last executing test programs: 2.121882381s ago: executing program 2 (id=383): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000500)) 1.908077104s ago: executing program 3 (id=385): timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x2, 0x56d, &(0x7f0000000240)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0xe9) getdents(r1, 0xfffffffffffffffd, 0xbb) 1.880101026s ago: executing program 2 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/e', 0x2) 1.731572211s ago: executing program 3 (id=388): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 1.698123715s ago: executing program 1 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e", 0x3, 0x2) 1.692553285s ago: executing program 2 (id=390): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x5848d0) write$uinput_user_dev(r0, 0x0, 0x0) 1.577096447s ago: executing program 3 (id=391): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.457020739s ago: executing program 1 (id=393): r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x80400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.45415733s ago: executing program 3 (id=394): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x8ffff) lseek(r0, 0x2, 0x4) 1.328815993s ago: executing program 2 (id=395): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1.185799258s ago: executing program 3 (id=396): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 1.091201967s ago: executing program 1 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sec\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="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", 0x21b) 1.06620543s ago: executing program 2 (id=398): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb, 0x0, &(0x7f0000000040)) 983.966398ms ago: executing program 0 (id=400): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 897.512467ms ago: executing program 0 (id=401): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x804800, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001400)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/69, 0x45) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 889.477878ms ago: executing program 1 (id=402): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d9, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 884.833469ms ago: executing program 3 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000004e80)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) mount$9p_tcp(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x8010, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 862.498711ms ago: executing program 2 (id=404): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000010000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f0000000c40)="000000000000000002", 0x0}, 0x50) 664.246311ms ago: executing program 0 (id=405): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20) 643.193803ms ago: executing program 1 (id=406): socket$inet(0x2, 0x1, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x1d}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3, 0x800000}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3, 0x0, 0x0, 0xf}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 487.308209ms ago: executing program 1 (id=407): syz_mount_image$jfs(&(0x7f0000022e80), &(0x7f00000427c0)='./file1\x00', 0x1000484, &(0x7f0000042800)=ANY=[@ANYBLOB='noquota,iocharset=cp1250,iocharset=none,errors=remount-ro,discard,usrquota,iocharset=cp1255,uid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES16=0x0], 0x3c, 0x62c7, &(0x7f00000428c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000021c80)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000021cc0)=""/46, 0x2e) getdents64(r0, 0xfffffffffffffffe, 0x29) 465.880281ms ago: executing program 0 (id=408): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) 367.065911ms ago: executing program 0 (id=409): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x883, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x5000, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x400, 0x0, 0x80, 'crypt\x00', {'aes:4-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@ram_num={'1:', 0x1}, 0x20, '16'}, ' 0'}}]}) 0s ago: executing program 0 (id=410): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 70.411788][ T5771] cgroup: Unknown subsys name 'net' [ 70.578798][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.488916][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495494][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.962469][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.404362][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.414249][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.422367][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.429824][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.438679][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.446044][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.453397][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.453625][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.461596][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.473410][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.481961][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.490286][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.498190][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.498993][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.512363][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.521077][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.529016][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.529180][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.537155][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.550707][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.552184][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.557912][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.566669][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.578834][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.663514][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 73.666168][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 73.670021][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.684481][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.687358][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 73.698666][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.713983][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.722927][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 73.729927][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.746029][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.065782][ T5784] infiniband rxe0: set active [ 74.072927][ T5784] infiniband rxe0: added rxe_eth0 [ 74.090090][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.140377][ T5784] RDS/IB: rxe0: added [ 74.148974][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 74.163148][ T5784] smc: adding ib device rxe0 with port count 1 [ 74.169445][ T5784] smc: ib device rxe0 port 1 has pnetid [ 74.227537][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.244376][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.290143][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 74.491868][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.539543][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 74.576661][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.592292][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.599899][ T5783] bridge_slave_0: entered allmulticast mode [ 74.623673][ T5783] bridge_slave_0: entered promiscuous mode [ 74.689525][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.696790][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.710586][ T5782] bridge_slave_0: entered allmulticast mode [ 74.722796][ T5782] bridge_slave_0: entered promiscuous mode [ 74.730348][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.739402][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.746635][ T5783] bridge_slave_1: entered allmulticast mode [ 74.753543][ T5783] bridge_slave_1: entered promiscuous mode [ 74.772982][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.780142][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.787456][ T5782] bridge_slave_1: entered allmulticast mode [ 74.794770][ T5782] bridge_slave_1: entered promiscuous mode [ 74.801324][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.897977][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.925616][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.978198][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.987940][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.999539][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.008960][ T5785] bridge_slave_0: entered allmulticast mode [ 75.019811][ T5785] bridge_slave_0: entered promiscuous mode [ 75.061015][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.079072][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.086848][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.097774][ T5785] bridge_slave_1: entered allmulticast mode [ 75.105452][ T5785] bridge_slave_1: entered promiscuous mode [ 75.123634][ T5783] team0: Port device team_slave_0 added [ 75.147697][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.215223][ T5783] team0: Port device team_slave_1 added [ 75.246141][ T5782] team0: Port device team_slave_0 added [ 75.264895][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.298473][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.346331][ T5782] team0: Port device team_slave_1 added [ 75.388809][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.395900][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.432888][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.447184][ T42] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.473738][ T5785] team0: Port device team_slave_0 added [ 75.480832][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.488377][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.514962][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.542017][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.552016][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.584318][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.618387][ T5785] team0: Port device team_slave_1 added [ 75.634392][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.641362][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.643117][ T5795] Bluetooth: hci1: command tx timeout [ 75.671435][ T5100] Bluetooth: hci2: command tx timeout [ 75.672992][ T5795] Bluetooth: hci3: command tx timeout [ 75.678459][ T5100] Bluetooth: hci0: command tx timeout [ 75.690178][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.784217][ T5782] hsr_slave_0: entered promiscuous mode [ 75.791025][ T5782] hsr_slave_1: entered promiscuous mode [ 75.850647][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.860416][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.890217][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.909404][ T5783] hsr_slave_0: entered promiscuous mode [ 75.919576][ T5783] hsr_slave_1: entered promiscuous mode [ 75.926460][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.938088][ T5783] Cannot create hsr debugfs directory [ 75.958456][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.966719][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.995261][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.131766][ T5785] hsr_slave_0: entered promiscuous mode [ 76.138634][ T5785] hsr_slave_1: entered promiscuous mode [ 76.146496][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.154380][ T5785] Cannot create hsr debugfs directory [ 76.313068][ T5449] infiniband rxe0: set active [ 76.318225][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.404959][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.536056][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.543450][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.550565][ T5784] bridge_slave_0: entered allmulticast mode [ 76.557721][ T5784] bridge_slave_0: entered promiscuous mode [ 76.565631][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.578215][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.586898][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.594149][ T5784] bridge_slave_1: entered allmulticast mode [ 76.601451][ T5784] bridge_slave_1: entered promiscuous mode [ 