last executing test programs: 5.907635305s ago: executing program 0 (id=2220): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0xff1, 0x2) 5.555856826s ago: executing program 0 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="002000000a810000280012800a000100767863616e0000001800cc801400010000000000", @ANYRES32, @ANYBLOB="040000000600000008001c00", @ANYRES32=r1], 0x50}}, 0xc044) 5.290820979s ago: executing program 0 (id=2228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 5.234947163s ago: executing program 0 (id=2231): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 3.517296047s ago: executing program 5 (id=2251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.473387636s ago: executing program 4 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xda9}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 3.472243712s ago: executing program 0 (id=2253): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 3.271952191s ago: executing program 2 (id=2254): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.205909831s ago: executing program 5 (id=2255): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.155319102s ago: executing program 4 (id=2256): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x2b, 0x0, [0xffffeffb, 0x874, 0x101, 0x7, 0x10010, 0x1, 0x7, 0x7, 0x1, 0x9, 0xc, 0x0, 0xfffffffe, 0x8, 0x10001, 0xffff]}], r1, 0x1, 0x1, 0x48}}, 0x20) 2.98579804s ago: executing program 2 (id=2257): unshare(0x22020400) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 2.936012846s ago: executing program 4 (id=2258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) 2.867896233s ago: executing program 4 (id=2259): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 2.669186662s ago: executing program 2 (id=2261): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 2.631946913s ago: executing program 5 (id=2262): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x87, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB=' $(\x00\x00\x00(\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.481424936s ago: executing program 0 (id=2263): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000340)='3', 0x1}], 0x1) 2.307365241s ago: executing program 2 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000829000000180001801400020076657468305f746f5f7465616d"], 0x2c}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) 2.230880196s ago: executing program 1 (id=2266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 2.141035907s ago: executing program 2 (id=2267): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000340)={0x0, 0x2, @status={[0x1, 0x0, 0x3, 0x3, 0xc4b, 0x7]}, [0x800, 0x5, 0x5, 0x3, 0x2, 0xfffffffffffffffb, 0xcd, 0xfffffffffffffffb, 0x2, 0x7, 0x7, 0x1, 0x1, 0x8000, 0x74, 0x7, 0x2, 0x6, 0x1, 0x60a, 0x5, 0x2, 0x7, 0x7, 0x101, 0x1, 0xffff, 0xfbb, 0x80008, 0x600000000000000, 0x2, 0x2, 0x6, 0x1, 0x80, 0xfffffffffffffca9, 0x2, 0x9, 0x9, 0x6, 0x7, 0x7ff, 0x464, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0x1, 0x1, 0x8001, 0xffff, 0x1, 0x7, 0x6165, 0xffffffffffffffff, 0xd5, 0x7, 0x7, 0xffffffffffff814e, 0x5, 0x2, 0x6, 0x8]}) 2.118826663s ago: executing program 1 (id=2268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f00001100020000140002000000200000", 0x17) 1.944763748s ago: executing program 1 (id=2269): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000000c0)={0x8, 0x3, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x59565955}) 1.775954427s ago: executing program 3 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x18, r1, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x40000000) 1.705352751s ago: executing program 1 (id=2271): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)=""/159, 0x9f) 1.585251089s ago: executing program 1 (id=2272): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) 1.566046672s ago: executing program 3 (id=2273): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x100, 0x2) pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x7) 1.345734529s ago: executing program 4 (id=2274): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 1.276284061s ago: executing program 3 (id=2275): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000000)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00') mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 1.146581213s ago: executing program 1 (id=2276): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="636f6d6d69743d30303030303030303030303030303030303030302c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c616c6c6f633d30303030303030303030303030303036353533362c636f686572656e63793d66756c6c2c61636c2c6c6f63616c666c6f636b732c008d14cfbafabecbadbe0cfb4e630fd98c220e63fdc182592677dcbb86"], 0x2, 0x442c, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff}) 1.145954908s ago: executing program 4 (id=2277): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)='Lj&\'', 0x4}], 0x2, &(0x7f0000006800)=ANY=[], 0x178}}], 0x1, 0x0) 1.024862152s ago: executing program 3 (id=2278): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES16], 0xfe, 0x1508, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) statx(r0, &(0x7f00000047c0)='./file2\x00', 0x100, 0x883e4c0c6db56ec3, 0x0) 611.672209ms ago: executing program 5 (id=2279): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 475.814966ms ago: executing program 3 (id=2280): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@dmode}, {@session={'session', 0x3d, 0xd}}, {@cruft}, {@map_acorn}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@showassoc}, {@map_normal}, {@nocompress}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x81, 0xa4f, &(0x7f0000001500)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 429.603265ms ago: executing program 2 (id=2281): sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)={0x14, 0x0, 0x605, 0x70bd25, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x400c020}, 0x200050c4) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 294.352441ms ago: executing program 5 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)={0x34, r1, 0xf03, 0x0, 0x25dfdbff, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 50.743758ms ago: executing program 3 (id=2283): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x96d5, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000009740)='./file0\x00', 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000200)={0x8, 0x100, 0x40, 0x100}) 0s ago: executing program 5 (id=2284): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): T5628] dump_stack_lvl+0xe8/0x150 [ 219.616231][ T5628] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 219.616268][ T5628] f2fs_write_end_io+0x1215/0x16f0 [ 219.616307][ T5628] ? blkg_put+0x22/0x240 [ 219.616352][ T5628] __submit_merged_bio+0x258/0x6a0 [ 219.616381][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.616411][ T5628] ? rcu_is_watching+0x16/0xb0 [ 219.616450][ T5628] __submit_merged_write_cond+0x3c9/0x4e0 [ 219.616491][ T5628] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 219.616536][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.616576][ T5628] f2fs_write_data_pages+0x2a27/0x36f0 [ 219.616610][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.616640][ T5628] ? __lock_acquire+0x6df/0x2e50 [ 219.616704][ T5628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 219.616737][ T5628] ? is_bpf_text_address+0x26/0x2b0 [ 219.616790][ T5628] ? arch_stack_walk+0xfb/0x150 [ 219.616856][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.616886][ T5628] ? add_lock_to_list+0xc7/0x100 [ 219.616921][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.616950][ T5628] ? __lock_acquire+0x14b9/0x2e50 [ 219.617007][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617037][ T5628] ? do_raw_spin_lock+0x12b/0x2f0 [ 219.617079][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617113][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617142][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 219.617179][ T5628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 219.617213][ T5628] do_writepages+0x338/0x560 [ 219.617256][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617288][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617322][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617350][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 219.617388][ T5628] filemap_fdatawrite+0x1e9/0x2f0 [ 219.617418][ T5628] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 219.617485][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617517][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617550][ T5628] ? do_raw_spin_unlock+0xf5/0x200 [ 219.617589][ T5628] f2fs_sync_dirty_inodes+0x30e/0x830 [ 219.617643][ T5628] f2fs_write_checkpoint+0xa3d/0x2710 [ 219.617718][ T5628] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 219.617807][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.617836][ T5628] ? kfree+0x1c5/0x650 [ 219.617871][ T5628] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 219.617920][ T5628] kill_f2fs_super+0x2dd/0x700 [ 219.617968][ T5628] ? __pfx_kill_f2fs_super+0x10/0x10 [ 219.618017][ T5628] ? call_rcu+0x64d/0x8b0 [ 219.618048][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.618077][ T5628] ? lockdep_hardirqs_on+0x7b/0x110 [ 219.618111][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.618158][ T5628] deactivate_locked_super+0xbc/0x110 [ 219.618195][ T5628] cleanup_mnt+0x3d3/0x460 [ 219.618239][ T5628] task_work_run+0x1d9/0x270 [ 219.618273][ T5628] ? __pfx_task_work_run+0x10/0x10 [ 219.618313][ T5628] exit_to_user_mode_loop+0x204/0x770 [ 219.618340][ T5628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.618369][ T5628] ? rcu_is_watching+0x16/0xb0 [ 219.618405][ T5628] do_syscall_64+0x328/0x520 [ 219.618440][ T5628] ? trace_irq_disable+0x3b/0x140 [ 219.618467][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.618501][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.618527][ T5628] RIP: 0033:0x7f49aa59f397 [ 219.618551][ T5628] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 219.618573][ T5628] RSP: 002b:00007ffd1e733148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 219.618601][ T5628] RAX: 0000000000000000 RBX: 00007f49aa634474 RCX: 00007f49aa59f397 [ 219.618620][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1e733200 [ 219.618637][ T5628] RBP: 00007ffd1e733200 R08: 00007ffd1e734200 R09: 00000000ffffffff [ 219.618656][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1e734290 [ 219.618672][ T5628] R13: 00007f49aa634474 R14: 00000000000358f3 R15: 00007ffd1e7342d0 [ 219.618713][ T5628] [ 219.669188][ T5854] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 219.670210][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.670246][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.670273][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.670363][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.704068][ T5628] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 219.728986][ T5854] usb 1-1: config 0 descriptor?? [ 220.049567][ T8548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.255464][ T5627] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.270005][ T898] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 220.271194][ T898] asix 4-1:127.57: probe with driver asix failed with error -71 [ 220.342119][ T898] usb 4-1: USB disconnect, device number 9 [ 220.441621][ T5854] uclogic 0003:5543:0005.0018: unknown main item tag 0x0 [ 220.449182][ T5854] uclogic 0003:5543:0005.0018: unbalanced collection at end of report description [ 220.459795][ T5854] uclogic 0003:5543:0005.0018: parse failed [ 220.465988][ T5854] uclogic 0003:5543:0005.0018: probe with driver uclogic failed with error -22 [ 220.595918][ T8561] loop2: detected capacity change from 0 to 512 [ 220.610740][ T8561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.637277][ T8561] EXT4-fs (loop2): 1 truncate cleaned up [ 220.669169][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.688676][ T5854] usb 1-1: USB disconnect, device number 10 [ 220.735914][ T8561] EXT4-fs error (device loop2): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.2.1093: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 220.780208][ T8561] EXT4-fs (loop2): Remounting filesystem read-only [ 220.787918][ T8561] EXT4-fs warning (device loop2): ext4_rename_delete:3741: inode #2: comm syz.2.1093: Deleting old file: nlink 5, error=-117 [ 220.894591][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.948121][ T8571] loop1: detected capacity change from 0 to 2048 [ 221.029099][ T8574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.155972][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.315980][ T10] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 221.330369][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.345109][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.345169][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.345227][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.380306][ T10] usb 5-1: config 0 descriptor?? [ 221.849550][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.865269][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.868942][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.868981][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.869013][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.869046][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.869079][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.869112][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.869145][ T10] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x0 [ 221.933848][ T10] gt683r_led 0003:1770:FF00.0019: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 222.094818][ T10] usb 5-1: USB disconnect, device number 7 [ 222.176489][ T5854] gt683r_led 0003:1770:FF00.0019: failed to send set report request: -19 [ 222.320903][ T8601] fido_id[8601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 223.053715][ T8635] loop2: detected capacity change from 0 to 512 [ 223.082023][ T8632] net_ratelimit: 3255 callbacks suppressed [ 223.082116][ T8632] Dead loop on virtual device ip6_vti0 (net 46), fix it urgently! [ 223.156605][ T8635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.172987][ T8635] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.251013][ T8640] loop4: detected capacity change from 0 to 1024 [ 223.277415][ T8640] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 223.428413][ T8645] loop5: detected capacity change from 0 to 4096 [ 223.508086][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.558136][ T8650] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.795013][ T8659] tc_dump_action: action bad kind [ 223.810014][ T8645] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 223.977208][ T898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.139224][ T898] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 224.140656][ T898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.140690][ T898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.140732][ T898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.155474][ T898] usb 4-1: config 0 descriptor?? [ 224.275678][ T8673] CacheFiles: Failed to register: -95 [ 224.372330][ T1105] IPVS: starting estimator thread 0... [ 224.465451][ T8676] IPVS: using max 25 ests per chain, 60000 per kthread [ 