last executing test programs: 25.812097695s ago: executing program 1 (id=3193): write(0xffffffffffffffff, &(0x7f0000000440)="20196575a57cd8b3bd94120e1aaddb7e5cdd31f326de7f6e5dcbe03f477a91e363bef30645a42e17ebd83b30c522e15cc873b37882d840392a9cd208ee0000d25fe82761bf7fe2e8f4540059eaeb4359c5b3abdd95f9817742025cd78f2b097f4cfc461722ac4a321b501218dfc974ff", 0x70) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 25.129214794s ago: executing program 1 (id=3199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100000000", 0x26) 23.566287285s ago: executing program 1 (id=3206): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000340)={0x18, r2, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r2, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x43, r3, 0x200, 0x6}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000580)={0x18, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000640)={0x20, r2, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 22.397322961s ago: executing program 1 (id=3210): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 20.833201349s ago: executing program 1 (id=3217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) close_range(r0, 0xffffffffffffffff, 0x0) 19.69840217s ago: executing program 1 (id=3223): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000040)=0xfffffffffffffff7) 18.058526319s ago: executing program 32 (id=3223): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000040)=0xfffffffffffffff7) 10.658500893s ago: executing program 0 (id=3248): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000340)={0x18, r2, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000003c0)={0x18, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r2, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x43, r3, 0x200, 0x6}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000580)={0x18, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000640)={0x18, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 9.245203652s ago: executing program 0 (id=3251): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.808710147s ago: executing program 0 (id=3253): mount(0x0, 0x0, 0x0, 0x14011, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000001400), 0x1, 0x7b0, &(0x7f0000001c00)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000) 7.993841671s ago: executing program 0 (id=3257): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nomblk_io_submit}, {@usrquota}, {@grpid}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x75, 0x8005, 0x0, 0x0, 0x2, 0xd, "ef359f413bb90100010000000000fbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7a628a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263a9f53d11e72cb39b71038259ca1727e1a311ef545032d71e14ef3dc177e9b48b005d00", "f28359738ee6d60200000000000000010000000100", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7.870745044s ago: executing program 3 (id=3259): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0xffffffb2) 7.256398743s ago: executing program 0 (id=3261): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000240)=""/171, 0xba974ed140df49c7) 7.092372442s ago: executing program 5 (id=3262): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000340)={0x18, r2, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000003c0)={0x18, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r2, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x43, r3, 0x200, 0x6}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000580)={0x18, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000640)={0x20, r2, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 5.906059056s ago: executing program 5 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x8000, 0x3) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000840)={0x2, 0x0, 0x16, 0x14, 0x3, &(0x7f0000000440)="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"}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 4.860356716s ago: executing program 5 (id=3265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.783506288s ago: executing program 3 (id=3267): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 4.638185914s ago: executing program 2 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xef) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '/+>', 0x8, 0x11, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], {0x4e23, 0x4e23, 0x8}}}}}}, 0x0) 4.323971698s ago: executing program 0 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r1, &(0x7f0000000200)={0x2}, 0x8, 0x800) 2.745950295s ago: executing program 33 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r1, &(0x7f0000000200)={0x2}, 0x8, 0x800) 2.737916527s ago: executing program 2 (id=3272): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 2.725937171s ago: executing program 3 (id=3273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.724459617s ago: executing program 4 (id=3274): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r1}) 2.723286404s ago: executing program 5 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00f}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 2.40037554s ago: executing program 3 (id=3276): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usbip_server_init(0x4) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000000030000000100000001000000"], 0x60) 2.353416557s ago: executing program 2 (id=3277): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0xc23, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x8, 0x1, 0xfffffffd, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48014}, 0x4080) 2.269890212s ago: executing program 2 (id=3278): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x800) eventfd(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r4 = socket$tipc(0x1e, 0x2, 0x0) execve(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000200)={0x5, 0xa9, 0x3}) ioprio_set$pid(0x3, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x3, r1, 0x0, 0x0, 0x3, 0x0, 0x1, r1}]) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000500)={0x3, 0x3ff, @status={[0x3, 0xb78f, 0xc, 0x100, 0x2, 0x7ff]}, [0x7, 0xe1, 0xded9, 0x43, 0x7, 0x2, 0x7dbd, 0x8000000000000001, 0x0, 0x6f, 0x2, 0x5, 0x35, 0x3ff, 0x8, 0x7fffffffffffffff, 0x4, 0xb, 0x8, 0x100000001, 0xb, 0x9, 0x2, 0x6, 0x6, 0x2365, 0x2f, 0x9, 0x4, 0xfff, 0x6, 0x8, 0xa62, 0x6, 0x6, 0x101, 0x40, 0x6, 0x28000000000000, 0x81a8, 0xffffffffffffffff, 0x1ff, 0x100000000, 0x81, 0x3, 0x10001, 0x3, 0x7, 0x40, 0x80000001, 0x80, 0x8000, 0x31c, 0x1000000, 0x33, 0x2, 0x5, 0x7fffffffffffffff, 0x10, 0xffe, 0x10, 0xbf, 0x3, 0x8]}) readv(r6, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) 2.156502131s ago: executing program 5 (id=3279): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0xffffffb2) 2.113942887s ago: executing program 4 (id=3280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.3667366s ago: executing program 4 (id=3281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.104406307s ago: executing program 4 (id=3282): socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x20000) 986.799221ms ago: executing program 3 (id=3283): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 728.236951ms ago: executing program 2 (id=3284): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 646.771241ms ago: executing program 3 (id=3285): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read$proc_mixer(r2, &(0x7f0000001640)=""/205, 0xcd) 379.757233ms ago: executing program 4 (id=3286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) shutdown(r0, 0x1) 210.474161ms ago: executing program 2 (id=3287): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLL', 0x15, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18, r2}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r2, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000340)={0x18, r2, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000003c0)={0x18, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r2, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r3, r2, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x43, r3, 0x200, 0x6}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r3}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000640)={0x20, r2, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 162.187986ms ago: executing program 5 (id=3288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=3289): r0 = socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0xfffff07c}], 0x1c) kernel console output (not intermixed with test programs): 1100.478475][ T1164] ? mark_held_locks+0x40/0x70 [ 1100.478541][ T1164] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.478592][ T1164] wb_workfn+0x143/0xc80 [ 1100.478659][ T1164] ? __pfx_wb_workfn+0x10/0x10 [ 1100.478718][ T1164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.478764][ T1164] ? lock_acquire+0x1d1/0x380 [ 1100.478824][ T1164] ? process_one_work+0xa2c/0x1b10 [ 1100.478880][ T1164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.478934][ T1164] ? process_one_work+0x906/0x1b10 [ 1100.478988][ T1164] ? process_one_work+0x906/0x1b10 [ 1100.479042][ T1164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.479101][ T1164] process_one_work+0xac7/0x1b10 [ 1100.479180][ T1164] ? __pfx_process_one_work+0x10/0x10 [ 1100.479238][ T1164] ? lock_acquire+0x1d1/0x380 [ 1100.479315][ T1164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.479371][ T1164] worker_thread+0x5ef/0xe50 [ 1100.479441][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 1100.479499][ T1164] ? kthread+0x13a/0x450 [ 1100.479553][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 1100.479605][ T1164] kthread+0x373/0x450 [ 1100.479653][ T1164] ? __pfx_kthread+0x10/0x10 [ 1100.479706][ T1164] ret_from_fork+0x730/0xd60 [ 1100.479748][ T1164] ? __pfx_ret_from_fork+0x10/0x10 [ 1100.479789][ T1164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1100.479835][ T1164] ? __switch_to+0x800/0x10f0 [ 1100.479884][ T1164] ? __switch_to_asm+0x39/0x70 [ 1100.479920][ T1164] ? __pfx_kthread+0x10/0x10 [ 1100.479973][ T1164] ret_from_fork_asm+0x1a/0x30 [ 1100.480039][ T1164] [ 1100.496869][ T1164] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1100.520278][ T188] loop0: lost filesystem error report for type 5 error -108 [ 1100.736135][T14393] loop3: detected capacity change from 0 to 2640 [ 1100.784503][ T5640] Buffer I/O error on dev loop3, logical block 0, async page read [ 1100.800566][ T5640] Buffer I/O error on dev loop3, logical block 0, async page read [ 1101.141057][T14393] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 1101.141182][T14393] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 1101.141264][T14393] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 1101.141313][T14393] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 1101.141380][T14393] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 1101.141428][T14393] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 1101.141475][T14393] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 1101.141554][T14393] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 1101.410103][T14400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1102.539780][T14404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.910297][T14411] loop4: detected capacity change from 0 to 256 [ 1102.922497][T14411] exfat: Deprecated parameter 'utf8' [ 1102.933752][T14411] exfat: Deprecated parameter 'utf8' [ 1102.939357][T14411] exfat: Deprecated parameter 'utf8' [ 1102.939400][T14411] exfat: Deprecated parameter 'namecase' [ 1103.037945][T14411] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1103.496441][ T31] audit: type=1326 audit(1788188909.320:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14424 comm="syz.1.2832" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78a359e159 code=0x0 [ 1103.671780][ T6001] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 450 seconds [ 1103.671873][ T6001] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 450 seconds [ 1103.845752][T14429] loop1: detected capacity change from 0 to 2048 [ 1103.905013][T14429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.671360][ T5756] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1104.803220][ T31] audit: type=1326 audit(1788188910.620:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.0.2837" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5b39e159 code=0x0 [ 1104.861768][ T5756] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1104.863174][ T5756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.863258][ T5756] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1104.863313][ T5756] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1104.863377][ T5756] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1104.863455][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.580667][T14442] loop0: detected capacity change from 0 to 2048 [ 1106.628875][T14442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.678055][T14431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1106.728993][T14431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1106.847952][ T5756] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1106.945798][T14439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1106.951563][ T5756] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1106.951646][ T5756] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1107.003683][ T5756] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1107.024155][ T5756] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1107.032128][ T5756] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1107.044480][ T5756] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1107.256509][ T5756] usb 5-1: USB disconnect, device number 60 [ 1107.311122][ T5756] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1107.327944][ T5756] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1107.340259][ T5756] keyspan 5-1:1.0: device disconnected [ 1107.786645][T14459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.301234][ T31] audit: type=1326 audit(1788188915.130:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14475 comm="syz.0.2850" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5b39e159 code=0x0 [ 1110.098475][T14470] loop1: detected capacity change from 0 to 131072 [ 1110.099735][T14470] xfs: Deprecated parameter 'ikeep' [ 1110.099762][T14470] XFS: ikeep mount option is deprecated. [ 1110.325996][T14484] loop0: detected capacity change from 0 to 2048 [ 1110.441383][T14470] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1110.521480][T14484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.794973][T14470] XFS (loop1): Starting recovery (logdev: internal) [ 1110.819978][T14470] XFS (loop1): Ending recovery (logdev: internal) [ 1111.317170][T14498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.323328][ T5622] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1112.370506][T14502] loop2: detected capacity change from 0 to 2048 [ 1112.416946][T14502] loop2: p1 < > p4 [ 1112.416946][T14502] p4: [ 1112.547073][T14502] loop2: p4 size 722688 extends beyond EOD, truncated [ 1112.718630][ T5626] Bluetooth: hci3: link tx timeout [ 1112.718796][ T5626] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1112.753667][ T5626] Bluetooth: hci3: link tx timeout [ 1112.761801][ T5626] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1113.041213][T14514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.764783][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 1115.165646][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.165823][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.461275][T14534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.464655][T14534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.573051][T14531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.809868][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.810013][T14535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.810303][T14535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.810417][T14535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.888949][T14535] bridge0: entered promiscuous mode [ 1115.889021][T14535] bridge0: entered allmulticast mode [ 1116.153527][T14538] loop0: detected capacity change from 0 to 1024 [ 1116.230546][T14538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.297007][T14538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.458685][T14551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.482775][T14538] loop0: detected capacity change from 0 to 256 [ 1116.637436][T14538] vfat: Bad value for 'shortname' [ 1116.869895][T10284] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1117.293323][T10284] usb 5-1: Using ep0 maxpacket: 16 [ 1117.299387][T10284] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1117.300844][T10284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.300963][T10284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.301004][T10284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1117.301070][T10284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.390608][T10284] usb 5-1: config 0 descriptor?? [ 1117.826427][T14560] loop3: detected capacity change from 0 to 2048 [ 1117.862556][T14564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.086668][T10284] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0038/input/input56 [ 1118.965659][T14560] loop3: p1 < > p4 [ 1118.965659][T14560] p4: [ 1119.310103][T14560] loop3: p4 size 722688 extends beyond EOD, truncated [ 1119.318954][T10284] appleir 0003:05AC:8241.0038: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1119.740139][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1119.812990][T14581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.988157][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1120.865395][T10284] usb 