last executing test programs: 1m38.92088957s ago: executing program 4 (id=1925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000600)={0x8, 0x0, [{0x4, 0xe, 0x0, 0x6, 0x9e}, {0x0, 0xffffffff, 0x0, 0x0, 0x9f86}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x800062d9, 0x9, 0x3, 0x7f}, {0xc0000000, 0x0, 0x4, 0x6b0, 0x823, 0xa5, 0x8000}, {0x40000001, 0x1, 0x4, 0xc, 0xff, 0x9, 0x7}]}) 1m38.717331855s ago: executing program 4 (id=1928): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1m38.424215087s ago: executing program 4 (id=1932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m38.203998104s ago: executing program 4 (id=1938): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget(0x0, 0x4000, 0x202, &(0x7f00002e7000/0x4000)=nil) 1m37.325349618s ago: executing program 4 (id=1947): unshare(0x40400) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000000)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@nobarrier}, {@part={'part', 0x3d, 0x2}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5f1, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) fsync(r0) 1m37.090851648s ago: executing program 4 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) 1m22.063699301s ago: executing program 32 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1', 0x1) 41.041084349s ago: executing program 2 (id=2362): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd, 0xffff, 0x0, 0xff, 0x7, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 40.761220378s ago: executing program 2 (id=2364): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x594, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 40.503890103s ago: executing program 2 (id=2367): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) 40.248359821s ago: executing program 2 (id=2369): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000940)=@hopopts={0x3b}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 40.041397663s ago: executing program 2 (id=2373): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x5, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 39.903251087s ago: executing program 2 (id=2376): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='-2 -3 +4\n', 0x9) 24.503824834s ago: executing program 33 (id=2376): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='-2 -3 +4\n', 0x9) 13.588855921s ago: executing program 6 (id=2549): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 12.906169025s ago: executing program 6 (id=2554): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfe247000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fspick(0xffffffffffffffff, 0x0, 0x1) 10.608232882s ago: executing program 6 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) 10.021906097s ago: executing program 6 (id=2565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7}, 0x8) 9.607175105s ago: executing program 6 (id=2569): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x3, ' \x00\x00'}}, 0x9) 3.038413426s ago: executing program 0 (id=2648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x2}]}) 2.726262541s ago: executing program 0 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc118fd50, &(0x7f00000001c0)="040000") 2.556819947s ago: executing program 5 (id=2656): pipe(&(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.538364882s ago: executing program 0 (id=2657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.403035424s ago: executing program 0 (id=2658): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x9, 0x9, 0x3}]}}}}}}}}, 0x0) 2.264503514s ago: executing program 5 (id=2661): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.232857582s ago: executing program 0 (id=2662): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffed, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) 1.917220285s ago: executing program 3 (id=2666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettaction={0x44, 0x32, 0x31, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x44}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 1.860676378s ago: executing program 0 (id=2667): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x3a, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.860413886s ago: executing program 5 (id=2668): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 1.729302679s ago: executing program 3 (id=2669): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 1.59895336s ago: executing program 1 (id=2670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*:*_', 0x5) 1.550815743s ago: executing program 5 (id=2671): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.48596128s ago: executing program 1 (id=2672): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x16f, @tick=0x7, 0x1, {0x81}, 0xff, 0x0, 0x80}) 1.429214228s ago: executing program 3 (id=2673): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000088"], 0x80}}, 0x0) 1.409917255s ago: executing program 1 (id=2674): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="cedc", 0x2, 0x3b00, 0x0, 0x0) 1.32573778s ago: executing program 3 (id=2675): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(r0, &(0x7f0000000100)=""/190, 0xbe, 0xff) 1.228660501s ago: executing program 1 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x4a) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/75, 0x4b}], 0x4) 1.117765178s ago: executing program 1 (id=2677): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x81, 0x7fff, 0x1000000000000000, 0x4}) 468.687216ms ago: executing program 5 (id=2678): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800084, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 388.644493ms ago: executing program 3 (id=2679): r0 = syz_io_uring_setup(0x3eea, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x394}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x1c, &(0x7f0000000600)={{0xa, 0x4e20, 0xfffffffb, @mcast1, 0x5}}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7c65, 0xa334, 0x5, 0x0, 0x0) 356.946681ms ago: executing program 5 (id=2680): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1000000, 0x0, 0x0}}, 0x10) 306.857723ms ago: executing program 3 (id=2681): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$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") syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 84.006607ms ago: executing program 6 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) setns(0xc9, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): type=1326 audit(1788920131.282:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.878393][ T33] audit: type=1326 audit(1788920131.282:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.905960][ T33] audit: type=1326 audit(1788920131.292:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.906016][ T33] audit: type=1326 audit(1788920131.292:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.906059][ T33] audit: type=1326 audit(1788920131.292:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.906103][ T33] audit: type=1326 audit(1788920131.292:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.906147][ T33] audit: type=1326 audit(1788920131.292:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 310.906191][ T33] audit: type=1326 audit(1788920131.292:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.4.1892" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1f7e19e159 code=0x7ffc0000 [ 311.137018][T11111] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140 [ 311.287258][ T5619] syz-executor: attempt to access beyond end of device [ 311.287258][ T5619] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 311.307349][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 311.307381][ T5619] Tainted: [L]=SOFTLOCKUP [ 311.307388][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.307399][ T5619] Call Trace: [ 311.307407][ T5619] [ 311.307415][ T5619] dump_stack_lvl+0xe8/0x150 [ 311.307448][ T5619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 311.307477][ T5619] f2fs_write_end_bio+0x1211/0x16e0 [ 311.307505][ T5619] ? blkg_put+0x22/0x240 [ 311.307543][ T5619] __submit_merged_bio+0x258/0x6a0 [ 311.307563][ T5619] ? rcu_is_watching+0x16/0xb0 [ 311.307593][ T5619] __submit_merged_write_cond+0x3c9/0x4e0 [ 311.307625][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 311.307672][ T5619] f2fs_write_data_pages+0x2a1d/0x36f0 [ 311.307736][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.307808][ T5619] ? is_bpf_text_address+0x292/0x2b0 [ 311.307835][ T5619] ? is_bpf_text_address+0x26/0x2b0 [ 311.307861][ T5619] ? __bfs+0x153/0x290 [ 311.307886][ T5619] ? __pfx_hlock_conflict+0x10/0x10 [ 311.307933][ T5619] ? lockdep_unlock+0x5c/0xd0 [ 311.307951][ T5619] ? __lock_acquire+0x1511/0x2de0 [ 311.308005][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.308033][ T5619] do_writepages+0x338/0x560 [ 311.308070][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 311.308105][ T5619] filemap_fdatawrite+0x1e9/0x2f0 [ 311.308135][ T5619] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 311.308213][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 311.308248][ T5619] f2fs_sync_dirty_inodes+0x30e/0x830 [ 311.308294][ T5619] f2fs_write_checkpoint+0xa38/0x2710 [ 311.308328][ T5619] ? __lock_acquire+0x747/0x2de0 [ 311.308389][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 311.308480][ T5619] kill_f2fs_super+0x2dd/0x700 [ 311.308518][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 311.308560][ T5619] ? call_rcu+0x64d/0x8b0 [ 311.308586][ T5619] ? lockdep_hardirqs_on+0x7b/0x110 [ 311.308624][ T5619] deactivate_locked_super+0xbc/0x110 [ 311.308650][ T5619] cleanup_mnt+0x3d3/0x460 [ 311.308682][ T5619] task_work_run+0x1d9/0x260 [ 311.308711][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 311.308747][ T5619] exit_to_user_mode_loop+0x204/0x770 [ 311.308770][ T5619] ? rcu_is_watching+0x16/0xb0 [ 311.308801][ T5619] do_syscall_64+0x328/0x520 [ 311.308821][ T5619] ? trace_irq_disable+0x3b/0x140 [ 311.308842][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.308867][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 311.308892][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.308911][ T5619] RIP: 0033:0x7f56f959f397 [ 311.308929][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 311.308946][ T5619] RSP: 002b:00007ffc0c6425d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 311.308968][ T5619] RAX: 0000000000000000 RBX: 00007f56f963448b RCX: 00007f56f959f397 [ 311.308982][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c642690 [ 311.308995][ T5619] RBP: 00007ffc0c642690 R08: 00007ffc0c643690 R09: 00000000ffffffff [ 311.309009][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0c643720 [ 311.309022][ T5619] R13: 00007f56f963448b R14: 000000000004bf4e R15: 00007ffc0c643760 [ 311.309058][ T5619] [ 311.320325][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 311.320438][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 311.320462][ T5619] Tainted: [L]=SOFTLOCKUP [ 311.320469][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.320478][ T5619] Call Trace: [ 311.320485][ T5619] [ 311.320492][ T5619] dump_stack_lvl+0xe8/0x150 [ 311.320522][ T5619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 311.320548][ T5619] f2fs_write_end_bio+0x1211/0x16e0 [ 311.320594][ T5619] __submit_merged_bio+0x258/0x6a0 [ 311.320612][ T5619] ? rcu_is_watching+0x16/0xb0 [ 311.320641][ T5619] __submit_merged_write_cond+0x3c9/0x4e0 [ 311.320670][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 311.320713][ T5619] f2fs_write_data_pages+0x2a1d/0x36f0 [ 311.320772][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.320836][ T5619] ? is_bpf_text_address+0x292/0x2b0 [ 311.320859][ T5619] ? is_bpf_text_address+0x26/0x2b0 [ 311.320880][ T5619] ? __bfs+0x153/0x290 [ 311.320898][ T5619] ? __pfx_hlock_conflict+0x10/0x10 [ 311.320938][ T5619] ? lockdep_unlock+0x5c/0xd0 [ 311.320954][ T5619] ? __lock_acquire+0x1511/0x2de0 [ 311.321001][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 311.321024][ T5619] do_writepages+0x338/0x560 [ 311.321056][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 311.321085][ T5619] filemap_fdatawrite+0x1e9/0x2f0 [ 311.321111][ T5619] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 311.321177][ T5619] ? do_raw_spin_unlock+0xf5/0x200 [ 311.321210][ T5619] f2fs_sync_dirty_inodes+0x30e/0x830 [ 311.321253][ T5619] f2fs_write_checkpoint+0xa38/0x2710 [ 311.321277][ T5619] ? __lock_acquire+0x747/0x2de0 [ 311.321343][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 311.321434][ T5619] kill_f2fs_super+0x2dd/0x700 [ 311.321470][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 311.321510][ T5619] ? call_rcu+0x64d/0x8b0 [ 311.321533][ T5619] ? lockdep_hardirqs_on+0x7b/0x110 [ 311.321569][ T5619] deactivate_locked_super+0xbc/0x110 [ 311.321594][ T5619] cleanup_mnt+0x3d3/0x460 [ 311.321626][ T5619] task_work_run+0x1d9/0x260 [ 311.321654][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 311.321689][ T5619] exit_to_user_mode_loop+0x204/0x770 [ 311.321711][ T5619] ? rcu_is_watching+0x16/0xb0 [ 311.321738][ T5619] do_syscall_64+0x328/0x520 [ 311.321755][ T5619] ? trace_irq_disable+0x3b/0x140 [ 311.321774][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.321792][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 311.321814][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.321832][ T5619] RIP: 0033:0x7f56f959f397 [ 311.321849][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 311.321863][ T5619] RSP: 002b:00007ffc0c6425d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 311.321883][ T5619] RAX: 0000000000000000 RBX: 00007f56f963448b RCX: 00007f56f959f397 [ 311.321895][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c642690 [ 311.321906][ T5619] RBP: 00007ffc0c642690 R08: 00007ffc0c643690 R09: 00000000ffffffff [ 311.321917][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0c643720 [ 311.321928][ T5619] R13: 00007f56f963448b R14: 000000000004bf4e R15: 00007ffc0c643760 [ 311.321959][ T5619] [ 311.330566][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 311.636113][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 311.955380][T11159] loop3: detected capacity change from 0 to 64 [ 312.491975][T11173] loop3: detected capacity change from 0 to 256 [ 312.505535][T11173] FAT-fs (loop3): Directory bread(block 1285) failed [ 312.505570][T11173] FAT-fs (loop3): Directory bread(block 1286) failed [ 312.505710][T11173] FAT-fs (loop3): Directory bread(block 1287) failed [ 312.508229][T11173] FAT-fs (loop3): Directory bread(block 1288) failed [ 312.545600][T11173] FAT-fs (loop3): Directory bread(block 1285) failed [ 312.545634][T11173] FAT-fs (loop3): Directory bread(block 1286) failed [ 312.545658][T11173] FAT-fs (loop3): Directory bread(block 1287) failed [ 312.545681][T11173] FAT-fs (loop3): Directory bread(block 1288) failed [ 312.545749][T11173] FAT-fs (loop3): Directory bread(block 1285) failed [ 312.545771][T11173] FAT-fs (loop3): Directory bread(block 1286) failed [ 312.631669][ T8229] IPVS: starting estimator thread 0... [ 312.720319][T11177] IPVS: using max 29 ests per chain, 69600 per kthread [ 