76.619993][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.655563][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.664812][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.676442][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.705328][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.742965][ T5784] team0: Port device team_slave_0 added [ 76.766510][ T5784] team0: Port device team_slave_1 added [ 76.790303][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.801692][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.820770][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.827820][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.854057][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.866810][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.874034][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.900832][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.912100][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.957729][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.005860][ T5784] hsr_slave_0: entered promiscuous mode [ 77.012508][ T5784] hsr_slave_1: entered promiscuous mode [ 77.018663][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.027231][ T5784] Cannot create hsr debugfs directory [ 77.035609][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.051134][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.061584][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.099899][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.260824][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.299813][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.343507][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.350831][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.361621][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.389658][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.396816][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.406635][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.421115][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.448580][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.491850][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.508613][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.558706][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.581346][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.596634][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.615010][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.622095][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.638850][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.658796][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665949][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.678945][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.686060][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.724894][ T5100] Bluetooth: hci3: command tx timeout [ 77.724913][ T5794] Bluetooth: hci2: command tx timeout [ 77.730297][ T5100] Bluetooth: hci1: command tx timeout [ 77.736525][ T5795] Bluetooth: hci0: command tx timeout [ 77.752792][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.759935][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.943265][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.996936][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.028867][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.036044][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.076441][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.083629][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.138948][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.291715][ T5783] veth0_vlan: entered promiscuous mode [ 78.306393][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.348432][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.358007][ T5783] veth1_vlan: entered promiscuous mode [ 78.483540][ T5783] veth0_macvtap: entered promiscuous mode [ 78.495965][ T5783] veth1_macvtap: entered promiscuous mode [ 78.520148][ T5785] veth0_vlan: entered promiscuous mode [ 78.551167][ T5785] veth1_vlan: entered promiscuous mode [ 78.566593][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.584601][ T5782] veth0_vlan: entered promiscuous mode [ 78.599041][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.619360][ T5782] veth1_vlan: entered promiscuous mode [ 78.633619][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.651132][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660384][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669372][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679219][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729879][ T5785] veth0_macvtap: entered promiscuous mode [ 78.747753][ T5785] veth1_macvtap: entered promiscuous mode [ 78.839684][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.853426][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.865560][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.874622][ T5784] veth0_vlan: entered promiscuous mode [ 78.885705][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.902996][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.918131][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.936965][ T5782] veth0_macvtap: entered promiscuous mode [ 78.967298][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.982032][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.991419][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.008206][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.021421][ T5784] veth1_vlan: entered promiscuous mode [ 79.046126][ T5782] veth1_macvtap: entered promiscuous mode [ 79.072997][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.080976][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.119232][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.130101][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.140133][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.150825][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.162096][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.193232][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.204335][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.214462][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.226169][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.237113][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.268611][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.291715][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.308133][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.318168][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.328071][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.337539][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.349808][ T5784] veth0_macvtap: entered promiscuous mode [ 79.370616][ T5784] veth1_macvtap: entered promiscuous mode [ 79.413915][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.427769][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.442096][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.445577][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.454816][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.474218][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.485591][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.496126][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.508093][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.547582][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.558449][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.582104][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.592577][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.604163][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.614017][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.624817][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.636410][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.657326][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.667024][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.739265][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.751283][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761016][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.770348][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.787301][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.803599][ T5795] Bluetooth: hci1: command tx timeout [ 79.809032][ T5795] Bluetooth: hci3: command tx timeout [ 79.812156][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.814624][ T5794] Bluetooth: hci0: command tx timeout [ 79.821755][ T5100] Bluetooth: hci2: command tx timeout [ 79.997052][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.008976][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.060406][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.078005][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.150912][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.172755][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.409510][ T5913] netem: incorrect gi model size [ 80.422529][ T5913] netem: change failed [ 80.495990][ T5915] syz.1.9[5915]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.511096][ T5915] loop1: detected capacity change from 0 to 136 [ 80.565250][ T5776] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.575389][ T5788] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.702339][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.767725][ T5788] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 80.782637][ T5788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.806737][ T5788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.820414][ T5788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.839819][ T5925] block device autoloading is deprecated and will be removed. [ 80.870219][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.878683][ T5925] capability: warning: `syz.1.13' uses 32-bit capabilities (legacy support in use) [ 81.019837][ T5929] loop7: detected capacity change from 0 to 7 [ 81.033481][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.042881][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.059975][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.069195][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.078184][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.087394][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.098760][ T5934] loop0: detected capacity change from 0 to 16 [ 81.116004][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.129569][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.138776][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.144992][ T5934] erofs: (device loop0): mounted with root inode @ nid 36. [ 81.147862][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.163150][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.180014][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.189232][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.199051][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.208238][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.217474][ T5929] ldm_validate_partition_table(): Disk read failed. [ 81.224690][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.233877][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.258549][ T5788] usb 4-1: GET_CAPABILITIES returned 0 [ 81.265336][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.267211][ T5788] usbtmc 4-1:16.0: can't read capabilities [ 81.285045][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.299239][ T5929] Dev loop7: unable to read RDB block 0 [ 81.320399][ T5929] loop7: unable to read partition table [ 81.332534][ T5929] loop7: partition table beyond EOD, truncated [ 81.346123][ T5929] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 81.490994][ T5939] loop0: detected capacity change from 0 to 256 [ 81.597111][ T5788] usb 4-1: USB disconnect, device number 2 [ 81.882660][ T5100] Bluetooth: hci3: command tx timeout [ 81.883111][ T5795] Bluetooth: hci0: command tx timeout [ 81.888109][ T5100] Bluetooth: hci2: command tx timeout [ 81.893574][ T5794] Bluetooth: hci1: command tx timeout [ 82.126996][ T5955] loop2: detected capacity change from 0 to 8 [ 82.167493][ T5945] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 82.194015][ T5955] ldm_validate_partition_table(): Disk read failed. [ 82.227800][ T5953] loop1: detected capacity change from 0 to 32768 [ 82.259633][ T5955] Dev loop2: unable to read RDB block 0 [ 82.293576][ T5953] JBD2: Ignoring recovery information on journal [ 82.311498][ T5955] loop2: unable to read partition