last executing test programs: 8.561969666s ago: executing program 3 (id=1506): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8.362989514s ago: executing program 4 (id=1507): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0xfffffffc, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f041a5fc07"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x4) 8.042501314s ago: executing program 3 (id=1510): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000001080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x2) 7.843168016s ago: executing program 4 (id=1512): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x973, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 7.414835772s ago: executing program 2 (id=1515): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4114, 0x1012}], 0x1}, 0x406) 7.412797013s ago: executing program 3 (id=1516): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) recvmmsg(r0, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002240)=""/63, 0x3f}], 0x1, 0x0, 0x53}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000140, 0x0) 6.819038244s ago: executing program 3 (id=1517): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) 6.505629735s ago: executing program 5 (id=1518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x1200, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.159928157s ago: executing program 4 (id=1522): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x83, @none}, 0xe) 5.101824296s ago: executing program 5 (id=1523): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2d2, r0}, 0x38) 4.929239962s ago: executing program 0 (id=1524): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0x20, "dce4f0020100000000001b347d5c00010200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000240)=0xe) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x5, 0x9, 0xdd90, 0x1, 0x17, "b23d84eb32035e9d70cb7628b768f980b57f50"}) 4.694323162s ago: executing program 4 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="040800766572736928b52f", 0xb) 4.544314548s ago: executing program 5 (id=1527): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/245, 0xf5}, {0x0}], 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 4.433449153s ago: executing program 0 (id=1528): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 4.417184368s ago: executing program 2 (id=1529): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$inet6(0xa, 0x3, 0x5) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.207072557s ago: executing program 4 (id=1530): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_NOTEON=@note=0x7f, 0xa0, 0xb9, 0x2}) 3.929457607s ago: executing program 2 (id=1531): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8c}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3.915406077s ago: executing program 1 (id=1532): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2adfa2f785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x267, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) 3.90157736s ago: executing program 0 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 3.737077193s ago: executing program 5 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'syz_tun\x00', 0x200}) 3.472867075s ago: executing program 4 (id=1535): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x180c00, 0x0, 0x3, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0x40, 0x0, &(0x7f0000000140)) 3.42662653s ago: executing program 2 (id=1536): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320003600000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 3.410643356s ago: executing program 0 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.239306904s ago: executing program 1 (id=1538): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LL', 0x2, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) 2.59452085s ago: executing program 3 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 2.40940715s ago: executing program 5 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904000001ff00000007058103"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) 2.390832967s ago: executing program 1 (id=1541): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004"], 0x50) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.163798882s ago: executing program 0 (id=1542): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x1, 0x81, 0x0, 0x0}) 1.945714249s ago: executing program 1 (id=1543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 1.547771143s ago: executing program 1 (id=1544): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB='iocharset=cp950,\x00\x00\x00\x00tname=win95,shortname=ZXwer,utf8=0,shortname=lower,utf8=1,nonumtail=0,iocharset=koi8-u,utf8=0,codepage=852,check=strict,iocharset=cp1250,utf8=1,iocharset=cp1250,utf8=0,iocharset=default,\x00'], 0x3, 0x28f, &(0x7f0000001480)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xc97}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.225663171s ago: executing program 3 (id=1545): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x80, 0x1, 0x0, 0xfffffffd}) 869.724171ms ago: executing program 2 (id=1546): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006780)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="a38ba845ec4efadcef0748bc81c2b1e5871864cbd669dbeae919b80ed2cbe548fec9b69473db427a2f2e8e6e7c4c766444a00864121f6ee2ba4a23229ec0168a47176bb0a5bcb0f2755306372832f73ef0cd68b6f1579a637633db", 0x5b}], 0x1}}], 0x1, 0x2000c044) writev(r0, &(0x7f0000001e80)=[{&(0x7f00000003c0)="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", 0xff}, {&(0x7f0000000180)="a52cac98c6237a559e389dbabe5316e63c55e1d4bc06351c21941e2218259e975b874ccd6985c9229cdb1756463b5e3c985974ccce649aacde57388edacba1ca30f04285f4075e6aee07b36b08440f904b7b5693fd3e9f09357f3dd4393dadc40b2dde35cb86b725fb68e866f122f77185e87a615d51e314a2c46c4fa98c3f07433204287171781f09ce8cbe3c75875cc3c46506a62036bb1d635f3e0da07bd8b79385cbc2f91375", 0xa8}, {&(0x7f00000005c0)="b4b76ef727e990a047ce1c5a30cbcc57b5645ba105e5dc942f17dcc594e7f52a9123990adc1550a7d3dfd8d764b194b58d75c262d05e3c11c30fcf58317f51c164c8ce6af132f1278879c82d9f68dda366ab1b49f3716584fd33db315250aa922ce2f5015b3ae534bfb00abcfe4cd8d1f543bc3743de6c700da472ffda25383cdde1a46f", 0x84}, {&(0x7f0000000680)="2ca51f5d2d541ce485641baa3626b2c78b296569bb2a83cd6cf08304af9c8f62edf594694697241760816a8e84d30f3641a062b59078a6a6c329dbbb1d1796d9b18c05f6a5e974cbd36015e4624ceb3478456347e32eccae8821cec083eb195d8a3a3eeaa6be5be22c6387defdfa87e66d52b654c1ddcdd591c5b0be6a6aa98c91", 0x81}, {&(0x7f0000000e40)="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", 0x2ba}], 0x5) 853.506125ms ago: executing program 1 (id=1547): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 594.349638ms ago: executing program 5 (id=1548): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 211.898377ms ago: executing program 2 (id=1549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x39, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x34, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x73d, 0x5}]}}, {"17b8be20b0"}}}}}}, 0x0) 0s ago: executing program 0 (id=1550): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) kernel console output (not intermixed with test programs): erface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.451808][ T5783] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.451838][ T5783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.451875][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.471581][ T5783] usb 1-1: config 0 descriptor?? [ 123.801133][ T6902] program syz.5.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.854815][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 123.919666][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.962846][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.043799][ T5783] hid_parser_main: 65294 callbacks suppressed [ 124.043830][ T5783] lg-g15 0003:046D:C22D.0003: unknown main item tag 0x4 [ 124.043902][ T5783] lg-g15 0003:046D:C22D.0003: unexpected long global item [ 124.055051][ T5783] lg-g15 0003:046D:C22D.0003: probe with driver lg-g15 failed with error -22 [ 124.148274][ T6911] sd 0:0:1:0: PR command failed: 1026 [ 124.148348][ T6911] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 124.148393][ T6911] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 124.261733][ T25] usb 1-1: USB disconnect, device number 2 [ 124.521351][ T6925] loop5: detected capacity change from 0 to 512 [ 124.529060][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.539055][ T6926] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 124.564942][ T6926] loop4: detected capacity change from 0 to 256 [ 124.665744][ T6925] EXT4-fs (loop5): 1 orphan inode deleted [ 124.681754][ T6925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.701675][ T6925] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.715454][ T5783] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 124.717468][ T5783] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.717497][ T5783] usb 3-1: config 0 has no interface number 0 [ 124.719971][ T1294] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 124.720085][ T1294] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 124.724751][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.724778][ T5783] usb 3-1: Product: syz [ 124.724795][ T5783] usb 3-1: Manufacturer: syz [ 124.724812][ T5783] usb 3-1: SerialNumber: syz [ 124.736836][ T5783] usb 3-1: config 0 descriptor?? [ 124.835527][ T6925] EXT4-fs (loop5): shut down requested (2) [ 124.954955][ T5783] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 124.982644][ T5783] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.982953][ T5783] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 124.983001][ T5783] usb 3-1: media controller created [ 125.113620][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.115348][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.360965][ T6946] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 125.410591][ T5783] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 125.415237][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 125.641764][ T5783] usb 3-1: USB disconnect, device number 5 [ 125.748554][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 126.027382][ T6967] loop0: detected capacity change from 0 to 512 [ 126.041140][ T6967] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.058109][ T6967] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.473: bad orphan inode 131083 [ 126.058137][ T6967] loop0: lost filesystem error report for type 5 error -117 [ 126.062611][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 126.062634][ C1] EXT4-fs (loop0): initial error at time 1791366506: ext4_orphan_get:1429 [ 126.062661][ C1] EXT4-fs (loop0): last error at time 1791366506: ext4_orphan_get:1429 [ 126.073938][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.321315][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.378951][ T5768] kernel write not supported for file [eventfd] (pid: 5768 comm: kworker/1:6) [ 126.653686][ T6994] base or size exceeds the MTRR width [ 126.720954][ T6997] i2c i2c-0: new_device: Can't parse I2C address [ 126.803649][ T6999] loop5: detected capacity change from 0 to 256 [ 127.048250][ T7001] ip_tables: iptables: counters copy to user failed while replacing table [ 127.535087][ T7013] loop4: detected capacity change from 0 to 4096 [ 127.667614][ T7013] ntfs3(loop4): Failed to load $Extend (-22). [ 127.667645][ T7013] ntfs3(loop4): Failed to initialize $Extend. [ 127.785530][ T7023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.840659][ T25] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 127.885276][ T25] wiimote 0005:057E:0306.0004: New device registered [ 127.969332][ T7019] wiimote 0005:057E:0306.0004: Device removed [ 128.429404][ T7050] raw_sendmsg: syz.4.512 forgot to set AF_INET. Fix it! [ 128.515929][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 128.643637][ T7061] Bluetooth: MGMT ver 1.23 [ 128.940420][ T5768] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 129.101082][ T5768] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input8 [ 129.175370][ T5768] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 129.203877][ T5768] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 129.275723][ T7090] loop4: detected capacity change from 0 to 2048 [ 129.356439][ T7090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.356544][ T7090] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.640777][ T7090] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 129.640803][ T7090] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 129.889952][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.898316][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 130.182768][ T7138] loop3: detected capacity change from 0 to 512 [ 130.190800][ T7138] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.220592][ T7138] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.554: invalid indirect mapped block 9 (level 0) [ 130.220629][ T7138] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.222411][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 130.222430][ C1] EXT4-fs (loop3): initial error at time 1791366510: ext4_free_branches:1023: inode 11 [ 130.222463][ C1] EXT4-fs (loop3): last error at time 1791366510: ext4_free_branches:1023: inode 11 [ 130.257402][ T7138] EXT4-fs (loop3): 1 truncate cleaned up [ 130.263213][ T7138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.486512][ T7149] loop2: detected capacity change from 0 to 1024 [ 130.516555][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.578440][ T7149] hfsplus: bad catalog file entry [ 130.608489][ T7149] hfsplus: walked past end of dir [ 130.721662][ T40] hfsplus: bad catalog file entry [ 130.887748][ T7163] batman_adv: batadv0: Adding interface: vlan0 [ 130.887769][ T7163] batman_adv: batadv0: The MTU of interface vlan0 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.887803][ T7163] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 130.944927][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.096777][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 131.100207][ T30] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.101499][ T30] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.101524][ T30] usb 4-1: config 0 has no interface number 0 [ 131.110664][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.110691][ T30] usb 4-1: Product: syz [ 131.110708][ T30] usb 4-1: Manufacturer: syz [ 131.110725][ T30] usb 4-1: SerialNumber: syz [ 131.125775][ T30] usb 4-1: config 0 descriptor?? [ 131.136095][ T30] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.209549][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 131.240266][ T7179] loop2: detected capacity change from 0 to 1024 [ 131.246396][ T7179] hfsplus: Unknown parameter 'smackfstransmute' [ 131.390897][ T30] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.430644][ T30] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.490521][ T12] IPVS: starting estimator thread 0... [ 131.572540][ T7188] IPVS: using max 28 ests per chain, 67200 per kthread [ 131.791104][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.791573][ T30] usb 4-1: USB disconnect, device number 4 [ 131.804080][ T30] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.828324][ T30] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.833179][ T30] quatech2 4-1:0.51: device disconnected [ 132.136600][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.136685][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.260940][ T7214] FAULT_INJECTION: forcing a failure. [ 132.260940][ T7214] name fail_futex, interval 1, probability 0, space 0, times 1 [ 132.260982][ T7214] CPU: 0 UID: 0 PID: 7214 Comm: syz.2.