312.981921][T11190] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 313.138901][T11196] loop4: detected capacity change from 0 to 1024 [ 313.751771][T11217] bonding: bQ% is being created... [ 313.861017][T11217] bonding: bQ% creation failed [ 314.034939][T11227] loop2: detected capacity change from 0 to 512 [ 314.066454][T11227] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1936: Unrecognised inode hash code 4 [ 314.066487][T11227] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1936: Corrupt directory, running e2fsck is recommended [ 314.099169][T11227] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 314.099280][T11227] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1936: corrupted in-inode xattr: invalid ea_ino [ 314.099308][T11227] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 314.099577][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 314.099598][ C1] EXT4-fs (loop2): initial error at time 1788920134: ext4_iget_extra_inode:5210: inode 15 [ 314.099629][ C1] EXT4-fs (loop2): last error at time 1788920134: ext4_iget_extra_inode:5210: inode 15 [ 314.130165][T11227] EXT4-fs (loop2): Remounting filesystem read-only [ 314.136768][T11227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.178688][T11227] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #2: comm syz.2.1936: directory missing '.' [ 314.314455][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.708164][T11250] loop1: detected capacity change from 0 to 512 [ 314.967488][T11255] loop4: detected capacity change from 0 to 1024 [ 314.979879][T11255] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 315.030432][ T5633] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 315.183324][ T5633] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 315.184847][ T5633] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.184873][ T5633] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.191421][ T5633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.191446][ T5633] usb 4-1: Product: syz [ 315.191460][ T5633] usb 4-1: Manufacturer: syz [ 315.191473][ T5633] usb 4-1: SerialNumber: syz [ 315.415103][T11241] loop0: detected capacity change from 0 to 32768 [ 315.450311][T11252] tipc: Started in network mode [ 315.450343][T11252] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 315.450401][T11252] tipc: Enabling of bearer rejected, failed to enable media [ 315.478937][T11241] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 315.608568][T11241] XFS (loop0): Ending clean mount [ 315.704749][T11241] XFS (loop0): User initiated shutdown received. [ 315.714459][T11241] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 315.714511][T11241] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 315.720183][ T5633] usb 4-1: USB disconnect, device number 15 [ 315.794700][ T5620] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 315.811498][ T6158] udevd[6158]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.920654][T11301] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1964'. [ 317.232862][T11316] loop3: detected capacity change from 0 to 512 [ 317.251303][T11316] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.1971: bg 0: block 7: invalid block bitmap [ 317.251339][T11316] loop3: lost filesystem error report for type 5 error -117 [ 317.264082][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 317.264109][ C1] EXT4-fs (loop3): initial error at time 1788920137: ext4_validate_block_bitmap:436 [ 317.264136][ C1] EXT4-fs (loop3): last error at time 1788920137: ext4_validate_block_bitmap:436 [ 317.306544][T11316] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 317.306572][T11316] loop3: lost filesystem error report for type 5 error -117 [ 317.307613][T11316] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #11: comm syz.3.1971: corrupted xattr block 95: invalid header [ 317.307646][T11316] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 317.351429][T11316] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 317.351532][T11316] EXT4-fs (loop3): 1 orphan inode deleted [ 317.381087][T11316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.413066][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 317.421723][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.421785][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.482503][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.571999][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 317.582317][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.582343][ T9] usb 3-1: Product: syz [ 317.582355][ T9] usb 3-1: Manufacturer: syz [ 317.582368][ T9] usb 3-1: SerialNumber: syz [ 317.585144][ T9] usb 3-1: config 0 descriptor?? [ 317.594067][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 317.605156][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.607331][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 317.607404][ T9] usb 3-1: media controller created [ 317.660666][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.666723][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 317.748373][ T9] DVB: Unable to find symbol mt352_attach() [ 317.835473][ T9] DVB: Unable to find symbol nxt6000_attach() [ 317.835491][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 317.847590][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 317.858213][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 317.858235][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 317.858249][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 317.858262][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 317.867760][ T9] usb 3-1: USB disconnect, device number 9 [ 318.061319][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 318.987306][T11354] loop3: detected capacity change from 0 to 16 [ 319.056868][T11356] loop1: detected capacity change from 0 to 256 [ 319.770026][T11361] loop1: detected capacity change from 0 to 32768 [ 320.226351][ T33] kauditd_printk_skb: 7 callbacks suppressed [ 320.226372][ T33] audit: type=1400 audit(1788920140.632:345): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11376 comm="syz.3.1997" [ 320.332868][T11380] tun0: tun_chr_ioctl cmd 1074025680 [ 320.441107][ T54] Bluetooth: hci0: unexpected event for opcode 0x080b [ 320.550482][ T8231] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.552210][ T8230] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.569883][ T8230] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.570455][ T8230] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.186599][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.199195][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.207951][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.209031][ T4934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.213304][ T4934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.838192][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.838311][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.838757][T11391] bridge_slave_0: entered allmulticast mode [ 330.842716][T11391] bridge_slave_0: entered promiscuous mode [ 330.857346][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.857449][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.857597][T11391] bridge_slave_1: entered allmulticast mode [ 330.861544][T11391] bridge_slave_1: entered promiscuous mode [ 330.936546][T11422] loop2: detected capacity change from 0 to 512 [ 330.992777][T11422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.992882][T11422] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.001034][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.068199][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.119215][T11391] team0: Port device team_slave_0 added [ 331.128662][T11391] team0: Port device team_slave_1 added [ 331.177928][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.205868][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.205886][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.205924][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.208510][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.208526][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.208552][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.344541][ T33] audit: type=1400 audit(1788920151.752:346): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11429 comm="syz.2.2012" name="p" offset=48 [ 331.464777][T11391] hsr_slave_0: entered promiscuous mode [ 331.472377][T11391] hsr_slave_1: entered promiscuous mode [ 331.474428][T11391] debugfs: 'hsr0' already exists in 'hsr' [ 331.474448][T11391] Cannot create hsr debugfs directory [ 331.592117][T11411] loop3: detected capacity change from 0 to 32768 [ 331.636760][T11411] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.768321][T11411] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 331.821620][T11411] XFS (loop3): Starting recovery (logdev: internal) [ 331.945086][T11411] XFS (loop3): Ending recovery (logdev: internal) [ 332.102438][ T5624] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.299676][ T4934] Bluetooth: hci5: command tx timeout [ 332.517245][T11391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.524912][T11391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.525886][T11391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.539275][T11391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.541565][T11391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 332.561268][T11391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.563350][T11391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.601598][T11391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.767107][T11391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.797917][T11462] loop2: detected capacity change from 0 to 64 [ 332.798375][T11391] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.836224][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.836289][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.870088][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.870150][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.955832][T11391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.955859][T11391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.533468][T11484] loop0: detected capacity change from 0 to 1024 [ 333.699772][ T988] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 333.800096][T11494] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 333.800142][T11494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.845897][T11493] loop1: detected capacity change from 0 to 4096 [ 333.858047][T11493] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 333.861312][ T988] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.862798][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.870772][ T988] usb 3-1: config 0 descriptor?? [ 333.882199][ T988] cp210x 3-1:0.0: cp210x converter detected [ 334.064600][T11493] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 334.334901][T11391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.347956][ T988] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 334.381037][ T4934] Bluetooth: hci5: command tx timeout [ 334.424067][ T988] usb 3-1: cp210x converter now attached to ttyUSB0 [ 334.575770][ T988] usb 3-1: USB disconnect, device number 10 [ 334.615535][ T988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.626099][ T988] cp210x 3-1:0.0: device disconnected [ 334.760657][T11391] veth0_vlan: entered promiscuous mode [ 334.787712][T11391] veth1_vlan: entered promiscuous mode [ 334.832869][T11391] veth0_macvtap: entered promiscuous mode [ 334.852073][T11391] veth1_macvtap: entered promiscuous mode [ 334.880952][T11391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.906398][T11391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.931937][ T8230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.932966][ T8230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.933003][ T8230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.933037][ T8230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.358235][ T8230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.358259][ T8230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.447257][ T8230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.447279][ T8230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.271898][T11546] loop3: detected capacity change from 0 to 512 [ 336.326075][T11546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.460897][ T4934] Bluetooth: hci5: command tx timeout [ 336.509860][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.771326][ T3108] hid-generic 0005:046D:0A0E.000A: item fetching failed at offset 0/1 [ 336.775197][ T3108] hid-generic 0005:046D:0A0E.000A: probe with driver hid-generic failed with error -22 [ 336.864425][T11565] loop3: detected capacity change from 0 to 2048 [ 336.891766][T11565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 336.938463][T11565] EXT4-fs (loop3): shut down requested (2) [ 336.989635][ T5821] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 337.018046][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 337.152589][ T5821] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 337.153796][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.153858][ T5821] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.153880][ T5821] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 337.153944][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.423719][ T5821] dvb_ttusb_budget: ttusb_init_controller: error [ 337.423742][ T5821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 337.527599][ T5821] DVB: Unable to find symbol stv0299_attach() [ 337.582152][ T5821] DVB: Unable to find symbol tda8083_attach() [ 337.582171][ T5821] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 337.701766][T11519] usb 3-1: USB disconnect, device number 11 [ 337.846114][T11585] loop1: detected capacity change from 0 to 256 [ 337.850542][T11585] exfat: Deprecated parameter 'namecase' [ 337.850596][T11585] exfat: Deprecated parameter 'namecase' [ 337.886150][T11585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9e96ffa0, utbl_chksum : 0xe619d30d) [ 338.539739][ T4934] Bluetooth: hci5: command tx timeout [ 338.712626][T11605] loop3: detected capacity change from 0 to 2048 [ 338.762395][T11605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.810886][T11605] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2070: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 338.846714][T11605] EXT4-fs (loop3): Remounting filesystem read-only [ 338.912023][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.056005][T11599] loop1: detected capacity change from 0 to 32768 [ 339.066487][T11599] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2067 (11599) [ 339.125264][T11599] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 339.125299][T11599] BTRFS info (device loop1): using blake2b checksum algorithm [ 339.304544][T11627] loop5: detected capacity change from 0 to 512 [ 339.334929][T11599] BTRFS info (device loop1): enabling ssd optimizations [ 339.334958][T11599] BTRFS info (device