table [ 82.352857][ T5955] loop2: partition table beyond EOD, truncated [ 82.365126][ T5955] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 82.366739][ T5953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.540906][ T5953] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 82.562398][ T5953] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 82.574307][ T5953] OCFS2: File system is now read-only. [ 82.579802][ T5953] (syz.1.25,5953,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 82.587508][ T5953] (syz.1.25,5953,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 82.595235][ T5953] (syz.1.25,5953,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 82.603644][ T5953] (syz.1.25,5953,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 82.611912][ T5953] (syz.1.25,5953,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 82.619922][ T5953] (syz.1.25,5953,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 82.627897][ T5953] (syz.1.25,5953,1):ocfs2_mknod_locked:641 ERROR: status = -30 [ 82.636185][ T5953] (syz.1.25,5953,1):ocfs2_symlink:1948 ERROR: status = -30 [ 82.644394][ T5953] (syz.1.25,5953,1):ocfs2_symlink:2072 ERROR: status = -30 [ 82.838252][ T5968] loop3: detected capacity change from 0 to 1024 [ 82.976878][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 83.360196][ T5977] tap0: tun_chr_ioctl cmd 1074025677 [ 83.372507][ T5977] tap0: linktype set to 778 [ 83.480826][ T5986] loop0: detected capacity change from 0 to 512 [ 83.566473][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.667589][ T5986] EXT4-fs (loop0): shut down requested (0) [ 83.765677][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.897983][ T6006] loop1: detected capacity change from 0 to 128 [ 84.139923][ T6013] loop3: detected capacity change from 0 to 2048 [ 84.256439][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.459862][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.699896][ T6024] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EPERM) [ 84.732290][ T6024] device-mapper: ioctl: error adding target to table [ 84.982069][ T6031] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.006414][ T6031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.027714][ T6031] F2FS-fs (loop3): invalid crc value [ 85.029373][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.042239][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.055331][ T6039] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.069519][ T6031] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.100493][ T6039] EXT4-fs (loop1): shut down requested (1) [ 85.148724][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.226959][ T6031] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.239309][ T6031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.250602][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 85.261332][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 85.283295][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.306968][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.335091][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.361878][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.392701][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.401770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.440307][ T6052] SQUASHFS error: Failed to read block 0x8f: -5 [ 85.464080][ T27] audit: type=1800 audit(1793812856.860:2): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 85.676399][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 85.681944][ T9] usbtmc 1-1:16.0: can't read capabilities [ 85.951536][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.961734][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.970855][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.979968][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.995710][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.005111][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.014221][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.023327][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.032425][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.042850][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.051971][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.061048][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.070123][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.110364][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.119494][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.135893][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.162239][ T5869] usb 1-1: USB disconnect, device number 2 [ 86.357592][ T27] audit: type=1326 audit(1793812857.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.417582][ T6069] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 86.422195][ T27] audit: type=1326 audit(1793812857.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.476843][ T27] audit: type=1326 audit(1793812857.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.514164][ T5869] IPVS: starting estimator thread 0... [ 86.544603][ T27] audit: type=1326 audit(1793812857.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.600758][ T27] audit: type=1326 audit(1793812857.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.624569][ T6072] IPVS: using max 25 ests per chain, 60000 per kthread [ 86.672205][ T27] audit: type=1326 audit(1793812857.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.722316][ T27] audit: type=1326 audit(1793812857.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.792232][ T27] audit: type=1326 audit(1793812857.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb31f9fb19 code=0x7ffc0000 [ 86.825037][ T6083] process 'syz.3.76' launched './file1' with NULL argv: empty string added [ 86.845033][ T23] cfg80211: failed to load regulatory.db [ 86.872248][ T27] audit: type=1326 audit(1793812857.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.1.70" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb31f40e99 code=0x7ffc0000 [ 87.150387][ T6087] set_capacity_and_notify: 3 callbacks suppressed [ 87.150402][ T6087] loop2: detected capacity change from 0 to 8192 [ 87.194298][ T6087] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.205591][ T5869] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.331270][ T6075] loop1: detected capacity change from 0 to 40427 [ 87.358524][ T6075] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 87.396734][ T6075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.422755][ T6075] F2FS-fs (loop1): invalid crc value [ 87.442293][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.451086][ T6075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.554834][ T6098] ptp ptp0: only physical clock in use now [ 87.586506][ T6075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.612186][ T6075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 87.638728][ T42] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 87.669307][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.704984][ T42] usb 4-1: config 0 descriptor?? [ 87.714587][ T42] cp210x 4-1:0.0: cp210x converter detected [ 87.799281][ T6112] loop0: detected capacity change from 0 to 256 [ 87.843698][ T6112] exfat: Deprecated parameter 'utf8' [ 87.849127][ T6112] exfat: Deprecated parameter 'namecase' [ 87.864182][ T5785] syz-executor: attempt to access beyond end of device [ 87.864182][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.901820][ T6112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 87.922936][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.135571][ T42] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 88.354884][ T42] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 88.371192][ T42] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 88.416715][ T42] usb 4-1: cp210x converter now attached to ttyUSB0 [ 88.460528][ T42] usb 4-1: USB disconnect, device number 3 [ 88.501591][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.527230][ T42] cp210x 4-1:0.0: device disconnected [ 88.839136][ T6144] UHID_CREATE from different security context by process 61 (syz.0.96), this is not allowed. [ 88.956440][ T6148] loop0: detected capacity change from 0 to 512 [ 88.994802][ T6148] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 89.061713][ T6148] EXT4-fs (loop0): 1 truncate cleaned up [ 89.084043][ T6148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.243066][ T49] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:3: bg 0: block 465: padding at end of block bitmap is not set [ 89.294761][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.331710][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.331710][ T49] [ 89.342056][ T49] EXT4-fs (loop0): Total free blocks count 0 [ 89.352713][ T49] EXT4-fs (loop0): Free/Dirty block details [ 89.358721][ T49] EXT4-fs (loop0): free_blocks=0 [ 89.367836][ T49] EXT4-fs (loop0): dirty_blocks=2 [ 89.373767][ T49] EXT4-fs (loop0): Block reservation details [ 89.381568][ T49] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 89.401137][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 89.780483][ T6180] capability: warning: `syz.3.107' uses deprecated v2 capabilities in a way that may be insecure [ 89.799706][ T6178] loop1: detected capacity change from 0 to 2048 [ 89.876642][ T6178] loop1: p1 p2 p3 [ 89.876642][ T6178] p1: [ 89.897232][ T6178] loop1: partition table partially beyond EOD, truncated [ 89.905822][ T6178] loop1: p1 size 16777216 extends beyond EOD, truncated [ 89.920558][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 89.922842][ T6178] loop1: p2 size 458752 extends beyond EOD, truncated [ 89.953776][ T6178] loop1: p3 start 3036741376 is beyond EOD, truncated [ 89.982342][ T5793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.067020][ T6186] team0: Port device team_slave_1 removed [ 90.194853][ T5793] usb 1-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.235474][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 90.252357][ T5793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.259035][ T5793] usb 1-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 90.265908][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 90.292175][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.321674][ T5793] usb 1-1: config 0 descriptor?? [ 90.521872][ T6204] loop2: detected capacity change from 0 to 512 [ 90.525156][ T6202] loop1: detected capacity change from 0 to 1024 [ 90.534528][ T6204] EXT4-fs: Ignoring removed orlov option [ 90.534553][ T6204] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.593122][ T6207] loop3: detected capacity change from 0 to 128 [ 90.604568][ T6207] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.622947][ T6204] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.119: corrupted in-inode xattr: e_value size too large [ 90.641637][ T6207] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.697655][ T6202] syz.1.118: attempt to access beyond end of device [ 90.697655][ T6202] loop1: rw=0, sector=393220, nr_sectors = 2 limit=1024 [ 90.718695][ T6204] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.119: couldn't read orphan inode 15 (err -117) [ 90.760515][ T6204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.801646][ T5793] wacom 0003:056A:033C.0001: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 90.831122][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.837514][ T5793] wacom 0003:056A:033C.0001: hidraw0: USB HID v0.00 Joystick [HID 056a:033c] on usb-dummy_hcd.0-1/input0 [ 90.867515][ T6204] EXT4-fs (loop2): shut down requested (1) [ 90.876395][ T5793] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033C.0001/input/input6 [ 90.998671][ T6213] WARNING! power/level is deprecated; use power/control instead [ 91.012850][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.055411][ T5793] usb 1-1: USB disconnect, device number 3 [ 91.075801][ T6212] loop1: detected capacity change from 0 to 8 [ 92.035395][ T6246] loop3: detected capacity change from 0 to 512 [ 92.081618][ T6246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.101896][ T6246] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.151936][ T6246] EXT4-fs error (device loop3): ext4_get_first_dir_block:3586: inode #12: comm syz.3.136: Attempting to read directory block (0) that is past i_size (3) [ 92.196665][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.290233][ T6253] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 92.623339][ T6269] Bluetooth: MGMT ver 1.22 [ 92.631692][ T6270] loop2: detected capacity change from 0 to 128 [ 92.749418][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'. [ 92.763428][ T6270] syz.2.145: attempt to access beyond end of device [ 92.763428][ T6270] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 92.806193][ T6270] syz.2.145: attempt to access beyond end of device [ 92.806193][ T6270] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 92.831848][ T6274] macvtap0: entered promiscuous mode [ 92.861270][ T6273] macvtap0: left promiscuous mode [ 93.341275][ T6295] kAFS: bad VL server IP address [ 93.444955][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 93.444969][ T27] audit: type=1326 audit(1793812864.840:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.493273][ T27] audit: type=1326 audit(1793812864.870:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.517120][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.552187][ T27] audit: type=1326 audit(1793812864.870:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.582027][ T27] audit: type=1326 audit(1793812864.870:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.606571][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.614545][ T27] audit: type=1326 audit(1793812864.