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.261014][ T7214] Tainted: [L]=SOFTLOCKUP [ 132.261024][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 132.261042][ T7214] Call Trace: [ 132.261052][ T7214] [ 132.261062][ T7214] dump_stack_lvl+0xe8/0x150 [ 132.261105][ T7214] should_fail_ex+0x410/0x560 [ 132.261146][ T7214] get_futex_key+0x1b4/0x1580 [ 132.261192][ T7214] ? __pfx_get_futex_key+0x10/0x10 [ 132.261233][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261271][ T7214] ? update_se+0x90/0x1080 [ 132.261308][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261344][ T7214] futex_wait_setup+0x4a/0x590 [ 132.261377][ T7214] ? __futex_wait+0xdf/0x400 [ 132.261407][ T7214] __futex_wait+0x15f/0x400 [ 132.261438][ T7214] ? __pfx___futex_wait+0x10/0x10 [ 132.261468][ T7214] ? __pfx_futex_wake_mark+0x10/0x10 [ 132.261499][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261527][ T7214] ? try_to_wake_up+0x8c5/0x14d0 [ 132.261566][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261600][ T7214] futex_wait+0x121/0x390 [ 132.261628][ T7214] ? __pfx_futex_wait+0x10/0x10 [ 132.261664][ T7214] ? __pfx_vfs_writev+0x10/0x10 [ 132.261706][ T7214] do_futex+0x3e7/0x4e0 [ 132.261746][ T7214] ? __pfx_do_futex+0x10/0x10 [ 132.261791][ T7214] __se_sys_futex+0x3a8/0x450 [ 132.261831][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261860][ T7214] ? __x64_sys_pwritev+0x28b/0x2b0 [ 132.261888][ T7214] ? __pfx___se_sys_futex+0x10/0x10 [ 132.261924][ T7214] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 132.261959][ T7214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.261988][ T7214] ? __x64_sys_futex+0x21/0xf0 [ 132.262027][ T7214] do_syscall_64+0x166/0x520 [ 132.262065][ T7214] ? trace_irq_disable+0x3b/0x140 [ 132.262093][ T7214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.262127][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.262152][ T7214] RIP: 0033:0x7fc6c4f9e199 [ 132.262174][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.262195][ T7214] RSP: 002b:00007fc6c5f4e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.262222][ T7214] RAX: ffffffffffffffda RBX: 00007fc6c5225fa8 RCX: 00007fc6c4f9e199 [ 132.262247][ T7214] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6c5225fa8 [ 132.262263][ T7214] RBP: 00007fc6c5225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 132.262279][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.262295][ T7214] R13: 00007fc6c5226038 R14: 00007fffa1b47840 R15: 00007fffa1b47928 [ 132.262334][ T7214] [ 132.697265][ T7221] netlink: 'syz.5.590': attribute type 3 has an invalid length. [ 132.697324][ T7221] netlink: 'syz.5.590': attribute type 3 has an invalid length. [ 132.727507][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.590'. [ 132.845800][ T7231] loop3: detected capacity change from 0 to 512 [ 133.344722][ T7246] loop2: detected capacity change from 0 to 4096 [ 133.539899][ T31] audit: type=1326 audit(1791366513.861:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.540140][ T31] audit: type=1326 audit(1791366513.861:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.596610][ T31] audit: type=1326 audit(1791366513.921:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.596850][ T31] audit: type=1326 audit(1791366513.921:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599259][ T31] audit: type=1326 audit(1791366513.921:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599328][ T31] audit: type=1326 audit(1791366513.921:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599369][ T31] audit: type=1326 audit(1791366513.921:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599408][ T31] audit: type=1326 audit(1791366513.921:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599770][ T31] audit: type=1326 audit(1791366513.921:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 133.599969][ T31] audit: type=1326 audit(1791366513.921:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.1.606" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607579e199 code=0x7ffc0000 [ 134.528634][ T7267] loop4: detected capacity change from 0 to 32768 [ 134.610770][ T7267] JBD2: Ignoring recovery information on journal [ 134.785929][ T7267] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 135.067178][ T5629] ocfs2: Unmounting device (7,4) on (node local) [ 135.115995][ T7289] vhci_hcd vhci_hcd.0: failed to lookup sock [ 135.383787][ T7298] loop4: detected capacity change from 0 to 512 [ 135.447673][ T7298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.447784][ T7298] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.500862][ T7298] EXT4-fs (loop4): shut down requested (2) [ 135.648353][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.790734][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 135.790764][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 135.994823][ T7323] loop4: detected capacity change from 0 to 4096 [ 136.107583][ T7337] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.917647][ T7365] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 136.927293][ T7368] process 'syz.1.655' launched '/dev/fd/4' with NULL argv: empty string added [ 136.952803][ T5344] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.105110][ T5344] usb 5-1: Using ep0 maxpacket: 16 [ 137.106582][ T5344] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.113934][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.113966][ T5344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.113990][ T5344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.114034][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.125559][ T5344] usb 5-1: config 0 descriptor?? [ 137.467534][ T7378] hub 1-0:1.0: USB hub found [ 137.479722][ T7378] hub 1-0:1.0: 1 port detected [ 137.584857][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.588569][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.612504][ T5344] microsoft 0003:045E:07DA.0005: unknown main item tag 0x4 [ 137.612540][ T5344] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 137.671508][ T5344] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input11 [ 137.812746][ T7397] loop0: detected capacity change from 0 to 256 [ 137.909680][ T5344] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 137.946336][ T5344] usb 5-1: USB disconnect, device number 4 [ 138.168083][ T7408] fido_id[7408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 138.601776][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 138.761195][ T7440] loop2: detected capacity change from 0 to 2048 [ 138.780116][ T7440] EXT4-fs: Ignoring removed bh option [ 138.780141][ T7440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.803517][ T7440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.873466][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.104954][ T7454] loop4: detected capacity change from 0 to 256 [ 139.105966][ T7454] exfat: Deprecated parameter 'utf8' [ 139.159375][ T7454] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x03f9cff3, utbl_chksum : 0xe619d30d) [ 139.529438][ T7473] loop5: detected capacity change from 0 to 128 [ 139.539386][ T7473] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.540741][ T7473] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.781663][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.092013][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 140.271196][ T7499] device-mapper: ioctl: Invalid ioctl structure: name j, dev 8045d08669761000 [ 140.536922][ T7509] kAFS: bad VL server IP address [ 140.751409][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 140.751450][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 140.774527][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 140.774547][ T31] audit: type=1326 audit(1791366521.091:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.784882][ T31] audit: type=1326 audit(1791366521.111:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.797603][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.5.726'. [ 140.805966][ T31] audit: type=1326 audit(1791366521.131:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.806021][ T31] audit: type=1326 audit(1791366521.131:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.806070][ T31] audit: type=1326 audit(1791366521.131:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.832900][ T31] audit: type=1326 audit(1791366521.161:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.832959][ T31] audit: type=1326 audit(1791366521.161:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.833009][ T31] audit: type=1326 audit(1791366521.161:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.843418][ T31] audit: type=1326 audit(1791366521.171:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 140.843472][ T31] audit: type=1326 audit(1791366521.171:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.4.725" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 141.636805][ T7551] ovs-dp0: entered promiscuous mode [ 141.967544][ T7576] loop0: detected capacity change from 0 to 64 [ 142.047043][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.144095][ T7581] xt_hashlimit: size too large, truncated to 1048576 [ 143.099890][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.768'. [ 143.220314][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 143.632743][ T7634] loop0: detected capacity change from 0 to 4096 [ 143.649651][ T7634] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 143.676200][ T7641] netlink: 140 bytes leftover after parsing attributes in process `syz.3.779'. [ 143.681204][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.779'. [ 143.681627][ T7638] loop5: detected capacity change from 0 to 2048 [ 143.773367][ T7638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.773482][ T7638] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.905622][ T7634] ntfs3(loop0): ino=19, mi_enum_attr [ 143.905656][ T7634] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 144.030481][ T7649] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 144.030509][ T7649] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 144.189518][ T7660] netlink: 'syz.1.784': attribute type 2 has an invalid length. [ 144.315959][ T7664] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 144.315992][ T7664] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 144.316025][ T7664] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 144.316047][ T7664] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 144.316061][ T7664] page dumped because: unmovable page [ 144.316073][ T7664] page_owner info is not present (never set?) [ 144.408634][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.505509][ T7670] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 144.826894][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.5.799'. [ 144.839706][ T7682] team0: Device gtp0 is of different type [ 144.876096][ T7688] ptp ptp0: delete virtual clock ptp1 [ 145.042300][ T7688] ptp ptp0: only physical clock in use now [ 145.461183][ T7713] loop0: detected capacity change from 0 to 512 [ 145.489674][ T7713] EXT4-fs: Ignoring removed oldalloc option [ 145.556919][ T7713] EXT4-fs (loop0): 1 truncate cleaned up [ 145.560366][ T7713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.754447][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.948536][ T7729] block nbd0: server does not support multiple connections per device. [ 145.949059][ T7729] block nbd0: shutting down sockets [ 146.213699][ T5344] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 146.375352][ T5344] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 146.376648][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.388202][ T5344] usb 4-1: config 0 descriptor?? [ 146.411013][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 146.429020][ T5344] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 146.951430][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.833'. [ 147.015147][ T7775] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 147.015647][ T7775] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 147.025539][ T5344] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 147.025585][ T5344] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 147.241017][ T5344] usb 4-1: USB disconnect, device number 5 [ 147.820683][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.850'. [ 147.976577][ T7819] TCP: TCP_TX_DELAY enabled [ 148.229599][ T7830] loop3: detected capacity change from 0 to 2048 [ 148.261655][ T7830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.261766][ T7830] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.418195][ T7830] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 148.418223][ T7830] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 148.596021][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.646570][ T7852] program syz.5.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.708913][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.743808][ T25] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 148.754578][ T25] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 148.754608][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 148.758638][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.758664][ T25] usb 3-1: Product: syz [ 148.758681][ T25] usb 3-1: Manufacturer: syz [ 148.758698][ T25] usb 3-1: SerialNumber: syz [ 148.808457][ T25] usb 3-1: config 0 descriptor?? [ 148.843582][ T5344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.843768][ T25] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 148.905710][ T7864] loop5: detected capacity change from 0 to 8 [ 148.995284][ T5344] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 148.996842][ T5344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.996874][ T5344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.996915][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.017536][ T5344] usb 1-1: config 0 descriptor?? [ 149.188008][ T7869] loop3: detected capacity change from 0 to 512 [ 149.229929][ T7869] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.877: bad orphan inode 15 [ 149.229966][ T7869] loop3: lost filesystem error report for type 5 error -117 [ 149.230369][ T7869] ext4_test_bit(bit=14, block=5) = 0 [ 149.263535][ T7869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.333455][ T7869] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.877: reserved inode found cleared - inode=1 [ 149.348679][ T7869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 149.516009][ T5344] cp2112 0003:10C4:EA90.0006: unbalanced collection at end of report description [ 149.518724][ T5344] cp2112 0003:10C4:EA90.0006: parse failed [ 149.518904][ T5344] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 149.535997][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.579538][ T7881] loop4: detected capacity change from 0 to 512 [ 149.600772][ T7881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.632316][ T7881] EXT4-fs (loop4): 1 truncate cleaned up [ 149.667864][ T7881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.701969][ T25] gspca_sunplus: reg_r err -71 [ 149.702053][ T25] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 149.712362][ T25] usb 3-1: USB disconnect, device number 6 [ 149.758535][ T1212] usb 1-1: USB disconnect, device number 3 [ 149.871539][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.952663][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 149.952684][ T31] audit: type=1326 audit(1791366530.281:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.5.887" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d50f9e199 code=0x7ffc0000 [ 149.952763][ T31] audit: type=1326 audit(1791366530.281:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.5.887" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d50f9e199 code=0x7ffc0000 [ 150.190174][ T7906] block2mtd: parameter too long [ 150.255870][ T31] audit: type=1326 audit(1791366530.581:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.256030][ T31] audit: type=1326 audit(1791366530.581:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.314759][ T31] audit: type=1326 audit(1791366530.591:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.314813][ T31] audit: type=1326 audit(1791366530.591:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.314865][ T31] audit: type=1326 audit(1791366530.591:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.314913][ T31] audit: type=1326 audit(1791366530.591:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.314961][ T31] audit: type=1326 audit(1791366530.591:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.315008][ T31] audit: type=1326 audit(1791366530.591:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.4.895" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da39e199 code=0x7ffc0000 [ 150.700061][ T5623] Bluetooth: hci5: connection err: -111 [ 150.764131][ T7920] loop2: detected capacity change from 0 to 1024 [ 150.794515][ T7920] hfsplus: failed to load extents file [ 151.076206][ T7924] loop0: detected capacity change from 0 to 128 [ 151.176974][ T7924] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.177012][ T7924] hpfs: filesystem error: improperly stopped [ 151.177029][ T7924] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.177047][ T7924] hpfs: You really don't want any checks? You are crazy... [ 151.177061][ T7924] hpfs: Code page index out of array [ 151.177070][ T7924] hpfs: code page support is disabled [ 151.177743][ T7924] hpfs: hpfs_map_4sectors(): unaligned read [ 151.177994][ T7924] hpfs: hpfs_map_4sectors(): unaligned read [ 151.178006][ T7924] hpfs: filesystem error: unable to find root dir [ 151.185730][ T7926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.904'. [ 151.620800][ T7934] loop4: detected capacity change from 0 to 4096 [ 151.638643][ T7934] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 151.667938][ T7934] ntfs3(loop4): try to read out of volume at offset 0xffffffff0000 [ 151.667970][ T7934] ntfs3(loop4): Failed to initialize $Bitmap (-5). [ 151.706373][ T7943] sd 0:0:1:0: PR command failed: 1026 [ 151.706424][ T7943] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 151.706479][ T7943] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 151.952226][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.037681][ T7950] loop3: detected capacity change from 0 to 1024 [ 152.103002][ T25] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 152.104344][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.104375][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 152.104404][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 62, changing to 9 [ 152.104434][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33721, setting to 1024 [ 152.104480][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.132480][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.132612][ T7934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.181684][ T7952] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 152.242012][ T5623] Bluetooth: hci6: Can't claim NULL iso interface [ 152.449753][ T5623] Bluetooth: hci6: Failed to get device id (-71) [ 152.449782][ T5623] Bluetooth: hci6: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 152.473247][ T25] usb 5-1: USB disconnect, device number 5 [ 153.104653][ T7970] loop5: detected capacity change from 0 to 4096 [ 153.169478][ T7981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.169843][ T7983] jffs2: notice: (7983) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.243165][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.249841][ T7970] ntfs3(loop5): ino=b, mi_enum_attr [ 153.249869][ T7970] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 153.251571][ T7970] ntfs3(loop5): Failed to load $Extend (-22). [ 153.251592][ T7970] ntfs3(loop5): Failed to initialize $Extend. [ 153.395973][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 153.397202][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 153.397233][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 153.397263][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 153.410963][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.410989][ T9] usb 1-1: Product: syz [ 153.411006][ T9] usb 1-1: Manufacturer: syz [ 153.411022][ T9] usb 1-1: SerialNumber: syz [ 153.465772][ T9] usb 1-1: config 0 descriptor?? [ 153.468055][ T7976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.468205][ T7976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.484313][ T9] usb 1-1: ucan: probing device on interface #0 [ 153.509113][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.934'. [ 153.940999][ T8008] loop3: detected capacity change from 0 to 512 [ 153.956095][ T8008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.995453][ T8008] EXT4-fs (loop3): 1 truncate cleaned up [ 154.020725][ T8008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.127373][ T9] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 154.248777][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.373943][ T9] usb 1-1: USB disconnect, device number 4 [ 154.451975][ T8030] loop2: detected capacity change from 0 to 128 [ 154.465420][ T8030] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 154.515662][ T8030] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.520546][ T8030] ext2 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.575602][ T8030] EXT4-fs (loop2): resizing filesystem from 64 to 2 blocks [ 154.575631][ T8030] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 154.790953][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.924281][ T1523] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.992937][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.959'. [ 155.154327][ T8058] loop2: detected capacity change from 0 to 2048 [ 155.183115][ T8059] kAFS: Invalid Command on /proc/fs/afs/cells file [ 155.217974][ T8058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.351121][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.392445][ T5783] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.399912][ T8068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.969'. [ 155.425753][ T8066] bridge_slave_0: left allmulticast mode [ 155.425778][ T8066] bridge_slave_0: left promiscuous mode [ 155.426231][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.446714][ T8070] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 155.475954][ T8066] bridge_slave_1: left allmulticast mode [ 155.475978][ T8066] bridge_slave_1: left promiscuous mode [ 155.477979][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.523652][ T8066] bond0: (slave bond_slave_0): Releasing backup interface [ 155.550344][ T8066] bond0: (slave bond_slave_1): Releasing backup interface [ 155.563238][ T5783] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 155.564424][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.564457][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.564498][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.615903][ T5783] usb 4-1: config 0 descriptor?? [ 155.636702][ T8066] team0: Port device team_slave_0 removed [ 155.675245][ T8066] team0: Port device team_slave_1 removed [ 155.676552][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.676574][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.709119][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.709143][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.732143][ T8066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.808723][ T8070] team0: Port device dummy0 added [ 155.911646][ T8075] loop5: detected capacity change from 0 to 4096 [ 155.933502][ T8075] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 156.091655][ T5783] hid-steelseries-arctis 0003:1038:12B6.0007: item fetching failed at offset 6/7 [ 156.102810][ T5783] hid-steelseries-arctis 0003:1038:12B6.0007: probe with driver hid-steelseries-arctis failed with error -22 [ 156.108354][ T8075] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 156.108380][ T8075] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 156.311695][ T25] usb 4-1: USB disconnect, device number 6 [ 156.575564][ T40] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 156.575983][ T5614] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 156.576010][ T5614] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 156.576029][ T5614] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 156.623723][ T40] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 156.641233][ T8098] loop4: detected capacity change from 0 to 4096 [ 156.646740][ T8098] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 156.738976][ T8098] ntfs3(loop4): ino=19, mi_enum_attr [ 156.739016][ T8098] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 156.746758][ T8098] ntfs3(loop4): ino=1a, mi_enum_attr [ 156.746886][ T8098] ntfs3(loop4): ino=1a, mi_enum_attr [ 156.746905][ T8098] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 156.940935][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 156.940958][ T31] audit: type=1800 audit(1791366537.261:71): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.982" name="file1" dev="loop4" ino=24 res=0 errno=0 [ 156.966910][ T31] audit: type=1800 audit(1791366537.291:72): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.982" name="bus" dev="loop4" ino=31 res=0 errno=0 [ 157.549814][ T8136] kAFS: bad VL server IP address [ 157.727076][ T8144] netlink: 'syz.4.1000': attribute type 2 has an invalid length. [ 157.727102][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 157.738221][ T8143] loop3: detected capacity change from 0 to 164 [ 158.062950][ T8153] loop0: detected capacity change from 0 to 256 [ 158.117059][ T8153] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 159.000016][ T8151] loop4: detected capacity change from 0 to 131072 [ 159.061625][ T8151] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 159.061655][ T8151] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 159.061682][ T8151] F2FS-fs (loop4): Test dummy encryption mode enabled [ 159.063977][ T8151] F2FS-fs (loop4): invalid crc value [ 159.131532][ T8151] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 159.131587][ T8151] loop4: lost filesystem error report for type 5 error -117 [ 159.138563][ T8151] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 159.141746][ T8151] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 159.141770][ T8151] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 159.141796][ T8151] F2FS-fs (loop4): Start checkpoint disabled! [ 159.148794][ T8151] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 159.155765][ T8151] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 159.155788][ T8151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 159.445558][ T8179] jffs2: notice: (8179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 159.945305][ T8196] input: syz1 as /devices/virtual/input/input12 [ 160.500490][ T40] IPVS: starting estimator thread 0... [ 160.592268][ T8220] IPVS: using max 30 ests per chain, 72000 per kthread [ 160.777948][ T8231] loop0: detected capacity change from 0 to 2048 [ 160.851694][ T8231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 160.851813][ T8231] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.954567][ T5783] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.973804][ T8231] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1038: bg 0: block 345: padding at end of block bitmap is not set [ 161.016839][ T8231] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 0 [ 161.016894][ T8231] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 161.103008][ T5783] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 161.104259][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.104338][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.104381][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.165504][ T5783] usb 3-1: config 0 descriptor?? [ 161.192033][ T8237] loop4: detected capacity change from 0 to 512 [ 161.233999][ T8237] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 161.234036][ T8237] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.234053][ T8237] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 161.273899][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00ff07000000. [ 161.316542][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.704980][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.923777][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.978595][ T8240] loop0: detected capacity change from 0 to 1024 [ 161.991960][ T8240] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 162.005422][ T5783] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 162.032884][ T5783] usb 3-1: USB disconnect, device number 7 [ 162.153899][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.159503][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.160969][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.185302][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.187068][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.258121][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.622304][ T5344] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.660212][ T8257] loop5: detected capacity change from 0 to 256 [ 162.788553][ T5344] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.795849][ T5344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.795902][ T5344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.795928][ T5344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.795975][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.840789][ T5344] usb 4-1: config 0 descriptor?? [ 163.171449][ T8266] x_tables: duplicate underflow at hook 1 [ 163.311924][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.311962][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.311988][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312012][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312038][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312063][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312088][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312265][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312289][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.312313][ T5344] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 163.380006][ T5344] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.604360][ T5783] usb 4-1: USB disconnect, device number 7 [ 163.632534][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.782262][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 163.783087][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.784127][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 163.784153][ T10] usb 5-1: config 0 has no interface number 0 [ 163.784196][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.784226][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.787970][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 163.787997][ T10] usb 5-1: Product: syz [ 163.788014][ T10] usb 5-1: SerialNumber: syz [ 163.815046][ T10] usb 5-1: config 0 descriptor?? [ 163.830333][ T10] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 163.845155][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input13 [ 164.029133][ T40] bridge_slave_1: left allmulticast mode [ 164.029181][ T40] bridge_slave_1: left promiscuous mode [ 164.030909][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.178020][ T40] bridge_slave_0: left allmulticast mode [ 164.178078][ T40] bridge_slave_0: left promiscuous mode [ 164.178937][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.203574][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.204703][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.204934][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.205159][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.205374][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.205589][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.205805][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.206021][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.206244][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.206455][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 164.292416][ T5623] Bluetooth: hci3: command tx timeout [ 164.326160][ T5344] usb 5-1: USB disconnect, device number 6 [ 164.326267][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 164.420658][ T5344] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 164.872216][ T5768] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.879387][ T8286] loop0: detected capacity change from 0 to 32768 [ 165.022610][ T5768] usb 4-1: Using ep0 maxpacket: 8 [ 165.024502][ T5768] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 165.037767][ T31] audit: type=1800 audit(1791366545.361:73): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1056" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 165.071204][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.078353][ T8286] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 165.078353][ T8286] [ 165.108232][ T5768] pvrusb2: Hardware description: Terratec Grabster AV400 [ 165.108252][ T5768] pvrusb2: ********** [ 165.108261][ T5768] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 165.108301][ T5768] pvrusb2: Important functionality might not be entirely working. [ 165.108313][ T5768] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 