last executing test programs: 18m31.541029644s ago: executing program 32 (id=11516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000a40)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m2.583512545s ago: executing program 33 (id=24069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7m21.019186937s ago: executing program 34 (id=25738): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setuid(r0) 7m13.96279039s ago: executing program 35 (id=25821): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000f80)="190004000800aaaaaa0103000000", 0xe) 6m12.429129893s ago: executing program 36 (id=26825): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)='R\x00\x00\r\x00\x00', 0x0, 0xfffffffc, 0x2, 0x4, 0x0}) 5m32.94726464s ago: executing program 37 (id=27486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@migrate={0xec, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m5.354891835s ago: executing program 38 (id=27881): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000080)='./file0\x00', 0x8001420, 0x0) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 4m29.177944059s ago: executing program 4 (id=28317): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid_ignore}, {@dmode}, {}, {@nostrict}, {@utf8}, {@gid={'gid', 0x3d, 0xee00}}, {}, {@longad}, {@rootdir={'rootdir', 0x3d, 0x7}}, {@undelete}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000001b80)='./bus\x00', 0x4c27e, 0x10) write$uinput_user_dev(r0, 0x0, 0x0) 4m28.95195823s ago: executing program 4 (id=28318): unshare(0x2040400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 4m28.931284534s ago: executing program 4 (id=28320): unshare(0x2040400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 4m28.854704015s ago: executing program 4 (id=28321): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f0000000180)={[{@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@showassoc}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@cruft}, {@map_normal}, {}, {@map_acorn}, {@cruft}, {@nocompress}, {}, {@map_off}]}, 0xfe, 0xa43, &(0x7f0000000cc0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 4m28.682602113s ago: executing program 4 (id=28323): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4, 0x0, 0x5d}) close(0x3) 4m28.015949007s ago: executing program 4 (id=28331): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) times(0x0) 4m27.799824967s ago: executing program 39 (id=28331): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]}) times(0x0) 4m12.866233439s ago: executing program 5 (id=28515): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 4m12.667912307s ago: executing program 5 (id=28519): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000008c0)=[{0x19, 0x0, [0xa, 0x7, 0x7f, 0x9, 0x100, 0x7, 0x7, 0x8, 0x0, 0xb, 0x7e20, 0x0, 0xf, 0x3, 0xfea, 0x2]}, {0x2b, 0x0, [0x6, 0x7, 0x607, 0x9, 0x8, 0x4, 0x3, 0x1c768af0, 0x4, 0x7, 0xd3df, 0x3ff, 0x7a, 0x80000008, 0x10, 0x4]}], r1, 0x1, 0x1, 0x90}}, 0x20) 4m12.479679526s ago: executing program 5 (id=28521): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_setup(0x81, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x800, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4m12.268854213s ago: executing program 5 (id=28525): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = gettid() fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x1, 0x2, 0x3ed4, 0x0, r1}) 4m12.138598352s ago: executing program 5 (id=28529): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x3808744, &(0x7f0000000400), 0x4, 0x4b1, &(0x7f0000006b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000006fc0)='.\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000007000)=0x20) 4m11.984352915s ago: executing program 5 (id=28532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) 3m55.818487393s ago: executing program 40 (id=28532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) 3m47.070242132s ago: executing program 6 (id=28831): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) 3m46.91189671s ago: executing program 6 (id=28834): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 3m46.816950506s ago: executing program 6 (id=28836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m46.559712835s ago: executing program 6 (id=28840): syz_mount_image$exfat(&(0x7f00000004c0), &(0x7f0000000500)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f00000007c0)={[{@utf8}, {@utf8}, {@discard}, {@fmask={'fmask', 0x3d, 0xff}}, {@dmask={'dmask', 0x3d, 0xf2}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@namecase}, {@errors_continue}, {@discard}]}, 0x1, 0x1542, &(0x7f0000000880)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCck9uQwhuUxMGvf7/RqSpEmS3HJL1v8zMT916vzP6V/n+P3PPN/P5/3Mema9z9rPnud997v3nuHbToOrNaheuR4RwZ+Cl74kAEAsAPQHgOsAIACA0nGl49Lns0pM+HMbYX+tR5KudgXsauL+Z27c/8yN+5+5cf8zN+5/5sb9z9y4/5kb95+xzGzTtLzX8yPzPvj+f2bGn///RdKKj/5yTfEbOwPE/Ksp3P///+GfyOX+/9cK/pUncf8zN+5/ZhV7tQtg/wvw+z8zyPIPZ7j/mRv3n7HM7Jf3gmPhD907jrna967/igdE/p2/A/E9Lv2Ur/5+/s/+/l3Pr/LLjzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYJnHWX6EAIGN8tetijDHGGGOMMcbYX8dnudoVMMYYY4wxxhhj7N8PQYAEBQHEQBaIhayQDQRATMb89RAHN0BOuBFyQW7IA3khHvJBftBgwAJBCAWgIEThJigEN0NhKAJFoRg4KA4l4BYoCbdCKbgNSsPtUAbugLJQDspDBbgTKsJdUAnuhiwAUAWqQjWoDvdCDbgPasL9UAsegNrwINSBh6AuPAz14BGoD49CA3gMGsLj0AgaQxNoCs2gMtzzh/Nfgm7wMnSHHpAAPaEXvAK9oQ/0hX7QH16FAfAaDITXIREGwWB4A4bAmzAU3oJhMBxGwNswEt6BUTAaxsBYGAfjYQK8CxPhPZgEk2EKTIUkmAbT4X2YATNhFnwAs+FDmANzYR7Mh2T4CBbAQkiBj2ERfAKpsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EH7IRd8Cnshj2wFz6DffD5H8w/83f5nREQUKBAhQpjMAZjMRazYTbMjtkxB+bACEYwDuMwJ+bEXJgL82AejMd4zI/50aBBQsICWACjGMVCWAgLY2EsikXRocMSWAJL4q1YCkthaSyNZbAMlsVyWA4rYAWsiBWxElbCylgZq2AVrIbV8F68F3tiTayJtbAW1sbaGbensB7Ww/pYHxtgA2yIDbERNsIm2ASbYTNsjs2xBbbAVtgKW2NrbINtsC22xXbYDttje+yAHbAjdsRO2Ak7YxfskvZSFsCX8WXsgVVET+yFvbA3Jmbpi/2wH76KA/A1fA1fx0QchIPxDXwD38SheBqHXRyOI3AEVhTv4CgcjSTG4jgchxNwAk7EiTgJJ+NknIpJOA2n43ScgTNxJn6As/FD/BDn4lycj8mYjAtwIaZgCi7CM5iKi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24HbfjTlQA+CnuwT2YiPtwH+7H/XgAD+BBPIhpmIaH8BAexsN4BI/gUTyKx/A4nsDjeApP4Wk8g2fxLJ7H83gBX4j/uv7OIqsTQaRTQokYESNiRazIJrKJ7CK7yCFyiIiIiDgRJ3KKnCKXyCXyiDwiXsSL/CK/MMIIEmH6kUJERVQUEoVEYVFYFBVFhRNOlBAlRElRUpQSpURpcbsoI+4QZUU50dJVEBVERdHKVRJ3i8qisqgiqopqorqoLmqIGqKmqClqiVqitqgt6oiHRF3RE/viIyK9Mw3EIGwoBmMj0VjIy0eo5mIothAtRSvxlBiOw7CNaO7aimdFOzEK24u/idH4vOgoxmIn8aLoLLqIruIl0U20cN1FDzEJe4peYir2Fn1EX9FPzMCq4gOcnbWaeF0kikFisHhDzMc3xVDxlhgmhosR4m0xUrwjRonRYowYK8aJ8WKCeFdMFO+JSWKymCKmiiQxTUwX74sZYqaYJT4Qs8WHYo6YK+aJ+SJZfCQWiIUiRXwsFolPRKpYLJaIpWKZWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9gudoidYpf4VOwWe8Re8ZnYJz4X+8UX4oD4UhwUX4k08bU4JL4Rh8W34oj4ThwV34tj4rg4IU6KU+IHcVqcEWfFOXFe/CguiJ/EReEFSJRCSqlkIGNkFhkrs8ps8hqZXQYZx38ZJ2+QOeWNMpfMLfPIvDJe5pP5pZZGWkkylAVkQRmVN8lC8mZZWBaRRWUx6WRxWULeIkvKW2UpeZssLW+XZeQdsqwsJ8vLCvJOWVHeJSFyaRtVZFVZTVaX98oEuE/WlPfLWvIBWVs+KOvIh2Rd+bCsJx+R9eWjsoF8TDaUj8tGsrFsIpvKZvIJ2Vw+KVvIlrKVfEq2lk/LNvIZ2VY+K9tJf/kl8rzsKF+QneSLsrPsIrvKn+RF6WV32UNCT5C95Cuyt+wj+8p+sr98VQ6Qr8mB8nWZKAfJwfINOUS+KYfKt+QwOVyOkG/LkfIdOUqOlmPkWDlOjpcT5LtyonxPTpKT5RQ5VSbJabLv5ZVmSflP89/9nfyBP299o9wkN8stcqvcJrfLHXKn3CV3yd1yt9wr98p9cp/cL/fLA/KAPCgPyjSZJg/JQ/KwPCyPyCPyqDwqj8nj8pw8KU/JH+RpeUaekefkeXleXrj8MwCFSiiplApUjMqiYlVWlU1do7Kra1UOdZ2KqOtVnLpB5VQ3qlwqt8qj8qp4lU/lV1oZZRWpUBVQBVVU3YSXXzCqqCqmnCquSqhb/ki+KqRuVoVVEVVUAUDCpfyM+hL+QX3NVDPVXDVXLdI/KFQr1Vq1Vm1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVVfVTXVT3VV3laASVC/1iuqt+qi+qp/qr14V6SsNVANVokpUg9VgNUQNUUPVUDVMDVMj1Ag1Uo1Uo9QoNUaNUePUODVBTVAT1UQ1SU1SU9QUlaSS1HQ1Xc1QM9QsNUvNVrPVHDVHzVPzVLJKVgvUApWiUtQitUilqsVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvUpVm9QmtUVtUdvUNrVD7VC71C61W+1We9VetU/tU/vVfnVAHVAH1UGVptLUIXVIHVaH1RF1RB1VR9UxdUydUCfUKXVKnVan1Vl1Vp1X59UFdUFdVBfTT/sCEYhABSqICWKC2CA2yBZkC7IH2YMcQY4gEkSCuCAuyBncGOQKcgd5grxBfJAvyB/owAQ2EJebHg1uCgoFNweFgyJB0aBY4ILiQYnglqBkcGtQKrgtKB3cHpQJ7gjKBuWC8kGF4M6gYnBXUCm4O6gc3BNUCaoG1YLqwb1BjeC+oGZwf1AreCCoHTwY1AkeCuoGDwf1gkeC+sGjQYPgsaBh8HjQKGgcNAmaBs3+0vW9P537Sddd99AJuqfupV/RvXUf3Vf30/31q3qA3qkH6td1oh6kB+s39BD9ph6q39LD9HA9Qr+tR+p39Cg9Wo/RY/U4PV5P0O/qifo9PUlP1lP0VJ2kp+np+n09Q8/Us/QHerb+UM/Rc/U8PV8n64/0Ar1Qp+iP9SL9iU7Vi/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGrWCT3qy36K16m96ud+idepf+VO/We/Re/Znepz/X+/UX+oD+Uh/UX+k0/bU+pL/Rh/W3+oj+Th/V3+tj+rgupU/qU/oHfVqf0Wf1OX1e/6gv6J/0Re3TT+7TP96NMsrEmBgTa2JNNpPNZDfZTQ6Tw0RMxMSZOJPT5DS5TC6Tx+Qx8Sbe5Df5TToyZAqYAiZqoqaQKWQKm8KmqClqnHGmhClhSpqSppQpZUqb0qaMKWPKmrKmvClv7jR3mrvMXeZuc7e5x9xjqpqqprqpbmqYGqamqWlqmVqmtqlt6pg6pq6pa+qZeqa+qW8amAamoWloGplGpolpYpqZZqa5aW5amBamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZDqbzqar6Wq6mW6mu+luEkyC6WV6md6mt+lr+pr+pr8ZYAaYgWagSTSJZrAZbIaYIWaoGWqGmeFmRPrxx7xjRpnRZowZa8aZcWaCmWAmmolmkplkppgpJskkmelmuplhZphZZpaZbWabOWaOmWfmmWSTbBaYBSbFpJhFZpFJNalmiVlilpllZoVZYVaZVWaNWWPWwTqzwWwwm8wms8VsMdvMNrPD7DC7zC6z2+w2e81es8/sM/vNfnPAHDAHzUGTZtLMIXPIHDaHzRFzxBw1R80xc8ycMCfMKXPKnDanzVlz1pw3uS9/XnoTa7PabPYam91ea3PY6+zfx3lsXhtv89n8VttcNvevYmOtLWyL2KK2mHW2uC1hb/lNXNaWs+VtBXunrWjvspV+E9ew99ma9n5byz5gq9t7fxXXtg/aOvYxWxcRwDa29W1T28A+Zhvax20j29g2sU1ta/u0bWOfsW3ts7adfe438QK70K6yq+0au9butnvsWXvOHrbf2vP2R9vd9rD97at2gH3NDrSv20Q76DfxCPu2HWnfsaPsaDvGjv1NPMVOtUl2mp1u37cz7MzfxMn2Izvbptg5dq6dZ+f/HKfXlGI/tovsJzbVBrDELrXL7HK7wq78n1qX2vV2g91od9lP7Ra71W6z2+2OjBNhu8futZ/ZffZze8h+Yw/YL+1Be8Sm2a9/jtP374j9zh6139tj9rg9YU/aU/YHlZGdvu8n7U/2ovUWCAlIkqKAYigLxVJWykbXUHa6lnLQdRSh6ymObqCcdCPlotyUh/JSPOWj/KTJkCWikApQQYrSTZRRXlEqRo6KUwm6hUrSrVSKbqPSdDuVoTuoLJWj8lSB7qSKdBdVorupMt1DVagqVaPqdC/VoPuoJt1PtegBqk0PUh16iOrSw1SPHqH69Cg1oMeoIT1OjagxNaGm1IyeoOb0JLWgltSKnqLW9DS1oWeoLT1L7eg5ak9/ow70PHWkF6gTvUidqQt1pZeoG71M3akHJVBP6kWvUG/qQ32pH/WnV2kAvUYD6XVKpEE0mN6gIfQmDaW3aBgNpxH0No2kd2gUjaYxNJbG0XiaQO/SRHqPJtFkmkJTKYmm0XR6n2bQTJpFH9Bs+pDm0FyaR/MpmT6iBbSQUuhjWkSfUCotpiW0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVttF22kE7aRd9SrtpD+2lz2gffU776Qs6QF/SQfqK0uhrOkTf0GH6lo7Qd74HfU/H6DidoJN0in6g03SGztI5Ok8/0gX6iS6SJwgxFKEMVRiEMWGWMDbMGmYLrwmzh9eGOcLrwkh4fRgX3hDmDG8Mc4W5wzxh3jA+zBfmD3VoQhtSGIYFwoJhNLwpLBTeHBYOi4RFw2KhC4uHJcJbwpLhrWGp8LawdHh7WCa8Iywblgsfe6BCeGdYMbwrrBTeHVYO7wmrhFXDamH18N6wRnhfWDO8P6wVPhCWCh8M64QPhXXDh8N64SNh/fDRsEH4WNgwfDxsFDYOm4RNw2bhE2Hz8MmwRdgybBVeE7YOnw7bhM+EbcNnw3bhcz/PP7gwY/6p38wnhD3DXuEr4Suh9/fLedH50eToR9EF0YXRlOjH0UXRT6Kp0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRDdGNUe+rZwGHTjjplAtcjMviYl1Wl81d47K7a10Od52LuOtdnLvB5XQ3ulwut8vj8rp4l8/ld9oZZx250BVwBV3U3eQKuZtdYVfEFXXFnHPFXQnX1DVzzVxz96Rr4Vq6Vu4p95R72j3tnnHPuGddO/eca+/+5jq4511H94J7wb3oOrsurqt7yXVz43Ncek8muF6ul+vteru+rq/r7/q7AW6AG+gGukSX6Aa7wW6IG+KGuqFumBvmRrgRbqQb6Ua5UW6MG+PGuXFugpvgJrqJbpKb5Ka4KS7JJbnpbrqb4Wa4ijMvbWWOm+PmuXku2SW7BS79nDHFLXKLXKpLdUvcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcrv9dZcWdfvcfrffHXAH3EH3lUtzX7tD7ht32H3rjrjv3FH3vTvmjrsT7qQ75X5wp90Zd9adc+fdj+6C+8lddN6Ni4yPTIi8G5kYeS8yKTI5MiUyNZIUmRaZHnk/MiMyMzIr8kFkduTDyJzI3Mi8yPxIcuSjyILIwkhK5OPIosgnkdTI4siSyNLIssjyiPf5toS+gC/oo/4mX8jf7Av7Ir6oL+adL+5L+Ft8yUt1p3p/uy/j7/BlfTlf3j/uG/nGvolv6pv5J3xz/6Rv4Vv6Vv4p39o/7dv4Z3xb/6xv55/z7f3ffAf/vO/oX/Cd/Iu+s+/iu/qXfDf/su/ue/gE39P38q/43r6P7+v7+f7+VT/Av+YH+td9oh/kB/s3/BD/ph/q3/LD/HA/IuZtPzLjEhnG+nF+vJ/g3/UT/Xt+kp/sp/ipPslP89P9+36Gn+ln+Q/8bP+hn+Pn+nl+vk/2H/kFfqFP8R/7Rf4Tn+oXZ9w09iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y3/qd/s9fq//zO/zn/v9/gt/wH/pD/qvfJr/2h/y3/jD/lt/xH/nj/rv/TF/3J/wJ/0p/4M/7c/4s/6cP+9/9Bf8T/4i/5s1xhhjjLF/yfgrQ/HrmUu383v+To74xZN7AcC1W/Om/XI+/YxyXa5L4z4iPjb967M9Oj2S8ahSJSEh4fJzUyUEBecCZPwmKN3Pf3pwOV4MreBpaAstoeTv1t9HdDlP/2T96O0A2X6Rk15QRnxl/S8AMOF31n/iqRELyoRn4/4v688FKFzwSk5WuBIvhlY/319pCaX+Qf25m/+T+rN+OQ6gxS9yssOV+Er9JeBJeA7a/uqZjDHGGGOMMcbYJX1E+Q4Z158Zf/H5e9fn8epKTha4Ev+z63PGGGOMMcYYY4xdfc936frME23btuzwxweV/p+y/uVBQ/h3rcyD3x14D5DxHQUAf3JBgPSB/E/uxeb/yLYSL791/n5q2TkfwP+OVv4Vg6t8YGKMMcYYY4z95a6c9P/6++pqFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVC/4n/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2fAAAA///sPveW") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) 3m46.388687649s ago: executing program 6 (id=28844): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$eJzs3c1rHGUYAPBndpNt0hSzDaLWgw2ItKBNmrSVIB7aq5RQP/CiB2OTfti0DU1EU4WmUC+CeBERPHmw/hdarMee9OTBiycpBJV6E1zZ3Zl87W4+tsluyf5+sO7M+87kfcb02Zl5930nAXSswfJ/chEHImImiehPFpbquiKtHKxu9+Dvj8+WX0mUSq//ORBJWpZtn6TvfenOPRHx849JDORr252dv35pYnp66lq6Pjx3eWZ4dv76kYuXJ85PnZ+6Mvri6NiJ4yfGRo42dVw3aov+OX3rvQ/6Px1/69uv/01GvvttPImT8Uq64crj2C6DMVj5f5LUVvWNbXdjbZJP/52USqVSVpZ01W7X2+K42Jzs99cdEU9Gf+Rj+ZfXH5+82tbggB1VSqqf3UAnSprK/97tDwRosew6ILu3X3sfnGvLVQnQCounqh0AtfnfVe0bjJ5K38DeB0ms7NZJIqK5nrnV9kXEvbvjt87dHb8VO9QPB9S3cDMinqqX/0kl/4vRE8VK/udW5X/5uuBM+l4uf63J9td2Fct/aJ1q/vesm//RIP/fKb/fqObwu0213rNy5ULvqvz3jREAAAAAAABs1Z1TEfHC0vf/heXv33JL43+izvifvog4uQ3tD65Zr/3+P3d/G5oB6lg8FfFy3fG/uWz0bzG/YgprMSI5d3F66mhEPBYRh6N7T3l9ZJ02jnw28FWjusF0/F/2Krd/Lx0LmMZxv2vP6n0mJ+YmHuKQgdTizcg/XXf8b7J0/k/qnP/Lnwwzm2xj4LnbZxrVbZz/wE4pfRNxqO75f/mpFcn6z+cYrlwPDGdXBbWe+ejz7xu132z+13nEBLBFizcj9q6f/8Vk5fN6ZrfexrH5rlKjumav/wvJG5WnChXiQqXsw4m5uWsjEYXkdL5cWki3rZSPbj1m2I2yfMjypZz/h59dzv98nf6/etf/vRGxsOZnJ3+tnlOceeK/vt8bxeP6H9qnnP+TWzr/b31h9Hbxh0btD8ZPmzj/H6+c6w+nJfr/oOrLLE0L3avK66RjV72qlgcMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALtALiL2RZIbWlrO5YaGIvoi4vHYm5u+Ojv3/Lmr71+ZLNdFFKM7l/2l3/7qepL9/f/iivXRNevHImJ/RHyR762sD529Oj3Z7oMHAAAAAAAAAAAAAAAAAACAR0Rfg/n/ZX/k2x0dsOO62h0A0DZ18v+XdsQBtJ7zP3Qu+Q+dS/5D55L/0LnkP3Su9fP/7bGWBQK0nPM/dC75DwAAAAAAu8r+g3d+TSJi4aXeyquskNZ1tzUyYKfl2h0A0DYe8QOdy9Af6Fzu8YFkg/qehjtttOd6Zs4+xM4AAAAAAAAAAAAA0HEOHTD/HzpVc/P/PTUAdgPz/6FzZfP/D7Y5DqD13OMDscFM/rrz/zfcawU3GgAAAAAAAAAAAADw0Gbnr1+amJ6eumbhzSb2ykY1tz345hZKpdKNcviPSjzbv5CkI9Rb0mg2FL71R1rYzAFmc/0295NrPyv2tOgzCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO3/AAAA//+GpyIE") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3m46.027614183s ago: executing program 6 (id=28851): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000004580), 0x0, &(0x7f00000045c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000004600)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) 3m45.566250837s ago: executing program 41 (id=28851): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000004580), 0x0, &(0x7f00000045c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000004600)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) 1m58.669487913s ago: executing program 9 (id=30379): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x1f}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x44, 0x5a, 0x1, 0x4, 0x25dfdbfb, {0x2}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}}, 0x0) 1m58.586867868s ago: executing program 9 (id=30381): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x4a, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) 1m58.452476262s ago: executing program 9 (id=30384): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x81, 0x141200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000019380)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000002, 0x403, 0x0, 0x1, 0x18, 0x35, "fec8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d2000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009]}}) 1m58.400855603s ago: executing program 9 (id=30388): syz_mount_image$exfat(&(0x7f0000000840), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000008c0)={[{@gid}, {@fmask={'fmask', 0x3d, 0x8001}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@namecase}, {@namecase}, {@errors_continue}, {@umask={'umask', 0x3d, 0x1}}, {@utf8}, {}]}, 0x1, 0x1533, &(0x7f0000003480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x80) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) 1m58.119342849s ago: executing program 9 (id=30393): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x20, 0x24, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000885}, 0x24040880) 1m57.695851471s ago: executing program 9 (id=30400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x6, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="18020000070000000000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000c00850000001700000095"], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0xe, 0x0, &(0x7f0000001900)="f7edad00000000000000000a0000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1m57.330097615s ago: executing program 42 (id=30400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x6, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="18020000070000000000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000c00850000001700000095"], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x0, 0xe, 0x0, &(0x7f0000001900)="f7edad00000000000000000a0000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 48.802693939s ago: executing program 7 (id=31254): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@utf8}, {@fat=@dos1xfloppy}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@fat=@check_normal}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@uni_xlate}, {@numtail}, {}, {@utf8no}, {@utf8}]}, 0xfd, 0x2bd, &(0x7f0000000600)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 48.47326326s ago: executing program 7 (id=31257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0x9, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 48.173650306s ago: executing program 7 (id=31260): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 47.786803912s ago: executing program 7 (id=31264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@test_dummy_encryption_v1}, {@mb_optimize_scan}]}, 0x3, 0x455, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) 47.07922707s ago: executing program 7 (id=31266): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000d0f000/0x4000)=nil) migrate_pages(0x0, 0x9, &(0x7f00000000c0)=0xb, &(0x7f0000000380)=0x102) 46.763123875s ago: executing program 7 (id=31268): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="226c6761549a5d46ddccd1c86f3d22", 0xf) 46.12340428s ago: executing program 43 (id=31268): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)="226c6761549a5d46ddccd1c86f3d22", 0xf) 6.881132832s ago: executing program 3 (id=31606): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x1) syz_usb_disconnect(r0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 3.941490452s ago: executing program 1 (id=31636): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000080), 0x26, 0x763, &(0x7f0000000580)="$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") chdir(&(0x7f0000000d00)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000d80)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.616211196s ago: executing program 1 (id=31640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000)) 3.444334929s ago: executing program 3 (id=31643): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ec0)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000fc0)=""/221, 0xdd}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0) 3.299586824s ago: executing program 1 (id=31644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd5400fcdbdf258100000008000300", @ANYRES32=r2, @ANYBLOB="06006600c78800001600330084000b00ffffffffffffffffffffffff060000000a0006"], 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000014) 3.213183862s ago: executing program 3 (id=31646): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00'], 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x20, 0x0, 0xfe, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000340), 0x4000190, 0x0) 2.12962115s ago: executing program 1 (id=31649): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000980)='wwnn=+x1000000044001122', 0x17) 1.778692945s ago: executing program 1 (id=31654): r0 = syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x200c02, &(0x7f0000000180)={[{@nogrpid}]}, 0x0, 0x97de, &(0x7f000001c6c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffccd, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x24000000) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x8}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0285846, &(0x7f0000000000)=ANY=[]) 1.584315621s ago: executing program 3 (id=31655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 1.584134317s ago: executing program 0 (id=31656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000102, 0x0, 0xffffffffffffffff}]}) 