5-1: USB disconnect, device number 61 [ 1120.976420][T14586] xt_hashlimit: size too large, truncated to 1048576 [ 1121.059862][T14579] fido_id[14579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1121.369485][T14598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.370638][ T5809] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1121.541840][T10284] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1121.605380][ T5809] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1121.656702][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.672192][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1121.672648][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1121.683205][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1121.683302][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1121.683440][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1121.683536][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1121.683638][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1121.683735][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1121.683829][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1121.683975][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1121.684123][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1121.684380][ T5809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1121.787987][ T5809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1121.788201][ T5809] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1121.853430][T10284] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1121.968192][T10284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.022207][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.022268][ T5809] usb 3-1: Product: syz [ 1122.022314][ T5809] usb 3-1: Manufacturer: syz [ 1122.022348][ T5809] usb 3-1: SerialNumber: syz [ 1122.166279][T10284] usb 5-1: config 0 descriptor?? [ 1122.190260][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.190520][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.190714][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.223268][T10284] cp210x 5-1:0.0: cp210x converter detected [ 1122.253708][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.253995][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.254187][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.254380][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.254571][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.254762][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.255003][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.255184][T14591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1122.312470][ T5809] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1122.314567][ T5809] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 1122.356568][ T5809] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1122.395468][ T5809] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1122.417972][ T5809] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1122.644963][T10284] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1122.719158][T10284] usb 5-1: cp210x converter now attached to ttyUSB2 [ 1122.801646][ T5809] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1122.838091][T14606] raw_sendmsg: syz.1.2894 forgot to set AF_INET. Fix it! [ 1122.872555][ T5749] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1122.906566][T10284] usb 5-1: USB disconnect, device number 62 [ 1122.921251][T10284] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 1122.939588][T10284] cp210x 5-1:0.0: device disconnected [ 1122.960978][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 1122.966986][ T5809] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1122.967469][ T5764] usb 3-1: USB disconnect, device number 59 [ 1122.987927][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.987980][ T5809] usb 1-1: Product: syz [ 1122.988020][ T5809] usb 1-1: Manufacturer: syz [ 1122.988060][ T5809] usb 1-1: SerialNumber: syz [ 1123.032224][ T5749] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1123.045593][ T5749] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1123.045651][ T5749] usb 6-1: config 1 has no interface number 0 [ 1123.065687][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.074065][ T5749] usb 6-1: Product: syz [ 1123.074126][ T5749] usb 6-1: Manufacturer: syz [ 1123.074163][ T5749] usb 6-1: SerialNumber: syz [ 1123.090044][ T5809] usb 1-1: config 0 descriptor?? [ 1123.121688][ T5764] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1123.137369][ T5809] usb 1-1: selecting invalid altsetting 1 [ 1123.140186][ T5764] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1123.152409][ T5764] keyspan 3-1:1.0: device disconnected [ 1123.158650][ T5809] technisat-usb2: could not set alternate setting to 0 [ 1123.180640][ T5749] usb 6-1: 3:1 : does not exist [ 1123.187450][ T5749] usb 6-1: 3:2 : does not exist [ 1123.356360][ T5809] technisat-usb2: firmware version: 0.0 [ 1123.368287][ T5809] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1123.508122][ T5764] usb 6-1: USB disconnect, device number 59 [ 1123.792831][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1123.796448][ T5809] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1123.796536][ T5809] usb 1-1: media controller created [ 1123.796605][ T5809] technisat-usb2: i2c-error: out failed 53 = -22 [ 1123.796669][ T5809] dvb-usb: MAC address reading failed. [ 1123.855184][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.979028][T14602] technisat-usb2: i2c-error: out failed 00 = -22 [ 1124.118808][ T5809] DVB: Unable to find symbol stv090x_attach() [ 1124.119228][ T5809] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1124.310943][ T5809] rc_core: IR keymap rc-technisat-usb2 not found [ 1124.310992][ T5809] Registered IR keymap rc-empty [ 1124.312982][ T5809] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1124.315623][ T5809] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input57 [ 1124.319668][ T5809] dvb-usb: schedule remote query interval to 100 msecs. [ 1124.320472][ T5809] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1124.323822][ T5809] usb 1-1: USB disconnect, device number 76 [ 1124.557300][ T5809] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1124.561557][ T5807] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1124.711254][ T5807] usb 6-1: Using ep0 maxpacket: 16 [ 1124.715371][ T5807] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1124.719742][ T5807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1124.719827][ T5807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1124.733897][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.733938][ T5807] usb 6-1: Product: syz [ 1124.733965][ T5807] usb 6-1: Manufacturer: syz [ 1124.733993][ T5807] usb 6-1: SerialNumber: syz [ 1124.915572][T14629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.948841][ T5807] usb 6-1: config 0 descriptor?? [ 1125.692023][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1125.903840][ T5807] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input58 [ 1126.144495][ T5807] imon:send_packet: packet tx failed (-71) [ 1126.173862][ T5807] imon 6-1:0.0: panel buttons/knobs setup failed [ 1126.345047][T14640] loop3: detected capacity change from 0 to 512 [ 1126.361137][T14640] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1126.386222][T14640] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.2903: inode has both inline data and extents flags [ 1126.386297][T14640] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1126.399679][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1126.399713][ C1] EXT4-fs (loop3): initial error at time 1788188932: ext4_orphan_get:1403: inode 15 [ 1126.399764][ C1] EXT4-fs (loop3): last error at time 1788188932: ext4_orphan_get:1403: inode 15 [ 1126.420944][ T5807] rc_core: IR keymap rc-imon-pad not found [ 1126.420966][ T5807] Registered IR keymap rc-empty [ 1126.421051][ T5807] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1126.421081][ T5807] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1126.424680][ T5807] imon:send_packet: packet tx failed (-71) [ 1126.441148][ T5807] imon 6-1:0.0: remote input dev register failed [ 1126.441334][ T5807] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1126.451739][T14640] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2903: couldn't read orphan inode 15 (err -117) [ 1126.451789][T14640] loop3: lost filesystem error report for type 5 error -117 [ 1126.540761][T14640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.676550][T14640] EXT4-fs error (device loop3): ext4_check_dx_root:2202: inode #2: comm syz.3.2903: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 1126.861597][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.970795][T14650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.154302][ T5807] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1128.167687][ T5807] imon:imon_probe: failed to initialize context! [ 1128.181049][ T5807] imon 6-1:0.0: unable to register, err -19 [ 1128.231972][ T5807] usb 6-1: USB disconnect, device number 60 [ 1128.441402][T10284] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1128.549743][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1128.593080][T10284] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.602590][T10284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.618615][T10284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.618680][T10284] usb 5-1: Product: syz [ 1128.618710][T10284] usb 5-1: Manufacturer: syz [ 1128.618738][T10284] usb 5-1: SerialNumber: syz [ 1128.695348][T14666] loop3: detected capacity change from 0 to 1024 [ 1128.703466][T14666] EXT4-fs: Ignoring removed bh option [ 1128.790989][ T56] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1128.804055][ T188] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1128.823178][T14666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.854779][ T31] audit: type=1800 audit(1788188934.680:249): pid=14666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2915" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1128.888146][T14666] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1128.956937][T14672] EXT4-fs (loop3): shut down requested (1) [ 1128.963732][ T56] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1128.975426][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.993999][ T56] usb 3-1: config 0 descriptor?? [ 1129.007984][ T56] cp210x 3-1:0.0: cp210x converter detected [ 1129.305983][T14673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.360961][ T188] usb 6-1: Using ep0 maxpacket: 32 [ 1129.418682][ T56] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1129.448623][ T56] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1129.642348][ T56] usb 3-1: USB disconnect, device number 60 [ 1129.659240][ T56] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1129.901232][T10284] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1129.901282][T10284] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1129.901321][T10284] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1130.031143][ T188] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1130.108583][T10284] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1130.281686][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.128656][ T188] usb 6-1: config 0 descriptor?? [ 1131.723594][ T188] as10x_usb: device has been detected [ 1131.732724][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.737764][ T188] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1131.747714][T10284] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1131.754001][ T188] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1131.765785][T10284] usb 5-1: USB disconnect, device number 63 [ 1131.766229][ T56] cp210x 3-1:0.0: device disconnected [ 1131.770804][T10284] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1131.771132][ T188] as10x_usb: error during firmware upload part1 [ 1131.771802][ T188] Registered device nBox DVB-T Dongle [ 1131.777764][ T188] usb 6-1: USB disconnect, device number 61 [ 1131.815640][ T188] Unregistered device nBox DVB-T Dongle [ 1131.824148][ T188] as10x_usb: device has been disconnected [ 1132.064202][T14687] netlink: 'syz.4.2923': attribute type 13 has an invalid length. [ 1132.074815][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1132.149291][T14687] netlink: 'syz.4.2923': attribute type 13 has an invalid length. [ 1132.149344][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 1132.314139][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1132.329510][ T1164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1132.346409][ T1164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1132.346506][ T1164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1132.476810][T14697] loop2: detected capacity change from 0 to 7 [ 1132.487808][T14697] Dev loop2: unable to read RDB block 7 [ 1132.487869][T14697] loop2: AHDI p1 p2 p3 [ 1132.487916][T14697] loop2: partition table partially beyond EOD, truncated [ 1132.488164][T14697] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1132.488215][T14697] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1132.509241][T14695] loop3: detected capacity change from 0 to 40427 [ 1132.513723][T14695] F2FS-fs (loop3): invalid crc value [ 1132.636005][T14695] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1132.643086][T14695] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 1132.643124][T14695] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1132.643166][T14695] F2FS-fs (loop3): Start checkpoint disabled! [ 1132.651333][T14695] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 1132.651709][T14695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1132.738127][T14700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.977996][T14701] loop1: detected capacity change from 0 to 4096 [ 1133.109428][T14701] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1133.114602][ T314] kworker/u8:6: attempt to access beyond end of device [ 1133.114602][ T314] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1133.114698][ T314] CPU: 0 UID: 0 PID: 314 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.114751][ T314] Tainted: [L]=SOFTLOCKUP [ 1133.114766][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1133.114792][ T314] Workqueue: writeback wb_workfn (flush-7:3) [ 1133.114859][ T314] Call Trace: [ 1133.114873][ T314] [ 1133.114888][ T314] dump_stack_lvl+0x100/0x190 [ 1133.114944][ T314] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1133.115006][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.115054][ T314] ? errseq_set+0xe3/0x150 [ 1133.115094][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.115150][ T314] f2fs_write_end_bio+0xef9/0x12d0 [ 1133.115221][ T314] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1133.115285][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.115340][ T314] ? find_held_lock+0x2b/0x80 [ 1133.115389][ T314] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1133.115445][ T314] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1133.115494][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.115551][ T314] f2fs_write_end_io+0xc8/0x240 [ 1133.115594][ T314] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1133.115633][ T314] bio_endio+0x7ba/0x9c0 [ 1133.115689][ T314] submit_bio_noacct+0x22a/0x2130 [ 1133.115745][ T314] f2fs_submit_write_bio+0x133/0x330 [ 1133.115808][ T314] __submit_merged_bio+0x330/0x7b0 [ 1133.115847][ T314] ? rcu_is_watching+0x13/0xc0 [ 1133.115901][ T314] __submit_merged_write_cond+0x3fe/0x510 [ 1133.115954][ T314] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1133.116009][ T314] ? __pfx___might_resched+0x10/0x10 [ 1133.116066][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.116113][ T314] ? folio_clear_dirty_for_io+0x178/0x960 [ 1133.116171][ T314] f2fs_write_cache_pages+0x20e9/0x2630 [ 1133.116244][ T314] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 1133.116292][ T314] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1133.116355][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.116402][ T314] ? find_held_lock+0x2b/0x80 [ 1133.116450][ T314] ? nr_blockdev_pages+0xde/0x120 [ 1133.116597][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.116643][ T314] ? find_held_lock+0x2b/0x80 [ 1133.116690][ T314] ? f2fs_write_meta_pages+0x45c/0x6f0 [ 1133.116736][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.116782][ T314] ? rcu_is_watching+0x13/0xc0 [ 1133.116835][ T314] f2fs_write_data_pages+0x799/0x16d0 [ 1133.116882][ T314] ? up_write+0x2dc/0x5b0 [ 1133.116937][ T314] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1133.116983][ T314] ? __lock_acquire+0x4c5/0x1ec0 [ 1133.117058][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.117104][ T314] ? __lock_acquire+0x4c5/0x1ec0 [ 1133.117167][ T314] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1133.117220][ T314] do_writepages+0x278/0x600 [ 1133.117276][ T314] ? __pfx_do_writepages+0x10/0x10 [ 1133.117324][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.117371][ T314] ? reacquire_held_locks+0xdd/0x1f0 [ 1133.117433][ T314] ? writeback_sb_inodes+0x3e1/0x1c50 [ 1133.117494][ T314] __writeback_single_inode+0x164/0x1560 [ 1133.117550][ T314] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 1133.117609][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.117659][ T314] ? __pfx___writeback_single_inode+0x10/0x10 [ 1133.117713][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.117759][ T314] ? do_raw_spin_unlock+0x145/0x1e0 [ 1133.117804][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.117859][ T314] writeback_sb_inodes+0x766/0x1c50 [ 1133.117941][ T314] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1133.117995][ T314] ? do_raw_spin_lock+0x128/0x260 [ 1133.118112][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118158][ T314] ? rcu_is_watching+0x13/0xc0 [ 1133.118203][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118249][ T314] ? queue_io+0x287/0x530 [ 1133.118301][ T314] wb_writeback+0x1c0/0xb50 [ 1133.118372][ T314] ? __pfx_wb_writeback+0x10/0x10 [ 1133.118424][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118486][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118533][ T314] ? mark_held_locks+0x40/0x70 [ 1133.118604][ T314] ? _raw_spin_unlock_irq+0x23/0x50 [ 1133.118656][ T314] wb_workfn+0x143/0xc80 [ 1133.118724][ T314] ? __pfx_wb_workfn+0x10/0x10 [ 1133.118783][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118830][ T314] ? lock_acquire+0x1d1/0x380 [ 1133.118889][ T314] ? process_one_work+0xa2c/0x1b10 [ 1133.118948][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.118997][ T314] ? process_one_work+0x906/0x1b10 [ 1133.119050][ T314] ? process_one_work+0x906/0x1b10 [ 1133.119102][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.119160][ T314] process_one_work+0xac7/0x1b10 [ 1133.119239][ T314] ? __pfx_process_one_work+0x10/0x10 [ 1133.119298][ T314] ? lock_acquire+0x1d1/0x380 [ 1133.119374][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.119430][ T314] worker_thread+0x5ef/0xe50 [ 1133.119508][ T314] ? kthread+0x13a/0x450 [ 1133.119554][ T314] ? __pfx_worker_thread+0x10/0x10 [ 1133.119612][ T314] kthread+0x373/0x450 [ 1133.119660][ T314] ? __pfx_kthread+0x10/0x10 [ 1133.119713][ T314] ret_from_fork+0x730/0xd60 [ 1133.119756][ T314] ? __pfx_ret_from_fork+0x10/0x10 [ 1133.119797][ T314] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1133.119843][ T314] ? __switch_to+0x800/0x10f0 [ 1133.119892][ T314] ? __switch_to_asm+0x39/0x70 [ 1133.119930][ T314] ? __pfx_kthread+0x10/0x10 [ 1133.119985][ T314] ret_from_fork_asm+0x1a/0x30 [ 1133.120049][ T314] [ 1133.120387][ T314] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1133.142764][T14709] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.163731][T14708] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1133.276281][ T31] audit: type=1326 audit(1788188939.100:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.2.2931" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1133.342039][T10284] syzkaller1: tun_net_xmit 90 [ 1133.351208][T14706] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1133.351238][T14706] syzkaller1: Linktype set failed because interface is up [ 1133.361278][T14701] NILFS (loop1): mounting fs with errors [ 1133.457033][T14701] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1133.457181][T14701] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1133.457357][T14701] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1133.457661][ T31] audit: type=1800 audit(1788188939.280:251): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2927" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1133.875501][ T1822] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 480 seconds [ 1133.875589][ T1822] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 480 seconds [ 1134.048804][T14701] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 159744 [ 1134.048857][T14701] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1134.048912][T14701] NILFS (loop1): error -5 truncating bmap (ino=15) [ 1134.094235][T14714] loop2: detected capacity change from 0 to 2048 [ 1134.178804][T14714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1134.209857][T10284] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1134.371481][T10284] usb 6-1: Using ep0 maxpacket: 8 [ 1134.374977][T10284] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1134.376551][T10284] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1134.376652][T10284] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1134.376694][T10284] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1134.376739][T10284] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1134.376783][T10284] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.376849][T10284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.571045][ T9339] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1134.706948][T10284] usb 6-1: usb_control_msg returned -32 [ 1134.707044][T10284] usbtmc 6-1:16.0: can't read capabilities [ 1134.731623][ T9339] usb 5-1: Using ep0 maxpacket: 8 [ 1134.737670][ T9339] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1134.748655][ T9339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1134.748721][ T9339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1134.748790][ T9339] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1134.748843][ T9339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1134.748904][ T9339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1134.748957][ T9339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.749031][ T9339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.817239][T14726] ip6gre1: entered promiscuous mode [ 1134.817272][T14726] ip6gre1: entered allmulticast mode [ 1135.079333][T14730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.385538][ T9339] usb 5-1: GET_CAPABILITIES returned 0 [ 1135.385641][ T9339] usbtmc 5-1:16.0: can't read capabilities [ 1136.729078][ T9339] usb 5-1: USB disconnect, device number 64 [ 1136.785521][T14727] syz.3.2932 (14727) used greatest stack depth: 20216 bytes left [ 1136.810947][T14733] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1136.891278][T14737] loop3: detected capacity change from 0 to 2048 [ 1136.934070][T14735] loop2: detected capacity change from 0 to 512 [ 1136.948146][T14735] EXT4-fs: Ignoring removed nobh option [ 1136.979519][T14737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.979663][T14737] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.022681][ T9339] usb 6-1: USB disconnect, device number 62 [ 1137.131038][T14735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm syz.2.2938: bg 0: block 248: padding at end of block bitmap is not set [ 1137.131116][T14735] loop2: lost filesystem error report for type 5 error -117 [ 1137.146503][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1137.146544][ C1] EXT4-fs (loop2): last error at time 1788188942: ext4_validate_block_bitmap:444 [ 1137.178862][T14735] Quota error (device loop2): write_blk: dquota write failed [ 1137.179000][T14735] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1137.179079][T14735] EXT4-fs error (device loop2): ext4_acquire_dquot:7067: comm syz.2.2938: Failed to acquire dquot type 1 [ 1137.179118][T14735] loop2: lost filesystem error report for type 5 error -28 [ 1137.311446][T14735] EXT4-fs (loop2): 1 truncate cleaned up [ 1137.323745][T14735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.323867][T14735] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.432300][T14753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.509456][T14751] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1139.033344][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.104063][ T9806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.106099][T14760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.358765][T14769] loop5: detected capacity change from 0 to 512 [ 1140.373008][T14769] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1140.391794][T14769] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2949: inode has both inline data and extents flags [ 1140.425239][T14769] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1140.426769][T14769] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2949: couldn't read orphan inode 15 (err -117) [ 1140.435986][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1140.436015][ C1] EXT4-fs (loop5): initial error at time 1788188946: ext4_orphan_get:1403: inode 15 [ 1140.436061][ C1] EXT4-fs (loop5): last error at time 1788188946: ext4_orphan_get:1403: inode 15 [ 1140.473817][T14769] loop5: lost filesystem error report for type 5 error -117 [ 1140.492279][T14769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.582340][ T188] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1140.652352][T14769] EXT4-fs error (device loop5): ext4_check_dx_root:2202: inode #2: comm syz.5.2949: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 1140.731819][ T188] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.738826][ T188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.738891][ T188] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1140.746446][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.746485][ T188] usb 4-1: Product: syz [ 1140.746512][ T188] usb 4-1: Manufacturer: syz [ 1140.746546][ T188] usb 4-1: SerialNumber: syz [ 1140.763878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.875378][ T188] cdc_mbim 4-1:1.0: skipping garbage [ 1140.997408][T13857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.730689][T14766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1142.609558][T14766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1142.617746][ T188] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1142.647396][ T188] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1143.119630][T14798] loop1: detected capacity change from 0 to 512 [ 1143.155742][ T188] wwan wwan0: port wwan0mbim0 attached [ 1143.193658][T14798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.193846][T14798] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.219281][ T5764] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1143.347745][ T188] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, f2:47:4f:b6:fb:59 [ 1143.381652][ T5764] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 1143.410748][ T188] usb 4-1: USB disconnect, device number 72 [ 1143.438702][ T5764] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1143.438765][ T5764] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1143.445229][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.472741][T14805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.475542][ T188] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1143.826441][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.826508][ T5764] usb 3-1: Product: syz [ 1143.826567][ T5764] usb 3-1: Manufacturer: syz [ 1143.826603][ T5764] usb 3-1: SerialNumber: syz [ 1144.447725][ T5764] usb 3-1: NFC: intf ffff88802a52f000 id ffffffff8fe90980 [ 1144.483468][ T31] audit: type=1326 audit(1788188950.310:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.0.2959" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5b39e159 code=0x0 [ 1144.547274][ T5764] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 1144.685384][ T188] wwan wwan0: port wwan0mbim0 disconnected [ 1144.853054][T14813] loop0: detected capacity change from 0 to 2048 [ 1144.993322][T14813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.876099][ T60] nfcmrvl 3-1:1.0: NFC: send entry, len 4 [ 1145.897583][ T60] usb 3-1: NFC: urb ffff8880268aa900 submission failed (90) [ 1146.181066][ T56] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1146.352215][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 1146.445226][T14832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1146.445984][ T56] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1146.446366][ T56] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1146.563291][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.563994][ T56] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1146.565733][ T56] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1146.685972][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.686727][ T56] usb 6-1: Product: syz [ 1146.696005][ T56] usb 6-1: Manufacturer: syz [ 1146.696125][ T56] usb 6-1: SerialNumber: syz [ 1147.027348][T14793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1147.582210][ T56] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1147.617058][ T56] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1147.650642][T14839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.215891][ T56] usb 6-1: 2:1 : bogus bTerminalLink 6 [ 1148.355881][ T5764] usb 3-1: USB disconnect, device number 61 [ 1148.497123][ T5764] usb 3-1: NFC: intf ffff88802a52f000 [ 1148.730674][ T56] usb 6-1: USB disconnect, device number 63 [ 1148.780568][ T31] audit: type=1326 audit(1788188954.600:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14841 comm="syz.2.2970" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1149.103809][T14853] loop2: detected capacity change from 0 to 2048 [ 1149.175403][T14853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1149.410795][T14857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.978958][T14868] loop2: detected capacity change from 0 to 256 [ 1150.991299][T14868] exfat: Deprecated parameter 'utf8' [ 1150.996748][T14868] exfat: Deprecated parameter 'namecase' [ 1151.004709][T14868] exfat: Deprecated parameter 'namecase' [ 1151.004779][T14868] exfat: Deprecated parameter 'utf8' [ 1151.062435][T14868] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1151.062989][T14868] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1151.202566][T14877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.204125][ T6334] udevd[6334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1151.361210][ T56] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1151.521369][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 1151.530260][ T56] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1151.547523][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.702700][ T56] usb 1-1: config 0 descriptor?? [ 1151.935339][T14879] Can't find a SQUASHFS superblock on nullb0 [ 1151.965049][ T56] as10x_usb: device has been detected [ 1151.997547][ T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1152.274913][T14868] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 1152.298850][ T56] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1152.466788][ T56] as10x_usb: error during firmware upload part1 [ 1152.478361][ T56] Registered device nBox DVB-T Dongle [ 1152.582483][ T56] usb 1-1: USB disconnect, device number 77 [ 1152.693636][ T56] Unregistered device nBox DVB-T Dongle [ 1152.715827][ T56] as10x_usb: device has been disconnected [ 1152.848422][ T31] audit: type=1326 audit(1788188958.670:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14887 comm="syz.3.2986" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1153.203112][T14897] loop3: detected capacity change from 0 to 2048 [ 1153.320515][T14897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.964251][T14905] FAULT_INJECTION: forcing a failure. [ 1153.964251][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.977669][T14905] CPU: 1 UID: 0 PID: 14905 Comm: syz.0.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.977730][T14905] Tainted: [L]=SOFTLOCKUP [ 1153.977746][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1153.977770][T14905] Call Trace: [ 1153.977784][T14905] [ 1153.977800][T14905] dump_stack_lvl+0x100/0x190 [ 1153.977859][T14905] should_fail_ex.cold+0x5/0xa [ 1153.977902][T14905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.977957][T14905] should_failslab+0xc2/0x120 [ 1153.978021][T14905] __kmalloc_cache_noprof+0x91/0x6d0 [ 1153.978067][T14905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.978115][T14905] ? do_raw_spin_lock+0x128/0x260 [ 1153.978160][T14905] ? alloc_fdtable+0xbd/0x2d0 [ 1153.978226][T14905] alloc_fdtable+0xbd/0x2d0 [ 1153.978287][T14905] dup_fd+0x995/0xd10 [ 1153.978350][T14905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.978399][T14905] ? do_raw_spin_unlock+0x145/0x1e0 [ 1153.978450][T14905] ? _raw_spin_unlock+0x28/0x50 [ 1153.978492][T14905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.978547][T14905] ? copy_fs_struct+0x2a0/0x340 [ 1153.978608][T14905] ksys_unshare+0x7c7/0xa70 [ 1153.978652][T14905] ? __pfx_ksys_unshare+0x10/0x10 [ 1153.978692][T14905] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.978760][T14905] __x64_sys_unshare+0x31/0x40 [ 1153.978802][T14905] do_syscall_64+0x123/0x790 [ 1153.978859][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.978903][T14905] RIP: 0033:0x7fcc5b39e159 [ 1153.978934][T14905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.978974][T14905] RSP: 002b:00007fcc5c1c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1153.979013][T14905] RAX: ffffffffffffffda RBX: 00007fcc5b625fa0 RCX: 00007fcc5b39e159 [ 1153.979040][T14905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 1153.979066][T14905] RBP: 00007fcc5b435024 R08: 0000000000000000 R09: 0000000000000000 [ 1153.979092][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.979118][T14905] R13: 00007fcc5b626038 R14: 00007fcc5b625fa0 R15: 00007ffe704d3dc8 [ 1153.979170][T14905] [ 1154.846901][T14914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.102159][ T31] audit: type=1326 audit(1788188961.930:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.0.2998" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5b39e159 code=0x0 [ 1156.345381][T14930] loop0: detected capacity change from 0 to 2048 [ 1156.417420][T14930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1157.349391][T14938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.461256][T10284] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1157.651714][T10284] usb 6-1: Using ep0 maxpacket: 32 [ 1157.691736][T10284] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1157.739997][T10284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.917233][T10284] usb 