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.641059][ T27] audit: type=1326 audit(1793812864.870:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.665877][ T27] audit: type=1326 audit(1793812864.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.691604][ T27] audit: type=1326 audit(1793812864.870:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.720565][ T27] audit: type=1326 audit(1793812864.870:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.754138][ T27] audit: type=1326 audit(1793812864.870:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5490f9fb19 code=0x7ffc0000 [ 93.812220][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 93.819641][ T23] usb 1-1: config 139 has an invalid interface number: 104 but max is 0 [ 93.830801][ T23] usb 1-1: config 139 has no interface number 0 [ 93.842735][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.853339][ T23] usb 1-1: config 139 interface 104 has no altsetting 0 [ 93.868574][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 93.877762][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.891296][ T23] usb 1-1: Product: syz [ 93.895807][ T23] usb 1-1: Manufacturer: syz [ 93.900574][ T23] usb 1-1: SerialNumber: syz [ 94.055556][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.072164][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.087838][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.101288][ T5869] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.111433][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.134342][ T5869] usb 3-1: config 0 descriptor?? [ 94.359066][ T6299] loop2: detected capacity change from 0 to 128 [ 94.369188][ T23] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 94.378505][ T6299] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.420966][ T6299] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.582297][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.675900][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3 [ 94.684509][ T5869] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.692540][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.693639][ T5869] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.698687][ T5795] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.734795][ T5869] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 94.771956][ T23] gspca_sn9c20x: Write register 1001 failed -71 [ 94.788941][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 94.805130][ T23] gspca_sn9c20x: Device initialization failed [ 94.820656][ T23] gspca_sn9c20x: probe of 1-1:139.104 failed with error -71 [ 94.829347][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.859270][ T23] usb 1-1: USB disconnect, device number 4 [ 94.880970][ T5892] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 94.900232][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.931339][ T5892] usb 4-1: config 0 descriptor?? [ 94.988558][ T9] usb 3-1: USB disconnect, device number 2 [ 95.395678][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.407305][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.415462][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.427490][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.434968][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.446991][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.454485][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.473689][ T5892] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 95.497116][ T5892] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 95.809907][ T5892] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 95.832808][ T5892] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 95.844763][ T5892] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -71 [ 95.865713][ T5892] usb 4-1: USB disconnect, device number 4 [ 96.833761][ T6352] tipc: Started in network mode [ 96.839161][ T6352] tipc: Node identity 7f000001, cluster identity 4711 [ 96.853690][ T6352] tipc: New replicast peer: 127.0.0.1 [ 96.865181][ T6352] tipc: Enabled bearer , priority 10 [ 96.876652][ T6352] tipc: Disabling bearer [ 96.937941][ T6356] loop3: detected capacity change from 0 to 512 [ 96.968269][ T6358] tipc: New replicast peer: 255.255.255.255 [ 96.975691][ T6358] tipc: Enabled bearer , priority 10 [ 96.984604][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 96.994921][ T6356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.022686][ T6356] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.132000][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.174719][ T6364] syz.2.188 (6364) used greatest stack depth: 20696 bytes left [ 97.592081][ T6376] loop3: detected capacity change from 0 to 8192 [ 97.634837][ T6385] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.640181][ T6376] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.673643][ T6376] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 97.685248][ T6376] REISERFS (device loop3): using ordered data mode [ 97.691778][ T6376] reiserfs: using flush barriers [ 97.700795][ T6376] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.717908][ T6376] REISERFS (device loop3): checking transaction log (loop3) [ 97.756983][ T6376] REISERFS (device loop3): Using r5 hash to sort names [ 97.774439][ T6376] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.853377][ T6392] loop1: detected capacity change from 0 to 64 [ 97.872782][ T6392] ======================================================= [ 97.872782][ T6392] WARNING: The mand mount option has been deprecated and [ 97.872782][ T6392] and is ignored by this kernel. Remove the mand [ 97.872782][ T6392] option from the mount to silence this warning. [ 97.872782][ T6392] ======================================================= [ 98.114902][ T42] tipc: Node number set to 2130706433 [ 98.473026][ T6414] syz_tun: entered allmulticast mode [ 98.503501][ T6413] syz_tun: left allmulticast mode [ 98.609057][ T6396] loop0: detected capacity change from 0 to 32768 [ 98.668768][ T6396] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 98.682680][ T6425] program syz.3.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.805141][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 98.853251][ T6396] XFS (loop0): Starting recovery (logdev: internal) [ 98.914537][ T6396] XFS (loop0): Ending recovery (logdev: internal) [ 98.930692][ T6439] loop1: detected capacity change from 0 to 1024 [ 99.000517][ T6439] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 99.024911][ T6439] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 99.044689][ T6439] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 99.056715][ T6439] hfsplus: xattr searching failed [ 99.072820][ T6439] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 99.079391][ T6439] hfsplus: xattr searching failed [ 99.143106][ T6444] syz.3.219[6444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.143247][ T6444] syz.3.219[6444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.227164][ T49] hfsplus: b-tree write err: -5, ino 25 [ 99.253973][ T49] hfsplus: b-tree write err: -5, ino 4 [ 99.260240][ T49] hfsplus: b-tree write err: -5, ino 2 [ 99.262494][ T5783] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 99.280587][ T49] hfsplus: b-tree write err: -5, ino 20 [ 99.727640][ T6463] loop0: detected capacity change from 0 to 256 [ 99.800053][ T6463] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.858796][ T27] audit: type=1800 audit(1793813130.244:26): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.222" name="file1" dev="loop0" ino=1048631 res=0 errno=0 [ 99.864259][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.896807][ T27] audit: type=1800 audit(1793813130.244:27): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.222" name="file1" dev="loop0" ino=1048631 res=0 errno=0 [ 99.913671][ T6463] FAT-fs (loop0): Filesystem has been set read-only [ 99.930005][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.943668][ T6462] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.954247][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.965449][ T6462] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 99.985049][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.001354][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.016072][ T6474] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.027174][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.038264][ T6463] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.062334][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.166545][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.247125][ T5892] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.260963][ T5892] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.272075][ T42] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.281761][ T5892] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.295771][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.321871][ T6467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.340076][ T5892] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 100.356493][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 100.378521][ T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.410393][ T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.448142][ T23] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 100.482356][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.490611][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.499982][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.509860][ T42] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 100.523274][ T23] usb 2-1: config 0 descriptor?? [ 100.531608][ T42] usb 3-1: config 0 has no interface number 0 [ 100.548425][ T42] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 60415, setting to 1023 [ 100.589735][ T42] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 6424, setting to 64 [ 100.611761][ T42] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 100.621015][ T42] usb 3-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 100.633189][ T42] usb 3-1: Manufacturer: syz [ 100.654275][ T42] usb 3-1: config 0 descriptor?? [ 100.660343][ T6473] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 100.710294][ T9] usb 4-1: USB disconnect, device number 5 [ 100.864508][ T6480] loop0: detected capacity change from 0 to 256 [ 100.877131][ T6480] exfat: Deprecated parameter 'utf8' [ 100.904810][ T42] ftdi_sio 3-1:0.60: FTDI USB Serial Device converter detected [ 100.912268][ T6480] exfat: Deprecated parameter 'utf8' [ 100.925019][ T6480] exfat: Deprecated parameter 'namecase' [ 100.925589][ T42] usb 3-1: Detected SIO [ 100.949842][ T42] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.971840][ T23] hid (null): unknown global tag 0xc [ 100.985602][ T42] usb 3-1: USB disconnect, device number 3 [ 100.992036][ T6480] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 101.001714][ T23] hid (null): report_id 3323596431 is invalid [ 101.024021][ T23] hid (null): unknown global tag 0xe [ 101.034143][ T23] hid (null): unknown global tag 0xe [ 101.039493][ T23] hid (null): unknown global tag 0xe [ 101.052906][ T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.065957][ T23] hid (null): unknown global tag 0x63 [ 101.071401][ T23] hid (null): unknown global tag 0xe [ 101.082853][ T42] ftdi_sio 3-1:0.60: device disconnected [ 101.096070][ T23] hid (null): global environment stack underflow [ 101.112237][ T23] hid (null): unknown global tag 0xc [ 101.118450][ T23] hid (null): unknown global tag 0xe4 [ 101.223422][ T23] usb 2-1: USB disconnect, device number 2 [ 101.440282][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 101.720322][ T6506] loop0: detected capacity change from 0 to 512 [ 101.740660][ T6506] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.249: invalid indirect mapped block 256 (level 2) [ 101.762790][ T6506] EXT4-fs (loop0): 2 truncates cleaned up [ 101.769657][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.784154][ T5793] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.826626][ T6510] program syz.1.