loop1): turning on async discard [ 339.334975][T11599] BTRFS info (device loop1): enabling free space tree [ 339.334993][T11599] BTRFS info (device loop1): use zlib compression, level 3 [ 339.398968][T11627] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2073: iget: bad i_size value: 38620345925642 [ 339.399013][T11627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 339.399465][T11627] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2073: couldn't read orphan inode 15 (err -117) [ 339.399560][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 339.399580][ C1] EXT4-fs (loop5): initial error at time 1788920159: ext4_orphan_get:1403: inode 15 [ 339.399614][ C1] EXT4-fs (loop5): last error at time 1788920159: ext4_orphan_get:1403: inode 15 [ 339.437137][T11627] loop5: lost filesystem error report for type 5 error -117 [ 339.461701][T11627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.557750][T11627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.2073: bg 0: block 5: invalid block bitmap [ 339.593876][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2076'. [ 339.593917][T11637] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2076'. [ 339.593934][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2076'. [ 339.654658][T11627] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 339.654693][T11627] EXT4-fs (loop5): This should not happen!! Data will be lost [ 339.654693][T11627] [ 339.654708][T11627] EXT4-fs (loop5): Total free blocks count 0 [ 339.654722][T11627] EXT4-fs (loop5): Free/Dirty block details [ 339.654735][T11627] EXT4-fs (loop5): free_blocks=0 [ 339.654750][T11627] EXT4-fs (loop5): dirty_blocks=1 [ 339.654762][T11627] EXT4-fs (loop5): Block reservation details [ 339.654772][T11627] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 339.828386][T11644] loop2: detected capacity change from 0 to 512 [ 339.851768][T11599] BTRFS error (device loop1): target device is invalid! [ 339.852589][T11391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.912581][T11644] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 339.912608][T11644] loop2: lost filesystem error report for type 5 error -12 [ 339.913283][T11644] EXT4-fs (loop2): 2 truncates cleaned up [ 339.971146][T11644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.973745][ T5626] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 340.276023][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.305296][T11652] xt_hashlimit: size too large, truncated to 1048576 [ 340.759643][ T5351] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 340.920610][ T5351] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 340.925795][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.925821][ T5351] usb 6-1: Product: syz [ 340.925836][ T5351] usb 6-1: Manufacturer: syz [ 340.925850][ T5351] usb 6-1: SerialNumber: syz [ 340.929217][ T5351] usb 6-1: config 0 descriptor?? [ 340.952382][ T5351] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 341.029323][T11669] loop2: detected capacity change from 0 to 256 [ 341.440776][T11676] kAFS: bad VL server IP address [ 341.736648][T11679] loop3: detected capacity change from 0 to 1024 [ 341.796952][ T5351] gspca_sunplus: reg_w_riv err -71 [ 341.797042][ T5351] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 341.820640][ T5351] usb 6-1: USB disconnect, device number 2 [ 341.822543][T11677] loop2: detected capacity change from 0 to 4096 [ 342.238508][T11677] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 342.344830][T11677] ntfs3(loop2): Failed to load $Extend (-22). [ 342.344859][T11677] ntfs3(loop2): Failed to initialize $Extend. [ 342.926993][T11693] kAFS: bad VL server IP address [ 343.389081][T11673] loop1: detected capacity change from 0 to 262144 [ 343.439366][T11673] F2FS-fs (loop1): invalid crc value [ 343.531106][T11673] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.534816][T11673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 344.001256][T11689] loop0: detected capacity change from 0 to 32768 [ 344.026065][T11689] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 4177a15f-a702-48fc-92dc-a01bd6781bc4 [ 344.026132][T11689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2098 (11689) [ 344.078240][T11689] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.078276][T11689] BTRFS info (device loop0): using sha256 checksum algorithm [ 344.318108][T11689] BTRFS info (device loop0): enabling ssd optimizations [ 344.318139][T11689] BTRFS info (device loop0): turning on sync discard [ 344.318155][T11689] BTRFS info (device loop0): enabling free space tree [ 344.318174][T11689] BTRFS info (device loop0): use zlib compression, level 3 [ 344.410106][ T33] audit: type=1800 audit(1788920164.812:347): pid=11689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2098" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 344.950110][ T5620] BTRFS info (device loop0): last unmount of filesystem 4177a15f-a702-48fc-92dc-a01bd6781bc4 [ 345.076801][T11739] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2115'. [ 345.534740][ T33] audit: type=1400 audit(1788920165.932:348): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=11742 comm="syz.2.2116" name="foo" offset=76 [ 346.052669][T11753] loop3: detected capacity change from 0 to 4096 [ 346.095817][T11753] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 346.172314][T11753] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 346.271168][T11753] ntfs3(loop3): ino=1e, mi_enum_attr [ 346.415613][ T33] audit: type=1326 audit(1788920166.822:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.415837][ T33] audit: type=1326 audit(1788920166.822:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.416388][T11761] loop3: detected capacity change from 0 to 512 [ 346.485473][T11761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.485502][T11761] EXT4-fs (loop3): Invalid default hash set in the superblock [ 346.508325][ T33] audit: type=1326 audit(1788920166.912:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.508385][ T33] audit: type=1326 audit(1788920166.912:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.509278][ T33] audit: type=1326 audit(1788920166.912:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.509326][ T33] audit: type=1326 audit(1788920166.912:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.518935][ T33] audit: type=1326 audit(1788920166.922:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 346.526665][ T33] audit: type=1326 audit(1788920166.922:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.5.2123" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b8f9e159 code=0x7ffc0000 [ 347.668073][T11787] loop0: detected capacity change from 0 to 512 [ 347.726860][T11787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.735597][T11787] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.812598][T11788] loop2: detected capacity change from 0 to 4096 [ 347.886807][T11797] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.044226][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.909192][T11827] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 349.059808][T11833] loop3: detected capacity change from 0 to 512 [ 349.067861][T11833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.098739][T11833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 349.098897][T11833] System zones: 1-12 [ 349.099382][T11833] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2153: bad orphan inode 131072 [ 349.099410][T11833] loop3: lost filesystem error report for type 5 error -117 [ 349.099584][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 349.099604][ C0] EXT4-fs (loop3): initial error at time 1788920169: ext4_orphan_get:1429 [ 349.099629][ C0] EXT4-fs (loop3): last error at time 1788920169: ext4_orphan_get:1429 [ 349.160667][T11833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.223955][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.357949][T11839] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.743197][T11823] loop2: detected capacity change from 0 to 32768 [ 349.828131][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 349.828162][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 349.828330][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 349.875640][T11829] loop5: detected capacity change from 0 to 32768 [ 349.984425][T11829] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 350.052210][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052253][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052277][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052300][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052324][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052348][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052371][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052393][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052415][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.052439][ T5751] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 350.147248][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 350.147288][ T33] audit: type=1326 audit(1788920170.552:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.147572][ T33] audit: type=1326 audit(1788920170.552:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.154142][ T5751] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 350.161536][ T33] audit: type=1326 audit(1788920170.572:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.161924][ T33] audit: type=1326 audit(1788920170.572:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.168885][ T33] audit: type=1326 audit(1788920170.572:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.202311][ T33] audit: type=1326 audit(1788920170.612:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.202360][ T33] audit: type=1326 audit(1788920170.612:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.213222][ T33] audit: type=1326 audit(1788920170.622:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.213433][ T33] audit: type=1326 audit(1788920170.622:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.222234][ T33] audit: type=1326 audit(1788920170.632:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.3.2163" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9276d9e159 code=0x7ffc0000 [ 350.510369][T11860] fido_id[11860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 350.683537][T11864] loop3: detected capacity change from 0 to 164 [ 350.790396][T11865] (syz.5.2151,11865,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 350.972711][T11391] ocfs2: Unmounting device (7,5) on (node local) [ 351.382769][T11862] loop1: detected capacity change from 0 to 32768 [ 351.416328][T11862] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 351.458849][T11862] XFS (loop1): Ending clean mount [ 351.524275][T11862] XFS (loop1): User initiated shutdown received. [ 351.527470][T11862] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 351.527647][T11862] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 351.734252][ T5626] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 352.042011][T11898] loop0: detected capacity change from 0 to 4096 [ 352.174484][T11904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.497612][T11914] loop5: detected capacity change from 0 to 64 [ 352.526729][T11914] MINIX-fs: mounting file system with errors, running fsck is recommended [ 352.571730][ T5751] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 352.734469][ T5751] usb 2-1: Using ep0 maxpacket: 8 [ 352.735592][ T5751] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.755428][ T5751] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.755455][ T5751] usb 2-1: config 179 has no interface number 0 [ 352.755533][ T5751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.755559][ T5751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.755609][ T5751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.755633][ T5751] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.755688][ T5751] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.755755][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.852778][T11907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.098913][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.098973][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.099004][ T5751] usb 2-1: USB disconnect, device number 14 [ 353.444741][ T4934] Bluetooth: hci1: unexpected event for opcode 0x080b [ 353.449047][T11938] loop5: detected capacity change from 0 to 256 [ 353.484643][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 353.544748][T11933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 353.605452][T11941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.895102][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 354.187873][T11961] loop1: detected capacity change from 0 to 512 [ 354.224358][T11961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.2204: bg 0: block 7: invalid block bitmap [ 354.224394][T11961] loop1: lost filesystem error report for type 5 error -117 [ 354.224939][T11961] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 354.224962][T11961] loop1: lost filesystem error report for type 5 error -117 [ 354.229557][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 354.229580][ C1] EXT4-fs (loop1): initial error at time 1788920174: ext4_validate_block_bitmap:436 [ 354.229604][ C1] EXT4-fs (loop1): last error at time 1788920174: ext4_mb_clear_bb:6680 [ 354.295801][T11961] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #11: comm syz.1.2204: corrupted xattr block 95: invalid header [ 354.295835][T11961] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 354.296240][T11961] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 354.296327][T11961] EXT4-fs (loop1): 1 orphan inode deleted [ 354.326857][T11961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.495972][T11974] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 354.597775][T11976] loop5: detected capacity change from 0 to 764 [ 354.604353][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.668844][T11976] isofs: Unable to find the "." directory for NFS. [ 354.783565][T11979] loop0: detected capacity change from 0 to 512 [ 354.883060][T11979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.2210: bg 0: block 104: invalid block bitmap [ 354.883097][T11979] loop0: lost filesystem error report for type 5 error -117 [ 354.889535][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 354.889556][ C1] EXT4-fs (loop0): initial error at time 1788920175: ext4_validate_block_bitmap:436 [ 354.889578][ C1] EXT4-fs (loop0): last error at time 1788920175: ext4_validate_block_bitmap:436 [ 354.897237][T11979] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 354.897258][T11979] loop0: lost filesystem error report for type 5 error -117 [ 354.897647][T11979] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2210: invalid indirect mapped block 1 (level 1) [ 354.897676][T11979] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 354.903986][T11979] EXT4-fs (loop0): 1 truncate cleaned up [ 