165.108326][ T5768] pvrusb2: ********** [ 165.353528][ T2356] pvrusb2: Invalid write control endpoint [ 165.594390][ T5768] usb 4-1: USB disconnect, device number 8 [ 165.599489][ T2356] pvrusb2: Invalid write control endpoint [ 165.599506][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.599519][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.599529][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.599541][ T2356] pvrusb2: Device being rendered inoperable [ 165.607896][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 165.607953][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 165.626740][ T2356] pvrusb2: Attached sub-driver cx25840 [ 165.626757][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 165.626769][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 165.893618][ T31] audit: type=1800 audit(1791366546.221:74): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1065" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 165.971325][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.995131][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.032969][ T40] bond0 (unregistering): Released all slaves [ 166.099100][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 166.309701][ T8318] pimreg: tun_chr_ioctl cmd 2147767521 [ 166.374645][ T5623] Bluetooth: hci3: command tx timeout [ 167.020227][ T8346] loop0: detected capacity change from 0 to 256 [ 167.074378][ T8342] loop3: detected capacity change from 0 to 8192 [ 167.093050][ T8342] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.110800][ T8348] vxcan0: tx address claim with dest, not broadcast [ 167.151982][ T8346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d) [ 167.559121][ T8355] hugetlbfs: syz.4.1079 (8355): Using mlock ulimits for SHM_HUGETLB is obsolete [ 167.918103][ T8371] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 168.057372][ T40] hsr_slave_0: left promiscuous mode [ 168.061220][ T40] hsr_slave_1: left promiscuous mode [ 168.077794][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.077862][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.084461][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.084485][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.200832][ T40] veth1_macvtap: left promiscuous mode [ 168.200896][ T40] veth0_macvtap: left promiscuous mode [ 168.396532][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 168.452600][ T5623] Bluetooth: hci3: command tx timeout [ 168.502342][ T8388] loop3: detected capacity change from 0 to 128 [ 168.826951][ T40] team0 (unregistering): Port device team_slave_1 removed [ 168.860524][ T40] team0 (unregistering): Port device team_slave_0 removed [ 169.164652][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 169.630512][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1106'. [ 169.646857][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 169.646904][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 169.707522][ T8420] loop5: detected capacity change from 0 to 4096 [ 169.720543][ T8420] EXT4-fs: Ignoring removed nobh option [ 169.720614][ T8420] EXT4-fs: Ignoring removed bh option [ 169.734133][ T5783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.761081][ T8420] EXT4-fs (loop5): Test dummy encryption mode enabled [ 169.790994][ T8429] loop2: detected capacity change from 0 to 256 [ 169.856555][ T8429] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 169.864004][ T8420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.919101][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 169.920444][ T5783] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 169.921605][ T5783] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 169.921653][ T5783] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 169.921685][ T5783] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.921719][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.985338][ T5783] usb 1-1: config 0 descriptor?? [ 170.034781][ T8436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1109'. [ 170.188637][ T8420] EXT4-fs: Cannot change journaled quota options when quota turned on [ 170.452519][ T5783] wacom 0003:056A:00C5.000A: ignoring exceeding usage max [ 170.461140][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.461251][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.465188][ T8245] bridge_slave_0: entered allmulticast mode [ 170.496615][ T8245] bridge_slave_0: entered promiscuous mode [ 170.506313][ T5783] hid_parser_main: 28 callbacks suppressed [ 170.506340][ T5783] wacom 0003:056A:00C5.000A: unknown main item tag 0x6 [ 170.506404][ T5783] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 170.506427][ T5783] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 170.506450][ T5783] wacom 0003:056A:00C5.000A: unknown main item tag 0x0 [ 170.510460][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.510572][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.510712][ T8245] bridge_slave_1: entered allmulticast mode [ 170.535741][ T5623] Bluetooth: hci3: command tx timeout [ 170.595738][ T8245] bridge_slave_1: entered promiscuous mode [ 170.620320][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.620367][ T5783] wacom 0003:056A:00C5.000A: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 170.674248][ T5783] usb 1-1: USB disconnect, device number 5 [ 170.885801][ T8451] fido_id[8451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 170.970283][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.992914][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.147677][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 171.166138][ T8245] team0: Port device team_slave_0 added [ 171.169647][ T8245] team0: Port device team_slave_1 added [ 171.322022][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.322044][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.322076][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.333982][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.333998][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.334029][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.430227][ T8470] loop3: detected capacity change from 0 to 512 [ 171.444608][ T8470] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.469824][ T8470] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.1118: inode has both inline data and extents flags [ 171.469860][ T8470] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.470181][ T8470] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1118: couldn't read orphan inode 15 (err -117) [ 171.470213][ T8470] loop3: lost filesystem error report for type 5 error -117 [ 171.539059][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.715890][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.898653][ T8245] hsr_slave_0: entered promiscuous mode [ 171.899875][ T8245] hsr_slave_1: entered promiscuous mode [ 171.916723][ T8245] debugfs: 'hsr0' already exists in 'hsr' [ 171.916749][ T8245] Cannot create hsr debugfs directory [ 172.095666][ T8498] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1126'. [ 172.096974][ T8497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 172.444473][ T8510] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 172.444473][ T8510] program syz.3.1131 not setting count and/or reply_len properly [ 172.481054][ T8515] loop0: detected capacity change from 0 to 256 [ 172.867042][ T8522] loop0: detected capacity change from 0 to 2048 [ 172.895581][ T8522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.956133][ T8527] loop3: detected capacity change from 0 to 2048 [ 172.957199][ T8527] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.957222][ T8527] EXT4-fs: Ignoring removed i_version option [ 173.552202][ T31] audit: type=1400 audit(1791366553.871:75): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8539 comm="syz.2.1142" name="p" offset=79 [ 173.624912][ T8542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.878997][ T8525] loop4: detected capacity change from 0 to 131072 [ 173.923879][ T8525] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 173.923910][ T8525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 173.923938][ T8525] F2FS-fs (loop4): Test dummy encryption mode enabled [ 173.925469][ T8525] F2FS-fs (loop4): invalid crc value [ 173.926814][ T8527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.992977][ T8525] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 173.993026][ T8525] loop4: lost filesystem error report for type 5 error -117 [ 174.001167][ T8525] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.008007][ T8525] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 174.008066][ T8525] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 174.008094][ T8525] F2FS-fs (loop4): Start checkpoint disabled! [ 174.012905][ T8525] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 174.034132][ T8525] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 174.034162][ T8525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 174.330058][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.687972][ T8568] loop2: detected capacity change from 0 to 1764 [ 174.984330][ T8576] loop0: detected capacity change from 0 to 512 [ 175.018000][ T8574] loop5: detected capacity change from 0 to 256 [ 175.035385][ T8576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 175.035518][ T8576] System zones: 1-12 [ 175.050236][ T8576] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1153: missing EA_INODE flag [ 175.050302][ T8576] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.062135][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 175.062160][ C1] EXT4-fs (loop0): initial error at time 1791366555: ext4_xattr_inode_iget:437: inode 12 [ 175.062196][ C1] EXT4-fs (loop0): last error at time 1791366555: ext4_xattr_inode_iget:437: inode 12 [ 175.068395][ T8576] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1153: error while reading EA inode 12 err=-117 [ 175.068428][ T8576] loop0: lost filesystem error report for type 5 error -117 [ 175.073724][ T8245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.076483][ T8574] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 175.076684][ T8576] EXT4-fs (loop0): 1 orphan inode deleted [ 175.104422][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.142462][ T8574] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 175.210724][ T8245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.220750][ T8577] loop3: detected capacity change from 0 to 2048 [ 175.229124][ T8245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.247943][ T8577] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.279202][ T8245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.281783][ T8245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.307918][ T8577] syz.3.1154: attempt to access beyond end of device [ 175.307918][ T8577] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 175.311540][ T8584] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.351643][ T8245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.361386][ T8245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.373051][ T5768] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.377275][ T8245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.523068][ T5768] usb 5-1: Using ep0 maxpacket: 16 [ 175.525873][ T5768] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.529919][ T5768] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.529954][ T5768] usb 5-1: config 0 interface 0 has no altsetting 0 [ 175.529990][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.610232][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.625960][ T31] audit: type=1326 audit(1791366555.941:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.1155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6c4f9e199 code=0x0 [ 175.704364][ T5768] usb 5-1: config 0 descriptor?? [ 175.758480][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.889471][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.933397][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.933525][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.012248][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.012382][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.239051][ T5768] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 176.655230][ T1212] usb 5-1: USB disconnect, device number 7 [ 177.013118][ T5768] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 177.167895][ T5768] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 177.169224][ T5768] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.169258][ T5768] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.169321][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.187455][ T5768] usb 1-1: config 0 descriptor?? [ 177.434582][ T31] audit: type=1400 audit(1791366557.761:77): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8646 comm="syz.3.1172" name="p" offset=48 [ 177.641640][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.641677][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.641702][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.641726][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651086][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651120][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651145][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651170][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651194][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651218][ T5768] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 177.651271][ T5768] chicony 0003:04F2:1421.000C: unbalanced collection at end of report description [ 177.652190][ T5768] chicony 0003:04F2:1421.000C: Chicony hid parse failed: -22 [ 177.652274][ T5768] chicony 0003:04F2:1421.000C: probe with driver chicony failed with error -22 [ 177.869599][ T5783] usb 1-1: USB disconnect, device number 6 [ 177.897758][ T8668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.127889][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.186875][ T8679] loop5: detected capacity change from 0 to 256 [ 178.348771][ T8245] veth0_vlan: entered promiscuous mode [ 178.352565][ T5344] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.369266][ T8245] veth1_vlan: entered promiscuous mode [ 178.393590][ T8682] input: syz0 as /devices/virtual/input/input18 [ 178.512997][ T5344] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 178.514475][ T5344] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.514507][ T5344] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.514613][ T5344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.514652][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.520325][ T5344] usb 5-1: config 0 descriptor?? [ 178.560410][ T8245] veth0_macvtap: entered promiscuous mode [ 178.587527][ T8685] loop3: detected capacity change from 0 to 512 [ 178.591046][ T8685] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.633864][ T8245] veth1_macvtap: entered promiscuous mode [ 178.649961][ T8685] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 178.669398][ T8685] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 178.669672][ T8685] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.681574][ T8685] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.1184: Invalid block bitmap block 0 in block_group 0 [ 178.681609][ T8685] loop3: lost filesystem error report for type 5 error -117 [ 178.692134][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 178.692156][ C1] EXT4-fs (loop3): last error at time 1791366559: ext4_read_block_bitmap_nowait:487 [ 178.767486][ T8692] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1185'. [ 178.774725][ T8685] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.1184: Invalid block bitmap block 0 in block_group 0 [ 178.774761][ T8685] loop3: lost filesystem error report for type 5 error -117 [ 178.825799][ T8685] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.1184: Invalid block bitmap block 0 in block_group 0 [ 178.825841][ T8685] loop3: lost filesystem error report for type 5 error -117 [ 178.847148][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.852719][ T8685] Quota error (device loop3): write_blk: dquota write failed [ 178.852820][ T8685] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 178.852858][ T8685] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1184: Failed to