1.579364319s ago: executing program 2 (id=31657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r0}, &(0x7f0000000e40), &(0x7f0000000e80)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r1}, 0xc) 1.482977392s ago: executing program 8 (id=31658): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000300)={@multicast1, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/mcfilter\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/9, 0x9}], 0x1, 0x5e, 0x0) 1.389219251s ago: executing program 2 (id=31659): unshare(0x2a060400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603"], 0x60}, 0x1, 0x0, 0x0, 0x10004883}, 0x80) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, &(0x7f0000003e00)) 1.320053058s ago: executing program 8 (id=31660): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x80000001, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x10000008, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0xad2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.304384217s ago: executing program 0 (id=31661): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents(r1, 0x0, 0x18) 1.208680233s ago: executing program 2 (id=31662): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='!:*', 0x3) 1.14995657s ago: executing program 8 (id=31663): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) connect$inet(r0, &(0x7f0000000b80)={0x2, 0x4e23, @remote}, 0x10) 1.125511554s ago: executing program 0 (id=31664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000002100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x7}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x44}}, 0x20048000) 979.043925ms ago: executing program 2 (id=31665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000001940)='X', 0x14f8d, 0x0, &(0x7f0000001980)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000019c0)={0x1, [0x0]}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001a40)={r1, 0xa9ac}, &(0x7f0000001a80)=0x8) 932.561504ms ago: executing program 8 (id=31666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 698.233092ms ago: executing program 2 (id=31667): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) 657.970765ms ago: executing program 0 (id=31668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/input/input0/id/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 376.914067ms ago: executing program 3 (id=31669): syz_open_dev$video4linux(&(0x7f0000000b80), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002200)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002240)={0x6000000d}) 375.413517ms ago: executing program 8 (id=31670): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0xc, &(0x7f0000000080)=ANY=[], 0x1, 0x1ce, &(0x7f00000000c0)="$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") r1 = open(&(0x7f00000002c0)='./file1\x00', 0x4000, 0x32) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r2, 0x4, &(0x7f0000001540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000300)="c7d05e0cb826532ec6c3997b", 0xc, 0xff, 0x0, 0x0, r1}, 0x0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x4, 0x8001, r1, &(0x7f0000001440)="1bd7c9d794c513429589164119183add684e5e5a084673b63c6a12abcb71efdaabd80bc7f7cd66f8053f4aa02c5c7833cbe6b693bc0066", 0x37, 0x81, 0x0, 0x2, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0xbf52, r0, &(0x7f00000014c0)="a1df66237757225bb2ff66a653d7e014233e6a99b4", 0x15, 0x9, 0x0, 0x0, r1}]) 371.090934ms ago: executing program 0 (id=31671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0xb97534d5fe9704cf, 0x70bd29, 0x25dfdbfa, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x40004) 122.745354ms ago: executing program 2 (id=31672): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20b00, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f0000000a40)={0x4, 0x0, 0x0, 0xb38, 0x138, 0x0, 0x0, 0x21000, 0x65, 0x0, @by_dev={r2}, "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"}) 38.69095ms ago: executing program 0 (id=31673): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x1d9}, {&(0x7f00000006c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6dd3f985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9e4b11948f01d4dd184856b3809b923e106c1bb512", 0x7c}, {&(0x7f0000002200)="f610e61ac81cc3edc86f05", 0xb}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 37.833094ms ago: executing program 1 (id=31674): setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 19.870968ms ago: executing program 8 (id=31675): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040810}, 0x44801) 0s ago: executing program 3 (id=31676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x7, 0xdc82, 0x7, 0xfd, 0x7}, {0x43, 0x8000000000000, 0x2, 0x7}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x9}, 0x3507, 0x3, 0x0, 0x0, 0x0, 0x7c, 0xfffffffa}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x25dfdbf8, {{@in=@local, @in6=@private1, 0x4e22, 0x0, 0x2, 0x0, 0x2, 0x20, 0x20}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200040000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): [ 1785.061124][T12203] netlink: 136 bytes leftover after parsing attributes in process `syz.8.30097'. [ 1785.061146][T12203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1785.298165][T12214] device-mapper: table: 248:26: thin-pool: Error opening metadata block device (-ENOENT) [ 1785.298189][T12214] device-mapper: ioctl: error adding target to table [ 1785.482770][T12226] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1785.482793][T12226] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1785.728437][T12238] loop9: detected capacity change from 0 to 512 [ 1785.745157][T12238] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1785.745174][T12238] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1785.745185][T12238] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1785.751596][T12238] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.30111: bad orphan inode 131083 [ 1785.751623][T12238] loop9: lost filesystem error report for type 5 error -117 [ 1785.752155][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1785.752174][ C1] EXT4-fs (loop9): initial error at time 1937: ext4_orphan_get:1430 [ 1785.752197][ C1] EXT4-fs (loop9): last error at time 1937: ext4_orphan_get:1430 [ 1785.829346][T12238] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1785.937811][T12238] overlayfs: upper fs needs to support d_type. [ 1786.285631][T12268] macvlan2: entered promiscuous mode [ 1786.285653][T12268] gretap0: entered promiscuous mode [ 1786.307015][T12268] gretap0: left promiscuous mode [ 1786.315589][T12238] fscrypt: AES-256-XTS using blk-crypto-fallback [ 1786.453777][ T720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.690225][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30136'. [ 1786.941632][ T7515] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1787.110517][ T7515] usb 10-1: Using ep0 maxpacket: 32 [ 1787.114386][ T7515] usb 10-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1787.115812][ T7515] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.115841][ T7515] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.115893][ T7515] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.167737][ T7515] usb 10-1: config 0 descriptor?? [ 1787.185863][ T7515] hub 10-1:0.0: USB hub found [ 1787.279922][T12339] loop3: detected capacity change from 0 to 512 [ 1787.333516][T12339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1787.387232][T12339] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.30152: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 1787.436901][ T7515] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1787.489730][ T6956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.662062][ T7515] usbhid 10-1:0.0: can't add hid device: -71 [ 1787.662155][ T7515] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1787.698746][ T7515] usb 10-1: USB disconnect, device number 24 [ 1788.405618][T30378] kernel write not supported for file /sg0 (pid: 30378 comm: kworker/1:8) [ 1788.538055][T12377] loop8: detected capacity change from 0 to 32768 [ 1788.571540][T12377] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1788.573234][T12377] XFS (loop8): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1788.644783][T12377] XFS (loop8): Ending clean mount [ 1788.690619][T12377] XFS (loop8): Quotacheck needed: Please wait. [ 1788.879862][T12377] XFS (loop8): Quotacheck: Done. [ 1789.024755][ T7680] XFS (loop8): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1789.533085][T12426] loop9: detected capacity change from 0 to 64 [ 1789.565077][T12426] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1790.927107][T12490] loop9: detected capacity change from 0 to 256 [ 1790.951857][T12490] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1792.495753][ T33] audit: type=1326 audit(1943.606:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.495870][ T33] audit: type=1326 audit(1943.606:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521010][ T33] audit: type=1326 audit(1943.625:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521130][ T33] audit: type=1326 audit(1943.625:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521230][ T33] audit: type=1326 audit(1943.625:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521326][ T33] audit: type=1326 audit(1943.625:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521439][ T33] audit: type=1326 audit(1943.625:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1792.521541][ T33] audit: type=1326 audit(1943.625:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.3.30225" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec9ff9f559 code=0x7ffc0000 [ 1793.311767][ T11] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1793.388668][T12562] loop9: detected capacity change from 0 to 4096 [ 1793.436994][T12562] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1793.482241][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 1793.482975][ T11] usb 4-1: New USB device found: idVendor=0e8f, idProduct=0003, bcdDevice=0.00 [ 1793.484300][ T11] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.484336][ T11] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1793.484362][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1793.484392][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.491979][ T11] usb 4-1: config 0 descriptor?? [ 1793.633097][T12562] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1794.024825][ T11] pantherlord 0003:0E8F:0003.0056: no output reports found [ 1794.064079][ T11] pantherlord 0003:0E8F:0003.0056: hiddev0,hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 1794.225869][ T11] usb 4-1: USB disconnect, device number 112 [ 1794.828832][ T7515] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1794.997374][ T7515] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 1795.009506][ T7515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1795.009534][ T7515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1795.040804][ T7515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.040828][ T7515] usb 2-1: Product: syz [ 1795.040842][ T7515] usb 2-1: Manufacturer: syz [ 1795.040856][ T7515] usb 2-1: SerialNumber: syz [ 1795.075332][ T7515] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1795.093867][ T7515] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input173 [ 1795.093945][ T7515] input input173: usb_submit_urb failed [ 1795.129027][ T7515] input: failed to attach handler kbd to device input173, error: -5 [ 1795.130923][ T4988] input input173: usb_submit_urb failed [ 1795.144801][ T4988] input input173: usb_submit_urb failed [ 1795.156341][ T7515] scsi host1: usb-storage 2-1:1.0 [ 1795.297610][T31211] input input173: usb_submit_urb failed [ 1795.306518][T12036] usb 2-1: USB disconnect, device number 13 [ 1795.620481][ T11] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1795.781701][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 1795.782318][ T11] usb 10-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1795.783304][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.822461][ T11] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1795.854821][T12036] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1796.026909][T12036] usb 2-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 1796.028046][T12036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1796.028078][T12036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1796.034199][T12036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.034223][T12036] usb 2-1: Product: syz [ 1796.034237][T12036] usb 2-1: SerialNumber: syz [ 1796.101920][T12036] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 1796.123585][T12036] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input174 [ 1796.123663][T12036] input input174: usb_submit_urb failed [ 1796.155016][T12036] input: failed to attach handler kbd to device input174, error: -5 [ 1796.156519][ T4988] input input174: usb_submit_urb failed [ 1796.157530][ T4988] input input174: usb_submit_urb failed [ 1796.159509][T12036] scsi host1: usb-storage 2-1:1.0 [ 1796.349478][ T1796] input input174: usb_submit_urb failed [ 1796.364975][ T4988] input input174: usb_submit_urb failed [ 1796.377917][ T4988] input input174: usb_submit_urb failed [ 1796.389663][T12036] usb 2-1: USB disconnect, device number 14 [ 1796.478138][ T11] usb 10-1: USB disconnect, device number 25 [ 1797.198475][T12772] loop9: detected capacity change from 0 to 1024 [ 1797.259310][T12778] loop8: detected capacity change from 0 to 512 [ 1797.271882][T12778] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1797.350495][T12778] Quota error (device loop8): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1797.350629][T12778] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1797.350678][T12778] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.30294: Failed to acquire dquot type 1 [ 1797.350701][T12778] loop8: lost filesystem error report for type 5 error -117 [ 1797.351491][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1797.351525][ C0] EXT4-fs (loop8): initial error at time 1948: ext4_acquire_dquot:7120 [ 1797.351580][ C0] EXT4-fs (loop8): last error at time 1948: ext4_acquire_dquot:7120 [ 1797.472088][T12778] EXT4-fs error (device loop8): ext4_do_update_inode:6707: inode #16: comm syz.8.30294: corrupted inode contents [ 1797.472121][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.475746][T12778] EXT4-fs error (device loop8): ext4_dirty_inode:7679: inode #16: comm syz.8.30294: mark_inode_dirty error [ 1797.475781][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.478185][T12778] EXT4-fs error (device loop8): ext4_do_update_inode:6707: inode #16: comm syz.8.30294: corrupted inode contents [ 1797.478215][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.482849][T12778] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.30294: mark_inode_dirty error [ 1797.482992][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.485861][T12778] EXT4-fs error (device loop8): ext4_do_update_inode:6707: inode #16: comm syz.8.30294: corrupted inode contents [ 1797.485980][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.515397][T12778] EXT4-fs error (device loop8) in ext4_orphan_del:304: Corrupt filesystem [ 1797.515451][T12778] loop8: lost filesystem error report for type 5 error -117 [ 1797.548087][T12778] EXT4-fs error (device loop8): ext4_do_update_inode:6707: inode #16: comm syz.8.30294: corrupted inode contents [ 1797.548161][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.552240][T12778] EXT4-fs error (device loop8): ext4_truncate:5538: inode #16: comm syz.8.30294: mark_inode_dirty error [ 1797.552311][T12778] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1797.557504][T12778] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem [ 1797.557552][T12778] loop8: lost filesystem error report for type 5 error -117 [ 1797.697451][T12778] EXT4-fs (loop8): 1 truncate cleaned up [ 1797.711303][T12778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1797.758704][T12778] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.30294: Failed to acquire dquot type 1 [ 1797.870023][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.052566][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.8.30300'. [ 1798.447030][T12820] loop9: detected capacity change from 0 to 64 [ 1798.498048][T12824] tipc: Enabling of bearer rejected, failed to enable media [ 1799.084837][T12851] loop9: detected capacity change from 0 to 4096 [ 1799.163800][T12855] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1799.259100][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30323'. [ 1799.310192][T12851] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean [ 1800.251015][T12881] loop3: detected capacity change from 0 to 32768 [ 1800.280818][T12881] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1800.344674][T12881] XFS (loop3): Ending clean mount [ 1800.461353][ T6956] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1800.528958][T12921] netlink: 16 bytes leftover after parsing attributes in process `syz.9.30347'. [ 1800.576510][T12923] tipc: MTU too low for tipc bearer [ 1800.782252][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30351'. [ 1800.782278][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30351'. [ 1800.805621][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30351'. [ 1800.805645][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30351'. [ 1801.002089][T12935] tipc: Enabling of bearer rejected, failed to enable media [ 1801.158250][T12941] netlink: 'syz.1.30356': attribute type 3 has an invalid length. [ 1801.247658][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.30358'. [ 1801.487741][T12939] loop3: detected capacity change from 0 to 32768 [ 1801.503713][T12939] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1801.503731][T12939] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1801.540467][T12939] syz.3.30355: attempt to access beyond end of device [ 1801.540467][T12939] loop3: rw=8400896, sector=196608, nr_sectors = 8 limit=32768 [ 1801.540518][T12939] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 1801.540624][T12939] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 1801.540661][T12939] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 1801.540702][T12939] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1801.540732][T12939] CPU: 0 UID: 0 PID: 12939 Comm: syz.3.30355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.540759][T12939] Tainted: [L]=SOFTLOCKUP [ 1801.540767][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1801.540779][T12939] Call Trace: [ 1801.540787][T12939] [ 1801.540796][T12939] dump_stack_lvl+0xe8/0x150 [ 1801.540832][T12939] gfs2_withdraw+0xc3/0x1b0 [ 1801.540860][T12939] gfs2_jdesc_check+0x17d/0x2f0 [ 1801.540895][T12939] init_journal+0xcc8/0x2390 [ 1801.540933][T12939] ? init_inodes+0xdb/0x320 [ 1801.540962][T12939] ? __pfx_init_journal+0x10/0x10 [ 1801.540987][T12939] ? vsnprintf+0xe42/0xef0 [ 1801.541022][T12939] ? snprintf+0xe8/0x140 [ 1801.541045][T12939] ? init_inodes+0xdb/0x320 [ 1801.541071][T12939] ? __pfx_snprintf+0x10/0x10 [ 1801.541097][T12939] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 1801.541142][T12939] init_inodes+0xdb/0x320 [ 1801.541171][T12939] gfs2_fill_super+0x1948/0x20b0 [ 1801.541209][T12939] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1801.541239][T12939] ? init_locking+0xb8/0x210 [ 1801.541262][T12939] ? sb_set_blocksize+0x155/0x240 [ 1801.541294][T12939] ? setup_bdev_super+0x58b/0x680 [ 1801.541327][T12939] get_tree_bdev_flags+0x436/0x500 [ 1801.541356][T12939] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1801.541381][T12939] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1801.541422][T12939] gfs2_get_tree+0x51/0x1e0 [ 1801.541451][T12939] vfs_get_tree+0x92/0x2a0 [ 1801.541482][T12939] do_new_mount+0x325/0xb00 [ 1801.541512][T12939] ? __pfx_do_new_mount+0x10/0x10 [ 1801.541539][T12939] ? ns_capable+0x84/0xe0 [ 1801.541570][T12939] ? path_mount+0x647/0x1050 [ 1801.541597][T12939] ? user_path_at+0xd4/0x160 [ 