354.915763][T11979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.946320][T11984] loop5: detected capacity change from 0 to 256 [ 355.104018][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.294302][T11988] loop1: detected capacity change from 0 to 128 [ 355.443854][T11988] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 355.444134][T11988] hpfs: filesystem error: improperly stopped [ 355.444153][T11988] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 355.444168][T11988] hpfs: You really don't want any checks? You are crazy... [ 355.444592][T11988] hpfs: hpfs_map_sector(): read error [ 355.444605][T11988] hpfs: code page support is disabled [ 355.498809][T11988] hpfs: hpfs_map_4sectors(): unaligned read [ 355.513320][T11988] hpfs: hpfs_map_4sectors(): unaligned read [ 355.513339][T11988] hpfs: filesystem error: unable to find root dir [ 355.716317][T12003] loop1: detected capacity change from 0 to 128 [ 355.734828][T12004] loop2: detected capacity change from 0 to 8 [ 355.750542][T12003] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 355.753188][T12003] ext4 filesystem being mounted at /452/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.840657][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 355.840677][ T33] audit: type=1800 audit(1788920176.252:372): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2223" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 355.904750][T12004] SQUASHFS error: Failed to read block 0x260685: -5 [ 355.933358][T12004] SQUASHFS error: Unable to read metadata cache entry [260685] [ 355.933380][T12004] SQUASHFS error: Unable to read directory block [260685:0] [ 355.943504][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.478869][T12021] loop1: detected capacity change from 0 to 2048 [ 356.569292][T12021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.644266][ T33] audit: type=1800 audit(1788920177.052:373): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2238" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 356.671538][T12025] loop5: detected capacity change from 0 to 128 [ 356.705813][T12025] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 357.010061][T11996] F2FS-fs (loop0): invalid crc value [ 357.320444][T11996] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 357.411632][T11996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 357.675734][ T5620] syz-executor: attempt to access beyond end of device [ 357.675734][ T5620] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 357.708039][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 357.708074][ T5620] Tainted: [L]=SOFTLOCKUP [ 357.708081][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.708092][ T5620] Call Trace: [ 357.708100][ T5620] [ 357.708108][ T5620] dump_stack_lvl+0xe8/0x150 [ 357.708196][ T5620] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 357.708307][ T5620] f2fs_write_end_bio+0x1211/0x16e0 [ 357.708374][ T5620] ? blkg_put+0x22/0x240 [ 357.708467][ T5620] __submit_merged_bio+0x258/0x6a0 [ 357.708490][ T5620] ? rcu_is_watching+0x16/0xb0 [ 357.708551][ T5620] __submit_merged_write_cond+0x3c9/0x4e0 [ 357.708583][ T5620] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 357.708632][ T5620] f2fs_write_data_pages+0x2a1d/0x36f0 [ 357.708665][ T5620] ? __lock_acquire+0x747/0x2de0 [ 357.708737][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 357.708760][ T5620] ? is_bpf_text_address+0x26/0x2b0 [ 357.708818][ T5620] ? arch_stack_walk+0xfb/0x150 [ 357.708899][ T5620] ? add_lock_to_list+0xc7/0x100 [ 357.708929][ T5620] ? lockdep_unlock+0x5c/0xd0 [ 357.708947][ T5620] ? __lock_acquire+0x1511/0x2de0 [ 357.709002][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 357.709045][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 357.709075][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 357.709103][ T5620] do_writepages+0x338/0x560 [ 357.709153][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 357.709186][ T5620] filemap_fdatawrite+0x1e9/0x2f0 [ 357.709217][ T5620] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 357.709293][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 357.709326][ T5620] f2fs_sync_dirty_inodes+0x30e/0x830 [ 357.709396][ T5620] f2fs_write_checkpoint+0xa38/0x2710 [ 357.709421][ T5620] ? __lock_acquire+0x747/0x2de0 [ 357.709484][ T5620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 357.709568][ T5620] kill_f2fs_super+0x2dd/0x700 [ 357.709606][ T5620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 357.709645][ T5620] ? call_rcu+0x64d/0x8b0 [ 357.709682][ T5620] ? lockdep_hardirqs_on+0x7b/0x110 [ 357.709802][ T5620] deactivate_locked_super+0xbc/0x110 [ 357.709856][ T5620] cleanup_mnt+0x3d3/0x460 [ 357.709887][ T5620] task_work_run+0x1d9/0x260 [ 357.709927][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 357.709963][ T5620] exit_to_user_mode_loop+0x204/0x770 [ 357.709987][ T5620] ? rcu_is_watching+0x16/0xb0 [ 357.710017][ T5620] do_syscall_64+0x328/0x520 [ 357.710059][ T5620] ? trace_irq_disable+0x3b/0x140 [ 357.710082][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.710121][ T5620] ? clear_bhb_loop+0x70/0xc0 [ 357.710146][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.710165][ T5620] RIP: 0033:0x7fc56af9f397 [ 357.710186][ T5620] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 357.710202][ T5620] RSP: 002b:00007ffe4d200b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 357.710225][ T5620] RAX: 0000000000000000 RBX: 00007fc56b03448b RCX: 00007fc56af9f397 [ 357.710239][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4d200be0 [ 357.710251][ T5620] RBP: 00007ffe4d200be0 R08: 00007ffe4d201be0 R09: 00000000ffffffff [ 357.710265][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4d201c70 [ 357.710277][ T5620] R13: 00007fc56b03448b R14: 00000000000574a0 R15: 00007ffe4d201cb0 [ 357.710313][ T5620] [ 357.856761][ T5620] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 358.390977][T12042] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 358.513374][T12042] XFS (loop1): Ending clean mount [ 358.547309][T12042] XFS (loop1): Quotacheck needed: Please wait. [ 358.761320][T12042] XFS (loop1): Quotacheck: Done. [ 358.784108][T12073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2243'. [ 359.184535][ T5626] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 359.587937][T12069] set_capacity_and_notify: 2 callbacks suppressed [ 359.587959][T12069] loop2: detected capacity change from 0 to 32768 [ 359.635707][T12069] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 359.721673][T12093] loop5: detected capacity change from 0 to 1024 [ 359.966397][T12093] hfsplus: xattr search failed [ 359.994923][T12069] (syz.2.2245,12069,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options [ 360.124198][T12099] loop1: detected capacity change from 0 to 128 [ 360.136664][T12099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 360.182057][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 360.218375][T12088] loop3: detected capacity change from 0 to 32768 [ 360.227877][T12088] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2255 (12088) [ 360.259371][T12088] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 360.260974][T12088] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 360.411675][T12088] BTRFS info (device loop3): enabling ssd optimizations [ 360.411707][T12088] BTRFS info (device loop3): turning on async discard [ 360.411745][T12088] BTRFS info (device loop3): enabling free space tree [ 361.263656][ T5624] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 361.613304][ T5751] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 361.759617][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 361.760493][ T5751] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 361.761734][ T5751] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 361.761758][ T5751] usb 3-1: config 179 has no interface number 0 [ 361.761801][ T5751] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 361.761827][ T5751] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 361.761853][ T5751] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.761878][ T5751] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 361.761904][ T5751] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 361.761946][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.766364][T12132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.863051][T11519] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 362.040966][T11519] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 362.041011][T11519] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 362.042445][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.042494][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.042521][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.044984][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.045034][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.045072][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.046389][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.046437][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.046463][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.047494][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.047541][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.047566][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.048689][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.048737][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.048763][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.051392][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.051440][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.051465][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.091475][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.091527][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.091553][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.125403][ T3108] usb 3-1: USB disconnect, device number 12 [ 362.125463][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 362.125506][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 362.126851][T11519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.126904][T11519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.126930][T11519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.216547][T11519] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 362.216577][T11519] usb 4-1: Product: syz [ 362.216593][T11519] usb 4-1: Manufacturer: syz [ 362.216607][T11519] usb 4-1: SerialNumber: syz [ 362.357370][T11519] usb 4-1: config 0 descriptor?? [ 362.371476][T11519] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 362.645192][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 362.645642][ T3108] usb 4-1: USB disconnect, device number 16 [ 362.664230][ T3108] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 362.794071][T12158] loop5: detected capacity change from 0 to 4096 [ 362.832047][T12159] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.898660][T12163] program syz.2.2278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.226493][ T33] audit: type=1400 audit(1788920183.632:374): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=12168 comm="syz.1.2282" name="p" offset=79 [ 363.492955][T12177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2286'. [ 363.555970][T12179] loop1: detected capacity change from 0 to 512 [ 363.594584][T12179] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 363.594613][T12179] loop1: lost filesystem error report for type 5 error -12 [ 363.599561][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 363.599585][ C1] EXT4-fs (loop1): initial error at time 1788920184: ext4_process_orphan:346 [ 363.599612][ C1] EXT4-fs (loop1): last error at time 1788920184: ext4_process_orphan:346 [ 363.670024][T12179] EXT4-fs (loop1): 2 truncates cleaned up [ 363.673450][T12179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.831827][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.868350][T11519] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 364.007344][T12173] loop2: detected capacity change from 0 to 32768 [ 364.024589][T11519] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 364.025680][T11519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.027454][T11519] usb 6-1: config 0 descriptor?? [ 364.038241][T11519] cp210x 6-1:0.0: cp210x converter detected [ 364.095892][T12173] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 364.176825][T12173] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792 [ 364.176873][T12173] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 364.176885][T12173] OCFS2: File system is now read-only. [ 364.176896][T12173] (syz.2.2283,12173,1):ocfs2_search_chain:1935 ERROR: status = -30 [ 364.176920][T12173] (syz.2.2283,12173,1):ocfs2_search_chain:2058 ERROR: status = -30 [ 364.177000][T12173] (syz.2.2283,12173,1):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30 [ 364.177022][T12173] (syz.2.2283,12173,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 364.177043][T12173] (syz.2.2283,12173,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 364.177063][T12173] (syz.2.2283,12173,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 364.177082][T12173] (syz.2.2283,12173,1):ocfs2_block_group_alloc_contig:553 ERROR: status = -30 [ 364.177102][T12173] (syz.2.2283,12173,1):ocfs2_block_group_alloc:827 ERROR: status = -30 [ 364.177212][T12173] (syz.2.2283,12173,1):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 364.177231][T12173] (syz.2.2283,12173,1):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 364.177251][T12173] (syz.2.2283,12173,1):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 364.177272][T12173] (syz.2.2283,12173,1):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 364.177334][T12173] (syz.2.2283,12173,1):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 364.177356][T12173] (syz.2.2283,12173,1):ocfs2_expand_inline_dir:2985 ERROR: status = -30 [ 364.177375][T12173] (syz.2.2283,12173,1):ocfs2_extend_dir:3349 ERROR: status = -30 [ 364.177396][T12173] (syz.2.2283,12173,1):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30 [ 364.177416][T12173] (syz.2.2283,12173,1):ocfs2_mknod:303 ERROR: status = -30 [ 364.177438][T12173] (syz.2.2283,12173,1):ocfs2_mknod:508 ERROR: status = -30 [ 364.177457][T12173] (syz.2.2283,12173,1):ocfs2_mkdir:664 ERROR: status = -30 [ 364.466330][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 364.554021][T11519] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 364.572870][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 364.598408][T11519] usb 6-1: cp210x converter now attached to ttyUSB0 [ 364.632489][T12203] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.797695][T11519] usb 6-1: USB disconnect, device number 3 [ 364.835217][T11519] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.835910][T11519] cp210x 6-1:0.0: device disconnected [ 365.109611][ T5633] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 365.109642][ T3108] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 365.147437][T12223] loop2: detected capacity