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.878051][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.887675][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.978944][ T5793] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.988526][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.000647][ T5793] usb 4-1: config 0 descriptor?? [ 102.001162][ T6516] batman_adv: Routing algorithm 'B' is not supported [ 102.020850][ T5793] cp210x 4-1:0.0: cp210x converter detected [ 102.083134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 102.104233][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.112581][ T9] usb 3-1: config 179 has no interface number 0 [ 102.119371][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.140024][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.151489][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.163012][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 102.180905][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.195626][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.205885][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.235181][ T6502] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.446372][ T5793] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 102.504219][ T5793] usb 4-1: cp210x converter now attached to ttyUSB0 [ 102.647484][ T5793] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 102.730862][ T42] usb 4-1: USB disconnect, device number 6 [ 102.803108][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.837693][ T42] cp210x 4-1:0.0: device disconnected [ 102.956527][ T5793] usb 3-1: USB disconnect, device number 4 [ 102.956591][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 102.970759][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 102.979930][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.988493][ T5793] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 103.302034][ T6546] loop1: detected capacity change from 0 to 1024 [ 103.344811][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.412565][ T6546] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.1.267: path /62/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 103.473240][ T6539] loop0: detected capacity change from 0 to 40427 [ 103.487929][ T6539] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 103.499247][ T6539] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.522806][ T6539] F2FS-fs (loop0): invalid crc value [ 103.542000][ T6539] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.563544][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.751819][ T6539] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.765986][ T6559] loop1: detected capacity change from 0 to 1024 [ 103.767926][ T6539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.796566][ T6559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.857365][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.906959][ T27] audit: type=1400 audit(1793813134.294:28): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6565 comm="syz.3.273" name="unknown" offset=28 [ 103.977907][ T5783] syz-executor: attempt to access beyond end of device [ 103.977907][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.996086][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 104.059068][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.453757][ T6582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 104.680827][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 104.941892][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 105.138314][ T6612] warning: `syz.2.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.272318][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 105.394168][ T6624] ªªªªªª: renamed from vlan0 (while UP) [ 105.590788][ T6638] loop1: detected capacity change from 0 to 512 [ 105.605041][ T6638] EXT4-fs: inline encryption not supported [ 105.632505][ T6638] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.703633][ T6638] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.308: Invalid inode bitmap blk 4 in block_group 0 [ 105.742007][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 105.750755][ T6642] loop0: detected capacity change from 0 to 2048 [ 105.772206][ T6638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.799842][ T6647] loop2: detected capacity change from 0 to 128 [ 105.819228][ T6647] ext4: Bad value for 'resuid' [ 105.827254][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.843959][ T6642] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.867229][ T6642] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.309: path /68/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 105.975734][ T5777] blk_print_req_error: 34 callbacks suppressed [ 105.975750][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.988219][ T5788] kernel write not supported for file /input/event0 (pid: 5788 comm: kworker/0:3) [ 105.998358][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.035348][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.182526][ T2180] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.208892][ T6653] block device autoloading is deprecated and will be removed. [ 106.270709][ T6659] loop0: detected capacity change from 0 to 256 [ 106.370885][ T6659] FAT-fs (loop0): Directory bread(block 64) failed [ 106.387093][ T6659] FAT-fs (loop0): Directory bread(block 65) failed [ 106.395177][ T2180] usb 4-1: Using ep0 maxpacket: 16 [ 106.423481][ T6659] FAT-fs (loop0): Directory bread(block 66) failed [ 106.430112][ T6659] FAT-fs (loop0): Directory bread(block 67) failed [ 106.452561][ T2180] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.473393][ T2180] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.482466][ T6659] FAT-fs (loop0): Directory bread(block 68) failed [ 106.489855][ T6659] FAT-fs (loop0): Directory bread(block 69) failed [ 106.499882][ T2180] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.513498][ T6659] FAT-fs (loop0): Directory bread(block 70) failed [ 106.533898][ T2180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.540424][ T6659] FAT-fs (loop0): Directory bread(block 71) failed [ 106.540941][ T2180] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 106.559506][ T6659] FAT-fs (loop0): Directory bread(block 72) failed [ 106.582168][ T2180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.585174][ T6659] FAT-fs (loop0): Directory bread(block 73) failed [ 106.611376][ T2180] usb 4-1: config 0 descriptor?? [ 106.661799][ T6672] loop2: detected capacity change from 0 to 1024 [ 106.795277][ T6659] syz.0.316: attempt to access beyond end of device [ 106.795277][ T6659] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 106.858161][ T12] hfsplus: b-tree write err: -5, ino 25 [ 106.864181][ T12] hfsplus: b-tree write err: -5, ino 4 [ 106.869777][ T12] hfsplus: b-tree write err: -5, ino 2 [ 106.882289][ T12] hfsplus: b-tree write err: -5, ino 26 [ 107.044974][ T2180] hid_parser_main: 219 callbacks suppressed [ 107.044992][ T2180] waltop 0003:172F:0032.0005: unknown main item tag 0x3 [ 107.086397][ T2180] waltop 0003:172F:0032.0005: unbalanced collection at end of report description [ 107.103024][ T2180] waltop: probe of 0003:172F:0032.0005 failed with error -22 [ 107.167351][ T6689] loop0: detected capacity change from 0 to 128 [ 107.206067][ T6689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.261298][ T6689] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.357350][ T9] usb 4-1: USB disconnect, device number 7 [ 107.418815][ T5783] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.730374][ T6714] unlock none [ 107.745298][ T6716] loop5: detected capacity change from 0 to 7 [ 107.783349][ T6716] Dev loop5: unable to read RDB block 7 [ 107.788982][ T6716] loop5: unable to read partition table [ 107.805200][ T6716] loop5: partition table beyond EOD, truncated [ 107.813307][ T6716] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 108.171566][ T6732] NILFS (loop3): invalid segment: Magic number mismatch [ 108.187332][ T6732] NILFS (loop3): trying rollback from an earlier position [ 108.232210][ T6732] NILFS (loop3): recovery complete [ 108.242416][ T2180] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 108.251227][ T6737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.349813][ T6739] set_capacity_and_notify: 2 callbacks suppressed [ 108.349827][ T6739] loop1: detected capacity change from 0 to 2048 [ 108.377241][ T6732] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 108.411522][ T6740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.430962][ T2180] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.460006][ T2180] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.468545][ T2180] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 108.479777][ T2180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.539059][ T2180] usb 3-1: config 0 descriptor?? [ 108.551551][ T6740] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 108.560216][ T6742] loop3: detected capacity change from 0 to 2048 [ 108.569231][ T6740] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 108.572320][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.608500][ T6740] Remounting filesystem read-only [ 108.639335][ T5785] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 108.650039][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 108.653888][ T6742] loop3: p1 < > p3 p4 < > [ 108.660562][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.670413][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.671321][ T6742] loop3: p3 size 861184 extends beyond EOD, truncated [ 108.687700][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.687725][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 108.687755][ T5785] NILFS (loop1): discard dirty page: offset=4096, ino=15 [ 108.687771][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 108.687786][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 108.687799][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 108.687811][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 108.689153][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 108.691185][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 108.783161][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 108.811878][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.814224][ T5785] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 108.832743][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.842378][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.843906][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.881984][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.892723][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.901794][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.907667][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 108.932768][ T5785] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 108.950471][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.963175][ T9] usb 1-1: config 0 descriptor?? [ 108.981045][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 108.995626][ T9] hub 1-1:0.0: USB hub found [ 109.008414][ T2180] wacom 0003:056A:0016.0006: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 109.019308][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.035228][ T6744] loop3: detected capacity change from 0 to 1024 [ 109.047890][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 109.051006][ T2180] wacom 0003:056A:0016.0006: hidraw0: USB HID v10.01 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 109.065846][ T5785] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 109.065894][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.065911][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.065924][ T5785] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 