6-1: config 0 descriptor?? [ 1158.154713][T10284] as10x_usb: device has been detected [ 1158.156267][T10284] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1158.216935][T10284] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1158.262656][T10284] as10x_usb: error during firmware upload part1 [ 1158.271555][T10284] Registered device nBox DVB-T Dongle [ 1158.316308][T10284] usb 6-1: USB disconnect, device number 64 [ 1158.355583][T14944] loop0: detected capacity change from 0 to 128 [ 1158.498522][T14946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.619846][T10284] Unregistered device nBox DVB-T Dongle [ 1159.081104][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 1159.390051][T14944] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1159.406077][T10284] as10x_usb: device has been disconnected [ 1159.428045][T14944] ext4 filesystem being mounted at /506/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.667980][T14944] Invalid argument reading file caps for ./file0 [ 1159.891718][ T5620] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.703969][T14976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1160.756444][T14973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.557501][ T31] audit: type=1326 audit(1788188967.380:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.2.3016" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1161.595962][T14986] loop4: detected capacity change from 0 to 128 [ 1161.607082][T14986] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 1161.879402][T14994] loop2: detected capacity change from 0 to 2048 [ 1161.922990][T14995] overlay: filesystem on ./file0 not supported [ 1161.964799][T14994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1162.273729][T14998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.390100][T15004] jffs2: notice: (15004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1164.442102][ T1822] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 510 seconds [ 1164.442179][ T1822] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 510 seconds [ 1165.248030][T15028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.401744][ T5764] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1165.567239][ T5764] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1165.591910][ T5764] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1165.601394][ T5764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.614028][ T5764] usb 3-1: config 0 has no interfaces? [ 1165.620273][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.705805][ T5764] usb 3-1: config 0 descriptor?? [ 1165.771052][ T5742] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1166.123261][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 1166.137652][ T5742] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1166.164685][ T5742] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1166.164773][ T5742] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1166.164835][ T5742] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1166.164884][ T5742] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1166.164933][ T5742] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1166.210123][ T5742] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1166.210166][ T5742] usb 4-1: Product: syz [ 1166.210193][ T5742] usb 4-1: Manufacturer: syz [ 1166.210220][ T5742] usb 4-1: SerialNumber: syz [ 1166.234073][ T5742] usb 4-1: config 0 descriptor?? [ 1166.242035][ T5742] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1166.251177][ T5742] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1166.449107][ T5742] usb 3-1: USB disconnect, device number 62 [ 1166.571595][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 1166.708756][T15026] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1166.716170][ T9339] usb 4-1: USB disconnect, device number 73 [ 1166.716301][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1166.737574][T15036] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1166.745935][ T9339] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1167.055377][T15045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.176638][T15051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1168.316623][T15056] loop4: detected capacity change from 0 to 128 [ 1168.354609][T15056] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1168.354764][T15056] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 1168.354818][T15056] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1168.483591][T15062] FAULT_INJECTION: forcing a failure. [ 1168.483591][T15062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.499640][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.3.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.499704][T15062] Tainted: [L]=SOFTLOCKUP [ 1168.499720][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1168.499745][T15062] Call Trace: [ 1168.499758][T15062] [ 1168.499774][T15062] dump_stack_lvl+0x100/0x190 [ 1168.499834][T15062] should_fail_ex.cold+0x5/0xa [ 1168.499879][T15062] ? prepare_alloc_pages+0x16d/0x5b0 [ 1168.499949][T15062] should_fail_alloc_page+0xeb/0x140 [ 1168.500017][T15062] prepare_alloc_pages+0x1f0/0x5b0 [ 1168.500087][T15062] ? find_held_lock+0x2b/0x80 [ 1168.500145][T15062] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1168.500202][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500251][T15062] ? is_bpf_text_address+0x94/0x1a0 [ 1168.500294][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500342][T15062] ? kernel_text_address+0x8d/0x100 [ 1168.500401][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500450][T15062] ? __kernel_text_address+0xd/0x30 [ 1168.500506][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500555][T15062] ? unwind_get_return_address+0x59/0xa0 [ 1168.500614][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500663][T15062] ? __lock_acquire+0x4c5/0x1ec0 [ 1168.500733][T15062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1168.500796][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500844][T15062] ? look_up_lock_class+0x64/0x120 [ 1168.500896][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500946][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.500995][T15062] ? register_lock_class+0x3f/0x7b0 [ 1168.501068][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.501116][T15062] ? find_held_lock+0x2b/0x80 [ 1168.501166][T15062] ? ima_match_policy+0x8c4/0x23f0 [ 1168.501242][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.501291][T15062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.501362][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.501411][T15062] ? policy_nodemask+0xed/0x4f0 [ 1168.501482][T15062] alloc_pages_mpol+0x201/0x550 [ 1168.501551][T15062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1168.501615][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.501679][T15062] folio_alloc_mpol_noprof+0x36/0x260 [ 1168.501727][T15062] shmem_alloc_folio+0x135/0x160 [ 1168.501787][T15062] shmem_alloc_and_add_folio+0x371/0xd40 [ 1168.501833][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.501880][T15062] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1168.501924][T15062] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1168.501975][T15062] shmem_get_folio_gfp+0x75b/0x1980 [ 1168.502026][T15062] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1168.502075][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.502119][T15062] ? filemap_map_pages+0x114a/0x2100 [ 1168.502185][T15062] shmem_fault+0x1fb/0xa30 [ 1168.502228][T15062] ? __pfx_shmem_fault+0x10/0x10 [ 1168.502273][T15062] ? __pfx_filemap_map_pages+0x10/0x10 [ 1168.502337][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.502381][T15062] ? find_held_lock+0x2b/0x80 [ 1168.502430][T15062] ? __pfx_filemap_map_pages+0x10/0x10 [ 1168.502493][T15062] __do_fault+0x10b/0x440 [ 1168.502551][T15062] do_fault+0xb3f/0x1830 [ 1168.502618][T15062] ? __pfx_do_fault+0x10/0x10 [ 1168.502676][T15062] ? rcu_read_unlock+0x2d/0xb0 [ 1168.502720][T15062] ? rcu_read_unlock+0x2d/0xb0 [ 1168.502762][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.502811][T15062] ? __pte_offset_map+0x179/0x310 [ 1168.502875][T15062] __handle_mm_fault+0x150b/0x2f60 [ 1168.502930][T15062] ? __pfx___handle_mm_fault+0x10/0x10 [ 1168.502970][T15062] ? __pfx_mt_find+0x10/0x10 [ 1168.503062][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.503112][T15062] ? find_vma+0xbf/0x140 [ 1168.503166][T15062] ? __pfx_find_vma+0x10/0x10 [ 1168.503226][T15062] handle_mm_fault+0x363/0xa20 [ 1168.503280][T15062] do_user_addr_fault+0x745/0x12f0 [ 1168.503349][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.503405][T15062] exc_page_fault+0x6f/0xd0 [ 1168.503456][T15062] asm_exc_page_fault+0x26/0x30 [ 1168.503496][T15062] RIP: 0010:__get_user_8+0x14/0x40 [ 1168.503538][T15062] Code: ca e9 0b 33 43 f5 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 da 32 43 f5 66 66 2e 0f 1f 84 00 00 00 [ 1168.503578][T15062] RSP: 0018:ffffc90006fdfed8 EFLAGS: 00050283 [ 1168.503611][T15062] RAX: 0000200000001440 RBX: ffffc90006fdff48 RCX: ffffc900061bc000 [ 1168.503639][T15062] RDX: 00007ffffffff000 RSI: ffffffff82600121 RDI: ffffffff8c622280 [ 1168.503666][T15062] RBP: 0000200000001440 R08: 000000000005b214 R09: 00000000000001cc [ 1168.503692][T15062] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802f015dc0 [ 1168.503720][T15062] R13: 000000000000007f R14: 0000000000000000 R15: 0000000000000000 [ 1168.503760][T15062] ? __might_fault+0x111/0x140 [ 1168.503811][T15062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.503860][T15062] __x64_sys_io_setup+0x73/0x220 [ 1168.503911][T15062] do_syscall_64+0x123/0x790 [ 1168.503968][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.504011][T15062] RIP: 0033:0x7f9d83d9e159 [ 1168.504042][T15062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.504087][T15062] RSP: 002b:00007f9d84cc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1168.504125][T15062] RAX: ffffffffffffffda RBX: 00007f9d84025fa0 RCX: 00007f9d83d9e159 [ 1168.504152][T15062] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 000000000000007f [ 1168.504177][T15062] RBP: 00007f9d83e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1168.504203][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.504228][T15062] R13: 00007f9d84026038 R14: 00007f9d84025fa0 R15: 00007fff63b1bec8 [ 1168.504282][T15062] [ 1168.616272][ T188] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1168.622536][T10284] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1168.730986][ T5764] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1168.793894][ T188] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1168.798987][T10284] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.806331][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1168.853910][T10284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.853962][T10284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.854005][T10284] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1168.854080][T10284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.859936][ T188] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.859977][ T188] usb 3-1: config 0 has no interface number 0 [ 1168.860032][ T188] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1168.860090][ T188] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1168.860154][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.876467][ T5764] usb 5-1: not running at top speed; connect to a high speed hub [ 1168.876537][ T5764] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1168.877890][ T5764] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1168.877927][ T5764] usb 5-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 1168.877963][ T5764] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1168.878102][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.929517][ T5764] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1169.131107][ T5764] gspca_spca501: reg write: error -71 [ 1169.131132][ T5764] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1169.131231][ T5764] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1169.135939][ T5764] uvcvideo 5-1:1.0: Found multiple Units with ID 1 [ 1169.136117][ T5764] uvcvideo 5-1:1.0: Found UVC 71.01 device (0000:0000) [ 1169.136200][ T5764] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 1169.187316][ T5764] usb 5-1: USB disconnect, device number 65 [ 1169.276659][T10284] usb 6-1: config 0 descriptor?? [ 1169.391080][ T188] usb 3-1: config 0 descriptor?? [ 1169.399800][T15055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1169.442301][ T188] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1169.500598][T15070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.155711][ T5809] usb 3-1: USB disconnect, device number 63 [ 1170.499561][T10284] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1171.233988][T15091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.368541][T15095] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1172.065999][ C0] plantronics 0003:047F:FFFF.0039: usb_submit_urb(ctrl) failed: -1 [ 1173.245461][T15092] Bluetooth: hci6: command 0x1003 tx timeout [ 1173.265964][ T9807] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1173.521035][ T5809] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 1173.671083][ T5809] usb 6-1: device descriptor read/64, error -32 [ 1173.796342][T15097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.455711][T15111] loop2: detected capacity change from 0 to 32768 [ 1174.465783][T15111] (syz.2.3063,15111,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1174.466101][T15111] (syz.2.3063,15111,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1174.516827][T15111] JBD2: Ignoring recovery information on journal [ 1174.586033][T15111] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1174.693695][ T5742] usb 6-1: USB disconnect, device number 65 [ 1174.735314][ T31] audit: type=1800 audit(1788188980.560:257): pid=15111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3063" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 1174.869986][T15121] FAULT_INJECTION: forcing a failure. [ 1174.869986][T15121] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.894695][T15121] CPU: 1 UID: 0 PID: 15121 Comm: syz.5.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.894755][T15121] Tainted: [L]=SOFTLOCKUP [ 1174.894768][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1174.894791][T15121] Call Trace: [ 1174.894803][T15121] [ 1174.894818][T15121] dump_stack_lvl+0x100/0x190 [ 1174.894872][T15121] should_fail_ex.cold+0x5/0xa [ 1174.894913][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.894963][T15121] should_failslab+0xc2/0x120 [ 1174.895027][T15121] __kmalloc_cache_noprof+0x91/0x6d0 [ 1174.895076][T15121] ? sctp_association_new+0xbb/0x2990 [ 1174.895129][T15121] sctp_association_new+0xbb/0x2990 [ 1174.895175][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895225][T15121] ? sctp_v4_scope+0x183/0x1a0 [ 1174.895283][T15121] sctp_connect_new_asoc+0x1a8/0x770 [ 1174.895332][T15121] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1174.895382][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895431][T15121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.895503][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895560][T15121] __sctp_connect+0x3e7/0xc70 [ 1174.895613][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895665][T15121] ? __pfx___sctp_connect+0x10/0x10 [ 1174.895708][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895767][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895820][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.895878][T15121] __sctp_setsockopt_connectx+0x100/0x190 [ 1174.895931][T15121] sctp_setsockopt+0x46a9/0xb370 [ 1174.895979][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.896044][T15121] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1174.896094][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.896148][T15121] ? aa_sock_opt_perm+0x114/0x1e0 [ 1174.896188][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.896238][T15121] ? sock_common_setsockopt+0x2e/0xf0 [ 1174.896296][T15121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1174.896358][T15121] do_sock_setsockopt+0xf3/0x1d0 [ 1174.896419][T15121] __sys_setsockopt+0x195/0x220 [ 1174.896474][T15121] __x64_sys_setsockopt+0xbd/0x160 [ 1174.896517][T15121] ? do_syscall_64+0xae/0x790 [ 1174.896569][T15121] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1174.896618][T15121] ? lockdep_hardirqs_on+0x7d/0x110 [ 1174.896672][T15121] do_syscall_64+0x123/0x790 [ 1174.896732][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.896775][T15121] RIP: 0033:0x7f1d9959e159 [ 1174.896808][T15121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.896849][T15121] RSP: 002b:00007f1d977f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1174.896888][T15121] RAX: ffffffffffffffda RBX: 00007f1d99825fa0 RCX: 00007f1d9959e159 [ 1174.896916][T15121] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1174.896943][T15121] RBP: 00007f1d99635024 R08: 000000000000001c R09: 0000000000000000 [ 1174.896970][T15121] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1174.896996][T15121] R13: 00007f1d99826038 R14: 00007f1d99825fa0 R15: 00007ffeca6c50c8 [ 1174.897057][T15121] [ 1176.269425][T15113] loop3: detected capacity change from 0 to 32768 [ 1176.306886][ T9806] ocfs2: Unmounting device (7,2) on (node local) [ 1176.547319][T15131] loop1: detected capacity change from 0 to 32768 [ 1176.554563][T15131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3069 (15131) [ 1176.572941][T15131] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1176.573010][T15131] BTRFS info (device loop1): using sha256 checksum algorithm [ 1176.618437][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.618542][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.681810][T15145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.867440][T15113] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1177.070572][T15131] BTRFS info (device loop1): enabling ssd optimizations [ 1177.070624][T15131] BTRFS info (device loop1): turning on sync discard [ 1177.070669][T15131] BTRFS info (device loop1): enabling free space tree [ 1177.269883][T15113] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 1177.311314][T15113] XFS (loop3): log mount failed [ 1177.432109][ T31] audit: type=1800 audit(1788188983.250:258): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3069" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1177.924661][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1177.994222][T15171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.657244][T15183] evm: overlay not supported [ 1179.733246][T15189] loop3: detected capacity change from 0 to 512 [ 1179.736654][T15189] EXT4-fs: Ignoring removed mblk_io_submit option [ 1179.739955][T15188] loop2: detected capacity change from 0 to 512 [ 1179.762220][T15188] EXT4-fs: Ignoring removed i_version option [ 1179.762279][T15188] EXT4-fs: Ignoring removed bh option [ 1179.825273][T15189] EXT4-fs error (device loop3): ext4_iget_extra_inode:5209: inode #15: comm syz.3.3082: corrupted in-inode xattr: e_value size too large [ 1179.825350][T15189] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1179.839539][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1179.839571][ C1] EXT4-fs (loop3): initial error at time 1788188985: ext4_iget_extra_inode:5209: inode 15 [ 1179.839622][ C1] EXT4-fs (loop3): last error at time 1788188985: ext4_iget_extra_inode:5209: inode 15 [ 1179.877935][T15189] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3082: couldn't read orphan inode 15 (err -117) [ 1179.878006][T15189] loop3: lost filesystem error report for type 5 error -117 [ 1179.903500][T15189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.944167][T15188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.970196][T15188] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.053547][T15189] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #2: block 12: comm syz.3.3082: lblock 3 mapped to illegal pblock 12 (length 1) [ 1180.109229][T15186] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.3080: resize_inode disabled but reserved GDT blocks non-zero [ 1180.328475][ T9806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.465968][ T31] audit: type=1326 audit(1788188986.290:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.5.3085" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9959e159 code=0x0 [ 1180.516325][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.530727][T15200] loop2: detected capacity change from 0 to 136 [ 1180.848125][T15201] loop5: detected capacity change from 0 to 2048 [ 1180.975734][T15201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1181.274976][T15204] syzkaller1: entered promiscuous mode [ 1181.275038][T15204] syzkaller1: entered allmulticast mode [ 1181.641101][ T5809] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1181.800340][ T5809] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 1181.811775][ T5809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1181.811847][ T5809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.811889][ T5809] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1181.811949][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.861406][T15206] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1181.906536][ T5809] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 1181.944920][ T5809] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1182.115119][ T9807] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1182.193442][T15206] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 1182.216488][ T5809] usb 5-1: USB disconnect, device number 66 [ 1182.305115][ T5809] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1182.313813][ T5809] cyberjack 5-1:1.0: device disconnected [ 1182.676791][T15224] loop2: detected capacity change from 0 to 512 [ 1182.729903][T15224] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1182.778147][T15224] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1182.778625][T15224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1182.813256][T15224] EXT4-fs warning (device loop2): ext4_enable_quotas:7300: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1182.813330][T15224] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1182.863539][T15224] EXT4-fs (loop2): 1 orphan inode deleted [ 1182.985845][ T31] audit: type=1326 audit(1788188988.810:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15228 comm="syz.4.3098" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f828259e159 code=0x0 [ 1183.009569][T15224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1183.338724][T15236] loop4: detected capacity change from 0 to 2048 [ 1183.393764][T15236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1183.993048][T15227] loop0: detected capacity change from 0 to 512 [ 1184.055866][T15227] EXT4-fs error (device loop0): ext4_validate_block_bitmap:435: comm syz.0.3096: bg 0: block 7: invalid block bitmap [ 1184.068718][T15227] loop0: lost filesystem error report for type 5 error -117 [ 1184.070903][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1184.070957][ C1] EXT4-fs (loop0): initial error at time 1788188989: ext4_validate_block_bitmap:435 [ 1184.071020][ C1] EXT4-fs (loop0): last error at time 1788188989: ext4_validate_block_bitmap:435 [ 1184.096798][T15227] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1184.096833][T15227] loop0: lost filesystem error report for type 5 error -117 [ 1184.105979][T15227] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.3096: corrupted xattr block 95: invalid header [ 1184.106032][T15227] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1184.108283][T15227] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 1184.108419][T15227] EXT4-fs (loop0): 1 orphan inode deleted [ 1184.188886][T15227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.192241][T15242] loop1: detected capacity change from 0 to 512 [ 1184.204421][T15242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1184.243013][T15242] EXT4-fs (loop1): 1 truncate cleaned up [ 1184.279404][T15242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.385532][ T9806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.405936][ T31] audit: type=1800 audit(1788188990.230:261): pid=15242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3099" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1184.517552][ T31] audit: type=1326 audit(1788188990.340:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.3.3102" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1184.578023][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.710817][ T31] audit: type=1326 audit(1788188990.490:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15246 comm="syz.4.3103" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f828259e159 code=0x0 [ 1184.972737][T15252] loop3: detected capacity change from 0 to 2048 [ 1187.096991][T15255] loop4: detected capacity change from 0 to 2048 [ 1187.665717][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.678043][T15252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1187.803442][T15255] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1187.836677][T15257] loop0: detected capacity change from 0 to 512 [ 1187.955416][T15257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.955553][T15257] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1188.089709][ T31] audit: type=1326 audit(1788188993.910:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.5.3107" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d9959e159 code=0x0 [ 1188.496540][T15271] loop5: detected capacity change from 0 to 2048 [ 1188.614089][T15271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1189.215120][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.771660][T15286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1191.001198][ T9807] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1191.590085][T15293] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1192.491859][ T31] audit: type=1326 audit(1788188998.310:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15296 comm="syz.2.3115" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1192.755569][T15299] loop2: detected capacity change from 0 to 2048 [ 1192.836429][T15299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.004659][ T31] audit: type=1326 audit(1788188999.830:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15317 comm="syz.2.3120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1194.391367][T15322] loop2: detected capacity change from 0 to 2048 [ 1194.460674][T15322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.548829][ T1822] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 540 seconds [ 1194.548944][ T1822] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 540 seconds [ 1195.558275][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 1195.654528][T15334] erspan0: entered promiscuous mode [ 1195.665262][T15334] macvtap1: entered promiscuous mode [ 1195.671844][T15334] macvtap1: entered allmulticast mode [ 1195.677401][T15334] erspan0: entered allmulticast mode [ 1195.745573][T15335] erspan0: left allmulticast mode [ 1195.754616][T15335] erspan0: left promiscuous mode [ 1195.764044][T15335] macvtap1: left promiscuous mode [ 1195.769269][T15335] macvtap1: left allmulticast mode [ 1196.052414][T15341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.650222][ T31] audit: type=1326 audit(1788189002.470:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15342 comm="syz.3.3132" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1196.869585][T15347] loop3: detected capacity change from 0 to 2048 [ 1196.887886][T15347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.121093][ T9339] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1197.275272][ T9339] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1197.281117][ T9339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.281182][ T9339] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1197.281226][ T9339] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.287680][ T9339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1197.287719][ T9339] usb 3-1: Product: syz [ 1197.287745][ T9339] usb 3-1: Manufacturer: syz [ 1197.302140][T15350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.309788][ T9339] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 1197.331573][ T9339] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1197.475545][T15358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.237967][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1198.238764][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 1198.342927][ T9339] usb 3-1: USB disconnect, device number 64 [ 1198.373327][ T9339] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1198.376138][ T9339] garmin_gps 3-1:1.0: device disconnected [ 1198.556562][ T31] audit: type=1326 audit(1788189004.380:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15364 comm="syz.1.3139" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78a359e159 code=0x0 [ 1198.835695][T15372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.887220][T15373] loop1: detected capacity change from 0 to 2048 [ 1199.457945][T15373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.532146][T15391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.296116][T15397] loop0: detected capacity change from 0 to 512 [ 1201.317792][T15387] gadgetfs: bound to dummy_udc driver [ 1201.377018][T15397] EXT4-fs warning (device loop0): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1201.394483][T15397] EXT4-fs warning (device loop0): dx_probe:848: Enable large directory feature to access it [ 1201.406570][T15397] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.3149: Corrupt directory, running e2fsck is recommended [ 1201.453915][T15397] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1201.462327][T15397] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.3149: corrupted in-inode xattr: invalid ea_ino [ 1201.476869][T15397] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1201.477699][T15397] EXT4-fs (loop0): Remounting filesystem read-only [ 1201.487195][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1201.487226][ C0] EXT4-fs (loop0): initial error at time 1788189007: ext4_iget_extra_inode:5209: inode 15 [ 1201.487276][ C0] EXT4-fs (loop0): last error at time 1788189007: ext4_iget_extra_inode:5209: inode 15 [ 1201.538555][T15397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.568519][ T31] audit: type=1326 audit(1788189007.390:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.4.3150" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f828259e159 code=0x0 [ 1201.859050][T15405] loop4: detected capacity change from 0 to 2048 [ 1201.918659][T15397] overlayfs: failed to clone lowerpath [ 1202.195954][T15405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1202.638092][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.675816][ T31] audit: type=1326 audit(1788189008.500:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.3.3152" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1202.999964][T15416] loop3: detected capacity change from 0 to 2048 [ 1203.071550][T15416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1203.574568][ T37] bridge_slave_1: left allmulticast mode [ 1203.574614][ T37] bridge_slave_1: left promiscuous mode [ 1203.574830][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.688180][ T37] bridge_slave_0: left allmulticast mode [ 1203.694118][ T37] bridge_slave_0: left promiscuous mode [ 1203.701923][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.548185][T15422] loop0: detected capacity change from 0 to 131072 [ 1204.549434][T15422] xfs: Deprecated parameter 'ikeep' [ 1204.549463][T15422] XFS: ikeep mount option is deprecated. [ 1204.604267][T15422] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1204.850305][T15422] XFS (loop0): Starting recovery (logdev: internal) [ 1204.955043][T15422] XFS (loop0): Ending recovery (logdev: internal) [ 1205.103930][ T31] audit: type=1326 audit(1788189010.930:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15437 comm="syz.3.3160" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1205.201734][T15435] FAULT_INJECTION: forcing a failure. [ 1205.201734][T15435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1205.201811][T15435] CPU: 1 UID: 0 PID: 15435 Comm: syz.5.3158 Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.201861][T15435] Tainted: [L]=SOFTLOCKUP [ 1205.201876][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1205.201900][T15435] Call Trace: [ 1205.201913][T15435] [ 1205.201930][T15435] dump_stack_lvl+0x100/0x190 [ 1205.201987][T15435] should_fail_ex.cold+0x5/0xa [ 1205.202030][T15435] ? prepare_alloc_pages+0x16d/0x5b0 [ 1205.202098][T15435] should_fail_alloc_page+0xeb/0x140 [ 1205.202163][T15435] prepare_alloc_pages+0x1f0/0x5b0 [ 1205.202233][T15435] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1205.202286][T15435] ? rcu_is_watching+0x13/0xc0 [ 1205.202332][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.202380][T15435] ? __up_read+0x333/0x980 [ 1205.202424][T15435] ? __pfx___up_read+0x10/0x10 [ 1205.202463][T15435] ? do_user_addr_fault+0x7d7/0x12f0 [ 1205.202510][T15435] ? do_user_addr_fault+0x7d7/0x12f0 [ 1205.202560][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.202620][T15435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1205.202672][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.202722][T15435] ? irqentry_exit+0x24d/0xa10 [ 1205.202771][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.202818][T15435] ? lockdep_hardirqs_on+0x7d/0x110 [ 1205.202867][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.202916][T15435] ? irqentry_exit+0x24d/0xa10 [ 1205.202991][T15435] ? _copy_from_iter+0x350/0x1690 [ 1205.203032][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203079][T15435] ? _copy_from_iter+0x270/0x1690 [ 1205.203121][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203168][T15435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1205.203236][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203282][T15435] ? policy_nodemask+0xed/0x4f0 [ 1205.203365][T15435] alloc_pages_mpol+0x201/0x550 [ 1205.203431][T15435] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1205.203508][T15435] alloc_pages_noprof+0x1a/0x160 [ 1205.203558][T15435] anon_pipe_write+0xe74/0x1b50 [ 1205.203636][T15435] ? __pfx_anon_pipe_write+0x10/0x10 [ 1205.203692][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203739][T15435] ? common_file_perm+0x266/0x500 [ 1205.203791][T15435] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1205.203850][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203896][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.203943][T15435] ? security_file_permission+0x76/0x210 [ 1205.203999][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.204046][T15435] ? rw_verify_area+0xce/0x6d0 [ 1205.204095][T15435] vfs_write+0x6af/0x1050 [ 1205.204146][T15435] ? __pfx_anon_pipe_write+0x10/0x10 [ 1205.204210][T15435] ? __pfx_vfs_write+0x10/0x10 [ 