change from 0 to 136 [ 365.181909][T12223] rock: directory entry would overflow storage [ 365.181925][T12223] rock: sig=0x4f50, size=4, remaining=3 [ 365.181939][T12223] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 365.259744][ T3108] usb 2-1: Using ep0 maxpacket: 32 [ 365.260503][ T3108] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 365.261831][ T3108] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 365.261855][ T3108] usb 2-1: config 0 has no interface number 0 [ 365.261900][ T3108] usb 2-1: config 0 interface 184 has no altsetting 0 [ 365.264231][ T3108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.264256][ T3108] usb 2-1: Product: syz [ 365.264270][ T3108] usb 2-1: Manufacturer: syz [ 365.264284][ T3108] usb 2-1: SerialNumber: syz [ 365.270283][ T5633] usb 4-1: Using ep0 maxpacket: 16 [ 365.271056][ T5633] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 365.272431][ T5633] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.272457][ T5633] usb 4-1: config 0 interface 0 has no altsetting 0 [ 365.272486][ T5633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.278476][ T5633] usb 4-1: config 0 descriptor?? [ 365.301546][ T3108] usb 2-1: config 0 descriptor?? [ 365.303943][T12225] loop2: detected capacity change from 0 to 512 [ 365.304870][T12225] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.323617][T12225] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 365.331968][T12225] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 365.332345][T12225] EXT4-fs (loop2): orphan cleanup on readonly fs [ 365.380460][T12225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.2307: Invalid block bitmap block 0 in block_group 0 [ 365.380519][T12225] loop2: lost filesystem error report for type 5 error -117 [ 365.399517][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 365.399539][ C0] EXT4-fs (loop2): last error at time 1788920185: ext4_read_block_bitmap_nowait:487 [ 365.421280][T12225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.2307: Invalid block bitmap block 0 in block_group 0 [ 365.421312][T12225] loop2: lost filesystem error report for type 5 error -117 [ 365.444264][T12225] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.2307: Invalid block bitmap block 0 in block_group 0 [ 365.444320][T12225] loop2: lost filesystem error report for type 5 error -117 [ 365.471353][T12225] Quota error (device loop2): write_blk: dquota write failed [ 365.471475][T12225] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 365.471510][T12225] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2307: Failed to acquire dquot type 1 [ 365.475173][T12225] loop2: lost filesystem error report for type 5 error -28 [ 365.486781][T12225] EXT4-fs (loop2): 1 orphan inode deleted [ 365.489250][ T8229] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 365.489356][ T8229] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:17: Failed to release dquot type 1 [ 365.489375][ T8229] loop2: lost filesystem error report for type 5 error -117 [ 365.537464][T12225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.572744][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 365.639716][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.765075][ T5633] hid_parser_main: 29 callbacks suppressed [ 365.765103][ T5633] hid-steelseries-arctis 0003:1038:12C2.000C: unknown main item tag 0x0 [ 365.765135][ T5633] hid-steelseries-arctis 0003:1038:12C2.000C: unknown main item tag 0x0 [ 365.765159][ T5633] hid-steelseries-arctis 0003:1038:12C2.000C: unexpected long global item [ 365.765972][ T5633] hid-steelseries-arctis 0003:1038:12C2.000C: probe with driver hid-steelseries-arctis failed with error -22 [ 365.829627][ T33] audit: type=1326 audit(1788920186.232:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12232 comm="syz.2.2310" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f959e159 code=0x0 [ 365.942904][T12238] loop5: detected capacity change from 0 to 64 [ 365.958219][ T5633] usb 4-1: USB disconnect, device number 17 [ 366.057045][T11391] hfs: request for non-existent node 131072 in B*Tree [ 366.195193][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 366.195239][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 366.197349][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 366.197378][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 366.197397][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 366.197415][ T3108] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 366.197931][ T3108] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 366.276457][ T3108] usb 2-1: USB disconnect, device number 15 [ 366.864265][T12262] loop1: detected capacity change from 0 to 128 [ 366.929432][T12262] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 366.932443][T12262] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.095346][T12261] can0: slcan on ttyS3. [ 367.265235][T12273] loop5: detected capacity change from 0 to 4096 [ 367.366331][T12276] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.776976][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.084478][T12259] can0 (unregistered): slcan off ttyS3. [ 368.134734][T12294] loop5: detected capacity change from 0 to 128 [ 368.169276][T12294] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 368.169333][T12294] hpfs: filesystem error: improperly stopped [ 368.169349][T12294] hpfs: You really don't want any checks? You are crazy... [ 368.169968][T12294] hpfs: hpfs_map_sector(): read error [ 368.169981][T12294] hpfs: code page support is disabled [ 368.170086][T12294] hpfs: hpfs_map_4sectors(): unaligned read [ 368.170149][T12294] hpfs: hpfs_map_4sectors(): unaligned read [ 368.170158][T12294] hpfs: filesystem error: unable to find root dir [ 368.456251][T12302] loop2: detected capacity change from 0 to 512 [ 368.475311][T12302] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.2332: inode has both inline data and extents flags [ 368.475345][T12302] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 368.475643][T12302] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2332: couldn't read orphan inode 15 (err -117) [ 368.475673][T12302] loop2: lost filesystem error report for type 5 error -117 [ 368.478267][T12302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.665169][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.041267][T12323] loop1: detected capacity change from 0 to 512 [ 369.061453][T12323] EXT4-fs (loop1): orphan cleanup on readonly fs [ 369.062368][T12323] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2337: ea_inode with extended attributes [ 369.062399][T12323] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 369.064806][T12323] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.2337: error while reading EA inode 11 err=-117 [ 369.064839][T12323] loop1: lost filesystem error report for type 5 error -117 [ 369.066941][T12323] EXT4-fs (loop1): 1 orphan inode deleted [ 369.136671][T12323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 369.435944][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.923816][T12350] loop1: detected capacity change from 0 to 1024 [ 370.888942][T12374] loop5: detected capacity change from 0 to 4096 [ 371.108698][T12380] loop0: detected capacity change from 0 to 256 [ 371.121579][T12380] exfat: Deprecated parameter 'namecase' [ 371.121649][T12380] exfat: Deprecated parameter 'namecase' [ 371.208828][T12380] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 371.374409][T12368] loop3: detected capacity change from 0 to 32768 [ 371.569809][T12388] loop0: detected capacity change from 0 to 64 [ 372.003122][T12370] loop1: detected capacity change from 0 to 40427 [ 372.017880][T12370] F2FS-fs (loop1): invalid crc value [ 372.137172][T12370] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.170359][T12370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 372.406453][ T33] audit: type=1800 audit(1788920192.812:376): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2356" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 372.558298][T12417] loop5: detected capacity change from 0 to 64 [ 372.642441][ T5626] syz-executor: attempt to access beyond end of device [ 372.642441][ T5626] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 372.647222][T12417] hfs: request for non-existent node 131072 in B*Tree [ 372.647236][T12417] hfs: request for non-existent node 131072 in B*Tree [ 372.653773][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 372.653803][ T5626] Tainted: [L]=SOFTLOCKUP [ 372.653809][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.653819][ T5626] Call Trace: [ 372.653827][ T5626] [ 372.653835][ T5626] dump_stack_lvl+0xe8/0x150 [ 372.653867][ T5626] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 372.653895][ T5626] f2fs_write_end_bio+0x1211/0x16e0 [ 372.653921][ T5626] ? blkg_put+0x22/0x240 [ 372.653958][ T5626] __submit_merged_bio+0x258/0x6a0 [ 372.653985][ T5626] ? rcu_is_watching+0x16/0xb0 [ 372.654013][ T5626] f2fs_submit_merged_write+0x27d/0x380 [ 372.654039][ T5626] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 372.654078][ T5626] f2fs_sync_node_pages+0x104b/0x1200 [ 372.654172][ T5626] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 372.654238][ T5626] f2fs_write_checkpoint+0xf8c/0x2710 [ 372.654260][ T5626] ? __lock_acquire+0x747/0x2de0 [ 372.654314][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 372.654398][ T5626] kill_f2fs_super+0x2dd/0x700 [ 372.654431][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 372.654467][ T5626] ? call_rcu+0x64d/0x8b0 [ 372.654489][ T5626] ? lockdep_hardirqs_on+0x7b/0x110 [ 372.654523][ T5626] deactivate_locked_super+0xbc/0x110 [ 372.654547][ T5626] cleanup_mnt+0x3d3/0x460 [ 372.654573][ T5626] task_work_run+0x1d9/0x260 [ 372.654598][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 372.654630][ T5626] exit_to_user_mode_loop+0x204/0x770 [ 372.654651][ T5626] ? rcu_is_watching+0x16/0xb0 [ 372.654678][ T5626] do_syscall_64+0x328/0x520 [ 372.654695][ T5626] ? trace_irq_disable+0x3b/0x140 [ 372.654713][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.654731][ T5626] ? clear_bhb_loop+0x70/0xc0 [ 372.654753][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.654771][ T5626] RIP: 0033:0x7f15b9d9f397 [ 372.654789][ T5626] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 372.654803][ T5626] RSP: 002b:00007ffcfc0ec4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 372.654823][ T5626] RAX: 0000000000000000 RBX: 00007f15b9e3448b RCX: 00007f15b9d9f397 [ 372.654835][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc0ec570 [ 372.654846][ T5626] RBP: 00007ffcfc0ec570 R08: 00007ffcfc0ed570 R09: 00000000ffffffff [ 372.654858][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc0ed600 [ 372.654870][ T5626] R13: 00007f15b9e3448b R14: 000000000005aeaa R15: 00007ffcfc0ed640 [ 372.654902][ T5626] [ 372.661074][ T5626] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 372.661167][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 372.661190][ T5626] Tainted: [L]=SOFTLOCKUP [ 372.661197][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.661206][ T5626] Call Trace: [ 372.661213][ T5626] [ 372.661220][ T5626] dump_stack_lvl+0xe8/0x150 [ 372.661249][ T5626] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 372.661275][ T5626] f2fs_write_end_bio+0x1211/0x16e0 [ 372.661322][ T5626] __submit_merged_bio+0x258/0x6a0 [ 372.661341][ T5626] ? rcu_is_watching+0x16/0xb0 [ 372.661369][ T5626] f2fs_submit_merged_write+0x27d/0x380 [ 372.661395][ T5626] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 372.661433][ T5626] f2fs_sync_node_pages+0x104b/0x1200 [ 372.661473][ T5626] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 372.661539][ T5626] f2fs_write_checkpoint+0xf8c/0x2710 [ 372.661561][ T5626] ? __lock_acquire+0x747/0x2de0 [ 372.661615][ T5626] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 372.661696][ T5626] kill_f2fs_super+0x2dd/0x700 [ 372.661728][ T5626] ? __pfx_kill_f2fs_super+0x10/0x10 [ 372.661764][ T5626] ? call_rcu+0x64d/0x8b0 [ 372.661785][ T5626] ? lockdep_hardirqs_on+0x7b/0x110 [ 372.661818][ T5626] deactivate_locked_super+0xbc/0x110 [ 372.661840][ T5626] cleanup_mnt+0x3d3/0x460 [ 372.661866][ T5626] task_work_run+0x1d9/0x260 [ 372.661890][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 372.661922][ T5626] exit_to_user_mode_loop+0x204/0x770 [ 372.661941][ T5626] ? rcu_is_watching+0x16/0xb0 [ 372.661968][ T5626] do_syscall_64+0x328/0x520 [ 372.661993][ T5626] ? trace_irq_disable+0x3b/0x140 [ 372.662011][ T5626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.662029][ T5626] ? clear_bhb_loop+0x70/0xc0 [ 372.662051][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.662067][ T5626] RIP: 0033:0x7f15b9d9f397 [ 372.662083][ T5626] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 372.662097][ T5626] RSP: 002b:00007ffcfc0ec4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 372.662116][ T5626] RAX: 0000000000000000 RBX: 00007f15b9e3448b RCX: 00007f15b9d9f397 [ 372.662127][ T5626] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc0ec570 [ 372.662138][ T5626] RBP: 00007ffcfc0ec570 R08: 00007ffcfc0ed570 R09: 00000000ffffffff [ 372.662149][ T5626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc0ed600 [ 372.662160][ T5626] R13: 00007f15b9e3448b R14: 000000000005aeaa R15: 00007ffcfc0ed640 [ 372.662192][ T5626] [ 372.662198][ T5626] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 372.750827][ T5351] loop1: lost filesystem error report for type 5 error -108 [ 373.686745][T12432] loop3: detected capacity change from 0 to 32768 [ 373.938863][T12437] ima: policy update failed [ 373.939057][ T33] audit: type=1802 audit(1788920194.342:377): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2384" res=0 errno=0 [ 374.085847][T12444] loop1: detected capacity change from 0 to 4096 [ 374.124484][T12446] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.956915][T12448] loop3: detected capacity change from 0 to 32768 [ 374.971309][T12448] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2385 (12448) [ 374.976679][T12448] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 374.976711][T12448] BTRFS info (device loop3): using blake2b checksum algorithm [ 375.082730][T12448] BTRFS info (device loop3): enabling ssd optimizations [ 375.082762][T12448] BTRFS info (device loop3): turning on async discard [ 375.082779][T12448] BTRFS info (device loop3): enabling free space tree [ 375.082864][T12448] BTRFS info (device loop3): use zlib compression, level 3 [ 375.364055][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'. [ 375.477082][ T5624] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 375.626954][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 376.578899][T12499] loop0: detected capacity change from 0 to 32768 [ 376.591923][T12499] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2405 (12499) [ 376.618335][T12499] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 376.618371][T12499] BTRFS info (device loop0): using blake2b checksum algorithm [ 376.653596][T12497] loop5: detected capacity change from 0 to 32768 [ 376.702143][T12497] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 376.741970][T12499] BTRFS info (device loop0): enabling ssd optimizations [ 376.742000][T12499] BTRFS info (device loop0): turning on async discard [ 376.742017][T12499] BTRFS info (device loop0): enabling free space tree [ 376.742036][T12499] BTRFS info (device loop0): use zstd compression, level 3 [ 376.844535][ T33] audit: type=1800 audit(1788920197.252:378): pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2405" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 376.945652][T12497] XFS (loop5): Ending clean mount [ 377.034442][T11391] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.097504][T12501] loop3: detected capacity change from 0 to 32768 [ 377.131525][T12501] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.346474][T12501] XFS (loop3): Ending clean mount [ 377.352259][T12501] XFS (loop3): Quotacheck needed: Please wait. [ 377.457028][T12501] XFS (loop3): Quotacheck: Done. [ 377.605910][ T5624] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.693942][T12545] sctp: [Deprecated]: syz.1.2415 (pid 12545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.693942][T12545] Use struct sctp_sack_info instead [ 377.890880][ T5620] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 378.017506][T12549] loop1: detected capacity change from 0 to 16 [ 378.031814][T12549] erofs (device loop1): mounted with root inode @ nid 36. [ 378.497731][T12557] program syz.0.