last executing test programs: 6.50653977s ago: executing program 1 (id=828): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) eventfd2(0xe5c, 0x80000) eventfd2(0xe5c, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c000180"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 6.328382795s ago: executing program 1 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.163380909s ago: executing program 3 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000140)) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) 6.021368102s ago: executing program 3 (id=836): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) fanotify_mark(0xffffffffffffffff, 0x541, 0x1001, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xb) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f0000021380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 6.000820612s ago: executing program 2 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=@sha1={0x1, "1bda553099b0dadcd0b4da8e92f19e292c8f6360"}, 0x15, 0x2) r0 = getpid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x3ffffffc, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x0, 0x4000000, 0x5, 0x4829e, 0x7, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x80000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800c, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x10003, 0x4, 0xfdfffffffffffffe, 0xdd0, 0x0, 0xfffffffffffffffe, 0x400000000000000, 0x1, 0x5d78, 0x2, 0x80000001, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xc, 0x9, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x4, 0x40000000001075, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x7]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x8, 0x5, {r0}, {r3}, 0x8, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@loopback, 0x10000, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) 5.964564084s ago: executing program 1 (id=839): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b720401500000000000109021200010100803209040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000780)={0x20, 0x5, 0x2, "7f0d"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x6, "f2e9857beb58"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.005370857s ago: executing program 2 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54109, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) unshare(0x22020600) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8007000000b30800450000700000000000f48f78ac1e0001ac1414aa03009078030000004500000000000000e5294400000000000000000700000001e00000020000030000000000000000007f000001004fdd87bf3f567e29e2ed00000086210000000000120001632a3a835e9504000000000000000009"], 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x40, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x1403, 0x4) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r6) 4.939807238s ago: executing program 3 (id=841): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40402, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) 4.178689757s ago: executing program 0 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xfc) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0}, 0x24004804) 4.09294422s ago: executing program 3 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000140)) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) 4.048122171s ago: executing program 0 (id=845): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200814, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0xa, 0x513, &(0x7f0000000800)="$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") 3.991008422s ago: executing program 2 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) fchdir(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2000006, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2d8, &(0x7f00000004c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r4, &(0x7f0000000300), 0x0, 0x8080c60) socket$inet_tcp(0x2, 0x1, 0x0) 3.961847153s ago: executing program 3 (id=847): syz_emit_ethernet(0xd6, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x89, 0x6, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x46, 0x0, [{0x2, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x9, "f7d11634eea26b"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdbcaa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 3.891005504s ago: executing program 3 (id=848): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.410383456s ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=@sha1={0x1, "1bda553099b0dadcd0b4da8e92f19e292c8f6360"}, 0x15, 0x2) r0 = getpid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x3ffffffc, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x5, 0x0, 0x0, 0x4000000, 0x5, 0x4829e, 0x7, 0xe, 0x0, 0x0, 0x1000008000, 0x0, 0x80000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x800c, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x10003, 0x4, 0xfdfffffffffffffe, 0xdd0, 0x0, 0xfffffffffffffffe, 0x400000000000000, 0x1, 0x5d78, 0x2, 0x80000001, 0x80000000, 0xc20, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xc, 0x9, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x4, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x7f, 0x4, 0x40000000001075, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4, 0x7]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x8, 0x5, {r0}, {r3}, 0x8, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@loopback, 0x10000, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) 1.617175891s ago: executing program 1 (id=850): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 920.879448ms ago: executing program 0 (id=851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d6558606712e9000d2f8db0049d90", 0x1e}], 0x1) 881.819589ms ago: executing program 2 (id=852): syz_io_uring_setup(0xa2e, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0) 877.613909ms ago: executing program 1 (id=853): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40402, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) 468.326129ms ago: executing program 2 (id=854): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 330.436162ms ago: executing program 0 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 215.434914ms ago: executing program 1 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r1, 0x1) flock(r0, 0x5) 52.830749ms ago: executing program 0 (id=857): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xf9j\xa2\x02\xba\xa9m\x14\x14R_\x9a\\>4\xceO\xb7\x9a\xeci\x8d1\xf0\xa8\x8e_#\xf8D\xb1\xdep\x01\xc0:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8], 0x1, 0x32a, &(0x7f0000021380)="$eJzs3U1rE08cB/DvTJJm+2/+dfsggsdqQS+i9SJeIpK3IIgH0bYRiqGiVlAvJuJJRO/efQu+CC+Kb0BPHsSr0F4cmdnZTXZ39iFt2jX6/YC42d3J/CYzk/1NUAZE9M+62vny7uI3/UcANdSAl5cBCcAD6gCO44T3aHtna6fX3cx7o5opgT0FgaCkSN2zsd01fw/ip3U5U8Ly9as6WqPn6HAopa58TZz7LisKhipjZr+DBJp2dprr3pFHlm9Q5ibHeO4fQizTROxiF48xX3UcRERULf38HwRPSv2cb9n8XUpgFRh4f+rzv5z/U2d+VhLHUVK5V0ee/2aVpYTu32Pm0nC9Z5Zw+roMV4llam4kXs8gyMFiCaZwryqHSz4Ti5y9s9Xrntu419uUeI62NVJgOarB0iO0INoVx9o0R4m2C2dGGYQlG7oNaxnxL+2zxhypdDfWIeKD+CRuCh9vsRnlf3UldLQmYD/RU0H857PrmzOl9F2wXxvtdluaNwotmEpOxnsqu5VmFHjuFQnCD3YB8R8I/KI4TanFRKmgdRecBZpRqSVnqbXwVUZdy7FSujXRaM6OcjLUs6wr4rW4LlbwA+/RGcn/pY5vFemZOdIJw1kjVoOJZj7xoD0z7urq5j391JOjjxut+JnoU2xmhb6nBH8SOqCwD19hHZcw//DJ07u1Xq/7QB/cdhzcb0VnGi8A5z0VH6A/PNOEMlI3h9+BseKz9uQYldbGCOzsRFuqJ2LhzXqWJS+FrZzoJz86EsIJO7E+hax+aOWNjc7HxEAqPFC1cnNHNZ0j3C/u94xLv9Q+2p7Ol+nvNOz0qiOhiui8SwTrP5PJ23zf5Gs6W7jWzF6NhItMV8pmEkf7jkrn2NEKyIuVXzRH/8XT6IIV0JzNYxzruD5Say797E+tuU6dAU6Xr9G3cU6H7PTfEh18xi3+/k9ERERERERERERERERERERERERENG3G/98Rs2OWavBflhMRERERERERERERERERERERERERERERHVC0/y/C/X9Rbv/f5PZSdv9fDwX7/66nY0jt//tmG6IPcP9fosP1OwAA//+1UnIe") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) kernel console output (not intermixed with test programs): fff) [ 146.263675][ T6380] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 33: comm syz.2.162: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 146.292452][ T6380] EXT4-fs error (device loop2) in do_split:2097: Corrupt filesystem [ 146.314538][ T6380] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 33: comm syz.2.162: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 146.342181][ T6380] EXT4-fs error (device loop2) in do_split:2097: Corrupt filesystem [ 146.424849][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.507899][ T6378] loop1: detected capacity change from 0 to 32768 [ 146.589156][ T6378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.161 (6378) [ 146.744345][ T6392] loop2: detected capacity change from 0 to 64 [ 146.799766][ T6378] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.893898][ T6392] db_root: cannot open: /dev/sequencer2 [ 146.899725][ T6392] db_root: not a directory: /dev/sequencer2 [ 147.012745][ T6378] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 147.179042][ T6378] BTRFS info (device loop1): using free space tree [ 147.679663][ T6378] BTRFS info (device loop1): enabling ssd optimizations [ 147.713778][ T6378] BTRFS info (device loop1): auto enabling async discard [ 147.903784][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.973520][ T6387] loop0: detected capacity change from 0 to 40427 [ 147.978493][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.048433][ T6387] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 148.073787][ T6387] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 148.123876][ T6387] F2FS-fs (loop0): invalid crc value [ 148.176163][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.216770][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.279555][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.292216][ T6422] netlink: 56 bytes leftover after parsing attributes in process `syz.3.171'. [ 148.329603][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.369794][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 148.409738][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.591024][ T6429] loop3: detected capacity change from 0 to 8 [ 148.598068][ T6387] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 148.626850][ T6387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 148.745365][ T6429] SQUASHFS error: Failed to read block 0x8f: -5 [ 148.770670][ T28] audit: type=1800 audit(1700006411.310:10): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.173" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 149.412654][ T6436] ip_tables: iptables: counters copy to user failed while replacing table [ 150.023297][ T6436] syz.0.164: attempt to access beyond end of device [ 150.023297][ T6436] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.038232][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 150.160649][ T6438] db_root: cannot open: /dev/sequencer2 [ 150.166344][ T6438] db_root: not a directory: /dev/sequencer2 [ 150.592387][ T9] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 150.611894][ T9] gud 