acquire dquot type 1 [ 178.852883][ T8685] loop3: lost filesystem error report for type 5 error -28 [ 178.868256][ T8685] EXT4-fs (loop3): 1 orphan inode deleted [ 178.884332][ T1523] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 178.884421][ T1523] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 1 [ 178.884446][ T1523] loop3: lost filesystem error report for type 5 error -117 [ 178.909232][ T8685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.966208][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.021329][ T1523] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.022658][ T31] audit: type=1326 audit(1791366559.341:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.1186" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6c4f9e199 code=0x0 [ 179.073916][ T5344] itetech 0003:048D:8595.000D: hidraw0: USB HID v11.06 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 179.163557][ T1294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.163862][ T6512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.163909][ T6512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.225271][ T5740] usb 5-1: USB disconnect, device number 8 [ 179.486113][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.486140][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.571299][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.725776][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.725802][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.573393][ T8745] loop4: detected capacity change from 0 to 256 [ 180.592635][ T5344] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.735501][ T8748] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1203'. [ 180.753008][ T5344] usb 1-1: Using ep0 maxpacket: 32 [ 180.760487][ T5344] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.780218][ T5344] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.780263][ T5344] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.807637][ T5344] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 180.807670][ T5344] usb 1-1: Product: syz [ 180.807687][ T5344] usb 1-1: Manufacturer: syz [ 180.840126][ T5344] hub 1-1:4.0: USB hub found [ 181.053595][ T5344] hub 1-1:4.0: 5 ports detected [ 181.054040][ T5344] hub 1-1:4.0: insufficient power available to use all downstream ports [ 181.099157][ T8763] loop1: detected capacity change from 0 to 128 [ 181.130783][ T8763] FAT-fs (loop1): Directory bread(block 1048) failed [ 181.130821][ T8763] FAT-fs (loop1): Directory bread(block 1049) failed [ 181.130849][ T8763] FAT-fs (loop1): Directory bread(block 1050) failed [ 181.130876][ T8763] FAT-fs (loop1): Directory bread(block 1051) failed [ 181.130928][ T8763] FAT-fs (loop1): Directory bread(block 1052) failed [ 181.130956][ T8763] FAT-fs (loop1): Directory bread(block 1053) failed [ 181.130982][ T8763] FAT-fs (loop1): Directory bread(block 1054) failed [ 181.131008][ T8763] FAT-fs (loop1): Directory bread(block 1055) failed [ 181.261748][ T5344] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 181.294519][ T8768] loop2: detected capacity change from 0 to 64 [ 181.309910][ T5344] usb 1-1: USB disconnect, device number 7 [ 181.629204][ T8779] loop1: detected capacity change from 0 to 128 [ 181.708663][ T8779] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.713076][ T8779] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.872029][ T8785] loop3: detected capacity change from 0 to 512 [ 181.896402][ T8785] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.042752][ T8245] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.052649][ T31] audit: type=1807 audit(1791366562.371:79): func=FILE_CHECK res=0 [ 182.094388][ T31] audit: type=1802 audit(1791366562.421:80): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1217" res=0 errno=0 [ 182.098253][ T8790] ima: policy update failed [ 182.098527][ T31] audit: type=1802 audit(1791366562.421:81): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1217" res=0 errno=0 [ 182.154336][ T8785] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 182.154898][ T8785] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 182.154978][ T8785] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 182.228791][ T6512] IPVS: starting estimator thread 0... [ 182.244988][ T8795] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 182.315559][ T8798] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.307021][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 183.307049][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 183.530930][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1235'. [ 183.530969][ T8846] netlink: 'syz.5.1235': attribute type 20 has an invalid length. [ 183.530986][ T8846] netlink: 'syz.5.1235': attribute type 21 has an invalid length. [ 183.666424][ T8843] can0: slcan on ttyS3. [ 183.959574][ T8842] can0 (unregistered): slcan off ttyS3. [ 184.081307][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'. [ 184.081338][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'. [ 184.110036][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1243'. [ 184.110063][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'. [ 184.341228][ T8863] loop5: detected capacity change from 0 to 4096 [ 184.413331][ T5344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.431932][ T8863] NILFS (loop5): invalid segment: Checksum error in segment payload [ 184.431961][ T8863] NILFS (loop5): trying rollback from an earlier position [ 184.475098][ T8836] loop4: detected capacity change from 0 to 40427 [ 184.524085][ T8836] F2FS-fs (loop4): build fault injection rate: 14 [ 184.524111][ T8836] F2FS-fs (loop4): build fault injection type: 0x30e4 [ 184.528330][ T8836] F2FS-fs (loop4): invalid crc value [ 184.540421][ T8863] NILFS (loop5): recovery complete [ 184.557924][ T8883] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.574714][ T5344] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 184.579718][ T5344] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 184.579748][ T5344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.579771][ T5344] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.579808][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.640111][ T8867] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.671127][ T8836] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 184.800051][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 184.849808][ T8885] NILFS (loop5): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 184.929141][ T8836] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.980854][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.980958][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.981020][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.981081][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.981142][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.981230][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.981291][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.982607][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.982671][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.982732][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983188][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983252][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983314][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983375][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983436][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983498][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983559][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983620][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983681][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983747][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983806][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983866][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983925][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.983986][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984048][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984105][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984161][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984215][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984273][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984336][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984399][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984459][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984520][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984589][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984649][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984709][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984776][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984837][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984898][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.984957][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985017][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985078][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985139][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985200][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985260][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985321][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985382][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985443][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985507][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985576][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985638][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 184.985701][ T5628] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 185.091421][ T8836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.368967][ T8891] loop2: detected capacity change from 0 to 512 [ 185.435476][ T5623] Bluetooth: hci6: Reading Intel version command failed (-71) [ 185.435862][ T982] usb 1-1: USB disconnect, device number 8 [ 185.484793][ T8883] NILFS (loop5): nilfs_direct_assign (ino=3): invalid pointer: 0 [ 185.484824][ T8883] NILFS error (device loop5): nilfs_bmap_assign: broken bmap (inode number=3) [ 185.504819][ T8883] Remounting filesystem read-only [ 185.525180][ T5614] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 185.546962][ T8891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.579274][ T8891] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.781374][ T8891] EXT4-fs error (device loop2): ext4_xattr_block_list:777: inode #15: comm syz.2.1249: corrupted xattr block 32: bad e_name length [ 185.915523][ T8905] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1255'. [ 186.222957][ T8914] program syz.3.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.895516][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.181254][ T8946] loop5: detected capacity change from 0 to 128 [ 187.189420][ T8946] EXT4-fs: Ignoring removed bh option [ 187.230732][ T8946] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 187.233114][ T8946] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.428998][ T5614] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.605312][ T8963] lo speed is unknown, defaulting to 1000 [ 187.605379][ T8963] lo speed is unknown, defaulting to 1000 [ 187.606366][ T8963] lo speed is unknown, defaulting to 1000 [ 187.610833][ T8963] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 187.610871][ T8963] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 187.610919][ T8963] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 187.714611][ T8967] CIFS: Attempting to mount //127.0.0.1/share [ 187.803537][ T8963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 187.927863][ T8967] CIFS: VFS: smbdirect_connect_resolve_addr:101 rdma_resolve_addr() failed -ENODEV [ 187.927898][ T8967] CIFS: VFS: smbdirect_connect_sync:907 smbdirect_connect(127.0.0.1:5445) failed -ENODEV [ 187.928000][ T8967] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 187.929761][ T8967] CIFS: VFS: smbdirect_connect_resolve_addr:101 rdma_resolve_addr() failed -ENODEV [ 187.929785][ T8967] CIFS: VFS: smbdirect_connect_sync:907 smbdirect_connect(127.0.0.1:445) failed -ENODEV [ 187.929812][ T8967] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 187.930139][ T8967] CIFS: VFS: cifs_mount failed w/return code = -2 [ 188.109868][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 188.123759][ T8963] lo speed is unknown, defaulting to 1000 [ 188.161383][ T8963] lo speed is unknown, defaulting to 1000 [ 188.170153][ T8963] lo speed is unknown, defaulting to 1000 [ 188.179119][ T8963] lo speed is unknown, defaulting to 1000 [ 188.187727][ T8963] lo speed is unknown, defaulting to 1000 [ 188.191685][ T8963] lo speed is unknown, defaulting to 1000 [ 188.470773][ T8981] loop5: detected capacity change from 0 to 32768 [ 188.504464][ T8981] [ 188.504464][ T8981] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.504464][ T8981] [ 188.536969][ T8981] ERROR: (device loop5): diWrite: ixpxd invalid [ 188.536969][ T8981] [ 188.537350][ T8981] ERROR: (device loop5): txCommit: [ 188.537350][ T8981] [ 188.546777][ T8981] ERROR: (device loop5): dtSearch: stack overrun! [ 188.546777][ T8981] [ 188.546815][ T8981] btstack dump: [ 188.546823][ T8981] bn = 0, index = 0 [ 188.546835][ T8981] bn = 0, index = 0 [ 188.546846][ T8981] bn = 0, index = 0 [ 188.546858][ T8981] bn = 0, index = 0 [ 188.546869][ T8981] bn = 0, index = 0 [ 188.546880][ T8981] bn = 0, index = 0 [ 188.546891][ T8981] bn = 0, index = 0 [ 188.546903][ T8981] bn = 0, index = 0 [ 188.690369][ T5614] [ 188.690369][ T5614] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.690369][ T5614] [ 188.691637][ T5614] [ 188.691637][ T5614] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.691637][ T5614] [ 188.881489][ T8985] smpboot: CPU 1 is now offline [ 189.262012][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 189.273217][ T8999] loop5: detected capacity change from 0 to 512 [ 189.289097][ T8999] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.291126][ T9008] netlink: 'syz.0.1294': attribute type 10 has an invalid length. [ 189.328919][ T8999] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 189.368795][ T8999] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 189.369008][ T8999] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.381897][ T5344] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 189.405245][ T8999] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.1289: Invalid block bitmap block 0 in block_group 0 [ 189.405298][ T8999] loop5: lost filesystem error report for type 5 error -117 [ 189.412152][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 189.412170][ C0] EXT4-fs (loop5): last error at time 1791366569: ext4_read_block_bitmap_nowait:487 [ 189.485603][ T8999] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.1289: Invalid block bitmap block 0 in block_group 0 [ 189.485637][ T8999] loop5: lost filesystem error report for type 5 error -117 [ 189.517672][ T8999] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm syz.5.1289: Invalid block bitmap block 0 in block_group 0 [ 189.517703][ T8999] loop5: lost filesystem error report for type 5 error -117 [ 189.572062][ T8999] Quota error (device loop5): write_blk: dquota write failed [ 189.572524][ T8999] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 189.572556][ T8999] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.1289: Failed to acquire dquot type 1 [ 189.572579][ T8999] loop5: lost filesystem error report for type 5 error -28 [ 189.618548][ T5344] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 189.642527][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.642552][ T5344] usb 3-1: Product: syz [ 189.642565][ T5344] usb 3-1: Manufacturer: syz [ 189.642578][ T5344] usb 3-1: SerialNumber: syz [ 189.652005][ T5344] usb 3-1: config 0 descriptor?? [ 189.703480][ T8999] EXT4-fs (loop5): 1 orphan inode deleted [ 189.714899][ T50] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 189.714993][ T50] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1 [ 189.715013][ T50] loop5: lost filesystem error report for type 5 error -117 [ 189.776408][ T8999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.909053][ T5344] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 190.063384][ T9007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.143710][ T5344] usb write operation failed. (-71) [ 190.146389][ T9008] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 190.177503][ T5344] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 190.197543][ T5344] usb write operation failed. (-71) [ 190.240756][ T5344] usb 3-1: USB disconnect, device number 8 [ 190.265998][ T9008] team0: Port device wlan0 added [ 190.431108][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.582959][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 190.633414][ T31] audit: type=1326 audit(1791366570.961:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.1.1302" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb86b9e199 code=0x0 [ 190.743187][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 190.750010][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.763165][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 190.763185][ T9] usb 4-1: Product: syz [ 190.763198][ T9] usb 4-1: Manufacturer: syz [ 190.849215][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 191.071384][ T9] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 191.083840][ T9] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 191.083884][ T9] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 191.102925][ T9] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 191.166944][ T9] usb 4-1: USB disconnect, device number 9 [ 191.342014][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 191.965201][ T9053] loop1: detected capacity change from 0 to 512 [ 191.966046][ T9053] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.994676][ T9053] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 192.024492][ T9053] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.024704][ T9053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.061884][ T9053] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1314: Invalid block bitmap block 0 in block_group 0 [ 192.061912][ T9053] loop1: lost filesystem error report for type 5 error -117 [ 192.062169][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 192.062186][ C0] EXT4-fs (loop1): last error at time 1791366572: ext4_read_block_bitmap_nowait:487 [ 192.121492][ T9053] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1314: Invalid block bitmap block 0 in block_group 0 [ 192.121520][ T9053] loop1: lost filesystem error report for type 5 error -117 [ 192.143944][ T9053] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.1314: Invalid block bitmap block 0 in block_group 0 [ 192.143971][ T9053] loop1: lost filesystem error report for type 5 error -117 [ 192.154133][ T9053] Quota error (device loop1): write_blk: dquota write failed [ 192.154204][ T9053] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 192.154232][ T9053] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.1314: Failed to acquire dquot type 1 [ 192.154250][ T9053] loop1: lost filesystem error report for type 5 error -28 [ 192.219388][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.219442][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.247988][ T9053] EXT4-fs (loop1): 1 orphan inode deleted [ 192.255171][ T6512] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 192.255235][ T6512] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:11: Failed to release dquot type 1 [ 192.255260][ T6512] loop1: lost filesystem error report for type 5 error -117 [ 192.328698][ T9053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.641859][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 193.060063][ T8245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.471680][ T9052] loop4: detected capacity change from 0 to 32768 [ 193.543500][ T5344] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 193.639212][ T9052] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.696095][ T5344] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 193.700585][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.700610][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.700656][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.746456][ T5344] usb 2-1: config 0 descriptor?? [ 193.777905][ T9052] XFS (loop4): Ending clean mount [ 193.928747][ T9100] loop3: detected capacity change from 0 to 512 [ 193.955612][ T9100] EXT4-fs: Ignoring removed nobh option [ 194.014131][ T9100] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 194.014414][ T9100] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 194.015630][ T9100] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.1331: inode has both inline data and extents flags [ 194.015652][ T9100] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 194.022148][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 194.022166][ C0] EXT4-fs (loop3): initial error at time 1791366574: ext4_orphan_get:1403: inode 13 [ 194.022192][ C0] EXT4-fs (loop3): last error at time 1791366574: ext4_orphan_get:1403: inode 13 [ 194.089124][ T9100] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1331: couldn't read orphan inode 13 (err -117) [ 194.143380][ T9100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.239896][ T9100] EXT4-fs (loop3): shut down requested (2) [ 194.309879][ T5344] aquacomputer_d5next 0003:0C70:F0B6.000E: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 194.489449][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.517753][ T5344] usb 2-1: USB disconnect, device number 3 [ 194.599560][ T5629] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.808197][ T9107] fido_id[9107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 195.551899][ T9119] random: crng reseeded on system resumption [ 195.761560][ T9127] loop4: detected capacity change from 0 to 1024 [ 196.948617][ T9147] loop1: detected capacity change from 0 to 512 [ 197.027748][ T9147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1349: bg 0: block 5: invalid block bitmap [ 197.027792][ T9147] fserror_report: 1 callbacks suppressed [ 197.027804][ T9147] loop1: lost filesystem error report for type 5 error -117 [ 197.032169][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 197.032188][ C0] EXT4-fs (loop1): initial error at time 1791366577: ext4_validate_block_bitmap:436 [ 197.032215][ C0] EXT4-fs (loop1): last error at time 1791366577: ext4_validate_block_bitmap:436 [ 197.105918][ T9147] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 197.105943][ T9147] loop1: lost filesystem error report for type 5 error -117 [ 197.106706][ T9147] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1349: invalid indirect mapped block 3 (level 2) [ 197.106736][ T9147] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.107216][ T9147] EXT4-fs (loop1): 1 orphan inode deleted [ 197.107234][ T9147] EXT4-fs (loop1): 1 truncate cleaned up [ 197.186091][ T9147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.243161][ T31] audit: type=1800 audit(1791366577.571:83): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1349" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 197.565166][ T8245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.802308][ T9162] tap0: tun_chr_ioctl cmd 1074025672 [ 197.802331][ T9162] tap0: ignored: set checksum disabled [ 198.212581][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.338156][ T9173] loop4: detected capacity change from 0 to 4096 [ 198.362329][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 198.375106][ T9] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 198.378448][ T9] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 198.378470][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.378501][ T9] usb 1-1: config 0 has no interface number 0 [ 198.378537][ T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 198.378559][ T9] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 198.378582][ T9] usb 1-1: config 0 interface 98 has no altsetting 0 [ 198.436045][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.436072][ T9] usb 1-1: Product: syz [ 198.436086][ T9] usb 1-1: Manufacturer: syz [ 198.436100][ T9] usb 1-1: SerialNumber: syz [ 198.501077][ T9] usb 1-1: config 0 descriptor?? [ 198.511315][ T9169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.511452][ T9169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.637851][ T9173] NILFS (loop4): invalid segment: Checksum error in segment payload [ 198.637878][ T9173] NILFS (loop4): trying rollback from an earlier position [ 198.753799][ T9173] NILFS (loop4): recovery complete [ 198.776806][ T9182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.808695][ T9169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.808827][ T9169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.961009][ T9178] batman_adv: batadv0: Adding interface: macsec1 [ 198.961052][ T9178] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.961082][ T9178] batman_adv: batadv0: Interface activated: macsec1 [ 199.031794][ T9185] batman_adv: Routing algorithm 'B' is not supported [ 199.097382][ T9173] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 199.460610][ T9] asix 1-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.461011][ T9] asix 1-1:0.98: probe with driver asix failed with error -71 [ 199.514975][ T9] usb 1-1: USB disconnect, device number 9 [ 200.136808][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 200.136863][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 200.136887][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 200.138302][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 200.355807][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'. [ 200.666441][ T31] audit: type=1326 audit(1791366580.991:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.0.1382" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa21619e199 code=0x0 [ 200.763672][ T5740] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.915047][ T5740] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 200.917218][ T5740] usb 6-1: config 0 has an invalid interface number: 6 but max is 3 [ 200.917237][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 200.917255][ T5740] usb 6-1: config 0 has no interface number 0 [ 200.917310][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.988418][ T5740] usb 6-1: config 0 descriptor?? [ 201.011408][ T5740] ums-realtek 6-1:0.6: USB Mass Storage device detected [ 201.168817][ T9228] loop1: detected capacity change from 0 to 2048 [ 201.197657][ T9228] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 201.234244][ T9228] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.284550][ T5740] usb 6-1: USB disconnect, device number 3 [ 201.906925][ T9236] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 201.932072][ T9] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 201.980384][ T9240] syz_tun: entered allmulticast mode [ 201.983651][ T9233] syz_tun: left allmulticast mode [ 202.260188][ T9246] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.557349][ T9224] loop4: detected capacity change from 0 to 32768 [ 202.691588][ T9224] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.805925][ T9224] XFS (loop4): Ending clean mount [ 203.250898][ T5629] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 204.040469][ T9298] loop2: detected capacity change from 0 to 16 [ 204.061148][ T9298] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 204.107514][ T9285] lo speed is unknown, defaulting to 1000 [ 204.151685][ T5645] udevd[5645]: incorrect cramfs checksum on /dev/loop2 [ 204.360867][ T9297] loop4: detected capacity change from 0 to 4096 [ 204.511866][ T9297] ntfs3(loop4): Failed to load $Extend (-22). [ 204.511888][ T9297] ntfs3(loop4): Failed to initialize $Extend. [ 205.131513][ T9316] loop5: detected capacity change from 0 to 8 [ 205.225551][ T9316] SQUASHFS error: Unable to read directory block [249:9] [ 205.251818][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.696175][ T9325] loop2: detected capacity change from 0 to 1024 [ 205.713855][ T9325] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 206.612989][ T982] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.766038][ T982] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 206.771737][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.771769][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.771799][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.829899][ T982] usb 5-1: config 0 descriptor?? [ 206.885351][ T9347] netlink: 528 bytes leftover after parsing attributes in process `syz.5.1431'. [ 206.885658][ T9347] netlink: 528 bytes leftover after parsing attributes in process `syz.5.1431'. [ 207.470190][ T9357] loop0: detected capacity change from 0 to 2048 [ 207.502887][ T982] hid-led 0003:1D34:000A.000F: probe with driver hid-led failed with error -71 [ 207.529462][ T982] usb 5-1: USB disconnect, device number 9 [ 207.583982][ T5740] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.684213][ T9357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.735567][ T5740] usb 3-1: Using ep0 maxpacket: 32 [ 207.737340][ T5740] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.741560][ T5740] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 207.741581][ T5740] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.741598][ T5740] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.741616][ T5740] usb 3-1: config 1 has no interface number 0 [ 207.741648][ T5740] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.741670][ T5740] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.741703][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.775387][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.866732][ T5740] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 207.984231][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 207.986370][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.014249][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.014274][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.014315][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.014336][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.014390][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.161624][ T5740] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 208.339819][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 208.339859][ T9] usbtmc 4-1:16.0: can't read capabilities [ 208.586042][ T9] usb 4-1: USB disconnect, device number 10 [ 208.676853][ T982] usb 3-1: USB disconnect, device number 9 [ 208.705768][ T982] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 208.767639][ T9380] loop1: detected capacity change from 0 to 64 [ 208.807117][ T9380] MINIX-fs: mounting file system with errors, running fsck is recommended [ 208.860603][ T9380] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 208.875732][ T9380] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 209.590207][ T9392] loop2: detected capacity change from 0 to 2048 [ 209.619986][ T9397] loop1: detected capacity change from 0 to 256 [ 209.661048][ T9392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.686131][ T9397] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5fbf135, utbl_chksum : 0xe619d30d) [ 209.778702][ T9392] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.1452: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 209.835325][ T982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.932355][ T9392] EXT4-fs (loop2): Remounting filesystem read-only [ 209.932725][ T9392] CacheFiles: Lookup cache failed with error -117 [ 209.932787][ T9392] CacheFiles: Failed to register: -117 [ 210.003544][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 210.006309][ T982] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 210.010914][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 210.010951][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.061901][ T982] usb 1-1: config 0 descriptor?? [ 210.062609][ T9395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.136813][ T9404] loop5: detected capacity change from 0 to 2048 [ 210.183255][ T9404] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 210.236994][ T9404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.497826][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.591313][ T982] hid_parser_main: 28 callbacks suppressed [ 210.591333][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x2 [ 