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.845394][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'. [ 378.871154][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.871211][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.098605][T12562] loop0: detected capacity change from 0 to 32768 [ 379.124907][T12562] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2422 (12562) [ 379.157965][T12562] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 379.157999][T12562] BTRFS info (device loop0): using blake2b checksum algorithm [ 379.365520][T12562] BTRFS info (device loop0): enabling ssd optimizations [ 379.365540][T12562] BTRFS info (device loop0): enabling free space tree [ 379.580740][ T5620] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 380.288023][T12612] loop0: detected capacity change from 0 to 4096 [ 380.353869][T12613] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.346745][T12617] loop1: detected capacity change from 0 to 32768 [ 381.364258][T12617] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 3d30c7a7-fce0-438b-8db5-186cd5daea6d [ 381.364327][T12617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2442 (12617) [ 381.386896][T12617] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.386927][T12617] BTRFS info (device loop1): using sha256 checksum algorithm [ 381.512337][T12617] BTRFS info (device loop1): enabling ssd optimizations [ 381.512367][T12617] BTRFS info (device loop1): turning on sync discard [ 381.512383][T12617] BTRFS info (device loop1): enabling free space tree [ 381.512401][T12617] BTRFS info (device loop1): use zlib compression, level 3 [ 381.549769][ T5351] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 381.703627][ T5351] usb 6-1: Using ep0 maxpacket: 32 [ 381.706164][ T5351] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 381.710121][ T5351] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 381.710148][ T5351] usb 6-1: config 0 has no interface number 0 [ 381.710189][ T5351] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.710211][ T5351] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 381.710236][ T5351] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 10 [ 381.710262][ T5351] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 57855, setting to 1024 [ 381.710288][ T5351] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.715796][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.715819][ T5351] usb 6-1: Product: syz [ 381.715833][ T5351] usb 6-1: Manufacturer: syz [ 381.715846][ T5351] usb 6-1: SerialNumber: syz [ 381.725762][ T5351] usb 6-1: config 0 descriptor?? [ 381.764937][ T5351] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input34 [ 382.819641][ T5821] usb 6-1: USB disconnect, device number 4 [ 382.866447][T12659] loop3: detected capacity change from 0 to 32768 [ 382.878954][ T5626] BTRFS info (device loop1): last unmount of filesystem 3d30c7a7-fce0-438b-8db5-186cd5daea6d [ 382.930580][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.930580][T12659] [ 382.936801][T12659] ERROR: (device loop3): remounting filesystem as read-only [ 382.936819][T12659] xtLookup: xtSearch returned -5 [ 382.936830][T12659] free_index: error reading directory table [ 382.936840][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.936840][T12659] [ 382.936873][T12659] xtLookup: xtSearch returned -5 [ 382.936881][T12659] free_index: error reading directory table [ 382.936890][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.936890][T12659] [ 382.936928][T12659] xtLookup: xtSearch returned -5 [ 382.936937][T12659] free_index: error reading directory table [ 382.936945][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.936945][T12659] [ 382.936971][T12659] xtLookup: xtSearch returned -5 [ 382.936978][T12659] free_index: error reading directory table [ 382.936987][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.936987][T12659] [ 382.937013][T12659] xtLookup: xtSearch returned -5 [ 382.937020][T12659] free_index: error reading directory table [ 382.937071][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.937071][T12659] [ 382.937101][T12659] xtLookup: xtSearch returned -5 [ 382.937130][T12659] add_index: get/read_metapage failed! [ 382.937143][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.937143][T12659] [ 382.937169][T12659] xtLookup: xtSearch returned -5 [ 382.937178][T12659] free_index: error reading directory table [ 382.937186][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.937186][T12659] [ 382.937213][T12659] xtLookup: xtSearch returned -5 [ 382.937222][T12659] free_index: error reading directory table [ 382.937229][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.937229][T12659] [ 382.937255][T12659] xtLookup: xtSearch returned -5 [ 382.937263][T12659] free_index: error reading directory table [ 382.959254][T12659] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt [ 382.959254][T12659] [ 382.959290][T12659] xtLookup: xtSearch returned -5 [ 382.959299][T12659] add_index: get/read_metapage failed! [ 387.916085][T12681] loop0: detected capacity change from 0 to 256 [ 387.917212][T12681] exfat: Deprecated parameter 'utf8' [ 387.917234][T12681] exfat: Deprecated parameter 'utf8' [ 387.917312][T12681] exfat: Deprecated parameter 'utf8' [ 387.935420][T12675] loop3: detected capacity change from 0 to 4096 [ 387.993492][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.004948][ T5731] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 388.008441][T12681] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 388.037091][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.054136][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.067615][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.078382][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.151806][ T5731] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 388.152877][ T5731] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 388.152904][ T5731] usb 2-1: config 127 has no interface number 0 [ 388.152948][ T5731] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 388.156770][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.156796][ T5731] usb 2-1: Product: syz [ 388.156810][ T5731] usb 2-1: Manufacturer: syz [ 388.156824][ T5731] usb 2-1: SerialNumber: syz [ 388.216270][T12676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.599832][T12694] loop3: detected capacity change from 0 to 64 [ 388.635293][T12694] hfs: request for non-existent node 131072 in B*Tree [ 388.635313][T12694] hfs: request for non-existent node 131072 in B*Tree [ 388.637977][T12676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.838913][T12698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2465'. [ 389.052060][ T5731] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 389.052094][ T5731] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 389.052360][ T5731] asix 2-1:127.57: probe with driver asix failed with error -71 [ 389.099101][ T5731] usb 2-1: USB disconnect, device number 16 [ 389.217316][T12707] loop3: detected capacity change from 0 to 512 [ 389.283587][T12707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.283699][T12707] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.370417][T12707] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.2470: corrupted inode contents [ 389.404626][T12707] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz.3.2470: mark_inode_dirty error [ 389.405464][T12707] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.2470: corrupted inode contents [ 389.407503][T12707] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2470: mark_inode_dirty error [ 389.663416][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.139717][ T4934] Bluetooth: hci6: command tx timeout [ 390.147936][T12731] loop0: detected capacity change from 0 to 256 [ 390.150345][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.150514][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.150653][T12682] bridge_slave_0: entered allmulticast mode [ 390.153266][T12682] bridge_slave_0: entered promiscuous mode [ 390.164729][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.164838][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.167214][T12682] bridge_slave_1: entered allmulticast mode [ 390.170812][T12682] bridge_slave_1: entered promiscuous mode [ 390.234788][T12731] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 390.253879][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.272395][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.524292][T12682] team0: Port device team_slave_0 added [ 390.539311][T12682] team0: Port device team_slave_1 added [ 390.726281][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.726298][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.726330][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.780370][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.780389][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.780416][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.965606][T12682] hsr_slave_0: entered promiscuous mode [ 390.968459][T12682] hsr_slave_1: entered promiscuous mode [ 390.981958][T12682] debugfs: 'hsr0' already exists in 'hsr' [ 390.981982][T12682] Cannot create hsr debugfs directory [ 391.634006][T12763] program syz.5.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.686996][T12739] loop0: detected capacity change from 0 to 32768 [ 391.711333][T12739] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.844743][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 391.891049][T12739] XFS (loop0): Ending clean mount [ 391.939083][T12682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.014015][T12682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.020754][T12682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.091218][ T5620] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 392.098204][T12682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.114267][T12682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.185223][T12682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.191726][T12682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.224089][ T4934] Bluetooth: hci6: command tx timeout [ 392.270707][T12682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.415260][T12789] loop5: detected capacity change from 0 to 256 [ 392.430371][T12789] vfat: Bad value for 'dmask' [ 392.738345][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.807678][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.826741][T12797] loop0: detected capacity change from 0 to 16 [ 392.828053][T12797] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 392.836100][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.836279][ T8229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.895728][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.895908][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.948716][T12800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.010257][T12682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.010283][T12682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.294444][T12811] loop1: detected capacity change from 0 to 256 [ 393.351495][T12811] FAT-fs (loop1): Directory bread(block 1285) failed [ 393.351534][T12811] FAT-fs (loop1): Directory bread(block 1286) failed [ 393.351557][T12811] FAT-fs (loop1): Directory bread(block 1287) failed [ 393.351759][T12811] FAT-fs (loop1): Directory bread(block 1288) failed [ 393.416316][T12811] FAT-fs (loop1): Directory bread(block 1285) failed [ 393.416348][T12811] FAT-fs (loop1): Directory bread(block 1286) failed [ 393.416370][T12811] FAT-fs (loop1): Directory bread(block 1287) failed [ 393.416392][T12811] FAT-fs (loop1): Directory bread(block 1288) failed [ 393.448821][T12815] loop0: detected capacity change from 0 to 256 [ 393.465189][T12818] loop5: detected capacity change from 0 to 16 [ 393.477948][T12818] erofs (device loop5): mounted with root inode @ nid 36. [ 393.524886][T12818] syz.5.2508: attempt to access beyond end of device [ 393.524886][T12818] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 393.538311][T12815] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 393.538335][T12815] FAT-fs (loop0): Filesystem has been set read-only [ 393.598325][T12818] erofs (device loop5): not enough plain data on disk @ la 20480 of nid 89 [ 393.598355][T12818] erofs (device loop5): readahead error at folio 4 @ nid 89 [ 393.639586][ T5731] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 393.640709][T12818] syz.5.2508: attempt to access beyond end of device [ 393.640709][T12818] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 393.800308][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 393.801780][ T5731] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 393.806863][ T5731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 393.809302][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.809327][ T5731] usb 4-1: Product: syz [ 393.809342][ T5731] usb 4-1: Manufacturer: syz [ 393.809357][ T5731] usb 4-1: SerialNumber: syz [ 393.819268][T12818] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 393.819300][T12818] erofs (device loop5): read error -117 @ 1 of nid 89 [ 393.825344][ T33] audit: type=1800 audit(1788920214.222:379): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2508" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 393.902204][ T5731] usb 4-1: config 0 descriptor?? [ 393.912718][ T5731] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 393.916253][ T5731] usb 4-1: Detected FT232R [ 394.130983][ T5731] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 394.299869][ T4934] Bluetooth: hci6: command tx timeout [ 394.377251][ T5731] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 394.576199][ T5731] usb 4-1: USB disconnect, device number 18 [ 394.576936][T12818] syz.5.2508 (12818) used greatest stack depth: 19168 bytes left [ 394.670980][ T5731] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 394.671593][ T5731] ftdi_sio 4-1:0.0: device disconnected [ 394.841117][T12839] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2515'. [ 395.149712][T12845] block nbd2: server does not support multiple connections per device. [ 395.202108][T12845] block nbd2: shutting down sockets [ 395.265801][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.653578][T12820] syz.5.2508 (12820): drop_caches: 2 [ 395.800280][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'. [ 395.954221][T12682] veth0_vlan: entered promiscuous mode [ 395.977660][T12682] veth1_vlan: entered promiscuous mode [ 396.048258][T12682] veth0_macvtap: entered promiscuous mode [ 396.064798][T12682] veth1_macvtap: entered promiscuous mode [ 396.116876][T12871] loop1: detected capacity change from 0 to 4096 [ 396.181887][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.203283][T12871] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 396.207905][T12871] ntfs3(loop1): Failed to load $Extend (-22). [ 396.207930][T12871] ntfs3(loop1): Failed to initialize $Extend. [ 396.217608][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.280730][T12871] ntfs3(loop1): ino=1e, mi_enum_attr [ 396.290429][ T8231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.291412][ T7929] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.291446][ T7929] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.291476][ T7929] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.307840][T12875] loop3: detected capacity change from 0 to 1764 [ 396.381317][ T4934] Bluetooth: hci6: command tx timeout [ 396.388055][T12875] syz.3.2528 uses obsolete (PF_INET,SOCK_PACKET) [ 396.518816][ T33] audit: type=1400 audit(1788920216.922:380): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=12878 comm="syz.5.2531" [ 396.768403][ T8231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.768427][ T8231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.861748][T12885] loop0: detected capacity change from 0 to 512 [ 396.925021][T12885] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.2534: corrupted in-inode xattr: invalid ea_ino [ 396.925059][T12885] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.929535][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 396.929558][ C0] EXT4-fs (loop0): initial error at time 1788920217: ext4_iget_extra_inode:5210: inode 15 [ 396.929592][ C0] EXT4-fs (loop0): last error at time 1788920217: ext4_iget_extra_inode:5210: inode 15 [ 396.955282][ T7928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.955303][ T7928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.971418][T12885] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2534: couldn't read orphan inode 15 (err -117) [ 396.971449][T12885] loop0: lost filesystem error report for type 5 error -117 [ 396.984053][T12885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.386688][T12896] loop3: detected capacity change from 0 to 1024 [ 397.431452][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.763091][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.776212][T12900] loop5: detected capacity change from 0 to 512 [ 397.895112][T12900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.895222][T12900] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.905290][T12905] loop1: detected capacity change from 0 to 256 [ 398.189049][T11391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.403683][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 398.408366][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 398.986778][T12928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2548'. [ 399.011996][T12931] jffs2: notice: (12931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 399.699091][T12921] loop5: detected capacity change from 0 to 131072 [ 399.733148][T12921] F2FS-fs (loop5): invalid crc value [ 399.821887][T12921] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 399.838641][T12921] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 400.161186][T12929] loop3: detected capacity change from 0 to 32768 [ 400.188410][T12929] BTRFS info: device /dev/loop3 (7:3) using temp-fsid cc2da4b6-a098-4bc2-9ed1-22740237e117 [ 400.188473][T12929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2551 (12929) [ 400.220915][T12929] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 400.220950][T12929] BTRFS info (device loop3): using sha256 checksum algorithm [ 400.394799][T12929] BTRFS info (device loop3): enabling ssd optimizations [ 400.394831][T12929] BTRFS info (device loop3): turning on async discard [ 400.394848][T12929] BTRFS info (device loop3): enabling free space tree [ 400.543937][T12929] BTRFS error: failed to open device for path j}S3K=?)6"ظ!zέ/EX@ހ],}`=.bryrmX! !HJC QEVĪ8u vEN7M%)K [ 400.543937][T12929] 8O߳&Q̏{ÿc4;cR?Gw/'!aw?`iN?ƛ`CnsL; C:.V&g) ϣ/ӕda93R 26L$d;L with flags 0x1: -2 [ 400.628294][T12936] loop1: detected capacity change from 0 to 32768 [ 400.682605][ T5624] BTRFS info (device loop3): last unmount of filesystem cc2da4b6-a098-4bc2-9ed1-22740237e117 [ 400.758876][T12936] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 401.008443][T12936] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792 [ 401.008500][T12936] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 401.008513][T12936] OCFS2: File system is now read-only. [ 401.008526][T12936] (syz.1.2553,12936,0):ocfs2_search_chain:1935 ERROR: status = -30 [ 401.008553][T12936] (syz.1.2553,12936,0):ocfs2_search_chain:2058 ERROR: status = -30 [ 401.008575][T12936] (syz.1.2553,12936,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30 [ 401.008597][T12936] (syz.1.2553,12936,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 401.008619][T12936] (syz.1.2553,12936,0):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 401.008640][T12936] (syz.1.2553,12936,0):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 401.008662][T12936] (syz.1.2553,12936,0):ocfs2_block_group_alloc_contig:553 ERROR: status = -30 [ 401.008684][T12936] (syz.1.2553,12936,0):ocfs2_block_group_alloc:827 ERROR: status = -30 [ 401.008798][T12936] (syz.1.2553,12936,0):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 401.008820][T12936] (syz.1.2553,12936,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 401.008841][T12936] (syz.1.2553,12936,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 401.008862][T12936] (syz.1.2553,12936,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 401.008903][T12936] (syz.1.2553,12936,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 401.008925][T12936] (syz.1.2553,12936,0):ocfs2_expand_inline_dir:2985 ERROR: status = -30 [ 401.008946][T12936] (syz.1.2553,12936,0):ocfs2_extend_dir:3349 ERROR: status = -30 [ 401.008967][T12936] (syz.1.2553,12936,0):ocfs2_prepare_dir_for_insert:4467 ERROR: status = -30 [ 401.008987][T12936] (syz.1.2553,12936,0):ocfs2_mknod:303 ERROR: status = -30 [ 401.009010][T12936] (syz.1.2553,12936,0):ocfs2_mknod:508 ERROR: status = -30 [ 401.009029][T12936] (syz.1.2553,12936,0):ocfs2_mkdir:664 ERROR: status = -30 [ 401.218235][ T5751] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 401.416080][ T5751] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 401.417473][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.417504][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.417525][ T5751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.417568][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.438085][ T5751] usb 4-1: config 0 descriptor?? [ 401.448490][ T5626] ocfs2: Unmounting device (7,1) on (node local) [ 401.925078][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.925120][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.925146][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.925172][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.925205][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.925230][ T5751] playstation 0003:054C:09CC.000D: unknown main item tag 0x0 [ 401.929917][ T5751] playstation 0003:054C:09CC.000D: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 402.141370][ T5751] playstation 0003:054C:09CC.000D: Failed to retrieve feature with reportID 18: -71 [ 402.141401][ T5751] playstation 0003:054C:09CC.000D: Failed to retrieve DualShock4 pairing info: -71 [ 402.141462][ T5751] playstation 0003:054C:09CC.000D: Failed to get MAC address from DualShock4 [ 402.141478][ T5751] playstation 0003:054C:09CC.000D: Failed to create dualshock4. [ 402.160953][ T5751] playstation 0003:054C:09CC.000D: probe with driver playstation failed with error -71 [ 402.183034][ T5751] usb 4-1: USB disconnect, device number 19 [ 402.377216][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2566'. [ 402.378511][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 402.581310][T12992] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2567'. [ 402.684414][T12997] loop5: detected capacity change from 0 to 512 [ 402.721009][T12997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 402.761409][T12997] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2570: invalid indirect mapped block 9 (level 0) [ 402.761450][T12997] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 402.770479][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 402.770505][ C1] EXT4-fs (loop5): initial error at time 1788920223: ext4_free_branches:1023: inode 11 [ 402.770539][ C1] EXT4-fs (loop5): last error at time 1788920223: ext4_free_branches:1023: inode 11 [ 402.780213][T12997] EXT4-fs (loop5): 1 truncate cleaned up [ 402.782120][T12997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.841917][ T5751] wiimote 0005:057E:0306.000E: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 402.904139][ T5751] wiimote 0005:057E:0306.000E: New device registered [ 402.939865][ T3108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 403.089651][ T3108] usb 7-1: Using ep0 maxpacket: 8 [ 403.091544][ T3108] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 403.092115][ T3108] usb 7-1: config 0 has no interfaces? [ 403.103025][ T3108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.103049][ T3108] usb 7-1: Product: syz [ 403.103062][ T3108] usb 7-1: Manufacturer: syz [ 403.103076][ T3108] usb 7-1: SerialNumber: syz [ 403.132455][ T3108] usb 7-1: config 0 descriptor?? [ 403.168937][T11391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.172046][T13010] loop1: detected capacity change from 0 to 1024 [ 403.292653][T13012] loop5: detected capacity change from 0 to 512 [ 403.295224][T13012] EXT4-fs: Ignoring removed mblk_io_submit option [ 403.323631][T13012] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 403.335777][T13012] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 403.336030][T13012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 403.350622][T13012] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2576: Invalid block bitmap block 0 in block_group 0 [ 403.350654][T13012] loop5: lost filesystem error report for type 5 error -117 [ 403.359518][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 403.359540][ C1] EXT4-fs (loop5): last error at time 1788920223: ext4_read_block_bitmap_nowait:487 [ 403.363239][T13012] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2576: Invalid block bitmap block 0 in block_group 0 [ 403.363268][T13012] loop5: lost filesystem error report for type 5 error -117 [ 403.369635][T13012] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.2576: Invalid block bitmap block 0 in block_group 0 [ 403.369667][T13012] loop5: lost filesystem error report for type 5 error -117 [ 403.372088][T13012] Quota error (device loop5): write_blk: dquota write failed [ 403.372181][T13012] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 403.372213][T13012] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.2576: Failed to acquire dquot type 1 [ 403.372232][T13012] loop5: lost filesystem error report for type 5 error -28 [ 403.378104][T13012] EXT4-fs (loop5): 1 orphan inode deleted [ 403.379310][ T8231] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 403.379396][ T8231] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:19: Failed to release dquot type 1 [ 403.379414][ T8231] loop5: lost filesystem error report for type 5 error -117 [ 403.418394][ T3108] usb 7-1: USB disconnect, device number 2 [ 403.423572][T12994] wiimote 0005:057E:0306.000E: Device removed [ 403.424871][T13012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.527125][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2576'. [ 403.566962][T13016] device-mapper: ioctl: Invalid ioctl structure: name c, dev 30 [ 403.689895][T11391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.982717][ T5821] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 404.007526][T13034] loop3: detected capacity change from 0 to 128 [ 404.013742][T13034] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.037980][T13034] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.106629][T13036] ima: policy update failed [ 404.107210][ T33] audit: type=1802 audit(1788920224.512:381): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2587" res=0 errno=0 [ 404.203400][ T8228] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.548743][ T5821] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input36 [ 404.586664][ T5821] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input37 [ 404.592344][ T5821] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input35 [ 404.815879][T13058] usbip-vudc usbip-vudc.0: gadget not bound [ 405.035578][T13061] dlm: non-version read from control device 4096 [ 405.205793][T13072] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2603'. [ 405.254227][T13067] loop5: detected capacity change from 0 to 4096 [ 405.262050][T13067] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 405.320496][ T5731] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 405.377718][T13067] ntfs3(loop5): ino=19, mi_enum_attr [ 405.377751][T13067] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 405.380930][T13067] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 405.408374][T13077] loop1: detected capacity change from 0 to 1024 [ 405.423321][T13077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.428311][T13077] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 405.428690][T13077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 405.433879][T13077] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.2605: Freeing blocks not in datazone - block = 0, count = 4096 [ 405.433908][T13077] loop1: lost filesystem error report for type 5 error -117 [ 405.445211][T13077] EXT4-fs (loop1): Remounting filesystem read-only [ 405.445313][T13077] EXT4-fs (loop1): 1 orphan inode deleted [ 405.457183][T13077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.497176][T13077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2605'. [ 