3-1:1.0: [drm] Cannot find any crtc or sizes [ 150.641579][ T9] usb 3-1: USB disconnect, device number 4 [ 150.869796][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 150.978704][ T6448] loop0: detected capacity change from 0 to 512 [ 151.176710][ T6448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.256747][ T6448] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.391862][ T6448] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.829735][ T6468] loop0: detected capacity change from 0 to 512 [ 151.853401][ T6468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.898639][ T6468] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.923472][ T6468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 151.931903][ T6468] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 151.941532][ T6468] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 151.951896][ T6468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.038310][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.168914][ T6459] loop3: detected capacity change from 0 to 32768 [ 153.935522][ T6473] loop0: detected capacity change from 0 to 32768 [ 153.963867][ T6473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.188 (6473) [ 154.009594][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.022817][ T6473] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.080515][ T6473] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.121042][ T6473] BTRFS info (device loop0): force clearing of disk cache [ 154.155896][ T6473] BTRFS info (device loop0): enabling auto defrag [ 154.187354][ T6473] BTRFS info (device loop0): max_inline at 0 [ 154.213531][ T6473] BTRFS info (device loop0): enabling disk space caching [ 154.243947][ T6473] BTRFS info (device loop0): disk space caching is enabled [ 154.261958][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.330431][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.386782][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.447647][ T8] usb 3-1: config 0 descriptor?? [ 154.494642][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 154.525430][ T6473] BTRFS info (device loop0): enabling ssd optimizations [ 154.565699][ T6473] BTRFS info (device loop0): rebuilding free space tree [ 154.621757][ T6473] BTRFS info (device loop0): disabling free space tree [ 154.649729][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.660427][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.686556][ T6473] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.733576][ T8] pwc: send_video_command error -71 [ 154.738891][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 154.775446][ T1148] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 154.790824][ T8] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 154.821195][ T8] usb 3-1: USB disconnect, device number 5 [ 154.895581][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.923343][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 154.949650][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.079613][ T6509] page:ffffea00012e0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b808 [ 155.112268][ T6509] head:ffffea00012e0200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.122303][ T5796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop0 scanned by udevd (5796) [ 155.134722][ T6509] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 155.145914][ T6509] page_type: 0xffffffff() [ 155.151993][ T6509] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 155.180578][ T6509] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 155.193985][ T6509] page dumped because: unmovable page [ 155.208566][ T6509] page_owner tracks the page as allocated [ 155.216268][ T6509] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 34, tgid 34 (kworker/u4:2), ts 152481010019, free_ts 152471291242 [ 155.245615][ T6509] post_alloc_hook+0x1c1/0x200 [ 155.251033][ T6509] get_page_from_freelist+0x2181/0x22a0 [ 155.266975][ T6509] __alloc_pages+0x1f0/0x460 [ 155.285005][ T6509] alloc_slab_page+0x5d/0x180 [ 155.290987][ T6509] new_slab+0x87/0x2d0 [ 155.296897][ T6509] ___slab_alloc+0xc5c/0x12f0 [ 155.303365][ T6509] __kmem_cache_alloc_node+0x11f/0x250 [ 155.311639][ T6509] __kmalloc_node_track_caller+0xa4/0x230 [ 155.318682][ T6509] kmalloc_reserve+0x116/0x240 [ 155.326002][ T6509] __alloc_skb+0x138/0x2c0 [ 155.332036][ T6509] nsim_dev_trap_report_work+0x253/0xa90 [ 155.339157][ T6509] process_scheduled_works+0xa60/0x1600 [ 155.339612][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.364401][ T6509] worker_thread+0xa5e/0xfe0 [ 155.370806][ T6509] kthread+0x2fa/0x390 [ 155.376888][ T6509] ret_from_fork+0x48/0x80 [ 155.382763][ T6509] ret_from_fork_asm+0x11/0x20 [ 155.390901][ T6509] page last free stack trace: [ 155.398179][ T6509] free_unref_page_prepare+0x7d7/0x8f0 [ 155.408059][ T6509] free_unref_page+0x32/0x2e0 [ 155.415069][ T6509] skb_release_data+0x3ca/0x7f0 [ 155.423396][ T6509] __kfree_skb+0x57/0x70 [ 155.429393][ T6509] tcp_ack+0x221a/0x6630 [ 155.435556][ T6509] tcp_rcv_established+0xfc2/0x1dd0 [ 155.443776][ T6509] tcp_v4_do_rcv+0x6d3/0xba0 [ 155.449739][ T6509] tcp_v4_rcv+0x2358/0x2a60 [ 155.458114][ T6509] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 155.466037][ T6509] ip_local_deliver_finish+0x2c3/0x510 [ 155.470993][ T6509] NF_HOOK+0x32d/0x3b0 [ 155.472112][ T6509] ip_sublist_rcv+0xa36/0xd60 [ 155.473246][ T6509] ip_list_rcv+0x3ed/0x440 [ 155.474526][ T6509] __netif_receive_skb_list_core+0x582/0x770 [ 155.475633][ T6509] netif_receive_skb_list_internal+0x943/0xca0 [ 155.481561][ T6509] napi_complete_done+0x329/0x820 [ 155.660595][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.676839][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.706692][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.742012][ T8] usb 3-1: config 0 descriptor?? [ 155.759241][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 155.989289][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 156.001119][ T9] usb 2-1: Please update to version 0.2 or newer [ 156.077521][ T9] usb 2-1: USB disconnect, device number 7 [ 156.188424][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 156.198530][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 156.209249][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 156.222295][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 156.231988][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 156.240414][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 156.368288][ T28] audit: type=1326 audit(1700006418.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 156.433121][ T28] audit: type=1326 audit(1700006418.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 156.507263][ T28] audit: type=1326 audit(1700006418.930:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 156.568639][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 156.586013][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 156.595618][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.611637][ T28] audit: type=1326 audit(1700006418.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 156.619837][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.268066][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.275218][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.284119][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.291566][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.298548][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.314452][ T8] pwc: Registered as video103. [ 157.333902][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 157.357182][ T8] usb 3-1: USB disconnect, device number 6 [ 157.379720][ T28] audit: type=1326 audit(1700006418.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.406142][ T28] audit: type=1326 audit(1700006418.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.456781][ T28] audit: type=1326 audit(1700006418.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.570060][ T28] audit: type=1326 audit(1700006418.930:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.644264][ T6532] loop2: detected capacity change from 0 to 128 [ 157.668364][ T28] audit: type=1326 audit(1700006418.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.697961][ T6532] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.711992][ T6532] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.742513][ T28] audit: type=1326 audit(1700006418.930:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.0.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbd3599e199 code=0x7ffc0000 [ 157.783573][ T6536] tipc: Started in network mode [ 157.788962][ T6536] tipc: Node identity 32452bd29b76, cluster identity 4711 [ 157.851693][ T6536] tipc: Enabled bearer , priority 0 [ 157.907218][ T6529] syzkaller0: entered promiscuous mode [ 157.942946][ T6529] syzkaller0: entered allmulticast mode [ 158.007873][ T6536] tipc: Resetting bearer [ 158.110069][ T6527] tipc: Resetting bearer [ 158.220369][ T6527] tipc: Disabling bearer [ 159.500199][ T6541] loop2: detected capacity change from 0 to 32768 [ 159.546348][ T6541] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 14 [ 159.739662][ T5796] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 14 [ 159.829797][ T6571] loop2: detected capacity change from 0 to 512 [ 159.978011][ T6571] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 160.021791][ T6571] FAT-fs (loop2): Filesystem has been set read-only [ 160.190584][ T6552] loop1: detected capacity change from 0 to 32768 [ 160.245056][ T6552] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (6552) [ 160.291083][ T6552] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 160.315684][ T6552] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 160.345849][ T6552] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.386032][ T6552] BTRFS info (device loop1): use zstd compression, level 3 [ 160.404698][ T6552] BTRFS info (device loop1): force clearing of disk cache [ 160.435172][ T6552] BTRFS info (device loop1): enabling disk space caching [ 160.479379][ T6552] BTRFS info (device loop1): disk space caching is enabled [ 160.526432][ T6583] loop2: detected capacity change from 0 to 512 [ 160.560296][ T6583] EXT4-fs: Ignoring removed oldalloc option [ 160.641300][ T6583] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.217: bg 0: block 5: invalid block bitmap [ 160.841661][ T6583] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 161.165437][ T6583] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.217: invalid indirect mapped block 3 (level 2) [ 161.248646][ T6552] BTRFS info (device loop1): enabling ssd optimizations [ 161.297746][ T6552] BTRFS info (device loop1): auto enabling async discard [ 161.315738][ T6583] EXT4-fs (loop2): 1 orphan inode deleted [ 161.348729][ T6583] EXT4-fs (loop2): 1 truncate cleaned up [ 161.376655][ T6552] BTRFS info (device loop1): rebuilding free space tree [ 161.393466][ T6583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.477185][ T6552] BTRFS info (device loop1): disabling free space tree [ 161.518987][ T6552] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.576793][ T6552] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.587459][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.666135][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.790914][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.826934][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.857852][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.880153][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.004685][ T5777] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 162.135662][ T27] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 162.144936][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.382662][ T6648] Illegal XDP return value 4294967294 on prog (id 9) dev syz_tun, expect packet loss! [ 163.397728][ T27] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71) [ 163.405463][ T27] gud 4-1:1.0: Failed to get connectors (error=-71) [ 163.417909][ T27] gud: probe of 4-1:1.0 failed with error -71 [ 163.445377][ T5846] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.484055][ T27] usb 4-1: USB disconnect, device number 5 [ 163.528761][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.640711][ T5846] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 163.658476][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.732398][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.793563][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.817949][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.837313][ T9] usb 1-1: Product: syz [ 163.846642][ T9] usb 1-1: Manufacturer: syz [ 163.863133][ T9] usb 1-1: SerialNumber: syz [ 164.601915][ T6666] loop3: detected capacity change from 0 to 164 [ 164.829159][ T5878] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.983715][ T5846] usb 2-1: Firmware version (0.0) predates our first public release. [ 164.996724][ T5846] usb 2-1: Please update to version 0.2 or newer [ 165.061119][ T5846] usb 2-1: USB disconnect, device number 8 [ 165.350265][ T6679] FAULT_INJECTION: forcing a failure. [ 165.350265][ T6679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.364051][ T6679] CPU: 0 PID: 6679 Comm: syz.3.239 Not tainted syzkaller #0 [ 165.371404][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.381508][ T6679] Call Trace: [ 165.384833][ T6679] [ 165.387806][ T6679] dump_stack_lvl+0x18c/0x250 [ 165.392534][ T6679] ? show_regs_print_info+0x20/0x20 [ 165.397782][ T6679] ? load_image+0x420/0x420 [ 165.402324][ T6679] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.407564][ T6679] ? mark_lock+0x94/0x320 [ 165.411947][ T6679] should_fail_ex+0x394/0x4c0 [ 165.416694][ T6679] prepare_alloc_pages+0x1e1/0x5b0 [ 165.421870][ T6679] __alloc_pages+0x134/0x460 [ 165.426518][ T6679] ? zone_statistics+0x170/0x170 [ 165.431532][ T6679] __folio_alloc+0x10/0x20 [ 165.436065][ T6679] vma_alloc_folio+0x474/0x8f0 [ 165.440866][ T6679] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 165.446714][ T6679] shmem_alloc_folio+0x1a9/0x2a0 [ 165.451691][ T6679] ? folio_put+0xd0/0xd0 [ 165.456078][ T6679] ? shmem_inode_acct_block+0x324/0x460 [ 165.461661][ T6679] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 165.467423][ T6679] ? put_swap_device+0x230/0x230 [ 165.472421][ T6679] ? xas_load+0x12b/0x140 [ 165.476793][ T6679] ? filemap_get_entry+0xce/0x3f0 [ 165.481860][ T6679] ? filemap_get_entry+0xce/0x3f0 [ 165.486920][ T6679] ? filemap_get_entry+0x375/0x3f0 [ 165.492066][ T6679] ? page_cache_prev_miss+0x390/0x390 [ 165.497515][ T6679] shmem_get_folio_gfp+0xe1d/0x2b40 [ 165.502799][ T6679] shmem_fault+0x1b8/0x820 [ 165.507268][ T6679] ? zero_pipe_buf_get+0x10/0x10 [ 165.512255][ T6679] ? handle_mm_fault+0xe6/0x4a50 [ 165.517253][ T6679] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.522326][ T6679] __do_fault+0x13b/0x4d0 [ 165.526693][ T6679] ? handle_mm_fault+0x3929/0x4a50 [ 165.531839][ T6679] ? handle_mm_fault+0xe6/0x4a50 [ 165.536812][ T6679] handle_mm_fault+0x3945/0x4a50 [ 165.541785][ T6679] ? handle_mm_fault+0xe6/0x4a50 [ 165.546775][ T6679] ? numa_migrate_prep+0x350/0x350 [ 165.551932][ T6679] ? follow_page_pte+0x6dd/0x1ae0 [ 165.557037][ T6679] ? pmd_lock+0x60/0x60 [ 165.561256][ T6679] __get_user_pages+0x604/0x1580 [ 165.566285][ T6679] ? populate_vma_page_range+0x380/0x380 [ 165.572004][ T6679] populate_vma_page_range+0x2c1/0x380 [ 165.577527][ T6679] ? fixup_user_fault+0x750/0x750 [ 165.582634][ T6679] ? down_read+0x1ac/0x2e0 [ 165.587094][ T6679] __mm_populate+0x260/0x390 [ 165.591730][ T6679] ? faultin_page_range+0x8a0/0x8a0 [ 165.596971][ T6679] ? up_write+0x1be/0x410 [ 165.601366][ T6679] vm_mmap_pgoff+0x2da/0x3f0 [ 165.606015][ T6679] ? account_locked_vm+0x200/0x200 [ 165.611181][ T6679] ? ksys_mmap_pgoff+0xf3/0x720 [ 165.616095][ T6679] ? __x64_sys_mmap+0x7a/0x130 [ 165.620894][ T6679] do_syscall_64+0x55/0xb0 [ 165.625360][ T6679] ? clear_bhb_loop+0x40/0x90 [ 165.630074][ T6679] ? clear_bhb_loop+0x40/0x90 [ 165.634802][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.640738][ T6679] RIP: 0033:0x7effddf9e199 [ 165.645273][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.664924][ T6679] RSP: 002b:00007effdee26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 165.673378][ T6679] RAX: ffffffffffffffda RBX: 00007effde225fa0 RCX: 00007effddf9e199 [ 165.681385][ T6679] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 165.689392][ T6679] RBP: 00007effde0350b8 R08: ffffffffffffffff R09: 000000009a5eb000 [ 165.697393][ T6679] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 165.705396][ T6679] R13: 00007effde226038 R14: 00007effde225fa0 R15: 00007fff94777cf8 [ 165.713427][ T6679] [ 165.756430][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 165.776610][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 165.790029][ T9] usb 1-1: unit 1 not found! [ 165.871497][ T9] usb 1-1: USB disconnect, device number 4 [ 165.934357][ T6682] loop2: detected capacity change from 0 to 128 [ 165.979090][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.000535][ T6682] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.067369][ T6682] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.275253][ T6700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.247'. [ 167.614300][ T6704] loop2: detected capacity change from 0 to 512 [ 167.705316][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.250'. [ 167.714515][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.722289][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #11: comm syz.2.249: iget: bad extended attribute block 83886080 [ 167.781387][ T6704] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.249: couldn't read orphan inode 11 (err -117) [ 167.804883][ T6704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.824120][ T6711] loop0: detected capacity change from 0 to 128 [ 167.832258][ T6711] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.857816][ T6711] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.888384][ T6704] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz.2.249: iget: bogus i_mode (3355) [ 168.034900][ T6716] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz.2.249: iget: bogus i_mode (3355) [ 168.249871][ T6713] FAULT_INJECTION: forcing a failure. [ 168.249871][ T6713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.467865][ T6713] CPU: 0 PID: 6713 Comm: syz.3.252 Not tainted syzkaller #0 [ 168.475266][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.485406][ T6713] Call Trace: [ 168.488741][ T6713] [ 168.491727][ T6713] dump_stack_lvl+0x18c/0x250 [ 168.496481][ T6713] ? show_regs_print_info+0x20/0x20 [ 168.501758][ T6713] ? load_image+0x420/0x420 [ 168.506347][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 168.511442][ T6713] should_fail_ex+0x394/0x4c0 [ 168.516173][ T6713] prepare_alloc_pages+0x1e1/0x5b0 [ 168.521327][ T6713] __alloc_pages+0x134/0x460 [ 168.525961][ T6713] ? zone_statistics+0x170/0x170 [ 168.530944][ T6713] __folio_alloc+0x10/0x20 [ 168.535389][ T6713] vma_alloc_folio+0x474/0x8f0 [ 168.540197][ T6713] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 168.546037][ T6713] shmem_alloc_folio+0x1a9/0x2a0 [ 168.551021][ T6713] ? folio_put+0xd0/0xd0 [ 168.555320][ T6713] ? shmem_inode_acct_block+0x324/0x460 [ 168.560907][ T6713] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 168.566687][ T6713] ? put_swap_device+0x230/0x230 [ 168.571664][ T6713] ? xas_load+0x12b/0x140 [ 168.576040][ T6713] ? filemap_get_entry+0xce/0x3f0 [ 168.581107][ T6713] ? filemap_get_entry+0xce/0x3f0 [ 168.586167][ T6713] ? filemap_get_entry+0x375/0x3f0 [ 168.591311][ T6713] ? lock_chain_count+0x20/0x20 [ 168.596215][ T6713] ? page_cache_prev_miss+0x390/0x390 [ 168.601677][ T6713] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 168.607644][ T6713] ? _raw_spin_unlock+0x40/0x40 [ 168.612575][ T6713] shmem_get_folio_gfp+0xe1d/0x2b40 [ 168.617862][ T6713] shmem_fault+0x1b8/0x820 [ 168.622357][ T6713] ? zero_pipe_buf_get+0x10/0x10 [ 168.627358][ T6713] ? handle_mm_fault+0xe6/0x4a50 [ 168.632336][ T6713] ? __lock_acquire+0x7eb0/0x7eb0 [ 168.637405][ T6713] __do_fault+0x13b/0x4d0 [ 168.641769][ T6713] ? handle_mm_fault+0x3929/0x4a50 [ 168.646920][ T6713] ? handle_mm_fault+0xe6/0x4a50 [ 168.651886][ T6713] handle_mm_fault+0x3945/0x4a50 [ 168.656861][ T6713] ? handle_mm_fault+0xe6/0x4a50 [ 168.661836][ T6713] ? numa_migrate_prep+0x350/0x350 [ 168.666979][ T6713] ? follow_page_pte+0x6dd/0x1ae0 [ 168.672060][ T6713] ? pmd_lock+0x60/0x60 [ 168.676270][ T6713] __get_user_pages+0x604/0x1580 [ 168.681256][ T6713] ? preempt_schedule_notrace+0x110/0x110 [ 168.687064][ T6713] ? populate_vma_page_range+0x380/0x380 [ 168.692742][ T6713] ? populate_vma_page_range+0x1b5/0x380 [ 168.698426][ T6713] populate_vma_page_range+0x2c1/0x380 [ 168.703930][ T6713] ? fixup_user_fault+0x750/0x750 [ 168.708993][ T6713] ? down_read+0x1ac/0x2e0 [ 168.713441][ T6713] __mm_populate+0x260/0x390 [ 168.718073][ T6713] ? faultin_page_range+0x8a0/0x8a0 [ 168.723311][ T6713] ? up_write+0x1be/0x410 [ 168.727680][ T6713] vm_mmap_pgoff+0x2da/0x3f0 [ 168.732343][ T6713] ? account_locked_vm+0x200/0x200 [ 168.737506][ T6713] ? ksys_mmap_pgoff+0xf3/0x720 [ 168.742401][ T6713] ? __x64_sys_mmap+0x7a/0x130 [ 168.747206][ T6713] do_syscall_64+0x55/0xb0 [ 168.751663][ T6713] ? clear_bhb_loop+0x40/0x90 [ 168.756369][ T6713] ? clear_bhb_loop+0x40/0x90 [ 168.761081][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.767042][ T6713] RIP: 0033:0x7effddf9e199 [ 168.771493][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.791153][ T6713] RSP: 002b:00007effdee26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 168.799627][ T6713] RAX: ffffffffffffffda RBX: 00007effde225fa0 RCX: 00007effddf9e199 [ 168.807636][ T6713] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 168.815669][ T6713] RBP: 00007effde0350b8 R08: ffffffffffffffff R09: 000000009a5eb000 [ 168.823670][ T6713] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 168.831679][ T6713] R13: 00007effde226038 R14: 00007effde225fa0 R15: 00007fff94777cf8 [ 168.839700][ T6713] [ 169.035118][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.552410][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.260'. [ 169.663821][ T6737] loop3: detected capacity change from 0 to 128 [ 169.683948][ T6737] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.736512][ T6737] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.824354][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.855668][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 169.864559][ T9] usb 2-1: can't read configurations, error -71 [ 170.257290][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 170.363483][ T6762] loop3: detected capacity change from 0 to 128 [ 170.378746][ T6762] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.412512][ T6762] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.930104][ T6765] FAULT_INJECTION: forcing a failure. [ 170.930104][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 171.119457][ T6765] CPU: 0 PID: 6765 Comm: syz.2.275 Not tainted syzkaller #0 [ 171.126845][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.136960][ T6765] Call Trace: [ 171.140291][ T6765] [ 171.143310][ T6765] dump_stack_lvl+0x18c/0x250 [ 171.148087][ T6765] ? show_regs_print_info+0x20/0x20 [ 171.153349][ T6765] ? load_image+0x420/0x420 [ 171.157925][ T6765] ? __might_sleep+0xe0/0xe0 [ 171.162582][ T6765] ? __lock_acquire+0x7eb0/0x7eb0 [ 171.167668][ T6765] should_fail_ex+0x394/0x4c0 [ 171.172418][ T6765] should_failslab+0x9/0x20 [ 171.176986][ T6765] slab_pre_alloc_hook+0x59/0x300 [ 171.182092][ T6765] ? __lock_acquire+0x7eb0/0x7eb0 [ 171.187172][ T6765] ? allocate_file_region_entries+0x218/0x600 [ 171.193295][ T6765] __kmem_cache_alloc_node+0x53/0x250 [ 171.198741][ T6765] ? allocate_file_region_entries+0x218/0x600 [ 171.204962][ T6765] kmalloc_trace+0x2a/0xe0 [ 171.209457][ T6765] allocate_file_region_entries+0x218/0x600 [ 171.215422][ T6765] ? folio_lock+0x190/0x190 [ 171.219987][ T6765] region_chg+0x30a/0x3d0 [ 171.224395][ T6765] __vma_reservation_common+0x331/0x6e0 [ 171.230019][ T6765] alloc_hugetlb_folio+0x17d/0x1660 [ 171.235275][ T6765] ? filemap_get_entry+0x375/0x3f0 [ 171.240468][ T6765] ? page_cache_prev_miss+0x390/0x390 [ 171.245935][ T6765] ? folio_isolate_hugetlb+0x2f0/0x2f0 [ 171.251492][ T6765] ? mark_lock+0x94/0x320 [ 171.255878][ T6765] ? read_lock_is_recursive+0x20/0x20 [ 171.261307][ T6765] ? mutex_lock_nested+0x20/0x20 [ 171.266296][ T6765] ? __lock_acquire+0x1431/0x7eb0 [ 171.271391][ T6765] hugetlb_fault+0xaf9/0x2b60 [ 171.276183][ T6765] ? hugetlb_fault_mutex_hash+0xc0/0xc0 [ 171.281804][ T6765] ? asan.module_dtor+0x20/0x20 [ 171.286746][ T6765] handle_mm_fault+0x31c1/0x4a50 [ 171.291740][ T6765] ? handle_mm_fault+0xe6/0x4a50 [ 171.296909][ T6765] ? __up_read+0x2b8/0x6b0 [ 171.301378][ T6765] ? __lock_acquire+0x7eb0/0x7eb0 [ 171.306463][ T6765] ? numa_migrate_prep+0x350/0x350 [ 171.311624][ T6765] ? do_raw_spin_unlock+0x121/0x230 [ 171.316915][ T6765] ? hugetlb_follow_page_mask+0x7e5/0x1640 [ 171.322824][ T6765] __get_user_pages+0x604/0x1580 [ 171.327881][ T6765] ? populate_vma_page_range+0x380/0x380 [ 171.333597][ T6765] populate_vma_page_range+0x2c1/0x380 [ 171.339149][ T6765] ? fixup_user_fault+0x750/0x750 [ 171.344247][ T6765] ? down_read+0x1ac/0x2e0 [ 171.348734][ T6765] __mm_populate+0x260/0x390 [ 171.353389][ T6765] ? faultin_page_range+0x8a0/0x8a0 [ 171.358661][ T6765] ? up_write+0x1be/0x410 [ 171.363048][ T6765] vm_mmap_pgoff+0x2da/0x3f0 [ 171.367711][ T6765] ? account_locked_vm+0x200/0x200 [ 171.372897][ T6765] ? hugetlb_file_setup+0x419/0x610 [ 171.378214][ T6765] ksys_mmap_pgoff+0x565/0x720 [ 171.383050][ T6765] do_syscall_64+0x55/0xb0 [ 171.387533][ T6765] ? clear_bhb_loop+0x40/0x90 [ 171.392263][ T6765] ? clear_bhb_loop+0x40/0x90 [ 171.397004][ T6765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.403001][ T6765] RIP: 0033:0x7f555139e199 [ 171.407464][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.427125][ T6765] RSP: 002b:00007f5552214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.435595][ T6765] RAX: ffffffffffffffda RBX: 00007f5551625fa0 RCX: 00007f555139e199 [ 171.443645][ T6765] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 171.451711][ T6765] RBP: 00007f55514350b8 R08: ffffffffffffffff R09: 0000000000000000 [ 171.459734][ T6765] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 171.467755][ T6765] R13: 00007f5551626038 R14: 00007f5551625fa0 R15: 00007ffccde666b8 [ 171.475817][ T6765] [ 171.794137][ T6772] loop3: detected capacity change from 0 to 64 [ 171.886490][ T6772] db_root: cannot open: /dev/sequencer2 [ 171.892344][ T6772] db_root: not a directory: /dev/sequencer2 [ 171.936547][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 171.936599][ T28] audit: type=1800 audit(1700011554.406:25): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.276" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 172.849774][ T6789] loop1: detected capacity change from 0 to 512 [ 172.932896][ T6789] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.005154][ T6789] EXT4-fs (loop1): 1 truncate cleaned up [ 173.060730][ T6789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.619651][ T6798] loop0: detected capacity change from 0 to 128 [ 173.719368][ T6798] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.732011][ T6798] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.039816][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.179110][ T6804] loop3: detected capacity change from 0 to 64 [ 174.208081][ T28] audit: type=1800 audit(1700011556.736:26): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.288" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 174.229388][ T6804] db_root: cannot open: /dev/sequencer2 [ 174.235024][ T6804] db_root: not a directory: /dev/sequencer2 [ 175.610645][ T6803] loop2: detected capacity change from 0 to 32768 [ 175.658678][ T6803] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.289 (6803) [ 175.730059][ T6803] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.771470][ T6803] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 175.807680][ T6803] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 175.837233][ T6803] BTRFS info (device loop2): use zstd compression, level 3 [ 175.844552][ T6803] BTRFS info (device loop2): force clearing of disk cache [ 175.904746][ T6803] BTRFS info (device loop2): enabling disk space caching [ 175.942669][ T6803] BTRFS info (device loop2): disk space caching is enabled [ 176.159960][ T6803] BTRFS info (device loop2): enabling ssd optimizations [ 176.206898][ T6803] BTRFS info (device loop2): auto enabling async discard [ 176.242291][ T6803] BTRFS info (device loop2): rebuilding free space tree [ 176.304732][ T6803] BTRFS info (device loop2): disabling free space tree [ 176.319844][ T6803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.359591][ T6803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.483843][ T6820] loop1: detected capacity change from 0 to 32768 [ 176.527266][ T6820] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.294 (6820) [ 176.685616][ T5778] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 176.825469][ T5878] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5878) [ 177.258547][ T5796] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (5796) [ 181.488573][ T6889] loop3: detected capacity change from 0 to 32768 [ 181.522663][ T6903] FAULT_INJECTION: forcing a failure. [ 181.522663][ T6903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.595149][ T6903] CPU: 1 PID: 6903 Comm: syz.1.308 Not tainted syzkaller #0 [ 181.602543][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.612664][ T6903] Call Trace: [ 181.615992][ T6903] [ 181.618969][ T6903] dump_stack_lvl+0x18c/0x250 [ 181.623723][ T6903] ? show_regs_print_info+0x20/0x20 [ 181.628994][ T6903] ? load_image+0x420/0x420 [ 181.633571][ T6903] ? __lock_acquire+0x7eb0/0x7eb0 [ 181.638651][ T6903] ? mark_lock+0x94/0x320 [ 181.643043][ T6903] should_fail_ex+0x394/0x4c0 [ 181.647804][ T6903] prepare_alloc_pages+0x1e1/0x5b0 [ 181.653008][ T6903] __alloc_pages+0x134/0x460 [ 181.657664][ T6903] ? zone_statistics+0x170/0x170 [ 181.662681][ T6903] __folio_alloc+0x10/0x20 [ 181.667176][ T6903] vma_alloc_folio+0x474/0x8f0 [ 181.672036][ T6903] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 181.677922][ T6903] shmem_alloc_folio+0x1a9/0x2a0 [ 181.682935][ T6903] ? folio_put+0xd0/0xd0 [ 181.687270][ T6903] ? shmem_inode_acct_block+0x324/0x460 [ 181.692879][ T6903] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 181.698666][ T6903] ? put_swap_device+0x230/0x230 [ 181.703654][ T6903] ? xas_load+0x12b/0x140 [ 181.708027][ T6903] ? filemap_get_entry+0xce/0x3f0 [ 181.713085][ T6903] ? filemap_get_entry+0xce/0x3f0 [ 181.718172][ T6903] ? filemap_get_entry+0x375/0x3f0 [ 181.723318][ T6903] ? page_cache_prev_miss+0x390/0x390 [ 181.728735][ T6903] shmem_get_folio_gfp+0xe1d/0x2b40 [ 181.733996][ T6903] shmem_fault+0x1b8/0x820 [ 181.738461][ T6903] ? zero_pipe_buf_get+0x10/0x10 [ 181.743439][ T6903] ? handle_mm_fault+0xe6/0x4a50 [ 181.748407][ T6903] ? __lock_acquire+0x7eb0/0x7eb0 [ 181.753478][ T6903] __do_fault+0x13b/0x4d0 [ 181.757931][ T6903] ? handle_mm_fault+0x3929/0x4a50 [ 181.763077][ T6903] ? handle_mm_fault+0xe6/0x4a50 [ 181.768074][ T6903] handle_mm_fault+0x3945/0x4a50 [ 181.773061][ T6903] ? handle_mm_fault+0xe6/0x4a50 [ 181.778041][ T6903] ? numa_migrate_prep+0x350/0x350 [ 181.783210][ T6903] ? follow_page_pte+0x6dd/0x1ae0 [ 181.788287][ T6903] ? pmd_lock+0x60/0x60 [ 181.792512][ T6903] __get_user_pages+0x604/0x1580 [ 181.797514][ T6903] ? populate_vma_page_range+0x380/0x380 [ 181.803198][ T6903] populate_vma_page_range+0x2c1/0x380 [ 181.808713][ T6903] ? fixup_user_fault+0x750/0x750 [ 181.813804][ T6903] ? down_read+0x1ac/0x2e0 [ 181.818271][ T6903] __mm_populate+0x260/0x390 [ 181.822920][ T6903] ? faultin_page_range+0x8a0/0x8a0 [ 181.828165][ T6903] ? up_write+0x1be/0x410 [ 181.832527][ T6903] vm_mmap_pgoff+0x2da/0x3f0 [ 181.837192][ T6903] ? account_locked_vm+0x200/0x200 [ 181.842348][ T6903] ? ksys_mmap_pgoff+0xf3/0x720 [ 181.847252][ T6903] ? __x64_sys_mmap+0x7a/0x130 [ 181.852064][ T6903] do_syscall_64+0x55/0xb0 [ 181.856558][ T6903] ? clear_bhb_loop+0x40/0x90 [ 181.861291][ T6903] ? clear_bhb_loop+0x40/0x90 [ 181.866033][ T6903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.872010][ T6903] RIP: 0033:0x7f3e1c19e199 [ 181.876457][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.896119][ T6903] RSP: 002b:00007f3e1d0c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 181.904592][ T6903] RAX: ffffffffffffffda RBX: 00007f3e1c425fa0 RCX: 00007f3e1c19e199 [ 181.912604][ T6903] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 181.920607][ T6903] RBP: 00007f3e1c2350b8 R08: ffffffffffffffff R09: 000000009a5eb000 [ 181.928635][ T6903] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 181.936647][ T6903] R13: 00007f3e1c426038 R14: 00007f3e1c425fa0 R15: 00007ffe967f0898 [ 181.944809][ T6903] [ 182.855094][ T28] audit: type=1800 audit(1700011564.558:27): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 183.188473][ T6895] loop0: detected capacity change from 0 to 32768 [ 183.207799][ T6895] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 183.372446][ T5796] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 184.390057][ T6911] loop1: detected capacity change from 0 to 32768 [ 184.418303][ T6911] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14 [ 184.464655][ T6909] loop2: detected capacity change from 0 to 40427 [ 184.521007][ T6909] F2FS-fs (loop2): invalid crc value [ 184.555866][ T6909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.703474][ T5878] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14 [ 184.764914][ T6909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.954782][ T28] audit: type=1800 audit(1700011567.468:28): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.311" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 185.574946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 185.940285][ T6909] syz.2.311: attempt to access beyond end of device [ 185.940285][ T6909] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 186.076678][ T5778] syz-executor: attempt to access beyond end of device [ 186.076678][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.107597][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 187.263125][ T6948] loop0: detected capacity change from 0 to 512 [ 187.353043][ T6948] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #11: comm syz.0.322: iget: bad extended attribute block 83886080 [ 187.383523][ T6948] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.322: couldn't read orphan inode 11 (err -117) [ 187.457129][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.579922][ T6942] loop1: detected capacity change from 0 to 32768 [ 187.594669][ T6948] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.322: iget: bogus i_mode (3355) [ 187.629009][ T6942] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 187.796005][ T6959] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.322: iget: bogus i_mode (3355) [ 188.252088][ T5796] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 188.409821][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.833251][ T6969] loop1: detected capacity change from 0 to 512 [ 188.911895][ T6969] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.968336][ T6952] loop3: detected capacity change from 0 to 32768 [ 189.002258][ T6952] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 189.023476][ T6969] EXT4-fs (loop1): 1 truncate cleaned up [ 189.043294][ T6954] loop2: detected capacity change from 0 to 32768 [ 189.054311][ T6969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.250290][ T5878] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 189.273330][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.310904][ T6993] loop2: detected capacity change from 0 to 32768 [ 191.321602][ T6993] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 14 [ 191.386821][ T5796] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.427133][ T7009] loop1: detected capacity change from 0 to 512 [ 191.489339][ T7009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.550487][ T7009] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.688381][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.988043][ T7022] loop0: detected capacity change from 0 to 512 [ 192.071976][ T7022] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #11: comm syz.0.348: iget: bad extended attribute block 83886080 [ 192.096667][ T7022] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.348: couldn't read orphan inode 11 (err -117) [ 192.111130][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.676542][ T7022] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.348: iget: bogus i_mode (3355) [ 192.897522][ T7030] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.348: iget: bogus i_mode (3355) [ 193.126313][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.181401][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 193.347941][ T7038] page:ffffea00012e0200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b808 [ 193.360619][ T7038] head:ffffea00012e0200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 193.372991][ T7038] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 193.381981][ T7038] page_type: 0xffffffff() [ 193.389609][ T7038] raw: 00fff00000000840 ffff888017c42140 ffffea0000c2b400 0000000000000003 [ 193.398746][ T7038] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 193.407793][ T7038] page dumped because: unmovable page [ 193.413537][ T7038] page_owner tracks the page as allocated [ 193.423285][ T7038] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:0), ts 168076910717, free_ts 167958439023 [ 193.450861][ T7038] post_alloc_hook+0x1c1/0x200 [ 193.455851][ T7038] get_page_from_freelist+0x2181/0x22a0 [ 193.465488][ T7038] __alloc_pages+0x1f0/0x460 [ 193.471357][ T7038] alloc_slab_page+0x5d/0x180 [ 193.481813][ T7038] new_slab+0x87/0x2d0 [ 193.487608][ T7038] ___slab_alloc+0xc5c/0x12f0 [ 193.494726][ T7038] __kmem_cache_alloc_node+0x11f/0x250 [ 193.501813][ T7038] __kmalloc_node_track_caller+0xa4/0x230 [ 193.509091][ T7038] kmalloc_reserve+0x116/0x240 [ 193.516856][ T7038] __alloc_skb+0x138/0x2c0 [ 193.521372][ T7038] nsim_dev_trap_report_work+0x253/0xa90 [ 193.528790][ T7038] process_scheduled_works+0xa60/0x1600 [ 193.536977][ T7038] worker_thread+0xa5e/0xfe0 [ 193.542941][ T7038] kthread+0x2fa/0x390 [ 193.548754][ T7038] ret_from_fork+0x48/0x80 [ 193.558639][ T7038] ret_from_fork_asm+0x11/0x20 [ 193.567630][ T7038] page last free stack trace: [ 193.572423][ T7038] free_unref_page_prepare+0x7d7/0x8f0 [ 193.607837][ T7038] free_unref_page+0x32/0x2e0 [ 193.620722][ T7038] __unfreeze_partials+0x1cf/0x210 [ 193.630667][ T7038] put_cpu_partial+0x17c/0x250 [ 193.636050][ T7038] __slab_free+0x319/0x400 [ 193.642064][ T7038] qlist_free_all+0x75/0xd0 [ 193.653546][ T7038] kasan_quarantine_reduce+0x143/0x160 [ 193.660724][ T7038] __kasan_slab_alloc+0x22/0x80 [ 193.668714][ T7038] slab_post_alloc_hook+0x6a/0x4d0 [ 193.703459][ T7038] kmem_cache_alloc+0x17e/0x2c0 [ 193.708594][ T7038] ptlock_alloc+0x20/0x70 [ 193.719802][ T7038] pte_alloc_one+0xcc/0x540 [ 193.726050][ T7038] __do_fault+0xd7/0x4d0 [ 193.733200][ T7038] handle_mm_fault+0x1964/0x4a50 [ 193.740188][ T7038] do_user_addr_fault+0x736/0x12d0 [ 193.747117][ T7038] exc_page_fault+0x64/0x100 [ 193.762736][ T7045] loop3: detected capacity change from 0 to 256 [ 193.883808][ T7045] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.903769][ T7045] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 193.932718][ T7045] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 194.103987][ T7040] loop1: detected capacity change from 0 to 32768 [ 194.125270][ T7040] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14 [ 194.288404][ T5796] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14 [ 194.403808][ T7049] syz.1.358 uses obsolete (PF_INET,SOCK_PACKET) [ 194.559387][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567108][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.866627][ T7076] loop3: detected capacity change from 0 to 512 [ 195.883805][ T7076] EXT4-fs: inline encryption not supported [ 195.895931][ T7076] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.063577][ T7076] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.070076][ T7076] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.370: inode #15: comm syz.3.370: iget: illegal inode # [ 196.149859][ T7066] loop2: detected capacity change from 0 to 32768 [ 196.179120][ T7076] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.370: couldn't read orphan inode 15 (err -117) [ 196.223638][ T7066] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 14 [ 196.276938][ T7076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.435840][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.535662][ T5796] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 14 [ 198.024031][ T7109] loop1: detected capacity change from 0 to 1024 [ 198.032284][ T7109] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.080070][ T7109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.099581][ T7109] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.147265][ T7109] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #11: comm syz.1.382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 198.206616][ T7103] loop3: detected capacity change from 0 to 32768 [ 198.221917][ T7109] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.382: couldn't read orphan inode 11 (err -117) [ 198.234520][ T7103] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 198.286305][ T7109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.404041][ T7109] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.382: Invalid block bitmap block 0 in block_group 0 [ 198.459590][ T7109] Quota error (device loop1): write_blk: dquota write failed [ 198.484757][ T7109] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 198.495651][ T5878] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14 [ 198.515139][ T7109] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.382: Failed to acquire dquot type 0 [ 198.572752][ T7109] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.382: Invalid inode bitmap blk 137438953472 in block_group 0 [ 198.668890][ T11] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm kworker/u4:0: Invalid inode table block 8589934593 in block_group 0 [ 198.711438][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.793294][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.005758][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.023999][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.056950][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.072747][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.091363][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 199.100912][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.199206][ T7140] FAULT_INJECTION: forcing a failure. [ 199.199206][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 199.214790][ T7140] CPU: 1 PID: 7140 Comm: syz.0.392 Not tainted syzkaller #0 [ 199.222175][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.232288][ T7140] Call