224.513450][ T8683] loop4: detected capacity change from 0 to 512 [ 224.548801][ T8684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.566295][ T8684] overlayfs: overlapping lowerdir path [ 224.601525][ T898] playstation 0003:054C:0DF2.001A: reserved main item tag 0xe [ 224.601591][ T898] playstation 0003:054C:0DF2.001A: bogus close delimiter [ 224.606916][ T898] playstation 0003:054C:0DF2.001A: item 0 0 2 10 parsing failed [ 224.607635][ T898] playstation 0003:054C:0DF2.001A: Parse failed [ 224.607707][ T898] playstation 0003:054C:0DF2.001A: probe with driver playstation failed with error -22 [ 224.633283][ T8683] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 224.647458][ T8683] EXT4-fs (loop4): 1 truncate cleaned up [ 224.654546][ T8683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.732757][ T8683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1148: bg 0: block 465: padding at end of block bitmap is not set [ 224.835518][ T898] usb 4-1: USB disconnect, device number 10 [ 224.858663][ T8686] loop2: detected capacity change from 0 to 4096 [ 224.949625][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.002459][ T8685] loop1: detected capacity change from 0 to 32768 [ 225.057325][ T8685] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.151101][ T8685] XFS (loop1): Ending clean mount [ 225.371781][ T5627] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.998459][ T8730] loop0: detected capacity change from 0 to 256 [ 226.034955][ T8730] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.062207][ T8730] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.514654][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 226.864115][ T8762] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.1178'. [ 226.900732][ T8764] loop1: detected capacity change from 0 to 2048 [ 226.909369][ T8764] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 226.964393][ T8764] syz.1.1179: attempt to access beyond end of device [ 226.964393][ T8764] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 226.966688][ T8767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.123159][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1181'. [ 227.347549][ T8742] loop5: detected capacity change from 0 to 32768 [ 227.359517][ T8742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1169 (8742) [ 227.386706][ T8742] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.386762][ T8742] BTRFS info (device loop5): using crc32c checksum algorithm [ 227.484262][ T8742] BTRFS info (device loop5): enabling ssd optimizations [ 227.491565][ T8742] BTRFS info (device loop5): turning on flush-on-commit [ 227.491592][ T8742] BTRFS info (device loop5): enabling free space tree [ 227.491612][ T8742] BTRFS info (device loop5): enabling auto defrag [ 227.491634][ T8742] BTRFS info (device loop5): use lzo compression, level 1 [ 227.491658][ T8742] BTRFS info (device loop5): max_inline set to 4096 [ 227.494418][ T8780] loop3: detected capacity change from 0 to 4096 [ 227.569446][ T8780] NILFS (loop3): invalid segment: Checksum error in segment payload [ 227.569505][ T8780] NILFS (loop3): trying rollback from an earlier position [ 227.624928][ T8780] NILFS (loop3): recovery complete [ 227.637816][ T31] audit: type=1800 audit(1787926360.171:50): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1169" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 227.701267][ T5628] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.720711][ T8803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.821816][ T8780] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 228.204085][ T8818] loop4: detected capacity change from 0 to 8 [ 228.853066][ T8845] loop0: detected capacity change from 0 to 64 [ 228.857482][ T8845] hfs: Unknown parameter ' [ 228.857482][ T8845] ¯' [ 228.884764][ T8841] loop3: detected capacity change from 0 to 512 [ 228.923782][ T8841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 228.923932][ T8841] System zones: 1-12 [ 228.945916][ T8841] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1207: Directory hole found for htree index block 0 [ 228.945979][ T8841] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 228.960693][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 228.960720][ C0] EXT4-fs (loop3): initial error at time 1787926361: dx_probe:791: inode 2 [ 228.960755][ C0] EXT4-fs (loop3): last error at time 1787926361: dx_probe:791: inode 2 [ 228.996211][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.025640][ T8841] EXT4-fs (loop3): Remounting filesystem read-only [ 229.025994][ T8841] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 229.026121][ T8841] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 229.067113][ T8841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.177109][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 229.190106][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.216242][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.224497][ T10] usb 3-1: Product: syz [ 229.228896][ T10] usb 3-1: Manufacturer: syz [ 229.233578][ T10] usb 3-1: SerialNumber: syz [ 229.322120][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.570858][ T8860] loop5: detected capacity change from 0 to 128 [ 229.583289][ T8860] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.626076][ T8860] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.732055][ T10] usb 3-1: cannot create comm data receiver. [ 229.743727][ T10] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -2 [ 229.909109][ T8851] loop4: detected capacity change from 0 to 32768 [ 229.939861][ T5854] usb 3-1: USB disconnect, device number 12 [ 230.032219][ T8870] loop3: detected capacity change from 0 to 4096 [ 230.033070][ T8851] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 230.124679][ T8851] XFS (loop4): Ending clean mount [ 230.185424][ T8881] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.228619][ T8883] loop1: detected capacity change from 0 to 64 [ 230.451818][ T5625] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 230.589867][ T8887] loop0: detected capacity change from 0 to 4096 [ 230.674004][ T8887] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 230.793259][ T8887] ntfs3(loop0): ino=1a, mi_enum_attr [ 230.799750][ T8887] ntfs3(loop0): ino=1a, mi_enum_attr [ 230.805222][ T8887] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 230.996159][ T31] audit: type=1800 audit(1787926363.521:51): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1224" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 231.018370][ T8886] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 231.198082][ T31] audit: type=1800 audit(1787926363.721:52): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 231.680320][ T8915] loop3: detected capacity change from 0 to 512 [ 231.705970][ T8915] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.1237: iget: bad i_size value: 12154757448730 [ 231.706033][ T8915] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 231.707204][ T8915] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1237: couldn't read orphan inode 13 (err -117) [ 231.707248][ T8915] loop3: lost filesystem error report for type 5 error -117 [ 231.714713][ T8915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.785916][ T5761] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 231.862225][ T8918] usb usb8: usbfs: process 8918 (syz.5.1239) did not claim interface 9 before use [ 231.940622][ T5761] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 231.945417][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.945445][ T5761] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 231.945500][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.952839][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.996959][ T5761] usb 1-1: config 0 descriptor?? [ 232.061066][ T5761] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.075284][ T5761] dvb-usb: bulk message failed: -22 (3/0) [ 232.091034][ T5761] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.097855][ T5761] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.097911][ T5761] usb 1-1: media controller created [ 232.111789][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.153196][ T5761] dvb-usb: bulk message failed: -22 (6/0) [ 232.153389][ T5761] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 232.204542][ T5761] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 232.277930][ T5761] dvb-usb: schedule remote query interval to 150 msecs. [ 232.277989][ T5761] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 232.437377][ T898] dvb-usb: bulk message failed: -22 (1/0) [ 232.437450][ T898] dvb-usb: error while querying for an remote control event. [ 232.445177][ T8908] dibusb: i2c wr: len=61 is too big! [ 232.445177][ T8908] [ 232.449832][ T898] usb 1-1: USB disconnect, device number 11 [ 232.602899][ T8935] netlink: 'syz.5.1246': attribute type 9 has an invalid length. [ 232.621285][ T898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 232.978485][ T8953] netlink: Invalid conntrack timeout [ 232.978541][ T8953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.005137][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.095398][ T5854] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 233.156361][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 233.167383][ T10] usb 2-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 233.167436][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.167507][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 115, changing to 10 [ 233.167547][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 10083, setting to 1024 [ 233.218280][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.218333][ T10] usb 2-1: Product: syz [ 233.218372][ T10] usb 2-1: Manufacturer: syz [ 233.218396][ T10] usb 2-1: SerialNumber: syz [ 233.296824][ T5854] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 233.308646][ T5854] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.308740][ T5854] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.308776][ T5854] usb 4-1: config 0 interface 0 altsetting 34 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.308816][ T5854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.308888][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.369682][ T5854] usb 4-1: config 0 descriptor?? [ 233.377693][ T8963] loop0: detected capacity change from 0 to 164 [ 233.399957][ T31] audit: type=1326 audit(1787926365.931:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.400047][ T31] audit: type=1326 audit(1787926365.931:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.406846][ T31] audit: type=1326 audit(1787926365.931:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.406909][ T31] audit: type=1326 audit(1787926365.931:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.406961][ T31] audit: type=1326 audit(1787926365.931:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.412369][ T31] audit: type=1326 audit(1787926365.931:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.412427][ T31] audit: type=1326 audit(1787926365.931:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.412509][ T31] audit: type=1326 audit(1787926365.931:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.417481][ T31] audit: type=1326 audit(1787926365.931:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.417541][ T31] audit: type=1326 audit(1787926365.931:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.1260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f542599e159 code=0x7ffc0000 [ 233.494500][ T50] rpcbind: server 127.0.0.1 not responding, timed out [ 233.631601][ T8960] loop2: detected capacity change from 0 to 4096 [ 233.632785][ T8960] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.679743][ T8960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.679795][ T8960] EXT4-fs (loop2): Test dummy encryption mode enabled [ 233.699396][ T10] usb 2-1: 0:2 : does not exist [ 233.717685][ T8960] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c199, mo2=0002] [ 233.717851][ T8960] System zones: 0-5 [ 233.738976][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.802330][ T8960] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 233.838920][ T10] usb 2-1: USB disconnect, device number 13 [ 233.937927][ T5854] input: HID 05ac:0323 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0323.001B/input/input15 [ 233.981961][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.168479][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.194544][ T5854] magicmouse 0003:05AC:0323.001B: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0323] on usb-dummy_hcd.3-1/input0 [ 234.215487][ T5748] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 234.233109][ T5854] usb 4-1: USB disconnect, device number 11 [ 234.250659][ T8974] IPVS: Scheduler module ip_vs_ not found [ 234.378051][ T5748] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 234.392097][ T5748] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.392150][ T5748] usb 1-1: config 0 has no interface number 0 [ 234.392228][ T5748] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.392268][ T5748] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.392322][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.472227][ T5748] usb 1-1: config 0 descriptor?? [ 234.656977][ T8994] netlink: 'syz.4.1273': attribute type 7 has an invalid length. [ 234.672973][ T8994] netlink: 'syz.4.1273': attribute type 8 has an invalid length. [ 234.760201][ T8996] Bluetooth: MGMT ver 1.23 [ 234.921902][ T5748] prodikeys 0003:041E:2801.001C: collection stack underflow [ 234.932174][ T5748] prodikeys 0003:041E:2801.001C: item 0 1 0 12 parsing failed [ 234.943552][ T5748] prodikeys 0003:041E:2801.001C: hid parse failed [ 234.943711][ T5748] prodikeys 0003:041E:2801.001C: probe with driver prodikeys failed with error -22 [ 235.002769][ T9002] Bluetooth: MGMT ver 1.23 [ 235.151479][ T9007] loop5: detected capacity change from 0 to 16 [ 235.152564][ T9007] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 235.154552][ T898] usb 1-1: USB disconnect, device number 12 [ 235.283100][ T9005] fido_id[9005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 235.581521][ T9018] loop5: detected capacity change from 0 to 256 [ 236.603872][ T9063] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 236.668718][ T9063] veth0_macvtap: left promiscuous mode [ 236.705840][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 236.705943][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 236.705997][ T5641] Bluetooth: hci1: command 0x0406 tx timeout [ 236.706034][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 236.706071][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 236.869629][ T9069] loop1: detected capacity change from 0 to 512 [ 236.903715][ T9069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.927373][ T9069] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.939626][ T9067] loop5: detected capacity change from 0 to 2048 [ 236.958048][ T9067] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 236.959507][ T9067] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 236.959528][ T9067] UDF-fs: Scanning with blocksize 512 failed [ 237.007427][ T9067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.066733][ T9069] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.1307: Failed to acquire dquot type 1 [ 237.080013][ T9069] loop1: lost filesystem error report for type 5 error -5 [ 237.085177][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 237.085230][ C0] EXT4-fs (loop1): initial error at time 1787926369: ext4_acquire_dquot:7069 [ 237.085287][ C0] EXT4-fs (loop1): last error at time 1787926369: ext4_acquire_dquot:7069 [ 237.093888][ T9069] EXT4-fs (loop1): Remounting filesystem read-only [ 237.094010][ T9069] EXT4-fs (loop1): 1 truncate cleaned up [ 237.172451][ T9069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.419635][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.773553][ T9073] loop2: detected capacity change from 0 to 40427 [ 237.790046][ T9073] F2FS-fs (loop2): Image doesn't support compression [ 237.790092][ T9073] F2FS-fs (loop2): build fault injection type: 0x400004 [ 237.809577][ T9073] F2FS-fs (loop2): invalid crc value [ 238.128056][ T9073] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.164380][ T9073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.202922][ T9073] syz.2.1308: attempt to access beyond end of device [ 238.202922][ T9073] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.226606][ T9073] CPU: 0 UID: 0 PID: 9073 Comm: syz.2.