210.591355][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.591373][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.591392][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652217][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652243][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652261][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652300][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652318][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652336][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unknown main item tag 0x0 [ 210.652528][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: unexpected long global item [ 210.653123][ T982] aquacomputer_d5next 0003:0C70:F00D.0010: probe with driver aquacomputer_d5next failed with error -22 [ 210.774164][ T982] usb 1-1: USB disconnect, device number 10 [ 210.935892][ T9409] loop4: detected capacity change from 0 to 512 [ 211.410053][ T9422] loop5: detected capacity change from 0 to 1024 [ 211.537509][ T31] audit: type=1800 audit(1791366591.861:85): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1465" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 211.588974][ T31] audit: type=1800 audit(1791366591.911:86): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1465" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 211.793157][ T9432] loop4: detected capacity change from 0 to 256 [ 211.902510][ T982] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.065071][ T9435] program syz.5.1470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.065425][ T982] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 212.069670][ T982] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.069695][ T982] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.069718][ T982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.069746][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.145054][ T982] usb 3-1: config 0 descriptor?? [ 212.528664][ T9441] Failed to get privilege flags for destination (handle=0x2:0x0) [ 212.636054][ T982] acrux 0003:1A34:0802.0011: no output reports found [ 212.656880][ T982] acrux 0003:1A34:0802.0011: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 212.874896][ T982] usb 3-1: USB disconnect, device number 10 [ 212.977753][ T9447] loop5: detected capacity change from 0 to 512 [ 213.078165][ T9447] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1476: corrupted in-inode xattr: invalid ea_ino [ 213.078197][ T9447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.078527][ T9447] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1476: couldn't read orphan inode 15 (err -117) [ 213.078552][ T9447] loop5: lost filesystem error report for type 5 error -117 [ 213.140917][ T9443] fido_id[9443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 213.165709][ T9447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.264753][ T9447] EXT4-fs (loop5): shut down requested (2) [ 213.464670][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.238915][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1490'. [ 214.263609][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.721183][ T9491] loop2: detected capacity change from 0 to 128 [ 215.298144][ T9500] batadv_slave_0: entered promiscuous mode [ 215.404870][ T9498] batadv_slave_0: left promiscuous mode [ 215.965759][ T9513] vlan0: entered promiscuous mode [ 215.965780][ T9513] bond0: entered promiscuous mode [ 215.965792][ T9513] bond_slave_0: entered promiscuous mode [ 215.966000][ T9513] bond_slave_1: entered promiscuous mode [ 215.966151][ T9513] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 216.350599][ T9523] loop3: detected capacity change from 0 to 512 [ 216.374698][ T9523] EXT4-fs: Ignoring removed bh option [ 216.420842][ T9523] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 216.444957][ T9523] EXT4-fs (loop3): 1 truncate cleaned up [ 216.446491][ T9523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.579725][ T9527] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1511'. [ 216.579772][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 216.781065][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.807532][ T9519] loop0: detected capacity change from 0 to 32768 [ 217.963721][ T9519] find_entry called with index >= next_index [ 217.963747][ T9519] find_entry called with index >= next_index [ 217.963755][ T9519] find_entry called with index >= next_index [ 217.963762][ T9519] find_entry called with index >= next_index [ 217.963769][ T9519] find_entry called with index >= next_index [ 217.963778][ T9519] add_index: next_index = 0. Resetting! [ 217.963790][ T9519] find_entry called with index >= next_index [ 217.963797][ T9519] find_entry called with index >= next_index [ 217.963805][ T9519] find_entry called with index >= next_index [ 217.963812][ T9519] find_entry called with index >= next_index [ 218.086980][ T9519] non-latin1 character 0x3ff found in JFS file name [ 218.086996][ T9519] mount with iocharset=utf8 to access [ 218.387062][ T9546] loop1: detected capacity change from 0 to 512 [ 218.440035][ T9546] EXT4-fs (loop1): 1 truncate cleaned up [ 218.462411][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.970204][ T8245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.017189][ T9552]  [ 219.259563][ T9540] loop3: detected capacity change from 0 to 32768 [ 219.391351][ T9540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1517 (9540) [ 219.777265][ T31] audit: type=1400 audit(1791366600.101:87): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9561 comm="syz.4.1525" [ 219.873094][ T9565] loop1: detected capacity change from 0 to 512 [ 219.955167][ T9565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.955249][ T9565] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.007748][ T9540] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.007783][ T9540] BTRFS info (device loop3): using sha256 checksum algorithm [ 220.060673][ T9574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.269304][ T8245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.528538][ T9596] loop1: detected capacity change from 0 to 256 [ 220.945199][ T9540] BTRFS error (device loop3): open_ctree failed: -EINTR [ 221.272521][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.318881][ T9609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.425080][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.426270][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.426315][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.426335][ T9] usb 3-1: config 1 has no interface number 0 [ 221.426371][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 221.426398][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 221.506734][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.506762][ T9] usb 3-1: Product: syz [ 221.506777][ T9] usb 3-1: Manufacturer: syz [ 221.506792][ T9] usb 3-1: SerialNumber: syz [ 222.035919][ T9612] program syz.1.1541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.254504][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.423054][ T10] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 222.424387][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.424416][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.426201][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 222.426224][ T10] usb 6-1: Product: syz [ 222.426238][ T10] usb 6-1: Manufacturer: syz [ 222.485653][ T9] cdc_ncm 3-1:1.1: bind() failure [ 222.520136][ T10] navman 6-1:1.0: navman converter detected [ 222.555966][ T10] usb 6-1: navman converter now attached to ttyUSB0 [ 222.559893][ T9] usb 3-1: USB disconnect, device number 11 [ 222.576803][ T982] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.727639][ T9613] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 222.732478][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 222.744679][ T982] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 222.751143][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.785650][ T10] usb 6-1: USB disconnect, device number 4 [ 222.806708][ T982] usb 1-1: config 0 descriptor?? [ 222.869664][ T9621] loop1: detected capacity change from 0 to 256 [ 222.890310][ T10] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 222.911972][ T10] navman 6-1:1.0: device disconnected [ 222.975418][ T9603] loop4: detected capacity change from 0 to 32768 [ 223.080445][ T982] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 223.109509][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.110410][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 223.110453][ T982] usb 1-1: media controller created [ 223.138935][ T9603] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.293821][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.505731][ T982] az6027: usb out operation failed. (-71) [ 223.535357][ T982] az6027: usb out operation failed. (-71) [ 223.535376][ T982] stb0899_attach: Driver disabled by Kconfig [ 223.535386][ T982] az6027: no front-end attached [ 223.535386][ T982] [ 223.535701][ T982] az6027: usb out operation failed. (-71) [ 223.535714][ T982] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 223.677066][ T982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 223.760432][ T982] dvb-usb: schedule remote query interval to 400 msecs. [ 223.760454][ T982] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 223.797826][ T982] usb 1-1: USB disconnect, device number 11 [ 223.986618][ T9630] gretap0: entered promiscuous mode [ 231.972135][ C0] sched: DL replenish lagged too much [ 240.401995][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 255.116392][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.783590][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.218970][ T5616] Bluetooth: hci3: command tx timeout [ 338.132119][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 338.139088][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9632/1:b..l P9623/1:b..l P9/1:b..l P6514/1:b..l P9625/1:b..l P9635/1:b..l [ 338.152456][ C0] rcu: (detected by 0, t=10502 jiffies, g=41753, q=1032 ncpus=1) [ 338.160243][ C0] task:syz.2.1549 state:R running task stack:25608 pid:9635 tgid:9635 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 338.173727][ C0] Call Trace: [ 338.176991][ C0] [ 338.179910][ C0] __schedule+0x17db/0x58f0 [ 338.184409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.190033][ C0] ? finish_task_switch+0x40e/0xc60 [ 338.195227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.200860][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 338.206232][ C0] ? __lock_acquire+0x747/0x2de0 [ 338.211159][ C0] ? __pfx___schedule+0x10/0x10 [ 338.216011][ C0] preempt_schedule_irq+0x4b/0x90 [ 338.221025][ C0] irqentry_exit+0x14f/0x920 [ 338.225606][ C0] ? trace_irq_disable+0x3b/0x140 [ 338.230620][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.236581][ C0] RIP: 0010:memset+0xf/0x30 [ 338.241068][ C0] Code: 44 88 1f e9 6e c3 28 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 42 c3 28 f5 90 90 90 90 90 90 90 90 90 90 90 90 [ 338.260668][ C0] RSP: 0018:ffffc90006947018 EFLAGS: 00000202 [ 338.266718][ C0] RAX: ffffc90006947500 RBX: ffffc90006947118 RCX: 0000000000000008 [ 338.274672][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90006947120 [ 338.282623][ C0] RBP: 1ffffffff223f911 R08: ffffc90006947127 R09: ffffc90006947118 [ 338.290575][ C0] R10: dffffc0000000000 R11: fffff52000d28e25 R12: dffffc0000000000 [ 338.298528][ C0] R13: ffffffff911fc886 R14: ffffc900069470c8 R15: ffffc90006947110 [ 338.306501][ C0] unwind_next_frame+0xd04/0x2550 [ 338.311522][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 338.317136][ C0] ? unwind_next_frame+0x8f/0x2550 [ 338.322236][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 338.328374][ C0] arch_stack_walk+0x11b/0x150 [ 338.333129][ C0] ? mas_alloc_nodes+0x291/0x350 [ 338.338061][ C0] stack_trace_save+0xa9/0x100 [ 338.342808][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 338.348171][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.353790][ C0] save_stack+0x122/0x230 [ 338.358109][ C0] ? __pfx_save_stack+0x10/0x10 [ 338.362947][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 338.368214][ C0] ? __slab_free+0x274/0x2c0 [ 338.372785][ C0] ? qlist_free_all+0x99/0x100 [ 338.377533][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 338.383147][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 338.388175][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 338.393798][ C0] ? page_ext_put+0x97/0xc0 [ 338.398294][ C0] __reset_page_owner+0x71/0x1f0 [ 338.403222][ C0] __free_frozen_pages+0xc93/0xd90 [ 338.408318][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.413941][ C0] __slab_free+0x274/0x2c0 [ 338.418341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.423972][ C0] qlist_free_all+0x99/0x100 [ 338.428545][ C0] ? mas_alloc_nodes+0x291/0x350 [ 338.433472][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 338.439086][ C0] kasan_quarantine_reduce+0x148/0x160 [ 338.444532][ C0] __kasan_slab_alloc+0x22/0x80 [ 338.449370][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 338.454812][ C0] ? mas_alloc_nodes+0x291/0x350 [ 338.459736][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 338.465357][ C0] ? mas_alloc_nodes+0x291/0x350 [ 338.470306][ C0] mas_alloc_nodes+0x291/0x350 [ 338.475081][ C0] mas_preallocate+0x42a/0x840 [ 338.479839][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.485475][ C0] ? rcu_is_watching+0x16/0xb0 [ 338.490258][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 338.495621][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 338.500924][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.506545][ C0] ? __mas_set_range+0x11a/0x3a0 [ 338.511511][ C0] __split_vma+0x2fb/0xa60 [ 338.515938][ C0] ? __pfx___split_vma+0x10/0x10 [ 338.520870][ C0] ? mas_prev_slot+0xb76/0xbf0 [ 338.525650][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.531363][ C0] vma_modify+0x970/0x1f40 [ 338.535861][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.541501][ C0] vma_modify_flags+0x2a4/0x3c0 [ 338.546350][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 338.551729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.557369][ C0] ? rcu_is_watching+0x16/0xb0 [ 338.562124][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.567765][ C0] ? percpu_counter_add_batch+0xec/0x1d0 [ 338.573393][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.579108][ C0] ? __vm_enough_memory+0x11a/0x380 [ 338.584305][ C0] mprotect_fixup+0x51a/0xad0 [ 338.589006][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 338.594214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.599836][ C0] ? mas_next_slot+0xc91/0xd70 [ 338.604613][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.610244][ C0] do_mprotect_pkey+0x8e7/0xd10 [ 338.615101][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 338.620470][ C0] ? vm_mmap_pgoff+0x31c/0x4e0 [ 338.625239][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.630863][ C0] ? vm_mmap_pgoff+0x35a/0x4e0 [ 338.635628][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 338.640949][ C0] ? rcu_is_watching+0x16/0xb0 [ 338.645758][ C0] __x64_sys_mprotect+0x80/0x90 [ 338.650603][ C0] do_syscall_64+0x166/0x520 [ 338.655186][ C0] ? trace_irq_disable+0x3b/0x140 [ 338.660198][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.666284][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.672179][ C0] RIP: 0033:0x7fc6c4f9df97 [ 338.676580][ C0] RSP: 002b:00007fffa1b478c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 338.684974][ C0] RAX: ffffffffffffffda RBX: 00007fc6c5f2d6c0 RCX: 00007fc6c4f9df97 [ 338.692927][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc6c5f0e000 [ 338.700878][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 338.708826][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffa1b47a20 [ 338.716775][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 338.724749][ C0] [ 338.727750][ C0] task:syz.3.1545 state:R running task stack:26888 pid:9625 tgid:9624 ppid:5612 task_flags:0x40044c flags:0x00080000 [ 338.741233][ C0] Call Trace: [ 338.744492][ C0] [ 338.747430][ C0] __schedule+0x17db/0x58f0 [ 338.751942][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.757564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.763179][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.768195][ C0] ? __pfx___schedule+0x10/0x10 [ 338.773049][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 338.778410][ C0] preempt_schedule_common+0x7f/0xd0 [ 338.783685][ C0] preempt_schedule_thunk+0x16/0x40 [ 338.788891][ C0] _raw_spin_unlock+0x41/0x50 [ 338.793614][ C0] __zap_vma_range+0x40e1/0x4f80 [ 338.798577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.804200][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 338.809492][ C0] ? mas_find+0x6d6/0xcb0 [ 338.813836][ C0] unmap_vmas+0x390/0x550 [ 338.818154][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.823782][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 338.828623][ C0] ? mas_next_slot+0xc91/0xd70 [ 338.833393][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.839027][ C0] exit_mmap+0x293/0x9f0 [ 338.843254][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 338.848022][ C0] ? __pfx_exit_aio+0x10/0x10 [ 338.852692][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.858315][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 338.863509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.869169][ C0] __mmput+0x118/0x420 [ 338.873231][ C0] exit_mm+0x18e/0x240 [ 338.877289][ C0] do_exit+0x6cd/0x2360 [ 338.881435][ C0] ? __pfx_do_exit+0x10/0x10 [ 338.886010][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.891026][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.896650][ C0] do_group_exit+0x22d/0x2f0 [ 338.901222][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.906411][ C0] get_signal+0x121b/0x12c0 [ 338.910923][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 338.916463][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.922626][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 338.928005][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 338.933622][ C0] ? rcu_is_watching+0x16/0xb0 [ 338.938375][ C0] do_syscall_64+0x328/0x520 [ 338.942956][ C0] ? trace_irq_disable+0x3b/0x140 [ 338.947963][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.954014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.959889][ C0] RIP: 0033:0x7ffa0d79e199 [ 338.964329][ C0] RSP: 002b:00007ffa0e6350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 338.972727][ C0] RAX: fffffffffffffe00 RBX: 00007ffa0da25fa8 RCX: 00007ffa0d79e199 [ 338.980684][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa0da25fa8 [ 338.988634][ C0] RBP: 00007ffa0da25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.996585][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.004537][ C0] R13: 00007ffa0da26038 R14: 00007ffeb0fde700 R15: 00007ffeb0fde7e8 [ 339.012508][ C0] [ 339.015509][ C0] task:kworker/u8:12 state:R running task stack:24088 pid:6514 tgid:6514 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 339.029077][ C0] Workqueue: 0x0 (krds_cp_wq#1/7) [ 339.034186][ C0] Call Trace: [ 339.037468][ C0] [ 339.040382][ C0] __schedule+0x17db/0x58f0 [ 339.044887][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 339.050172][ C0] ? __pfx___schedule+0x10/0x10 [ 339.055070][ C0] preempt_schedule_irq+0x4b/0x90 [ 339.060085][ C0] irqentry_exit+0x14f/0x920 [ 339.064665][ C0] ? trace_irq_disable+0x3b/0x140 [ 339.069679][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.075662][ C0] RIP: 0010:__update_page_owner_free_handle+0x2c6/0x4a0 [ 339.082586][ C0] Code: 4c 89 fe 48 81 e6 ff 7f 00 00 31 ff e8 e3 d7 85 ff 4c 89 f8 48 25 ff 7f 00 00 74 32 e8 13 d2 85 ff 48 8b 44 24 20 80 3c 18 00 <74> 0c 48 c7 c7 a0 52 a6 9a e8 1c e7 f5 ff 4c 8b 7c 24 38 4c 03 3d [ 339.102172][ C0] RSP: 0018:ffffc9001e1b78e0 EFLAGS: 00000246 [ 339.108222][ C0] RAX: 1ffffffff354ca54 RBX: dffffc0000000000 RCX: ffff888030ff1f40 [ 339.116372][ C0] RDX: 0000000000000000 RSI: 0000000000004152 RDI: 0000000000000000 [ 339.124328][ C0] RBP: ffff88801f146994 R08: ffff88801f146957 R09: 1ffff11003e28d2a [ 339.132316][ C0] R10: dffffc0000000000 R11: ffffed1003e28d2b R12: ffff888030ff2584 [ 339.140362][ C0] R13: 0000000000001972 R14: 0000000000000002 R15: 000000000007c152 [ 339.148334][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 339.154574][ C0] __reset_page_owner+0x85/0x1f0 [ 339.159502][ C0] __free_frozen_pages+0xc93/0xd90 [ 339.164605][ C0] __slab_free+0x274/0x2c0 [ 339.169004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.174631][ C0] ? qlist_free_all+0x8e/0x100 [ 339.179381][ C0] qlist_free_all+0x99/0x100 [ 339.183959][ C0] kasan_quarantine_reduce+0x148/0x160 [ 339.189405][ C0] __kasan_kmalloc+0x22/0xb0 [ 339.193984][ C0] __kmalloc_cache_node_noprof+0x3d1/0x620 [ 339.199799][ C0] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 339.205766][ C0] ? create_worker+0x112/0x7c0 [ 339.210512][ C0] ? create_worker+0x112/0x7c0 [ 339.215268][ C0] create_worker+0x112/0x7c0 [ 339.219843][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.225476][ C0] ? __pfx_create_worker+0x10/0x10 [ 339.230568][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.236363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.241983][ C0] ? __mod_timer+0xb53/0xed0 [ 339.246568][ C0] worker_thread+0x4c9/0xfb0 [ 339.251173][ C0] kthread+0x38b/0x480 [ 339.255225][ C0] ? __pfx_worker_thread+0x10/0x10 [ 339.260498][ C0] ? __pfx_kthread+0x10/0x10 [ 339.265099][ C0] ret_from_fork+0x514/0xb70 [ 339.269672][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 339.274765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.280403][ C0] ? __switch_to+0xc89/0x1420 [ 339.285073][ C0] ? __pfx_kthread+0x10/0x10 [ 339.289731][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.294519][ C0] [ 339.297518][ C0] task:kworker/0:0 state:R running task stack:22752 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 339.311085][ C0] Workqueue: mld mld_ifc_work [ 339.315756][ C0] Call Trace: [ 339.319014][ C0] [ 339.321931][ C0] __schedule+0x17db/0x58f0 [ 339.326425][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 339.331718][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.337383][ C0] ? __pfx___schedule+0x10/0x10 [ 339.342259][ C0] preempt_schedule_irq+0x4b/0x90 [ 339.347296][ C0] irqentry_exit+0x14f/0x920 [ 339.351877][ C0] ? trace_irq_disable+0x3b/0x140 [ 339.356891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.362857][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 339.368906][ C0] Code: 8b 3d 24 a1 a6 0c 48 89 de 5b e9 03 93 64 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b8 90 cd 11 65 48 8b 15 b8 90 cd 11 f7 c2 00 01 00 ff [ 339.388517][ C0] RSP: 0018:ffffc900000e7550 EFLAGS: 00000297 [ 339.394573][ C0] RAX: ffffffff824401d7 RBX: 0000000000000000 RCX: ffff88801dedddc0 [ 339.402524][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.410472][ C0] RBP: 0000000000000003 R08: ffff88801cd085af R09: 1ffff110039a10b5 [ 339.418423][ C0] R10: dffffc0000000000 R11: ffffed10039a10b6 R12: 0000000000000007 [ 339.426375][ C0] R13: ffff88801cd08560 R14: 0000000000000003 R15: 0000000000000008 [ 339.434336][ C0] ? __page_table_check_zero+0x237/0x430 [ 339.439971][ C0] __page_table_check_zero+0x237/0x430 [ 339.445434][ C0] ? __page_table_check_zero+0x6c/0x430 [ 339.450970][ C0] __free_frozen_pages+0xca3/0xd90 [ 339.456076][ C0] __slab_free+0x274/0x2c0 [ 339.460476][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.466188][ C0] ? qlist_free_all+0x8e/0x100 [ 339.470940][ C0] qlist_free_all+0x99/0x100 [ 339.475518][ C0] kasan_quarantine_reduce+0x148/0x160 [ 339.480964][ C0] __kasan_kmalloc+0x22/0xb0 [ 339.485543][ C0] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 339.491948][ C0] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 339.498517][ C0] ? mld_newpack+0x165/0xcb0 [ 339.503094][ C0] ? mld_newpack+0x165/0xcb0 [ 339.507681][ C0] __alloc_skb+0x2c1/0x7a0 [ 339.512113][ C0] mld_newpack+0x165/0xcb0 [ 339.516521][ C0] ? rcu_is_watching+0x16/0xb0 [ 339.521274][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.526889][ C0] ? trace_contention_end+0x3d/0x140 [ 339.532164][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 339.537090][ C0] ? __mutex_lock+0x30b/0x1550 [ 339.541868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.547505][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.552435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.558057][ C0] add_grec+0x119f/0x19d0 [ 339.562407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.568029][ C0] mld_ifc_work+0x6f1/0xd60 [ 339.572521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.578139][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.583761][ C0] ? process_scheduled_works+0x97a/0x1630 [ 339.589470][ C0] process_scheduled_works+0xc3d/0x1630 [ 339.595056][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.600701][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.606679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.612319][ C0] ? assign_work+0x3cf/0x5d0 [ 339.616905][ C0] worker_thread+0xa47/0xfb0 [ 339.621511][ C0] kthread+0x38b/0x480 [ 339.625581][ C0] ? __pfx_worker_thread+0x10/0x10 [ 339.630687][ C0] ? __pfx_kthread+0x10/0x10 [ 339.635261][ C0] ret_from_fork+0x514/0xb70 [ 339.639834][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 339.644942][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.650558][ C0] ? __switch_to+0xc89/0x1420 [ 339.655226][ C0] ? __pfx_kthread+0x10/0x10 [ 339.659802][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.664575][ C0] [ 339.667574][ C0] task:jbd2/loop4-75 state:R running task stack:27328 pid:9623 tgid:9623 ppid:2 task_flags:0x240040 flags:0x00080000 [ 339.681059][ C0] Call Trace: [ 339.684320][ C0] [ 339.687235][ C0] __schedule+0x17db/0x58f0 [ 339.691758][ C0] ? __pfx___schedule+0x10/0x10 [ 339.696594][ C0] ? irqentry_exit+0x218/0x920 [ 339.701350][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.706968][ C0] ? irqentry_exit+0x218/0x920 [ 339.711720][ C0] ? trace_irq_disable+0x3b/0x140 [ 339.716740][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 339.722101][ C0] preempt_schedule_common+0x7f/0xd0 [ 339.727396][ C0] preempt_schedule_thunk+0x16/0x40 [ 339.732588][ C0] _raw_spin_unlock_irqrestore+0x76/0x80 [ 339.738207][ C0] __mod_timer+0xb53/0xed0 [ 339.742611][ C0] ? wbt_issue+0x8e/0x180 [ 339.746934][ C0] blk_mq_start_request+0x378/0x880 [ 339.752121][ C0] loop_queue_rq+0x77/0xb50 [ 339.756625][ C0] blk_mq_try_issue_directly+0x3f4/0x880 [ 339.762250][ C0] ? __pfx_blk_mq_try_issue_directly+0x10/0x10 [ 339.768394][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.774009][ C0] ? blk_account_io_start+0x57c/0x8c0 [ 339.779368][ C0] blk_mq_submit_bio+0x21de/0x2bb0 [ 339.784464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.790087][ C0] ? blk_mq_submit_bio+0x308/0x2bb0 [ 339.795280][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 339.800723][ C0] ? blk_cgroup_bio_start+0x5d7/0x670 [ 339.806092][ C0] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 339.811799][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.817426][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.823044][ C0] ? __submit_bio+0x7e/0x340 [ 339.827631][ C0] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 339.833258][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 339.839399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.845014][ C0] ? submit_bio_noacct+0x104f/0x1b80 [ 339.850287][ C0] ? blkcg_set_ioprio+0x16b/0x2a0 [ 339.855318][ C0] jbd2_write_superblock+0x2ef/0x6e0 [ 339.860599][ C0] jbd2_journal_update_sb_log_tail+0x225/0x300 [ 339.866749][ C0] jbd2_journal_commit_transaction+0x3de/0x5b70 [ 339.872991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.878609][ C0] ? trace_hrtimer_start+0x82/0x200 [ 339.883790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.889406][ C0] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 339.895561][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.901181][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.906806][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.912432][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.917449][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.923065][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.927986][ C0] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 339.934656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.940272][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.945295][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.950926][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.955943][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.961562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.967179][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.972973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.978591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.984206][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.989998][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.995617][ C0] ? __timer_delete_sync+0x4a7/0x520 [ 340.000890][ C0] kjournald2+0x3bc/0x750 [ 340.005226][ C0] ? __pfx_kjournald2+0x10/0x10 [ 340.010063][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.015679][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 340.021743][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.027359][ C0] ? __kthread_parkme+0x71/0x1f0 [ 340.032288][ C0] ? __kthread_parkme+0x199/0x1f0 [ 340.037307][ C0] kthread+0x38b/0x480 [ 340.041358][ C0] ? __pfx_kjournald2+0x10/0x10 [ 340.046198][ C0] ? __pfx_kthread+0x10/0x10 [ 340.050789][ C0] ret_from_fork+0x514/0xb70 [ 340.055364][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 340.060456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.066076][ C0] ? __switch_to+0xc89/0x1420 [ 340.070747][ C0] ? __pfx_kthread+0x10/0x10 [ 340.075320][ C0] ret_from_fork_asm+0x1a/0x30 [ 340.080091][ C0] [ 340.083087][ C0] task:syz.5.1548 state:R running task stack:26624 pid:9632 tgid:9631 ppid:5614 task_flags:0x40054c flags:0x00080000 [ 340.096573][ C0] Call Trace: [ 340.099833][ C0] [ 340.102767][ C0] __schedule+0x17db/0x58f0 [ 340.107281][ C0] ? irqentry_exit+0x218/0x920 [ 340.112040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.117662][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.122689][ C0] ? __pfx___schedule+0x10/0x10 [ 340.127565][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 340.132925][ C0] preempt_schedule_common+0x7f/0xd0 [ 340.138205][ C0] preempt_schedule_thunk+0x16/0x40 [ 340.143393][ C0] _raw_spin_unlock+0x41/0x50 [ 340.148078][ C0] __zap_vma_range+0x40e1/0x4f80 [ 340.153042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.158669][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 340.163973][ C0] ? mas_find+0x6d6/0xcb0 [ 340.168301][ C0] unmap_vmas+0x390/0x550 [ 340.172617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.178243][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 340.183100][ C0] ? mas_next_slot+0xc91/0xd70 [ 340.187877][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.193501][ C0] exit_mmap+0x293/0x9f0 [ 340.197746][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 340.202542][ C0] ? __pfx_exit_aio+0x10/0x10 [ 340.207212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.212834][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 340.218024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.223668][ C0] __mmput+0x118/0x420 [ 340.227730][ C0] exit_mm+0x18e/0x240 [ 340.231785][ C0] do_exit+0x6cd/0x2360 [ 340.235931][ C0] ? __pfx_do_exit+0x10/0x10 [ 340.240506][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.245523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.251164][ C0] do_group_exit+0x22d/0x2f0 [ 340.255840][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.261039][ C0] get_signal+0x121b/0x12c0 [ 340.265550][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 340.271089][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.277252][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 340.282608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 340.288224][ C0] ? rcu_is_watching+0x16/0xb0 [ 340.292982][ C0] do_syscall_64+0x328/0x520 [ 340.297565][ C0] ? trace_irq_disable+0x3b/0x140 [ 340.302574][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.308628][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.314504][ C0] RIP: 0033:0x7f4d50f9e199 [ 340.318993][ C0] RSP: 002b:00007f4d51eef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.327393][ C0] RAX: fffffffffffffe00 RBX: 00007f4d51225fa8 RCX: 00007f4d50f9e199 [ 340.335346][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d51225fa8 [ 340.343295][ C0] RBP: 00007f4d51225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 340.351255][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.359205][ C0] R13: 00007f4d51226038 R14: 00007ffc22122690 R15: 00007ffc22122778 [ 340.367176][ C0]