1801.541627][T12939] __se_sys_mount+0x31d/0x420 [ 1801.541666][T12939] ? __pfx___se_sys_mount+0x10/0x10 [ 1801.541699][T12939] ? __x64_sys_mount+0x20/0xc0 [ 1801.541726][T12939] do_syscall_64+0x166/0x520 [ 1801.541753][T12939] ? trace_irq_disable+0x3b/0x140 [ 1801.541780][T12939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.541801][T12939] ? clear_bhb_loop+0x70/0xc0 [ 1801.541827][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.541847][T12939] RIP: 0033:0x7fec9ffa07ca [ 1801.541867][T12939] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.541884][T12939] RSP: 002b:00007feca0e0ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1801.541907][T12939] RAX: ffffffffffffffda RBX: 00007feca0e0aee0 RCX: 00007fec9ffa07ca [ 1801.541921][T12939] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007feca0e0aea0 [ 1801.541935][T12939] RBP: 00002000000124c0 R08: 00007feca0e0aee0 R09: 0000000000000000 [ 1801.541949][T12939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1801.541962][T12939] R13: 00007feca0e0aea0 R14: 0000000000012620 R15: 0000200000000180 [ 1801.541995][T12939] [ 1801.542021][T12939] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 1802.554527][T12995] netlink: 'syz.9.30379': attribute type 1 has an invalid length. [ 1802.819904][ T6665] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1802.839878][T13016] loop9: detected capacity change from 0 to 256 [ 1802.853133][T13016] exfat: Deprecated parameter 'utf8' [ 1802.853162][T13016] exfat: Deprecated parameter 'namecase' [ 1802.853212][T13016] exfat: Deprecated parameter 'namecase' [ 1802.853276][T13016] exfat: Deprecated parameter 'utf8' [ 1802.902036][T13016] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1802.976794][ T6665] usb 9-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1802.989763][ T6665] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.990004][ T6665] usb 9-1: Product: syz [ 1802.990036][ T6665] usb 9-1: Manufacturer: syz [ 1802.990072][ T6665] usb 9-1: SerialNumber: syz [ 1803.026866][ T6665] usb 9-1: config 0 descriptor?? [ 1803.043594][ T6665] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1803.094533][ T6665] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1803.096847][ T6665] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1803.100515][ T6665] usb 9-1: media controller created [ 1803.165508][ T6665] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1803.308342][T13048] loop3: detected capacity change from 0 to 64 [ 1803.394592][ T6665] DVB: Unable to find symbol mt352_attach() [ 1803.528820][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30398'. [ 1803.587889][ T6665] DVB: Unable to find symbol nxt6000_attach() [ 1803.587904][ T6665] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1803.619309][ T6665] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input175 [ 1803.635383][ T6665] dvb-usb: schedule remote query interval to 1000 msecs. [ 1803.635402][ T6665] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1803.635418][ T6665] dvb-usb: bulk message failed: -22 (7/0) [ 1803.635433][ T6665] dvb-usb: bulk message failed: -22 (7/0) [ 1803.671964][ T6665] usb 9-1: USB disconnect, device number 5 [ 1803.677017][T13066] trusted_key: encrypted_key: insufficient parameters specified [ 1803.804229][ T6665] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1804.017613][T26354] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.268111][T19391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1804.290325][T19391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1804.317471][T19391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1804.320886][T19391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1804.331056][T19391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1804.378382][T26354] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.564782][T26354] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.590869][T30378] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1804.746895][T26354] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.767652][T30378] usb 4-1: Using ep0 maxpacket: 32 [ 1804.770240][T13128] ip_tables: iptables: counters copy to user failed while replacing table [ 1804.773463][T30378] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1804.775109][T30378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1804.788209][T30378] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1804.788235][T30378] usb 4-1: Product: syz [ 1804.788252][T30378] usb 4-1: Manufacturer: syz [ 1804.788267][T30378] usb 4-1: SerialNumber: syz [ 1804.823294][T30378] usb 4-1: config 0 descriptor?? [ 1804.828512][T13097] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1805.086865][T30378] usb 4-1: USB disconnect, device number 113 [ 1805.282179][T26354] bridge_slave_1: left promiscuous mode [ 1805.282396][T26354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.300756][T26354] bridge_slave_0: left promiscuous mode [ 1805.300991][T26354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.494593][T30377] kernel read not supported for file /vga_arbiter (pid: 30377 comm: kworker/1:7) [ 1806.628279][T13202] nbd: must specify a size in bytes for the device [ 1806.652790][T23859] Bluetooth: hci2: command tx timeout [ 1806.730830][T26354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.739530][T26354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.755662][T13204] loop3: detected capacity change from 0 to 512 [ 1806.772470][T26354] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 1806.778550][T26354] bond0 (unregistering): Released all slaves [ 1806.815112][T13204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1806.848487][T13181] macvlan1: entered promiscuous mode [ 1806.848505][T13181] batadv0: entered promiscuous mode [ 1806.848666][T13181] macvlan1: entered allmulticast mode [ 1806.854784][T13181] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1806.888083][T13181] batadv0: left promiscuous mode [ 1807.075720][ T6956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1807.335338][T13101] lo speed is unknown, defaulting to 1000 [ 1807.346849][T13101] rxe_eth0 speed is unknown, defaulting to 1000 [ 1807.878649][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30450'. [ 1807.878686][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.30450'. [ 1807.921523][T13303] geneve2: entered promiscuous mode [ 1807.921546][T13303] geneve2: entered allmulticast mode [ 1808.220363][ T5298] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1808.604326][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30462'. [ 1808.639996][T13357] loop3: detected capacity change from 0 to 4096 [ 1808.756008][T13357] ntfs3(loop3): ino=9, mi_enum_attr [ 1808.756039][T13357] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1808.763726][T13357] ntfs3(loop3): ino=9, mi_enum_attr [ 1808.763828][T13357] ntfs3(loop3): ino=b, mi_enum_attr [ 1808.763906][T13357] ntfs3(loop3): Failed to load $Extend (-22). [ 1808.763924][T13357] ntfs3(loop3): Failed to initialize $Extend. [ 1808.821945][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 1808.821960][ T33] audit: type=1800 audit(1958.872:1778): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.30460" name="file1" dev="loop3" ino=30 res=0 errno=-22 [ 1808.865325][T23859] Bluetooth: hci2: command tx timeout [ 1808.913862][T26354] hsr_slave_0: left promiscuous mode [ 1808.927744][T26354] hsr_slave_1: left promiscuous mode [ 1808.928555][T26354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.928575][T26354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.951701][T26354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.951720][T26354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.030593][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30467'. [ 1809.030670][T13386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30467'. [ 1809.079247][T26354] veth1_macvtap: left promiscuous mode [ 1809.079298][T26354] veth0_macvtap: left promiscuous mode [ 1809.079404][T26354] veth1_vlan: left promiscuous mode [ 1809.079477][T26354] veth0_vlan: left promiscuous mode [ 1809.988347][T13429] device-mapper: table: 248:22: ram2 too small for target: start=8191, len=8192, dev_size=8192 [ 1809.988376][T13429] device-mapper: core: Cannot calculate initial queue limits [ 1809.988385][T13429] device-mapper: ioctl: unable to set up device queue for new table. [ 1810.019596][T26354] team0 (unregistering): Port device team_slave_1 removed [ 1810.101361][T26354] team0 (unregistering): Port device team_slave_0 removed [ 1810.376367][ T5298] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1810.415318][T13447] hsr0: left allmulticast mode [ 1810.687115][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30489'. [ 1810.708191][T13473] netlink: 5 bytes leftover after parsing attributes in process `syz.8.30491'. [ 1810.723103][T13472] netlink: 'syz.1.30490': attribute type 6 has an invalid length. [ 1810.723123][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30490'. [ 1811.093027][T23859] Bluetooth: hci2: command tx timeout [ 1811.131481][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.139090][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.139211][T13101] bridge_slave_0: entered allmulticast mode [ 1811.140824][T13101] bridge_slave_0: entered promiscuous mode [ 1811.163453][T13101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.163575][T13101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.180753][T13101] bridge_slave_1: entered allmulticast mode [ 1811.184880][T13101] bridge_slave_1: entered promiscuous mode [ 1811.230474][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.233921][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.279566][T13101] team0: Port device team_slave_0 added [ 1811.287917][T13101] team0: Port device team_slave_1 added [ 1811.322028][T13101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1811.322043][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.322068][T13101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.359499][T13101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.359514][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1811.359540][T13101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.637915][T13479] loop3: detected capacity change from 0 to 32768 [ 1811.729900][T13479] ERROR: (device loop3): dtSearch: stack overrun! [ 1811.729900][T13479] [ 1811.736051][T13479] ERROR: (device loop3): remounting filesystem as read-only [ 1811.736100][T13479] btstack dump: [ 1811.736123][T13479] bn = 0, index = 4 [ 1811.736154][T13479] bn = 0, index = 4 [ 1811.736173][T13479] bn = 0, index = 4 [ 1811.736199][T13479] bn = 0, index = 4 [ 1811.736223][T13479] bn = 0, index = 4 [ 1811.736242][T13479] bn = 0, index = 4 [ 1811.736262][T13479] bn = 0, index = 4 [ 1811.736281][T13479] bn = 0, index = 0 [ 1811.736333][T13479] jfs_lookup: dtSearch returned -5 [ 1811.872932][T13479] ERROR: (device loop3): dtSearch: stack overrun! [ 1811.872932][T13479] [ 1811.872954][T13479] btstack dump: [ 1811.872958][T13479] bn = 0, index = 4 [ 1811.872965][T13479] bn = 0, index = 4 [ 1811.872971][T13479] bn = 0, index = 4 [ 1811.872977][T13479] bn = 0, index = 4 [ 1811.872983][T13479] bn = 0, index = 4 [ 1811.872989][T13479] bn = 0, index = 4 [ 1811.872995][T13479] bn = 0, index = 4 [ 1811.873000][T13479] bn = 0, index = 0 [ 1811.873114][T13479] jfs_lookup: dtSearch returned -5 [ 1811.917326][T13101] hsr_slave_0: entered promiscuous mode [ 1811.935674][T13101] hsr_slave_1: entered promiscuous mode [ 1811.954048][T13101] debugfs: 'hsr0' already exists in 'hsr' [ 1811.954065][T13101] Cannot create hsr debugfs directory [ 1812.315839][ T5298] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1812.403969][ T11] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1812.567345][ T11] usb 4-1: New USB device found: idVendor=060b, idProduct=0001, bcdDevice=0.00 [ 1812.569735][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.569764][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.569785][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1812.569823][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.575995][ T11] usb 4-1: config 0 descriptor?? [ 1813.039863][ T11] hid_parser_main: 38 callbacks suppressed [ 1813.039886][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.039913][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.039937][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.039960][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.039984][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.040007][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.040029][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.040052][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.040074][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.040097][ T11] macally 0003:060B:0001.0057: unknown main item tag 0x0 [ 1813.136225][ T11] macally 0003:060B:0001.0057: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 1813.247990][ T11] usb 4-1: USB disconnect, device number 114 [ 1813.312652][T23859] Bluetooth: hci2: command tx timeout [ 1813.385820][T13753] fido_id[13753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1814.145459][ T5298] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1814.441255][T13821] loop8: detected capacity change from 0 to 2048 [ 1814.497415][T13823] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1814.773767][T13823] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1814.773795][T13823] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1814.829352][T13823] Remounting filesystem read-only [ 1814.836784][ T7680] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1815.756577][T13101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1815.776756][T13101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1815.777625][T13101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1815.801433][T13101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1815.802285][T13101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1815.823547][T13101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1815.832932][T13101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1815.849894][T13101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1816.128941][T13101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.173588][T13858] loop3: detected capacity change from 0 to 40427 [ 1816.215694][T13858] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1816.215717][T13858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1816.239885][T13101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.273488][T26354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.273585][T26354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.317977][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.318076][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.421928][T13908] device-mapper: table: 248:27: crypt: Error decoding and setting key (-EINVAL) [ 1816.421951][T13908] device-mapper: ioctl: error adding target to table [ 1816.482644][T13858] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1816.550726][T13858] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1816.550754][T13858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1817.377908][T13949] nvme_fcloop: unknown parameter or missing value 'roles=' [ 1817.554609][T13101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.266473][T13101] veth0_vlan: entered promiscuous mode [ 1818.291819][T13101] veth1_vlan: entered promiscuous mode [ 1818.359314][T23859] Bluetooth: hci5: command 0x0406 tx timeout [ 1818.414828][T13101] veth0_macvtap: entered promiscuous mode [ 1818.419599][T13101] veth1_macvtap: entered promiscuous mode [ 1818.445897][T13101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1818.449630][T13101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1818.583592][T27820] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.583632][T27820] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.583663][T27820] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.583693][T27820] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.784371][T26354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.784392][T26354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.085144][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.085164][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.281539][T14052] vivid-000: disconnect [ 1819.292814][T14052] vivid-000: reconnect [ 1819.834482][T14055] loop3: detected capacity change from 0 to 32768 [ 1819.856127][T14071] loop7: detected capacity change from 0 to 1764 [ 1819.886134][T14055] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1820.112633][T14055] XFS (loop3): Ending clean mount [ 1820.289214][T14095] loop8: detected capacity change from 0 to 256 [ 1820.293695][T14095] exfat: Deprecated parameter 'utf8' [ 1820.293746][T14095] exfat: Deprecated parameter 'namecase' [ 1820.293850][T14095] exfat: Deprecated parameter 'namecase' [ 1820.293873][T14095] exfat: Deprecated parameter 'utf8' [ 1820.334811][T14095] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1820.335181][T14095] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1820.367035][ T6956] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1820.532560][T14095] exFAT-fs (loop8): start_clu is invalid cluster(0x400) [ 1820.941240][T14121] loop8: detected capacity change from 0 to 1024 [ 1820.964089][T14125] mtrr: base(0x2df12710000) is not aligned on a size(0x71309926000) boundary [ 1820.987200][T14121] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1821.029093][T14121] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #3: block 1: comm syz.8.30594: lblock 1 mapped to illegal pblock 1 (length 1) [ 1821.029131][T14121] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1821.029401][T14121] EXT4-fs (loop8): Remounting filesystem read-only [ 1821.029419][T14121] Quota error (device loop8): write_blk: dquota write failed [ 1821.029448][T14121] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1821.029530][T14121] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1821.029618][T14121] EXT4-fs (loop8): 1 orphan inode deleted [ 1821.099273][T14121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1821.381041][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.487960][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.7.30599'. [ 1821.647570][T14161] tipc: New replicast peer: 255.255.255.255 [ 1821.663097][T14161] tipc: Enabled bearer , priority 20 [ 1822.078986][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1822.240500][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1822.244078][ T10] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1822.270324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.270349][ T10] usb 4-1: Product: syz [ 1822.270363][ T10] usb 4-1: Manufacturer: syz [ 1822.270378][ T10] usb 4-1: SerialNumber: syz [ 1822.299929][ T10] usb 4-1: config 0 descriptor?? [ 1822.316203][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1822.407103][T14199] loop7: detected capacity change from 0 to 4096 [ 1822.503265][T14199] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1822.503293][T14199] NILFS (loop7): trying rollback from an earlier position [ 1822.589396][T14199] NILFS (loop7): recovery complete [ 1822.600161][T14202] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1822.829561][T14204] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 4100 already freed [ 1822.877918][T14204] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 1823.253353][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 1823.254564][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.254580][ T10] gspca_stk1135: Sensor write failed [ 1823.254635][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.254646][ T10] gspca_stk1135: Sensor write failed [ 1823.254691][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.254702][ T10] gspca_stk1135: Sensor read failed [ 1823.254732][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.254742][ T10] gspca_stk1135: Sensor read failed [ 