last executing test programs: 2m15.038021823s ago: executing program 0 (id=97): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4114, 0x1012}], 0x1}, 0x406) 2m14.076268193s ago: executing program 0 (id=105): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 2m13.920246939s ago: executing program 0 (id=106): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xd, 0x7, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 2m13.786593588s ago: executing program 0 (id=109): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000380)={[{@errors_remount}, {}, {}, {}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@namecase}, {@errors_remount}]}, 0x3, 0x1534, &(0x7f0000000cc0)="$eJzs3AucTVX7OPDnWWvtMSSdJtdhrfVsTnJZJEkuSXJJktQrSW4JSZO8kpAYcksakpBchuQyhOQWk8b9fr8kJMk7SZJbbsn6fybmr97q/9568/v/5vl+Pvsza83az9rPPs+cffbe55z5pvOQmo1qVWtARPAfwUs/EgEgFgAGAMB1ABAAQLm4cnEZ49klJv5nG2F/rIdTrnYG7Gri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs87QC1/OSdRe+/5+V8ev//yLppcZ8ubZUni4AMf9sCNf//3/4H8Ry/f/XCv6Zlbj+WRvXP6uKvdoJsP8B+PmfFWT73RGuf9bG9WcsK/v5veBYuPr3o//sBSL/zfdAfM9Lj/LV38/f3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xPcNZfoQAgs32182KMMcYYY4wxxtgfx2e72hkwxhhjjDHGGGPsvw9BgAQFAcRANoiF7JADBEBM5vj1EAc3QG7IA3khH+SHAhAPBaEQaDBggSCEwlAEonAjFIWboBgUhxJQEhyUgtJwM5SBW6As3Arl4DYoD7dDBagIlaAy3AFV4E6oCndBNbgbqkMNqAm14B6oDfdCHbgP6sL9UA8egPrwIDwEf4EG8DA0hEegETwKjeExaAJNoRk0hxb/VvyL0B1egh7QExKhF/SGl6EP9IV+0B8GwCswEF6FQfAaJMFgGAKvw1B4A4bBmzAcRsBIeAtGwdswGsbAWBgHyTAeJsA7MBHehUkwGabAVEiBaTAd3oMZMBNmwfswGz6AOTAX5qmMx/NDWAiLIBU+gsXwMaTBElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ3wCeyCT2E37IG98Bnsg8//xfgzfxffBQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA5zY27Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oJlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78F7sBfWwTpYF+tiPayXeXsKG2ADbIgNsRE2wsbYGJtgE2yGzbAFtsCW2BJbYStsg22wLbbFdtgOEzAB22N77IAdsCN2xE7YCTtjZ+yCXbFr+ovZAF/Cl7AnVhe9sDf2xj6YlK0f9sf++AoOxFfxVXwNk3AwDsHX8XV8A4fhaRx+cQSOxJFYRbyNo3EMkhiHyZiME3ACTsSJOAkn42Sciik4DafjdJyBM3Emvo+z8QP8AOfiXJyPC3ABLsRFmIqpuBjPYBouwaW4DJfjClyOq3A1rsK1uA7X4gbcgJtwE27BLbgNt+EO3IGfoALAT3EP7sEk3If7cD/uxwN4AA/iQUzHdDyEh/AwHsYjeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4fPxXDT8pviYJRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKKvCK/yC/iRbwoJAoJI4wgEeYBABEVUVFUFBXFRDFRQpQQTjhRWpQWZUQZUVaUFeXEbaK8uF1UEBVFa1dZVBZVRBtXVdwlqolqorqoIWqKWqKWqC1qizqijqgr6op6op6oLx4UD4le2A8fFhmVaSQGY2MxBJuIpkJePkK1FMOwlWgt2ognxQgcju1ES5cgnhHtxWjsIP4qxuBzopMYh53FC6KL6Cq6iRdFd9HK9RA9xSTsJXqLqdhH9BX9RH8xA2uI93F29priNZEkBosh4nUxH98Qw8SbYrgYIUaKt8Qo8bYYLcaIsWKcSBbjxQTxjpgo3hWTxGQxRUwVKWKamC7eEzPETDFLvC9miw/EHDFXzBPzxQLxoVgoFolU8ZFYLD4WaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Ru8SnYrfYI/aKz8Q+8bnYL74QB8SX4qD4m0gXX4lD4mtxWHwjjohvxVHxnTgmjosT4qQ4Jb4Xp8UZcVacE+fFD+KC+FFcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW+aReWU+mV8WkPGyoCwktTTSSpKhLCyLyKi8URaVN8lisrgsIUtKJ0vJ0vJmWUbeIsvKW2U5eZssL2+XFWRFWUlWlnfIKvJOCZFL26gua8iaspa8RybCvbKOvE/WlffLevIBWV8+mHGMyiAbykdkI/mobCwfk01kU9lMNpct5OOypXxCtpKtZRv5pGwrn5Lt5NMyQT4j20t/+U/kOdlJPi87yxdkF9lVdpM/yovSyx6yp4ReIHvLl2Uf2Vf2k/3lAPmKHChflYPkazJJDpZD5OtyqHxDDpNvyuFyhBwp35Kj5NtytBwjx8pxMlmOlxPkO3KifFdOkpPlFDlVpshpst/lmWZJ+Q/j3/mN+EE/bX2T3Cy3yK1ym9wud8id8hO5S+6Su+VuuVfulfvkPrlf7pcH5AF5UB6U6TJdHpKH5GF5WB6RR+RReVQek8flOXlSnpLfy9PyjDwjz8nz8ry8cPkxAIVKKKmUClSMyqZiVXaVQ12jcqprVS51nYqo61WcukHlVnlUXpVP5VcFVLwqqAoprYyyilSoCqsiKqpuxMt/MKqEKqmcKqVKq5v/lXhVVN2kiqniv4jPzC/xd/JroVqolqqlaqVaqTaqjWqr2qp2qp1KUAmqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJVouqtXlZ9VF/VT/VXA9QrImMfBqlBKkklqSFqiBqqhqphapgaroarkWqkGqVGqdFqtBqrxqpklawmqAlKqolqkpqkpqgpKkWlqOlqupqhZqhZapaarWarOWqOmqfmqQVqgVqoFqpUlaoWq8UqTS1RS9QytUytUCvUKrVKrVFr1Dq1Tm1QG1Sa2qw2q61qq9qutqudaqfapXap3Wq32qv2qn1qn9qv9qsD6oA6qA6qdJWuDqlD6rA6rI6oI+qoOqqOqWPqhDqhTqlT6rQ6rc6qs+q8Oq8uqAvqorqYcdoXiEAEKlBBTBATxAaxQY4gR5AzyBnkCnIFkSASxAVxQe4gT5A3yBfkDwoE8UHBoFCgAxPYQFwuejS4MSga3BQUC4oHJYKSgQtKBaWDm4MywS1B2eDWoFxwW1A+uD2oEFQMKgWVgzuCKsGdQdXgrqBacHdQPagR1AxqBfcEtYN7gzrBfUHd4P6gXvBAUD94MHgo+EvQIHg4aBg8EjQKHg0aB48FTYKmQbOgedDi35gf4ffm9/50vidcD91TJ+peurd+WffRfXU/3V8P0K/ogfpVPUi/ppP0YD1Ev66H6jf0MP2mHq5H6JH6LT1Kv61H6zF6rB6nk/V4PUG/oyfqd/UkPVlP0VN1ip6mp+v39Aw9U8/S7+vZ+gM9R8/V8/R8vUB/qBfqRTpVf6QX6491ml6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq73qF36k/0Lv2p3q336L36M71Pf6736y/0Af2lPqj/ptP1V/qQ/lof1t/oI/pbfVR/p4/p47qsPqlP6e/1aX1Gn9Xn9Hn9g76gf9QXtc84uc94eTfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+Q1eU1+k9/Em3hTyBQyGciQKWwKm6iJmqKmqClmipkSpoRxxpnSprQpY8qYsqasKWfKmfKmvKlgKphKppK5w9xh7jR3mrvMXeZuc7epYWqYWqaWqW1qmzqmjqlr6pp6pp6pb+qbh8xDpoFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRGSeq5m0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNKkm1Sw2i02aSTNLzVKz3Cw3K81Ks9qsNmvNWrMe1puNZqPZbDabrWar2W62m51mp9lldpndZrfZa/aafWaf2W/2mwPmgDloDpp0k24OmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJd/n10ptYm93msNfYnPZam8teZ/++n98WsPG2oC1ktc1r8/2ib6y1xWxxW8KWtM6WsqXtzb/qV7AVbSVb2d5hq9g7bdVf9Wvbe20de5+ta++3tew9v+jXsw/Y+vZR+xAigG1qG9rmtpF91Da2j9kmtqltZpvbtvYp284+bRPsM7a9ffZX/YV2kV1t19i1dp3dbffYs/acPWy/seftD7aH7WkH2FfsQPuqHWRfs0l28K/6I+1bdpR92462Y+xYO+5X/Sl2qk2x0+x0+56dYWf+qr/Afmhn21Q7x8618+z8n/oZOaXaj+xi+7FNswEstcvscrvCrrSr/m+uy+wGu9Fusrvsp3ar3Wa32x12Z+aJsN1j99rP7D77uT1kv7YH7Jf2oD1i0+1XP/Uz9u+I/dYetd/ZY/a4PWFP2lP2e5UZnbHvJ+2P9qL1FggJSJKigGIoG8VSdspB11BOupZy0XUUoespjm6g3JSH8lI+yk8FKJ4KUiHSZMgSUUiFqQhF6UbKTK8ElSRHpag03Uxl6BYqS7dSObqNytPtVIEqUiWqTHdQFbqTqtJdVI3upupUg2pSLbqHatO9VIfuo7p0P9WjB6g+PUgP0V+oAT1MDekRakSPUmN6jJpQU2pGzakFPU4t6QlqRa2pDT1JbekpakdPUwI9Q+3pWepAf6WO9Bx1ouepM71AXagrdaMXqTu9RD2oJyVSL+pNL1Mf6kv9qD8NoFdoIL1Kg+g1SqLBNIRep6H0Bg2jN2k4jaCR9BaNordpNI2hsTSOkmk8TaB3aCK9S5NoMk2hqZRC02g6vUczaCbNovdpNn1Ac2guzaP5tIA+pIW0iFLpI1pMH1MaLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDtpJn9Au+pR20x7aS5/RPvqc9tMXdIC+pIP0N0qnr+gQfU2H6Rs6Qt/6nvQdHaPjdIJO0in6nk7TGTpL5+g8/UAX6Ee6SJ4gxFCEMlRhEMaE2cLYMHuYI7wmzBleG+YKrwsj4fVhXHhDmDvME+YN84X5wwJhfFgwLBTq0IQ2pDAMC4dFwmh4Y1g0vCksFhYPS4QlQxeWCkuHN4dlwlvCsuGtYbnwtrB8eHtYIawYPnp/5fCOsEp4Z1g1vCusFt4dVg9rhDXDWuE9Ye3w3rBOeF9YN7w/LBs+ENYPHwwfCv8SNggfDhuGj4SNwkfDxuFjYZOwadgsbB62CB8PW4ZPhK3C1mGb8JqwbfhU2C58OkwInwnbh8/+NP7AoszxJ381nhj2CnuHL4cvh97fJ+dF50cXRD+MLowuiqZGP4oujn4cTYsuiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbop6XysbOHTCSadc4GJcNhfrsrsc7hqX013rcrnrXMRd7+LcDS63y+Pyunwuvyvg4l1BV8hpZ5x15EJX2BVxUXejK+pucsVccVfClXTOlXKlXXPXwrVwLd0TrpVr7dq4J92T7in3lHvaPe2ece3ds66D+6vr6J5zndzz7nn3guviurpu7kXX3Y3Pdek5meh6u96uj+vj+rl+boAb4Aa6gW6QG+SSXJIb4oa4oW6oG+aGueFuuBvpRrpRbpQb7Ua7sW6sS3bJboKb4Ca6iW6Sm+SmuCkuxaW46W66m+FmuCozL21ljpvj5rl5boFb4Ba6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddmtTtc/vdfnfAHXAH3d9cuvvKHXJfu8PuG3fEfeuOuu/cMXfcnXAn3Sn3vTvtzriz7pw7735wF9yP7qLzLjkyPjIh8k5kYuTdyKTI5MiUyNRISmRaZHrkvciMyMzIrMj7kdmRDyJzInMj8yLzIwsiH0YWRhZFUiMfRRZHPo6kRZZElkaWRZZHVkS8L7g19IV9ER/1N/qi/iZfzBf3JXxJ73wpX9rf7MtcyjvN+9t8eX+7r+Ar+kr+Md/EN/XNfHPfwj/uW/onfCvf2rfxT/q2/infzj/tE/wzvr1/1nfwf/Ud/XO+k3/ed/Yv+C6+q+/mX/Td/Uu+h+/pE30v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf80l+sB/iX/dD/Rt+mH/TD/cj/MiYt/yozEtkGOeT/Xg/wb/jJ/p3/SQ/2U/xU32Kn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hy/wH/oF/pFPtV/5Bf7j32aX5J509iv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/D7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AMXM7+B9pU/5L/2h/03/oj/1h/13/lj/rg/4U/6U/57f9qf8Wf9OX/e/+Av+B/9Rf7OGmOMMcbYP2X8lab45cil2/m9fiNG/Gzl3gBw7bYC6T8fzzijXJ/3UruviI/N+PlMz84PZy7VqycmJl5eN01CUGQuQOY7QRl++ujB5X7Gek9BArSGMr+Zf1/R9Tz9g/mjtwHk+FlMRkKZ/SXQ5vL8XwBg4m/M//iTIxeWD8/G/T/mnwtQrMiVmOxwpb8E2vx0f6U1lP2d/PO1/Af5Z/8yGaDVz2JywpX+lfxLwxPwLCT8Yk3GGGOMMcYYY+ySvqJSx8zrz8xPfP7W9Xm8uhKTDa70r1x//vb1OWOMMcYYY4wxxq6+57p2e/rxhITWHf/1RtV/K+qfbjSG/9bM3PjNhvcAmb9RAPAfTgiQ0ZB/5l5s+VO2lXT5qfP3Q8vP+QD+Z5Tyj2hc5QMTY4wxxhhj7A935aT/l79XVyshxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsC/oz/p3Y1d5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Gr7PwEAAP//kFH3Jw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m13.131647597s ago: executing program 0 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x0, 0x3a7]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x44}}, 0x0) 2m12.530380317s ago: executing program 0 (id=117): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x180, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0xd, 0x10003, '\x00', [{0x0, 0xd89, 0x0, 0xffffffffffffffff, 0x0, 0xded}, {0xffffffff, 0x6, 0x7fffffffffffffff, 0xa, 0x0, 0xfffffffffffffffe}], ['\x00', '\x00']}) 2m11.835711809s ago: executing program 32 (id=117): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x180, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0xd, 0x10003, '\x00', [{0x0, 0xd89, 0x0, 0xffffffffffffffff, 0x0, 0xded}, {0xffffffff, 0x6, 0x7fffffffffffffff, 0xa, 0x0, 0xfffffffffffffffe}], ['\x00', '\x00']}) 6.100533131s ago: executing program 3 (id=1162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) write(0xca, &(0x7f0000000040)="0300", 0x2) 6.100263048s ago: executing program 5 (id=1163): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) open_tree(0xffffffffffffff9c, 0x0, 0x9801) 5.782982346s ago: executing program 1 (id=1164): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180)=0x7d8, &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={&(0x7f0000000700), 0x0, 0x0, 0x0, 0x5, r0}, 0x38) 5.638366212s ago: executing program 3 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='0\x00', 0x2) 4.992470047s ago: executing program 1 (id=1168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x400455cb, 0x4000000) 4.891566741s ago: executing program 3 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000200)="ea5bdd6d81780e59c0d687175c769b6529e3534adc4907c047f5fbd2680e897e862aacc4b57838", 0x27) 4.63316168s ago: executing program 5 (id=1171): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 4.463299979s ago: executing program 2 (id=1172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000001a00)=0xf2f, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000180)) 4.458274501s ago: executing program 3 (id=1173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 4.292932724s ago: executing program 5 (id=1176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) 4.170379295s ago: executing program 2 (id=1177): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x20, 0x8, 0xa, "4cee730d4aad05bc2608"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="dc40000f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.66394902s ago: executing program 6 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.326914109s ago: executing program 6 (id=1180): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3.202491291s ago: executing program 5 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='A123=1\n', 0x7) 3.022736761s ago: executing program 6 (id=1183): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') fchown(r0, 0x0, 0x0) 2.975030576s ago: executing program 4 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='+bond_slave_0', 0xd) 2.942798174s ago: executing program 5 (id=1185): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2b, 0x0, @local, @local, {[], {{0x0, 0xfffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) unshare(0x60000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 2.780900294s ago: executing program 3 (id=1186): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0x0, 0xbb) 2.714665263s ago: executing program 6 (id=1187): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0) 2.582191937s ago: executing program 4 (id=1188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="94", 0x1}], 0x1}, 0x4c810) 2.509919943s ago: executing program 1 (id=1189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.1614164s ago: executing program 3 (id=1190): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.003618717s ago: executing program 4 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x5}, {0x20, 0x3}}, 0x24, 0x0) 1.883353388s ago: executing program 2 (id=1193): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0xfd}]}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x25, 0x7f}]}, 0x10) 1.736583099s ago: executing program 1 (id=1194): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.402741926s ago: executing program 2 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) 1.262436419s ago: executing program 4 (id=1196): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x186a0, 0x0) 1.262176995s ago: executing program 1 (id=1197): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 987.998469ms ago: executing program 6 (id=1198): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000880)=""/228, 0xe4, 0x1) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 745.269193ms ago: executing program 2 (id=1199): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a91039026d1f3c4da06963c789d130e04d528539f3d3289737f0374c72a964a02447a71aae971602693a96ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) 538.614707ms ago: executing program 6 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e06027c0c"], 0x9) 520.767691ms ago: executing program 4 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/class/nvme/nvme0/rescan_controller\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1', 0x1) 489.965825ms ago: executing program 1 (id=1202): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 474.554801ms ago: executing program 5 (id=1203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 121.69938ms ago: executing program 2 (id=1204): mmap$IORING_OFF_SQES(0x0, 0x8, 0x3000003, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004848, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 4 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000004c0), 0x12) kernel console output (not intermixed with test programs): batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.207990][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.208020][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.210299][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.210314][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.210342][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.330764][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.421108][ T6272] loop2: detected capacity change from 0 to 40427 [ 112.434524][ T6272] F2FS-fs (loop2): build fault injection rate: 14 [ 112.434547][ T6272] F2FS-fs (loop2): build fault injection type: 0x30e4 [ 112.445396][ T6272] F2FS-fs (loop2): invalid crc value [ 112.513685][ T6272] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 112.621327][ T6272] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 112.652460][ T6272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.684794][ T6149] hsr_slave_0: entered promiscuous mode [ 112.692910][ T6149] hsr_slave_1: entered promiscuous mode [ 112.703767][ T6149] debugfs: 'hsr0' already exists in 'hsr' [ 112.703791][ T6149] Cannot create hsr debugfs directory [ 112.877486][ T6319] input: syz0 as /devices/virtual/input/input6 [ 113.209348][ T6333] si4713 0-0063: IRQ not configured. Using timeouts. [ 113.232461][ T6333] si4713 0-0063: Error while sending command 0x01 [ 113.232483][ T6333] si4713 0-0063: Failed to probe device information. [ 113.249816][ T6333] si4713 0-0063: probe with driver si4713 failed with error -5 [ 113.251131][ T6333] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 113.401067][ T6339] loop4: detected capacity change from 0 to 512 [ 113.421973][ T6339] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.421995][ T6339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.438337][ T6339] EXT4-fs (loop4): 1 truncate cleaned up [ 113.447694][ T6339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.640100][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.680796][ T6350]  [ 113.873640][ T6149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.906586][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.910424][ T6149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.934469][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.936390][ T6149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.968291][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.969194][ T6149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.983877][ T52] Bluetooth: hci3: command tx timeout [ 114.000085][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.021369][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.280066][ T6375] i2c i2c-0: delete_device: Extra parameters [ 114.362414][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.449892][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.488165][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.488299][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.502367][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.502499][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.539126][ T6382] loop5: detected capacity change from 0 to 128 [ 114.643471][ T6358] loop2: detected capacity change from 0 to 32768 [ 114.668918][ T6382] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.698539][ T6382] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.741123][ T6358] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.830673][ T6358] (syz.2.181,6358,0):ocfs2_check_dir_entry:315 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds [ 114.931639][ T5617] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.989648][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 115.091647][ T5630] ocfs2: Unmounting device (7,2) on (node local) [ 116.445371][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 116.457318][ T6402] loop3: detected capacity change from 0 to 32768 [ 116.541565][ T6402] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 116.709900][ T6402] XFS (loop3): Ending clean mount [ 116.893599][ T6402] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 116.893664][ T6402] XFS (loop3): Unmount and run xfs_repair [ 116.893678][ T6402] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 116.893698][ T6402] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 116.893716][ T6402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 116.893734][ T6402] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 116.893751][ T6402] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 116.893768][ T6402] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 116.893785][ T6402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.893802][ T6402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.893819][ T6402] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 116.893944][ T6402] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 116.927033][ T6402] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 116.927090][ T6402] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 117.036128][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.084212][ T5764] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.109036][ T5632] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 117.257250][ T5764] usb 5-1: Using ep0 maxpacket: 16 [ 117.260121][ T5764] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 117.268464][ T5764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.268512][ T5764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 117.268552][ T5764] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 117.268616][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.317541][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 117.341856][ T5764] usb 5-1: config 0 descriptor?? [ 117.442066][ T6479] loop2: detected capacity change from 0 to 1024 [ 117.651615][ T6479] hfsplus: bad catalog entry type [ 117.702852][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.225'. [ 117.879341][ T5764] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 118.088038][ T31] audit: type=1400 audit(1791381657.500:6): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6497 comm="syz.2.226" name="unknown" offset=16 [ 118.221298][ T5764] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-71 [ 118.221328][ T5764] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-71 [ 118.221348][ T5764] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-71 [ 118.272301][ T5764] nintendo 0003:057E:2019.0002: probe - fail = -71 [ 118.272564][ T5764] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -71 [ 118.308634][ T5764] usb 5-1: USB disconnect, device number 2 [ 118.317652][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:057E:2019.0002/report_descriptor': No such device [ 118.462017][ T6511] sctp: [Deprecated]: syz.2.231 (pid 6511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.462017][ T6511] Use struct sctp_sack_info instead [ 118.556112][ T6149] veth0_vlan: entered promiscuous mode [ 118.584347][ T6149] veth1_vlan: entered promiscuous mode [ 118.630111][ T6519] Bluetooth: MGMT ver 1.23 [ 118.701966][ T6149] veth0_macvtap: entered promiscuous mode [ 118.722684][ T6149] veth1_macvtap: entered promiscuous mode [ 118.799501][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.857697][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.940749][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.077470][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.078381][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.078425][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.352424][ T6529] infiniband s`z1: ib_query_port failed (-19) [ 119.352678][ T6529] infiniband s`z1: Couldn't set up InfiniBand P_Key/GID cache [ 119.352693][ T6529] siw: device registration error -19 [ 119.377677][ T3319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.377696][ T3319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.537378][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.537403][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.570917][ T31] audit: type=1400 audit(1791381658.980:7): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6538 comm="syz.1.243" name="p" offset=48 [ 119.609816][ T6539] loop4: detected capacity change from 0 to 512 [ 119.629574][ T6539] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 119.629607][ T6539] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.629623][ T6539] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 120.424733][ T6566] netlink: 136 bytes leftover after parsing attributes in process `syz.5.253'. [ 120.529397][ T6569] loop3: detected capacity change from 0 to 4096 [ 120.620364][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.634257][ T6574] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.793062][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 120.793806][ T5851] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 120.794996][ T5851] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.795021][ T5851] usb 5-1: config 0 has no interface number 0 [ 120.797749][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.797775][ T5851] usb 5-1: Product: syz [ 120.797793][ T5851] usb 5-1: Manufacturer: syz [ 120.797810][ T5851] usb 5-1: SerialNumber: syz [ 120.846398][ T5851] usb 5-1: config 0 descriptor?? [ 120.874435][ T5851] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.082047][ T6567] loop2: detected capacity change from 0 to 32768 [ 121.096029][ T5851] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.124726][ T5851] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.516829][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 121.517960][ T5764] usb 5-1: USB disconnect, device number 3 [ 121.580842][ T5764] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 121.597624][ T5764] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 121.600004][ T5764] quatech2 5-1:0.51: device disconnected [ 122.296531][ T31] audit: type=1326 audit(1791381661.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.300253][ T31] audit: type=1326 audit(1791381661.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.354274][ T31] audit: type=1326 audit(1791381661.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.366756][ T31] audit: type=1326 audit(1791381661.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.397722][ T31] audit: type=1326 audit(1791381661.810:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.397784][ T31] audit: type=1326 audit(1791381661.810:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.397833][ T31] audit: type=1326 audit(1791381661.810:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 122.400547][ T31] audit: type=1326 audit(1791381661.810:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.4.271" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0fe139e199 code=0x7ffc0000 [ 123.053131][ T5764] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.203654][ T5764] usb 5-1: Using ep0 maxpacket: 8 [ 123.206138][ T5764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.209728][ T5764] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 123.209780][ T5764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.209807][ T5764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.209835][ T5764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.209862][ T5764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.209908][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.508635][ T6626] loop6: detected capacity change from 0 to 32768 [ 123.536726][ T5764] usb 5-1: GET_CAPABILITIES returned 0 [ 123.536778][ T5764] usbtmc 5-1:16.0: can't read capabilities [ 123.561627][ T6626] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 123.678350][ T6626] XFS (loop6): Ending clean mount [ 123.723132][ T6626] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 123.723212][ T6626] XFS (loop6): Unmount and run xfs_repair [ 123.723228][ T6626] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 123.723248][ T6626] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 123.723266][ T6626] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 123.723284][ T6626] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 123.723302][ T6626] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 123.723320][ T6626] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 123.723337][ T6626] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.723355][ T6626] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.723373][ T6626] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.723392][ T6626] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 123.731103][ T6626] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 123.731161][ T6626] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 123.801962][ T983] usb 5-1: USB disconnect, device number 4 [ 124.010920][ T6149] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 124.215050][ T6661] ip6gretap1: entered allmulticast mode [ 124.262766][ T6661] batman_adv: batadv0: Adding interface: ip6gretap1 [ 124.262786][ T6661] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.262821][ T6661] batman_adv: batadv0: Interface activated: ip6gretap1 [ 124.395090][ T6669] loop6: detected capacity change from 0 to 512 [ 124.411605][ T6669] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.438764][ T6669] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.290: corrupted in-inode xattr: e_value size too large [ 124.438803][ T6669] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.442407][ T6669] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.290: couldn't read orphan inode 15 (err -117) [ 124.442440][ T6669] loop6: lost filesystem error report for type 5 error -117 [ 124.443025][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 124.443046][ C1] EXT4-fs (loop6): initial error at time 1791381663: ext4_iget_extra_inode:5210: inode 15 [ 124.443081][ C1] EXT4-fs (loop6): last error at time 1791381663: ext4_orphan_get:1408 [ 124.551902][ T6669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.626784][ T6675] sctp: [Deprecated]: syz.1.294 (pid 6675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.626784][ T6675] Use struct sctp_sack_info instead [ 124.795800][ T6149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.151392][ T6691] loop2: detected capacity change from 0 to 128 [ 125.220532][ T6691] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.222583][ T6691] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.378486][ T6681] loop5: detected capacity change from 0 to 32768 [ 125.444345][ T6681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.297 (6681) [ 125.497359][ T5630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.680501][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.994041][ T983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.068788][ T6687] loop6: detected capacity change from 0 to 131072 [ 126.073104][ T6681] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.073137][ T6681] BTRFS info (device loop5): using crc32c checksum algorithm [ 126.073366][ T6687] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24) [ 126.073410][ T6687] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 126.073436][ T6687] F2FS-fs (loop6): Test dummy encryption mode enabled [ 126.105816][ T6706] loop3: detected capacity change from 0 to 256 [ 126.151307][ T6687] F2FS-fs (loop6): invalid crc value [ 126.153178][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 126.167046][ T983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.167113][ T983] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 126.169555][ T983] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 126.171911][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.171937][ T983] usb 2-1: Product: syz [ 126.171953][ T983] usb 2-1: Manufacturer: syz [ 126.171970][ T983] usb 2-1: SerialNumber: syz [ 126.250225][ T6687] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 126.251875][ T6687] loop6: lost filesystem error report for type 5 error -117 [ 126.261457][ T6687] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 126.264722][ T6687] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 126.264748][ T6687] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 126.264796][ T6687] F2FS-fs (loop6): Start checkpoint disabled! [ 126.275015][ T6687] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 126.328437][ T6687] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 126.328468][ T6687] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 126.447587][ T6726] device-mapper: ioctl: Invalid ioctl structure: name j, dev 8045d08669761000 [ 126.553895][ T6681] BTRFS info (device loop5): enabling ssd optimizations [ 126.553928][ T6681] BTRFS info (device loop5): turning on flush-on-commit [ 126.553948][ T6681] BTRFS info (device loop5): enabling free space tree [ 126.553967][ T6681] BTRFS info (device loop5): enabling auto defrag [ 126.553987][ T6681] BTRFS info (device loop5): use lzo compression, level 1 [ 126.554010][ T6681] BTRFS info (device loop5): max_inline set to 4096 [ 126.670386][ T983] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 126.680924][ T983] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.045781][ T983] usb 2-1: 2:1 : can't get Cluster Descriptor [ 127.051532][ T6733] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.134714][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 127.134737][ T31] audit: type=1800 audit(1791381666.550:17): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.297" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 127.388805][ T5617] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.618344][ T983] usb 2-1: USB disconnect, device number 3 [ 127.891876][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.931592][ T6747] loop4: detected capacity change from 0 to 1024 [ 127.962373][ T6747] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 128.029713][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.373718][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.960498][ T6783] netlink: 'syz.3.330': attribute type 7 has an invalid length. [ 129.184111][ T6790] capability: warning: `syz.6.313' uses deprecated v2 capabilities in a way that may be insecure [ 129.660086][ T6807] loop3: detected capacity change from 0 to 4096 [ 129.699680][ T6807] ntfs3(loop3): ino=3, mi_enum_attr [ 129.884173][ T6807] ntfs3(loop3): ino=19, mi_enum_attr [ 129.884447][ T6807] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 130.006742][ T6807] ntfs3(loop3): ino=9, attr_set_size_ex [ 130.273389][ T6805] loop5: detected capacity change from 0 to 32768 [ 130.377826][ T6805] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 130.525443][ T6805] XFS (loop5): Ending clean mount [ 130.678728][ T6805] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 130.678797][ T6805] XFS (loop5): Unmount and run xfs_repair [ 130.678813][ T6805] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 130.678832][ T6805] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 130.678851][ T6805] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 130.678869][ T6805] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 130.678887][ T6805] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 130.678904][ T6805] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 130.678922][ T6805] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.678940][ T6805] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.678958][ T6805] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.678977][ T6805] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 130.701695][ T6805] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 130.701758][ T6805] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 130.910286][ T5617] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 131.331257][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 131.377196][ T6824] loop1: detected capacity change from 0 to 32768 [ 131.430907][ T6824] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.529170][ T6876] rnbd_client L127: Can't parse path ip:: -22 [ 131.731077][ T6885] netlink: 'syz.3.357': attribute type 32 has an invalid length. [ 131.731102][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 131.784169][ T6824] XFS (loop1): Ending clean mount [ 131.926247][ T6824] XFS (loop1): Quotacheck needed: Please wait. [ 132.025283][ T6885] bond1: option coupled_control: invalid value (27) [ 132.066518][ T6885] bond1 (unregistering): Released all slaves [ 132.136658][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.136727][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.208637][ T6824] XFS (loop1): Quotacheck: Done. [ 132.246628][ T31] audit: type=1800 audit(1791381671.660:18): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 132.692909][ T6907] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.839354][ T5616] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.923508][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.096903][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 133.104856][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.120192][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 133.120245][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.120265][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.120286][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.120307][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.120344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.449524][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 133.449577][ T10] usbtmc 6-1:16.0: can't read capabilities [ 133.675974][ T10] usb 6-1: USB disconnect, device number 5 [ 133.823521][ T6937] CUSE: info not properly terminated [ 133.880005][ T6941] loop1: detected capacity change from 0 to 512 [ 133.949759][ T6944] loop4: detected capacity change from 0 to 256 [ 134.418615][ T6959] loop1: detected capacity change from 0 to 512 [ 134.432173][ T6959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.464312][ T6959] EXT4-fs (loop1): 1 truncate cleaned up [ 134.472015][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.515257][ T6959] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.382: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 134.518238][ T6959] EXT4-fs (loop1): Remounting filesystem read-only [ 134.648837][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.793303][ T5727] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.819457][ T6978] loop3: detected capacity change from 0 to 512 [ 134.872497][ T6978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 134.872626][ T6978] System zones: 1-12 [ 134.878782][ T6978] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.390: missing EA_INODE flag [ 134.878810][ T6978] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 134.893087][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 134.893115][ C1] EXT4-fs (loop3): initial error at time 1791381674: ext4_xattr_inode_iget:437: inode 12 [ 134.893150][ C1] EXT4-fs (loop3): last error at time 1791381674: ext4_xattr_inode_iget:437: inode 12 [ 134.920764][ T6978] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.390: error while reading EA inode 12 err=-117 [ 134.920800][ T6978] loop3: lost filesystem error report for type 5 error -117 [ 134.921361][ T6978] EXT4-fs (loop3): 1 orphan inode deleted [ 134.932103][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.957931][ T5727] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 134.961240][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.961272][ T5727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.976032][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.976063][ T5727] usb 5-1: Product: syz [ 134.976080][ T5727] usb 5-1: Manufacturer: syz [ 134.976097][ T5727] usb 5-1: SerialNumber: syz [ 135.008568][ T5727] symbolserial 5-1:1.0: symbol converter detected [ 135.077929][ T5727] usb 5-1: symbol converter now attached to ttyUSB0 [ 135.104053][ T5764] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 135.130575][ T6986] loop1: detected capacity change from 0 to 8 [ 135.162278][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.268792][ T5764] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 135.272427][ T5764] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.272455][ T5764] usb 7-1: config 0 has no interface number 0 [ 135.272497][ T5764] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.272527][ T5764] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.272552][ T5764] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.272582][ T5764] usb 7-1: config 0 interface 1 has no altsetting 0 [ 135.272617][ T5764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.288476][ T6968] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 135.303949][ T5764] usb 7-1: config 0 descriptor?? [ 135.346534][ T5851] usb 5-1: USB disconnect, device number 5 [ 135.400861][ T5851] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 135.415505][ T5851] symbolserial 5-1:1.0: device disconnected [ 135.726739][ T7001] loop2: detected capacity change from 0 to 64 [ 135.822045][ T7001] hfs: (loop2): extents (cnid 0x3) bitmap corrupted, forcing rdonly [ 135.822069][ T7001] hfs: Run fsck.hfs to repair. [ 135.841089][ T7005] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.877543][ T7005] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 135.968656][ T5764] uclogic 0003:145F:0212.0003: failed retrieving string descriptor #100: -71 [ 135.968725][ T5764] uclogic 0003:145F:0212.0003: failed retrieving pen parameters: -71 [ 135.968745][ T5764] uclogic 0003:145F:0212.0003: pen probing failed: -71 [ 135.968765][ T5764] uclogic 0003:145F:0212.0003: failed probing parameters: -71 [ 135.968875][ T5764] uclogic 0003:145F:0212.0003: probe with driver uclogic failed with error -71 [ 136.002255][ T5764] usb 7-1: USB disconnect, device number 2 [ 136.254206][ T7016] loop2: detected capacity change from 0 to 64 [ 136.317962][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 136.340638][ T7019] ipvlan2: entered allmulticast mode [ 136.340664][ T7019] syz_tun: entered allmulticast mode [ 136.472803][ T7016] hfs: request for non-existent node 131072 in B*Tree [ 136.472826][ T7016] hfs: request for non-existent node 131072 in B*Tree [ 136.692208][ T7032] loop3: detected capacity change from 0 to 128 [ 136.756011][ T7032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.760097][ T7032] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.869195][ T7038] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 136.935741][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.147375][ T7042] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 137.500729][ T7048] loop5: detected capacity change from 0 to 64 [ 137.638268][ T7048] MINIX-fs: mounting file system with errors, running fsck is recommended [ 138.318928][ T7066] loop1: detected capacity change from 0 to 8192 [ 138.813653][ T7091] serial 00:03: in use; can't configure [ 139.241146][ T7085] loop5: detected capacity change from 0 to 131072 [ 139.253175][ T7085] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 139.253205][ T7085] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 139.253234][ T7085] F2FS-fs (loop5): Test dummy encryption mode enabled [ 139.258187][ T7085] F2FS-fs (loop5): invalid crc value [ 139.361397][ T7085] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 139.361458][ T7085] loop5: lost filesystem error report for type 5 error -117 [ 139.369047][ T7085] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.375492][ T7085] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 139.375520][ T7085] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 139.375548][ T7085] F2FS-fs (loop5): Start checkpoint disabled! [ 139.391796][ T7085] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 139.394532][ T7085] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 139.394556][ T7085] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 139.658185][ T7110] loop6: detected capacity change from 0 to 2048 [ 139.676117][ T7110] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.711264][ T7110] syz.6.447: attempt to access beyond end of device [ 139.711264][ T7110] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 139.721680][ T7111] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.952604][ T7117] netlink: 56 bytes leftover after parsing attributes in process `syz.3.452'. [ 140.353063][ T5851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.526078][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 140.526925][ T5851] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 140.528224][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.531412][ T5851] usb 5-1: config 0 descriptor?? [ 140.781427][ T5851] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 140.828491][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.831486][ T5851] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 140.831539][ T5851] usb 5-1: media controller created [ 140.889124][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.041892][ T5851] az6027: usb out operation failed. (-71) [ 141.056170][ T5851] az6027: usb out operation failed. (-71) [ 141.056191][ T5851] stb0899_attach: Driver disabled by Kconfig [ 141.056210][ T5851] az6027: no front-end attached [ 141.056210][ T5851] [ 141.057618][ T5851] az6027: usb out operation failed. (-71) [ 141.057634][ T5851] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.107754][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 141.165378][ T5851] dvb-usb: schedule remote query interval to 400 msecs. [ 141.165410][ T5851] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 141.192459][ T5851] usb 5-1: USB disconnect, device number 6 [ 141.434347][ T7135] loop2: detected capacity change from 0 to 32768 [ 141.454630][ T7135] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.460 (7135) [ 141.632254][ T7143] loop3: detected capacity change from 0 to 131072 [ 141.640325][ T7143] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 141.640350][ T7143] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 141.640377][ T7143] F2FS-fs (loop3): Test dummy encryption mode enabled [ 141.658855][ T7143] F2FS-fs (loop3): invalid crc value [ 141.729342][ T7143] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 141.729410][ T7143] loop3: lost filesystem error report for type 5 error -117 [ 141.739387][ T7143] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 141.775162][ T7143] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 141.775194][ T7143] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 141.775223][ T7143] F2FS-fs (loop3): Start checkpoint disabled! [ 141.779944][ T7143] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 141.782336][ T7143] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 141.782360][ T7143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 141.837958][ T7135] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 141.837995][ T7135] BTRFS info (device loop2): using crc32c checksum algorithm [ 142.001652][ T7135] BTRFS info (device loop2): setting nodatasum [ 142.001682][ T7135] BTRFS info (device loop2): setting nodatacow [ 142.001700][ T7135] BTRFS info (device loop2): enabling ssd optimizations [ 142.001719][ T7135] BTRFS info (device loop2): turning on flush-on-commit [ 142.001738][ T7135] BTRFS info (device loop2): turning on async discard [ 142.001756][ T7135] BTRFS info (device loop2): enabling free space tree [ 142.056130][ T5851] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.246882][ T7140] loop5: detected capacity change from 0 to 32768 [ 142.476139][ T31] audit: type=1800 audit(1791381681.890:19): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.449" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 143.088929][ T5630] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 143.089827][ T7186] scsi_dev_info_list_add_str: bad dev info string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{L;ȧ0GIq6?Uq9mߣ7``0I3ŵ' '' '' [ 143.113255][ T7188] program syz.6.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.149671][ T7189] raw_sendmsg: syz.1.472 forgot to set AF_INET. Fix it! [ 143.701694][ T7195] Invalid ELF header magic: != ELF [ 143.940345][ T7202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.479'. [ 144.157255][ T5618] kernel read not supported for file /vcs (pid: 5618 comm: kworker/0:3) [ 144.302165][ T7216] loop6: detected capacity change from 0 to 128 [ 144.344511][ T7216] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 144.469906][ T7216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.872027][ T7230] loop6: detected capacity change from 0 to 512 [ 144.951100][ T7230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.951219][ T7230] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.079120][ T7231] loop4: detected capacity change from 0 to 4096 [ 145.119094][ T7231] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 145.154388][ T7241] process 'syz.3.466' launched './file1' with NULL argv: empty string added [ 145.319664][ T7231] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 145.319696][ T7231] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 145.372643][ T6149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.583982][ T7247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 145.787981][ T12] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 145.788993][ T5625] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 145.789023][ T5625] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 145.789041][ T5625] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 145.853131][ T5851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 145.853781][ T1145] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 145.892684][ T7265] loop6: detected capacity change from 0 to 16 [ 146.014454][ T5851] usb 6-1: Using ep0 maxpacket: 16 [ 146.017854][ T5851] usb 6-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice= 0.40 [ 146.019175][ T5851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 7 [ 146.019208][ T5851] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 146.019245][ T5851] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.031347][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.031376][ T5851] usb 6-1: Product: syz [ 146.031393][ T5851] usb 6-1: Manufacturer: syz [ 146.031410][ T5851] usb 6-1: SerialNumber: syz [ 146.065612][ T7255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.071054][ T7265] erofs (device loop6): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 146.071959][ T7265] erofs (device loop6): mounted with root inode @ nid 36. [ 146.148144][ T7265] erofs (device loop6): readahead error at folio 7 @ nid 36 [ 146.148227][ T7265] erofs (device loop6): unknown algorithm 5 @ pos 28160 for nid 36, please upgrade kernel [ 146.148251][ T7265] erofs (device loop6): readahead error at folio 6 @ nid 36 [ 146.148288][ T7265] erofs (device loop6): unknown algorithm 6 @ pos 24064 for nid 36, please upgrade kernel [ 146.148310][ T7265] erofs (device loop6): readahead error at folio 5 @ nid 36 [ 146.148369][ T7265] erofs (device loop6): unknown algorithm 5 @ pos 19968 for nid 36, please upgrade kernel [ 146.148392][ T7265] erofs (device loop6): readahead error at folio 4 @ nid 36 [ 146.148436][ T7265] erofs (device loop6): not enough plain data on disk @ la 15360 of nid 36 [ 146.148455][ T7265] erofs (device loop6): readahead error at folio 3 @ nid 36 [ 146.148508][ T7265] erofs (device loop6): unknown algorithm 5 @ pos 11776 for nid 36, please upgrade kernel [ 146.148531][ T7265] erofs (device loop6): readahead error at folio 2 @ nid 36 [ 146.148563][ T7265] erofs (device loop6): readahead error at folio 1 @ nid 36 [ 146.148586][ T7265] erofs (device loop6): readahead error at folio 0 @ nid 36 [ 146.148647][ T7265] erofs (device loop6): read error -117 @ 0 of nid 36 [ 146.148668][ T7265] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 146.156410][ T7265] erofs (device loop6): read error -117 @ 0 of nid 36 [ 146.156468][ T7265] erofs (device loop6): failed to readdir of logical block 0 of nid 36 [ 146.568783][ T5851] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.018271][ T5851] usb 6-1: USB disconnect, device number 6 [ 147.283637][ T7310] loop6: detected capacity change from 0 to 128 [ 147.384144][ T7310] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.387568][ T7310] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.417601][ T31] audit: type=1800 audit(1791381686.810:20): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.513" name="file2" dev="loop6" ino=12 res=0 errno=0 [ 147.417909][ T7319] loop2: detected capacity change from 0 to 512 [ 147.419204][ T7319] EXT4-fs: Ignoring removed oldalloc option [ 147.509717][ T7319] EXT4-fs (loop2): 1 truncate cleaned up [ 147.535134][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.608032][ T31] audit: type=1800 audit(1791381687.020:21): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.514" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 147.822252][ T6149] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.835801][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.980049][ T7334] udevd[7334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.393236][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.437622][ T7358] loop1: detected capacity change from 0 to 512 [ 148.512378][ T7358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.512482][ T7358] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.543834][ T7356] loop2: detected capacity change from 0 to 4096 [ 148.551691][ T7356] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 148.570508][ T5851] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 148.582505][ T5851] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.582540][ T5851] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.582570][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.582611][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.630223][ T5851] usb 5-1: config 0 descriptor?? [ 148.674667][ T7356] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 148.750111][ T7356] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 149.000949][ T7374] MTRR 1 not used [ 149.091804][ T5851] hid (null): global environment stack underflow [ 149.091838][ T5851] hid (null): bogus close delimiter [ 149.122592][ T5851] hid-multitouch 0003:0EEF:72C4.0004: global environment stack underflow [ 149.122620][ T5851] hid-multitouch 0003:0EEF:72C4.0004: item 0 4 1 11 parsing failed [ 149.143650][ T5851] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22 [ 149.343727][ T5851] usb 5-1: USB disconnect, device number 7 [ 149.448610][ T7392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.600523][ T7395] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 149.706158][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.514457][ T5618] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 150.667703][ T5618] usb 4-1: not running at top speed; connect to a high speed hub [ 150.667746][ T5618] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 150.673407][ T5618] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 150.673435][ T5618] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.673455][ T5618] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 150.673520][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.717724][ T5618] usb 4-1: config 0 descriptor?? [ 150.740815][ T5618] uvcvideo 4-1:0.0: Found UVC 9.00 device (046d:0825) [ 150.809551][ T7450] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 151.141860][ T5618] uvcvideo 4-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 151.238962][ T5618] videodev: could not get a free minor [ 151.238985][ T5618] uvcvideo 4-1:0.1: Failed to register meta-cap device (-23). [ 151.355079][ T5618] usb 4-1: USB disconnect, device number 2 [ 151.863258][ T7487] smpboot: CPU 1 is now offline [ 152.507070][ T7471] loop4: detected capacity change from 0 to 32768 [ 152.608203][ T7471] JBD2: Ignoring recovery information on journal [ 152.672028][ T7504] loop3: detected capacity change from 0 to 64 [ 152.859895][ T7471] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.886281][ T7534] loop1: detected capacity change from 0 to 16 [ 153.917299][ T7534] erofs (device loop1): mounted with root inode @ nid 36. [ 154.266619][ T5625] ocfs2: Unmounting device (7,4) on (node local) [ 154.614026][ T7551] loop2: detected capacity change from 0 to 512 [ 154.705325][ T7551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.705417][ T7551] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.004168][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.569377][ T7537] loop6: detected capacity change from 0 to 32768 [ 155.645702][ T7537] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.798389][ T7580] Bluetooth: MGMT ver 1.23 [ 155.798422][ T7580] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 155.835409][ T7537] XFS (loop6): Ending clean mount [ 156.272906][ T6149] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.351432][ T7588] size and base must be multiples of 4 kiB [ 156.351451][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.3.608 Not tainted syzkaller #0 PREEMPT(full) [ 156.351472][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 156.351483][ T7588] Call Trace: [ 156.351491][ T7588] [ 156.351499][ T7588] dump_stack_lvl+0xe8/0x150 [ 156.351532][ T7588] mtrr_add+0xd5/0x100 [ 156.351562][ T7588] mtrr_ioctl+0xc98/0x13b0 [ 156.351596][ T7588] ? __pfx_mtrr_ioctl+0x10/0x10 [ 156.351639][ T7588] ? __fget_files+0x2a/0x420 [ 156.351668][ T7588] ? __fget_files+0x3a2/0x420 [ 156.351695][ T7588] ? __fget_files+0x2a/0x420 [ 156.351729][ T7588] ? __pfx_mtrr_ioctl+0x10/0x10 [ 156.351758][ T7588] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 156.351784][ T7588] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 156.351809][ T7588] __se_sys_ioctl+0xfc/0x170 [ 156.351834][ T7588] do_syscall_64+0x166/0x520 [ 156.351863][ T7588] ? trace_irq_disable+0x3b/0x140 [ 156.351884][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.351909][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.351928][ T7588] RIP: 0033:0x7fde32d9e199 [ 156.351945][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.351960][ T7588] RSP: 002b:00007fde33c89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.351980][ T7588] RAX: ffffffffffffffda RBX: 00007fde33025fa0 RCX: 00007fde32d9e199 [ 156.351994][ T7588] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003 [ 156.352010][ T7588] RBP: 00007fde32e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 156.352022][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.352036][ T7588] R13: 00007fde33026038 R14: 00007fde33025fa0 R15: 00007ffd4a28ebf8 [ 156.352066][ T7588] [ 156.581297][ T7591] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 156.834607][ T5618] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.984391][ T5618] usb 3-1: Using ep0 maxpacket: 32 [ 156.986230][ T5618] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 156.988539][ T5618] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.988564][ T5618] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.988591][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.047715][ T5618] usb 3-1: config 0 descriptor?? [ 157.128746][ T7601] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 157.128791][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 157.428878][ T7569] loop4: detected capacity change from 0 to 32768 [ 157.509912][ T7569] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.626786][ T7569] XFS (loop4): Ending clean mount [ 157.655476][ T5618] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 157.655500][ T5618] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 157.655519][ T5618] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 157.655537][ T5618] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 157.655556][ T5618] corsair-cpro 0003:1B1C:0C10.0005: unknown main item tag 0x0 [ 157.709629][ T7618] loop1: detected capacity change from 0 to 512 [ 157.786587][ T5618] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 157.786851][ T7618] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.618: corrupted in-inode xattr: invalid ea_ino [ 157.786874][ T7618] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.789062][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.618: couldn't read orphan inode 15 (err -117) [ 157.789086][ T7618] loop1: lost filesystem error report for type 5 error -117 [ 157.793007][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 157.793023][ C0] EXT4-fs (loop1): initial error at time 1791381697: ext4_iget_extra_inode:5210: inode 15 [ 157.793052][ C0] EXT4-fs (loop1): last error at time 1791381697: ext4_orphan_get:1408 [ 157.898493][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.936956][ T5618] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -71 [ 157.992378][ T5618] usb 3-1: USB disconnect, device number 3 [ 158.280998][ T7625] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.618: invalid indirect mapped block 234881024 (level 0) [ 158.281065][ T7625] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.423513][ T7626] fido_id[7626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 158.485463][ T7632] loop6: detected capacity change from 0 to 1764 [ 158.665316][ T7636] loop3: detected capacity change from 0 to 2048 [ 158.756107][ T7638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.846041][ T7638] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 158.846070][ T7638] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 158.911952][ T7638] Remounting filesystem read-only [ 158.927740][ T7636] NILFS (loop3): mounting fs with errors [ 159.470560][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.933033][ T5618] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 160.068211][ T7666] ip_tables: iptables: counters copy to user failed while replacing table [ 160.087181][ T5618] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.089621][ T5618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.146637][ T5618] usb 7-1: config 0 descriptor?? [ 160.179221][ T5618] cp210x 7-1:0.0: cp210x converter detected [ 160.235999][ T5625] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.307673][ T7638] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 160.307708][ T7638] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 160.307723][ T7638] Remounting filesystem read-only [ 160.308298][ T5632] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 160.924435][ T5618] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 160.924481][ T5618] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 160.991884][ T5618] usb 7-1: cp210x converter now attached to ttyUSB0 [ 161.022160][ T5618] usb 7-1: USB disconnect, device number 3 [ 161.089080][ T5618] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.120590][ T5618] cp210x 7-1:0.0: device disconnected [ 162.119164][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 162.685382][ T7712] loop5: detected capacity change from 0 to 128 [ 162.726825][ T7708] tap0: tun_chr_ioctl cmd 2147767506 [ 162.807294][ T7712] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.807442][ T7712] hpfs: filesystem error: improperly stopped [ 162.807456][ T7712] hpfs: You really don't want any checks? You are crazy... [ 162.808018][ T7712] hpfs: hpfs_map_sector(): read error [ 162.808027][ T7712] hpfs: code page support is disabled [ 162.859854][ T7712] hpfs: hpfs_map_4sectors(): unaligned read [ 162.875004][ T7712] hpfs: hpfs_map_4sectors(): unaligned read [ 162.875019][ T7712] hpfs: filesystem error: unable to find root dir [ 163.447773][ T7699] loop4: detected capacity change from 0 to 32768 [ 163.448690][ T7699] xfs: Deprecated parameter 'noattr2' [ 163.448704][ T7699] XFS: noattr2 mount option is deprecated. [ 163.544157][ T7699] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.606663][ T7724] loop5: detected capacity change from 0 to 2048 [ 163.723434][ T7699] XFS (loop4): Ending clean mount [ 163.741497][ T7724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.860572][ T7738] loop1: detected capacity change from 0 to 512 [ 163.924835][ T7738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.924858][ T7738] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 164.028495][ T7738] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.651: invalid indirect mapped block 1819239214 (level 1) [ 164.028528][ T7738] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 164.033023][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 164.033042][ C0] EXT4-fs (loop1): initial error at time 1791381703: ext4_free_branches:1023: inode 13 [ 164.033068][ C0] EXT4-fs (loop1): last error at time 1791381703: ext4_free_branches:1023: inode 13 [ 164.162687][ T7738] EXT4-fs (loop1): Remounting filesystem read-only [ 164.216054][ T7738] EXT4-fs (loop1): 1 truncate cleaned up [ 164.232249][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.474032][ T5625] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.601919][ T7749] loop3: detected capacity change from 0 to 512 [ 164.629298][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.719121][ T7749] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.654: corrupted in-inode xattr: invalid ea_ino [ 164.719155][ T7749] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.723035][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 164.723055][ C0] EXT4-fs (loop3): initial error at time 1791381704: ext4_iget_extra_inode:5210: inode 15 [ 164.723616][ C0] EXT4-fs (loop3): last error at time 1791381704: ext4_iget_extra_inode:5210: inode 15 [ 164.750386][ T7749] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.654: couldn't read orphan inode 15 (err -117) [ 164.750415][ T7749] loop3: lost filesystem error report for type 5 error -117 [ 164.851884][ T7749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.325205][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.573780][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.739360][ T7767] loop1: detected capacity change from 0 to 24 [ 165.757799][ T7767] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 165.839588][ T7760] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 165.839842][ T7760] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 165.875511][ T7767] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 166.213789][ T7774] CIFS: bad ip= option (1270.0.1) [ 166.231691][ T7774] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.231938][ T7774] CIFS: Attempting to mount (null) [ 166.409469][ T7781] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 166.446705][ T7780] loop3: detected capacity change from 0 to 2048 [ 166.517588][ T7780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.555933][ T7774] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.556044][ T7774] CIFS: VFS: cifs_mount failed w/return code = -111 [ 166.778099][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.018194][ T7793] loop3: detected capacity change from 0 to 256 [ 167.047685][ T7776] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 167.560027][ T7805] loop5: detected capacity change from 0 to 4096 [ 167.665464][ T7805] NILFS (loop5): invalid segment: Checksum error in segment payload [ 167.665489][ T7805] NILFS (loop5): trying rollback from an earlier position [ 167.756697][ T7805] NILFS (loop5): recovery complete [ 167.771851][ T7812] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.905873][ T7814] loop2: detected capacity change from 0 to 1024 [ 167.999026][ T7814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.268665][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.697642][ T7834] : renamed from vlan0 (while UP) [ 169.297079][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.694'. [ 169.397872][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 169.674190][ T983] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 170.020150][ T983] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -110 [ 170.061322][ T7856] fido_id[7856]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0003:1B1C:0C10.0006/report_descriptor': No such device [ 170.707923][ T31] audit: type=1326 audit(1791381710.120:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.5.711" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb14df9e199 code=0x0 [ 171.603047][ T983] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.753746][ T983] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 171.755139][ T983] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 171.755160][ T983] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 171.760733][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.760754][ T983] usb 3-1: Product: syz [ 171.760767][ T983] usb 3-1: Manufacturer: syz [ 171.760780][ T983] usb 3-1: SerialNumber: syz [ 171.824197][ T983] usb 3-1: config 0 descriptor?? [ 171.857474][ T983] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 172.193466][ T7895] loop6: detected capacity change from 0 to 32768 [ 172.223132][ T7895] (syz.6.717,7895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.224344][ T7895] (syz.6.717,7895,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.286962][ T7895] JBD2: Ignoring recovery information on journal [ 172.448203][ T7895] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 172.610281][ T60] ocfs2: Finishing quota recovery on device (7,6) for slot 0 [ 172.769785][ T5618] usb 3-1: USB disconnect, device number 4 [ 173.353646][ T6149] ocfs2: Unmounting device (7,6) on (node local) [ 173.558943][ T7930] loop3: detected capacity change from 0 to 2048 [ 173.606591][ T7930] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 173.628440][ T7930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.322804][ T7945] loop3: detected capacity change from 0 to 164 [ 174.381932][ T7945] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 174.483226][ T7945] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 174.588242][ T7945] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 175.582062][ T7970] loop3: detected capacity change from 0 to 512 [ 175.675417][ T7970] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.748: corrupted in-inode xattr: invalid ea_ino [ 175.675448][ T7970] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.675783][ T7970] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.748: couldn't read orphan inode 15 (err -117) [ 175.675808][ T7970] loop3: lost filesystem error report for type 5 error -117 [ 175.720320][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.823191][ T7970] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 1929121092 > max in inode 18 [ 176.191077][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.643668][ T5618] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.796059][ T5618] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 176.816514][ T5618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.816541][ T5618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.816573][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.855447][ T5618] usb 2-1: config 0 descriptor?? [ 176.923770][ T5741] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 176.932711][ T7999] loop5: detected capacity change from 0 to 512 [ 176.993004][ T7999] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.760: iget: bad extended attribute block 134217728 [ 176.993035][ T7999] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.997306][ T7999] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.760: couldn't read orphan inode 15 (err -117) [ 176.997333][ T7999] loop5: lost filesystem error report for type 5 error -117 [ 177.051273][ T7999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.104880][ T5741] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 177.111926][ T5741] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.111955][ T5741] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.111983][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.179605][ T5741] usb 3-1: config 0 descriptor?? [ 177.246021][ T31] audit: type=1800 audit(1791381716.660:23): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.760" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 177.396757][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396785][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396804][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396821][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396839][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396860][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.396895][ T5618] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 177.528511][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.560393][ T5618] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 177.852000][ T5741] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04FC:05D8.0008/input/input10 [ 178.011788][ T5618] usb 2-1: USB disconnect, device number 4 [ 178.280313][ T5741] sunplus 0003:04FC:05D8.0008: input,hidraw0: USB HID vd.8f Joystick [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 178.443555][ T983] usb 3-1: USB disconnect, device number 5 [ 178.842325][ T8024] loop1: detected capacity change from 0 to 256 [ 178.879281][ T8020] fido_id[8020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 178.970218][ T8024] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.970300][ T8024] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.970325][ T8024] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.970509][ T31] audit: type=1800 audit(1791381718.380:24): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.770" name="file1" dev="loop1" ino=1048708 res=0 errno=0 [ 179.080648][ T8024] FAT-fs (loop1): unable to read block(171798691840) for building NFS inode [ 179.499353][ T8040] loop6: detected capacity change from 0 to 128 [ 179.527057][ T8040] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 179.601709][ T8041] kAFS: unable to lookup cell '(G' [ 179.611329][ T8037] kAFS: unable to lookup cell '(G' [ 180.100516][ T8050] netlink: 14 bytes leftover after parsing attributes in process `syz.2.780'. [ 180.453479][ T5741] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.606038][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 180.619766][ T5741] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 180.639939][ T5741] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.639968][ T5741] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.639988][ T5741] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 180.640010][ T5741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.640038][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.747080][ T5741] usb 5-1: config 0 descriptor?? [ 181.433898][ T983] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.434040][ T5741] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 181.539424][ T9] usb 5-1: USB disconnect, device number 8 [ 181.584540][ T5741] usb 7-1: Using ep0 maxpacket: 16 [ 181.585469][ T983] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 181.585661][ T5741] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 181.587109][ T983] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.587133][ T983] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.587287][ T5741] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.587309][ T5741] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.587327][ T5741] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.587395][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.691485][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.691512][ T983] usb 3-1: Product: syz [ 181.691525][ T983] usb 3-1: Manufacturer: syz [ 181.735528][ T5741] usb 7-1: config 0 descriptor?? [ 181.755107][ T983] navman 3-1:1.0: navman converter detected [ 181.811071][ T983] usb 3-1: navman converter now attached to ttyUSB0 [ 182.028791][ T8073] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 182.095903][ T9] usb 3-1: USB disconnect, device number 6 [ 182.158245][ T9] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 182.158798][ T9] navman 3-1:1.0: device disconnected [ 182.216553][ T8084] loop3: detected capacity change from 0 to 164 [ 182.254121][ T8084] iso9660: Bad value for 'check' [ 182.360395][ T5741] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 182.360422][ T5741] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 182.360440][ T5741] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 182.360836][ T5741] cougar 0003:060B:500A.000A: unexpected long global item [ 182.361394][ T5741] cougar 0003:060B:500A.000A: parse failed [ 182.409487][ T5741] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 182.540353][ T10] usb 7-1: USB disconnect, device number 4 [ 182.576866][ T8086] loop1: detected capacity change from 0 to 64 [ 182.814895][ T8089] loop3: detected capacity change from 0 to 64 [ 183.435671][ T8098] loop2: detected capacity change from 0 to 512 [ 183.487549][ T8082] loop5: detected capacity change from 0 to 32768 [ 185.396491][ T5741] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.535041][ T8144] loop2: detected capacity change from 0 to 2048 [ 185.561014][ T8149] loop5: detected capacity change from 0 to 512 [ 185.577563][ T5741] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.580835][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.645831][ T8149] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.825: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 185.645867][ T8149] loop5: lost filesystem error report for type 5 error -117 [ 185.653525][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 185.653546][ C0] EXT4-fs (loop5): initial error at time 1791381725: ext4_xattr_inode_iget:473 [ 185.653567][ C0] EXT4-fs (loop5): last error at time 1791381725: ext4_xattr_inode_iget:473 [ 185.720450][ T8149] EXT4-fs (loop5): 1 orphan inode deleted [ 185.745186][ T5741] usb 5-1: config 0 descriptor?? [ 185.748893][ T8149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.778822][ T5741] cp210x 5-1:0.0: cp210x converter detected [ 185.820516][ T8144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.820633][ T8144] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.158063][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.180878][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.328960][ T5741] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 186.474292][ T5741] usb 5-1: cp210x converter now attached to ttyUSB0 [ 186.605833][ T5741] usb 5-1: USB disconnect, device number 9 [ 186.679392][ T5741] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.679900][ T5741] cp210x 5-1:0.0: device disconnected [ 187.156849][ T8173] IPVS: Error connecting to the multicast addr [ 187.214910][ T5741] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 187.366929][ T5741] usb 7-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 187.367983][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.368008][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 187.368041][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.406914][ T5741] usb 7-1: config 0 descriptor?? [ 187.415815][ T8170] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 187.423120][ T5618] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.576273][ T5618] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 187.603397][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.603424][ T5618] usb 2-1: Product: syz [ 187.603437][ T5618] usb 2-1: Manufacturer: syz [ 187.603450][ T5618] usb 2-1: SerialNumber: syz [ 187.650295][ T5618] usb 2-1: config 0 descriptor?? [ 187.685828][ T5618] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 005 [ 187.906014][ T8187] loop4: detected capacity change from 0 to 1764 [ 187.933837][ T8187] iso9660: Bad value for 'session' [ 187.995715][ T5741] hid_parser_main: 78 callbacks suppressed [ 187.995738][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995766][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995784][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995801][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995819][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995837][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995854][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995872][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995889][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.995907][ T5741] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 187.996116][ T5741] cypress 0003:04B4:BCA1.000B: global environment stack underflow [ 187.996129][ T5741] cypress 0003:04B4:BCA1.000B: item 0 0 1 11 parsing failed [ 187.996667][ T5741] cypress 0003:04B4:BCA1.000B: parse failed [ 187.996752][ T5741] cypress 0003:04B4:BCA1.000B: probe with driver cypress failed with error -22 [ 188.142565][ T5618] (null): failure reading functionality [ 188.175947][ T5741] usb 7-1: USB disconnect, device number 5 [ 188.193027][ T5618] i2c i2c-1: connected i2c-tiny-usb device [ 188.391272][ T983] usb 2-1: USB disconnect, device number 5 [ 188.416030][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.843'. [ 189.221083][ T8210] loop4: detected capacity change from 0 to 512 [ 189.284182][ T31] audit: type=1326 audit(1791381728.700:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.284230][ T31] audit: type=1326 audit(1791381728.700:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.291960][ T31] audit: type=1326 audit(1791381728.700:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.292019][ T31] audit: type=1326 audit(1791381728.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.292056][ T31] audit: type=1326 audit(1791381728.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.445669][ T31] audit: type=1326 audit(1791381728.860:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.445732][ T31] audit: type=1326 audit(1791381728.860:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.445776][ T31] audit: type=1326 audit(1791381728.860:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.6.854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deb79e199 code=0x7ffc0000 [ 189.771272][ T8221] loop4: detected capacity change from 0 to 128 [ 189.796432][ T8221] FAT-fs (loop4): bogus number of reserved sectors [ 189.796454][ T8221] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 189.796467][ T8221] FAT-fs (loop4): Can't find a valid FAT filesystem [ 190.208991][ T8235] program syz.1.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.015647][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 191.447507][ T8272] netlink: 104 bytes leftover after parsing attributes in process `syz.4.879'. [ 191.494435][ T8273] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 191.844372][ T983] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 191.997335][ T983] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.998869][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.089040][ T983] usb 4-1: config 0 descriptor?? [ 192.106374][ T983] cp210x 4-1:0.0: cp210x converter detected [ 192.144423][ T8273] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 192.240275][ T8270] loop5: detected capacity change from 0 to 32768 [ 192.276966][ T8270] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 192.315050][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.319156][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.427118][ T8270] XFS (loop5): Ending clean mount [ 192.599189][ T983] usb 4-1: cp210x converter now attached to ttyUSB0 [ 192.662330][ T8279] netlink: 'syz.4.882': attribute type 2 has an invalid length. [ 192.840514][ T8281] loop6: detected capacity change from 0 to 32768 [ 192.929287][ T8281] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.991273][ T8281] XFS (loop6): Ending clean mount [ 193.431908][ T6149] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.456740][ T5617] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 193.479099][ T8310] loop1: detected capacity change from 0 to 32768 [ 193.784532][ T8310] JBD2: Ignoring recovery information on journal [ 193.990433][ T8310] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.052746][ T5618] usb 4-1: USB disconnect, device number 3 [ 194.153719][ T5618] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.154198][ T5618] cp210x 4-1:0.0: device disconnected [ 194.919765][ T5616] ocfs2: Unmounting device (7,1) on (node local) [ 195.106738][ T8327] loop2: detected capacity change from 0 to 256 [ 195.252189][ T8327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 195.455360][ T8333] loop4: detected capacity change from 0 to 512 [ 195.469710][ T8333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.487377][ T8333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.577501][ T8333] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.900: bad orphan inode 131083 [ 195.577528][ T8333] loop4: lost filesystem error report for type 5 error -117 [ 195.598488][ T8333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.879648][ T8333] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.900: Logical block already allocated [ 195.941429][ T8333] CacheFiles: mkdir cache failed with error -117 [ 195.941488][ T8333] CacheFiles: Failed to register: -117 [ 196.099649][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.290188][ T8348] syz.6.906 uses obsolete (PF_INET,SOCK_PACKET) [ 197.615891][ T31] audit: type=1326 audit(1791381737.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.615942][ T31] audit: type=1326 audit(1791381737.030:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.685280][ T31] audit: type=1326 audit(1791381737.100:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.685330][ T31] audit: type=1326 audit(1791381737.100:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.685367][ T31] audit: type=1326 audit(1791381737.100:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.774714][ T31] audit: type=1326 audit(1791381737.190:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.774772][ T31] audit: type=1326 audit(1791381737.190:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.774810][ T31] audit: type=1326 audit(1791381737.190:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.904259][ T31] audit: type=1326 audit(1791381737.310:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 197.904310][ T31] audit: type=1326 audit(1791381737.310:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.5.926" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14df9e199 code=0x7ffc0000 [ 198.279210][ T8404] loop2: detected capacity change from 0 to 128 [ 198.508499][ T8377] loop3: detected capacity change from 0 to 32768 [ 198.548773][ T8377] BTRFS warning: excessive commit interval 3581, use with care [ 198.564502][ T8377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.919 (8377) [ 198.619655][ T8377] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.619685][ T8377] BTRFS info (device loop3): using crc32c checksum algorithm [ 198.686555][ T8408] sctp: [Deprecated]: syz.4.933 (pid 8408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.686555][ T8408] Use struct sctp_sack_info instead [ 198.920408][ T8377] BTRFS info (device loop3): enabling ssd optimizations [ 198.920432][ T8377] BTRFS info (device loop3): turning on flush-on-commit [ 198.920448][ T8377] BTRFS info (device loop3): enabling free space tree [ 198.920464][ T8377] BTRFS info (device loop3): force zlib compression, level 3 [ 198.920482][ T8377] BTRFS info (device loop3): max_inline set to 4096 [ 198.975974][ T52] Bluetooth: hci1: SCO packet too small [ 199.150811][ T8433] loop4: detected capacity change from 0 to 128 [ 199.890288][ T8399] loop1: detected capacity change from 0 to 40427 [ 199.913426][ T8399] F2FS-fs: heap/no_heap options were deprecated [ 199.919794][ T8399] F2FS-fs (loop1): build fault injection rate: 19 [ 199.919813][ T8399] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 199.923696][ T8445] gretap0: entered promiscuous mode [ 199.959089][ T8399] F2FS-fs (loop1): invalid crc value [ 200.099601][ T8399] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 200.397881][ T8457] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 200.397881][ T8457] The task syz.2.944 (8457) triggered the difference, watch for misbehavior. [ 200.487665][ T5632] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.534475][ T8399] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 200.589411][ T8399] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 200.766883][ T8399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.012419][ T8448] f2fs_ckpt-7:1: attempt to access beyond end of device [ 201.012419][ T8448] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.042837][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: f2fs_ckpt-7:1 Not tainted syzkaller #0 PREEMPT(full) [ 201.042868][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 201.042881][ T8448] Call Trace: [ 201.042894][ T8448] [ 201.042904][ T8448] dump_stack_lvl+0xe8/0x150 [ 201.042939][ T8448] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 201.042979][ T8448] f2fs_write_end_bio+0x1211/0x16e0 [ 201.043008][ T8448] ? blkg_put+0x22/0x240 [ 201.043057][ T8448] __submit_merged_bio+0x258/0x6a0 [ 201.043090][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043115][ T8448] ? rcu_is_watching+0x16/0xb0 [ 201.043148][ T8448] __submit_merged_write_cond+0x3c9/0x4e0 [ 201.043193][ T8448] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 201.043242][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043276][ T8448] f2fs_write_data_pages+0x2a27/0x36f0 [ 201.043300][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043324][ T8448] ? __lock_acquire+0x747/0x2de0 [ 201.043383][ T8448] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.043419][ T8448] ? arch_stack_walk+0x11b/0x150 [ 201.043474][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043498][ T8448] ? add_lock_to_list+0xc7/0x100 [ 201.043529][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043554][ T8448] ? __lock_acquire+0x1511/0x2de0 [ 201.043600][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043621][ T8448] ? do_raw_spin_lock+0x12b/0x2f0 [ 201.043653][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043679][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043700][ T8448] ? do_raw_spin_unlock+0xf5/0x200 [ 201.043729][ T8448] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.043756][ T8448] do_writepages+0x338/0x560 [ 201.043780][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043804][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043829][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043851][ T8448] ? do_raw_spin_unlock+0xf5/0x200 [ 201.043883][ T8448] filemap_fdatawrite+0x1e9/0x2f0 [ 201.043910][ T8448] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 201.043965][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.043988][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044014][ T8448] ? do_raw_spin_unlock+0xf5/0x200 [ 201.044046][ T8448] f2fs_sync_dirty_inodes+0x30e/0x830 [ 201.044083][ T8448] f2fs_write_checkpoint+0xa3d/0x2710 [ 201.044135][ T8448] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 201.044190][ T8448] ? __pfx_down_write+0x10/0x10 [ 201.044211][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044237][ T8448] ? rcu_is_watching+0x16/0xb0 [ 201.044261][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044287][ T8448] __checkpoint_and_complete_reqs+0x135/0x480 [ 201.044321][ T8448] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 201.044359][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044384][ T8448] ? schedule+0x90/0x2b0 [ 201.044417][ T8448] issue_checkpoint_thread+0xd5/0x270 [ 201.044440][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044465][ T8448] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 201.044488][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044511][ T8448] ? __pfx_autoremove_wake_function+0x10/0x10 [ 201.044538][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044559][ T8448] ? __kthread_parkme+0x71/0x1f0 [ 201.044589][ T8448] ? __kthread_parkme+0x199/0x1f0 [ 201.044622][ T8448] kthread+0x38b/0x480 [ 201.044641][ T8448] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 201.044663][ T8448] ? __pfx_kthread+0x10/0x10 [ 201.044684][ T8448] ret_from_fork+0x514/0xb70 [ 201.044705][ T8448] ? __pfx_ret_from_fork+0x10/0x10 [ 201.044723][ T8448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.044749][ T8448] ? __switch_to+0xc89/0x1420 [ 201.044778][ T8448] ? __pfx_kthread+0x10/0x10 [ 201.044798][ T8448] ret_from_fork_asm+0x1a/0x30 [ 201.044843][ T8448] [ 201.366608][ T8448] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 201.444544][ T59] IPVS: starting estimator thread 0... [ 201.584286][ T8470] IPVS: using max 34 ests per chain, 81600 per kthread [ 202.495548][ T8487] loop5: detected capacity change from 0 to 16 [ 202.496377][ T8487] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 202.585753][ T5624] udevd[5624]: incorrect cramfs checksum on /dev/loop5 [ 202.725723][ T5624] udevd[5624]: incorrect cramfs checksum on /dev/loop5 [ 203.058957][ T8495] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 203.334802][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 203.490267][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.491957][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.491980][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.525782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.525807][ T9] usb 5-1: Product: syz [ 203.525821][ T9] usb 5-1: Manufacturer: syz [ 203.525834][ T9] usb 5-1: SerialNumber: syz [ 203.547567][ T9] usb 5-1: config 0 descriptor?? [ 203.609084][ T9] usb 5-1: selecting invalid altsetting 0 [ 203.731631][ T8484] loop2: detected capacity change from 0 to 32768 [ 204.171894][ T9] usb 5-1: USB disconnect, device number 10 [ 204.294101][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.455451][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 204.461845][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 204.486236][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 204.486262][ T10] usb 4-1: config 0 has no interface number 0 [ 204.486300][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.486328][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 204.532286][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.532311][ T10] usb 4-1: Product: syz [ 204.532327][ T10] usb 4-1: Manufacturer: syz [ 204.532342][ T10] usb 4-1: SerialNumber: syz [ 204.612387][ T10] usb 4-1: config 0 descriptor?? [ 205.325506][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 205.342555][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input15 [ 205.526998][ T8528] loop1: detected capacity change from 0 to 1024 [ 205.551687][ T8528] EXT4-fs: Ignoring removed orlov option [ 205.616813][ T9] usb 4-1: USB disconnect, device number 4 [ 205.757889][ T8528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.995220][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 206.281126][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.319485][ T8538] loop2: detected capacity change from 0 to 16 [ 206.361176][ T8538] erofs (device loop2): mounted with root inode @ nid 36. [ 206.475852][ T8515] loop5: detected capacity change from 0 to 32768 [ 206.676649][ T8515] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.705935][ T8549] loop3: detected capacity change from 0 to 128 [ 206.784725][ T8515] XFS (loop5): Ending clean mount [ 206.959846][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 206.959866][ T31] audit: type=1326 audit(1791381746.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.6.980" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6deb79e199 code=0x0 [ 207.235130][ T5617] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.212297][ T8578] loop3: detected capacity change from 0 to 128 [ 208.619650][ T8581] loop5: detected capacity change from 0 to 4096 [ 208.796471][ T8586] loop6: detected capacity change from 0 to 32768 [ 208.797467][ T8586] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 208.826349][ T8586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.990 (8586) [ 208.827821][ T8581] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 208.878433][ T8586] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.878460][ T8586] BTRFS info (device loop6): using sha256 checksum algorithm [ 208.932181][ T8581] ntfs3(loop5): try to read out of volume at offset 0xffffffff0000 [ 208.932213][ T8581] ntfs3(loop5): Failed to initialize $Bitmap (-5). [ 209.091995][ T8586] BTRFS info (device loop6): rebuilding free space tree [ 209.144896][ T8586] BTRFS info (device loop6): disabling free space tree [ 209.144960][ T8586] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.144980][ T8586] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.152041][ T8586] BTRFS info (device loop6): enabling ssd optimizations [ 209.152062][ T8586] BTRFS info (device loop6): force clearing of disk cache [ 209.152100][ T8586] BTRFS info (device loop6): enabling auto defrag [ 209.152115][ T8586] BTRFS info (device loop6): max_inline set to 0 [ 209.524250][ T983] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.681220][ T983] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 209.707139][ T983] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.707171][ T983] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.707192][ T983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 62, changing to 9 [ 209.707214][ T983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33721, setting to 1024 [ 209.707251][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.730015][ T6149] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.804789][ T8581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 209.804883][ T8581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.339416][ T5619] Bluetooth: hci6: Can't claim NULL iso interface [ 210.340418][ T5619] Bluetooth: hci6: Failed to get device id (-71) [ 210.340438][ T5619] Bluetooth: hci6: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 210.437196][ T983] usb 6-1: USB disconnect, device number 7 [ 211.021092][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 211.021174][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 211.021207][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 211.021239][ T5619] Bluetooth: hci5: command 0x0405 tx timeout [ 211.222799][ T8628] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 211.356497][ T8632] loop5: detected capacity change from 0 to 128 [ 211.474707][ T8633] loop2: detected capacity change from 0 to 764 [ 211.509149][ T8632] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.531799][ T8632] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.369184][ T5617] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.896650][ T8660] loop2: detected capacity change from 0 to 512 [ 212.970093][ T8660] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1007: corrupted in-inode xattr: invalid ea_ino [ 212.970126][ T8660] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.972988][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 212.973007][ C0] EXT4-fs (loop2): initial error at time 1791381752: ext4_iget_extra_inode:5210: inode 15 [ 212.973034][ C0] EXT4-fs (loop2): last error at time 1791381752: ext4_iget_extra_inode:5210: inode 15 [ 212.990528][ T8660] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1007: couldn't read orphan inode 15 (err -117) [ 212.990557][ T8660] loop2: lost filesystem error report for type 5 error -117 [ 213.091155][ T8660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.118154][ T8664] loop6: detected capacity change from 0 to 256 [ 213.226977][ T8664] exFAT-fs (loop6): error, no upcase table entry. Please run fsck [ 213.226997][ T8664] exFAT-fs (loop6): Filesystem has been set read-only [ 213.227261][ T8664] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 213.411188][ T8668] loop3: detected capacity change from 0 to 1024 [ 213.412049][ T8668] EXT4-fs: Ignoring removed bh option [ 213.451964][ T8668] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 213.529084][ T8668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.618538][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.948831][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.099337][ T8684] loop1: detected capacity change from 0 to 512 [ 214.121652][ T8684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.166850][ T8684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1014: invalid indirect mapped block 9 (level 0) [ 214.166883][ T8684] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.172990][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 214.173009][ C0] EXT4-fs (loop1): initial error at time 1791381753: ext4_free_branches:1023: inode 11 [ 214.173037][ C0] EXT4-fs (loop1): last error at time 1791381753: ext4_free_branches:1023: inode 11 [ 214.352280][ T8684] EXT4-fs (loop1): 1 truncate cleaned up [ 214.376337][ T8684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.718374][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.331031][ T8720] loop3: detected capacity change from 0 to 512 [ 215.362130][ T8722] IPVS: nq: FWM 3 0x00000003 - no destination available [ 215.362230][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 215.842679][ T8731] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1030'. [ 216.521424][ T8753] pimreg: entered allmulticast mode [ 216.547449][ T8753] pimreg: left allmulticast mode [ 216.752169][ T8759] loop6: detected capacity change from 0 to 128 [ 216.820188][ T8759] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.836404][ T8759] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.181781][ T6149] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.339280][ T4928] Bluetooth: hci1: unexpected event for opcode 0x204e [ 217.604387][ T8773] loop6: detected capacity change from 0 to 4096 [ 217.620907][ T8773] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 217.727404][ T8773] ntfs3(loop6): ino=19, mi_enum_attr [ 217.727434][ T8773] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 217.732461][ T8773] ntfs3(loop6): ino=1a, mi_enum_attr [ 217.732564][ T8773] ntfs3(loop6): ino=1a, mi_enum_attr [ 217.732579][ T8773] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 217.946542][ T31] audit: type=1800 audit(1791381757.360:45): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1048" name="bus" dev="loop6" ino=24 res=0 errno=0 [ 218.648765][ T8802] loop5: detected capacity change from 0 to 1024 [ 218.716951][ T8802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.800196][ T8809] loop1: detected capacity change from 0 to 512 [ 219.041784][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.147419][ T8809] EXT4-fs (loop1): 1 orphan inode deleted [ 219.169322][ T8809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.169787][ T8809] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.242240][ T3348] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 219.274106][ T3348] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 1 [ 219.838494][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.334392][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1076'. [ 220.422392][ T8839] vxcan0: tx address claim with dest, not broadcast [ 220.525413][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1079'. [ 220.643981][ T8845] loop6: detected capacity change from 0 to 512 [ 220.652531][ T8845] EXT4-fs: Ignoring removed bh option [ 220.689184][ T8845] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 220.693881][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 220.719679][ T8845] EXT4-fs (loop6): 1 truncate cleaned up [ 220.731955][ T8845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.787728][ T8845] EXT4-fs (loop6): shut down requested (2) [ 220.863128][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 220.865762][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 220.868883][ T9] usb 3-1: config 0 has no interfaces? [ 220.895504][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.895529][ T9] usb 3-1: Product: syz [ 220.895543][ T9] usb 3-1: Manufacturer: syz [ 220.895556][ T9] usb 3-1: SerialNumber: syz [ 220.950171][ T8850] loop4: detected capacity change from 0 to 512 [ 220.982630][ T9] usb 3-1: config 0 descriptor?? [ 220.998021][ T8850] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 220.998130][ T8850] System zones: 0-2, 18-18, 34-35 [ 221.088585][ T6149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.091926][ T8850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.092012][ T8850] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.244799][ T9] usb 3-1: USB disconnect, device number 7 [ 221.438324][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.612347][ T8834] loop3: detected capacity change from 0 to 32768 [ 221.737122][ T8863] loop4: detected capacity change from 0 to 512 [ 221.766544][ T8834] jfs_rmdir: dtDelete returned -2 [ 221.810906][ T8863] EXT4-fs (loop4): 1 truncate cleaned up [ 221.815510][ T8863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.901630][ T31] audit: type=1800 audit(1791381761.310:46): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1087" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 221.925308][ T8866] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1088'. [ 221.925355][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 222.012407][ T119] ERROR: (device loop3): diUpdatePMap: the inode is not allocated in the working map [ 222.012407][ T119] [ 222.028500][ T119] ERROR: (device loop3): remounting filesystem as read-only [ 222.081654][ T8870] netlink: 'syz.6.1090': attribute type 3 has an invalid length. [ 222.081675][ T8870] netlink: 'syz.6.1090': attribute type 1 has an invalid length. [ 222.081687][ T8870] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1090'. [ 222.195152][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.624257][ T8878] loop5: detected capacity change from 0 to 4096 [ 222.685347][ T8878] NILFS (loop5): invalid segment: Checksum error in segment payload [ 222.685372][ T8878] NILFS (loop5): trying rollback from an earlier position [ 222.782288][ T8878] NILFS (loop5): recovery complete [ 222.793345][ T8885] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.921137][ T8878] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 4096 [ 222.921160][ T8878] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=12) [ 222.946326][ T8884] loop2: detected capacity change from 0 to 4096 [ 222.947296][ T8884] EXT4-fs: Ignoring removed nobh option [ 222.969770][ T8884] EXT4-fs: Ignoring removed bh option [ 222.994935][ T8884] EXT4-fs (loop2): Test dummy encryption mode enabled [ 223.040379][ T8884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.225627][ T8878] Remounting filesystem read-only [ 223.225674][ T8878] NILFS (loop5): error -5 cleaning segments [ 223.294981][ T8878] NILFS (loop5): error -30 cleaning segments [ 223.314756][ T8884] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 223.517657][ T5617] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 223.649509][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.888476][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.994979][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.319768][ T8916] loop3: detected capacity change from 0 to 128 [ 224.395394][ T8916] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 224.395440][ T8916] hpfs: filesystem error: improperly stopped [ 224.395469][ T8916] hpfs: You really don't want any checks? You are crazy... [ 224.395742][ T8916] hpfs: hpfs_map_sector(): read error [ 224.395757][ T8916] hpfs: code page support is disabled [ 224.395837][ T8916] hpfs: hpfs_map_4sectors(): unaligned read [ 224.395890][ T8916] hpfs: hpfs_map_4sectors(): unaligned read [ 224.395898][ T8916] hpfs: filesystem error: unable to find root dir [ 224.518025][ T8916] hpfs: hpfs_map_4sectors(): unaligned read [ 224.569142][ T8916] hpfs: hpfs_map_sector(): read error [ 224.946143][ T8926] loop6: detected capacity change from 0 to 512 [ 224.982216][ T8926] FAT-fs (loop6): Directory bread(block 2080) failed [ 224.982247][ T8926] FAT-fs (loop6): Directory bread(block 2081) failed [ 224.982267][ T8926] FAT-fs (loop6): Directory bread(block 2082) failed [ 224.982287][ T8926] FAT-fs (loop6): Directory bread(block 2083) failed [ 224.982306][ T8926] FAT-fs (loop6): Directory bread(block 2084) failed [ 224.982326][ T8926] FAT-fs (loop6): Directory bread(block 2085) failed [ 224.982345][ T8926] FAT-fs (loop6): Directory bread(block 2086) failed [ 224.982365][ T8926] FAT-fs (loop6): Directory bread(block 2087) failed [ 225.182572][ T8926] gfs2: path_lookup on c::: returned error -2 [ 225.822045][ T8950] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 225.950676][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 226.104079][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 226.109197][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 226.110753][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.110780][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.110800][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.110827][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.208602][ T9] usb 2-1: config 0 descriptor?? [ 226.365208][ T5755] Process accounting resumed [ 226.521861][ T8956] Process accounting resumed [ 226.592351][ T8962] loop6: detected capacity change from 0 to 1024 [ 226.727344][ T9] hid_parser_main: 45 callbacks suppressed [ 226.727367][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727387][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727405][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727424][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727442][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727460][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727479][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727497][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727515][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.727533][ T9] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 226.814055][ T9] cougar 0003:060B:500A.000C: unexpected long global item [ 226.814765][ T9] cougar 0003:060B:500A.000C: parse failed [ 226.814862][ T9] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 226.878660][ T8962] hfsplus: invalid length 1280 has been corrected to 255 [ 226.956412][ T5755] usb 2-1: USB disconnect, device number 6 [ 227.440344][ T8973] loop2: detected capacity change from 0 to 4096 [ 227.588114][ T8979] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.670663][ T8973] NILFS (loop2): error -22 preparing GC: cannot mark copying blocks dirty [ 227.895582][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 228.029986][ T8988] loop5: detected capacity change from 0 to 512 [ 228.032149][ T31] audit: type=1400 audit(1791381767.440:47): apparmor="STATUS" operation="profile_load" profile="unconfined" name=66226F pid=8982 comm="syz.3.1137" [ 228.134154][ T8988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.134235][ T8988] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.579270][ T4928] Bluetooth: hci3: SCO packet too small [ 228.610357][ T9005] loop1: detected capacity change from 0 to 1024 [ 229.483131][ T9026] input: syz1 as /devices/virtual/input/input16 [ 229.653814][ T5617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.937847][ T9007] loop4: detected capacity change from 0 to 40427 [ 229.938667][ T9007] F2FS-fs: heap/no_heap options were deprecated [ 229.970473][ T9007] F2FS-fs (loop4): build fault injection rate: 19 [ 229.970493][ T9007] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 229.991757][ T9007] F2FS-fs (loop4): invalid crc value [ 230.069910][ T9007] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 230.102386][ T9039] xt_hashlimit: size too large, truncated to 1048576 [ 230.170935][ T9041] C: renamed from lo (while UP) [ 230.230102][ T9041] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.435336][ T9007] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 230.480469][ T9007] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 230.515859][ T9007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.571739][ T4928] Bluetooth: hci5: SCO packet too small [ 230.725891][ T9036] f2fs_ckpt-7:4: attempt to access beyond end of device [ 230.725891][ T9036] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.786483][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: f2fs_ckpt-7:4 Not tainted syzkaller #0 PREEMPT(full) [ 230.786511][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 230.786523][ T9036] Call Trace: [ 230.786531][ T9036] [ 230.786539][ T9036] dump_stack_lvl+0xe8/0x150 [ 230.786573][ T9036] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 230.786608][ T9036] f2fs_write_end_bio+0x1211/0x16e0 [ 230.786634][ T9036] ? blkg_put+0x22/0x240 [ 230.786677][ T9036] __submit_merged_bio+0x258/0x6a0 [ 230.786705][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.786733][ T9036] ? rcu_is_watching+0x16/0xb0 [ 230.786768][ T9036] __submit_merged_write_cond+0x3c9/0x4e0 [ 230.786807][ T9036] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 230.786850][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.786880][ T9036] f2fs_write_data_pages+0x2a27/0x36f0 [ 230.786900][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.786922][ T9036] ? __lock_acquire+0x747/0x2de0 [ 230.786973][ T9036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 230.787005][ T9036] ? arch_stack_walk+0x11b/0x150 [ 230.787053][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787077][ T9036] ? add_lock_to_list+0xc7/0x100 [ 230.787104][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787126][ T9036] ? __lock_acquire+0x1511/0x2de0 [ 230.787170][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787192][ T9036] ? do_raw_spin_lock+0x12b/0x2f0 [ 230.787225][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787250][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787271][ T9036] ? do_raw_spin_unlock+0xf5/0x200 [ 230.787300][ T9036] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 230.787322][ T9036] do_writepages+0x338/0x560 [ 230.787347][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787370][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787396][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787417][ T9036] ? do_raw_spin_unlock+0xf5/0x200 [ 230.787450][ T9036] filemap_fdatawrite+0x1e9/0x2f0 [ 230.787476][ T9036] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 230.787536][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787560][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787585][ T9036] ? do_raw_spin_unlock+0xf5/0x200 [ 230.787618][ T9036] f2fs_sync_dirty_inodes+0x30e/0x830 [ 230.787655][ T9036] f2fs_write_checkpoint+0xa3d/0x2710 [ 230.787708][ T9036] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 230.787730][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787790][ T9036] ? __pfx_down_write+0x10/0x10 [ 230.787812][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787837][ T9036] ? rcu_is_watching+0x16/0xb0 [ 230.787862][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787888][ T9036] __checkpoint_and_complete_reqs+0x135/0x480 [ 230.787923][ T9036] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 230.787962][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.787986][ T9036] ? schedule+0x90/0x2b0 [ 230.788021][ T9036] issue_checkpoint_thread+0xd5/0x270 [ 230.788044][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.788069][ T9036] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 230.788092][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.788115][ T9036] ? __pfx_autoremove_wake_function+0x10/0x10 [ 230.788142][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.788164][ T9036] ? __kthread_parkme+0x71/0x1f0 [ 230.788193][ T9036] ? __kthread_parkme+0x199/0x1f0 [ 230.788226][ T9036] kthread+0x38b/0x480 [ 230.788246][ T9036] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 230.788268][ T9036] ? __pfx_kthread+0x10/0x10 [ 230.788289][ T9036] ret_from_fork+0x514/0xb70 [ 230.788310][ T9036] ? __pfx_ret_from_fork+0x10/0x10 [ 230.788328][ T9036] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.788349][ T9036] ? __switch_to+0xc89/0x1420 [ 230.788379][ T9036] ? __pfx_kthread+0x10/0x10 [ 230.788399][ T9036] ret_from_fork_asm+0x1a/0x30 [ 230.788445][ T9036] [ 230.954003][ T9036] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 231.592635][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 231.892780][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1170'. [ 232.643734][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.803327][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 232.816769][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.816814][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.816834][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.816855][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.816891][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.947308][ T9070] mmap: syz.3.1173 (9070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 233.621269][ T9097] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 233.621293][ T9097] bond0: option slaves: unable to set because the bond device is up [ 233.656427][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 233.656522][ T4928] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 233.782916][ T9] gud 3-1:1.0: Failed to get connectors (error=-71) [ 233.783314][ T9] gud 3-1:1.0: probe with driver gud failed with error -71 [ 233.922195][ T9103] loop3: detected capacity change from 0 to 128 [ 233.946633][ T9103] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 233.963818][ T9103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.973241][ T9] usb 3-1: USB disconnect, device number 8 [ 234.450959][ T9108] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1189'. [ 234.716796][ T9113] jffs2: notice: (9113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.946382][ T9119] program syz.1.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.339189][ T9124] loop1: detected capacity change from 0 to 512 [ 235.427598][ T9124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.427690][ T9124] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.922362][ T9133] loop6: detected capacity change from 0 to 1 [ 235.967515][ T9133] Dev loop6: unable to read RDB block 1 [ 235.967546][ T9133] loop6: unable to read partition table [ 235.967705][ T9133] loop6: partition table beyond EOD, truncated [ 235.967734][ T9133] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 236.010429][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.825647][ C0] sched: DL replenish lagged too much [ 255.540636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.551264][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.685635][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 317.277471][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.351220][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.788971][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.799248][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.352873][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 386.359837][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9141/1:b..l P5617/1:b..l P9136/1:b..l [ 386.370014][ C0] rcu: (detected by 0, t=10502 jiffies, g=44741, q=690104 ncpus=1) [ 386.377975][ C0] task:syz.6.1200 state:R running task stack:26480 pid:9136 tgid:9134 ppid:6149 task_flags:0x40054c flags:0x00080000 [ 386.391467][ C0] Call Trace: [ 386.394731][ C0] [ 386.397655][ C0] __schedule+0x17db/0x58f0 [ 386.402173][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.407854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.413474][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.418492][ C0] ? __pfx___schedule+0x10/0x10 [ 386.423348][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 386.428707][ C0] preempt_schedule_common+0x7f/0xd0 [ 386.433987][ C0] preempt_schedule_thunk+0x16/0x40 [ 386.439176][ C0] _raw_spin_unlock+0x41/0x50 [ 386.443843][ C0] __zap_vma_range+0x40e1/0x4f80 [ 386.448810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.454467][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 386.459751][ C0] ? mas_find+0x6d6/0xcb0 [ 386.464075][ C0] unmap_vmas+0x390/0x550 [ 386.468392][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.474021][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 386.478855][ C0] ? mas_next_slot+0xc91/0xd70 [ 386.483633][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.489253][ C0] exit_mmap+0x293/0x9f0 [ 386.493488][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 386.498257][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 386.503532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.509151][ C0] ? kmem_cache_free+0x182/0x650 [ 386.514075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.519690][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 386.524796][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.530420][ C0] ? __khugepaged_exit+0x33e/0x440 [ 386.535524][ C0] __mmput+0x118/0x420 [ 386.539585][ C0] exit_mm+0x18e/0x240 [ 386.543641][ C0] do_exit+0x6cd/0x2360 [ 386.547798][ C0] ? __pfx_do_exit+0x10/0x10 [ 386.552381][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.557427][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.563058][ C0] do_group_exit+0x22d/0x2f0 [ 386.567642][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.572843][ C0] get_signal+0x121b/0x12c0 [ 386.577362][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 386.582934][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.589087][ C0] ? ksys_write+0x242/0x270 [ 386.593584][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 386.598941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.604585][ C0] ? rcu_is_watching+0x16/0xb0 [ 386.609345][ C0] do_syscall_64+0x328/0x520 [ 386.613929][ C0] ? trace_irq_disable+0x3b/0x140 [ 386.618937][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.624996][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.630882][ C0] RIP: 0033:0x7f6deb79e199 [ 386.635283][ C0] RSP: 002b:00007f6dec6090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 386.643680][ C0] RAX: fffffffffffffe00 RBX: 00007f6deba25fa8 RCX: 00007f6deb79e199 [ 386.651636][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6deba25fa8 [ 386.659623][ C0] RBP: 00007f6deba25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 386.667576][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.675529][ C0] R13: 00007f6deba26038 R14: 00007ffe9b5dcbb0 R15: 00007ffe9b5dcc98 [ 386.683510][ C0] [ 386.686512][ C0] task:syz-executor state:R running task stack:22016 pid:5617 tgid:5617 ppid:5614 task_flags:0x400140 flags:0x00080000 [ 386.699992][ C0] Call Trace: [ 386.703257][ C0] [ 386.706177][ C0] __schedule+0x17db/0x58f0 [ 386.710684][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.715723][ C0] ? lock_acquire+0x115/0x350 [ 386.720396][ C0] ? __lock_acquire+0x747/0x2de0 [ 386.725329][ C0] ? __pfx___schedule+0x10/0x10 [ 386.730187][ C0] preempt_schedule_irq+0x4b/0x90 [ 386.735205][ C0] irqentry_exit+0x14f/0x920 [ 386.739790][ C0] ? trace_irq_disable+0x3b/0x140 [ 386.744812][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.750817][ C0] RIP: 0010:memset+0xf/0x30 [ 386.755373][ C0] Code: 44 88 1f e9 6e c3 28 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 42 c3 28 f5 90 90 90 90 90 90 90 90 90 90 90 90 [ 386.775235][ C0] RSP: 0018:ffffc90003d1f138 EFLAGS: 00000202 [ 386.781307][ C0] RAX: ffffc90003d1f600 RBX: ffffc90003d1f238 RCX: 000000000000000f [ 386.789271][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003d1f239 [ 386.797233][ C0] RBP: 1ffffffff22415f9 R08: ffffc90003d1f247 R09: ffffc90003d1f238 [ 386.805191][ C0] R10: dffffc0000000000 R11: fffff520007a3e49 R12: dffffc0000000000 [ 386.813151][ C0] R13: ffffffff9120afc8 R14: ffffc90003d1f1e8 R15: ffffc90003d1f230 [ 386.821133][ C0] unwind_next_frame+0xd04/0x2550 [ 386.826164][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 386.831185][ C0] ? unwind_next_frame+0x8f/0x2550 [ 386.836300][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.842443][ C0] arch_stack_walk+0x11b/0x150 [ 386.847202][ C0] ? __kmalloc_noprof+0x307/0x720 [ 386.852221][ C0] stack_trace_save+0xa9/0x100 [ 386.856972][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 386.862339][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.867964][ C0] save_stack+0x122/0x230 [ 386.872290][ C0] ? __pfx_save_stack+0x10/0x10 [ 386.877130][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 386.882403][ C0] ? __slab_free+0x274/0x2c0 [ 386.886980][ C0] ? qlist_free_all+0x99/0x100 [ 386.891733][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 386.897381][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 386.902427][ C0] ? page_ext_put+0x97/0xc0 [ 386.906944][ C0] __reset_page_owner+0x71/0x1f0 [ 386.911880][ C0] __free_frozen_pages+0xc93/0xd90 [ 386.916987][ C0] __slab_free+0x274/0x2c0 [ 386.921389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.927020][ C0] qlist_free_all+0x99/0x100 [ 386.931599][ C0] kasan_quarantine_reduce+0x148/0x160 [ 386.937048][ C0] __kasan_slab_alloc+0x22/0x80 [ 386.941888][ C0] __kmalloc_noprof+0x307/0x720 [ 386.946722][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 386.951728][ C0] ? tomoyo_encode+0x2ad/0x570 [ 386.956487][ C0] ? tomoyo_encode+0x2ad/0x570 [ 386.961255][ C0] tomoyo_encode+0x2ad/0x570 [ 386.965847][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 386.971517][ C0] tomoyo_check_open_permission+0x229/0x470 [ 386.977403][ C0] ? tomoyo_check_open_permission+0x1d3/0x470 [ 386.983456][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 386.989881][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 386.995504][ C0] ? __asan_memset+0x22/0x50 [ 387.000101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.005718][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.011338][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.016953][ C0] ? tomoyo_file_open+0x163/0x220 [ 387.021963][ C0] security_file_open+0xa9/0x240 [ 387.026888][ C0] do_dentry_open+0x4a0/0x1380 [ 387.031650][ C0] vfs_open+0x3b/0x340 [ 387.035707][ C0] ? path_openat+0x1428/0x1d60 [ 387.040487][ C0] path_openat+0x1443/0x1d60 [ 387.045081][ C0] do_file_open+0x23e/0x4a0 [ 387.049606][ C0] ? __pfx_do_file_open+0x10/0x10 [ 387.054637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.060277][ C0] ? _raw_spin_unlock+0x28/0x50 [ 387.065116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.070732][ C0] ? alloc_fd+0x651/0x6c0 [ 387.075068][ C0] do_sys_openat2+0x115/0x200 [ 387.079752][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.084945][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 387.090662][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 387.096728][ C0] __x64_sys_openat+0x138/0x170 [ 387.101582][ C0] do_syscall_64+0x166/0x520 [ 387.106176][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.112236][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.118116][ C0] RIP: 0033:0x7fb14df9d4bc [ 387.122512][ C0] RSP: 002b:00007ffee90e6900 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 387.130921][ C0] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007fb14df9d4bc [ 387.138873][ C0] RDX: 0000000000090800 RSI: 00007fb14e035215 RDI: 00000000ffffff9c [ 387.146823][ C0] RBP: 00007ffee90e69ac R08: 0000000000000000 R09: 0000000000000000 [ 387.154801][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000d3 [ 387.162790][ C0] R13: 0000000000000000 R14: 0000000000039b32 R15: 00007ffee90e6a00 [ 387.170774][ C0] [ 387.173779][ C0] task:syz.1.1202 state:R running task stack:24552 pid:9141 tgid:9140 ppid:5616 task_flags:0x40044c flags:0x00080002 [ 387.187261][ C0] Call Trace: [ 387.190519][ C0] [ 387.193435][ C0] __schedule+0x17db/0x58f0 [ 387.197948][ C0] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 387.203934][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.209562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.215182][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.220197][ C0] ? __pfx___schedule+0x10/0x10 [ 387.225048][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 387.230413][ C0] preempt_schedule_common+0x7f/0xd0 [ 387.235691][ C0] preempt_schedule_thunk+0x16/0x40 [ 387.240881][ C0] _raw_spin_unlock+0x41/0x50 [ 387.245545][ C0] __zap_vma_range+0x40e1/0x4f80 [ 387.250514][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 387.255790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.261408][ C0] ? lock_acquire+0x115/0x350 [ 387.266074][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.271695][ C0] ? unmap_vmas+0x1b9/0x550 [ 387.276186][ C0] unmap_vmas+0x390/0x550 [ 387.280501][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.286125][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 387.290984][ C0] ? mas_next_slot+0xc91/0xd70 [ 387.295758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.301379][ C0] exit_mmap+0x293/0x9f0 [ 387.305606][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 387.310377][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 387.315654][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.321271][ C0] ? kmem_cache_free+0x182/0x650 [ 387.326193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.331813][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 387.336921][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.342537][ C0] ? __khugepaged_exit+0x33e/0x440 [ 387.347660][ C0] __mmput+0x118/0x420 [ 387.351730][ C0] exit_mm+0x18e/0x240 [ 387.355796][ C0] do_exit+0x6cd/0x2360 [ 387.359947][ C0] ? __lock_acquire+0x747/0x2de0 [ 387.364874][ C0] ? __pfx_do_exit+0x10/0x10 [ 387.369458][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.374484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.380112][ C0] do_group_exit+0x22d/0x2f0 [ 387.384688][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.389881][ C0] get_signal+0x121b/0x12c0 [ 387.394426][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 387.399970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.405588][ C0] ? fput+0xa0/0xd0 [ 387.409390][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 387.415535][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 387.420670][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 387.426030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.431650][ C0] ? rcu_is_watching+0x16/0xb0 [ 387.436411][ C0] do_syscall_64+0x328/0x520 [ 387.440996][ C0] ? trace_irq_disable+0x3b/0x140 [ 387.446006][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.452129][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.458042][ C0] RIP: 0033:0x7f14f719e199 [ 387.462448][ C0] RSP: 002b:00007f14f80f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.470859][ C0] RAX: ffffffffffffff8d RBX: 00007f14f7425fa0 RCX: 00007f14f719e199 [ 387.478818][ C0] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 0000000000000003 [ 387.486770][ C0] RBP: 00007f14f72358e0 R08: 0000000000000000 R09: 0000000000000000 [ 387.494728][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.502714][ C0] R13: 00007f14f7426038 R14: 00007f14f7425fa0 R15: 00007fff2a641f98 [ 387.510690][ C0] [ 387.513723][ C0] rcu: rcu_preempt kthread starved for 9150 jiffies! g44741 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 387.524638][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 387.534595][ C0] rcu: RCU grace-period kthread stack dump: [ 387.540468][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 387.553953][ C0] Call Trace: [ 387.557214][ C0] [ 387.560129][ C0] __schedule+0x17db/0x58f0 [ 387.564627][ C0] ? __lock_acquire+0x747/0x2de0 [ 387.569565][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 387.574695][ C0] ? __pfx___schedule+0x10/0x10 [ 387.579532][ C0] ? lock_acquire+0x115/0x350 [ 387.584200][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.589825][ C0] ? schedule+0x90/0x2b0 [ 387.594083][ C0] schedule+0x164/0x2b0 [ 387.598233][ C0] schedule_timeout+0x152/0x2c0 [ 387.603069][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 387.608427][ C0] ? __pfx_process_timeout+0x10/0x10 [ 387.613695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.619312][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 387.625107][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.630725][ C0] ? prepare_to_swait_event+0x322/0x350 [ 387.636287][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 387.641129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.646751][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.652371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.657991][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 387.664151][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 387.669680][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 387.674877][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 387.679454][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.684637][ C0] ? __kthread_parkme+0x71/0x1f0 [ 387.689566][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.695181][ C0] ? __kthread_parkme+0x199/0x1f0 [ 387.700201][ C0] kthread+0x38b/0x480 [ 387.704270][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.709448][ C0] ? __pfx_kthread+0x10/0x10 [ 387.714021][ C0] ret_from_fork+0x514/0xb70 [ 387.718595][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 387.723686][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.729327][ C0] ? __switch_to+0xc89/0x1420 [ 387.734034][ C0] ? __pfx_kthread+0x10/0x10 [ 387.738612][ C0] ret_from_fork_asm+0x1a/0x30 [ 387.743385][ C0] [ 387.746384][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 387.752686][ C0] CPU: 0 UID: 0 PID: 3218 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 387.762381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 387.772422][ C0] Workqueue: bat_events batadv_tt_purge [ 387.777961][ C0] RIP: 0010:rcu_is_watching+0x56/0xb0 [ 387.783322][ C0] Code: a7 6e 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 7b 87 8b 00 48 c7 c3 18 da 96 93 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d 07 03 e9 11 74 11 83 [ 387.802913][ C0] RSP: 0018:ffffc90000006ee8 EFLAGS: 00000212 [ 387.809010][ C0] RAX: 1ffff110170c6743 RBX: ffff8880b8633a18 RCX: 0000000000000102 [ 387.816964][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 387.824945][ C0] RBP: 1ffff92000000e10 R08: 0000000000000000 R09: 0000000000000000 [ 387.832898][ C0] R10: dffffc0000000000 R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 387.840852][ C0] R13: 0000000000000002 R14: ffffffff8e6ea7d0 R15: dffffc0000000000 [ 387.848833][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 387.857745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.864308][ C0] CR2: 00007ff4962104b3 CR3: 000000000eb48000 CR4: 0000000000350ef0 [ 387.872266][ C0] Call Trace: [ 387.875526][ C0] [ 387.878442][ C0] lock_acquire+0x58/0x350 [ 387.882871][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.888516][ C0] ? unwind_next_frame+0x8f/0x2550 [ 387.893614][ C0] ? kasan_save_free_info+0x40/0x50 [ 387.898795][ C0] ? unwind_next_frame+0x8f/0x2550 [ 387.903898][ C0] unwind_next_frame+0xac/0x2550 [ 387.908825][ C0] ? unwind_next_frame+0x8f/0x2550 [ 387.913927][ C0] ? kasan_save_track+0x3e/0x80 [ 387.918762][ C0] ? unwind_next_frame+0x8f/0x2550 [ 387.923877][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 387.930033][ C0] arch_stack_walk+0x11b/0x150 [ 387.934789][ C0] ? kasan_save_free_info+0x40/0x50 [ 387.939976][ C0] stack_trace_save+0xa9/0x100 [ 387.944723][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 387.950090][ C0] ? kfree+0x1c5/0x650 [ 387.954143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 387.959762][ C0] ? __lock_acquire+0x747/0x2de0 [ 387.964710][ C0] kasan_save_track+0x3e/0x80 [ 387.969378][ C0] ? kasan_save_track+0x3e/0x80 [ 387.974216][ C0] ? kasan_save_free_info+0x40/0x50 [ 387.979454][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 387.984830][ C0] kasan_save_free_info+0x40/0x50 [ 387.989840][ C0] __kasan_slab_free+0x5c/0x80 [ 387.994602][ C0] kmem_cache_free+0x182/0x650 [ 387.999360][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 388.004557][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 388.010275][ C0] ? nf_ip_checksum+0x13c/0x510 [ 388.015119][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.020741][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 388.025937][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 388.031681][ C0] ? __lock_acquire+0x747/0x2de0 [ 388.036612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.042249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.047896][ C0] nft_do_chain+0x132b/0x1b10 [ 388.052582][ C0] ? lock_acquire+0x115/0x350 [ 388.057253][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.062876][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 388.067905][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 388.073178][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.078793][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.084014][ C0] nft_do_chain_ipv4+0x195/0x290 [ 388.088945][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 388.093725][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 388.099180][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.104799][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 388.110085][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.115712][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 388.121171][ C0] nf_hook_slow+0xc5/0x220 [ 388.125610][ C0] NF_HOOK+0x21f/0x3c0 [ 388.129707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.135352][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 388.141336][ C0] ? NF_HOOK+0x9e/0x3c0 [ 388.145499][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 388.150085][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 388.156059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.161686][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.167315][ C0] ? ip_local_deliver+0x113/0x190 [ 388.172344][ C0] NF_HOOK+0x336/0x3c0 [ 388.176413][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 388.181522][ C0] ? NF_HOOK+0x9e/0x3c0 [ 388.185675][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 388.190266][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 388.195397][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.201018][ C0] ? ip_rcv_core+0x88d/0xd50 [ 388.205609][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 388.210110][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 388.214612][ C0] process_backlog+0xa6b/0x18b0 [ 388.219463][ C0] ? process_backlog+0x3de/0x18b0 [ 388.224495][ C0] __napi_poll+0xaa/0x330 [ 388.228852][ C0] net_rx_action+0x61d/0xf50 [ 388.233452][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 388.238576][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 388.243598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.249232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.254862][ C0] handle_softirqs+0x226/0x860 [ 388.259798][ C0] ? do_softirq+0x77/0xd0 [ 388.264129][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 388.269068][ C0] do_softirq+0x77/0xd0 [ 388.273228][ C0] [ 388.276142][ C0] [ 388.279055][ C0] __local_bh_enable_ip+0x100/0x140 [ 388.284250][ C0] batadv_tt_purge+0x4ae/0xa10 [ 388.289015][ C0] ? process_scheduled_works+0x97a/0x1630 [ 388.294755][ C0] process_scheduled_works+0xc3d/0x1630 [ 388.300319][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.306288][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.311316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.316955][ C0] ? assign_work+0x3af/0x5d0 [ 388.321547][ C0] rescuer_thread+0x7c5/0x10e0 [ 388.326402][ C0] ? rescuer_thread+0xb8/0x10e0 [ 388.331271][ C0] kthread+0x38b/0x480 [ 388.335322][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 388.340519][ C0] ? __pfx_kthread+0x10/0x10 [ 388.345097][ C0] ret_from_fork+0x514/0xb70 [ 388.349684][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 388.354812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 388.360435][ C0] ? __switch_to+0xc89/0x1420 [ 388.365112][ C0] ? __pfx_kthread+0x10/0x10 [ 388.369693][ C0] ret_from_fork_asm+0x1a/0x30 [ 388.374477][ C0]