109.065938][ T5785] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 109.137074][ T6744] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 109.153929][ T2180] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0006/input/input10 [ 109.198007][ T9] hub 1-1:0.0: 27 ports detected [ 109.207209][ T6744] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.354: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.218646][ T9] hub 1-1:0.0: insufficient power available to use all downstream ports [ 109.247035][ T6744] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 109.256720][ T6744] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.354: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.277250][ T6744] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 109.288962][ T6744] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.354: Failed to acquire dquot type 0 [ 109.313570][ T2180] usb 3-1: USB disconnect, device number 5 [ 109.313640][ T6744] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 109.352931][ T6744] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.354: mark_inode_dirty error [ 109.384358][ T6744] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 109.402007][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 109.412399][ T6744] EXT4-fs (loop3): 1 orphan inode deleted [ 109.419728][ T6744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.432748][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 109.445462][ T3004] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.471138][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 109.481024][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 109.524424][ T3004] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 109.550545][ T3004] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:11: Failed to release dquot type 0 [ 109.572479][ T9] usb 1-1: USB disconnect, device number 5 [ 109.628221][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.647009][ T2982] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 109.661878][ T2982] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 109.671031][ T2982] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:9: Failed to release dquot type 0 [ 109.688373][ T5782] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 109.705835][ T5782] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5974: Corrupt filesystem [ 109.716164][ T5782] EXT4-fs error (device loop3): ext4_quota_off:7242: inode #3: comm syz-executor: mark_inode_dirty error [ 109.852559][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.065177][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.082212][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.111629][ T5892] usb 2-1: config 0 descriptor?? [ 110.134562][ T5892] cp210x 2-1:0.0: cp210x converter detected [ 110.386730][ T6771] : renamed from bond0 (while UP) [ 110.430606][ T6773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.541587][ T5892] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 110.570336][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0 [ 110.824321][ T5793] usb 2-1: USB disconnect, device number 3 [ 110.842789][ T5793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 110.857725][ T6775] loop3: detected capacity change from 0 to 32768 [ 110.877821][ T5793] cp210x 2-1:0.0: device disconnected [ 110.883164][ T5892] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.883271][ T5892] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 110.900131][ T5892] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 110.941552][ T6775] [ 110.941552][ T6775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.941552][ T6775] [ 111.087826][ T6775] ERROR: (device loop3): diWrite: ixpxd invalid [ 111.087826][ T6775] [ 111.120486][ T6775] ERROR: (device loop3): txCommit: [ 111.120486][ T6775] [ 111.134810][ T6790] fido_id[6790]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.264367][ T5782] [ 111.264367][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.264367][ T5782] [ 111.299295][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 111.302295][ T5782] [ 111.302295][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 111.302295][ T5782] [ 111.413610][ T6799] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 111.723704][ T6813] loop2: detected capacity change from 0 to 512 [ 111.758316][ T6813] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.784120][ T6813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.845533][ T6813] EXT4-fs (loop2): 1 truncate cleaned up [ 111.867969][ T6813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.019337][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.071814][ T6824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.266938][ T6829] loop3: detected capacity change from 0 to 164 [ 112.329495][ T6831] ima: Unable to open file: /e (-2) [ 112.336659][ T6830] ima: policy update failed [ 112.366833][ T27] audit: type=1802 audit(1793813142.744:29): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.386" res=0 errno=0 [ 112.545189][ T6840] loop2: detected capacity change from 0 to 2048 [ 112.643871][ T6840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.753673][ T6848] loop3: detected capacity change from 0 to 1024 [ 112.769923][ T6848] EXT4-fs: Ignoring removed bh option [ 112.800329][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.818106][ T6848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.826028][ T6850] block nbd1: shutting down sockets [ 112.881517][ T6848] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.948831][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.008072][ T5795] block nbd0: Receive control failed (result -32) [ 113.019068][ T5794] block nbd0: Receive control failed (result -32) [ 113.351829][ T6867] loop0: detected capacity change from 0 to 8192 [ 113.383350][ T6867] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.150234][ T6882] loop1: detected capacity change from 0 to 32768 [ 132.926292][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932820][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369869][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378650][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.442211][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 196.458623][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 196.463264][ T5797] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.804874][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811196][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.002257][ T28] INFO: task kworker/u4:10:2994 blocked for more than 143 seconds. [ 275.010639][ T28] Not tainted syzkaller #0 [ 275.017680][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.026561][ T28] task:kworker/u4:10 state:D stack:22312 pid:2994 ppid:2 flags:0x00004000 [ 275.035851][ T28] Workqueue: writeback wb_workfn (flush-8:0) [ 275.041894][ T28] Call Trace: [ 275.047075][ T28] [ 275.050049][ T28] __schedule+0x156f/0x4720 [ 275.054611][ T28] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 275.060877][ T28] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 275.071829][ T28] ? mark_lock+0x94/0x320 [ 275.077501][ T28] ? asan.module_dtor+0x20/0x20 [ 275.084944][ T28] ? blk_check_plugged+0x250/0x250 [ 275.090063][ T28] ? kthread_data+0x4f/0xc0 [ 275.094602][ T28] ? wq_worker_sleeping+0x63/0x240 [ 275.099721][ T28] schedule+0xbd/0x170 [ 275.106156][ T28] io_schedule+0x80/0xd0 [ 275.110400][ T28] bit_wait_io+0x13/0x100 [ 275.115379][ T28] __wait_on_bit+0x9f/0x2c0 [ 275.119887][ T28] ? bit_wait+0x100/0x100 [ 275.126526][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 275.131986][ T28] ? bit_wait+0x100/0x100 [ 275.136351][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 275.141127][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 275.146381][ T28] ? bit_waitqueue+0x30/0x30 [ 275.151140][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 275.156416][ T28] do_get_write_access+0x5c9/0xe00 [ 275.161644][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 275.167707][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 275.173952][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 275.180432][ T28] ? __might_sleep+0xe0/0xe0 [ 275.185357][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 275.190934][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 275.196541][ T28] ext4_ext_insert_extent+0x249b/0x4520 [ 275.202304][ T28] ? ext4_find_extent+0x1f5/0xcd0 [ 275.207333][ T28] ? ext4_ext_search_right+0x376/0x800 [ 275.212931][ T28] ? __asan_memcpy+0x40/0x70 [ 275.217570][ T28] ? ext4_ext_next_allocated_block+0x250/0x250 [ 275.223812][ T28] ? ext4_ext_find_goal+0xed/0x1d0 [ 275.228932][ T28] ext4_ext_map_blocks+0x1967/0x68c0 [ 275.234370][ T28] ? __might_sleep+0xe0/0xe0 [ 275.238978][ T28] ? ext4_ext_release+0x10/0x10 [ 275.244003][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.249048][ T28] ? ext4_es_lookup_extent+0x601/0x9f0 [ 275.254902][ T28] ext4_map_blocks+0x9db/0x1a90 [ 275.259786][ T28] ? ext4_issue_zeroout+0x250/0x250 [ 275.265077][ T28] ? rcu_is_watching+0x15/0xb0 [ 275.269869][ T28] ? ext4_inode_journal_mode+0x376/0x460 [ 275.275654][ T28] ext4_do_writepages+0x1463/0x3990 [ 275.281396][ T28] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 275.288374][ T28] ? rcu_read_lock_any_held+0xb4/0x140 [ 275.293964][ T28] ? __lock_acquire+0x1431/0x7eb0 [ 275.299003][ T28] ext4_writepages+0x1dd/0x350 [ 275.303889][ T28] ? ext4_read_folio+0x2f0/0x2f0 [ 275.308855][ T28] ? reacquire_held_locks+0x31f/0x5c0 [ 275.314347][ T28] ? writeback_sb_inodes+0x35e/0x1020 [ 275.319745][ T28] ? ext4_read_folio+0x2f0/0x2f0 [ 275.328706][ T28] do_writepages+0x351/0x590 [ 275.333544][ T28] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 275.339278][ T28] ? writeback_sb_inodes+0x4bd/0x1020 [ 275.344744][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.349778][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 275.355119][ T28] __writeback_single_inode+0x14e/0xee0 [ 275.360681][ T28] writeback_sb_inodes+0x813/0x1020 [ 275.365995][ T28] ? queue_io+0x530/0x530 [ 275.370351][ T28] __writeback_inodes_wb+0x114/0x240 [ 275.375717][ T28] wb_writeback+0x472/0xbe0 [ 275.380242][ T28] ? queue_io+0x361/0x530 [ 275.385203][ T28] ? percpu_ref_tryget+0x250/0x250 [ 275.390327][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 275.396388][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.401430][ T28] wb_workfn+0xad7/0xe60 [ 275.405787][ T28] ? inode_wait_for_writeback+0x230/0x230 [ 275.411548][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 275.417741][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.422850][ T28] ? read_lock_is_recursive+0x20/0x20 [ 275.428255][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.433586][ T28] ? process_scheduled_works+0x975/0x1600 [ 275.439481][ T28] ? process_scheduled_works+0x975/0x1600 [ 275.445297][ T28] process_scheduled_works+0xa60/0x1600 [ 275.450872][ T28] ? worker_attach_to_pool+0x370/0x370 [ 275.456655][ T28] ? assign_work+0x3cc/0x5d0 [ 275.461297][ T28] worker_thread+0xa5e/0xfe0 [ 275.466050][ T28] kthread+0x2fa/0x390 [ 275.470154][ T28] ? pr_cont_work+0x550/0x550 [ 275.474920][ T28] ? kthread_blkcg+0xd0/0xd0 [ 275.479522][ T28] ret_from_fork+0x48/0x80 [ 275.484093][ T28] ? kthread_blkcg+0xd0/0xd0 [ 275.489060][ T28] ret_from_fork_asm+0x11/0x20 [ 275.493959][ T28] [ 275.496988][ T28] INFO: task jbd2/sda1-8:5117 blocked for more than 143 seconds. [ 275.504797][ T28] Not tainted syzkaller #0 [ 275.509734][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.518500][ T28] task:jbd2/sda1-8 state:D stack:26024 pid:5117 ppid:2 flags:0x00004000 [ 275.527792][ T28] Call Trace: [ 275.531085][ T28] [ 275.534145][ T28] __schedule+0x156f/0x4720 [ 275.538676][ T28] ? asan.module_dtor+0x20/0x20 [ 275.543710][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.548749][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 275.554734][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 275.560159][ T28] schedule+0xbd/0x170 [ 275.564343][ T28] io_schedule+0x80/0xd0 [ 275.568603][ T28] bit_wait_io+0x13/0x100 [ 275.573028][ T28] __wait_on_bit+0x9f/0x2c0 [ 275.577582][ T28] ? bit_wait+0x100/0x100 [ 275.581903][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 275.587978][ T28] ? bit_wait+0x100/0x100 [ 275.592447][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 275.597224][ T28] ? do_raw_write_lock+0x11e/0x260 [ 275.602442][ T28] ? bit_waitqueue+0x30/0x30 [ 275.607048][ T28] ? do_raw_read_unlock+0x3d/0x80 [ 275.612255][ T28] jbd2_journal_commit_transaction+0x2e90/0x5ad0 [ 275.618636][ T28] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 275.625496][ T28] ? lock_chain_count+0x20/0x20 [ 275.630364][ T28] ? _raw_spin_unlock+0x40/0x40 [ 275.635328][ T28] ? __try_to_del_timer_sync+0x1c2/0x280 [ 275.640972][ T28] ? __timer_delete_sync+0x23d/0x2e0 [ 275.646332][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.651371][ T28] ? timer_delete_sync+0x20/0x20 [ 275.656435][ T28] ? do_raw_read_unlock+0x80/0x80 [ 275.661641][ T28] ? prepare_to_wait+0x1aa/0x200 [ 275.666679][ T28] kjournald2+0x40f/0x810 [ 275.671033][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 275.676344][ T28] ? wake_bit_function+0x200/0x200 [ 275.681476][ T28] ? _raw_spin_unlock+0x40/0x40 [ 275.686454][ T28] ? __kthread_parkme+0x71/0x1c0 [ 275.691715][ T28] ? __kthread_parkme+0x15b/0x1c0 [ 275.696857][ T28] kthread+0x2fa/0x390 [ 275.700941][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 275.706234][ T28] ? kthread_blkcg+0xd0/0xd0 [ 275.710832][ T28] ret_from_fork+0x48/0x80 [ 275.715349][ T28] ? kthread_blkcg+0xd0/0xd0 [ 275.719949][ T28] ret_from_fork_asm+0x11/0x20 [ 275.724887][ T28] [ 275.727929][ T28] INFO: task syz-executor:5771 blocked for more than 144 seconds. [ 275.735831][ T28] Not tainted syzkaller #0 [ 275.740807][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.749549][ T28] task:syz-executor state:D stack:22888 pid:5771 ppid:5770 flags:0x00004002 [ 275.758835][ T28] Call Trace: [ 275.762481][ T28] [ 275.765429][ T28] __schedule+0x156f/0x4720 [ 275.769959][ T28] ? mark_lock+0x94/0x320 [ 275.774376][ T28] ? asan.module_dtor+0x20/0x20 [ 275.779239][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.784346][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 275.790246][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 275.796110][ T28] schedule+0xbd/0x170 [ 275.800215][ T28] io_schedule+0x80/0xd0 [ 275.805050][ T28] bit_wait_io+0x13/0x100 [ 275.809411][ T28] __wait_on_bit+0x9f/0x2c0 [ 275.816894][ T28] ? bit_wait+0x100/0x100 [ 275.821231][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 275.827306][ T28] ? bit_wait+0x100/0x100 [ 275.831663][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 275.836784][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 275.841808][ T28] ? bit_waitqueue+0x30/0x30 [ 275.846513][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 275.851807][ T28] do_get_write_access+0x5c9/0xe00 [ 275.856978][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 275.863011][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 275.869175][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 275.875427][ T28] ? __might_sleep+0xe0/0xe0 [ 275.880035][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 275.886344][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 275.891854][ T28] ext4_dirty_inode+0xcb/0x110 [ 275.897401][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 275.903273][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 275.908314][ T28] file_update_time+0x187/0x1a0 [ 275.913269][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 275.918326][ T28] ? do_wp_page+0x4ce/0x34d0 [ 275.922988][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 275.929246][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.934364][ T28] do_page_mkwrite+0x153/0x3f0 [ 275.939150][ T28] do_wp_page+0xd4d/0x34d0 [ 275.943730][ T28] ? folio_put+0xd0/0xd0 [ 275.948012][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 275.953182][ T28] ? __rwlock_init+0x150/0x150 [ 275.957970][ T28] handle_mm_fault+0x1300/0x4a40 [ 275.963259][ T28] ? handle_mm_fault+0xe6/0x4a40 [ 275.968236][ T28] ? numa_migrate_prep+0x350/0x350 [ 275.973434][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 275.978730][ T28] do_user_addr_fault+0xeb7/0x13e0 [ 275.983894][ T28] exc_page_fault+0x64/0x100 [ 275.988491][ T28] ? clear_bhb_loop+0x40/0x90 [ 275.993265][ T28] asm_exc_page_fault+0x26/0x30 [ 275.998555][ T28] RIP: 0033:0x7f806fc7df91 [ 276.003097][ T28] RSP: 002b:00007ffe03eb82d0 EFLAGS: 00010202 [ 276.009171][ T28] RAX: 0000000000000040 RBX: 0000000000000001 RCX: 0000000000000006 [ 276.017182][ T28] RDX: 00007f806dba4000 RSI: 0000000000001d50 RDI: ffffffff8a9fffff [ 276.025197][ T28] RBP: 00007ffe03eb87d0 R08: 0000000000001000 R09: 000055559252d1d8 [ 276.033261][ T28] R10: 0000000000000091 R11: 000055559252d1e0 R12: 00007ffe03eb8610 [ 276.041236][ T28] R13: 00007ffe03eb8400 R14: 585858582e7a7973 R15: 00007ffe03eb8350 [ 276.049260][ T28] ? __schedule+0x153f/0x4720 [ 276.054103][ T28] [ 276.057170][ T28] INFO: task syz.3.403:6868 blocked for more than 144 seconds. [ 276.064878][ T28] Not tainted syzkaller #0 [ 276.069825][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.078579][ T28] task:syz.3.403 state:D stack:27048 pid:6868 ppid:5782 flags:0x00004004 [ 276.087815][ T28] Call Trace: [ 276.091079][ T28] [ 276.094049][ T28] __schedule+0x156f/0x4720 [ 276.098577][ T28] ? mark_lock+0x94/0x320 [ 276.103618][ T28] ? asan.module_dtor+0x20/0x20 [ 276.108493][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.113617][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 276.119521][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 276.124938][ T28] schedule+0xbd/0x170 [ 276.129021][ T28] io_schedule+0x80/0xd0 [ 276.133308][ T28] bit_wait_io+0x13/0x100 [ 276.137656][ T28] __wait_on_bit+0x9f/0x2c0 [ 276.142223][ T28] ? bit_wait+0x100/0x100 [ 276.146566][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 276.152051][ T28] ? bit_wait+0x100/0x100 [ 276.156416][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 276.161166][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.166371][ T28] ? bit_waitqueue+0x30/0x30 [ 276.170973][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 276.176284][ T28] do_get_write_access+0x5c9/0xe00 [ 276.181436][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 276.187499][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.193766][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.199944][ T28] ? __might_sleep+0xe0/0xe0 [ 276.205636][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 276.211232][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 276.216755][ T28] ext4_dirty_inode+0xcb/0x110 [ 276.221526][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 276.227398][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 276.232524][ T28] file_update_time+0x187/0x1a0 [ 276.237385][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 276.242468][ T28] ? filemap_fault+0x103c/0x1540 [ 276.247418][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 276.253193][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 276.259437][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.264513][ T28] ? __pte_offset_map+0x20d/0x280 [ 276.269545][ T28] do_page_mkwrite+0x153/0x3f0 [ 276.274515][ T28] handle_mm_fault+0x1a26/0x4a40 [ 276.279464][ T28] ? handle_mm_fault+0xe6/0x4a40 [ 276.286143][ T28] ? numa_migrate_prep+0x350/0x350 [ 276.291306][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 276.296624][ T28] do_user_addr_fault+0xeb7/0x13e0 [ 276.301754][ T28] exc_page_fault+0x64/0x100 [ 276.307093][ T28] ? clear_bhb_loop+0x40/0x90 [ 276.311798][ T28] asm_exc_page_fault+0x26/0x30 [ 276.316754][ T28] RIP: 0033:0x7f364a8740b1 [ 276.321179][ T28] RSP: 002b:00007ffffdaa0870 EFLAGS: 00010202 [ 276.327286][ T28] RAX: 0000001b2e722000 RBX: ffffffff8461ea6d RCX: 0000001b2e721ff8 [ 276.335281][ T28] RDX: 0000001b2e12421c RSI: 0000000000000008 RDI: 00007f364b755720 [ 276.343318][ T28] RBP: 00000000000000bf R08: 00007f364ac10000 R09: 00007f364ac12000 [ 276.351294][ T28] R10: 000000008461ea71 R11: 0000000000000003 R12: 00007f364ac26038 [ 276.359330][ T28] R13: 00000000000003e1 R14: ffffffff8461e981 R15: 00007f364b755720 [ 276.367816][ T28] ? strncpy_from_user+0x1a1/0x2f0 [ 276.372996][ T28] ? strncpy_from_user+0x28d/0x2f0 [ 276.378131][ T28] [ 276.381144][ T28] INFO: task syz.2.404:6869 blocked for more than 144 seconds. [ 276.388825][ T28] Not tainted syzkaller #0 [ 276.393914][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.402644][ T28] task:syz.2.404 state:D stack:27048 pid:6869 ppid:5784 flags:0x00004004 [ 276.412476][ T28] Call Trace: [ 276.415802][ T28] [ 276.418719][ T28] __schedule+0x156f/0x4720 [ 276.423322][ T28] ? mark_lock+0x94/0x320 [ 276.427668][ T28] ? asan.module_dtor+0x20/0x20 [ 276.432624][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.437668][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 276.443693][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 276.449111][ T28] schedule+0xbd/0x170 [ 276.453226][ T28] io_schedule+0x80/0xd0 [ 276.457480][ T28] bit_wait_io+0x13/0x100 [ 276.461805][ T28] __wait_on_bit+0x9f/0x2c0 [ 276.466354][ T28] ? bit_wait+0x100/0x100 [ 276.470694][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 276.476241][ T28] ? bit_wait+0x100/0x100 [ 276.480587][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 276.485429][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.490466][ T28] ? bit_waitqueue+0x30/0x30 [ 276.495192][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 276.500410][ T28] do_get_write_access+0x5c9/0xe00 [ 276.505683][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 276.512134][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.518305][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.524627][ T28] ? __might_sleep+0xe0/0xe0 [ 276.529233][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 276.534813][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 276.540289][ T28] ext4_dirty_inode+0xcb/0x110 [ 276.545134][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 276.550958][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 276.556119][ T28] file_update_time+0x187/0x1a0 [ 276.560984][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 276.566069][ T28] ? filemap_fault+0x103c/0x1540 [ 276.571042][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 276.576793][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 276.583109][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.588143][ T28] ? __pte_offset_map+0x20d/0x280 [ 276.593273][ T28] do_page_mkwrite+0x153/0x3f0 [ 276.598054][ T28] handle_mm_fault+0x1a26/0x4a40 [ 276.603424][ T28] ? handle_mm_fault+0xe6/0x4a40 [ 276.608393][ T28] ? numa_migrate_prep+0x350/0x350 [ 276.614329][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 276.619642][ T28] do_user_addr_fault+0xeb7/0x13e0 [ 276.624829][ T28] exc_page_fault+0x64/0x100 [ 276.629426][ T28] ? clear_bhb_loop+0x40/0x90 [ 276.634178][ T28] asm_exc_page_fault+0x26/0x30 [ 276.639041][ T28] RIP: 0033:0x7f5490e740b1 [ 276.643525][ T28] RSP: 002b:00007fff71fb93b0 EFLAGS: 00010202 [ 276.649600][ T28] RAX: 0000001b2e61f000 RBX: ffffffff81f824e6 RCX: 0000001b2e61eff8 [ 276.657601][ T28] RDX: 0000001b2e02421c RSI: 0000000000000008 RDI: 00007f5491d55720 [ 276.665657][ T28] RBP: 0000000000000016 R08: 00007f5491210000 R09: 00007f5491212000 [ 276.673716][ T28] R10: 0000000081f824ea R11: 0000000000000003 R12: 00007f5491226038 [ 276.681702][ T28] R13: 0000000000000015 R14: ffffffff81f82440 R15: 00007f5491d55720 [ 276.689858][ T28] ? __fdget+0x20/0x210 [ 276.694084][ T28] ? __fdget+0xc6/0x210 [ 276.698255][ T28] [ 276.701261][ T28] INFO: task syz.1.407:6881 blocked for more than 145 seconds. [ 276.708835][ T28] Not tainted syzkaller #0 [ 276.714594][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.723401][ T28] task:syz.1.407 state:D stack:27048 pid:6881 ppid:5785 flags:0x00004004 [ 276.732667][ T28] Call Trace: [ 276.735949][ T28] [ 276.738869][ T28] __schedule+0x156f/0x4720 [ 276.743477][ T28] ? mark_lock+0x94/0x320 [ 276.747816][ T28] ? asan.module_dtor+0x20/0x20 [ 276.752755][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 276.757818][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 276.763814][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 276.769023][ T28] schedule+0xbd/0x170 [ 276.773154][ T28] io_schedule+0x80/0xd0 [ 276.777411][ T28] bit_wait_io+0x13/0x100 [ 276.781732][ T28] __wait_on_bit+0x9f/0x2c0 [ 276.786306][ T28] ? bit_wait+0x100/0x100 [ 276.790652][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 276.796190][ T28] ? bit_wait+0x100/0x100 [ 276.800534][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 276.805354][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 276.810397][ T28] ? bit_waitqueue+0x30/0x30 [ 276.815046][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 276.820716][ T28] do_get_write_access+0x5c9/0xe00 [ 276.826025][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 