1823.258156][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 1823.258252][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.258279][ T10] gspca_stk1135: Sensor read failed [ 1823.258346][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.258366][ T10] gspca_stk1135: Sensor read failed [ 1823.258450][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.258470][ T10] gspca_stk1135: Sensor write failed [ 1823.258519][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1823.258539][ T10] gspca_stk1135: Sensor write failed [ 1823.258732][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1823.294562][ T10] usb 4-1: USB disconnect, device number 115 [ 1823.994103][T14252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.467808][T14286] loop3: detected capacity change from 0 to 16 [ 1824.551410][T14286] erofs (device loop3): mounted with root inode @ nid 36. [ 1825.463569][T14300] loop3: detected capacity change from 0 to 32768 [ 1825.791389][ T33] audit: type=1400 audit(1974.746:1779): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=14333 comm="syz.1.30647" name="foo" offset=35 [ 1826.130094][T14350] loop8: detected capacity change from 0 to 2048 [ 1826.150525][T14350] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1826.150546][T14350] UDF-fs: Scanning with blocksize 512 failed [ 1826.180698][T14350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1826.890913][T14377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30658'. [ 1827.186718][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30659'. [ 1827.417924][T14392] netlink: 'syz.1.30662': attribute type 39 has an invalid length. [ 1829.159663][T14454] loop3: detected capacity change from 0 to 32768 [ 1829.195886][T14454] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1829.195906][T14454] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1829.240827][T14454] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1829.255422][ T7515] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1829.255438][ T7515] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1829.344706][T14490] tipc: Enabled bearer , priority 0 [ 1829.368904][ T7515] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 1829.379861][ T7515] gfs2: fsid=syz:syz.0: jid=0: Done [ 1829.379920][T14454] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1829.662033][T14454] gfs2: fsid=syz:syz.0: Corruption found in quota_change0 file: duplicate identifier in slot 57405 [ 1829.682108][T14454] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1830.647180][ T33] audit: type=1807 audit(1979.292:1780): action=measure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ res=0 [ 1830.647434][ T33] audit: type=1802 audit(1979.292:1781): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.30707" res=0 errno=-22 [ 1830.682695][T14545] ima: policy update failed [ 1830.682844][ T33] audit: type=1802 audit(1979.329:1782): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.30707" res=0 errno=-22 [ 1830.789110][T14550] loop8: detected capacity change from 0 to 16 [ 1830.837886][T14550] erofs (device loop8): mounted with root inode @ nid 36. [ 1830.874483][T14550] syz.8.30709: attempt to access beyond end of device [ 1830.874483][T14550] loop8: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 1830.922623][T14550] syz.8.30709: attempt to access beyond end of device [ 1830.922623][T14550] loop8: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1830.922958][ T33] audit: type=1800 audit(1979.554:1783): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.30709" name="file1" dev="loop8" ino=86 res=0 errno=-5 [ 1830.993711][T14550] syz.8.30709: attempt to access beyond end of device [ 1830.993711][T14550] loop8: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 1830.993997][ T33] audit: type=1800 audit(1979.619:1784): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.30709" name="file1" dev="loop8" ino=86 res=0 errno=-5 [ 1831.079104][T14573] loop3: detected capacity change from 0 to 1024 [ 1831.124567][T14573] hfsplus: invalid length 1280 has been corrected to 255 [ 1832.238129][T14636] loop3: detected capacity change from 0 to 128 [ 1832.264881][T14636] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1832.338448][ T6956] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1832.432542][T14648] loop8: detected capacity change from 0 to 512 [ 1833.089443][T14691] loop3: detected capacity change from 0 to 512 [ 1833.362101][T14709] loop8: detected capacity change from 0 to 1024 [ 1833.379629][T14709] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1833.426397][T14709] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 2: comm syz.8.30759: lblock 2 mapped to illegal pblock 2 (length 1) [ 1833.426422][T14709] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1833.428160][T14709] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1833.428190][T14709] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 48: comm syz.8.30759: lblock 0 mapped to illegal pblock 48 (length 1) [ 1833.428211][T14709] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1833.428428][T14709] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1833.428452][T14709] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.30759: Failed to acquire dquot type 0 [ 1833.428467][T14709] loop8: lost filesystem error report for type 5 error -117 [ 1833.428762][T14709] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 1833.428776][T14709] loop8: lost filesystem error report for type 5 error -117 [ 1833.428999][T14709] EXT4-fs error (device loop8): ext4_evict_inode:336: inode #11: comm syz.8.30759: mark_inode_dirty error [ 1833.429025][T14709] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1833.429302][T14709] EXT4-fs warning (device loop8): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 1833.429400][T14709] EXT4-fs (loop8): 1 orphan inode deleted [ 1833.430734][T14709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1833.483050][ T53] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1833.483129][ T53] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1833.498852][ T53] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1833.498947][ T53] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 1833.499011][ T53] loop8: lost filesystem error report for type 5 error -117 [ 1833.659295][T14709] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm syz.8.30759: lblock 1 mapped to illegal pblock 1 (length 1) [ 1833.673491][T14709] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 1 [ 1833.673604][T14709] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 60928 [ 1833.673649][T14709] EXT4-fs error (device loop8): ext4_acquire_dquot:7120: comm syz.8.30759: Failed to acquire dquot type 0 [ 1833.804216][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.819522][ T1406] EXT4-fs error (device loop8): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1833.819555][ T1406] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1833.820108][ T1406] EXT4-fs error (device loop8): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 0 [ 1833.820132][ T1406] loop8: lost filesystem error report for type 5 error -117 [ 1833.823039][ T7680] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1833.823139][ T7680] loop8: lost filesystem error report for type 5 error -117 [ 1833.823547][ T7680] EXT4-fs error (device loop8) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 1833.823567][ T7680] loop8: lost filesystem error report for type 5 error -117 [ 1833.823761][ T7680] EXT4-fs error (device loop8): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error [ 1833.823785][ T7680] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1833.824085][ T7680] EXT4-fs error (device loop8): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1833.824111][ T7680] loop8: lost filesystem error report for type 5 error -117 [ 1834.018598][T14730] loop3: detected capacity change from 0 to 8 [ 1834.074185][T14730] SQUASHFS error: Unable to read inode 0x24 [ 1834.368902][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30770'. [ 1834.397393][T14753] loop3: detected capacity change from 0 to 1024 [ 1834.411454][T14753] EXT4-fs: Ignoring removed orlov option [ 1834.486472][T14753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1834.523987][ T750] Bluetooth: hci4: Frame reassembly failed (-84) [ 1834.667686][ T6956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.764067][T14751] loop8: detected capacity change from 0 to 32768 [ 1834.815702][T14773] bond0: invalid ARP target specified [ 1834.831580][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831580][T14751] [ 1834.831617][T14751] xtLookup: xtSearch returned -5 [ 1834.831626][T14751] free_index: error reading directory table [ 1834.831635][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831635][T14751] [ 1834.831659][T14751] xtLookup: xtSearch returned -5 [ 1834.831668][T14751] free_index: error reading directory table [ 1834.831676][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831676][T14751] [ 1834.831700][T14751] xtLookup: xtSearch returned -5 [ 1834.831708][T14751] free_index: error reading directory table [ 1834.831716][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831716][T14751] [ 1834.831739][T14751] xtLookup: xtSearch returned -5 [ 1834.831748][T14751] free_index: error reading directory table [ 1834.831756][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831756][T14751] [ 1834.831779][T14751] xtLookup: xtSearch returned -5 [ 1834.831787][T14751] free_index: error reading directory table [ 1834.831802][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831802][T14751] [ 1834.831826][T14751] xtLookup: xtSearch returned -5 [ 1834.831835][T14751] add_index: get/read_metapage failed! [ 1834.831845][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831845][T14751] [ 1834.831869][T14751] xtLookup: xtSearch returned -5 [ 1834.831878][T14751] free_index: error reading directory table [ 1834.831886][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831886][T14751] [ 1834.831909][T14751] xtLookup: xtSearch returned -5 [ 1834.831917][T14751] free_index: error reading directory table [ 1834.831925][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831925][T14751] [ 1834.831948][T14751] xtLookup: xtSearch returned -5 [ 1834.831956][T14751] free_index: error reading directory table [ 1834.831964][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.831964][T14751] [ 1834.831987][T14751] xtLookup: xtSearch returned -5 [ 1834.831996][T14751] free_index: error reading directory table [ 1834.832004][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.832004][T14751] [ 1834.832027][T14751] xtLookup: xtSearch returned -5 [ 1834.832036][T14751] free_index: error reading directory table [ 1834.936869][T14751] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt [ 1834.936869][T14751] [ 1834.936972][T14751] xtLookup: xtSearch returned -5 [ 1834.936997][T14751] add_index: get/read_metapage failed! [ 1835.154148][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30776'. [ 1835.154179][T14780] macvlan0: entered promiscuous mode [ 1835.154305][T14780] netlink: 'syz.1.30776': attribute type 1 has an invalid length. [ 1835.154319][T14780] netlink: 'syz.1.30776': attribute type 2 has an invalid length. [ 1835.154331][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30776'. [ 1835.331323][T14789] loop3: detected capacity change from 0 to 2048 [ 1835.363575][T14793] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1835.563759][T14801] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 1835.801564][T14815] kvm [14814]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x1234 [ 1836.097447][T14827] input: syz0 as /devices/virtual/input/input176 [ 1836.097755][T14827] input: failed to attach handler leds to device input176, error: -6 [ 1836.355218][T14813] loop8: detected capacity change from 0 to 32768 [ 1836.366896][T14813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.30777 (14813) [ 1836.390174][T14813] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1836.390205][T14813] BTRFS info (device loop8): using crc32c checksum algorithm [ 1836.513330][T14813] BTRFS info (device loop8): enabling ssd optimizations [ 1836.513358][T14813] BTRFS info (device loop8): turning on flush-on-commit [ 1836.513376][T14813] BTRFS info (device loop8): enabling free space tree [ 1836.513392][T14813] BTRFS info (device loop8): enabling auto defrag [ 1836.513410][T14813] BTRFS info (device loop8): use lzo compression, level 1 [ 1836.513430][T14813] BTRFS info (device loop8): max_inline set to 4096 [ 1836.724542][ T7680] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1836.746807][T23859] Bluetooth: hci4: command 0x1003 tx timeout [ 1836.746909][T19391] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1837.092459][T14839] loop7: detected capacity change from 0 to 32768 [ 1837.101842][T14839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.30794 (14839) [ 1837.146038][T14839] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1837.146067][T14839] BTRFS info (device loop7): using sha256 checksum algorithm [ 1837.458045][T14839] BTRFS info (device loop7): enabling ssd optimizations [ 1837.458072][T14839] BTRFS info (device loop7): turning on async discard [ 1837.458089][T14839] BTRFS info (device loop7): enabling free space tree [ 1837.565740][T13101] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1837.949791][ T33] kauditd_printk_skb: 1 callbacks suppressed [ 1837.949809][ T33] audit: type=1400 audit(1986.130:1785): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=14933 comm="syz.8.30814" name="p" offset=79 [ 1838.210117][T14944] loop8: detected capacity change from 0 to 64 [ 1838.274727][T14944] hfs: request for non-existent node 131072 in B*Tree [ 1838.274748][T14944] hfs: request for non-existent node 131072 in B*Tree [ 1838.431776][T14959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1838.571595][T14971] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1838.571621][T14971] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1839.280817][T15000] veth1_macvtap: left promiscuous mode [ 1839.288031][T15000] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1839.571476][T15014] loop8: detected capacity change from 0 to 256 [ 1839.576157][T15014] exfat: Deprecated parameter 'utf8' [ 1839.630233][T15014] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1839.765253][ T10] hid_parser_main: 28 callbacks suppressed [ 1839.768759][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1839.794512][ T10] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1840.205876][ T33] audit: type=1400 audit(1988.234:1786): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15035 comm="syz.8.30845" name="p" offset=58 [ 1840.525817][T15052] loop9: detected capacity change from 0 to 524156864 [ 1841.506406][T15057] loop8: detected capacity change from 0 to 32768 [ 1841.521418][T15057] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.30852 (15057) [ 1841.543352][T15057] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1841.543382][T15057] BTRFS info (device loop8): using blake2b checksum algorithm [ 1841.672272][T15057] BTRFS info (device loop8): enabling ssd optimizations [ 1841.672305][T15057] BTRFS info (device loop8): turning on async discard [ 1841.672320][T15057] BTRFS info (device loop8): enabling free space tree [ 1841.672336][T15057] BTRFS info (device loop8): use zstd compression, level 3 [ 1841.725292][T15111] loop7: detected capacity change from 0 to 4096 [ 1841.727890][ T33] audit: type=1800 audit(1989.656:1787): pid=15057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.30852" name="file1" dev="loop8" ino=260 res=0 errno=-22 [ 1841.860886][T15116] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1841.923426][ T7680] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1842.083402][T15111] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1842.134883][T15111] Remounting filesystem read-only [ 1842.169464][T15119] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1842.355514][T13101] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1842.649858][T15140] block2mtd: error: cannot open device /dev÷ÿoop0j¤+ÿÈE[äj~œøÖî®Á0|—n± [ 1842.649858][T15140] Fè [ 1843.132763][T15168] loop8: detected capacity change from 0 to 2048 [ 1843.183699][T15168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1843.205348][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1843.275708][ T33] audit: type=1800 audit(1991.106:1788): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.30879" name="file1" dev="loop8" ino=15 res=0 errno=-22 [ 1843.365255][ T11] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1843.366323][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.366369][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.402754][ T11] usb 2-1: config 0 descriptor?? [ 1843.419663][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 1843.451499][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.456774][T15187] xt_hashlimit: size too large, truncated to 1048576 [ 1843.701618][T15188] veth3: entered allmulticast mode [ 1843.861937][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1843.953733][T15217] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.30887'. [ 1843.955154][T15217] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.30887'. [ 1843.955927][T15217] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.30887'. [ 1844.104175][ T11] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1844.105923][ T11] pwc: recv_control_msg error -71 req 04 val 1000 [ 1844.106448][ T11] pwc: recv_control_msg error -71 req 04 val 1300 [ 1844.106857][ T11] pwc: recv_control_msg error -71 req 04 val 1400 [ 1844.107256][ T11] pwc: recv_control_msg error -71 req 02 val 2000 [ 1844.107667][ T11] pwc: recv_control_msg error -71 req 02 val 2100 [ 1844.108068][ T11] pwc: recv_control_msg error -71 req 04 val 1500 [ 1844.108546][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 1844.108965][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 1844.109445][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 1844.109857][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 1844.110253][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 1844.111064][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 1844.111474][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 1844.210516][ T11] pwc: Registered as video103. [ 1844.214776][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input178 [ 1844.239053][ T11] usb 2-1: USB disconnect, device number 15 [ 1845.624162][T15284] loop3: detected capacity change from 0 to 32768 [ 1845.654032][T15284] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1845.707797][T15284] XFS (loop3): Ending clean mount [ 1845.781321][ T6956] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1846.247696][ T33] audit: type=1400 audit(1993.875:1789): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=15326 comm="syz.8.30914" name="//o" offset=81 [ 1846.404725][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30915'. [ 1846.694494][T15338] loop8: detected capacity change from 0 to 40427 [ 1846.710233][T15338] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1846.710258][T15338] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1846.732463][T15338] F2FS-fs (loop8): invalid crc value [ 1846.867152][T15355] loop3: detected capacity change from 0 to 8192 [ 1846.880724][T15355] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1846.952428][T15355] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1846.952777][T15355] ntfs3(loop3): Failed to load $Extend (-2). [ 1846.952797][T15355] ntfs3(loop3): Failed to initialize $Extend. [ 1847.111343][T15338] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1847.203872][T15338] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1847.203898][T15338] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 1847.438826][ T7680] syz-executor: attempt to access beyond end of device [ 1847.438826][ T7680] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1847.466592][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.466623][ T7680] Tainted: [L]=SOFTLOCKUP [ 1847.466631][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1847.466643][ T7680] Call Trace: [ 1847.466652][ T7680] [ 1847.466661][ T7680] dump_stack_lvl+0xe8/0x150 [ 1847.466699][ T7680] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1847.466738][ T7680] f2fs_write_end_bio+0x118e/0x15d0 [ 1847.466781][ T7680] __submit_merged_bio+0x258/0x6a0 [ 1847.466812][ T7680] ? rcu_is_watching+0x16/0xb0 [ 1847.466850][ T7680] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1847.466883][ T7680] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1847.466938][ T7680] f2fs_write_data_pages+0x2a13/0x36e0 [ 1847.466996][ T7680] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1847.467017][ T7680] ? is_bpf_text_address+0x26/0x2b0 [ 1847.467051][ T7680] ? arch_stack_walk+0xfb/0x150 [ 1847.467106][ T7680] ? add_lock_to_list+0xc7/0x100 [ 1847.467137][ T7680] ? lockdep_unlock+0x5c/0xd0 [ 1847.467157][ T7680] ? __lock_acquire+0x1511/0x2de0 [ 1847.467210][ T7680] ? do_raw_spin_lock+0x12b/0x2f0 [ 1847.467241][ T7680] ? do_raw_spin_unlock+0xf5/0x200 [ 1847.467262][ T7680] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1847.467285][ T7680] do_writepages+0x338/0x560 [ 1847.467318][ T7680] ? do_raw_spin_unlock+0xf5/0x200 [ 1847.467349][ T7680] filemap_fdatawrite+0x1e9/0x2f0 [ 1847.467375][ T7680] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1847.467442][ T7680] ? do_raw_spin_unlock+0xf5/0x200 [ 1847.467468][ T7680] f2fs_sync_dirty_inodes+0x471/0x970 [ 1847.467508][ T7680] f2fs_write_checkpoint+0x867/0x24d0 [ 1847.467569][ T7680] kill_f2fs_super+0x2df/0x700 [ 1847.467597][ T7680] ? rcu_do_enqueue+0x616/0x870 [ 1847.467626][ T7680] ? lockdep_hardirqs_on+0x7b/0x110 [ 1847.467654][ T7680] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1847.467694][ T7680] ? __pfx_call_rcu+0x10/0x10 [ 1847.467719][ T7680] ? shrinker_free+0x2a7/0x3b0 [ 1847.467744][ T7680] deactivate_locked_super+0xbe/0x110 [ 1847.467773][ T7680] cleanup_mnt+0x204/0x2a0 [ 1847.467807][ T7680] task_work_run+0x1d9/0x260 [ 1847.467837][ T7680] ? __pfx_task_work_run+0x10/0x10 [ 1847.467872][ T7680] exit_to_user_mode_loop+0x204/0x770 [ 1847.467900][ T7680] ? rcu_is_watching+0x16/0xb0 [ 1847.467934][ T7680] do_syscall_64+0x328/0x520 [ 1847.467959][ T7680] ? trace_irq_disable+0x3b/0x140 [ 1847.467986][ T7680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.468021][ T7680] ? clear_bhb_loop+0x70/0xc0 [ 1847.468045][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.468067][ T7680] RIP: 0033:0x7f671e7a0797 [ 1847.468085][ T7680] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1847.468102][ T7680] RSP: 002b:00007ffcfc499db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1847.468122][ T7680] RAX: 0000000000000000 RBX: 00007f671e835f93 RCX: 00007f671e7a0797 [ 1847.468135][ T7680] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfc499e70 [ 1847.468147][ T7680] RBP: 00007ffcfc499e70 R08: 00007ffcfc49ae70 R09: 00000000ffffffff [ 1847.468160][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcfc49af00 [ 1847.468171][ T7680] R13: 00007f671e835f93 R14: 00000000001a88c2 R15: 00007ffcfc49af40 [ 1847.468202][ T7680] [ 1847.508253][ T7680] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1848.494905][T15401] loop8: detected capacity change from 0 to 512 [ 1848.586557][T15401] EXT4-fs error (device loop8): ext4_iget_extra_inode:6027: inode #15: comm syz.8.30929: corrupted in-inode xattr: invalid ea_ino [ 1848.586594][T15401] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1848.600602][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1848.600635][ C1] EXT4-fs (loop8): initial error at time 1996: ext4_iget_extra_inode:6027: inode 15 [ 1848.600665][ C1] EXT4-fs (loop8): last error at time 1996: ext4_iget_extra_inode:6027: inode 15 [ 1848.643204][T15401] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.30929: couldn't read orphan inode 15 (err -117) [ 1848.643236][T15401] loop8: lost filesystem error report for type 5 error -117 [ 1848.662734][T15401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.910366][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.047281][T15409] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1849.553516][T15445] device-mapper: ioctl: name not supplied when creating device [ 1850.350765][T15455] loop7: detected capacity change from 0 to 32768 [ 1850.372787][T15455] [ 1850.372787][T15455] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1850.372787][T15455] [ 1850.406315][T15455] ERROR: (device loop7): diWrite: ixpxd invalid [ 1850.406315][T15455] [ 1850.407099][T15455] ERROR: (device loop7): txCommit: [ 1850.407099][T15455] [ 1850.429711][T15455] ERROR: (device loop7): dtSearch: stack overrun! [ 1850.429711][T15455] [ 1850.429738][T15455] btstack dump: [ 1850.429745][T15455] bn = 0, index = 0 [ 1850.429755][T15455] bn = 0, index = 0 [ 1850.429765][T15455] bn = 0, index = 0 [ 1850.429775][T15455] bn = 0, index = 0 [ 1850.429784][T15455] bn = 0, index = 0 [ 1850.429794][T15455] bn = 0, index = 0 [ 1850.429804][T15455] bn = 0, index = 0 [ 1850.429813][T15455] bn = 0, index = 0 [ 1850.429835][T15455] jfs_mkdir: dtSearch returned -5 [ 1850.566153][T13101] [ 1850.566153][T13101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1850.566153][T13101] [ 1850.566791][T13101] [ 1850.566791][T13101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1850.566791][T13101] [ 1851.011872][T15485] phram: illegal erasesize or len [ 1851.243212][ T7515] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1851.414583][ T7515] usb 2-1: Using ep0 maxpacket: 16 [ 1851.420750][ T7515] usb 2-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 1851.423910][ T7515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.423932][ T7515] usb 2-1: Product: syz [ 1851.423946][ T7515] usb 2-1: Manufacturer: syz [ 1851.423960][ T7515] usb 2-1: SerialNumber: syz [ 1851.558189][T15481] loop7: detected capacity change from 0 to 40427 [ 1851.580281][T15481] F2FS-fs (loop7): invalid crc value [ 1851.731116][T15481] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1851.751295][T15481] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1851.827788][T13101] syz-executor: attempt to access beyond end of device [ 1851.827788][T13101] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1851.837713][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.837787][T13101] Tainted: [L]=SOFTLOCKUP [ 1851.837811][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1851.837839][T13101] Call Trace: [ 1851.837858][T13101] [ 1851.837883][T13101] dump_stack_lvl+0xe8/0x150 [ 1851.837984][T13101] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1851.838075][T13101] f2fs_write_end_bio+0x118e/0x15d0 [ 1851.838187][T13101] __submit_merged_bio+0x258/0x6a0 [ 1851.838298][T13101] ? rcu_is_watching+0x16/0xb0 [ 1851.838387][T13101] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1851.838481][T13101] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1851.838634][T13101] f2fs_write_data_pages+0x2a13/0x36e0 [ 1851.838772][T13101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1851.838866][T13101] ? is_bpf_text_address+0x292/0x2b0 [ 1851.838919][T13101] ? is_bpf_text_address+0x26/0x2b0 [ 1851.839032][T13101] ? stack_trace_save+0xa9/0x100 [ 1851.839095][T13101] ? __pfx_stack_trace_save+0x10/0x10 [ 1851.839201][T13101] ? lockdep_unlock+0x5c/0xd0 [ 1851.839255][T13101] ? __lock_acquire+0x1511/0x2de0 [ 1851.839385][T13101] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1851.839449][T13101] do_writepages+0x338/0x560 [ 1851.839535][T13101] ? do_raw_spin_unlock+0xf5/0x200 [ 1851.839604][T13101] filemap_fdatawrite+0x1e9/0x2f0 [ 1851.839668][T13101] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1851.839849][T13101] ? do_raw_spin_unlock+0xf5/0x200 [ 1851.839918][T13101] f2fs_sync_dirty_inodes+0x471/0x970 [ 1851.840031][T13101] f2fs_write_checkpoint+0x867/0x24d0 [ 1851.840193][T13101] kill_f2fs_super+0x2df/0x700 [ 1851.840257][T13101] ? rcu_do_enqueue+0x616/0x870 [ 1851.840307][T13101] ? lockdep_hardirqs_on+0x7b/0x110 [ 1851.840364][T13101] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1851.840462][T13101] ? __pfx_call_rcu+0x10/0x10 [ 1851.840506][T13101] ? shrinker_free+0x2a7/0x3b0 [ 1851.840569][T13101] deactivate_locked_super+0xbe/0x110 [ 1851.840646][T13101] cleanup_mnt+0x204/0x2a0 [ 1851.840728][T13101] task_work_run+0x1d9/0x260 [ 1851.840798][T13101] ? __pfx_task_work_run+0x10/0x10 [ 1851.840881][T13101] exit_to_user_mode_loop+0x204/0x770 [ 1851.840954][T13101] ? rcu_is_watching+0x16/0xb0 [ 1851.841038][T13101] do_syscall_64+0x328/0x520 [ 1851.841101][T13101] ? trace_irq_disable+0x3b/0x140 [ 1851.841180][T13101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.841226][T13101] ? clear_bhb_loop+0x70/0xc0 [ 1851.841289][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.841348][T13101] RIP: 0033:0x7fcb94da0797 [ 1851.841404][T13101] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1851.841468][T13101] RSP: 002b:00007ffebe253b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1851.841520][T13101] RAX: 0000000000000000 RBX: 00007fcb94e35f93 RCX: 00007fcb94da0797 [ 1851.841549][T13101] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe253bd0 [ 1851.841583][T13101] RBP: 00007ffebe253bd0 R08: 00007ffebe254bd0 R09: 00000000ffffffff [ 1851.841612][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffebe254c60 [ 1851.841646][T13101] R13: 00007fcb94e35f93 R14: 00000000001a98dc R15: 00007ffebe254ca0 [ 1851.841726][T13101] [ 1851.856392][T13101] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1852.387851][T15527] loop8: detected capacity change from 0 to 64 [ 1852.419603][ T7515] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1852.422586][ T7515] usb 2-1: USB disconnect, device number 16 [ 1852.605130][T15542] Invalid logical block size (256) [ 1852.715604][T15551] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1852.904974][T15557] loop8: detected capacity change from 0 to 1024 [ 1852.920289][T15557] EXT4-fs (loop8): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 1852.945189][T15557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1852.984425][T15557] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.30987: bg 0: block 153: padding at end of block bitmap is not set [ 1853.056037][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.205377][T15570] loop8: detected capacity change from 0 to 2048 [ 1853.256617][T15572] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1853.341190][T15570] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 1853.490614][T15585] loop5: detected capacity change from 0 to 7 [ 1853.792967][T15585] Dev loop5: unable to read RDB block 7 [ 1853.793025][T15585] loop5: unable to read partition table [ 1853.793236][T15585] loop5: partition table beyond EOD, truncated [ 1853.793324][T15585] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1854.075365][T15607] CUSE: DEVNAME unspecified [ 1854.119812][T15609] loop7: detected capacity change from 0 to 64 [ 1854.452274][T23859] Bluetooth: hci4: command 0x1003 tx timeout [ 1854.452440][T19391] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1854.595030][ T33] audit: type=1807 audit(2001.695:1790): func=FILE_CHECK res=0 [ 1854.595196][ T33] audit: type=1802 audit(2001.695:1791): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.31010" res=0 errno=-22 [ 1854.595503][T15631] ima: policy update failed [ 1854.595623][ T33] audit: type=1802 audit(2001.695:1792): pid=15631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.31010" res=0 errno=-22 [ 1854.674796][ T6665] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1854.796778][T15642] loop3: detected capacity change from 0 to 256 [ 1854.798165][T15642] exfat: Deprecated parameter 'namecase' [ 1854.836737][ T6665] usb 9-1: New USB device found: idVendor=04b4, idProduct=931e, bcdDevice=0.40 [ 1854.837794][ T6665] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.837820][ T6665] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1854.839942][ T6665] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.839967][ T6665] usb 9-1: Product: syz [ 1854.839982][ T6665] usb 9-1: Manufacturer: syz [ 1854.839996][ T6665] usb 9-1: SerialNumber: syz [ 1854.885199][T15642] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8c24d3e4, utbl_chksum : 0xe619d30d) [ 1855.205333][ T6665] usb 9-1: USB disconnect, device number 6 [ 1855.260704][T31211] udevd[31211]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1855.859304][T15694] kvm [15693]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2 [ 1856.399158][T15709] : renamed from bond0 [ 1856.574370][T15716] sctp: [Deprecated]: syz.1.31037 (pid 15716) Use of int in maxseg socket option. [ 1856.574370][T15716] Use struct sctp_assoc_value instead [ 1856.646858][T15720] Format for deleting device is "id" (uint). [ 1856.649038][T15718] loop3: detected capacity change from 0 to 8192 [ 1856.673635][T15718] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1857.199333][T15755] loop7: detected capacity change from 0 to 256 [ 1857.224242][T15755] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1857.642006][T15778] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 1857.714091][T15786] loop8: detected capacity change from 0 to 256 [ 1857.744432][T27818] hid-generic 0003:0001:0001.0059: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 1857.971812][T15799] fido_id[15799]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1858.004172][T15801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1858.841564][T15872] loop7: detected capacity change from 0 to 32768 [ 1858.851705][T15872] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.31079 (15872) [ 1858.881504][T15872] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1858.881530][T15872] BTRFS info (device loop7): using blake2b checksum algorithm [ 1859.041467][T15872] BTRFS info (device loop7): enabling ssd optimizations [ 1859.041493][T15872] BTRFS info (device loop7): turning on async discard [ 1859.041509][T15872] BTRFS info (device loop7): enabling free space tree [ 1859.187522][T13101] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1859.639608][T15921] program syz.8.31089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1860.249430][T15935] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 1860.646334][T15947] smpboot: CPU 1 is now offline [ 1861.046541][ T6516] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1861.155682][T15983] ip_tables: iptables: counters copy to user failed while replacing table [ 1861.158128][T15983] ip_tables: iptables: counters copy to user failed while replacing table [ 1861.208325][ T6516] usb 2-1: Using ep0 maxpacket: 32 [ 1861.215206][ T6516] usb 2-1: New USB device found: idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 1861.216397][ T6516] usb 2-1: config 8 has an invalid interface number: 97 but max is 0 [ 1861.216415][ T6516] usb 2-1: config 8 has no interface number 0 [ 1861.216446][ T6516] usb 2-1: config 8 interface 97 has no altsetting 0 [ 1861.228029][ T6516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.228045][ T6516] usb 2-1: Product: syz [ 1861.228054][ T6516] usb 2-1: Manufacturer: syz [ 1861.228064][ T6516] usb 2-1: SerialNumber: syz [ 1861.373372][T15990] xt_hashlimit: size too large, truncated to 1048576 [ 1861.519049][ T6516] hub 2-1:8.97: bad descriptor, ignoring hub [ 1861.519068][ T6516] hub 2-1:8.97: probe with driver hub failed with error -5 [ 1861.541294][ T6516] sierra 2-1:8.97: Sierra USB modem converter detected [ 1861.568194][ T6516] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1861.607347][ T6516] usb 2-1: USB disconnect, device number 17 [ 1861.638900][ T6516] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1861.643354][ T6516] sierra 2-1:8.97: device disconnected [ 1861.801230][ T33] audit: type=1400 audit(2008.439:1793): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=16015 comm="syz.8.31119" name="p" offset=64 [ 1862.169513][T16031] loop3: detected capacity change from 0 to 512 [ 1862.186473][T16031] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1862.187535][T16031] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1862.210547][T16031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 1862.210690][T16031] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1862.210701][T16031] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.31126: bad orphan inode 3 [ 1862.210716][T16031] loop3: lost filesystem error report for type 5 error -117 [ 1862.218960][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1862.218973][ C0] EXT4-fs (loop3): initial error at time 2008: ext4_orphan_get:1430 [ 1862.218987][ C0] EXT4-fs (loop3): last error at time 2008: ext4_orphan_get:1430 [ 1862.227846][T16031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1862.338135][T16031] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.31126: dx entry: limit 0 != root limit 125 [ 1862.338159][T16031] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.31126: Corrupt directory, running e2fsck is recommended [ 1862.470460][ T6956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1862.672303][T16045] loop3: detected capacity change from 0 to 1024 [ 1862.689661][T16045] hfsplus: failed to load extents file [ 1863.619888][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.7.31145'. [ 1864.037602][T16103] MTRR 1 not used [ 1865.047658][ T33] audit: type=1326 audit(2011.479:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.047811][ T33] audit: type=1326 audit(2011.479:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.116407][ T33] audit: type=1326 audit(2011.535:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.116445][ T33] audit: type=1326 audit(2011.535:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.116477][ T33] audit: type=1326 audit(2011.535:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.208975][ T33] audit: type=1326 audit(2011.629:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.209022][ T33] audit: type=1326 audit(2011.629:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1865.209051][ T33] audit: type=1326 audit(2011.629:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16126 comm="syz.8.31165" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671e79f559 code=0x7ffc0000 [ 1866.659403][T16179] mtrr: base(0x2000) is not aligned on a size(0x0000) boundary [ 1866.859119][T16189] overlayfs: invalid origin (0000) [ 1867.629939][T19391] Bluetooth: hci1: command 0x0406 tx timeout [ 1868.037830][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1868.198838][ T11] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1868.199749][ T11] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1868.199765][ T11] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1868.199777][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1868.199805][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1868.199822][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1868.201128][ T11] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1868.201143][ T11] usb 2-1: Product: syz [ 1868.201152][ T11] usb 2-1: Manufacturer: syz [ 1868.293868][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 1868.293880][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 1868.312312][ T11] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1868.312325][ T11] cdc_wdm 2-1:1.0: Unknown control protocol [ 1868.475140][T16241] loop7: detected capacity change from 0 to 32768 [ 1868.489454][T16241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.31206 (16241) [ 1868.517312][T16241] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1868.517332][T16241] BTRFS info (device loop7): using sha256 checksum algorithm [ 1868.632279][T16241] BTRFS info (device loop7): enabling ssd optimizations [ 1868.632296][T16241] BTRFS info (device loop7): turning on async discard [ 1868.632307][T16241] BTRFS info (device loop7): enabling free space tree [ 1868.927713][ T11] usb 2-1: USB disconnect, device number 18 [ 1869.144072][ T33] audit: type=1400 