.421129][T13116] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1188.421164][T13116] BTRFS info (device loop4): using sha256 checksum algorithm [ 1188.610285][T13116] BTRFS info (device loop4): allowing degraded mounts [ 1188.610312][T13116] BTRFS info (device loop4): enabling ssd optimizations [ 1188.610329][T13116] BTRFS info (device loop4): disabling tree log [ 1188.610345][T13116] BTRFS info (device loop4): turning on sync discard [ 1188.610361][T13116] BTRFS info (device loop4): enabling free space tree [ 1188.699099][T13142] profile_transition: unconfined exec no attachment [ 1188.920430][T13147] loop8: detected capacity change from 0 to 1024 [ 1188.980675][T13147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.129674][T13152] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.16499: lblock 0 mapped to illegal pblock 0 (length 1) [ 1189.200546][T13147] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.16499: lblock 0 mapped to illegal pblock 0 (length 1) [ 1189.233071][T13147] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1189.233107][T13147] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1189.233107][T13147] [ 1189.392386][T32319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1189.506247][T13155] profile_transition: unconfined exec no attachment [ 1189.609226][T13154] loop7: detected capacity change from 0 to 32768 [ 1189.687723][T13154] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1189.882670][T13116] BTRFS warning (device loop4): discard failed for extent [1052672, 1056767]: errno=-512 unknown [ 1189.883533][T13116] BTRFS warning (device loop4): discard failed for extent [5328896, 5345279]: errno=-512 unknown [ 1189.883983][T13116] BTRFS info (device loop4): disk added /dev/nullb0 [ 1189.927729][ T4744] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1200.068407][ T4349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1230.993182][ T4349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1239.547600][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1261.918133][ T45] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1277.466932][ T5624] Bluetooth: hci3: command 0x0405 tx timeout [ 1292.842551][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1300.988846][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.767452][ T5009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1341.305120][ T34] INFO: task jbd2/sda1-8:4939 blocked in I/O wait for more than 143 seconds. [ 1341.305150][ T34] Tainted: G L syzkaller #0 [ 1341.305162][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.305172][ T34] task:jbd2/sda1-8 state:D stack:25704 pid:4939 tgid:4939 ppid:2 task_flags:0x240040 flags:0x00080000 [ 1341.305225][ T34] Call Trace: [ 1341.305232][ T34] [ 1341.305245][ T34] __schedule+0x1b47/0x5b40 [ 1341.305284][ T34] ? percpu_ref_put_many+0x21/0x240 [ 1341.305403][ T34] ? percpu_ref_put_many+0x18e/0x240 [ 1341.305433][ T34] ? __pfx___schedule+0x10/0x10 [ 1341.305461][ T34] ? schedule+0x90/0x2b0 [ 1341.305482][ T34] schedule+0x164/0x2b0 [ 1341.305504][ T34] io_schedule+0x7f/0xd0 [ 1341.305525][ T34] bit_wait_io+0x13/0x110 [ 1341.305547][ T34] __wait_on_bit+0xac/0x300 [ 1341.305567][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.305589][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1341.305611][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.305629][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1341.305652][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1341.305677][ T34] ? __wait_on_buffer+0xe/0x80 [ 1341.305703][ T34] jbd2_journal_commit_transaction+0x2f6e/0x5c80 [ 1341.305780][ T34] ? trace_hrtimer_start+0x82/0x200 [ 1341.305837][ T34] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1341.305867][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1341.305911][ T34] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.305970][ T34] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1341.305990][ T34] ? __timer_delete_sync+0x4a7/0x520 [ 1341.306011][ T34] kjournald2+0x3bc/0x740 [ 1341.306074][ T34] ? __pfx_kjournald2+0x10/0x10 [ 1341.306093][ T34] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1341.306116][ T34] ? __kthread_parkme+0x71/0x1f0 [ 1341.306137][ T34] ? __kthread_parkme+0x199/0x1f0 [ 1341.306162][ T34] kthread+0x38b/0x480 [ 1341.306181][ T34] ? __pfx_kjournald2+0x10/0x10 [ 1341.306199][ T34] ? __pfx_kthread+0x10/0x10 [ 1341.306218][ T34] ret_from_fork+0x514/0xb70 [ 1341.306250][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1341.306270][ T34] ? __switch_to+0xc78/0x1410 [ 1341.306292][ T34] ? __pfx_kthread+0x10/0x10 [ 1341.306311][ T34] ret_from_fork_asm+0x1a/0x30 [ 1341.306343][ T34] [ 1341.306364][ T34] INFO: task syz-executor:5597 blocked in I/O wait for more than 143 seconds. [ 1341.306417][ T34] Tainted: G L syzkaller #0 [ 1341.306428][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.306438][ T34] task:syz-executor state:D stack:21792 pid:5597 tgid:5597 ppid:5596 task_flags:0x440100 flags:0x00080000 [ 1341.306679][ T34] Call Trace: [ 1341.306687][ T34] [ 1341.306700][ T34] __schedule+0x1b47/0x5b40 [ 1341.306735][ T34] ? lock_acquire+0x115/0x350 [ 1341.306766][ T34] ? __pfx___schedule+0x10/0x10 [ 1341.306796][ T34] ? schedule+0x90/0x2b0 [ 1341.306818][ T34] schedule+0x164/0x2b0 [ 1341.306838][ T34] io_schedule+0x7f/0xd0 [ 1341.306859][ T34] bit_wait_io+0x13/0x110 [ 1341.306879][ T34] __wait_on_bit+0xac/0x300 [ 1341.306898][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.306919][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1341.306939][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.306956][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1341.306987][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1341.307017][ T34] do_get_write_access+0x658/0x10c0 [ 1341.307054][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1341.307079][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1341.307129][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1341.307150][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1341.307180][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 1341.307209][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1341.307274][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1341.307307][ T34] ext4_dirty_inode+0xd0/0x110 [ 1341.307326][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1341.307344][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1341.307370][ T34] file_update_time_flags+0x399/0x440 [ 1341.307397][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 1341.307433][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1341.307451][ T34] ? __lock_acquire+0x747/0x2de0 [ 1341.307486][ T34] do_page_mkwrite+0x147/0x310 [ 1341.307512][ T34] do_wp_page+0x1a85/0x4b60 [ 1341.307550][ T34] ? __pfx_do_wp_page+0x10/0x10 [ 1341.307567][ T34] ? do_raw_spin_lock+0x12b/0x2f0 [ 1341.307589][ T34] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1341.307615][ T34] handle_mm_fault+0x15d7/0x3750 [ 1341.307645][ T34] ? handle_mm_fault+0xf1/0x3750 [ 1341.307675][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 1341.307693][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 1341.307714][ T34] ? __pfx_set_user_sigmask+0x10/0x10 [ 1341.307769][ T34] do_user_addr_fault+0xb35/0x1480 [ 1341.307801][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 1341.307823][ T34] exc_page_fault+0x6a/0xc0 [ 1341.307845][ T34] asm_exc_page_fault+0x26/0x30 [ 1341.307865][ T34] RIP: 0033:0x7f69410701e3 [ 1341.307883][ T34] RSP: 002b:00007ffcec6bdcd0 EFLAGS: 00010212 [ 1341.307902][ T34] RAX: 00007f693adef134 RBX: 00007ffcec6bde00 RCX: 0000000000000000 [ 1341.307916][ T34] RDX: 00007f693adef130 RSI: 0000000000000008 RDI: 00007ffcec6bde00 [ 1341.307930][ T34] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 1341.307942][ T34] R10: 00007ffcec6bdde0 R11: 0000000000000000 R12: 0000000000000000 [ 1341.307955][ T34] R13: 0000000000010ecc R14: fffffffffffef134 R15: 0000000000000000 [ 1341.308061][ T34] [ 1341.308148][ T34] INFO: task syz.7.16501:13153 blocked in I/O wait for more than 143 seconds. [ 1341.308167][ T34] Tainted: G L syzkaller #0 [ 1341.308178][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.308187][ T34] task:syz.7.16501 state:D stack:25608 pid:13153 tgid:13153 ppid:29027 task_flags:0x440040 flags:0x00080002 [ 1341.308239][ T34] Call Trace: [ 1341.308246][ T34] [ 1341.308259][ T34] __schedule+0x1b47/0x5b40 [ 1341.308293][ T34] ? lock_acquire+0x115/0x350 [ 1341.308322][ T34] ? __pfx___schedule+0x10/0x10 [ 1341.308353][ T34] ? schedule+0x90/0x2b0 [ 1341.308374][ T34] schedule+0x164/0x2b0 [ 1341.308393][ T34] io_schedule+0x7f/0xd0 [ 1341.308410][ T34] bit_wait_io+0x13/0x110 [ 1341.308422][ T34] __wait_on_bit+0xac/0x300 [ 1341.308433][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.308445][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1341.308457][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.308469][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1341.308482][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1341.308499][ T34] do_get_write_access+0x658/0x10c0 [ 1341.308520][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1341.308534][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1341.308550][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1341.308562][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1341.308573][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 1341.308588][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1341.308604][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1341.308622][ T34] ext4_dirty_inode+0xd0/0x110 [ 1341.308633][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1341.308642][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1341.308657][ T34] file_update_time_flags+0x399/0x440 [ 1341.308670][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 1341.308686][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 1341.308701][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1341.308712][ T34] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 1341.308740][ T34] do_page_mkwrite+0x147/0x310 [ 1341.308753][ T34] do_pte_missing+0x70f/0x3570 [ 1341.308774][ T34] handle_mm_fault+0x1a53/0x3750 [ 1341.308791][ T34] ? handle_mm_fault+0xf1/0x3750 [ 1341.308808][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 1341.308817][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 1341.308829][ T34] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 1341.308853][ T34] do_user_addr_fault+0xb35/0x1480 [ 1341.308870][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 1341.308883][ T34] exc_page_fault+0x6a/0xc0 [ 1341.308895][ T34] asm_exc_page_fault+0x26/0x30 [ 1341.308905][ T34] RIP: 0033:0x7ff420072809 [ 1341.308916][ T34] RSP: 002b:00007fff1ab012f0 EFLAGS: 00010202 [ 1341.308926][ T34] RAX: 0000001b32c24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 1341.308934][ T34] RDX: 0000001b32c23ffc RSI: 00000000003ffde8 RDI: 00007ff420f55700 [ 1341.308942][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff420412000 [ 1341.308949][ T34] R10: 00007ff420f55700 R11: 0000000000000000 R12: 0000000000000000 [ 1341.308956][ T34] R13: 000000000000958f R14: ffffffff816da2ee R15: 00007ff420f55720 [ 1341.308969][ T34] ? fpregs_assert_state_consistent+0xee/0x150 [ 1341.308989][ T34] [ 1341.308994][ T34] INFO: task syz.8.16502:13156 blocked in I/O wait for more than 143 seconds. [ 1341.309005][ T34] Tainted: G L syzkaller #0 [ 1341.309011][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1341.309015][ T34] task:syz.8.16502 state:D stack:25608 pid:13156 tgid:13156 ppid:32319 task_flags:0x440040 flags:0x00080002 [ 1341.309044][ T34] Call Trace: [ 1341.309048][ T34] [ 1341.309055][ T34] __schedule+0x1b47/0x5b40 [ 1341.309081][ T34] ? __pfx___schedule+0x10/0x10 [ 1341.309097][ T34] ? schedule+0x90/0x2b0 [ 1341.309110][ T34] schedule+0x164/0x2b0 [ 1341.309121][ T34] io_schedule+0x7f/0xd0 [ 1341.309133][ T34] bit_wait_io+0x13/0x110 [ 1341.309144][ T34] __wait_on_bit+0xac/0x300 [ 1341.309155][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.309167][ T34] out_of_line_wait_on_bit+0x13b/0x190 [ 1341.309178][ T34] ? __pfx_bit_wait_io+0x10/0x10 [ 1341.309189][ T34] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1341.309201][ T34] ? __pfx_wake_bit_function+0x10/0x10 [ 