Trace: [ 199.235610][ T7140] [ 199.238581][ T7140] dump_stack_lvl+0x18c/0x250 [ 199.243332][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 199.248603][ T7140] ? show_regs_print_info+0x20/0x20 [ 199.253883][ T7140] ? load_image+0x420/0x420 [ 199.258457][ T7140] ? stack_trace_save+0xaa/0x100 [ 199.263459][ T7140] ? stack_trace_snprint+0xf0/0xf0 [ 199.268640][ T7140] should_fail_ex+0x394/0x4c0 [ 199.273389][ T7140] should_failslab+0x9/0x20 [ 199.277964][ T7140] slab_pre_alloc_hook+0x59/0x300 [ 199.283058][ T7140] kmem_cache_alloc_node+0x5e/0x310 [ 199.288333][ T7140] ? __alloc_skb+0x103/0x2c0 [ 199.293020][ T7140] __alloc_skb+0x103/0x2c0 [ 199.297512][ T7140] tipc_msg_create+0x4a/0x4c0 [ 199.302251][ T7140] ? tipc_own_addr+0x45/0x2a0 [ 199.306997][ T7140] tipc_group_proto_xmit+0xce/0x790 [ 199.312268][ T7140] tipc_group_delete+0x15f/0x4c0 [ 199.317278][ T7140] ? tipc_group_update_member+0x360/0x360 [ 199.323087][ T7140] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 199.328795][ T7140] ? tipc_nametbl_build_group+0x482/0x4c0 [ 199.334569][ T7140] ? tipc_nametbl_build_group+0x2e/0x4c0 [ 199.340264][ T7140] tipc_sk_join+0x3d4/0x6a0 [ 199.344816][ T7140] ? __tipc_sendstream+0x1290/0x1290 [ 199.350152][ T7140] tipc_setsockopt+0x73f/0x990 [ 199.354961][ T7140] ? tipc_shutdown+0x4d0/0x4d0 [ 199.359761][ T7140] ? aa_sock_opt_perm+0x74/0x100 [ 199.364745][ T7140] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 199.370341][ T7140] ? security_socket_setsockopt+0x7e/0xa0 [ 199.376108][ T7140] ? tipc_shutdown+0x4d0/0x4d0 [ 199.380918][ T7140] do_sock_setsockopt+0x175/0x1a0 [ 199.385992][ T7140] ? __fdget+0x14a/0x210 [ 199.390280][ T7140] __x64_sys_setsockopt+0x182/0x200 [ 199.395529][ T7140] do_syscall_64+0x55/0xb0 [ 199.399999][ T7140] ? clear_bhb_loop+0x40/0x90 [ 199.404711][ T7140] ? clear_bhb_loop+0x40/0x90 [ 199.409452][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.415395][ T7140] RIP: 0033:0x7fbd3599e199 [ 199.419845][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.439495][ T7140] RSP: 002b:00007fbd367f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.447982][ T7140] RAX: ffffffffffffffda RBX: 00007fbd35c25fa0 RCX: 00007fbd3599e199 [ 199.456001][ T7140] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 199.464051][ T7140] RBP: 00007fbd35a350b8 R08: 0000000000000127 R09: 0000000000000000 [ 199.472069][ T7140] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 199.480086][ T7140] R13: 00007fbd35c26038 R14: 00007fbd35c25fa0 R15: 00007fff7e8d8268 [ 199.488108][ T7140] [ 199.720344][ T7151] loop2: detected capacity change from 0 to 512 [ 199.766939][ T7151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.822350][ T7151] EXT4-fs (loop2): 1 truncate cleaned up [ 199.838329][ T7151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.897782][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.092248][ T7149] loop0: detected capacity change from 0 to 32768 [ 200.131708][ T7149] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.151046][ T7149] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 200.170891][ T7149] BTRFS info (device loop0): force clearing of disk cache [ 200.189321][ T7149] BTRFS info (device loop0): enabling auto defrag [ 200.196421][ T7149] BTRFS info (device loop0): max_inline at 0 [ 200.207516][ T7149] BTRFS info (device loop0): enabling disk space caching [ 200.216647][ T7149] BTRFS info (device loop0): disk space caching is enabled [ 200.261595][ T7149] BTRFS info (device loop0): enabling ssd optimizations [ 200.277088][ T7149] BTRFS info (device loop0): rebuilding free space tree [ 200.310148][ T7149] BTRFS info (device loop0): disabling free space tree [ 200.334583][ T7149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.356688][ T7149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.516768][ T6877] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 200.580611][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.026989][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 201.090822][ T7186] loop1: detected capacity change from 0 to 256 [ 203.536920][ T7186] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.426066][ T9] usb 4-1: USB disconnect, device number 6 [ 205.983369][ T7202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.775444][ T7225] loop1: detected capacity change from 0 to 64 [ 206.858403][ T7225] db_root: cannot open: /dev/sequencer2 [ 206.864667][ T7225] db_root: not a directory: /dev/sequencer2 [ 206.880643][ T28] audit: type=1800 audit(1700011589.382:29): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.418" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 207.527957][ T7205] loop2: detected capacity change from 0 to 32768 [ 207.601135][ T7205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.410 (7205) [ 207.628908][ T7205] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.642296][ T7205] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.695469][ T7205] BTRFS info (device loop2): force clearing of disk cache [ 207.734371][ T7205] BTRFS info (device loop2): enabling auto defrag [ 207.770811][ T7205] BTRFS info (device loop2): max_inline at 0 [ 207.788612][ T7205] BTRFS info (device loop2): enabling disk space caching [ 207.809632][ T7205] BTRFS info (device loop2): disk space caching is enabled [ 207.954175][ T7205] BTRFS info (device loop2): enabling ssd optimizations [ 207.999735][ T7205] BTRFS info (device loop2): rebuilding free space tree [ 208.054952][ T7205] BTRFS info (device loop2): disabling free space tree [ 208.070790][ T7205] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.080979][ T7205] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.109005][ T7244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.229578][ T6877] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 208.279322][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.302200][ T7244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.494273][ T5796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop2 scanned by udevd (5796) [ 208.538192][ T7244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.668432][ T7261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.425'. [ 208.852543][ T7244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.881673][ T7263] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 208.949752][ T7263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.074767][ T7264] bond1: (slave gretap1): making interface the new active one [ 209.182587][ T7270] loop3: detected capacity change from 0 to 64 [ 209.316796][ T7264] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 209.398211][ T28] audit: type=1800 audit(1700011591.933:30): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 209.426203][ T7270] db_root: cannot open: /dev/sequencer2 [ 209.432692][ T7270] db_root: not a directory: /dev/sequencer2 [ 209.997139][ T7264] syz.0.427 (7264) used greatest stack depth: 20136 bytes left [ 210.255951][ T7244] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.451702][ T7244] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.882955][ T7244] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.951584][ T7244] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.047102][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 212.053634][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 212.059799][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 212.066202][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 212.422403][ T7295] loop1: detected capacity change from 0 to 64 [ 212.491407][ T28] audit: type=1800 audit(1700011595.033:31): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.438" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 212.526009][ T7295] db_root: cannot open: /dev/sequencer2 [ 212.531825][ T7295] db_root: not a directory: /dev/sequencer2 [ 214.231588][ T7320] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 216.822280][ T7371] loop2: detected capacity change from 0 to 128 [ 216.855128][ T7371] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.921184][ T7371] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 217.635326][ T7396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 217.780729][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 217.975878][ T7408] loop2: detected capacity change from 0 to 1024 [ 217.994076][ T7408] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.006433][ T7408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.033887][ T7408] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.068032][ T7408] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #11: comm syz.2.480: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 218.094881][ T7408] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.480: couldn't read orphan inode 11 (err -117) [ 218.114430][ T7408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.191237][ T7408] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.480: Invalid block bitmap block 0 in block_group 0 [ 218.228654][ T7408] Quota error (device loop2): write_blk: dquota write failed [ 218.250160][ T7408] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 218.263308][ T7404] loop0: detected capacity change from 0 to 32768 [ 218.276710][ T7408] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.480: Failed to acquire dquot type 0 [ 218.410457][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.429867][ T2964] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 218.446993][ T2964] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 218.772500][ T7428] loop2: detected capacity change from 0 to 512 [ 218.806652][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.824889][ T7428] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.866169][ T7428] capability: warning: `syz.2.488' uses 32-bit capabilities (legacy support in use) [ 218.907586][ T7432] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.063704][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.116145][ T7435] loop3: detected capacity change from 0 to 64 [ 219.217208][ T28] audit: type=1800 audit(1700011601.754:32): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 219.241126][ T7435] db_root: cannot open: /dev/sequencer2 [ 219.246814][ T7435] db_root: not a directory: /dev/sequencer2 [ 220.004052][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 220.731764][ T7441] loop2: detected capacity change from 0 to 32768 [ 220.979575][ T7461] loop1: detected capacity change from 0 to 512 [ 221.038667][ T7461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.084299][ T7461] EXT4-fs (loop1): 1 truncate cleaned up [ 221.109590][ T7461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.355886][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.965477][ T7479] FAULT_INJECTION: forcing a failure. [ 221.965477][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.987510][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 