405.497260][T13077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2605'. [ 405.500279][ T5731] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 405.501357][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.501383][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 405.501407][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 405.501443][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.524713][ T5731] usb 4-1: config 0 descriptor?? [ 405.526778][T13066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.526911][T13066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.630325][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.996132][ T5731] gt683r_led 0003:1770:FF00.000F: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 406.193935][T13086] loop5: detected capacity change from 0 to 32768 [ 406.231673][T13086] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 406.233904][ T5731] usb 4-1: USB disconnect, device number 20 [ 406.274438][T13088] fido_id[13088]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1770:FF00.000F/report_descriptor': No such file or directory [ 406.291206][ T5752] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 406.297222][ T5752] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 406.310946][ T5752] gt683r_led 0003:1770:FF00.000F: failed to send set report request: -19 [ 406.371205][T13086] XFS (loop5): Ending clean mount [ 406.470368][T11391] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 407.013194][T13105] loop5: detected capacity change from 0 to 164 [ 407.085056][T13107] loop1: detected capacity change from 0 to 512 [ 407.103729][T13107] EXT4-fs (loop1): Test dummy encryption mode enabled [ 407.116575][T13107] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 407.130068][T13107] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 407.138731][T13107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.156822][T13107] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 407.236156][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.268540][ T33] audit: type=1326 audit(1788920227.672:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.3.2615" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9276d9e159 code=0x0 [ 407.343127][T13117] tipc: Started in network mode [ 407.343152][T13117] tipc: Node identity e0, cluster identity 4711 [ 407.343165][T13117] tipc: Node number set to 224 [ 408.067845][T13143] loop1: detected capacity change from 0 to 256 [ 408.081562][T13143] exfat: Deprecated parameter 'utf8' [ 408.081587][T13143] exfat: Deprecated parameter 'utf8' [ 408.081692][T13143] exfat: Deprecated parameter 'utf8' [ 408.084849][T13143] exfat: Deprecated parameter 'namecase' [ 408.131665][T13143] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 408.253659][T13145] tmpfs: Bad value for 'nr_blocks' [ 408.476941][T13156] loop3: detected capacity change from 0 to 1024 [ 408.739311][T13164] sctp: [Deprecated]: syz.5.2639 (pid 13164) Use of int in max_burst socket option deprecated. [ 408.739311][T13164] Use struct sctp_assoc_value instead [ 408.856067][ T5752] kernel read not supported for file /media6 (pid: 5752 comm: kworker/1:5) [ 409.225085][T13185] loop3: detected capacity change from 0 to 512 [ 409.257384][T13185] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 409.257413][T13185] loop3: lost filesystem error report for type 5 error -12 [ 409.258076][T13185] EXT4-fs (loop3): 2 truncates cleaned up [ 409.262360][T13185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.271021][T13185] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 409.344978][ T5624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.566265][T13196] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc118fd50 [ 409.708862][ T33] audit: type=1400 audit(1788920230.112:383): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=13197 comm="syz.3.2655" name="p" offset=79 [ 410.057920][T13211] loop5: detected capacity change from 0 to 512 [ 410.397527][T13223] openvswitch: netlink: Unknown key attributes 1 [ 410.463219][T13226] loop5: detected capacity change from 0 to 1024 [ 410.533990][T13226] hfsplus: bad catalog entry type [ 411.167290][T13249] loop1: detected capacity change from 0 to 512 [ 411.182466][T13249] EXT4-fs (loop1): 1 truncate cleaned up [ 411.191991][T13249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.996520][T13249] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2677: bg 0: block 465: padding at end of block bitmap is not set [ 412.003130][T13249] EXT4-fs (loop1): Remounting filesystem read-only [ 412.246891][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.899592][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 440.304474][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.304539][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.859559][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 501.742255][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.742319][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.771992][T11259] NFSD: Failed to start, no listeners configured. [ 526.059877][ T34] INFO: task syz.2.2376:12413 blocked for more than 143 seconds. [ 526.059909][ T34] Tainted: G L syzkaller #0 [ 526.059921][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.059932][ T34] task:syz.2.2376 state:D stack:28200 pid:12413 tgid:12410 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 526.059994][ T34] Call Trace: [ 526.060003][ T34] [ 526.060017][ T34] __schedule+0x17dd/0x5940 [ 526.060146][ T34] ? __pfx___schedule+0x10/0x10 [ 526.060188][ T34] ? schedule+0x90/0x2b0 [ 526.060221][ T34] schedule+0x164/0x2b0 [ 526.060253][ T34] schedule_preempt_disabled+0x13/0x30 [ 526.060283][ T34] __mutex_lock+0x7c4/0x15a0 [ 526.060311][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 526.060338][ T34] ? write_versions+0x95/0xe30 [ 526.060415][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 526.060460][ T34] write_versions+0x95/0xe30 [ 526.060492][ T34] ? __pfx_write_versions+0x10/0x10 [ 526.060519][ T34] ? __might_fault+0xaf/0x130 [ 526.060583][ T34] ? _copy_from_user+0x94/0xb0 [ 526.060650][ T34] ? simple_transaction_get+0x12d/0x160 [ 526.060678][ T34] nfsctl_transaction_write+0x10f/0x160 [ 526.060711][ T34] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 526.060734][ T34] vfs_write+0x296/0xba0 [ 526.060769][ T34] ? __pfx_vfs_write+0x10/0x10 [ 526.060794][ T34] ? __fget_files+0x2a/0x420 [ 526.060822][ T34] ? __fget_files+0x3a2/0x420 [ 526.060842][ T34] ? __fget_files+0x2a/0x420 [ 526.060874][ T34] ksys_write+0x150/0x270 [ 526.060901][ T34] ? __pfx_ksys_write+0x10/0x10 [ 526.060938][ T34] do_syscall_64+0x166/0x520 [ 526.060959][ T34] ? trace_irq_disable+0x3b/0x140 [ 526.060983][ T34] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.061007][ T34] ? clear_bhb_loop+0x70/0xc0 [ 526.061031][ T34] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.061052][ T34] RIP: 0033:0x7f56f959e159 [ 526.061072][ T34] RSP: 002b:00007f56fa47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 526.061094][ T34] RAX: ffffffffffffffda RBX: 00007f56f9825fa0 RCX: 00007f56f959e159 [ 526.063640][ T34] RDX: 0000000000000009 RSI: 0000200000000380 RDI: 0000000000000003 [ 526.063652][ T34] RBP: 00007f56f963503b R08: 0000000000000000 R09: 0000000000000000 [ 526.063660][ T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.063668][ T34] R13: 00007f56f9826038 R14: 00007f56f9825fa0 R15: 00007ffc0c643368 [ 526.063688][ T34] [ 526.063700][ T34] [ 526.063700][ T34] Showing all locks held in the system: [ 526.063708][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 526.063718][ T34] #0: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 526.063771][ T34] locks held by kworker/u8:10/1132: 4, on CPU#0: [ 526.063780][ T34] #0: ffff88801eaf2940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 526.063821][ T34] #1: ffffc900051dfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 526.063854][ T34] #2: ffff888035d640e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 526.063887][ T34] #3: ffff888035d62c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 526.063943][ T34] locks held by getty/5376: 2, on CPU#0: [ 526.063951][ T34] #0: ffff8880359060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 526.064037][ T34] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 526.064069][ T34] locks held by syz-executor/5607: 3, on CPU#1: [ 526.064078][ T34] #0: ffff88807b47ae48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 526.064107][ T34] #1: ffff888035d64558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 526.064137][ T34] #2: ffff888035d60938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 526.064207][ T34] locks held by syz.4.1950/11259: 3, on CPU#1: [ 526.064215][ T34] #0: ffff8880343f8b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 526.064244][ T34] #1: ffff88803324e460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 526.064276][ T34] #2: ffffffff8f0a1c00 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 526.064307][ T34] locks held by syz.2.2376/12413: 3, on CPU#1: [ 526.064315][ T34] #0: ffff88807a70deb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 526.064343][ T34] #1: ffff888078a2a460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 526.064375][ T34] #2: ffffffff8f0a1c00 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 526.064404][ T34] locks held by syz.5.2680/13256: 3, on CPU#1: [ 526.064412][ T34] #0: ffff888055d67088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 526.064441][ T34] #1: ffff888035d64558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 526.064470][ T34] #2: ffff888035d60938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 526.064499][ T34] locks held by syz.3.2681/13258: 3, on CPU#0: [ 526.064508][ T34] #0: ffff88802b3a5038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 526.064546][ T34] #1: ffff888035d64460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 526.064593][ T34] #2: ffff888035d60938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 526.064623][ T34] locks held by syz.6.2682/13259: 3, on CPU#0: [ 526.064631][ T34] #0: ffff88801b09e9b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 526.064662][ T34] #1: ffff888035d64460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 526.064694][ T34] #2: ffff888035d60938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 526.064724][ T34] locks held by syz.1.2683/13260: 3, on CPU#1: [ 526.064733][ T34] #0: ffff88801b09d038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 526.064764][ T34] #1: ffff888035d64460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 526.064795][ T34] #2: ffff888035d60938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 526.064824][ T34] [ 526.064828][ T34] ============================================= [ 526.064828][ T34] [ 526.064834][ T34] NMI backtrace for cpu 1 [ 526.064844][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 526.064860][ T34] Tainted: [L]=SOFTLOCKUP [ 526.064865][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.064872][ T34] Call Trace: [ 526.064878][ T34] [ 526.064883][ T34] dump_stack_lvl+0xe8/0x150 [ 526.064901][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 526.064946][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 526.064970][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 526.064988][ T34] sys_info+0x135/0x170 [ 526.065001][ T34] watchdog+0x1058/0x10d0 [ 526.065027][ T34] ? watchdog+0x209/0x10d0 [ 526.065043][ T34] kthread+0x38b/0x480 [ 526.065057][ T34] ? __pfx_watchdog+0x10/0x10 [ 526.065071][ T34] ? __pfx_kthread+0x10/0x10 [ 526.065084][ T34] ret_from_fork+0x514/0xb70 [ 526.065100][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 526.065112][ T34] ? __switch_to+0xc89/0x1420 [ 526.065129][ T34] ? __pfx_kthread+0x10/0x10 [ 526.065143][ T34] ret_from_fork_asm+0x1a/0x30 [ 526.065168][ T34] [ 526.065173][ T34] Sending NMI from CPU 1 to CPUs 0: [ 526.065211][ C0] NMI backtrace for cpu 0 [ 526.065229][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.065254][ C0] Tainted: [L]=SOFTLOCKUP [ 526.065260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.065271][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 526.065293][ C0] Code: 3c 8c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 20 00 fb f4 4c 10 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 526.065309][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 526.065325][ C0] RAX: 000000000018f84d RBX: ffffffff819c0490 RCX: 8000000000000001 [ 526.065339][ C0] RDX: 0000000000000001 RSI: ffffffff8e47d8da RDI: ffffffff8c6dc080 [ 526.065352][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 526.065366][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 526.065379][ C0] R13: 1ffffffff1d51df8 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 526.065392][ C0] FS: 0000000000000000(0000) GS:ffff888124cb7000(0000) knlGS:0000000000000000 [ 526.065408][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.065422][ C0] CR2: 00005627ee733660 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 526.065440][ C0] Call Trace: [ 526.065447][ C0] [ 526.065454][ C0] default_idle+0x9/0x20 [ 526.065474][ C0] default_idle_call+0x72/0xb0 [ 526.065494][ C0] do_idle+0x2e0/0x540 [ 526.065527][ C0] ? __pfx_do_idle+0x10/0x10 [ 526.065550][ C0] cpu_startup_entry+0x43/0x60 [ 526.065569][ C0] rest_init+0x378/0x3a0 [ 526.065590][ C0] ? __pfx_rest_init+0x10/0x10 [ 526.065615][ C0] ? __pfx_kernel_init+0x10/0x10 [ 526.065638][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 526.065715][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 526.065774][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 526.065801][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 526.065912][ C0] start_kernel+0x392/0x3e0 [ 526.065950][ C0] x86_64_start_reservations+0x24/0x30 [ 526.065993][ C0] x86_64_start_kernel+0x137/0x1b0 [ 526.066018][ C0] common_startup_64+0x13e/0x157 [ 526.066047][ C0] [ 526.066193][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 526.982499][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 526.993164][ T34] Tainted: [L]=SOFTLOCKUP [ 526.997485][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.007532][ T34] Call Trace: [ 527.010809][ T34] [ 527.013732][ T34] vpanic+0x56d/0xa70 [ 527.017715][ T34] ? __pfx_vpanic+0x10/0x10 [ 527.022211][ T34] ? console_srcu_read_unlock+0x3a/0x60 [ 527.027754][ T34] panic+0xc5/0xd0 [ 527.031472][ T34] ? __pfx_panic+0x10/0x10 [ 527.035890][ T34] ? wq_watchdog_touch+0xf9/0x160 [ 527.040907][ T34] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 527.047063][ T34] watchdog+0x10cc/0x10d0 [ 527.051477][ T34] ? watchdog+0x209/0x10d0 [ 527.055915][ T34] kthread+0x38b/0x480 [ 527.059991][ T34] ? __pfx_watchdog+0x10/0x10 [ 527.064686][ T34] ? __pfx_kthread+0x10/0x10 [ 527.069275][ T34] ret_from_fork+0x514/0xb70 [ 527.073869][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 527.078975][ T34] ? __switch_to+0xc89/0x1420 [ 527.083651][ T34] ? __pfx_kthread+0x10/0x10 [ 527.088232][ T34] ret_from_fork_asm+0x1a/0x30 [ 527.093002][ T34] [ 527.096166][ T34] Kernel Offset: disabled [ 527.100483][ T34] Rebooting in 86400 seconds..