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.226651][ T9073] Tainted: [L]=SOFTLOCKUP [ 238.226662][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 238.226677][ T9073] Call Trace: [ 238.226687][ T9073] [ 238.226698][ T9073] dump_stack_lvl+0xe8/0x150 [ 238.226744][ T9073] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 238.226784][ T9073] f2fs_write_end_io+0x1215/0x16f0 [ 238.226831][ T9073] ? blkg_put+0x22/0x240 [ 238.226878][ T9073] __submit_merged_bio+0x258/0x6a0 [ 238.226908][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.226941][ T9073] ? rcu_is_watching+0x16/0xb0 [ 238.226981][ T9073] __submit_merged_write_cond+0x3c9/0x4e0 [ 238.227028][ T9073] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 238.227076][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227117][ T9073] f2fs_write_data_pages+0x2a27/0x36f0 [ 238.227151][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227187][ T9073] ? __lock_acquire+0x6df/0x2e50 [ 238.227259][ T9073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.227292][ T9073] ? is_bpf_text_address+0x26/0x2b0 [ 238.227340][ T9073] ? arch_stack_walk+0xfb/0x150 [ 238.227407][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227438][ T9073] ? add_lock_to_list+0xc7/0x100 [ 238.227473][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227505][ T9073] ? __lock_acquire+0x14b9/0x2e50 [ 238.227566][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227596][ T9073] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.227642][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227678][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227708][ T9073] ? do_raw_spin_unlock+0xf5/0x200 [ 238.227747][ T9073] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.227784][ T9073] do_writepages+0x338/0x560 [ 238.227836][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227870][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227905][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.227936][ T9073] ? do_raw_spin_unlock+0xf5/0x200 [ 238.227979][ T9073] filemap_fdatawrite+0x1e9/0x2f0 [ 238.228013][ T9073] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 238.228086][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228120][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228158][ T9073] ? do_raw_spin_unlock+0xf5/0x200 [ 238.228201][ T9073] f2fs_sync_dirty_inodes+0x30e/0x830 [ 238.228258][ T9073] f2fs_write_checkpoint+0xa3d/0x2710 [ 238.228337][ T9073] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 238.228421][ T9073] ? __pfx_down_write+0x10/0x10 [ 238.228471][ T9073] ? rcu_is_watching+0x16/0xb0 [ 238.228502][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228539][ T9073] f2fs_issue_checkpoint+0x424/0x6f0 [ 238.228591][ T9073] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 238.228630][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228662][ T9073] ? trace_sched_exit_tp+0x3a/0x130 [ 238.228697][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228728][ T9073] ? __schedule+0x17ea/0x5820 [ 238.228769][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228803][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228860][ T9073] ? __pfx___schedule+0x10/0x10 [ 238.228911][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228949][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.228980][ T9073] ? f2fs_sync_fs+0x1f2/0x3c0 [ 238.229011][ T9073] f2fs_create+0x516/0x690 [ 238.229048][ T9073] ? __pfx_f2fs_create+0x10/0x10 [ 238.229073][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229116][ T9073] ? inode_permission+0x2bc/0x5f0 [ 238.229150][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229181][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229218][ T9073] lookup_open+0xc0d/0x1a40 [ 238.229294][ T9073] path_openat+0x677/0x1d60 [ 238.229359][ T9073] do_file_open+0x23e/0x4a0 [ 238.229408][ T9073] ? __pfx_do_file_open+0x10/0x10 [ 238.229476][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229507][ T9073] ? _raw_spin_unlock+0x28/0x50 [ 238.229537][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229569][ T9073] ? alloc_fd+0x651/0x6c0 [ 238.229615][ T9073] do_sys_openat2+0x115/0x200 [ 238.229648][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229680][ T9073] ? __se_sys_futex+0x3a8/0x450 [ 238.229715][ T9073] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.229755][ T9073] ? rcu_is_watching+0x16/0xb0 [ 238.229787][ T9073] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.229831][ T9073] __x64_sys_openat+0x138/0x170 [ 238.229872][ T9073] do_syscall_64+0x166/0x520 [ 238.229908][ T9073] ? trace_irq_disable+0x3b/0x140 [ 238.229935][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.229970][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.229998][ T9073] RIP: 0033:0x7fbfd119e159 [ 238.230024][ T9073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.230047][ T9073] RSP: 002b:00007fbfd1fb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.230076][ T9073] RAX: ffffffffffffffda RBX: 00007fbfd1425fa0 RCX: 00007fbfd119e159 [ 238.230097][ T9073] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 238.230116][ T9073] RBP: 00007fbfd1235024 R08: 0000000000000000 R09: 0000000000000000 [ 238.230134][ T9073] R10: 00000000000001c1 R11: 0000000000000246 R12: 0000000000000000 [ 238.230151][ T9073] R13: 00007fbfd1426038 R14: 00007fbfd1425fa0 R15: 00007ffef7130d08 [ 238.230194][ T9073] [ 238.366924][ T9073] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 238.820223][ T9114] netlink: zone id is out of range [ 238.820487][ T9114] netlink: zone id is out of range [ 238.820877][ T9114] netlink: zone id is out of range [ 238.821190][ T9114] netlink: zone id is out of range [ 238.826950][ T9114] netlink: zone id is out of range [ 238.827242][ T9114] netlink: zone id is out of range [ 238.827287][ T9114] netlink: zone id is out of range [ 238.827602][ T9114] netlink: zone id is out of range [ 238.827730][ T9114] netlink: zone id is out of range [ 238.828022][ T9114] netlink: zone id is out of range [ 238.863806][ T9115] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1326'. [ 238.863833][ T9115] netlink: 'syz.3.1326': attribute type 33 has an invalid length. [ 239.132880][ T9111] loop1: detected capacity change from 0 to 32768 [ 239.206729][ T9120] netlink: 774 bytes leftover after parsing attributes in process `syz.3.1329'. [ 239.229674][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 239.258738][ T9111] JBD2: Ignoring recovery information on journal [ 239.499559][ T9111] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 240.007517][ T5627] ocfs2: Unmounting device (7,1) on (node local) [ 240.520267][ T9151] loop2: detected capacity change from 0 to 736 [ 240.876876][ T9163] loop5: detected capacity change from 0 to 512 [ 241.064095][ T9169] netlink: 'syz.4.1350': attribute type 9 has an invalid length. [ 241.130357][ T5748] kernel read not supported for file /input/mice (pid: 5748 comm: kworker/0:5) [ 241.648586][ T9157] loop1: detected capacity change from 0 to 32768 [ 241.702702][ T9199] IPVS: stopping backup sync thread 9198 ... [ 241.703476][ T9157] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.758454][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 241.801062][ T9203] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 241.838643][ T9157] XFS (loop1): Ending clean mount [ 242.019162][ T5627] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.099635][ T9215] Bluetooth: MGMT ver 1.23 [ 242.464454][ T9225] loop1: detected capacity change from 0 to 2048 [ 242.589634][ T9225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.770816][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.020254][ T9249] veth1: entered promiscuous mode [ 243.020439][ T9249] macsec1: entered promiscuous mode [ 243.034003][ T9249] macsec1: entered allmulticast mode [ 243.042008][ T9249] veth1: entered allmulticast mode [ 243.063821][ T9249] veth1: left allmulticast mode [ 243.069326][ T9249] veth1: left promiscuous mode [ 243.459587][ T9266] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1388'. [ 243.713541][ T9274] loop4: detected capacity change from 0 to 4096 [ 243.804096][ T9282] tipc: Started in network mode [ 243.811521][ T9282] tipc: Node identity e0000002, cluster identity 4711 [ 243.835433][ T9282] tipc: Enabling of bearer rejected, failed to enable media [ 244.076915][ T9286] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 244.154472][ T9289] loop5: detected capacity change from 0 to 2048 [ 244.248750][ T9297] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.398810][ T9303] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1407'. [ 244.734044][ T9316] net_ratelimit: 10 callbacks suppressed [ 244.741230][ T9316] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 244.796169][ T9318] loop2: detected capacity change from 0 to 512 [ 244.811440][ T9318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.828631][ T9318] EXT4-fs (loop2): 1 truncate cleaned up [ 244.843353][ T9318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.012684][ T9326] loop1: detected capacity change from 0 to 256 [ 245.026838][ T9326] exfat: Deprecated parameter 'utf8' [ 245.026896][ T9326] exfat: Deprecated parameter 'utf8' [ 245.027005][ T9326] exfat: Deprecated parameter 'utf8' [ 245.027039][ T9326] exfat: Deprecated parameter 'namecase' [ 245.094129][ T9326] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 245.211639][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.482837][ T9340] trusted_key: encrypted_key: key trusted:syz not found [ 245.708668][ T9347] loop3: detected capacity change from 0 to 1024 [ 245.793806][ T9355] program syz.5.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.200160][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 246.357234][ T5748] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 246.525808][ T5748] usb 3-1: Using ep0 maxpacket: 32 [ 246.532347][ T5748] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 246.546178][ T5748] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 246.546225][ T5748] usb 3-1: config 0 has no interface number 0 [ 246.563165][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.563216][ T5748] usb 3-1: Product: syz [ 246.563253][ T5748] usb 3-1: Manufacturer: syz [ 246.563279][ T5748] usb 3-1: SerialNumber: syz [ 246.598506][ T5748] usb 3-1: config 0 descriptor?? [ 246.629875][ T5748] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 246.828449][ T9397] macsec1: entered allmulticast mode [ 246.836036][ T9397] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 246.850965][ T9403] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1451'. [ 246.864760][ T9397] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.885626][ T9397] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 246.899424][ T5748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 246.919934][ T9397] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 246.929148][ T5748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 247.087890][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 92 [ 247.250584][ T9] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 247.323641][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 247.330233][ T30] usb 3-1: USB disconnect, device number 13 [ 247.381029][ T30] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.418094][ T30] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 247.482430][ T30] quatech2 3-1:0.51: device disconnected [ 247.600558][ T9405] loop1: detected capacity change from 0 to 32768 [ 247.855288][ T5761] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.005199][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 248.088501][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.088584][ T5761] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 248.090351][ T5761] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 248.090390][ T5761] usb 4-1: can't read configurations, error -71 [ 248.142497][ T9428] loop4: detected capacity change from 0 to 64 [ 248.472210][ T9438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1469'. [ 248.887930][ T9453] loop2: detected capacity change from 0 to 256 [ 248.889271][ T9454] loop1: detected capacity change from 0 to 128 [ 249.350983][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 249.383196][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 249.383505][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 249.383535][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 249.383562][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 249.384160][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 249.384190][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 249.384220][ T9468] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 249.516879][ T9468] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 249.528378][ T9468] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 249.683655][ T9472] loop0: detected capacity change from 0 to 2048 [ 250.112265][ T9491] loop2: detected capacity change from 0 to 2048 [ 250.142430][ T9491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 250.170456][ T9491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.262128][ T9494] loop0: detected capacity change from 0 to 4096 [ 250.363405][ T9501] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.425478][ T9504] loop5: detected capacity change from 0 to 24 [ 250.867106][ T9513] veth0_to_batadv: default FDB implementation only supports local addresses [ 251.272105][ T9523] gretap0: entered promiscuous mode [ 251.588972][ T9537] loop4: detected capacity change from 0 to 256 [ 251.593698][ T9537] exfat: Deprecated parameter 'utf8' [ 251.593755][ T9537] exfat: Deprecated parameter 'namecase' [ 251.593871][ T9537] exfat: Deprecated parameter 'namecase' [ 251.593899][ T9537] exfat: Deprecated parameter 'utf8' [ 251.664535][ T9541] loop5: detected capacity change from 0 to 512 [ 251.681307][ T9537] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 251.681848][ T9537] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 251.768161][ T9541] EXT4-fs (loop5): 1 truncate cleaned up [ 251.770076][ T9543] loop3: detected capacity change from 0 to 1024 [ 251.777802][ T9541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.864487][ T9541] EXT4-fs (loop5): Online resizing not supported with sparse_super2 [ 252.071296][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.358063][ T9546] loop2: detected capacity change from 0 to 32768 [ 252.680442][ T9568] netlink: 'syz.5.1527': attribute type 6 has an invalid length. [ 253.337656][ T9581] loop5: detected capacity change from 0 to 8192 [ 253.508025][ T9593] loop0: detected capacity change from 0 to 64 [ 254.166652][ T9571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1530 (9571) [ 254.200902][ T9571] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.200992][ T9571] BTRFS info (device loop4): using crc32c checksum algorithm [ 254.240569][ T9583] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 254.240629][ T9583] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 254.245523][ T9583] F2FS-fs (loop2): invalid crc value [ 254.429963][ T9571] BTRFS info (device loop4): setting nodatasum [ 254.430016][ T9571] BTRFS info (device loop4): setting nodatacow [ 254.430055][ T9571] BTRFS info (device loop4): disabling tree log [ 254.430080][ T9571] BTRFS info (device loop4): turning on async discard [ 254.430105][ T9571] BTRFS info (device loop4): enabling free space tree [ 254.430131][ T9571] BTRFS info (device loop4): max_inline set to 0 [ 254.643457][ T9631] netlink: 'syz.0.1548': attribute type 9 has an invalid length. [ 254.741048][ T5761] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 254.831739][ T9583] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 254.880829][ T5625] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.901444][ T5761] usb 2-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 0.00 [ 254.914671][ T9583] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.914724][ T9583] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.928532][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.928568][ T5761] usb 2-1: Product: syz [ 254.928586][ T5761] usb 2-1: Manufacturer: syz [ 254.928604][ T5761] usb 2-1: SerialNumber: syz [ 255.104869][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.104966][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.120917][ T5761] digi_acceleport 2-1:1.0: Digi 2 port USB adapter converter detected [ 255.196985][ T5761] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 255.312358][ T5761] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 255.340470][ T5761] usb 2-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 256.578297][ T9673] netlink: 'syz.5.1567': attribute type 10 has an invalid length. [ 256.606514][ T9673] veth0_macvtap: left promiscuous mode [ 256.864490][ T9679] tipc: Enabling of bearer rejected, media not registered [ 257.301981][ T9693] set_capacity_and_notify: 2 callbacks suppressed [ 257.302042][ T9693] loop2: detected capacity change from 0 to 4096 [ 257.322821][ T9697] loop0: detected capacity change from 0 to 128 [ 257.402273][ T9697] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 257.436015][ T9697] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.461396][ T9693] ntfs3(loop2): ino=9, mi_enum_attr [ 257.467719][ T9693] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 257.488662][ T9693] ntfs3(loop2): ino=9, mi_enum_attr [ 257.488827][ T9693] ntfs3(loop2): ino=b, mi_enum_attr [ 257.488926][ T9693] ntfs3(loop2): Failed to load $Extend (-22). [ 257.488955][ T9693] ntfs3(loop2): Failed to initialize $Extend. [ 257.521297][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 257.521357][ T31] audit: type=1800 audit(1787926390.051:64): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1578" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 257.698211][ T5624] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.900530][ T9708] loop0: detected capacity change from 0 to 1024 [ 257.911787][ T9708] EXT4-fs: Ignoring removed nobh option [ 257.926085][ T9708] EXT4-fs: Ignoring removed bh option [ 257.932517][ T9708] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 257.963483][ T9708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 257.963679][ T9708] System zones: 0-1, 3-12 [ 258.002107][ T9708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.061830][ T9710] bridge0: entered promiscuous mode [ 258.061898][ T9710] bridge0: entered allmulticast mode [ 258.207294][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.560812][ T25] usb 2-1: USB disconnect, device number 14 [ 258.683399][ T25] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 258.714279][ T25] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 258.768018][ T25] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 258.769476][ T25] digi_acceleport 2-1:1.0: device disconnected [ 258.802436][ T9739] loop3: detected capacity change from 0 to 512 [ 258.814547][ T9739] EXT4-fs (loop3): Test dummy encryption mode enabled [ 258.841880][ T9739] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1592: inode has both inline data and extents flags [ 258.841949][ T9739] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.843985][ T9739] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1592: couldn't read orphan inode 15 (err -117) [ 258.844020][ T9739] loop3: lost filesystem error report for type 5 error -117 [ 258.860897][ T9739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.020733][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.186701][ T9738] loop5: detected capacity change from 0 to 4096 [ 259.342075][ T9738] ntfs3(loop5): Failed to load $Extend (-22). [ 259.342133][ T9738] ntfs3(loop5): Failed to initialize $Extend. [ 259.376504][ T31] audit: type=1800 audit(1787926391.901:65): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1593" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 259.504907][ T9763] loop4: detected capacity change from 0 to 256 [ 259.575299][ T9763] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 260.075002][ T9783] loop4: detected capacity change from 0 to 2048 [ 260.102127][ T9783] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.205655][ T9787] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.690569][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.833180][ T9793] Remounting filesystem read-only [ 260.833759][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.859375][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.860324][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.928722][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 260.928852][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.034228][ T9775] loop0: detected capacity change from 0 to 32768 [ 261.038564][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.038711][ T9793] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 261.039853][ T31] audit: type=1800 audit(1787926393.561:66): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1608" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 261.126823][ T9775] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 261.287701][ T9775] XFS (loop0): Ending clean mount [ 261.469783][ T5624] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 261.681391][ T9779] loop3: detected capacity change from 0 to 32768 [ 261.722656][ T9779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1606 (9779) [ 261.792402][ T9779] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.792474][ T9779] BTRFS info (device loop3): using crc32c checksum algorithm [ 261.861929][ T9824] loop1: detected capacity change from 0 to 4096 [ 262.005892][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 262.043363][ T9779] BTRFS info (device loop3): enabling ssd optimizations [ 262.043421][ T9779] BTRFS info (device loop3): turning on async discard [ 262.043462][ T9779] BTRFS info (device loop3): enabling free space tree [ 262.142826][ T9839] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.156270][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 262.158621][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 262.159840][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 262.159868][ T9] usb 1-1: config 0 has no interface number 0 [ 262.159914][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 262.159945][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 262.164076][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.164104][ T9] usb 1-1: Product: syz [ 262.164122][ T9] usb 1-1: Manufacturer: syz [ 262.164140][ T9] usb 1-1: SerialNumber: syz [ 262.189455][ T9] usb 1-1: config 0 descriptor?? [ 262.387144][ T9844] loop2: detected capacity change from 0 to 256 [ 262.504499][ T9] radio-si470x 1-1:0.35: this is not a si470x device. [ 262.747733][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 262.781752][ T9] usb 1-1: USB disconnect, device number 13 [ 262.879009][ T5626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.013008][ T9855] loop1: detected capacity change from 0 to 512 [ 263.014057][ T9855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.014136][ T9855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.058365][ T9855] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 263.080555][ T9855] EXT4-fs (loop1): 1 truncate cleaned up [ 263.233775][ T9867] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 263.254426][ T9855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.513319][ T31] audit: type=1326 audit(1787926396.041:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.513646][ T31] audit: type=1326 audit(1787926396.041:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.514590][ T31] audit: type=1326 audit(1787926396.041:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.521485][ T31] audit: type=1326 audit(1787926396.051:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.524744][ T31] audit: type=1326 audit(1787926396.051:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.524803][ T31] audit: type=1326 audit(1787926396.051:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.524855][ T31] audit: type=1326 audit(1787926396.051:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.529168][ T31] audit: type=1326 audit(1787926396.061:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.573986][ T31] audit: type=1326 audit(1787926396.091:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1626" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f51ffb9e159 code=0x7ffc0000 [ 263.974782][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.095652][ T9881] Bluetooth: hci0: unsupported parameter 5135 [ 264.095707][ T9881] Bluetooth: hci0: unsupported parameter 8192 [ 264.095742][ T9881] Bluetooth: hci0: unsupported parameter 5135 [ 264.095764][ T9881] Bluetooth: hci0: unsupported parameter 8192 [ 264.452839][ T9895] loop3: detected capacity change from 0 to 512 [ 264.464860][ T9895] EXT4-fs: Ignoring removed i_version option [ 264.531876][ T9895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.547625][ T9895] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.566294][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 264.688887][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.715151][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 264.721154][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 264.732420][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.732468][ T25] usb 2-1: config 0 has no interface number 0 [ 264.752406][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.760632][ T25] usb 2-1: Product: syz [ 264.765137][ T25] usb 2-1: Manufacturer: syz [ 264.769818][ T25] usb 2-1: SerialNumber: syz [ 264.782653][ T25] usb 2-1: config 0 descriptor?? [ 264.794369][ T25] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 264.803418][ T25] usb 2-1: selecting invalid altsetting 1 [ 264.813036][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 264.818727][ T5748] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 264.838231][ T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.838712][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 264.838789][ T25] usb 2-1: media controller created [ 264.878142][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.967088][ T5748] usb 6-1: Using ep0 maxpacket: 16 [ 264.977936][ T5748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 264.978011][ T5748] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 264.980842][ T5748] usb 6-1: config 9 has an invalid interface number: 57 but max is 0 [ 264.980870][ T5748] usb 6-1: config 9 has no interface number 0 [ 264.980903][ T5748] usb 6-1: config 9 interface 57 has no altsetting 0 [ 264.994922][ T5748] usb 6-1: string descriptor 0 read error: -22 [ 264.995866][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.104938][ T9913] loop3: detected capacity change from 0 to 4096 [ 265.126330][ T9913] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 265.246126][ T9917] loop2: detected capacity change from 0 to 512 [ 265.290038][ T9913] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 265.311626][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.1655: iget: bad i_size value: 12154757448730 [ 265.311690][ T9917] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 265.314518][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1655: couldn't read orphan inode 13 (err -117) [ 265.314553][ T9917] loop2: lost filesystem error report for type 5 error -117 [ 265.315065][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 265.315086][ C0] EXT4-fs (loop2): initial error at time 1787926397: ext4_orphan_get:1403: inode 13 [ 265.315121][ C0] EXT4-fs (loop2): last error at time 1787926397: ext4_orphan_get:1408 [ 265.327028][ T10] hid-generic 0003:046D:1234.001D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 265.329968][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.361218][ T9917] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 265.443043][ T9913] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 265.614593][ T9922] fido_id[9922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.668110][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.759956][ T5748] video4linux radio48: keene_cmd_set failed (-71) [ 265.760019][ T5748] radio-keene 6-1:9.57: V4L2 device registered as radio48 [ 265.782763][ T5748] usb 6-1: USB disconnect, device number 9 [ 266.036217][ T9928] mmap: syz.4.1658 (9928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.056212][ T25] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 266.056766][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 266.074434][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 266.182754][ T25] usb 2-1: USB disconnect, device number 15 [ 266.221247][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1660'. [ 266.499074][ T9938] loop0: detected capacity change from 0 to 128 [ 267.125345][ T898] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 267.291208][ T898] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 267.305271][ T898] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 267.305339][ T898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 267.305391][ T898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 267.305447][ T898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.367986][ T898] usb 3-1: config 0 descriptor?? [ 267.374165][ T9952] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.521659][ T5748] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 267.675849][ T5748] usb 2-1: Using ep0 maxpacket: 32 [ 267.676677][ T5748] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 267.677732][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.677766][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.677808][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.684423][ T5748] usb 2-1: config 0 descriptor?? [ 267.802333][ T898] hid (null): usage index exceeded [ 267.825601][ T898] kye 0003:0458:5012.