276.832056][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 276.838223][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 276.844600][ T28] ? __might_sleep+0xe0/0xe0 [ 276.849210][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 276.854798][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 276.860285][ T28] ext4_dirty_inode+0xcb/0x110 [ 276.865088][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 276.870898][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 276.876017][ T28] file_update_time+0x187/0x1a0 [ 276.880881][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 276.885955][ T28] ? filemap_fault+0x103c/0x1540 [ 276.890908][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 276.896653][ T28] ? pte_alloc_one+0x3b6/0x540 [ 276.901425][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 276.907722][ T28] do_page_mkwrite+0x153/0x3f0 [ 276.912599][ T28] handle_mm_fault+0x1a26/0x4a40 [ 276.917545][ T28] ? handle_mm_fault+0xe6/0x4a40 [ 276.923776][ T28] ? numa_migrate_prep+0x350/0x350 [ 276.928933][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 276.934392][ T28] do_user_addr_fault+0xeb7/0x13e0 [ 276.939533][ T28] exc_page_fault+0x64/0x100 [ 276.944187][ T28] asm_exc_page_fault+0x26/0x30 [ 276.949044][ T28] RIP: 0033:0x7feb31e74111 [ 276.953601][ T28] RSP: 002b:00007ffd75b4db20 EFLAGS: 00010202 [ 276.959678][ T28] RAX: 0000001b2e524000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 276.967697][ T28] RDX: 0000001b2e523ffc RSI: 00000000005ffde8 RDI: 00007feb32d55700 [ 276.975707][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007feb32212000 [ 276.983757][ T28] R10: 00007feb32d55700 R11: 0000000000000000 R12: 0000000000000000 [ 276.991732][ T28] R13: 00000000000138d1 R14: ffffffff813242f0 R15: 00007feb32d55720 [ 276.999772][ T28] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 277.005902][ T28] [ 277.008920][ T28] INFO: task syz-executor:6883 blocked for more than 145 seconds. [ 277.016810][ T28] Not tainted syzkaller #0 [ 277.022250][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.030939][ T28] task:syz-executor state:D stack:25608 pid:6883 ppid:5771 flags:0x00004000 [ 277.040259][ T28] Call Trace: [ 277.043690][ T28] [ 277.046639][ T28] __schedule+0x156f/0x4720 [ 277.051185][ T28] ? mark_lock+0x94/0x320 [ 277.055593][ T28] ? asan.module_dtor+0x20/0x20 [ 277.060462][ T28] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.065600][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 277.071504][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 277.076822][ T28] schedule+0xbd/0x170 [ 277.080909][ T28] io_schedule+0x80/0xd0 [ 277.085182][ T28] bit_wait_io+0x13/0x100 [ 277.089529][ T28] __wait_on_bit+0x9f/0x2c0 [ 277.094102][ T28] ? bit_wait+0x100/0x100 [ 277.098445][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 277.103949][ T28] ? bit_wait+0x100/0x100 [ 277.108288][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 277.113144][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 277.118183][ T28] ? bit_waitqueue+0x30/0x30 [ 277.122817][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 277.128459][ T28] do_get_write_access+0x5c9/0xe00 [ 277.133652][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 277.139647][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 277.145893][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 277.152257][ T28] ? __might_sleep+0xe0/0xe0 [ 277.156883][ T28] ? posix_acl_create+0x169/0x440 [ 277.161942][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 277.167721][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 277.173405][ T28] __ext4_new_inode+0x309a/0x3aa0 [ 277.178457][ T28] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 277.184283][ T28] ext4_mkdir+0x40b/0xc90 [ 277.188637][ T28] ? ext4_symlink+0x940/0x940 [ 277.193366][ T28] ? inode_permission+0xf3/0x480 [ 277.198326][ T28] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 277.203423][ T28] ? security_inode_mkdir+0xb7/0x100 [ 277.208720][ T28] vfs_mkdir+0x2a5/0x470 [ 277.213016][ T28] do_mkdirat+0x1dc/0x450 [ 277.217355][ T28] ? vfs_mkdir+0x470/0x470 [ 277.221793][ T28] ? getname_flags+0x20a/0x500 [ 277.227292][ T28] __x64_sys_mkdir+0x6e/0x80 [ 277.231897][ T28] do_syscall_64+0x55/0xb0 [ 277.236362][ T28] ? clear_bhb_loop+0x40/0x90 [ 277.241052][ T28] ? clear_bhb_loop+0x40/0x90 [ 277.245780][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.251685][ T28] RIP: 0033:0x7f34f87ccee7 [ 277.256140][ T28] RSP: 002b:00007ffc2918d638 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 277.264707][ T28] RAX: ffffffffffffffda RBX: 00007ffc2918d762 RCX: 00007f34f87ccee7 [ 277.272761][ T28] RDX: 000000000ce357ab RSI: 00000000000001c0 RDI: 00007ffc2918d750 [ 277.280736][ T28] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 277.288822][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000ce357ab [ 277.296857][ T28] R13: 00007ffc2918d762 R14: 0000000000000004 R15: 00007f34f885e580 [ 277.304916][ T28] [ 277.307977][ T28] [ 277.307977][ T28] Showing all locks held in the system: [ 277.315760][ T28] 1 lock held by khungtaskd/28: [ 277.320610][ T28] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 277.331354][ T28] 6 locks held by kworker/u4:10/2994: [ 277.336800][ T28] #0: ffff88801d244138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 277.348090][ T28] #1: ffffc9000bf47d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 277.360565][ T28] #2: ffff88802e7920e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 277.371161][ T28] #3: ffff88802e794c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 277.381764][ T28] #4: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.391470][ T28] #5: ffff888077da7088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 277.401339][ T28] 2 locks held by klogd/5143: [ 277.406127][ T28] #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 277.416291][ T28] #1: ffff8880b8c28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21fc/0x4720 [ 277.425082][ T28] 2 locks held by getty/5542: [ 277.429762][ T28] #0: ffff88814d1b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 277.440261][ T28] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 [ 277.450469][ T28] 3 locks held by syz-executor/5771: [ 277.455821][ T28] #0: ffff8880798b27a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.465765][ T28] #1: ffff88802e792510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.475604][ T28] #2: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.485726][ T28] 3 locks held by syz.3.403/6868: [ 277.490763][ T28] #0: ffff8880258d81a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.500747][ T28] #1: ffff88802e792510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.510599][ T28] #2: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.520329][ T28] 3 locks held by syz.2.404/6869: [ 277.525374][ T28] #0: ffff8880258d9e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.536053][ T28] #1: ffff88802e792510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.545882][ T28] #2: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.555634][ T28] 3 locks held by syz.1.407/6881: [ 277.560684][ T28] #0: ffff8880258db120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 277.570789][ T28] #1: ffff88802e792510 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 277.580599][ T28] #2: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.590308][ T28] 3 locks held by syz-executor/6883: [ 277.595680][ T28] #0: ffff88802e792418 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x41/0x90 [ 277.604856][ T28] #1: ffff888077d87210 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 277.615591][ T28] #2: ffff88802e796990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 277.625298][ T28] [ 277.627623][ T28] ============================================= [ 277.627623][ T28] [ 277.636718][ T28] NMI backtrace for cpu 1 [ 277.641059][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 277.648240][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.658311][ T28] Call Trace: [ 277.661576][ T28] [ 277.664497][ T28] dump_stack_lvl+0x18c/0x250 [ 277.669172][ T28] ? __wake_up_klogd+0xd9/0x100 [ 277.674022][ T28] ? show_regs_print_info+0x20/0x20 [ 277.679217][ T28] ? load_image+0x420/0x420 [ 277.683722][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 277.688658][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 277.694815][ T28] ? load_image+0x420/0x420 [ 277.699312][ T28] ? wq_watchdog_touch+0xef/0x170 [ 277.704335][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 277.710403][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 277.716384][ T28] watchdog+0xf59/0xfa0 [ 277.720540][ T28] ? watchdog+0x1e1/0xfa0 [ 277.724873][ T28] kthread+0x2fa/0x390 [ 277.728932][ T28] ? hungtask_pm_notify+0x50/0x50 [ 277.733951][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.738539][ T28] ret_from_fork+0x48/0x80 [ 277.742957][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.747538][ T28] ret_from_fork_asm+0x11/0x20 [ 277.752316][ T28] [ 277.756305][ T28] Sending NMI from CPU 1 to CPUs 0: [ 277.761531][ C0] NMI backtrace for cpu 0 [ 277.761540][ C0] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 277.761555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.761565][ C0] Workqueue: bat_events batadv_nc_worker [ 277.761588][ C0] RIP: 0010:lock_release+0x150/0x8c0 [ 277.761608][ C0] Code: 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 48 8b 84 24 a0 00 00 00 48 89 44 24 50 43 c6 44 2f 08 f8 fa <48> c7 c7 20 de ea 8a e8 04 96 2e 09 65 ff 05 15 27 99 7e c7 44 24 [ 277.761620][ C0] RSP: 0018:ffffc900001179e0 EFLAGS: 00000046 [ 277.761632][ C0] RAX: 0000000000000246 RBX: ffff88801d6464e4 RCX: 308a97617de80100 [ 277.761643][ C0] RDX: 0000000000000000 RSI: ffffffff8b3c5240 RDI: ffffffff8b3c5200 [ 277.761654][ C0] RBP: ffffc90000117ae8 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 277.761665][ C0] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: ffffffff8a5f1b1a [ 277.761676][ C0] R13: dffffc0000000000 R14: ffff88801d645a00 R15: 1ffff92000022f48 [ 277.761687][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 277.761700][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.761711][ C0] CR2: 00005565409f5660 CR3: 000000000df32000 CR4: 00000000003506f0 [ 277.761724][ C0] Call Trace: [ 277.761729][ C0] [ 277.761741][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 277.761759][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 277.761784][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 277.761804][ C0] ? batadv_nc_process_nc_paths+0x380/0x380 [ 277.761823][ C0] ? batadv_nc_process_nc_paths+0x380/0x380 [ 277.761844][ C0] batadv_nc_process_nc_paths+0x2f1/0x380 [ 277.761866][ C0] ? batadv_nc_process_nc_paths+0xba/0x380 [ 277.761888][ C0] batadv_nc_worker+0x423/0x600 [ 277.761908][ C0] ? process_scheduled_works+0x975/0x1600 [ 277.761929][ C0] process_scheduled_works+0xa60/0x1600 [ 277.761962][ C0] ? worker_attach_to_pool+0x370/0x370 [ 277.761985][ C0] ? assign_work+0x3cc/0x5d0 [ 277.762006][ C0] worker_thread+0xa5e/0xfe0 [ 277.762038][ C0] kthread+0x2fa/0x390 [ 277.762051][ C0] ? pr_cont_work+0x550/0x550 [ 277.762070][ C0] ? kthread_blkcg+0xd0/0xd0 [ 277.762085][ C0] ret_from_fork+0x48/0x80 [ 277.762104][ C0] ? kthread_blkcg+0xd0/0xd0 [ 277.762119][ C0] ret_from_fork_asm+0x11/0x20 [ 277.762146][ C0] [ 277.762638][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 277.762648][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 277.762665][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.762674][ T28] Call Trace: [ 277.762680][ T28] [ 277.762686][ T28] dump_stack_lvl+0x18c/0x250 [ 277.762712][ T28] ? show_regs_print_info+0x20/0x20 [ 277.762734][ T28] ? load_image+0x420/0x420 [ 277.762762][ T28] panic+0x2ca/0x720 [ 277.762783][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 277.762799][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 277.762820][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 277.762845][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 277.762876][ T28] watchdog+0xf98/0xfa0 [ 277.762899][ T28] ? watchdog+0x1e1/0xfa0 [ 277.762927][ T28] kthread+0x2fa/0x390 [ 277.762944][ T28] ? hungtask_pm_notify+0x50/0x50 [ 277.762967][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.762985][ T28] ret_from_fork+0x48/0x80 [ 277.763004][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.763023][ T28] ret_from_fork_asm+0x11/0x20 [ 277.763057][ T28] [ 277.766608][ T28] Kernel Offset: disabled [ 278.101801][ T28] Rebooting in 86400 seconds..