1205.204256][T15435] ? find_held_lock+0x2b/0x80 [ 1205.204337][T15435] ksys_write+0x1f8/0x250 [ 1205.204386][T15435] ? __pfx_ksys_write+0x10/0x10 [ 1205.204440][T15435] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1205.204496][T15435] do_syscall_64+0x123/0x790 [ 1205.204557][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.204598][T15435] RIP: 0033:0x7f1d9959e159 [ 1205.204629][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.204667][T15435] RSP: 002b:00007f1d977f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1205.204705][T15435] RAX: ffffffffffffffda RBX: 00007f1d99825fa0 RCX: 00007f1d9959e159 [ 1205.204732][T15435] RDX: 00000000200002e6 RSI: 0000200000000380 RDI: 0000000000000005 [ 1205.204758][T15435] RBP: 00007f1d99635024 R08: 0000000000000000 R09: 0000000000000000 [ 1205.204783][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.204807][T15435] R13: 00007f1d99826038 R14: 00007f1d99825fa0 R15: 00007ffeca6c50c8 [ 1205.204859][T15435] [ 1205.716662][T15443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.099772][T15441] loop3: detected capacity change from 0 to 2048 [ 1206.202725][T15441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1207.004952][ T31] audit: type=1800 audit(1788189012.820:272): pid=15455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3162" name="use" dev="configfs" ino=36050 res=0 errno=0 [ 1207.143278][T15461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.604947][ T5620] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1208.017207][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.035316][ T37] bond_slave_0: left promiscuous mode [ 1208.081790][ T188] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1208.128151][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.170285][ T37] bond_slave_1: left promiscuous mode [ 1208.177669][ T37] bond0 (unregistering): Released all slaves [ 1208.231839][ T188] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1208.245015][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.245078][ T188] usb 3-1: Product: syz [ 1208.245127][ T188] usb 3-1: Manufacturer: syz [ 1208.245165][ T188] usb 3-1: SerialNumber: syz [ 1208.248131][ T37] bond1 (unregistering): Released all slaves [ 1208.399360][ T31] audit: type=1326 audit(1788189014.220:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15468 comm="syz.3.3168" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d83d9e159 code=0x0 [ 1208.872736][ T37] tipc: Disabling bearer [ 1208.904243][ T37] tipc: Left network mode [ 1208.995731][T15475] loop3: detected capacity change from 0 to 2048 [ 1209.082096][T15475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.152601][ T37] IPVS: stopping master sync thread 7577 ... [ 1209.337811][ T188] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1209.338080][ T188] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1209.551251][ T5807] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1209.800543][ T5807] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1209.873316][ T5807] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1209.900051][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.914979][ T5807] usb 5-1: config 0 has no interfaces? [ 1209.921405][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.366254][ T5807] usb 5-1: config 0 descriptor?? [ 1211.396884][ T188] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1211.396988][ T188] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1211.398147][ T188] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1211.544604][ T188] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1211.598326][ T188] usb 3-1: USB disconnect, device number 65 [ 1211.869359][T15486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.483258][ T31] audit: type=1326 audit(1788189018.300:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.1.3172" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78a359e159 code=0x0 [ 1213.928142][T15494] loop1: detected capacity change from 0 to 2048 [ 1214.096670][T15494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1214.587565][ T5807] usb 5-1: can't set config #0, error -71 [ 1214.606193][ T5807] usb 5-1: USB disconnect, device number 67 [ 1215.112596][T15504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.675093][T15508] loop3: detected capacity change from 0 to 32768 [ 1215.890313][T15508] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1216.297220][ T37] hsr_slave_0: left promiscuous mode [ 1217.370239][ T37] hsr_slave_1: left promiscuous mode [ 1217.377065][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.387889][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.489534][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.573325][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.950110][ T37] veth1_macvtap: left promiscuous mode [ 1217.950334][ T37] veth0_macvtap: left promiscuous mode [ 1217.950471][ T37] veth1_vlan: left promiscuous mode [ 1217.950567][ T37] veth0_vlan: left promiscuous mode [ 1218.284024][T15524] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.3181'. [ 1218.490091][T15527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.923219][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1219.948891][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1220.148769][ T5625] ocfs2: Unmounting device (7,3) on (node local) [ 1220.303870][T15503] syzkaller1: entered promiscuous mode [ 1220.303933][T15503] syzkaller1: entered allmulticast mode [ 1220.389421][T15545] loop3: detected capacity change from 0 to 2048 [ 1220.397389][T15545] EXT4-fs: Ignoring removed i_version option [ 1220.404609][T15545] EXT4-fs: Ignoring removed orlov option [ 1220.495213][T15545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.495365][T15545] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.600964][ T31] audit: type=1326 audit(1788189026.400:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15551 comm="syz.0.3187" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc5b39e159 code=0x0 [ 1220.950118][T15561] loop0: detected capacity change from 0 to 2048 [ 1221.027566][T15561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1221.202853][T15557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm syz.3.3183: bg 0: block 345: padding at end of block bitmap is not set [ 1221.287869][T15557] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 100 with error 28 [ 1221.303983][T15557] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1221.303983][T15557] [ 1221.317992][T15557] EXT4-fs (loop3): Total free blocks count 0 [ 1221.318066][T15557] EXT4-fs (loop3): Free/Dirty block details [ 1221.318110][T15557] EXT4-fs (loop3): free_blocks=0 [ 1221.318177][T15557] EXT4-fs (loop3): dirty_blocks=112 [ 1221.318225][T15557] EXT4-fs (loop3): Block reservation details [ 1221.318365][T15557] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 1221.872695][ T31] audit: type=1804 audit(1788189027.700:276): pid=15553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3183" name="/newroot/531/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 1221.919877][ T31] audit: type=1800 audit(1788189027.740:277): pid=15553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3183" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1222.087309][ T1164] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 116 with max blocks 2 with error 28 [ 1222.104456][T15567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.219516][T15567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.242639][T15573] loop5: detected capacity change from 0 to 128 [ 1222.274706][T15573] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1222.310532][T15573] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1222.324689][T15573] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.789543][T13857] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1222.834615][T15586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1222.892392][T15593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1222.946160][T15589] tipc: Started in network mode [ 1222.953063][T15589] tipc: Node identity 926d7a58968a, cluster identity 4711 [ 1222.953959][T15589] tipc: Enabled bearer , priority 1 [ 1222.993759][T15595] overlay: filesystem on ./file0 not supported as upperdir [ 1223.121075][T15597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.990586][T15588] tipc: Disabling bearer [ 1224.290838][ T31] audit: type=1326 audit(1788189030.110:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15610 comm="syz.2.3204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6319e159 code=0x0 [ 1224.707161][T15618] loop2: detected capacity change from 0 to 2048 [ 1224.820139][T15618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1225.296520][T15620] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 570 seconds [ 1225.296618][T15620] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 570 seconds [ 1225.810339][T15634] loop4: detected capacity change from 0 to 1024 [ 1225.866250][T15634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.880222][T15634] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.003895][ T5807] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1226.141574][T15640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1226.411093][ T5807] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1226.552724][ T5807] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.552813][ T5807] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1226.641631][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1226.641706][ T5807] usb 3-1: Product: syz [ 1226.641735][ T5807] usb 3-1: Manufacturer: syz [ 1227.190780][T15644] loop0: detected capacity change from 0 to 32768 [ 1227.306366][T15644] JBD2: Ignoring recovery information on journal [ 1227.343213][T15644] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1227.407050][ T5807] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1227.593918][ T31] audit: type=1804 audit(1788189033.400:279): pid=15644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3214" name="/newroot/542/file1/file1" dev="loop0" ino=17058 res=1 errno=0 [ 1227.598468][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1228.059781][ T5620] ocfs2: Unmounting device (7,0) on (node local) [ 1228.969231][ T5807] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1229.136115][ T5807] usb 3-1: USB disconnect, device number 66 [ 1229.153812][ T5807] mos7840 3-1:1.0: device disconnected [ 1229.547688][T10634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.788953][T10634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.004373][T15672] FAULT_INJECTION: forcing a failure. [ 1230.004373][T15672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1230.004982][T15672] CPU: 1 UID: 0 PID: 15672 Comm: syz.5.3229 Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.005055][T15672] Tainted: [L]=SOFTLOCKUP [ 1230.005070][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1230.005091][T15672] Call Trace: [ 1230.005105][T15672] [ 1230.005118][T15672] dump_stack_lvl+0x100/0x190 [ 1230.005171][T15672] should_fail_ex.cold+0x5/0xa [ 1230.005212][T15672] ? prepare_alloc_pages+0x16d/0x5b0 [ 1230.005287][T15672] should_fail_alloc_page+0xeb/0x140 [ 1230.005359][T15672] prepare_alloc_pages+0x1f0/0x5b0 [ 1230.005421][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.005477][T15672] ? rcu_is_watching+0x13/0xc0 [ 1230.005537][T15672] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1230.005609][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.005657][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.005703][T15672] ? find_held_lock+0x2b/0x80 [ 1230.005766][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.005823][T15672] ? mark_held_locks+0x40/0x70 [ 1230.005894][T15672] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1230.005932][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.005992][T15672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1230.006069][T15672] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1230.006116][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006173][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006226][T15672] ? rcu_is_watching+0x13/0xc0 [ 1230.006278][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006332][T15672] ? trace_sched_exit_tp+0x120/0x160 [ 1230.006380][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006428][T15672] ? __schedule+0x126b/0x6920 [ 1230.006503][T15672] ? __pfx___schedule+0x10/0x10 [ 1230.006546][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006589][T15672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1230.006660][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006708][T15672] ? policy_nodemask+0xed/0x4f0 [ 1230.006778][T15672] alloc_pages_mpol+0x201/0x550 [ 1230.006846][T15672] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1230.006918][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.006974][T15672] folio_alloc_mpol_noprof+0x36/0x260 [ 1230.007023][T15672] vma_alloc_folio_noprof+0xed/0x1d0 [ 1230.007073][T15672] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1230.007117][T15672] ? rcu_read_unlock+0x2d/0xb0 [ 1230.007160][T15672] ? rcu_read_unlock+0x2d/0xb0 [ 1230.007202][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.007263][T15672] do_wp_page+0x1b15/0x45c0 [ 1230.007335][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.007382][T15672] ? lock_acquire+0x1d1/0x380 [ 1230.007444][T15672] ? __pfx_do_wp_page+0x10/0x10 [ 1230.007510][T15672] ? do_raw_spin_lock+0x128/0x260 [ 1230.007556][T15672] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1230.007601][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.007660][T15672] __handle_mm_fault+0x1cd2/0x2f60 [ 1230.007709][T15672] ? lock_vma_under_rcu+0x11d/0x590 [ 1230.007750][T15672] ? __pfx___handle_mm_fault+0x10/0x10 [ 1230.007795][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.007847][T15672] ? lock_vma_under_rcu+0x17c/0x590 [ 1230.007899][T15672] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.007961][T15672] handle_mm_fault+0x363/0xa20 [ 1230.008013][T15672] do_user_addr_fault+0x59c/0x12f0 [ 1230.008080][T15672] exc_page_fault+0x6f/0xd0 [ 1230.008131][T15672] asm_exc_page_fault+0x26/0x30 [ 1230.008170][T15672] RIP: 0033:0x7f1d9955df45 [ 1230.008201][T15672] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 1230.008240][T15672] RSP: 002b:00007f1d977f4de0 EFLAGS: 00010293 [ 1230.008273][T15672] RAX: 0000000000000008 RBX: 00007f1d9a357e20 RCX: 0000000000000000 [ 1230.008298][T15672] RDX: 0000000000000000 RSI: 00007f1d99632748 RDI: 00007f1d9a357e20 [ 1230.008324][T15672] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 1230.008350][T15672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d9965244f [ 1230.008375][T15672] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f1d99632748 [ 1230.008427][T15672] [ 1230.021787][T15672] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1230.484461][T15092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1230.489204][T15092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1230.490396][T15092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1230.495735][T15092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1230.498232][T15092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1230.592712][T15687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.643490][T10634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.847908][T15692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.874628][T10634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.383574][T15697] loop2: detected capacity change from 0 to 32768 [ 1232.392725][ T9339] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1232.556488][ T9339] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1232.562016][ T9339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.562084][ T9339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.562125][ T9339] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1232.562168][ T9339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1232.579534][ T9339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.579575][ T9339] usb 4-1: Product: syz [ 1232.579601][ T9339] usb 4-1: Manufacturer: syz [ 1232.579628][ T9339] usb 4-1: SerialNumber: syz [ 1232.611181][T15092] Bluetooth: hci1: command tx timeout [ 1232.639726][ T9339] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1232.639761][ T9339] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1232.639822][ T9339] usbserial_generic 4-1:1.0: generic converter detected [ 1232.698059][ T9339] usb 4-1: generic converter now attached to ttyUSB0 [ 1232.732292][ T31] audit: type=1800 audit(1788189038.560:280): pid=15717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3234" name="file1" dev="loop2" ino=9 res=0 errno=0 [ 1232.794359][T10634] bridge_slave_1: left allmulticast mode [ 1232.800214][T10634] bridge_slave_1: left promiscuous mode [ 1232.806796][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.828784][T10634] bridge_slave_0: left allmulticast mode [ 1232.835442][T10634] bridge_slave_0: left promiscuous mode [ 1232.835709][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.988593][T10198] usb 4-1: USB disconnect, device number 74 [ 1233.045262][T10198] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1233.056153][T10198] usbserial_generic 4-1:1.0: device disconnected [ 1233.168708][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1233.323437][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.332609][T10634] bond_slave_0: left promiscuous mode [ 1233.340464][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.350112][T10634] bond_slave_1: left promiscuous mode [ 1233.356711][T10634] bond0 (unregistering): Released all slaves [ 1233.368105][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1233.378092][T15723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1233.406478][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1233.529131][T10634] tipc: Left network mode [ 1233.898544][T15732] loop4: detected capacity change from 0 to 32768 [ 1233.994293][T15735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.048546][T15732] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1235.326828][T15092] Bluetooth: hci1: command tx timeout [ 1235.888044][T15701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.223838][ T9339] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1237.380985][ T9339] usb 4-1: Using ep0 maxpacket: 8 [ 1237.399624][ T9339] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1237.409323][T15092] Bluetooth: hci1: command tx timeout [ 1237.418250][ T9339] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.418336][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.418388][ T9339] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.418435][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.418482][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1237.424248][ T9339] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.424310][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.424359][ T9339] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.424405][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.424452][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1237.429099][ T9339] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.429159][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.429208][ T9339] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.429253][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.429300][ T9339] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1237.480184][ T9339] usb 4-1: string descriptor 0 read error: -22 [ 1237.480337][ T9339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.606316][ T9339] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1237.809178][T15757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.047326][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.055411][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.670974][ T5764] usb 4-1: USB disconnect, device number 75 [ 1238.715755][T10634] hsr_slave_0: left promiscuous mode [ 1238.739155][T10634] hsr_slave_1: left promiscuous mode [ 1238.740206][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.740236][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.770804][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.770863][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.827856][T10634] veth1_macvtap: left promiscuous mode [ 1238.827936][T10634] veth0_macvtap: left promiscuous mode [ 1238.829296][T10634] veth1_vlan: left promiscuous mode [ 1238.829390][T10634] veth0_vlan: left promiscuous mode [ 1239.272803][T15774] loop0: detected capacity change from 0 to 2048 [ 1239.336878][T15774] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.3253: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 1239.336986][T15774] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1239.337529][T15774] EXT4-fs (loop0): get root inode failed [ 1239.337562][T15774] EXT4-fs (loop0): mount failed [ 1239.360901][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1239.360931][ C1] EXT4-fs (loop0): initial error at time 1788189045: ext4_ext_check_inode:521: inode 2 [ 1239.360981][ C1] EXT4-fs (loop0): last error at time 1788189045: ext4_ext_check_inode:521: inode 2 [ 1239.484489][T15092] Bluetooth: hci1: command tx timeout [ 1239.546872][T15774] loop0: detected capacity change from 0 to 256 [ 1239.609040][T15774] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1239.856720][ T5621] ocfs2: Unmounting device (7,4) on (node local) [ 1240.078193][T15787] loop0: detected capacity change from 0 to 1024 [ 1240.079442][T15787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1240.079509][T15787] EXT4-fs: Ignoring removed bh option [ 1240.145903][T15787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1240.294712][T15787] loop0: detected capacity change from 1024 to 64 [ 1240.305894][T15795] EXT4-fs error (device loop0): xattr_find_entry:333: inode #12: comm syz.0.3257: corrupted xattr entries [ 1240.359654][T10634] team0 (unregistering): Port device team_slave_1 removed [ 1240.479372][T10634] team0 (unregistering): Port device team_slave_0 removed [ 1240.564560][T15801] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1240.576568][ T5620] EXT4-fs error (device loop0): ext4_readdir:278: inode #2: block 16: comm syz-executor: path /552/file1: bad entry in directory: directory entry overrun - offset=0, inode=778398825, rec_len=225120, size=1024 fake=0 [ 1241.058041][T15808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.880826][T15811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.043914][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1243.224112][T15820] loop4: detected capacity change from 0 to 128 [ 1243.270218][T15820] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1243.287092][T15820] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1243.342935][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1243.360277][T15791] kmmpd-loop0: attempt to access beyond end of device [ 1243.360277][T15791] loop0: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1243.360343][T15791] buffer_io_error: 450 callbacks suppressed [ 1243.360382][T15791] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 1243.538367][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1243.894535][T15832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.659487][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.660086][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.663806][T15684] bridge_slave_0: entered allmulticast mode [ 1244.726523][T15684] bridge_slave_0: entered promiscuous mode [ 1244.744481][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.753178][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.765814][T15684] bridge_slave_1: entered allmulticast mode [ 1244.786732][T15684] bridge_slave_1: entered promiscuous mode [ 1244.941422][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.955970][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.069290][T15684] team0: Port device team_slave_0 added [ 1245.079115][T15684] team0: Port device team_slave_1 added [ 1245.281832][T15843] af_packet: tpacket_rcv: packet too big, clamped from 65428 to 3952. macoff=96 [ 1245.302284][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.302330][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.302398][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.337886][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.337910][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.337957][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.402979][T15851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.780767][T15684] hsr_slave_0: entered promiscuous mode [ 1245.786847][T15684] hsr_slave_1: entered promiscuous mode [ 1245.797933][T15684] debugfs: 'hsr0' already exists in 'hsr' [ 1245.797985][T15684] Cannot create hsr debugfs directory [ 1245.841686][T15860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1245.841730][T15860] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1245.841855][T15860] vhci_hcd vhci_hcd.0: Device attached [ 1245.853021][ T9807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.878707][ T9807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1245.887576][ T9807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1245.901877][ T9807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.903169][ T9807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1245.921335][ T9339] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1246.023972][ T5809] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1246.090977][ T9339] usb 3-1: Using ep0 maxpacket: 8 [ 1246.093188][ T9339] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1246.097913][ T9339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1246.097984][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1246.098040][ T9339] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1246.098087][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1246.098135][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1246.101781][ T9339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1246.101844][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1246.101893][ T9339] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1246.101940][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1246.101989][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1246.117712][ T9339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1246.117774][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1246.117824][ T9339] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1246.117871][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1246.117919][ T9339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1246.123445][ T9339] usb 3-1: string descriptor 0 read error: -22 [ 1246.123595][ T9339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.166241][ T9339] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1246.234032][ T5809] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1246.271152][T15861] usbip_core: unknown command [ 1246.271168][T15861] vhci_hcd: unknown pdu 0 [ 1246.271185][T15861] usbip_core: unknown command [ 1246.293884][ T50] vhci_hcd vhci_hcd.3: stop threads [ 1246.293913][ T50] vhci_hcd vhci_hcd.3: release socket [ 1246.293980][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 1246.366032][ T5809] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1246.567004][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1247.075074][T13386] usb 3-1: USB disconnect, device number 67 [ 1247.250708][T15684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.300603][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.317147][T15684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.362937][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.370608][T15684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1247.409119][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1247.418069][T15684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1247.443074][T15684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1247.929297][T15916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.000103][ T9807] Bluetooth: hci0: command tx timeout [ 1248.081352][ T5764] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1248.273210][ T5764] usb 6-1: Using ep0 maxpacket: 16 [ 1248.282646][ T5764] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1248.422145][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.432873][ T5764] usb 6-1: Product: syz [ 1248.432972][ T5764] usb 6-1: Manufacturer: syz [ 1248.442506][ T5764] usb 6-1: SerialNumber: syz [ 1248.601141][ C0] ================================================================== [ 1248.601168][ C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1248.601239][ C0] Read of size 1 at addr ffff88801cbbb010 by task syz.2.3287/15912 [ 1248.601272][ C0] [ 1248.601294][ C0] CPU: 0 UID: 0 PID: 15912 Comm: syz.2.3287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.601347][ C0] Tainted: [L]=SOFTLOCKUP [ 1248.601361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1248.601381][ C0] Call Trace: [ 1248.601392][ C0] [ 1248.601404][ C0] dump_stack_lvl+0x100/0x190 [ 1248.601446][ C0] print_report+0x13d/0x4b0 [ 1248.601492][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.601534][ C0] ? __virt_addr_valid+0x239/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1248.601586][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1248.601634][ C0] kasan_report+0xdf/0x1c0 [ 1248.601684][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1248.601737][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 1248.601784][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.601822][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 1248.601872][ C0] llc_conn_state_process+0x3ec/0x1480 [ 1248.601908][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 1248.601949][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1248.601979][ C0] call_timer_fn+0x198/0x5f0 [ 1248.602027][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1248.602082][ C0] ? __run_timers+0x747/0xb00 [ 1248.602130][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602166][ C0] ? rcu_is_watching+0x13/0xc0 [ 1248.602217][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1248.602254][ C0] __run_timers+0x757/0xb00 [ 1248.602324][ C0] ? __pfx___run_timers+0x10/0x10 [ 1248.602386][ C0] ? clockevents_program_event+0x23e/0x820 [ 1248.602433][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602470][ C0] ? lock_acquire+0x1d1/0x380 [ 1248.602521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602564][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1248.602600][ C0] run_timer_base+0x114/0x190 [ 1248.602649][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1248.602697][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602737][ C0] run_timer_softirq+0x1a/0x50 [ 1248.602765][ C0] handle_softirqs+0x1e6/0x9d0 [ 1248.602833][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1248.602884][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602921][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1248.602952][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.602989][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1248.603036][ C0] __irq_exit_rcu+0x194/0x210 [ 1248.603084][ C0] irq_exit_rcu+0x9/0x30 [ 1248.603110][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1248.603148][ C0] [ 1248.603159][ C0] [ 1248.603170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1248.603205][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1248.603243][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 9b 15 f6 48 89 df e8 0e f2 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 f8 04 f6 65 48 83 3d e4 84 ba 08 00 74 16 5b [ 1248.603273][ C0] RSP: 0018:ffffc90006dc77f8 EFLAGS: 00000246 [ 1248.603299][ C0] RAX: 0000000000000002 RBX: ffffffff9bb75800 RCX: 0000000000000000 [ 1248.603319][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f1582 RDI: ffffffff8c622280 [ 1248.603358][ C0] RBP: 0000000000000212 R08: 0000000000000001 R09: 0000000000000000 [ 1248.603384][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1248.603410][ C0] R13: ffffc90006dc7a50 R14: ffffffff8bf31000 R15: 1ffff92000db8f06 [ 1248.603451][ C0] debug_object_assert_init+0x1c4/0x310 [ 1248.603492][ C0] ? __pfx_debug_object_assert_init+0x10/0x10 [ 1248.603539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.603576][ C0] ? rcu_is_watching+0x13/0xc0 [ 1248.603612][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1248.603647][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.603687][ C0] __mod_timer+0xad/0xca0 [ 1248.603718][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 1248.603754][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1248.603788][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 1248.603838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.603884][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1248.603916][ C0] add_timer+0x62/0x90 [ 1248.603944][ C0] schedule_timeout+0x122/0x280 [ 1248.603972][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1248.604002][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1248.604050][ C0] ? snd_rawmidi_write+0x488/0xc60 [ 1248.604096][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.604132][ C0] ? rcu_is_watching+0x13/0xc0 [ 1248.604170][ C0] ? snd_rawmidi_write+0x44d/0xc60 [ 1248.604215][ C0] snd_rawmidi_write+0x492/0xc60 [ 1248.604265][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1248.604310][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.604346][ C0] ? common_file_perm+0x266/0x500 [ 1248.604386][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 1248.604432][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.604480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.604517][ C0] ? security_file_permission+0x76/0x210 [ 1248.604564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.604600][ C0] ? rw_verify_area+0xce/0x6d0 [ 1248.604636][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1248.604680][ C0] vfs_writev+0x5ed/0xdd0 [ 1248.604721][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1248.604761][ C0] ? lock_acquire+0x1d1/0x380 [ 1248.604808][ C0] ? __fget_files+0x34/0x3d0 [ 1248.604862][ C0] ? __fget_files+0x21f/0x3d0 [ 1248.604921][ C0] ? do_writev+0x28a/0x340 [ 1248.604955][ C0] do_writev+0x28a/0x340 [ 1248.604991][ C0] ? __pfx_do_writev+0x10/0x10 [ 1248.605030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1248.605070][ C0] do_syscall_64+0x123/0x790 [ 1248.605112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.605143][ C0] RIP: 0033:0x7feb6319e159 [ 1248.605166][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.605197][ C0] RSP: 002b:00007feb640ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1248.605226][ C0] RAX: ffffffffffffffda RBX: 00007feb63425fa0 RCX: 00007feb6319e159 [ 1248.605247][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 1248.605267][ C0] RBP: 00007feb63235024 R08: 0000000000000000 R09: 0000000000000000 [ 1248.605287][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.605307][ C0] R13: 00007feb63426038 R14: 00007feb63425fa0 R15: 00007ffc537d0be8 [ 1248.605339][ C0] [ 1248.605350][ C0] [ 1248.605357][ C0] Allocated