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 267.836708][ T898] kye 0003:0458:5012.001E: ignoring exceeding usage max [ 267.847442][ T898] kye 0003:0458:5012.001E: ignoring exceeding usage max [ 267.854559][ T898] kye 0003:0458:5012.001E: usage index exceeded [ 267.861103][ T898] kye 0003:0458:5012.001E: item 0 4 2 2 parsing failed [ 267.870725][ T898] kye 0003:0458:5012.001E: parse failed [ 267.876609][ T898] kye 0003:0458:5012.001E: probe with driver kye failed with error -22 [ 268.028847][ T898] usb 3-1: USB disconnect, device number 14 [ 268.142142][ T9995] loop5: detected capacity change from 0 to 2048 [ 268.232162][ T5748] kone 0003:1E7D:2CED.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 268.232164][ T9995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.367928][ T898] usb 2-1: USB disconnect, device number 16 [ 268.458767][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.618219][T10004] fido_id[10004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 268.734627][T10006] loop0: detected capacity change from 0 to 4096 [ 268.746073][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 268.746138][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 268.746177][T10010] netlink: 'syz.4.1695': attribute type 7 has an invalid length. [ 268.878287][T10006] ntfs3(loop0): Failed to load $Extend (-22). [ 268.878343][T10006] ntfs3(loop0): Failed to initialize $Extend. [ 268.938607][T10013] loop2: detected capacity change from 0 to 64 [ 269.137315][T10018] loop4: detected capacity change from 0 to 16 [ 269.160876][T10018] erofs (device loop4): mounted with root inode @ nid 36. [ 269.223370][T10023] netlink: Setting conntrack mark requires 'commit' flag. [ 269.230777][T10023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.686613][T10032] loop4: detected capacity change from 0 to 1024 [ 269.694077][T10032] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 269.694193][T10032] EXT4-fs (loop4): stripe (203) is not aligned with cluster size (16), stripe is disabled [ 269.696170][T10032] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: inode #32: comm syz.4.1704: iget: special inode unallocated [ 269.696201][T10032] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 269.699691][T10032] EXT4-fs (loop4): no journal found [ 269.699710][T10032] EXT4-fs (loop4): can't get journal size [ 269.705641][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 269.705661][ C0] EXT4-fs (loop4): initial error at time 1787926402: ext4_get_journal_inode:5927: inode 32 [ 269.705696][ C0] EXT4-fs (loop4): last error at time 1787926402: ext4_get_journal_inode:5927: inode 32 [ 269.750859][T10032] EXT4-fs (loop4): filesystem is read-only [ 269.777987][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.826907][T10037] loop3: detected capacity change from 0 to 2048 [ 269.923883][T10032] EXT4-fs (loop4): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 269.971604][T10045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.138051][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.307007][T10051] ipvlan2: entered allmulticast mode [ 270.307067][T10051] ip6gretap0: entered allmulticast mode [ 270.335812][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 270.486001][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 270.490271][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.490325][ T10] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 270.493871][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.493944][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 270.494019][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.508836][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.508869][ T10] usb 6-1: Product: syz [ 270.508887][ T10] usb 6-1: Manufacturer: syz [ 270.508905][ T10] usb 6-1: SerialNumber: syz [ 270.659038][T10071] loop3: detected capacity change from 0 to 64 [ 270.713270][T10074] loop0: detected capacity change from 0 to 256 [ 270.750111][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 270.750522][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 271.194623][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 271.439148][ T10] usb 6-1: USB disconnect, device number 10 [ 271.476706][ T5748] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.617123][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.630903][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 271.634174][ T5748] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.636300][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.636334][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.636378][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.650681][ T5748] usb 4-1: config 0 descriptor?? [ 271.676203][ T5748] hub 4-1:0.0: USB hub found [ 271.890167][ T5748] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 272.100601][ T5748] usbhid 4-1:0.0: can't add hid device: -71 [ 272.100736][ T5748] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.239172][ T5748] usb 4-1: USB disconnect, device number 14 [ 272.314964][ T1452] IPVS: starting estimator thread 0... [ 272.334652][T10111] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 272.438321][T10113] IPVS: using max 25 ests per chain, 60000 per kthread [ 272.524087][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1741'. [ 272.539244][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 273.292368][T10096] loop1: detected capacity change from 0 to 32768 [ 273.304503][T10105] loop5: detected capacity change from 0 to 32768 [ 273.411283][T10096] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 273.420938][T10105] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.453116][T10096] XFS (loop1): Ending clean mount [ 273.580244][T10105] XFS (loop5): Ending clean mount [ 273.799854][ T5628] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 274.018817][ T5627] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 274.652284][T10187] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1762'. [ 274.733541][T10188] loop3: detected capacity change from 0 to 64 [ 275.194395][T10201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.232079][T10205] loop2: detected capacity change from 0 to 512 [ 275.256860][T10206] loop3: detected capacity change from 0 to 1024 [ 275.278155][T10205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.332984][T10205] EXT4-fs (loop2): 1 truncate cleaned up [ 275.364408][T10205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.487832][T10205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 275.549213][T10205] EXT4-fs error (device loop2) in ext4_setattr:6247: error 28 [ 275.773101][T10215] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.792344][T10223] loop5: detected capacity change from 0 to 128 [ 275.843708][T10223] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 276.110875][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.364009][T10237] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 276.364162][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 276.364362][T10237] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 276.364447][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 276.569579][T10241] loop3: detected capacity change from 0 to 512 [ 276.586221][T10241] EXT4-fs (loop3): Test dummy encryption mode enabled [ 276.586291][T10241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.634852][T10241] EXT4-fs (loop3): 1 truncate cleaned up [ 276.648654][T10241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.812849][T10249] loop2: detected capacity change from 0 to 4096 [ 276.944638][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.019410][T10257] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.147235][T10256] loop4: detected capacity change from 0 to 1024 [ 277.399358][T10253] loop1: detected capacity change from 0 to 32768 [ 277.460570][T10253] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.587291][ T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:0) [ 277.714716][T10253] XFS (loop1): Ending clean mount [ 277.726325][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 277.797878][T10253] XFS (loop1): Quotacheck needed: Please wait. [ 277.900505][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.917341][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.954463][ T10] usb 6-1: config 0 descriptor?? [ 277.964890][ T10] cp210x 6-1:0.0: cp210x converter detected [ 278.048820][T10253] XFS (loop1): Quotacheck: Done. [ 278.116545][ T5627] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.593384][T10289] loop3: detected capacity change from 0 to 32768 [ 278.606976][T10289] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 278.607016][T10289] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 278.663211][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 278.671458][T10289] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 105 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 460 [ 278.671512][T10289] CPU: 1 UID: 0 PID: 10289 Comm: syz.3.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.671550][T10289] Tainted: [L]=SOFTLOCKUP [ 278.671560][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.671576][T10289] Call Trace: [ 278.671587][T10289] [ 278.671598][T10289] dump_stack_lvl+0xe8/0x150 [ 278.671641][T10289] gfs2_withdraw+0xc3/0x1b0 [ 278.671683][T10289] gfs2_meta_buffer+0x225/0x2e0 [ 278.671723][T10289] __gfs2_iomap_get+0x752/0x1840 [ 278.671763][T10289] ? __pfx___schedule+0x10/0x10 [ 278.671819][T10289] ? __pfx___gfs2_iomap_get+0x10/0x10 [ 278.671856][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.671886][T10289] ? rcu_is_watching+0x16/0xb0 [ 278.671925][T10289] gfs2_block_map+0x29c/0x6f0 [ 278.671975][T10289] ? __pfx_gfs2_block_map+0x10/0x10 [ 278.672010][T10289] ? __pfx_wake_bit_function+0x10/0x10 [ 278.672043][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672077][T10289] ? __wait_on_buffer+0xe/0x80 [ 278.672105][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672135][T10289] ? set_normalized_timespec64+0xf0/0x1a0 [ 278.672193][T10289] gfs2_write_alloc_required+0x3a4/0x670 [ 278.672240][T10289] ? __pfx_gfs2_write_alloc_required+0x10/0x10 [ 278.672301][T10289] ? __pfx_wake_bit_function+0x10/0x10 [ 278.672351][T10289] gfs2_jdesc_check+0x210/0x2f0 [ 278.672386][T10289] init_journal+0xcc3/0x2330 [ 278.672440][T10289] ? init_inodes+0xdb/0x320 [ 278.672485][T10289] ? __pfx_init_journal+0x10/0x10 [ 278.672523][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672553][T10289] ? vsnprintf+0xe42/0xef0 [ 278.672596][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672625][T10289] ? snprintf+0xe8/0x140 [ 278.672656][T10289] ? init_inodes+0xdb/0x320 [ 278.672694][T10289] ? __pfx_snprintf+0x10/0x10 [ 278.672722][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672752][T10289] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 278.672784][T10289] init_inodes+0xdb/0x320 [ 278.672827][T10289] gfs2_fill_super+0x1959/0x20d0 [ 278.672882][T10289] ? __pfx_gfs2_fill_super+0x10/0x10 [ 278.672919][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.672955][T10289] ? init_locking+0xb8/0x210 [ 278.672991][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673021][T10289] ? sb_set_blocksize+0x155/0x240 [ 278.673060][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673091][T10289] ? setup_bdev_super+0x586/0x680 [ 278.673136][T10289] get_tree_bdev_flags+0x430/0x4f0 [ 278.673177][T10289] ? __pfx_gfs2_fill_super+0x10/0x10 [ 278.673217][T10289] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 278.673260][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673300][T10289] gfs2_get_tree+0x51/0x1e0 [ 278.673348][T10289] vfs_get_tree+0x92/0x2a0 [ 278.673391][T10289] do_new_mount+0x319/0xdc0 [ 278.673424][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673459][T10289] ? __pfx_do_new_mount+0x10/0x10 [ 278.673495][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673525][T10289] ? ns_capable+0x89/0xe0 [ 278.673561][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673590][T10289] ? path_mount+0x647/0x1050 [ 278.673626][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673656][T10289] ? user_path_at+0xd4/0x160 [ 278.673696][T10289] __se_sys_mount+0x31d/0x420 [ 278.673737][T10289] ? __pfx___se_sys_mount+0x10/0x10 [ 278.673768][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673804][T10289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.673829][T10289] ? __x64_sys_mount+0x20/0xc0 [ 278.673860][T10289] do_syscall_64+0x166/0x520 [ 278.673890][T10289] ? trace_irq_disable+0x3b/0x140 [ 278.673911][T10289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.673939][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.673962][T10289] RIP: 0033:0x7f51ffb9f3ca [ 278.673983][T10289] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.674001][T10289] RSP: 002b:00007f5200b3ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.674023][T10289] RAX: ffffffffffffffda RBX: 00007f5200b3aee0 RCX: 00007f51ffb9f3ca [ 278.674040][T10289] RDX: 0000200000037f40 RSI: 0000200000000480 RDI: 00007f5200b3aea0 [ 278.674056][T10289] RBP: 0000200000037f40 R08: 00007f5200b3aee0 R09: 0000000000000000 [ 278.674072][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000480 [ 278.674086][T10289] R13: 00007f5200b3aea0 R14: 0000000000037fdd R15: 0000200000037fc0 [ 278.674120][T10289] [ 278.674175][T10289] gfs2: fsid=syz:syz.0: G: s:SH n:2/47 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:10 [ 278.674215][T10289] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 278.674265][T10289] gfs2: fsid=syz:syz.0: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 278.674296][T10289] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 279.033270][ T9] usb 6-1: USB disconnect, device number 11 [ 279.241561][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.261264][ T9] cp210x 6-1:0.0: device disconnected [ 279.408107][T10301] loop3: detected capacity change from 0 to 1024 [ 279.708790][T10313] loop5: detected capacity change from 0 to 1024 [ 279.781572][T10316] loop2: detected capacity change from 0 to 1024 [ 279.869984][T10316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.982520][ T50] IPVS: starting estimator thread 0... [ 280.064733][T10316] EXT4-fs error (device loop2): ext4_generic_delete_entry:2675: inode #2: block 16: comm syz.2.1818: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 280.115251][T10328] IPVS: using max 24 ests per chain, 57600 per kthread [ 280.134912][T10316] EXT4-fs error (device loop2) in ext4_delete_entry:2746: Corrupt filesystem [ 280.150415][T10316] EXT4-fs warning (device loop2): ext4_rename_delete:3741: inode #2: comm syz.2.1818: Deleting old file: nlink 1, error=-117 [ 280.440461][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.621932][T10338] loop4: detected capacity change from 0 to 4096 [ 280.633170][T10338] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 