audit(2000000003.058:1802): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A302020202020202030202020313720202020302020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313320202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203720363734312020202030202020202030202020202020203720202020202020202020300A2020736974303A [ 1869.180774][T13101] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1869.807747][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31218'. [ 1869.921515][T16307] loop7: detected capacity change from 0 to 1024 [ 1869.929533][T16307] EXT4-fs: Ignoring removed orlov option [ 1870.019035][T16307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1870.409840][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.877645][T16332] tun0: tun_chr_ioctl cmd 1074025677 [ 1870.877714][T16332] tun0: linktype set to 778 [ 1871.280529][ T33] audit: type=1400 audit(2000000005.060:1803): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=16349 comm="syz.7.31234" name="p" offset=79 [ 1871.552012][T16361] loop3: detected capacity change from 0 to 256 [ 1871.593478][T16361] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1872.106891][T16382] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1872.106905][T16382] One or more global auth toks could not properly register; rc = [-22] [ 1872.106927][T16382] Error validating options; rc = [-22] [ 1872.187397][T16385] loop3: detected capacity change from 0 to 8 [ 1872.499466][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.501813][T16407] loop7: detected capacity change from 0 to 256 [ 1872.621459][T16404] loop3: detected capacity change from 0 to 4096 [ 1872.712808][T16412] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1873.211430][T16438] loop8: detected capacity change from 0 to 512 [ 1873.228743][T16438] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1873.228755][T16438] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1873.259407][T16438] EXT4-fs (loop8): 1 truncate cleaned up [ 1873.260928][T16438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1873.450921][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.591040][T16448] loop7: detected capacity change from 0 to 512 [ 1873.618737][T16448] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1873.618752][T16448] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1873.618760][T16448] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1873.664121][T16448] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.31264: bad orphan inode 131083 [ 1873.664141][T16448] loop7: lost filesystem error report for type 5 error -117 [ 1873.678172][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1873.678186][ C0] EXT4-fs (loop7): initial error at time 2000000007: ext4_orphan_get:1430 [ 1873.678201][ C0] EXT4-fs (loop7): last error at time 2000000007: ext4_orphan_get:1430 [ 1873.720464][T16448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1873.783971][T16448] overlayfs: upper fs needs to support d_type. [ 1874.075359][T13101] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /112/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1874.366143][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1874.544411][T16469] loop3: detected capacity change from 0 to 2048 [ 1874.597104][T16469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1874.859568][ T597] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.177101][ T597] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.292989][ T597] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.396756][ T6516] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1875.423322][T19391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1875.453555][T19391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1875.454728][T19391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1875.455318][T19391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1875.465588][T19391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1875.570663][ T597] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.575701][ T6516] usb 4-1: New USB device found: idVendor=2040, idProduct=2400, bcdDevice=0.00 [ 1875.597196][ T6516] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.597230][ T6516] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1875.597245][ T6516] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1875.597273][ T6516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.656906][ T6516] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1875.871784][ T2371] pvrusb2: Invalid write control endpoint [ 1875.941002][ T2371] usb 4-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 1875.941021][ T2371] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 1876.098975][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1876.129429][ T6665] usb 4-1: USB disconnect, device number 116 [ 1876.233356][ T597] bridge_slave_1: left allmulticast mode [ 1876.233373][ T597] bridge_slave_1: left promiscuous mode [ 1876.233535][ T597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.259922][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1876.267106][ T10] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 1876.282612][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.282632][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.282647][ T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1876.282664][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1876.282688][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.342640][ T10] usb 2-1: config 0 descriptor?? [ 1876.359509][ T597] bridge_slave_0: left allmulticast mode [ 1876.359528][ T597] bridge_slave_0: left promiscuous mode [ 1876.359665][ T597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.473633][T16528] ima: policy update failed [ 1876.473926][ T33] audit: type=1802 audit(2000000009.924:1804): pid=16528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.31277" res=0 errno=-22 [ 1877.055085][ T6516] usb 2-1: USB disconnect, device number 19 [ 1877.209916][ T597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1877.227737][ T597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1877.230909][ T597] bond0 (unregistering): Released all slaves [ 1877.528660][ T750] IPVS: starting estimator thread 0... [ 1877.617353][T16578] IPVS: using max 48 ests per chain, 115200 per kthread [ 1877.714598][T23859] Bluetooth: hci2: command tx timeout [ 1877.888172][T16589] loop3: detected capacity change from 0 to 256 [ 1878.017948][T16593] sd 0:0:1:0: PR command failed: 1026 [ 1878.017980][T16593] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1878.018006][T16593] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1878.383011][T16489] lo speed is unknown, defaulting to 1000 [ 1878.425638][T16489] rxe_eth0 speed is unknown, defaulting to 1000 [ 1878.724518][ T5298] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1878.859433][ T597] hsr_slave_0: left promiscuous mode [ 1878.879148][ T597] hsr_slave_1: left promiscuous mode [ 1878.880199][ T597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1878.880214][ T597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.924918][ T597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1878.924933][ T597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.971413][ T597] veth1_macvtap: left promiscuous mode [ 1878.971436][ T597] veth0_macvtap: left promiscuous mode [ 1878.971495][ T597] veth1_vlan: left promiscuous mode [ 1878.971533][ T597] veth0_vlan: left promiscuous mode [ 1879.344927][T16630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.31298'. [ 1879.729172][ T597] team0 (unregistering): Port device team_slave_1 removed [ 1879.775723][ T597] team0 (unregistering): Port device team_slave_0 removed [ 1879.936915][T23859] Bluetooth: hci2: command tx timeout [ 1882.160624][T23859] Bluetooth: hci2: command tx timeout [ 1883.298934][T16626] : renamed from bond0 (while UP) [ 1883.444904][T16659] ima: Unable to open file: /eas (-2) [ 1883.448057][T16656] ima: policy update failed [ 1883.448309][ T33] audit: type=1802 audit(2000000016.444:1805): pid=16656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.31309" res=0 errno=-22 [ 1884.384561][T23859] Bluetooth: hci2: command tx timeout [ 1884.561806][T16762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.31318'. [ 1884.633991][T16764] kvm_intel: kvm [16757]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x8001 [ 1884.818683][T16489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.829655][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.829745][T16489] bridge_slave_0: entered allmulticast mode [ 1884.857655][T16489] bridge_slave_0: entered promiscuous mode [ 1884.870446][T16489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.870510][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.870589][T16489] bridge_slave_1: entered allmulticast mode [ 1884.905316][T16489] bridge_slave_1: entered promiscuous mode [ 1885.052143][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1885.077336][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1885.211980][T16489] team0: Port device team_slave_0 added [ 1885.234064][T16489] team0: Port device team_slave_1 added [ 1885.374842][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1885.374854][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1885.374871][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.442890][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.442901][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1885.442918][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1885.747657][T16489] hsr_slave_0: entered promiscuous mode [ 1885.762559][T16489] hsr_slave_1: entered promiscuous mode [ 1885.775438][T16489] debugfs: 'hsr0' already exists in 'hsr' [ 1885.775452][T16489] Cannot create hsr debugfs directory [ 1885.776562][ T5298] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1886.598920][T17003] netlink: 144 bytes leftover after parsing attributes in process `syz.8.31339'. [ 1886.598940][T17003] netlink: 144 bytes leftover after parsing attributes in process `syz.8.31339'. [ 1887.161805][T17016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1887.511848][T17033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1887.511864][T17033] block device autoloading is deprecated and will be removed. [ 1888.018253][ T5298] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1888.545782][T17079] ima: policy update failed [ 1888.545949][ T33] audit: type=1802 audit(2000000021.214:1806): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.31355" res=0 errno=-22 [ 1889.121270][T16489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1889.140009][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1889.155021][T16489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1889.175701][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1889.176251][T16489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1889.207092][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1889.210485][T16489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1889.242780][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1889.535248][T16489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1889.583426][T16489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1889.605998][ T597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.606077][ T597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.641633][T26354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.641698][T26354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1890.038471][ T5298] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1891.220106][T23859] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1891.224219][T23859] Bluetooth: unknown link type 128 [ 1891.412629][T16489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.597896][T16489] veth0_vlan: entered promiscuous mode [ 1891.630084][T16489] veth1_vlan: entered promiscuous mode [ 1891.738166][T16489] veth0_macvtap: entered promiscuous mode [ 1891.769028][T16489] veth1_macvtap: entered promiscuous mode [ 1891.844209][T16489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1891.890737][T16489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1891.977636][T27820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.021643][T26354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.035364][T27820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.036334][T27820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.501119][ T1406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.501135][ T1406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.653577][T17221] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 1892.718039][T26354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.718070][T26354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.839856][T17230] rnbd_client L127: Can't parse path ip:1: -22 [ 1893.202846][T17242] input: syz0 as /devices/virtual/input/input182 [ 1893.450257][T19391] Bluetooth: hci5: command 0x0406 tx timeout [ 1893.657176][T17266] loop8: detected capacity change from 0 to 64 [ 1894.302978][T17291] sctp: [Deprecated]: syz.0.31406 (pid 17291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1894.302978][T17291] Use struct sctp_sack_info instead [ 1894.654838][T17304] loop8: detected capacity change from 0 to 1024 [ 1894.677207][T17304] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1894.677225][T17304] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1894.677273][T17304] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1894.717370][T17304] EXT4-fs error (device loop8): ext4_get_journal_inode:5971: inode #5: comm syz.8.31412: unexpected bad inode w/o EXT4_IGET_BAD [ 1894.717391][T17304] loop8: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1894.717630][T17304] EXT4-fs (loop8): no journal found [ 1894.717641][T17304] EXT4-fs (loop8): can't get journal size [ 1894.721518][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1894.721532][ C0] EXT4-fs (loop8): initial error at time 2000000026: ext4_get_journal_inode:5971: inode 5 [ 1894.721551][ C0] EXT4-fs (loop8): last error at time 2000000026: ext4_get_journal_inode:5971: inode 5 [ 1894.835115][T17304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1894.866062][T17313] loop3: detected capacity change from 0 to 512 [ 1894.933588][T17304] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1341: inode #12: block 16: comm syz.8.31412: path /554/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 1895.152211][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1895.714248][T17344] loop8: detected capacity change from 0 to 4096 [ 1895.811059][T17344] ntfs3(loop8): ino=b, mi_enum_attr [ 1895.811079][T17344] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1895.828751][T17344] ntfs3(loop8): Failed to load $Extend (-22). [ 1895.828766][T17344] ntfs3(loop8): Failed to initialize $Extend. [ 1895.881777][T17355] netlink: 'syz.1.31426': attribute type 10 has an invalid length. [ 1895.881799][T17355] syz_tun: entered promiscuous mode [ 1895.881809][T17355] syz_tun: left allmulticast mode [ 1895.882543][T17355] tipc: Resetting bearer [ 1895.920108][T17355] syz_tun: entered allmulticast mode [ 1895.926147][T17355] tipc: Resetting bearer [ 1895.945706][T17355] tipc: Resetting bearer [ 1896.466233][T17368] input: syz1 as /devices/virtual/input/input183 [ 1896.932755][T17393] loop8: detected capacity change from 0 to 256 [ 1896.981344][T17393] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1896.981624][T17393] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1898.173071][T17438] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1898.684193][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.8.31451'. [ 1898.684210][T17449] netlink: 124 bytes leftover after parsing attributes in process `syz.8.31451'. [ 1898.684224][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.8.31451'. [ 1898.909052][T17460] loop8: detected capacity change from 0 to 512 [ 1898.939873][T17460] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1898.939886][T17460] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1898.977846][T17460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 1898.977923][T17460] System zones: 1-12 [ 1898.984451][T17460] EXT4-fs (loop8): 1 truncate cleaned up [ 1898.985449][T17460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1899.112567][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31456'. [ 1899.140954][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31456'. [ 1899.241674][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1900.084298][T17504] loop8: detected capacity change from 0 to 128 [ 1900.374011][T17511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1901.610820][T17519] loop8: detected capacity change from 0 to 40427 [ 1901.658854][T17519] F2FS-fs (loop8): invalid crc value [ 1901.661357][T30375] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1901.821467][T30375] usb 3-1: Using ep0 maxpacket: 8 [ 1901.824848][T30375] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1901.844774][T30375] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1901.844806][T30375] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1901.844821][T30375] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1901.844836][T30375] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1901.844852][T30375] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.844878][T30375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.094236][T30375] usb 3-1: GET_CAPABILITIES returned 0 [ 1902.094269][T30375] usbtmc 3-1:16.0: can't read capabilities [ 1902.177907][T17519] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1902.281919][T17519] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0 [ 1902.281938][T17519] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1902.281994][T17519] F2FS-fs (loop8): Start checkpoint disabled! [ 1902.360516][T30375] usb 3-1: USB disconnect, device number 66 [ 1902.502725][T17519] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0 [ 1902.514837][T17519] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1902.631172][T17550] loop3: detected capacity change from 0 to 40427 [ 1902.660242][T17550] F2FS-fs (loop3): invalid crc value [ 1902.938495][T17550] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1902.970147][ T750] kworker/u8:5: attempt to access beyond end of device [ 1902.970147][ T750] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1902.970821][ T750] CPU: 0 UID: 0 PID: 750 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.970842][ T750] Tainted: [L]=SOFTLOCKUP [ 1902.970847][ T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1902.970856][ T750] Workqueue: writeback wb_workfn (flush-7:8) [ 1902.970909][ T750] Call Trace: [ 1902.970915][ T750] [ 1902.970922][ T750] dump_stack_lvl+0xe8/0x150 [ 1902.970947][ T750] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1902.970973][ T750] f2fs_write_end_bio+0x118e/0x15d0 [ 1902.971003][ T750] __submit_merged_bio+0x258/0x6a0 [ 1902.971025][ T750] ? rcu_is_watching+0x16/0xb0 [ 1902.971051][ T750] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1902.971075][ T750] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1902.971113][ T750] f2fs_write_data_pages+0x2a13/0x36e0 [ 1902.971155][ T750] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1902.971181][ T750] ? stack_trace_save+0xa9/0x100 [ 1902.971234][ T750] ? __lock_acquire+0x747/0x2de0 [ 1902.971267][ T750] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1902.971283][ T750] do_writepages+0x338/0x560 [ 1902.971300][ T750] ? __lock_acquire+0x747/0x2de0 [ 1902.971320][ T750] ? reacquire_held_locks+0x117/0x1a0 [ 1902.971341][ T750] ? writeback_sb_inodes+0x450/0x1af0 [ 1902.971380][ T750] __writeback_single_inode+0x136/0x1220 [ 1902.971400][ T750] ? do_raw_spin_unlock+0xf5/0x200 [ 1902.971417][ T750] writeback_sb_inodes+0x9de/0x1af0 [ 1902.971433][ T750] ? __lock_acquire+0x747/0x2de0 [ 1902.971467][ T750] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1902.971513][ T750] ? rcu_is_watching+0x16/0xb0 [ 1902.971534][ T750] ? queue_io+0x2d3/0x470 [ 1902.971553][ T750] wb_writeback+0x41c/0xad0 [ 1902.971571][ T750] ? queue_io+0x2d1/0x470 [ 1902.971591][ T750] ? __pfx_wb_writeback+0x10/0x10 [ 1902.971606][ T750] ? do_raw_spin_lock+0x12b/0x2f0 [ 1902.971631][ T750] wb_workfn+0x431/0x10f0 [ 1902.971663][ T750] ? __pfx_wb_workfn+0x10/0x10 [ 1902.971680][ T750] ? trace_hrtimer_start+0x82/0x200 [ 1902.971701][ T750] ? do_raw_spin_lock+0x12b/0x2f0 [ 1902.971721][ T750] ? lock_acquire+0x115/0x350 [ 1902.971745][ T750] ? rcu_is_watching+0x16/0xb0 [ 1902.971767][ T750] ? process_scheduled_works+0x97a/0x1630 [ 1902.971789][ T750] process_scheduled_works+0xc3d/0x1630 [ 1902.971832][ T750] ? __pfx_process_scheduled_works+0x10/0x10 [ 1902.971858][ T750] ? assign_work+0x3cf/0x5d0 [ 1902.971882][ T750] worker_thread+0xa47/0xfb0 [ 1902.971905][ T750] ? __kthread_parkme+0x71/0x1f0 [ 1902.971926][ T750] kthread+0x38b/0x480 [ 1902.971942][ T750] ? __pfx_worker_thread+0x10/0x10 [ 1902.971963][ T750] ? __pfx_kthread+0x10/0x10 [ 1902.971980][ T750] ret_from_fork+0x514/0xb70 [ 1902.971999][ T750] ? __pfx_ret_from_fork+0x10/0x10 [ 1902.972015][ T750] ? __switch_to+0xc78/0x1410 [ 1902.972040][ T750] ? __pfx_kthread+0x10/0x10 [ 1902.972057][ T750] ret_from_fork_asm+0x1a/0x30 [ 1902.972083][ T750] [ 1903.334298][ T750] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1903.398772][T17550] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1903.714244][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1903.849398][ T6956] syz-executor: attempt to access beyond end of device [ 1903.849398][ T6956] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1903.909192][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.909214][ T6956] Tainted: [L]=SOFTLOCKUP [ 1903.909219][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1903.909228][ T6956] Call Trace: [ 1903.909234][ T6956] [ 1903.909240][ T6956] dump_stack_lvl+0xe8/0x150 [ 1903.909267][ T6956] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1903.909295][ T6956] f2fs_write_end_bio+0x118e/0x15d0 [ 1903.909324][ T6956] __submit_merged_bio+0x258/0x6a0 [ 1903.909346][ T6956] ? rcu_is_watching+0x16/0xb0 [ 1903.909372][ T6956] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1903.909396][ T6956] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1903.909434][ T6956] f2fs_write_data_pages+0x2a13/0x36e0 [ 1903.909474][ T6956] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1903.909489][ T6956] ? is_bpf_text_address+0x26/0x2b0 [ 1903.909512][ T6956] ? arch_stack_walk+0xfb/0x150 [ 1903.909550][ T6956] ? add_lock_to_list+0xc7/0x100 [ 1903.909572][ T6956] ? lockdep_unlock+0x5c/0xd0 [ 1903.909593][ T6956] ? __lock_acquire+0x1511/0x2de0 [ 1903.909629][ T6956] ? do_raw_spin_lock+0x12b/0x2f0 [ 1903.909651][ T6956] ? do_raw_spin_unlock+0xf5/0x200 [ 1903.909666][ T6956] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1903.909683][ T6956] do_writepages+0x338/0x560 [ 1903.909706][ T6956] ? do_raw_spin_unlock+0xf5/0x200 [ 1903.909723][ T6956] filemap_fdatawrite+0x1e9/0x2f0 [ 1903.909742][ T6956] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1903.909788][ T6956] ? do_raw_spin_unlock+0xf5/0x200 [ 1903.909805][ T6956] f2fs_sync_dirty_inodes+0x471/0x970 [ 1903.909833][ T6956] f2fs_write_checkpoint+0x867/0x24d0 [ 1903.909875][ T6956] kill_f2fs_super+0x2df/0x700 [ 1903.909897][ T6956] ? rcu_do_enqueue+0x616/0x870 [ 1903.909914][ T6956] ? lockdep_hardirqs_on+0x7b/0x110 [ 1903.909933][ T6956] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1903.909961][ T6956] ? __pfx_call_rcu+0x10/0x10 [ 1903.909978][ T6956] ? shrinker_free+0x2a7/0x3b0 [ 1903.909996][ T6956] deactivate_locked_super+0xbe/0x110 [ 1903.910015][ T6956] cleanup_mnt+0x204/0x2a0 [ 1903.910040][ T6956] task_work_run+0x1d9/0x260 [ 1903.910060][ T6956] ? __pfx_task_work_run+0x10/0x10 [ 1903.910085][ T6956] exit_to_user_mode_loop+0x204/0x770 [ 1903.910104][ T6956] ? rcu_is_watching+0x16/0xb0 [ 1903.910129][ T6956] do_syscall_64+0x328/0x520 [ 1903.910146][ T6956] ? trace_irq_disable+0x3b/0x140 [ 1903.910166][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.910180][ T6956] ? clear_bhb_loop+0x70/0xc0 [ 1903.910198][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.910212][ T6956] RIP: 0033:0x7fec9ffa0797 [ 1903.910225][ T6956] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1903.910238][ T6956] RSP: 002b:00007ffeeced4ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1903.910253][ T6956] RAX: 0000000000000000 RBX: 00007feca0035f93 RCX: 00007fec9ffa0797 [ 1903.910263][ T6956] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeeced4b70 [ 1903.910271][ T6956] RBP: 00007ffeeced4b70 R08: 00007ffeeced5b70 R09: 00000000ffffffff [ 1903.910281][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeeced5c00 [ 1903.910291][ T6956] R13: 00007feca0035f93 R14: 00000000001b56c3 R15: 00007ffeeced5c40 [ 1903.910313][ T6956] [ 1904.283597][ T6956] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1905.763230][T17677] Process accounting resumed [ 1906.159372][T17700] loop8: detected capacity change from 0 to 1024 [ 1906.202008][T17700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1906.258964][ T33] audit: type=1800 audit(2000000037.780:1807): pid=17700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.31517" name="file2" dev="loop8" ino=16 res=0 errno=-22 [ 1906.391092][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1907.224797][T17741] loop8: detected capacity change from 0 to 16 [ 1907.287573][T17741] erofs (device loop8): mounted with root inode @ nid 36. [ 1907.328465][ T33] audit: type=1326 audit(2000000038.781:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.2.31532" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f421739f559 code=0x0 [ 1907.578434][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.31535'. [ 1907.725007][T17731] loop3: detected capacity change from 0 to 32768 [ 1907.786502][T17731] JBD2: Ignoring recovery information on journal [ 1907.863844][T17731] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1908.274357][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31537'. [ 1908.542121][ T6956] ocfs2: Unmounting device (7,3) on (node local) [ 1909.380983][T17818] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1909.466871][T17820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31551'. [ 1909.718242][T17832] loop3: detected capacity change from 0 to 512 [ 1909.744766][T17832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1909.807521][T17832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1909.807590][T17832] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1910.065581][ T6956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.485812][ T750] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 1910.699533][T17818] rtrs_client L2656: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 1910.999698][T17871] netlink: 'syz.1.31566': attribute type 3 has an invalid length. [ 1910.999714][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31566'. [ 1911.215117][ T33] audit: type=1326 audit(2000000042.411:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.256212][ T33] audit: type=1326 audit(2000000042.448:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.256394][ T33] audit: type=1326 audit(2000000042.448:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.322343][ T33] audit: type=1326 audit(2000000042.448:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.322376][ T33] audit: type=1326 audit(2000000042.513:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.322403][ T33] audit: type=1326 audit(2000000042.513:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.417131][ T33] audit: type=1326 audit(2000000042.607:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.417164][ T33] audit: type=1326 audit(2000000042.607:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17876 comm="syz.0.31569" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a919f559 code=0x7ffc0000 [ 1911.515600][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.8.31571'. [ 1912.081627][T17910] device-mapper: table: 248:25: clone: Error opening destination device (-ENOENT) [ 1912.081644][T17910] device-mapper: ioctl: error adding target to table [ 1912.902500][ T11] kernel read not supported for file /13218/attr/sockcreate (pid: 11 comm: kworker/0:1) [ 1913.240734][T17955] xt_hashlimit: size too large, truncated to 1048576 [ 1913.337331][T17958] xt_hashlimit: size too large, truncated to 1048576 [ 1913.400670][T17958] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1913.926111][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31598'. [ 1915.684825][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31620'. [ 1915.720600][T18030] vlan2: entered allmulticast mode [ 1915.721153][T18030] batman_adv: batadv0: Adding interface: vlan2 [ 1915.721162][T18030] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.721181][T18030] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1916.156756][ T6516] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1916.318443][ T6516] usb 9-1: Using ep0 maxpacket: 8 [ 1916.318982][ T6516] usb 9-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1916.319977][ T6516] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1916.319994][ T6516] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1916.320011][ T6516] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1916.320028][ T6516] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1916.320046][ T6516] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1916.321309][ T6516] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 1916.321325][ T6516] usb 9-1: Manufacturer: syz [ 1916.321335][ T6516] usb 9-1: SerialNumber: syz [ 1916.439761][ T6516] usb 9-1: config 0 descriptor?? [ 1916.440679][T18038] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1916.466165][ T6516] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input184 [ 1916.793696][ T11] usb 9-1: USB disconnect, device number 7 [ 1918.908825][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31644'. [ 1919.004887][T18129] loop8: detected capacity change from 0 to 128 [ 1919.025161][T18129] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1919.025183][T18129] hpfs: filesystem error: improperly stopped [ 1919.025193][T18129] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1919.025202][T18129] hpfs: You really don't want any checks? You are crazy... [ 1919.025210][T18129] hpfs: Code page index out of array [ 1919.025215][T18129] hpfs: code page support is disabled [ 1919.025398][T18129] hpfs: hpfs_map_4sectors(): unaligned read [ 1919.025440][T18129] hpfs: hpfs_map_4sectors(): unaligned read [ 1919.025446][T18129] hpfs: filesystem error: unable to find root dir [ 1919.186067][T18129] hpfs: hpfs_map_4sectors(): unaligned read [ 1919.487701][T18145] bonding: b% is being created... [ 1919.637312][T18145] bonding: b% creation failed [ 1919.895251][T18164] netlink: 76 bytes leftover after parsing attributes in process `syz.2.31659'. [ 1920.538859][T18155] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1920.538888][T18155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1920.538901][T18155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1920.933461][T18193] loop8: detected capacity change from 0 to 16 [ 1920.951839][T18193] erofs (device loop8): mounted with root inode @ nid 36. [ 1920.993524][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 1920.993536][ T33] audit: type=1800 audit(2000000051.559:1836): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.31670" name="file1" dev="loop8" ino=86 res=0 errno=-22 [ 1942.076669][ T2371] pvrusb2: request_firmware fatal error with code=-110 [ 1942.076686][ T2371] pvrusb2: Failure uploading firmware1 [ 1942.076714][ T2371] pvrusb2: Device initialization was not successful. [ 1942.076720][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1942.076727][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1942.124228][ T6665] pvrusb2: Device being rendered inoperable [ 2020.885267][T19391] Bluetooth: hci2: command 0x0406 tx timeout [ 2077.499770][ T36] INFO: task syz-executor:5623 blocked in I/O wait for more than 143 seconds. [ 2077.499793][ T36] Tainted: G L syzkaller #0 [ 2077.499802][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.499808][ T36] task:syz-executor state:D stack:21800 pid:5623 tgid:5623 ppid:5622 task_flags:0x440100 flags:0x00080000 [ 2077.499862][ T36] Call Trace: [ 2077.499868][ T36] [ 2077.499878][ T36] __schedule+0x17dd/0x5830 [ 2077.499930][ T36] ? lock_acquire+0x115/0x350 [ 2077.499960][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.499984][ T36] ? schedule+0x90/0x2b0 [ 2077.500003][ T36] schedule+0x164/0x2b0 [ 2077.500022][ T36] io_schedule+0x7f/0xd0 [ 2077.500041][ T36] bit_wait_io+0x13/0x110 [ 2077.500061][ T36] __wait_on_bit+0xac/0x300 [ 2077.500079][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.500100][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.500120][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.500138][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.500160][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.500189][ T36] do_get_write_access+0x658/0x10c0 [ 2077.500309][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.500332][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.500399][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.500422][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2077.500439][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 2077.500464][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.500513][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.500540][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.500556][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.500570][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.500591][ T36] file_update_time_flags+0x399/0x440 [ 2077.500624][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 2077.500650][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2077.500664][ T36] ? __lock_acquire+0x747/0x2de0 [ 2077.500688][ T36] do_page_mkwrite+0x147/0x310 [ 2077.500710][ T36] do_wp_page+0x1a85/0x4b80 [ 2077.500745][ T36] ? __pfx_do_wp_page+0x10/0x10 [ 2077.500766][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 2077.500783][ T36] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2077.500804][ T36] handle_mm_fault+0x19c9/0x2f80 [ 2077.500827][ T36] ? handle_mm_fault+0xee/0x2f80 [ 2077.500847][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 2077.500860][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 2077.500874][ T36] ? __pfx_set_user_sigmask+0x10/0x10 [ 2077.500919][ T36] do_user_addr_fault+0xb35/0x1480 [ 2077.500946][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 2077.500981][ T36] exc_page_fault+0x6a/0xc0 [ 2077.501002][ T36] asm_exc_page_fault+0x26/0x30 [ 2077.501017][ T36] RIP: 0033:0x7fd0a907dad6 [ 2077.501031][ T36] RSP: 002b:00007ffc8f714c10 EFLAGS: 00010246 [ 2077.501043][ T36] RAX: 00007fd0a700c000 RBX: 00005555796d83a0 RCX: 0000000000000000 [ 2077.501054][ T36] RDX: 0000000000000fce RSI: 0000555579705950 RDI: 0000000000000001 [ 2077.501063][ T36] RBP: 00007ffc8f715110 R08: 0000555579705af8 R09: 00000000000000a2 [ 2077.501073][ T36] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc8f714f50 [ 2077.501082][ T36] R13: 00007ffc8f714d40 R14: 585858582e7a7973 R15: 00007ffc8f714c90 [ 2077.501106][ T36] [ 2077.501164][ T36] INFO: task syz.2.31672:18202 blocked in I/O wait for more than 143 seconds. [ 2077.501178][ T36] Tainted: G L syzkaller #0 [ 2077.501185][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.501192][ T36] task:syz.2.31672 state:D stack:25608 pid:18202 tgid:18202 ppid:16489 task_flags:0x440040 flags:0x00080002 [ 2077.501234][ T36] Call Trace: [ 2077.501238][ T36] [ 2077.501246][ T36] __schedule+0x17dd/0x5830 [ 2077.501273][ T36] ? __lock_acquire+0x747/0x2de0 [ 2077.501561][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.501589][ T36] ? schedule+0x90/0x2b0 [ 2077.501616][ T36] schedule+0x164/0x2b0 [ 2077.501636][ T36] io_schedule+0x7f/0xd0 [ 2077.501656][ T36] bit_wait_io+0x13/0x110 [ 2077.501678][ T36] __wait_on_bit+0xac/0x300 [ 2077.501697][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.501719][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.501741][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.501761][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.501783][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.501825][ T36] do_get_write_access+0x658/0x10c0 [ 2077.501857][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.501879][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.501907][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.501930][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2077.501947][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 2077.501971][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.502001][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.502042][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.502058][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.502072][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.502091][ T36] file_update_time_flags+0x399/0x440 [ 2077.502116][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 2077.502138][ T36] ? __pfx_filemap_fault+0x10/0x10 [ 2077.502163][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2077.502186][ T36] do_page_mkwrite+0x147/0x310 [ 2077.502207][ T36] do_pte_missing+0x70f/0x3570 [ 2077.502233][ T36] ? handle_mm_fault+0xee/0x2f80 [ 2077.502249][ T36] handle_mm_fault+0x1807/0x2f80 [ 2077.502272][ T36] ? handle_mm_fault+0xee/0x2f80 [ 2077.502292][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 2077.502305][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 2077.502319][ T36] ? __pfx_do_futex+0x10/0x10 [ 2077.502350][ T36] do_user_addr_fault+0xb35/0x1480 [ 2077.502376][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 2077.502396][ T36] exc_page_fault+0x6a/0xc0 [ 2077.502415][ T36] asm_exc_page_fault+0x26/0x30 [ 2077.502429][ T36] RIP: 0033:0x7f4217273ba9 [ 2077.502441][ T36] RSP: 002b:00007ffe2a9d7c80 EFLAGS: 00010202 [ 2077.502454][ T36] RAX: 0000001b32d22000 RBX: ffffffff8c01314f RCX: 0000001b32d21ff8 [ 2077.502464][ T36] RDX: 0000001b3272421c RSI: 0000000000000008 RDI: 00007f4218155720 [ 2077.502474][ T36] RBP: 00000000000000a4 R08: 00007f4217610000 R09: 00007f4217612000 [ 2077.502484][ T36] R10: 000000008c013153 R11: 0000000000000002 R12: 00007f4217626038 [ 2077.502494][ T36] R13: 0000000000000333 R14: ffffffff8c01301c R15: 00007f4218155720 [ 2077.502505][ T36] ? widen_string+0x1c/0x2a0 [ 2077.502522][ T36] ? widen_string+0x14f/0x2a0 [ 2077.502545][ T36] [ 2077.502552][ T36] INFO: task syz.0.31673:18203 blocked in I/O wait for more than 143 seconds. [ 2077.502564][ T36] Tainted: G L syzkaller #0 [ 2077.502572][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.502578][ T36] task:syz.0.31673 state:D stack:25608 pid:18203 tgid:18203 ppid:6484 task_flags:0x440040 flags:0x00080002 [ 2077.502624][ T36] Call Trace: [ 2077.502628][ T36] [ 2077.502637][ T36] __schedule+0x17dd/0x5830 [ 2077.502663][ T36] ? lock_acquire+0x115/0x350 [ 2077.502688][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.502712][ T36] ? schedule+0x90/0x2b0 [ 2077.502730][ T36] schedule+0x164/0x2b0 [ 2077.502748][ T36] io_schedule+0x7f/0xd0 [ 2077.502767][ T36] bit_wait_io+0x13/0x110 [ 2077.502790][ T36] __wait_on_bit+0xac/0x300 [ 2077.502808][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.502829][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.502848][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.502866][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.502888][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.502925][ T36] do_get_write_access+0x658/0x10c0 [ 2077.502970][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.502993][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.503021][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.503044][ T36] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2077.503059][ T36] ? jbd2__journal_start+0x145/0x5d0 [ 