by task 15902: [ 1248.605372][ C0] kasan_save_stack+0x30/0x50 [ 1248.605413][ C0] kasan_save_track+0x14/0x30 [ 1248.605457][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1248.605511][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1248.605553][ C0] llc_sap_open+0x120/0x3b0 [ 1248.605594][ C0] llc_ui_autobind.isra.0+0x2ae/0x580 [ 1248.605636][ C0] llc_ui_connect+0x582/0xdb0 [ 1248.605675][ C0] __sys_connect_file+0x146/0x1a0 [ 1248.605701][ C0] __sys_connect+0x141/0x170 [ 1248.605726][ C0] __x64_sys_connect+0x72/0xb0 [ 1248.605752][ C0] do_syscall_64+0x123/0x790 [ 1248.605787][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.605816][ C0] [ 1248.605824][ C0] Freed by task 6334: [ 1248.605838][ C0] kasan_save_stack+0x30/0x50 [ 1248.605878][ C0] kasan_save_track+0x14/0x30 [ 1248.605925][ C0] kasan_save_free_info+0x3b/0x70 [ 1248.605959][ C0] __kasan_slab_free+0x5f/0x80 [ 1248.606001][ C0] __rcu_free_sheaf_prepare+0x5d/0x300 [ 1248.606031][ C0] rcu_free_sheaf+0x1a/0xe0 [ 1248.606066][ C0] rcu_core+0x5f0/0x1260 [ 1248.606094][ C0] handle_softirqs+0x1e6/0x9d0 [ 1248.606139][ C0] __irq_exit_rcu+0x194/0x210 [ 1248.606184][ C0] irq_exit_rcu+0x9/0x30 [ 1248.606207][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1248.606241][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1248.606273][ C0] [ 1248.606281][ C0] The buggy address belongs to the object at ffff88801cbbb000 [ 1248.606281][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 1248.606304][ C0] The buggy address is located 16 bytes inside of [ 1248.606304][ C0] freed 2048-byte region [ffff88801cbbb000, ffff88801cbbb800) [ 1248.606334][ C0] [ 1248.606341][ C0] The buggy address belongs to the physical page: [ 1248.606354][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cbb8 [ 1248.606380][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1248.606404][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1248.606429][ C0] page_type: f5(slab) [ 1248.606454][ C0] raw: 00fff00000000040 ffff88801c02e000 dead000000000100 dead000000000122 [ 1248.606481][ C0] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1248.606514][ C0] head: 00fff00000000040 ffff88801c02e000 dead000000000100 dead000000000122 [ 1248.606557][ C0] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1248.606592][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1248.606619][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1248.606637][ C0] page dumped because: kasan: bad access detected [ 1248.606651][ C0] page_owner tracks the page as allocated [ 1248.606661][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3367161579 [ 1248.606708][ C0] post_alloc_hook+0xfd/0x120 [ 1248.606738][ C0] get_page_from_freelist+0x110d/0x35d0 [ 1248.606773][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1248.606809][ C0] new_slab+0xa9/0x6e0 [ 1248.606839][ C0] refill_objects+0xe3/0x410 [ 1248.606871][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 1248.606904][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1248.606940][ C0] acpi_ds_create_walk_state+0x95/0x300 [ 1248.606987][ C0] acpi_ds_call_control_method+0x226/0xab0 [ 1248.607023][ C0] acpi_ps_parse_aml+0xacd/0x1120 [ 1248.607068][ C0] acpi_ps_execute_method+0x5c4/0xe90 [ 1248.607114][ C0] acpi_ns_evaluate+0x640/0x1670 [ 1248.607139][ C0] acpi_ut_evaluate_object+0xf7/0x610 [ 1248.607168][ C0] acpi_ut_execute_STA+0xa6/0x300 [ 1248.607204][ C0] acpi_ns_get_device_callback+0x23c/0x500 [ 1248.607251][ C0] acpi_ns_walk_namespace+0x4cc/0x760 [ 1248.607288][ C0] page_owner free stack trace missing [ 1248.607298][ C0] [ 1248.607305][ C0] Memory state around the buggy address: [ 1248.607319][ C0] ffff88801cbbaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1248.607341][ C0] ffff88801cbbaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1248.607362][ C0] >ffff88801cbbb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.607379][ C0] ^ [ 1248.607394][ C0] ffff88801cbbb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.607416][ C0] ffff88801cbbb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1248.607433][ C0] ================================================================== [ 1248.607551][ C0] Disabling lock debugging due to kernel taint [ 1248.916688][ T5764] usb 6-1: config 0 descriptor?? [ 1249.256164][ T5764] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1249.396296][T15918] FAULT_INJECTION: forcing a failure. [ 1249.396296][T15918] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.396351][T15918] CPU: 0 UID: 0 PID: 15918 Comm: syz.4.3289 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1249.396412][T15918] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1249.396428][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1249.396453][T15918] Call Trace: [ 1249.396465][T15918] [ 1249.396480][T15918] dump_stack_lvl+0x100/0x190 [ 1249.396540][T15918] should_fail_ex.cold+0x5/0xa [ 1249.396586][T15918] should_failslab+0xc2/0x120 [ 1249.396647][T15918] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1249.396700][T15918] ? sctp_get_port_local+0x828/0x1630 [ 1249.396766][T15918] sctp_get_port_local+0x828/0x1630 [ 1249.396827][T15918] ? sctp_bind_addr_match+0x193/0x300 [ 1249.396877][T15918] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1249.396933][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.396980][T15918] ? lock_release+0x24d/0x310 [ 1249.397043][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397089][T15918] ? sctp_bind_addr_match+0x19d/0x300 [ 1249.397143][T15918] sctp_do_bind+0x2b9/0x760 [ 1249.397186][T15918] sctp_connect_new_asoc+0x5e7/0x770 [ 1249.397228][T15918] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1249.397271][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397317][T15918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1249.397382][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397431][T15918] __sctp_connect+0x3e7/0xc70 [ 1249.397476][T15918] ? __pfx___sctp_connect+0x10/0x10 [ 1249.397515][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397569][T15918] ? __pfx___might_resched+0x10/0x10 [ 1249.397627][T15918] ? sctp_setsockopt+0x593/0xb370 [ 1249.397665][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397715][T15918] __sctp_setsockopt_connectx+0x100/0x190 [ 1249.397761][T15918] sctp_setsockopt+0x46a9/0xb370 [ 1249.397799][T15918] ? rcu_is_watching+0x13/0xc0 [ 1249.397850][T15918] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1249.397893][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.397938][T15918] ? aa_sock_opt_perm+0x114/0x1e0 [ 1249.397975][T15918] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1249.398020][T15918] ? sock_common_setsockopt+0x2e/0xf0 [ 1249.398073][T15918] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1249.398128][T15918] do_sock_setsockopt+0xf3/0x1d0 [ 1249.398180][T15918] __sys_setsockopt+0x195/0x220 [ 1249.398225][T15918] __x64_sys_setsockopt+0xbd/0x160 [ 1249.398265][T15918] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1249.398312][T15918] do_syscall_64+0x123/0x790 [ 1249.398364][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.398404][T15918] RIP: 0033:0x7f828259e159 [ 1249.398432][T15918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.398469][T15918] RSP: 002b:00007f8283422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1249.398506][T15918] RAX: ffffffffffffffda RBX: 00007f8282825fa0 RCX: 00007f828259e159 [ 1249.398539][T15918] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1249.398563][T15918] RBP: 00007f8282635024 R08: 000000000000001c R09: 0000000000000000 [ 1249.398588][T15918] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 1249.398613][T15918] R13: 00007f8282826038 R14: 00007f8282825fa0 R15: 00007ffe35723498 [ 1249.398652][T15918] [ 1249.451899][ T5764] gspca_spca508: reg_read err -32 [ 1249.481105][ T5764] gspca_spca508: reg_read err -32 [ 1249.496159][ T5764] gspca_spca508: reg_read err -32 [ 1249.518775][ T5764] gspca_spca508: reg_read err -32 [ 1249.541689][ T5764] gspca_spca508: reg_read err -32 [ 1249.794318][ T5764] gspca_spca508: reg write: error -71 [ 1249.794389][ T5764] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1249.902595][ T5764] usb 6-1: USB disconnect, device number 66 [ 1250.044152][ T9807] Bluetooth: hci0: command tx timeout [ 1250.369173][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1251.057893][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.057974][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.140302][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.140376][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.258396][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.258481][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.318115][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.318198][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.511390][ T60] bridge_slave_1: left allmulticast mode [ 1251.511445][ T60] bridge_slave_1: left promiscuous mode [ 1251.511624][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.524024][ T60] bridge_slave_0: left allmulticast mode [ 1251.524053][ T60] bridge_slave_0: left promiscuous mode [ 1251.524233][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.556311][ T60] bridge_slave_1: left allmulticast mode [ 1251.556365][ T60] bridge_slave_1: left promiscuous mode [ 1251.556531][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.569080][ T60] bridge_slave_0: left allmulticast mode [ 1251.569111][ T60] bridge_slave_0: left promiscuous mode [ 1251.569282][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.745335][ T60] bond0 (unregistering): left allmulticast mode [ 1251.745392][ T60] bond_slave_0: left allmulticast mode [ 1251.745441][ T60] bond_slave_1: left allmulticast mode [ 1251.775507][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.785104][ T60] bond_slave_0: left promiscuous mode [ 1251.793869][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.803497][ T60] bond_slave_1: left promiscuous mode [ 1251.810066][ T60] bond0 (unregistering): Released all slaves [ 1251.888326][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.899839][ T60] bond_slave_0: left promiscuous mode [ 1251.907430][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.907951][ T60] bond_slave_1: left promiscuous mode [ 1251.908976][ T60] bond0 (unregistering): Released all slaves [ 1251.925265][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1251.995118][ T60] tipc: Disabling bearer [ 1251.995215][ T60] tipc: Left network mode [ 1252.234281][ T60] hsr_slave_0: left promiscuous mode [ 1252.236300][ T60] hsr_slave_1: left promiscuous mode [ 1252.236890][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.236916][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.240716][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.240741][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.275209][ T60] hsr_slave_0: left promiscuous mode [ 1252.284184][ T60] hsr_slave_1: left promiscuous mode [ 1252.284757][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.284783][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.290591][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.290617][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.317023][ T60] veth1_macvtap: left promiscuous mode [ 1252.317063][ T60] veth0_macvtap: left promiscuous mode [ 1252.317167][ T60] veth1_vlan: left promiscuous mode [ 1252.317243][ T60] veth0_vlan: left promiscuous mode [ 1252.337970][ T60] veth1_macvtap: left promiscuous mode [ 1252.338008][ T60] veth0_macvtap: left promiscuous mode [ 1252.338096][ T60] veth1_vlan: left promiscuous mode [ 1252.338160][ T60] veth0_vlan: left promiscuous mode [ 1252.552000][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1252.559550][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1252.718018][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1252.725840][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1252.814424][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1253.243100][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1253.479626][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.517638][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.599095][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.669153][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.682760][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1253.770665][ T60] bridge_slave_1: left allmulticast mode [ 1253.770712][ T60] bridge_slave_1: left promiscuous mode [ 1253.770901][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.784013][ T60] bridge_slave_0: left allmulticast mode [ 1253.784043][ T60] bridge_slave_0: left promiscuous mode [ 1253.784205][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.810775][ T60] bridge_slave_1: left allmulticast mode [ 1253.817136][ T60] bridge_slave_1: left promiscuous mode [ 1253.822952][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.835165][ T60] bridge_slave_0: left allmulticast mode [ 1253.835219][ T60] bridge_slave_0: left promiscuous mode [ 1253.835370][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.939692][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.954003][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.964713][ T60] bond0 (unregistering): Released all slaves [ 1254.055819][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.067868][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.069402][ T60] bond0 (unregistering): Released all slaves [ 1254.189923][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1254.279951][ T60] hsr_slave_0: left promiscuous mode [ 1254.285651][ T60] hsr_slave_1: left promiscuous mode [ 1254.286203][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.288237][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.309241][ T60] hsr_slave_0: left promiscuous mode [ 1254.314702][ T60] hsr_slave_1: left promiscuous mode [ 1254.315294][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.315320][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.324204][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.324230][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.342718][ T60] veth1_macvtap: left promiscuous mode [ 1254.342758][ T60] veth0_macvtap: left promiscuous mode [ 1254.342854][ T60] veth1_vlan: left promiscuous mode [ 1254.342914][ T60] veth0_vlan: left promiscuous mode [ 1254.509985][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1254.532656][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1254.728298][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1254.750996][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1254.841498][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1255.267676][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1255.321175][ T1822] block nbd0: Possible stuck request ffff888027cd5080: control (read@0,1024B). Runtime 600 seconds [ 1255.321260][ T1822] block nbd0: Possible stuck request ffff888027cd5240: control (read@1024,3072B). Runtime 600 seconds [ 1255.355889][ T3308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.355972][ T3308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.429455][ T3308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.429539][ T3308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.467693][ T3308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.478582][ T3308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.519730][ T3308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.519812][ T3308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.614298][ T3308] bridge_slave_1: left allmulticast mode [ 1255.614353][ T3308] bridge_slave_1: left promiscuous mode [ 1255.614524][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.635698][ T3308] bridge_slave_0: left allmulticast mode [ 1255.635749][ T3308] bridge_slave_0: left promiscuous mode [ 1255.635912][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.747224][ T3308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.756165][ T3308] bond_slave_0: left promiscuous mode [ 1255.762298][ T3308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.775416][ T3308] bond_slave_1: left promiscuous mode [ 1255.776459][ T3308] bond0 (unregistering): Released all slaves [ 1255.779869][ T3308] bond1 (unregistering): Released all slaves [ 1255.795452][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1256.035376][ T3308] hsr_slave_0: left promiscuous mode [ 1256.041830][ T3308] hsr_slave_1: left promiscuous mode [ 1256.042748][ T3308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.042775][ T3308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.048588][ T3308] batman_adv: batadv0: Removing interface: vlan2 [ 1256.074304][ T3308] veth1_macvtap: left promiscuous mode [ 1256.074360][ T3308] veth0_macvtap: left promiscuous mode [ 1256.074448][ T3308] veth1_vlan: left promiscuous mode [ 1256.074517][ T3308] veth0_vlan: left promiscuous mode [ 1256.257490][ T3308] team0 (unregistering): Port device team_slave_1 removed [ 1256.265751][ T3308] team0 (unregistering): Port device veth1_to_team removed [ 1256.273698][ T3308] team0 (unregistering): Port device team_slave_0 removed [ 1256.355230][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1256.509115][ T3308] IPVS: stop unused estimator thread 0... [ 1256.751384][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1257.072562][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1257.397599][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1257.724525][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1258.054914][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1258.382916][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18