280.962774][T10354] loop3: detected capacity change from 0 to 128 [ 280.999293][T10352] loop2: detected capacity change from 0 to 1024 [ 281.004272][T10354] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 281.004307][T10354] hpfs: filesystem error: improperly stopped [ 281.004326][T10354] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 281.004351][T10354] hpfs: You really don't want any checks? You are crazy... [ 281.004375][T10354] hpfs: Code page index out of array [ 281.004385][T10354] hpfs: code page support is disabled [ 281.004784][T10354] hpfs: hpfs_map_4sectors(): unaligned read [ 281.004864][T10354] hpfs: hpfs_map_4sectors(): unaligned read [ 281.004877][T10354] hpfs: filesystem error: unable to find root dir [ 281.192453][T10359] loop1: detected capacity change from 0 to 4096 [ 281.284823][T10361] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.302354][T10354] hpfs: hpfs_map_4sectors(): unaligned read [ 281.852440][T10376] loop4: detected capacity change from 0 to 1764 [ 281.879407][T10377] loop0: detected capacity change from 0 to 512 [ 281.907529][T10377] EXT4-fs (loop0): orphan cleanup on readonly fs [ 281.907574][T10377] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 281.921747][T10376] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 281.941469][T10377] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 281.975694][ C1] EXT4-fs (loop0): initial error at time 1787926414: ext4_mb_generate_buddy:1317 [ 281.975779][ C1] EXT4-fs (loop0): last error at time 1787926414: ext4_mb_generate_buddy:1317 [ 282.000954][T10377] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1843: attempt to clear invalid blocks 2 len 1 [ 282.021294][T10377] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.048820][T10377] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1843: invalid indirect mapped block 1819239214 (level 0) [ 282.048903][T10377] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.066484][T10377] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1843: invalid indirect mapped block 1819239214 (level 1) [ 282.066532][T10377] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.071426][T10377] EXT4-fs (loop0): 1 truncate cleaned up [ 282.092660][T10377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.189770][ T5625] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 282.198887][T10377] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 282.211987][T10377] EXT4-fs: can't change dax mount option while remounting [ 282.221394][ T5625] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 282.309967][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.642868][T10401] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.747737][T10401] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4223: comm syz.1.1854: Allocating blocks 41-42 which overlap fs metadata [ 282.747804][T10401] loop1: lost filesystem error report for type 5 error -117 [ 282.762953][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 282.762981][ C1] EXT4-fs (loop1): initial error at time 1787926415: ext4_mb_mark_diskspace_used:4223 [ 282.763009][ C1] EXT4-fs (loop1): last error at time 1787926415: ext4_mb_mark_diskspace_used:4223 [ 282.815980][T10401] EXT4-fs (loop1): Remounting filesystem read-only [ 282.819698][T10401] Quota error (device loop1): write_blk: dquota write failed [ 282.821380][T10401] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 282.821611][T10401] Quota error (device loop1): write_blk: dquota write failed [ 282.821732][T10401] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 282.821882][T10401] EXT4-fs (loop1): 1 truncate cleaned up [ 282.848271][T10401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.096389][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.381327][T10407] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1858 (10407) [ 283.426145][T10407] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 283.428076][T10407] BTRFS info (device loop0): using crc32c checksum algorithm [ 283.436210][T10417] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 283.458376][T10417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.629523][T10407] BTRFS info (device loop0): enabling ssd optimizations [ 283.639971][T10407] BTRFS info (device loop0): turning on async discard [ 283.650853][T10407] BTRFS info (device loop0): enabling free space tree [ 283.668425][T10436] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.910839][ T5624] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 285.461307][T10485] set_capacity_and_notify: 6 callbacks suppressed [ 285.461366][T10485] loop0: detected capacity change from 0 to 128 [ 285.483161][T10485] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 285.483261][T10485] hpfs: filesystem error: improperly stopped [ 285.483280][T10485] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 285.483298][T10485] hpfs: You really don't want any checks? You are crazy... [ 285.483675][T10485] hpfs: hpfs_map_sector(): read error [ 285.483687][T10485] hpfs: code page support is disabled [ 285.489403][T10485] hpfs: hpfs_map_4sectors(): unaligned read [ 285.489500][T10485] hpfs: hpfs_map_4sectors(): unaligned read [ 285.489513][T10485] hpfs: filesystem error: unable to find root dir [ 286.187906][T10504] loop5: detected capacity change from 0 to 4096 [ 286.254342][T10510] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.302018][T10508] loop0: detected capacity change from 0 to 128 [ 286.378646][T10508] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.389364][T10508] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.595203][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 286.614454][ T5624] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.850665][T10475] loop2: detected capacity change from 0 to 32768 [ 286.953133][T10475] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.993178][T10529] lo speed is unknown, defaulting to 1000 [ 287.022997][T10529] lo speed is unknown, defaulting to 1000 [ 287.223750][T10475] XFS (loop2): Ending clean mount [ 287.253179][T10475] XFS (loop2): Quotacheck needed: Please wait. [ 287.298847][T10529] lo speed is unknown, defaulting to 1000 [ 287.406049][T10529] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 287.406122][T10529] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 287.406173][T10529] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 287.624257][T10548] loop1: detected capacity change from 0 to 512 [ 287.643944][T10548] EXT4-fs: Ignoring removed i_version option [ 287.664017][T10548] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.683135][T10475] XFS (loop2): Quotacheck: Done. [ 287.710684][T10548] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1910: invalid block [ 287.710759][T10548] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.711275][T10548] EXT4-fs error (device loop1) in ext4_process_orphan:346: IO failure [ 287.711299][T10548] loop1: lost filesystem error report for type 5 error -5 [ 287.711942][T10548] EXT4-fs (loop1): 2 truncates cleaned up [ 287.716479][T10529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 287.726576][T10529] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.791658][T10548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.078781][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.134268][ T5629] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.207624][T10529] lo speed is unknown, defaulting to 1000 [ 288.216052][T10529] lo speed is unknown, defaulting to 1000 [ 288.430117][T10529] lo speed is unknown, defaulting to 1000 [ 288.444315][T10529] lo speed is unknown, defaulting to 1000 [ 288.742862][T10529] lo speed is unknown, defaulting to 1000 [ 288.748672][T10529] lo speed is unknown, defaulting to 1000 [ 289.023678][T10580] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 289.102025][T10584] loop1: detected capacity change from 0 to 128 [ 289.187636][T10584] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.209640][T10584] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.230547][ T31] audit: type=1800 audit(1787926421.761:76): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1928" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 289.346349][T10598] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.367497][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.369002][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.390280][T10598] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 289.529858][ T5627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.072946][T10622] loop3: detected capacity change from 0 to 256 [ 290.074032][T10622] exfat: Deprecated parameter 'utf8' [ 290.074174][T10622] exfat: Deprecated parameter 'namecase' [ 290.160644][T10622] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 290.256811][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 290.292120][T10626] loop1: detected capacity change from 0 to 8 [ 290.390410][T10626] SQUASHFS error: Unable to read inode 0x24 [ 290.411124][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 290.420418][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 290.420460][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.445435][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 290.474466][ T9] usb 6-1: config 0 descriptor?? [ 290.880073][T10639] loop3: detected capacity change from 0 to 1764 [ 290.967886][ T9] kye 0003:0458:5013.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 290.968470][ T9] hid_parser_main: 29 callbacks suppressed [ 290.968493][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968519][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968543][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968566][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968590][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968613][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968636][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968659][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.968683][ T9] kye 0003:0458:5013.0020: unknown main item tag 0x0 [ 290.990042][ T9] kye 0003:0458:5013.0020: hidraw0: USB HID v0.81 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 290.990083][ T9] kye 0003:0458:5013.0020: tablet-enabling feature report not found [ 290.990101][ T9] kye 0003:0458:5013.0020: tablet enabling failed [ 291.151778][ T9] usb 6-1: USB disconnect, device number 12 [ 291.416365][T10606] loop0: detected capacity change from 0 to 32768 [ 291.461070][T10606] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.614667][T10606] XFS (loop0): Ending clean mount [ 291.639643][T10606] XFS (loop0): Quotacheck needed: Please wait. [ 291.689566][T10650] fido_id[10650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 292.013127][T10606] XFS (loop0): Quotacheck: Done. [ 292.298290][T10678] loop4: detected capacity change from 0 to 128 [ 292.329568][ T5624] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.369878][T10678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 292.370010][T10678] System zones: 1-3, 19-19, 35-36 [ 292.400949][T10678] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 292.401442][T10678] ext4 filesystem being mounted at /340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.454358][T10683] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.564376][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'. [ 292.802205][ T5625] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.067225][T10662] loop3: detected capacity change from 0 to 32768 [ 293.087516][T10662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1954 (10662) [ 293.206013][T10694] loop4: detected capacity change from 0 to 1024 [ 293.280307][T10662] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.280373][T10662] BTRFS info (device loop3): using crc32c checksum algorithm [ 293.511263][T10662] BTRFS info (device loop3): setting nodatasum [ 293.511317][T10662] BTRFS info (device loop3): setting nodatacow [ 293.511366][T10662] BTRFS info (device loop3): disabling tree log [ 293.511414][T10662] BTRFS info (device loop3): turning on async discard [ 293.511441][T10662] BTRFS info (device loop3): enabling free space tree [ 293.511467][T10662] BTRFS info (device loop3): max_inline set to 0 [ 293.841849][T10723] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 293.946204][T10725] loop0: detected capacity change from 0 to 1024 [ 293.953813][T10725] ext4: Bad value for 'journal_dev' [ 294.442546][ T5626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.534494][T10741] loop1: detected capacity change from 0 to 256 [ 294.576841][T10741] exfat: Deprecated parameter 'namecase' [ 294.576936][T10741] exfat: Deprecated parameter 'namecase' [ 294.754721][T10741] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 295.218688][T10753] loop1: detected capacity change from 0 to 256 [ 295.278753][T10753] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 295.339001][T10761] loop2: detected capacity change from 0 to 256 [ 295.723094][ T31] audit: type=1326 audit(1787926428.251:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa59e159 code=0x7ffc0000 [ 295.744646][ T31] audit: type=1326 audit(1787926428.261:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa59e159 code=0x7ffc0000 [ 295.811297][ T31] audit: type=1326 audit(1787926428.341:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa59e159 code=0x7ffc0000 [ 295.811392][ T31] audit: type=1326 audit(1787926428.341:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49aa59e159 code=0x7ffc0000 [ 295.829459][ T31] audit: type=1326 audit(1787926428.361:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49aa59e159 code=0x7ffc0000 [ 295.829522][ T31] audit: type=1326 audit(1787926428.361:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49aa59dec2 code=0x7ffc0000 [ 295.863247][ T31] audit: type=1326 audit(1787926428.391:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49aa55e98e code=0x7ffc0000 [ 295.882349][ T31] audit: type=1326 audit(1787926428.411:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f49aa59df87 code=0x7ffc0000 [ 295.896156][ T31] audit: type=1326 audit(1787926428.431:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49aa55e98e code=0x7ffc0000 [ 295.902013][ T31] audit: type=1326 audit(1787926428.431:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49aa59ddeb code=0x7ffc0000 [ 295.960922][T10771] loop5: detected capacity change from 0 to 256 [ 296.083610][T10771] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 296.169906][T10778] loop0: detected capacity change from 0 to 512 [ 296.304252][T10778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.304395][T10778] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.453341][T10787] loop1: detected capacity change from 0 to 1024 [ 296.543651][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.865736][T10798] loop2: detected capacity change from 0 to 1024 [ 298.202229][T10806] loop4: detected capacity change from 0 to 131072 [ 298.204075][T10806] F2FS-fs (loop4): Invalid log blocks per segment (3081) [ 298.204100][T10806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 298.204909][T10806] F2FS-fs (loop4): invalid crc value [ 298.323618][T10806] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.341135][T10806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 