2077.503105][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.503127][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.503153][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.503168][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.503183][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.503201][ T36] file_update_time_flags+0x399/0x440 [ 2077.503225][ T36] ext4_page_mkwrite+0x21f/0x1470 [ 2077.503247][ T36] ? __pfx_filemap_fault+0x10/0x10 [ 2077.503270][ T36] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2077.503292][ T36] do_page_mkwrite+0x147/0x310 [ 2077.503312][ T36] do_pte_missing+0x70f/0x3570 [ 2077.503337][ T36] ? handle_mm_fault+0xee/0x2f80 [ 2077.503353][ T36] handle_mm_fault+0x1807/0x2f80 [ 2077.503376][ T36] ? handle_mm_fault+0xee/0x2f80 [ 2077.503395][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 2077.503408][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 2077.503431][ T36] ? clockevents_program_event+0x491/0x630 [ 2077.503452][ T36] do_user_addr_fault+0xb35/0x1480 [ 2077.503478][ T36] ? trace_page_fault_user+0x84/0x1e0 [ 2077.503497][ T36] exc_page_fault+0x6a/0xc0 [ 2077.503516][ T36] asm_exc_page_fault+0x26/0x30 [ 2077.503529][ T36] RIP: 0033:0x7fd0a9074332 [ 2077.503541][ T36] RSP: 002b:00007ffc848217f0 EFLAGS: 00010202 [ 2077.503553][ T36] RAX: 0000000000001008 RBX: 00007fd0a9f55720 RCX: 0000000000000000 [ 2077.503562][ T36] RDX: 0000001b31b23000 RSI: 0000000000000008 RDI: 00007fd0a9f55720 [ 2077.503572][ T36] RBP: 0000000000000225 R08: 00007fd0a9410000 R09: 00007fd0a9426038 [ 2077.503581][ T36] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff89d6e09d [ 2077.503591][ T36] R13: 00007fd0a9426038 R14: 00000000000000d4 R15: fffffffffffff000 [ 2077.503609][ T36] ? rtnl_fill_link_af+0x2ed/0x4c0 [ 2077.503671][ T36] [ 2077.503677][ T36] INFO: task syz.1.31674:18205 blocked in I/O wait for more than 143 seconds. [ 2077.503689][ T36] Tainted: G L syzkaller #0 [ 2077.503696][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.503702][ T36] task:syz.1.31674 state:D stack:26936 pid:18205 tgid:18205 ppid:6478 task_flags:0x440040 flags:0x00080002 [ 2077.503746][ T36] Call Trace: [ 2077.503751][ T36] [ 2077.503759][ T36] __schedule+0x17dd/0x5830 [ 2077.503791][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 2077.503809][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.503833][ T36] ? schedule+0x90/0x2b0 [ 2077.503852][ T36] schedule+0x164/0x2b0 [ 2077.503870][ T36] io_schedule+0x7f/0xd0 [ 2077.503889][ T36] bit_wait_io+0x13/0x110 [ 2077.503908][ T36] __wait_on_bit+0xac/0x300 [ 2077.503926][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.503947][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.503967][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.503985][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.504006][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.504035][ T36] do_get_write_access+0x658/0x10c0 [ 2077.504066][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.504089][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.504124][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.504154][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.504189][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.504215][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.504231][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.504245][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.504258][ T36] ? mnt_get_write_access+0x216/0x280 [ 2077.504280][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.504301][ T36] touch_atime+0x568/0x670 [ 2077.504321][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.504345][ T36] ext4_file_mmap_prepare+0x277/0x450 [ 2077.504370][ T36] mmap_region+0xef9/0x2840 [ 2077.504392][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.504417][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.504444][ T36] ? lock_acquire+0x115/0x350 [ 2077.504462][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.504485][ T36] ? __pfx_mmap_region+0x10/0x10 [ 2077.504507][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.504531][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.504552][ T36] ? __page_table_check_zero+0x3c3/0x430 [ 2077.504573][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.504617][ T36] ? lock_acquire+0x115/0x350 [ 2077.504683][ T36] ? mt_find+0x186/0x630 [ 2077.504707][ T36] ? mt_find+0x5ff/0x630 [ 2077.504730][ T36] ? mt_find+0x186/0x630 [ 2077.504750][ T36] ? __pfx_mt_find+0x10/0x10 [ 2077.504776][ T36] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2077.504796][ T36] ? security_mmap_addr+0x71/0x240 [ 2077.504818][ T36] ? shmem_mapping+0xd/0x50 [ 2077.504833][ T36] ? memfd_check_seals_mmap+0xc5/0x220 [ 2077.504852][ T36] do_mmap+0xe0a/0x1300 [ 2077.504880][ T36] ? __pfx_do_mmap+0x10/0x10 [ 2077.504909][ T36] ? vm_mmap_pgoff+0x1ed/0x520 [ 2077.504925][ T36] ? down_write_killable+0x179/0x230 [ 2077.504947][ T36] ? lock_acquire+0x115/0x350 [ 2077.504965][ T36] ? __pfx_down_write_killable+0x10/0x10 [ 2077.504986][ T36] ? apparmor_mmap_file+0x2e7/0x390 [ 2077.505031][ T36] vm_mmap_pgoff+0x27a/0x520 [ 2077.505054][ T36] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2077.505072][ T36] ? __fget_files+0x2a/0x420 [ 2077.505094][ T36] ? __fget_files+0x3a2/0x420 [ 2077.505111][ T36] ? __fget_files+0x2a/0x420 [ 2077.505131][ T36] ksys_mmap_pgoff+0x4dc/0x760 [ 2077.505150][ T36] do_syscall_64+0x166/0x520 [ 2077.505176][ T36] ? trace_irq_disable+0x3b/0x140 [ 2077.505197][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.505211][ T36] ? clear_bhb_loop+0x70/0xc0 [ 2077.505247][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.505262][ T36] RIP: 0033:0x7f6f13d9f2c2 [ 2077.505273][ T36] RSP: 002b:00007ffd37735b18 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2077.505287][ T36] RAX: ffffffffffffffda RBX: 0000001b31664000 RCX: 00007f6f13d9f2c2 [ 2077.505297][ T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31664000 [ 2077.505307][ T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 2077.505316][ T36] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000001967 [ 2077.505325][ T36] R13: 00000000000927c0 R14: 00000000001b9611 R15: 00007ffd37735df0 [ 2077.505347][ T36] [ 2077.505353][ T36] INFO: task syz.3.31676:18208 blocked in I/O wait for more than 143 seconds. [ 2077.505365][ T36] Tainted: G L syzkaller #0 [ 2077.505373][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.505379][ T36] task:syz.3.31676 state:D stack:26936 pid:18208 tgid:18208 ppid:6956 task_flags:0x440040 flags:0x00080002 [ 2077.505421][ T36] Call Trace: [ 2077.505425][ T36] [ 2077.505434][ T36] __schedule+0x17dd/0x5830 [ 2077.505466][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 2077.505482][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.505507][ T36] ? schedule+0x90/0x2b0 [ 2077.505526][ T36] schedule+0x164/0x2b0 [ 2077.505544][ T36] io_schedule+0x7f/0xd0 [ 2077.505562][ T36] bit_wait_io+0x13/0x110 [ 2077.505582][ T36] __wait_on_bit+0xac/0x300 [ 2077.505605][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.505625][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.505645][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.505663][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.505685][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.505713][ T36] do_get_write_access+0x658/0x10c0 [ 2077.505745][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.505767][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.505794][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.505824][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.505845][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.505871][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.505886][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.505901][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.505914][ T36] ? mnt_get_write_access+0x216/0x280 [ 2077.505936][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.505957][ T36] touch_atime+0x568/0x670 [ 2077.505977][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.506001][ T36] ext4_file_mmap_prepare+0x277/0x450 [ 2077.506026][ T36] mmap_region+0xef9/0x2840 [ 2077.506048][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.506072][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.506099][ T36] ? lock_acquire+0x115/0x350 [ 2077.506117][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.506140][ T36] ? __pfx_mmap_region+0x10/0x10 [ 2077.506163][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.506186][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.506208][ T36] ? __page_table_check_zero+0x3c3/0x430 [ 2077.506228][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.506277][ T36] ? lock_acquire+0x115/0x350 [ 2077.506356][ T36] ? mt_find+0x186/0x630 [ 2077.506381][ T36] ? mt_find+0x5ff/0x630 [ 2077.506404][ T36] ? mt_find+0x186/0x630 [ 2077.506425][ T36] ? __pfx_mt_find+0x10/0x10 [ 2077.506450][ T36] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2077.506470][ T36] ? security_mmap_addr+0x71/0x240 [ 2077.506490][ T36] ? shmem_mapping+0xd/0x50 [ 2077.506504][ T36] ? memfd_check_seals_mmap+0xc5/0x220 [ 2077.506523][ T36] do_mmap+0xe0a/0x1300 [ 2077.506551][ T36] ? __pfx_do_mmap+0x10/0x10 [ 2077.506581][ T36] ? vm_mmap_pgoff+0x1ed/0x520 [ 2077.506601][ T36] ? down_write_killable+0x179/0x230 [ 2077.506622][ T36] ? lock_acquire+0x115/0x350 [ 2077.506640][ T36] ? __pfx_down_write_killable+0x10/0x10 [ 2077.506661][ T36] ? apparmor_mmap_file+0x2e7/0x390 [ 2077.506684][ T36] vm_mmap_pgoff+0x27a/0x520 [ 2077.506707][ T36] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2077.506726][ T36] ? __fget_files+0x2a/0x420 [ 2077.506747][ T36] ? __fget_files+0x3a2/0x420 [ 2077.506765][ T36] ? __fget_files+0x2a/0x420 [ 2077.506786][ T36] ksys_mmap_pgoff+0x4dc/0x760 [ 2077.506804][ T36] do_syscall_64+0x166/0x520 [ 2077.506822][ T36] ? trace_irq_disable+0x3b/0x140 [ 2077.506841][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.506856][ T36] ? clear_bhb_loop+0x70/0xc0 [ 2077.506873][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.506887][ T36] RIP: 0033:0x7fec9ff9f2c2 [ 2077.506899][ T36] RSP: 002b:00007ffeeced5968 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2077.506913][ T36] RAX: ffffffffffffffda RBX: 0000001b2ee64000 RCX: 00007fec9ff9f2c2 [ 2077.506923][ T36] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2ee64000 [ 2077.506933][ T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 2077.506942][ T36] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000244 [ 2077.506951][ T36] R13: 00000000000927c0 R14: 00000000001b95c4 R15: 00007ffeeced5c40 [ 2077.506973][ T36] [ 2077.506979][ T36] INFO: task syz.8.31675:18209 blocked in I/O wait for more than 143 seconds. [ 2077.506991][ T36] Tainted: G L syzkaller #0 [ 2077.506999][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2077.507005][ T36] task:syz.8.31675 state:D stack:26408 pid:18209 tgid:18209 ppid:7680 task_flags:0x440040 flags:0x00080002 [ 2077.507046][ T36] Call Trace: [ 2077.507051][ T36] [ 2077.507059][ T36] __schedule+0x17dd/0x5830 [ 2077.507091][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 2077.507108][ T36] ? __pfx___schedule+0x10/0x10 [ 2077.507132][ T36] ? schedule+0x90/0x2b0 [ 2077.507151][ T36] schedule+0x164/0x2b0 [ 2077.507169][ T36] io_schedule+0x7f/0xd0 [ 2077.507187][ T36] bit_wait_io+0x13/0x110 [ 2077.507207][ T36] __wait_on_bit+0xac/0x300 [ 2077.507225][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.507246][ T36] out_of_line_wait_on_bit+0x13b/0x190 [ 2077.507265][ T36] ? __pfx_bit_wait_io+0x10/0x10 [ 2077.507284][ T36] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2077.507314][ T36] ? __pfx_wake_bit_function+0x10/0x10 [ 2077.507343][ T36] do_get_write_access+0x658/0x10c0 [ 2077.507391][ T36] jbd2_journal_get_write_access+0x1d7/0x230 [ 2077.507415][ T36] __ext4_journal_get_write_access+0xec/0x620 [ 2077.507442][ T36] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2077.507472][ T36] ext4_reserve_inode_write+0x294/0x360 [ 2077.507493][ T36] __ext4_mark_inode_dirty+0x141/0x7e0 [ 2077.507519][ T36] ext4_dirty_inode+0xd0/0x110 [ 2077.507534][ T36] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2077.507549][ T36] __mark_inode_dirty+0x3a8/0x13b0 [ 2077.507562][ T36] ? mnt_get_write_access+0x216/0x280 [ 2077.507584][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.507610][ T36] touch_atime+0x568/0x670 [ 2077.507629][ T36] ? ext4_file_mmap_prepare+0x277/0x450 [ 2077.507654][ T36] ext4_file_mmap_prepare+0x277/0x450 [ 2077.507678][ T36] mmap_region+0xef9/0x2840 [ 2077.507699][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.507724][ T36] ? __update_page_owner_handle+0x5a/0x580 [ 2077.507750][ T36] ? lock_acquire+0x115/0x350 [ 2077.507769][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.507792][ T36] ? __pfx_mmap_region+0x10/0x10 [ 2077.507814][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.507838][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.507859][ T36] ? __page_table_check_zero+0x3c3/0x430 [ 2077.507880][ T36] ? __page_table_check_zero+0x6c/0x430 [ 2077.507920][ T36] ? lock_acquire+0x115/0x350 [ 2077.507985][ T36] ? mt_find+0x186/0x630 [ 2077.508009][ T36] ? mt_find+0x5ff/0x630 [ 2077.508032][ T36] ? mt_find+0x186/0x630 [ 2077.508053][ T36] ? __pfx_mt_find+0x10/0x10 [ 2077.508079][ T36] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2077.508099][ T36] ? security_mmap_addr+0x71/0x240 [ 2077.508118][ T36] ? shmem_mapping+0xd/0x50 [ 2077.508133][ T36] ? memfd_check_seals_mmap+0xc5/0x220 [ 2077.508152][ T36] do_mmap+0xe0a/0x1300 [ 2077.508180][ T36] ? __pfx_do_mmap+0x10/0x10 [ 2077.508210][ T36] ? vm_mmap_pgoff+0x1ed/0x520 [ 2077.508226][ T36] ? down_write_killable+0x179/0x230 [ 2077.508247][ T36] ? lock_acquire+0x115/0x350 [ 2077.508265][ T36] ? __pfx_down_write_killable+0x10/0x10 [ 2077.508286][ T36] ? apparmor_mmap_file+0x2e7/0x390 [ 2077.508309][ T36] vm_mmap_pgoff+0x27a/0x520 [ 2077.508332][ T36] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2077.508351][ T36] ? __fget_files+0x2a/0x420 [ 2077.508380][ T36] ? __fget_files+0x3a2/0x420 [ 2077.508397][ T36] ? __fget_files+0x2a/0x420 [ 2077.508418][ T36] ksys_mmap_pgoff+0x4dc/0x760 [ 2077.508453][ T36] do_syscall_64+0x166/0x520 [ 2077.508472][ T36] ? trace_irq_disable+0x3b/0x140 [ 2077.508492][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.508506][ T36] ? clear_bhb_loop+0x70/0xc0 [ 2077.508524][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.508538][ T36] RIP: 0033:0x7f671e79f2c2 [ 2077.508549][ T36] RSP: 002b:00007ffcfc49ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2077.508562][ T36] RAX: ffffffffffffffda RBX: 0000001b34164000 RCX: 00007f671e79f2c2 [ 2077.508572][ T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34164000 [ 2077.508581][ T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 2077.508591][ T36] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000261 [ 2077.508603][ T36] R13: 00000000000927c0 R14: 00000000001b960a R15: 00007ffcfc49af40 [ 2077.508625][ T36] [ 2077.508637][ T36] [ 2077.508637][ T36] Showing all locks held in the system: [ 2077.508646][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 2077.508697][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2077.508773][ T36] locks held by getty/5394: 2, on CPU#0: [ 2077.508783][ T36] #0: ffff8880371d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2077.508820][ T36] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2077.508853][ T36] locks held by syz-executor/5623: 3, on CPU#0: [ 2077.508862][ T36] #0: ffff88802a46d808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2077.508893][ T36] #1: ffff8880371f6570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 2077.508926][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.508967][ T36] locks held by kworker/u8:5/750: 4, on CPU#0: [ 2077.508976][ T36] #0: ffff8880216d7148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2077.509016][ T36] #1: ffffc90006097c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2077.509055][ T36] #2: ffff8880371f6100 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 2077.509094][ T36] #3: ffff88803703ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 2077.509143][ T36] locks held by syz.2.31672/18202: 3, on CPU#0: [ 2077.509152][ T36] #0: ffff88804608c308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2077.509183][ T36] #1: ffff8880371f6570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 2077.509215][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.509249][ T36] locks held by syz.0.31673/18203: 3, on CPU#0: [ 2077.509259][ T36] #0: ffff8880460946c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2077.509289][ T36] #1: ffff8880371f6570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470 [ 2077.509322][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.509357][ T36] locks held by syz.1.31674/18205: 3, on CPU#0: [ 2077.509366][ T36] #0: ffff88807ed5a800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 2077.509400][ T36] #1: ffff8880371f6478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 2077.509449][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.509484][ T36] locks held by syz.3.31676/18208: 3, on CPU#0: [ 2077.509494][ T36] #0: ffff88807ed58340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 2077.576326][ T36] #1: ffff8880371f6478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 2077.576369][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.576405][ T36] locks held by syz.8.31675/18209: 3, on CPU#0: [ 2077.576415][ T36] #0: ffff88807ed58f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 2077.576449][ T36] #1: ffff8880371f6478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 2077.576489][ T36] #2: ffff8880371f4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2077.576525][ T36] [ 2077.576529][ T36] ============================================= [ 2077.576529][ T36] [ 2077.576536][ T36] NMI backtrace for cpu 0 [ 2077.576547][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2077.576565][ T36] Tainted: [L]=SOFTLOCKUP [ 2077.576570][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2077.576578][ T36] Call Trace: [ 2077.576584][ T36] [ 2077.576596][ T36] dump_stack_lvl+0xe8/0x150 [ 2077.576620][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 2077.576637][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2077.576655][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2077.576673][ T36] sys_info+0x135/0x170 [ 2077.576686][ T36] watchdog+0x1073/0x10f0 [ 2077.576711][ T36] ? watchdog+0x209/0x10f0 [ 2077.576735][ T36] kthread+0x38b/0x480 [ 2077.576752][ T36] ? __pfx_watchdog+0x10/0x10 [ 2077.576769][ T36] ? __pfx_kthread+0x10/0x10 [ 2077.576786][ T36] ret_from_fork+0x514/0xb70 [ 2077.576808][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 2077.576824][ T36] ? __switch_to+0xc78/0x1410 [ 2077.576848][ T36] ? __pfx_kthread+0x10/0x10 [ 2077.576865][ T36] ret_from_fork_asm+0x1a/0x30 [ 2077.576890][ T36] [ 2077.576922][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 2080.130149][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2080.140814][ T36] Tainted: [L]=SOFTLOCKUP [ 2080.145128][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2080.155172][ T36] Call Trace: [ 2080.158456][ T36] [ 2080.161382][ T36] vpanic+0x26f/0x710 [ 2080.165358][ T36] panic+0xc5/0xd0 [ 2080.169092][ T36] ? __pfx_panic+0x10/0x10 [ 2080.173499][ T36] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 2080.178604][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 2080.184749][ T36] watchdog+0x10e7/0x10f0 [ 2080.189094][ T36] ? watchdog+0x209/0x10f0 [ 2080.193511][ T36] kthread+0x38b/0x480 [ 2080.197573][ T36] ? __pfx_watchdog+0x10/0x10 [ 2080.202243][ T36] ? __pfx_kthread+0x10/0x10 [ 2080.206823][ T36] ret_from_fork+0x514/0xb70 [ 2080.211407][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 2080.216508][ T36] ? __switch_to+0xc78/0x1410 [ 2080.221187][ T36] ? __pfx_kthread+0x10/0x10 [ 2080.225780][ T36] ret_from_fork_asm+0x1a/0x30 [ 2080.230555][ T36] [ 2080.233625][ T36] Kernel Offset: disabled [ 2080.237943][ T36] Rebooting in 86400 seconds..