1341.309218][ T34] do_get_write_access+0x658/0x10c0 [ 1341.309238][ T34] jbd2_journal_get_write_access+0x1d7/0x230 [ 1341.309251][ T34] __ext4_journal_get_write_access+0xec/0x620 [ 1341.309266][ T34] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1341.309278][ T34] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1341.309288][ T34] ? jbd2__journal_start+0x145/0x5d0 [ 1341.309303][ T34] ext4_reserve_inode_write+0x294/0x360 [ 1341.309319][ T34] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1341.309336][ T34] ext4_dirty_inode+0xd0/0x110 [ 1341.309347][ T34] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1341.309357][ T34] __mark_inode_dirty+0x3a8/0x13b0 [ 1341.309370][ T34] file_update_time_flags+0x399/0x440 [ 1341.309384][ T34] ext4_page_mkwrite+0x21f/0x12c0 [ 1341.309399][ T34] ? __pfx_filemap_fault+0x10/0x10 [ 1341.309412][ T34] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1341.309423][ T34] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 1341.309438][ T34] do_page_mkwrite+0x147/0x310 [ 1341.309451][ T34] do_pte_missing+0x70f/0x3570 [ 1341.309473][ T34] handle_mm_fault+0x1a53/0x3750 [ 1341.309490][ T34] ? handle_mm_fault+0xf1/0x3750 [ 1341.309506][ T34] ? __pfx_handle_mm_fault+0x10/0x10 [ 1341.309515][ T34] ? lock_vma_under_rcu+0x45a/0x500 [ 1341.309526][ T34] ? __pfx_do_futex+0x10/0x10 [ 1341.309549][ T34] do_user_addr_fault+0xb35/0x1480 [ 1341.309566][ T34] ? trace_page_fault_user+0x84/0x1e0 [ 1341.309578][ T34] exc_page_fault+0x6a/0xc0 [ 1341.309590][ T34] asm_exc_page_fault+0x26/0x30 [ 1341.309600][ T34] RIP: 0033:0x7f190d872809 [ 1341.309609][ T34] RSP: 002b:00007fff3cdee5c0 EFLAGS: 00010202 [ 1341.309618][ T34] RAX: 0000001b30024000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 1341.309626][ T34] RDX: 0000001b30023ffc RSI: 00000000005ffde8 RDI: 00007f190e755700 [ 1341.309633][ T34] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f190dc12000 [ 1341.309640][ T34] R10: 00007f190e755700 R11: 0000000000000000 R12: 0000000000000000 [ 1341.309647][ T34] R13: 000000000000000c R14: ffffffff816da2ee R15: 00007f190e755720 [ 1341.309655][ T34] ? fpregs_assert_state_consistent+0xee/0x150 [ 1341.309675][ T34] [ 1341.309686][ T34] [ 1341.309686][ T34] Showing all locks held in the system: [ 1341.309694][ T34] locks held by khungtaskd/34: 1, last CPU#0: [ 1341.309703][ T34] #0: ffffffff8ed5c620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1341.309741][ T34] locks held by kworker/u8:3/52: 6, on CPU#0: [ 1341.309749][ T34] #0: ffff888020aed948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1341.309775][ T34] #1: ffffc90000bc7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1341.309802][ T34] #2: ffff888035daa0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 1341.309831][ T34] #3: ffff888035da8c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 1341.309888][ T34] #4: ffff888034a6e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1341.309914][ T34] #5: ffff888076a4d3a8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 1341.309971][ T34] locks held by getty/5369: 2, on CPU#0: [ 1341.309979][ T34] #0: ffff8880358420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1341.310050][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1341.310077][ T34] locks held by syz-executor/5597: 3, on CPU#0: [ 1341.310091][ T34] #0: ffff88801b775588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1341.310116][ T34] #1: ffff888035daa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 1341.310142][ T34] #2: ffff888034a6e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1341.310179][ T34] locks held by syz.7.16501/13153: 3, on CPU#1: [ 1341.310187][ T34] #0: ffff8880314bd948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1341.310217][ T34] #1: ffff888035daa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 1341.310242][ T34] #2: ffff888034a6e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1341.310268][ T34] locks held by syz.8.16502/13156: 3, on CPU#0: [ 1341.310275][ T34] #0: ffff888066fa7a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1341.310300][ T34] #1: ffff888035daa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 1341.310325][ T34] #2: ffff888034a6e938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1341.310351][ T34] [ 1341.310354][ T34] ============================================= [ 1341.310354][ T34] [ 1341.310360][ T34] NMI backtrace for cpu 0 [ 1341.310371][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.310394][ T34] Tainted: [L]=SOFTLOCKUP [ 1341.310402][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.310412][ T34] Call Trace: [ 1341.310421][ T34] [ 1341.310430][ T34] dump_stack_lvl+0xe8/0x150 [ 1341.310454][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 1341.310495][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1341.310508][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1341.310520][ T34] sys_info+0x135/0x170 [ 1341.310531][ T34] watchdog+0x1058/0x10d0 [ 1341.310546][ T34] ? watchdog+0x209/0x10d0 [ 1341.310558][ T34] kthread+0x38b/0x480 [ 1341.310569][ T34] ? __pfx_watchdog+0x10/0x10 [ 1341.310578][ T34] ? __pfx_kthread+0x10/0x10 [ 1341.310588][ T34] ret_from_fork+0x514/0xb70 [ 1341.310600][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1341.310610][ T34] ? __switch_to+0xc78/0x1410 [ 1341.310621][ T34] ? __pfx_kthread+0x10/0x10 [ 1341.310632][ T34] ret_from_fork_asm+0x1a/0x30 [ 1341.310656][ T34] [ 1341.310661][ T34] Sending NMI from CPU 0 to CPUs 1: [ 1341.310735][ C1] NMI backtrace for cpu 1 [ 1341.310752][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.310778][ C1] Tainted: [L]=SOFTLOCKUP [ 1341.310785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.310796][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1341.310818][ C1] Code: 5b 85 02 e9 c3 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f9 1c 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1341.310836][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000242 [ 1341.310852][ C1] RAX: 00000000002292c1 RBX: ffffffff819caf00 RCX: 8000000000000001 [ 1341.310868][ C1] RDX: 0000000000000001 RSI: ffffffff8e44bb8f RDI: ffffffff8c6df080 [ 1341.310882][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8733e5b R09: 1ffff110170e67cb [ 1341.310897][ C1] R10: dffffc0000000000 R11: ffffed10170e67cc R12: 0000000000000000 [ 1341.310911][ C1] R13: 1ffff11003c5e3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 1341.310926][ C1] FS: 0000000000000000(0000) GS:ffff888124dac000(0000) knlGS:0000000000000000 [ 1341.310943][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1341.310957][ C1] CR2: 0000564a903fe660 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1341.310974][ C1] Call Trace: [ 1341.310982][ C1] [ 1341.310989][ C1] default_idle+0x9/0x20 [ 1341.311006][ C1] default_idle_call+0x72/0xb0 [ 1341.311025][ C1] do_idle+0x2e0/0x540 [ 1341.311044][ C1] ? __pfx_do_idle+0x10/0x10 [ 1341.311063][ C1] ? do_idle+0x4d8/0x540 [ 1341.311081][ C1] cpu_startup_entry+0x43/0x60 [ 1341.311099][ C1] start_secondary+0x101/0x110 [ 1341.311117][ C1] common_startup_64+0x13e/0x157 [ 1341.311144][ C1] [ 1341.311690][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 1342.969365][ T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.980108][ T34] Tainted: [L]=SOFTLOCKUP [ 1342.984415][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1342.994456][ T34] Call Trace: [ 1342.997721][ T34] [ 1343.000636][ T34] vpanic+0x26f/0x710 [ 1343.004611][ T34] panic+0xc5/0xd0 [ 1343.008338][ T34] ? __pfx_panic+0x10/0x10 [ 1343.012746][ T34] ? wq_watchdog_touch+0xf9/0x160 [ 1343.017753][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1343.023908][ T34] watchdog+0x10cc/0x10d0 [ 1343.028229][ T34] ? watchdog+0x209/0x10d0 [ 1343.032633][ T34] kthread+0x38b/0x480 [ 1343.036681][ T34] ? __pfx_watchdog+0x10/0x10 [ 1343.041334][ T34] ? __pfx_kthread+0x10/0x10 [ 1343.045909][ T34] ret_from_fork+0x514/0xb70 [ 1343.050482][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 1343.055569][ T34] ? __switch_to+0xc78/0x1410 [ 1343.060226][ T34] ? __pfx_kthread+0x10/0x10 [ 1343.064805][ T34] ret_from_fork_asm+0x1a/0x30 [ 1343.069580][ T34] [ 1343.072877][ T34] Kernel Offset: disabled [ 1343.077196][ T34] Rebooting in 86400 seconds..