298.341204][T10806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 298.900771][T10831] loop1: detected capacity change from 0 to 32768 [ 298.928769][T10831] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.019948][T10831] XFS (loop1): Ending clean mount [ 299.029005][T10862] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 299.029005][T10862] program syz.3.2037 not setting count and/or reply_len properly [ 299.306386][ T5627] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.473467][T10870] loop2: detected capacity change from 0 to 1024 [ 299.621279][ T5634] Bluetooth: hci2: connection err: -111 [ 299.741261][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 299.741310][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2044'. [ 299.741371][T10876] netlink: 'syz.5.2044': attribute type 12 has an invalid length. [ 301.167503][T10915] macsec1: entered promiscuous mode [ 301.167567][T10915] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 301.167784][T10915] macsec1: entered allmulticast mode [ 301.167805][T10915] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 301.197950][T10915] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 301.217529][T10915] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 301.323969][T10919] loop1: detected capacity change from 0 to 1024 [ 301.335186][T10919] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.341810][T10919] EXT4-fs: Ignoring removed orlov option [ 301.342532][ T5748] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 301.410031][T10919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.447246][T10919] EXT4-fs warning (device loop1): ext4_resize_fs:2018: can't read last block, resize aborted [ 301.601465][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.174536][T10951] sg_write: data in/out 453101/4584 bytes for SCSI command 0x0-- guessing data in; [ 302.174536][T10951] program syz.1.2078 not setting count and/or reply_len properly [ 302.281338][T10956] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2081'. [ 302.368537][T10962] loop1: detected capacity change from 0 to 1024 [ 302.444368][T10962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.640763][T10973] loop2: detected capacity change from 0 to 256 [ 302.716728][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.306739][ T25] kernel write not supported for file /692/gid_map (pid: 25 comm: kworker/1:0) [ 303.434124][T10999] loop0: detected capacity change from 0 to 256 [ 303.470114][T11004] loop2: detected capacity change from 0 to 256 [ 303.482365][T11004] exFAT-fs (loop2): bogus data start sector [ 303.482413][T11004] exFAT-fs (loop2): failed to read boot sector [ 303.482432][T11004] exFAT-fs (loop2): failed to recognize exfat type [ 303.597996][ T1404] IPVS: starting estimator thread 0... [ 303.695358][T11008] IPVS: using max 25 ests per chain, 60000 per kthread [ 303.755948][T11011] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 303.756008][T11011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.907618][T11015] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 304.179613][T11024] Bluetooth: hci0: unsupported parameter 5134 [ 304.179661][T11024] Bluetooth: hci0: unsupported parameter 8192 [ 304.179865][T11024] Bluetooth: hci0: unsupported parameter 5134 [ 304.179888][T11024] Bluetooth: hci0: unsupported parameter 8192 [ 304.348689][T11027] loop1: detected capacity change from 0 to 4096 [ 304.407287][T11027] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 304.561572][T11027] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 304.955778][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 305.044412][T11042] loop3: detected capacity change from 0 to 2048 [ 305.119533][ T25] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 305.136973][ T25] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.137037][ T25] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.137099][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 305.137144][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.196183][ T25] usb 6-1: config 0 descriptor?? [ 305.254951][T11042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.501399][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.673096][ T25] hid-multitouch 0003:0EEF:72C4.0021: collection stack underflow [ 305.673154][ T25] hid-multitouch 0003:0EEF:72C4.0021: item 0 0 0 12 parsing failed [ 305.674075][ T25] hid-multitouch 0003:0EEF:72C4.0021: probe with driver hid-multitouch failed with error -22 [ 305.842747][ T25] usb 6-1: USB disconnect, device number 13 [ 306.164915][T11088] loop3: detected capacity change from 0 to 256 [ 306.323061][T11093] netlink: 'syz.0.2142': attribute type 1 has an invalid length. [ 306.323116][T11093] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2142'. [ 306.323159][T11093] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.2142'. [ 306.594288][T11100] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 306.979485][T11114] loop5: detected capacity change from 0 to 1764 [ 307.204717][T11122] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2154'. [ 307.483891][T11128] loop2: detected capacity change from 0 to 512 [ 307.521964][T11128] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 307.522024][T11128] loop2: lost filesystem error report for type 5 error -12 [ 307.525144][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 307.525168][ C0] EXT4-fs (loop2): initial error at time 1787926440: ext4_process_orphan:346 [ 307.525195][ C0] EXT4-fs (loop2): last error at time 1787926440: ext4_process_orphan:346 [ 307.585419][T11128] EXT4-fs (loop2): 2 truncates cleaned up [ 307.612628][T11128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.723479][T11128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.2158: bg 0: block 5: invalid block bitmap [ 307.929070][T11112] loop4: detected capacity change from 0 to 32768 [ 307.950516][T11112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2151 (11112) [ 307.972716][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.992270][T11137] loop0: detected capacity change from 0 to 256 [ 308.062972][T11112] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.063039][T11112] BTRFS info (device loop4): using crc32c checksum algorithm [ 308.328320][T11112] BTRFS info (device loop4): enabling ssd optimizations [ 308.328374][T11112] BTRFS info (device loop4): turning on flush-on-commit [ 308.329912][T11112] BTRFS info (device loop4): enabling free space tree [ 308.329936][T11112] BTRFS info (device loop4): enabling auto defrag [ 308.329958][T11112] BTRFS info (device loop4): use lzo compression, level 1 [ 308.329983][T11112] BTRFS info (device loop4): max_inline set to 4096 [ 308.653635][ T5625] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.737562][T11164] netlink: 996 bytes leftover after parsing attributes in process `syz.1.2169'. [ 308.760951][T11164] gretap0: refused to change device tx_queue_len [ 309.180185][T11177] loop3: detected capacity change from 0 to 2048 [ 309.242844][T11182] loop1: detected capacity change from 0 to 164 [ 309.470523][T11177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.551575][T11193] loop2: detected capacity change from 0 to 256 [ 309.564621][T11193] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbecade97, utbl_chksum : 0xe619d30d) [ 309.682245][ T25] kernel write not supported for file /input/event2 (pid: 25 comm: kworker/1:0) [ 309.864102][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.945255][T11194] loop5: detected capacity change from 0 to 4096 [ 309.960126][T11194] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 310.138604][T11194] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 310.252491][T11208] loop0: detected capacity change from 0 to 2048 [ 310.361000][T11208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.602216][ T5624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.698320][T11229] loop3: detected capacity change from 0 to 512 [ 310.746438][ T5854] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 310.767003][T11229] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.2196: bg 0: block 393: padding at end of block bitmap is not set [ 310.767070][T11229] loop3: lost filesystem error report for type 5 error -117 [ 310.773520][T11229] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 310.773547][T11229] loop3: lost filesystem error report for type 5 error -117 [ 310.775157][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 310.775179][ C0] EXT4-fs (loop3): initial error at time 1787926443: ext4_validate_block_bitmap:445 [ 310.775207][ C0] EXT4-fs (loop3): last error at time 1787926443: ext4_mb_clear_bb:6680 [ 310.780580][T11229] EXT4-fs (loop3): 2 truncates cleaned up [ 310.800707][T11229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.861360][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 310.861420][ T31] audit: type=1800 audit(1787926443.391:143): pid=11229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2196" name="control" dev="loop3" ino=18 res=0 errno=0 [ 310.897416][T11233] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 310.899425][ T5854] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 310.902824][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.908504][ T5854] usb 2-1: config 0 descriptor?? [ 310.958897][ T5854] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 311.146071][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.564116][ T5854] gp8psk: usb out operation failed. [ 311.564160][ T5854] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 311.564223][ T5854] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 311.599960][ T5854] usb 2-1: USB disconnect, device number 17 [ 311.776750][T11257] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 312.262594][ T31] audit: type=1800 audit(1787926444.791:144): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2215" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 312.444382][T11280] loop2: detected capacity change from 0 to 8 [ 312.547171][T11275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 312.557651][T11275] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 312.687108][T11275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.687223][T11275] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.769851][T11275] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 312.770005][T11275] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 312.927866][T11275] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.928199][T11275] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 313.041081][T11275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.041242][T11275] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 313.063205][T11275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 313.063373][T11275] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 313.357512][ T5748] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 313.447144][T11311] loop3: detected capacity change from 0 to 764 [ 313.480267][T11311] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 313.508644][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 313.510544][ T5748] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 313.511745][ T5748] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 313.523594][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.523625][ T5748] usb 5-1: Product: syz [ 313.523642][ T5748] usb 5-1: Manufacturer: syz [ 313.523660][ T5748] usb 5-1: SerialNumber: syz [ 313.612063][ T5748] usb 5-1: config 0 descriptor?? [ 313.631801][ T5748] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 313.631904][ T5748] usb 5-1: setting power ON [ 313.632333][ T5748] dvb-usb: bulk message failed: -22 (2/0) [ 313.659110][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.662730][ T5748] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 313.662790][ T5748] usb 5-1: media controller created [ 313.761999][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.823513][T11322] VFS: Can't find a romfs filesystem on dev romfs. [ 313.823513][T11322] [ 313.840634][T11322] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 313.840634][T11322] [ 313.874034][T11298] dvb-usb: bulk message failed: -22 (3/0) [ 313.874095][T11298] cxusb: i2c wr: len=80 is too big! [ 313.874095][T11298] [ 313.884544][ T5748] usb 5-1: selecting invalid altsetting 6 [ 313.884571][ T5748] usb 5-1: digital interface selection failed (-22) [ 313.884588][ T5748] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 313.889885][ T5748] usb 5-1: setting power OFF [ 313.943887][ T5748] dvb-usb: bulk message failed: -22 (2/0) [ 313.943940][ T5748] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 313.943975][ T5748] (NULL device *): no alternate interface [ 314.191619][ T5748] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 314.197611][ T5748] usb 5-1: USB disconnect, device number 8 [ 314.322834][ T5634] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 314.501528][T11308] loop0: detected capacity change from 0 to 32768 [ 314.536190][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 314.558480][T11308] JBD2: Ignoring recovery information on journal [ 314.688563][T11308] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 314.698898][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 314.780008][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 314.935151][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 315.037862][ T5624] ocfs2: Unmounting device (7,0) on (node local) [ 315.085603][ T898] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 315.100400][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 315.287423][ T898] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 315.301535][ T898] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.301615][ T898] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 315.301658][ T898] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.301699][ T898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.301747][ T898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.361211][ T898] usb 4-1: config 0 descriptor?? [ 315.368471][T11350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.618526][ T1452] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.620510][ T1404] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.620557][ T1404] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.625932][ T1452] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.804941][ T898] hid (null): bogus close delimiter [ 315.817941][ T898] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 315.827291][ T898] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 315.827362][ T898] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 315.827395][ T898] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 315.827428][ T898] hid-u2fzero 0003:10C4:8ACF.0022: unknown main item tag 0x0 [ 315.827458][ T898] hid-u2fzero 0003:10C4:8ACF.0022: bogus close delimiter [ 315.827482][ T898] hid-u2fzero 0003:10C4:8ACF.0022: item 0 0 2 10 parsing failed [ 315.828349][ T898] hid-u2fzero 0003:10C4:8ACF.0022: probe with driver hid-u2fzero failed with error -22 [ 315.973111][T11375] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2261'. [ 316.015336][ T30] usb 4-1: USB disconnect, device number 15 [ 316.206161][ T1212] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 316.357128][ T1212] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 316.367366][ T1212] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 316.367413][ T1212] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.367471][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.374300][ T1212] usb 6-1: config 0 descriptor?? [ 316.390083][T11377] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 316.428163][T11389] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 316.540839][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.616835][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 316.775181][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 316.855467][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 316.859835][ T1212] itetech 0003:06CB:73F5.0023: unknown main item tag 0x0 [ 316.859874][ T1212] itetech 0003:06CB:73F5.0023: unknown main item tag 0x0 [ 316.859898][ T1212] itetech 0003:06CB:73F5.0023: unknown main item tag 0x0 [ 316.859922][ T1212] itetech 0003:06CB:73F5.0023: unknown main item tag 0x0 [ 316.859944][ T1212] itetech 0003:06CB:73F5.0023: unknown main item tag 0x0 [ 316.874372][ T1212] itetech 0003:06CB:73F5.0023: hidraw0: USB HID v0.81 Device [HID 06cb:73f5] on usb-dummy_hcd.5-1/input0 [ 317.016274][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 317.048768][ T10] usb 6-1: USB disconnect, device number 14 [ 317.178306][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 317.233058][T11401] fido_id[11401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 317.452605][T11387] loop2: detected capacity change from 0 to 32768 [ 317.460824][T11387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2267 (11387) [ 317.504424][T11387] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.504494][T11387] BTRFS info (device loop2): using crc32c checksum algorithm [ 317.546132][T11418] loop3: detected capacity change from 0 to 256 [ 317.559986][T11418] exfat: Deprecated parameter 'utf8' [ 317.569610][T11418] exfat: Deprecated parameter 'namecase' [ 317.569760][T11418] exfat: Deprecated parameter 'namecase' [ 317.569797][T11418] exfat: Deprecated parameter 'utf8' [ 317.688971][T11387] BTRFS info (device loop2): enabling ssd optimizations [ 317.689122][T11387] BTRFS info (device loop2): turning on flush-on-commit [ 317.689144][T11387] BTRFS info (device loop2): enabling free space tree [ 317.689164][T11387] BTRFS info (device loop2): enabling auto defrag [ 317.689186][T11387] BTRFS info (device loop2): use lzo compression, level 1 [ 317.689209][T11387] BTRFS info (device loop2): max_inline set to 4096 [ 317.703825][T11418] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 317.704218][T11418] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 317.772022][T11387] BTRFS error (device loop2): target device is invalid! [ 317.968450][ T5629] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.147305][T11433] loop3: detected capacity change from 0 to 1764 [ 318.340794][T11410] loop1: detected capacity change from 0 to 32768 [ 318.440023][T11410] JBD2: Ignoring recovery information on journal [ 318.462909][ C1] ================================================================== [ 318.462932][ C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 318.462970][ C1] Read of size 1 at addr ffff88807975f010 by task pool_workqueue_/3 [ 318.462987][ C1] [ 318.463001][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Tainted: G L syzkaller #0 PREEMPT(full) [ 318.463030][ C1] Tainted: [L]=SOFTLOCKUP [ 318.463038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 318.463051][ C1] Call Trace: [ 318.463060][ C1] [ 318.463069][ C1] dump_stack_lvl+0xe8/0x150 [ 318.463105][ C1] print_address_description+0x55/0x1e0 [ 318.463139][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 318.463170][ C1] print_report+0x58/0x70 [ 318.463204][ C1] kasan_report+0x117/0x150 [ 318.463235][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 318.463269][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 318.463305][ C1] llc_conn_state_process+0x4fb/0x1380 [ 318.463349][ C1] llc_conn_tmr_common_cb+0x34a/0x780 [ 318.463387][ C1] call_timer_fn+0x18d/0x5f0 [ 318.463419][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 318.463452][ C1] ? call_timer_fn+0xd5/0x5f0 [ 318.463487][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 318.463530][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.463566][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.463599][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 318.463637][ C1] __run_timer_base+0x652/0x8b0 [ 318.463664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.463704][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 318.463740][ C1] ? ktime_get+0x1f5/0x220 [ 318.463763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.463793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.463825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.463858][ C1] run_timer_softirq+0xb7/0x170 [ 318.463888][ C1] handle_softirqs+0x226/0x860 [ 318.463925][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 318.463967][ C1] __irq_exit_rcu+0xcb/0x220 [ 318.464003][ C1] irq_exit_rcu+0x9/0x30 [ 318.464034][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 318.464067][ C1] [ 318.464076][ C1] [ 318.464086][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.464114][ C1] RIP: 0010:lockdep_unregister_key+0x2d4/0x350 [ 318.464144][ C1] Code: e9 a1 13 09 00 48 c7 c7 90 39 9a 96 89 c6 e8 a3 66 42 0a e9 66 fe ff ff e8 39 96 3f 0a 41 f7 c7 00 02 00 00 74 b4 fb 40 84 ed <75> b3 eb c4 90 0f 0b 90 e9 27 ff ff ff 90 0f 0b 90 e9 2f ff ff ff [ 318.464166][ C1] RSP: 0018:ffffc90000087c80 EFLAGS: 00000246 [ 318.464190][ C1] RAX: 0000000000000046 RBX: ffff8880287a6930 RCX: 0000000000000046 [ 318.464208][ C1] RDX: ffffffff9455b4f8 RSI: ffffffff8e48da65 RDI: ffffffff8c6d8b80 [ 318.464228][ C1] RBP: ffff88801de81f00 R08: 4d00000000000000 R09: 0000000000000000 [ 318.464247][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000000 [ 318.464263][ C1] R13: ffff8880287a6931 R14: 0000000000001000 R15: 0000000000000a47 [ 318.464297][ C1] pwq_release_workfn+0x7c1/0x920 [ 318.464340][ C1] kthread_worker_fn+0x4eb/0xb20 [ 318.464382][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 318.464423][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 318.464462][ C1] kthread+0x38b/0x480 [ 318.464488][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 318.464522][ C1] ? __pfx_kthread+0x10/0x10 [ 318.464543][ C1] ret_from_fork+0x514/0xb70 [ 318.464581][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.464616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.464642][ C1] ? __switch_to+0xc89/0x1420 [ 318.464674][ C1] ? __pfx_kthread+0x10/0x10 [ 318.464696][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.464746][ C1] [ 318.464754][ C1] [ 318.464759][ C1] Allocated by task 11411: [ 318.464770][ C1] kasan_save_track+0x3e/0x80 [ 318.464791][ C1] __kasan_kmalloc+0x93/0xb0 [ 318.464811][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 318.464844][ C1] llc_sap_open+0xe1/0x3b0 [ 318.464867][ C1] llc_ui_autobind+0x1f1/0x560 [ 318.464889][ C1] llc_ui_connect+0x1d7/0xd50 [ 318.464909][ C1] __sys_connect+0x316/0x450 [ 318.464938][ C1] __x64_sys_connect+0x7a/0x90 [ 318.464967][ C1] do_syscall_64+0x166/0x520 [ 318.465001][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.465025][ C1] [ 318.465031][ C1] Freed by task 11433: [ 318.465043][ C1] kasan_save_track+0x3e/0x80 [ 318.465065][ C1] kasan_save_free_info+0x40/0x50 [ 318.465098][ C1] __kasan_slab_free+0x5c/0x80 [ 318.465122][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 318.465150][ C1] rcu_free_sheaf+0x31/0x200 [ 318.465170][ C1] rcu_core+0x926/0x1260 [ 318.465193][ C1] handle_softirqs+0x226/0x860 [ 318.465224][ C1] __irq_exit_rcu+0xcb/0x220 [ 318.465255][ C1] irq_exit_rcu+0x9/0x30 [ 318.465285][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 318.465314][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.465340][ C1] [ 318.465347][ C1] The buggy address belongs to the object at ffff88807975f000 [ 318.465347][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 318.465368][ C1] The buggy address is located 16 bytes inside of [ 318.465368][ C1] freed 2048-byte region [ffff88807975f000, ffff88807975f800) [ 318.465394][ C1] [ 318.465401][ C1] The buggy address belongs to the physical page: [ 318.465412][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079758000 pfn:0x79758 [ 318.465437][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 318.465457][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 318.465482][ C1] page_type: f5(slab) [ 318.465505][ C1] raw: 00fff00000000240 ffff88801b042000 ffffea0001f80810 ffffea0000d6de10 [ 318.465528][ C1] raw: ffff888079758000 0000000000080006 00000000f5000000 0000000000000000 [ 318.465552][ C1] head: 00fff00000000240 ffff88801b042000 ffffea0001f80810 ffffea0000d6de10 [ 318.465575][ C1] head: ffff888079758000 0000000000080006 00000000f5000000 0000000000000000 [ 318.465599][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 318.465621][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 318.465636][ C1] page dumped because: kasan: bad access detected [ 318.465648][ C1] page_owner tracks the page as allocated [ 318.465656][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5631, tgid 5631 (kworker/0:3), ts 116425666775 [ 318.465697][ C1] post_alloc_hook+0x1f9/0x250 [ 318.465739][ C1] get_page_from_freelist+0x2209/0x2280 [ 318.465762][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 318.465786][ C1] allocate_slab+0x7d/0x620 [ 318.465814][ C1] refill_objects+0x2d5/0x350 [ 318.465844][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 318.465872][ C1] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 318.465911][ C1] __alloc_skb+0x2c1/0x7a0 [ 318.465944][ C1] mld_newpack+0x165/0xcb0 [ 318.465978][ C1] add_grec+0x119f/0x19d0 [ 318.466009][ C1] mld_ifc_work+0x6f1/0xd60 [ 318.466038][ C1] process_scheduled_works+0xc3d/0x1630 [ 318.466067][ C1] worker_thread+0xa47/0xfb0 [ 318.466099][ C1] kthread+0x38b/0x480 [ 318.466119][ C1] ret_from_fork+0x514/0xb70 [ 318.466155][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.466191][ C1] page last free pid 5388 tgid 5388 ts 52470174058 stack trace: [ 318.466209][ C1] __free_frozen_pages+0xc93/0xd90 [ 318.466244][ C1] __slab_free+0x274/0x2c0 [ 318.466263][ C1] qlist_free_all+0x99/0x100 [ 318.466300][ C1] kasan_quarantine_reduce+0x148/0x160 [ 318.466338][ C1] __kasan_slab_alloc+0x22/0x80 [ 318.466362][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 318.466396][ C1] vm_area_alloc+0x24/0x140 [ 318.466431][ C1] mmap_region+0x12cb/0x2240 [ 318.466457][ C1] do_mmap+0xe0a/0x1300 [ 318.466484][ C1] vm_mmap_pgoff+0x272/0x4e0 [ 318.466508][ C1] ksys_mmap_pgoff+0x4dc/0x760 [ 318.466537][ C1] do_syscall_64+0x166/0x520 [ 318.466569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.466593][ C1] [ 318.466600][ C1] Memory state around the buggy address: [ 318.466612][ C1] ffff88807975ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.466629][ C1] ffff88807975ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.466647][ C1] >ffff88807975f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.466660][ C1] ^ [ 318.466672][ C1] ffff88807975f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.466689][ C1] ffff88807975f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.466702][ C1] ================================================================== [ 318.466788][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 319.311175][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Tainted: G L syzkaller #0 PREEMPT(full) [ 319.322201][ C1] Tainted: [L]=SOFTLOCKUP [ 319.326513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 319.336560][ C1] Call Trace: [ 319.339842][ C1] [ 319.342676][ C1] vpanic+0x56d/0xa60 [ 319.346668][ C1] ? rcu_is_watching+0x16/0xb0 [ 319.351434][ C1] ? __pfx_vpanic+0x10/0x10 [ 319.355952][ C1] panic+0xc5/0xd0 [ 319.359688][ C1] ? __pfx_panic+0x10/0x10 [ 319.364107][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.370705][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.377297][ C1] check_panic_on_warn+0x89/0xb0 [ 319.382233][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.388824][ C1] end_report+0x73/0x170 [ 319.393065][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.399651][ C1] kasan_report+0x128/0x150 [ 319.404155][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.410745][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420 [ 319.417167][ C1] llc_conn_state_process+0x4fb/0x1380 [ 319.422638][ C1] llc_conn_tmr_common_cb+0x34a/0x780 [ 319.428018][ C1] call_timer_fn+0x18d/0x5f0 [ 319.432612][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 319.438246][ C1] ? call_timer_fn+0xd5/0x5f0 [ 319.442928][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 319.448041][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.453676][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.458872][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 319.464507][ C1] __run_timer_base+0x652/0x8b0 [ 319.469352][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.474990][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 319.480373][ C1] ? ktime_get+0x1f5/0x220 [ 319.484786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.490417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.496053][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.501691][ C1] run_timer_softirq+0xb7/0x170 [ 319.506544][ C1] handle_softirqs+0x226/0x860 [ 319.511316][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 319.516083][ C1] __irq_exit_rcu+0xcb/0x220 [ 319.520676][ C1] irq_exit_rcu+0x9/0x30 [ 319.524918][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 319.530556][ C1] [ 319.533477][ C1] [ 319.536396][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.542376][ C1] RIP: 0010:lockdep_unregister_key+0x2d4/0x350 [ 319.548526][ C1] Code: e9 a1 13 09 00 48 c7 c7 90 39 9a 96 89 c6 e8 a3 66 42 0a e9 66 fe ff ff e8 39 96 3f 0a 41 f7 c7 00 02 00 00 74 b4 fb 40 84 ed <75> b3 eb c4 90 0f 0b 90 e9 27 ff ff ff 90 0f 0b 90 e9 2f ff ff ff [ 319.568218][ C1] RSP: 0018:ffffc90000087c80 EFLAGS: 00000246 [ 319.574288][ C1] RAX: 0000000000000046 RBX: ffff8880287a6930 RCX: 0000000000000046 [ 319.582250][ C1] RDX: ffffffff9455b4f8 RSI: ffffffff8e48da65 RDI: ffffffff8c6d8b80 [ 319.590222][ C1] RBP: ffff88801de81f00 R08: 4d00000000000000 R09: 0000000000000000 [ 319.598220][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000000 [ 319.606188][ C1] R13: ffff8880287a6931 R14: 0000000000001000 R15: 0000000000000a47 [ 319.614171][ C1] pwq_release_workfn+0x7c1/0x920 [ 319.619211][ C1] kthread_worker_fn+0x4eb/0xb20 [ 319.624169][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 319.629201][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 319.634755][ C1] kthread+0x38b/0x480 [ 319.638818][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 319.644289][ C1] ? __pfx_kthread+0x10/0x10 [ 319.648877][ C1] ret_from_fork+0x514/0xb70 [ 319.653477][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 319.658600][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.664234][ C1] ? __switch_to+0xc89/0x1420 [ 319.668923][ C1] ? __pfx_kthread+0x10/0x10 [ 319.673511][ C1] ret_from_fork_asm+0x1a/0x30 [ 319.678297][ C1] [ 319.681536][ C1] Kernel Offset: disabled [ 319.685845][ C1] Rebooting in 86400 seconds..