221.998500][ T7479] CPU: 0 PID: 7479 Comm: syz.0.505 Not tainted syzkaller #0 [ 222.005872][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.015999][ T7479] Call Trace: [ 222.019328][ T7479] [ 222.022322][ T7479] dump_stack_lvl+0x18c/0x250 [ 222.027078][ T7479] ? show_regs_print_info+0x20/0x20 [ 222.032378][ T7479] ? load_image+0x420/0x420 [ 222.036944][ T7479] ? __might_fault+0xaa/0x120 [ 222.041679][ T7479] ? __lock_acquire+0x7eb0/0x7eb0 [ 222.046762][ T7479] should_fail_ex+0x394/0x4c0 [ 222.051506][ T7479] _copy_from_user+0x2f/0xe0 [ 222.056160][ T7479] __se_sys_prlimit64+0x12f/0xbf0 [ 222.061255][ T7479] ? __x64_sys_prlimit64+0xb0/0xb0 [ 222.066444][ T7479] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 222.072510][ T7479] ? lock_chain_count+0x20/0x20 [ 222.077432][ T7479] ? lockdep_hardirqs_on+0x98/0x150 [ 222.082709][ T7479] do_syscall_64+0x55/0xb0 [ 222.087209][ T7479] ? clear_bhb_loop+0x40/0x90 [ 222.091960][ T7479] ? clear_bhb_loop+0x40/0x90 [ 222.096694][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.102659][ T7479] RIP: 0033:0x7fbd3599e199 [ 222.107135][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.126805][ T7479] RSP: 002b:00007fbd367f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 222.135292][ T7479] RAX: ffffffffffffffda RBX: 00007fbd35c25fa0 RCX: 00007fbd3599e199 [ 222.143351][ T7479] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 222.151393][ T7479] RBP: 00007fbd35a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 222.159446][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.167480][ T7479] R13: 00007fbd35c26038 R14: 00007fbd35c25fa0 R15: 00007fff7e8d8268 [ 222.175555][ T7479] [ 222.764481][ T7492] loop3: detected capacity change from 0 to 256 [ 222.912634][ T7492] FAT-fs (loop3): bogus sectors per cluster 30 [ 223.064211][ T7492] FAT-fs (loop3): Can't find a valid FAT filesystem [ 223.643098][ T7494] loop2: detected capacity change from 0 to 512 [ 223.713625][ T7494] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.830634][ T7494] EXT4-fs (loop2): 1 truncate cleaned up [ 223.837276][ T7494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.940473][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 223.994464][ T7501] loop3: detected capacity change from 0 to 256 [ 224.069755][ T7501] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.925530][ T28] audit: type=1800 audit(1700011607.415:33): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.510" name="file1" dev="loop3" ino=1048897 res=0 errno=0 [ 225.074584][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.692485][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 226.054640][ T7515] loop0: detected capacity change from 0 to 512 [ 226.131348][ T7515] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #11: comm syz.0.516: iget: bad extended attribute block 83886080 [ 226.177306][ T7515] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.516: couldn't read orphan inode 11 (err -117) [ 226.206979][ T7515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.372404][ T7515] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.516: iget: bogus i_mode (3355) [ 226.952416][ T7527] EXT4-fs error (device loop0): ext4_lookup:1860: inode #12: comm syz.0.516: iget: bogus i_mode (3355) [ 227.181319][ T7529] loop3: detected capacity change from 0 to 512 [ 227.234091][ T7529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.301682][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.336991][ T7529] EXT4-fs (loop3): 1 truncate cleaned up [ 227.369650][ T7529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.494418][ T7536] loop0: detected capacity change from 0 to 1024 [ 227.496153][ T7529] EXT4-fs (loop3): shut down requested (1) [ 227.518487][ T7536] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.580743][ T7536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.607688][ T7536] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.631850][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.653250][ T7539] loop1: detected capacity change from 0 to 128 [ 227.671762][ T7536] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.521: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 227.726576][ T7536] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.521: couldn't read orphan inode 11 (err -117) [ 227.740741][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.796695][ T7536] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.521: Invalid block bitmap block 0 in block_group 0 [ 227.812535][ T7536] Quota error (device loop0): write_blk: dquota write failed [ 227.820422][ T7536] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 227.841945][ T7539] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.854502][ T7536] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.521: Failed to acquire dquot type 0 [ 227.896358][ T7539] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.951242][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.063707][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 228.292538][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.394602][ T7561] loop0: detected capacity change from 0 to 512 [ 228.407458][ T7561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 228.442475][ T7561] EXT4-fs (loop0): 1 truncate cleaned up [ 228.458552][ T7561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.573874][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.819459][ T7576] gadgetfs: bound to dummy_udc driver [ 228.939917][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 228.973074][ T7586] loop2: detected capacity change from 0 to 512 [ 229.065265][ T7586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.098014][ T7591] loop1: detected capacity change from 0 to 512 [ 229.118652][ T7586] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.130089][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 229.173053][ C0] gadgetfs: connected [ 229.180185][ T7575] gadgetfs: suspended from state 3 [ 229.197891][ T7591] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.542: corrupted in-inode xattr: invalid ea_ino [ 229.207624][ T7575] gadgetfs: disconnected [ 229.260290][ T7591] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.542: couldn't read orphan inode 15 (err -117) [ 229.274635][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.311715][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.442559][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.446209][ T7594] loop0: detected capacity change from 0 to 512 [ 229.466481][ T7597] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 229.539960][ T7597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.567422][ T7594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.668331][ T7594] EXT4-fs (loop0): 1 truncate cleaned up [ 229.675523][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.869894][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.885140][ T7613] gadgetfs: bound to dummy_udc driver [ 229.976486][ T7615] loop1: detected capacity change from 0 to 512 [ 230.008625][ T7615] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #11: comm syz.1.552: iget: bad extended attribute block 83886080 [ 230.064318][ T7615] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.552: couldn't read orphan inode 11 (err -117) [ 230.123065][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.152563][ T7615] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.552: iget: bogus i_mode (3355) [ 230.171186][ T7622] loop3: detected capacity change from 0 to 2048 [ 230.225808][ T7622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.256459][ T7626] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.552: iget: bogus i_mode (3355) [ 230.282732][ T7622] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.356468][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.370061][ C0] gadgetfs: connected [ 230.375663][ T7612] gadgetfs: suspended from state 3 [ 230.393511][ T9] usb 1-1: unable to read config index 0 descriptor/all [ 230.406461][ T7622] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.554: bg 0: block 243: padding at end of block bitmap is not set [ 230.421996][ T7612] gadgetfs: disconnected [ 230.426516][ T9] usb 1-1: can't read configurations, error -71 [ 230.517152][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.655542][ T7634] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.804291][ T7637] loop1: detected capacity change from 0 to 64 [ 230.968089][ T28] audit: type=1800 audit(1700011613.516:34): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.559" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 230.993232][ T7637] db_root: cannot open: /dev/sequencer2 [ 230.999023][ T7637] db_root: not a directory: /dev/sequencer2 [ 231.604320][ T7639] loop2: detected capacity change from 0 to 512 [ 231.675631][ T7639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 231.712391][ T7639] EXT4-fs (loop2): 1 truncate cleaned up [ 231.747484][ T7639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.771856][ T7642] loop3: detected capacity change from 0 to 1024 [ 231.813183][ T7642] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.845569][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.886826][ T7642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.918191][ T7642] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.976717][ T7649] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.982240][ T7642] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.562: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 232.018255][ T7642] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.562: couldn't read orphan inode 11 (err -117) [ 232.032199][ T7642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.101636][ T7642] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.562: Invalid block bitmap block 0 in block_group 0 [ 232.118292][ T7651] FAULT_INJECTION: forcing a failure. [ 232.118292][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 232.138097][ T7642] Quota error (device loop3): write_blk: dquota write failed [ 232.156024][ T7642] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.186548][ T7642] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.562: Failed to acquire dquot type 0 [ 232.206526][ T7651] CPU: 0 PID: 7651 Comm: syz.1.565 Not tainted syzkaller #0 [ 232.213918][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 232.224036][ T7651] Call Trace: [ 232.227413][ T7651] [ 232.230392][ T7651] dump_stack_lvl+0x18c/0x250 [ 232.235148][ T7651] ? show_regs_print_info+0x20/0x20 [ 232.240407][ T7651] ? load_image+0x420/0x420 [ 232.244970][ T7651] ? __might_sleep+0xe0/0xe0 [ 232.249622][ T7651] ? __lock_acquire+0x7eb0/0x7eb0 [ 232.254718][ T7651] should_fail_ex+0x394/0x4c0 [ 232.259478][ T7651] should_failslab+0x9/0x20 [ 232.264073][ T7651] slab_pre_alloc_hook+0x59/0x300 [ 232.269169][ T7651] kmem_cache_alloc_lru+0x4d/0x2b0 [ 232.274339][ T7651] ? new_inode_pseudo+0x82/0x1d0 [ 232.279344][ T7651] new_inode_pseudo+0x82/0x1d0 [ 232.284146][ T7651] new_inode+0x22/0x1d0 [ 232.288347][ T7651] ramfs_get_inode+0x27/0x2f0 [ 232.293068][ T7651] ramfs_fill_super+0x12c/0x1c0 [ 232.297952][ T7651] ? ramfs_get_tree+0x20/0x20 [ 232.302677][ T7651] get_tree_nodev+0xb5/0x140 [ 232.307330][ T7651] vfs_get_tree+0x8c/0x280 [ 232.311790][ T7651] vfs_cmd_create+0xe3/0x230 [ 232.316433][ T7651] __se_sys_fsconfig+0x70a/0x850 [ 232.321427][ T7651] ? __x64_sys_fsconfig+0xc0/0xc0 [ 232.326535][ T7651] ? lockdep_hardirqs_on+0x98/0x150 [ 232.331771][ T7651] ? __x64_sys_fsconfig+0x20/0xc0 [ 232.336859][ T7651] do_syscall_64+0x55/0xb0 [ 232.341312][ T7651] ? clear_bhb_loop+0x40/0x90 [ 232.346025][ T7651] ? clear_bhb_loop+0x40/0x90 [ 232.350734][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.356683][ T7651] RIP: 0033:0x7f3e1c19e199 [ 232.361151][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.380831][ T7651] RSP: 002b:00007f3e1d0c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 232.389288][ T7651] RAX: ffffffffffffffda RBX: 00007f3e1c425fa0 RCX: 00007f3e1c19e199 [ 232.397289][ T7651] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 232.405291][ T7651] RBP: 00007f3e1c2350b8 R08: 0000000000000000 R09: 0000000000000000 [ 232.413292][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.421298][ T7651] R13: 00007f3e1c426038 R14: 00007f3e1c425fa0 R15: 00007ffe967f0898 [ 232.429321][ T7651] [ 232.500710][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.530443][ T1148] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 232.548929][ T1148] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 232.849627][ T7667] loop1: detected capacity change from 0 to 64 [ 233.012027][ T28] audit: type=1800 audit(1700011615.557:35): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.570" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 233.037259][ T7667] db_root: cannot open: /dev/sequencer2 [ 233.043027][ T7667] db_root: not a directory: /dev/sequencer2 [ 233.214969][ T7666] loop2: detected capacity change from 0 to 512 [ 233.413239][ T7666] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.667199][ T7666] EXT4-fs (loop2): 1 truncate cleaned up [ 233.675559][ T7666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.972887][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.010050][ T7678] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.400947][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 234.521861][ T7699] loop0: detected capacity change from 0 to 512 [ 234.551746][ T7699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.571141][ T7699] EXT4-fs (loop0): 1 truncate cleaned up [ 234.578863][ T7699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.753574][ T7705] loop2: detected capacity change from 0 to 1024 [ 234.761319][ T7705] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.833201][ T7705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.856106][ T7705] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.871671][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.949209][ T7705] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #11: comm syz.2.586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 235.012375][ T7705] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.586: couldn't read orphan inode 11 (err -117) [ 235.032120][ T7705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.090541][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.131595][ T7705] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.586: Invalid block bitmap block 0 in block_group 0 [ 235.150763][ T7705] Quota error (device loop2): write_blk: dquota write failed [ 235.158794][ T7705] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 235.169392][ T7705] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.586: Failed to acquire dquot type 0 [ 235.240599][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.256712][ T3453] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 235.276248][ T3453] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 235.297225][ T9] usb 2-1: device descriptor read/64, error -71 [ 235.530066][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 235.768251][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 235.925929][ T9] usb 2-1: device descriptor read/64, error -71 [ 236.045417][ T7736] loop3: detected capacity change from 0 to 512 [ 236.053662][ T9] usb usb2-port1: attempt power cycle [ 236.108756][ T7736] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #11: comm syz.3.597: iget: bad extended attribute block 83886080 [ 236.125249][ T7736] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.597: couldn't read orphan inode 11 (err -117) [ 236.141728][ T7736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.189821][ T7736] EXT4-fs error (device loop3): ext4_lookup:1860: inode #12: comm syz.3.597: iget: bogus i_mode (3355) [ 236.279788][ T7736] EXT4-fs error (device loop3): ext4_lookup:1860: inode #12: comm syz.3.597: iget: bogus i_mode (3355) [ 236.448335][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.508666][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.549777][ T9] usb 2-1: device descriptor read/8, error -71 [ 237.012087][ T7745] loop3: detected capacity change from 0 to 1024 [ 237.033692][ T7745] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.055787][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.093137][ T7745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.102958][ T7745] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.109455][ T9] usb 2-1: device descriptor read/8, error -71 [ 237.268851][ T7745] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #11: comm syz.3.600: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 237.351536][ T7745] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.600: couldn't read orphan inode 11 (err -117) [ 237.431732][ T7745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.502918][ T7745] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.600: Invalid block bitmap block 0 in block_group 0 [ 237.535031][ T7745] Quota error (device loop3): write_blk: dquota write failed [ 237.561740][ T7745] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 237.592414][ T7745] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.600: Failed to acquire dquot type 0 [ 237.722415][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.741200][ T34] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 237.765895][ T34] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 237.825513][ T9] usb usb2-port1: unable to enumerate USB device [ 237.942383][ T7752] loop3: detected capacity change from 0 to 128 [ 238.073741][ T7752] syz.3.601: attempt to access beyond end of device [ 238.073741][ T7752] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 238.752076][ T7773] loop0: detected capacity change from 0 to 1024 [ 238.776445][ T7773] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.799149][ T7773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.831974][ T7773] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.879654][ T7773] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.610: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 238.944634][ T7773] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.610: couldn't read orphan inode 11 (err -117) [ 238.980126][ T7773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.032524][ T7773] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.610: Invalid block bitmap block 0 in block_group 0 [ 239.065129][ T7773] Quota error (device loop0): write_blk: dquota write failed [ 239.084318][ T7773] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 239.105290][ T7773] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.610: Failed to acquire dquot type 0 [ 239.222271][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.245588][ T1148] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 239.264935][ T1148] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 239.451992][ T7787] loop0: detected capacity change from 0 to 512 [ 239.475828][ T7787] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.514559][ T7787] EXT4-fs (loop0): 1 truncate cleaned up [ 239.546559][ T7787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.644590][ T7724] syz.2.592: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 239.673550][ T7724] CPU: 1 PID: 7724 Comm: syz.2.592 Not tainted syzkaller #0 [ 239.680967][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.691115][ T7724] Call Trace: [ 239.694459][ T7724] [ 239.697445][ T7724] dump_stack_lvl+0x18c/0x250 [ 239.702207][ T7724] ? show_regs_print_info+0x20/0x20 [ 239.707508][ T7724] ? load_image+0x420/0x420 [ 239.712080][ T7724] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 239.718576][ T7724] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 239.725187][ T7724] warn_alloc+0x246/0x340 [ 239.729621][ T7724] ? zone_watermark_ok_safe+0x230/0x230 [ 239.735250][ T7724] ? _raw_spin_unlock+0x28/0x40 [ 239.740176][ T7724] ? __kmem_cache_free+0xba/0x1f0 [ 239.745364][ T7724] __vmalloc_node_range+0x661/0x1320 [ 239.750744][ T7724] ? free_vm_area+0x50/0x50 [ 239.755309][ T7724] ? kvmalloc_node+0x70/0x180 [ 239.760042][ T7724] ? rcu_is_watching+0x15/0xb0 [ 239.764869][ T7724] ? kvmalloc_node+0x70/0x180 [ 239.769605][ T7724] ? trace_kmalloc+0x1f/0xa0 [ 239.774257][ T7724] kvmalloc_node+0x13f/0x180 [ 239.778905][ T7724] ? translate_table+0x194/0x1f60 [ 239.783990][ T7724] translate_table+0x194/0x1f60 [ 239.788903][ T7724] ? ipt_register_table+0x7b0/0x7b0 [ 239.794150][ T7724] ? __might_fault+0xaa/0x120 [ 239.798863][ T7724] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.803940][ T7724] ? __virt_addr_valid+0x10c/0x380 [ 239.809105][ T7724] ? __virt_addr_valid+0x10c/0x380 [ 239.814262][ T7724] ? __might_fault+0xaa/0x120 [ 239.818972][ T7724] ? __might_fault+0xc6/0x120 [ 239.823680][ T7724] ? __might_fault+0xaa/0x120 [ 239.828402][ T7724] do_ipt_set_ctl+0x9f5/0xe00 [ 239.833132][ T7724] ? ipt_unregister_table_exit+0x230/0x230 [ 239.838981][ T7724] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.844063][ T7724] ? rcu_is_watching+0x15/0xb0 [ 239.848879][ T7724] ? trace_contention_end+0x39/0xe0 [ 239.854555][ T7724] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 239.860231][ T7724] ? mutex_unlock+0x10/0x10 [ 239.864775][ T7724] ? aa_af_perm+0x330/0x330 [ 239.869322][ T7724] nf_setsockopt+0x263/0x280 [ 239.873966][ T7724] ? sock_common_recvmsg+0x190/0x190 [ 239.879315][ T7724] do_sock_setsockopt+0x175/0x1a0 [ 239.884427][ T7724] ? __fdget+0x180/0x210 [ 239.888728][ T7724] __x64_sys_setsockopt+0x182/0x200 [ 239.893975][ T7724] do_syscall_64+0x55/0xb0 [ 239.898444][ T7724] ? clear_bhb_loop+0x40/0x90 [ 239.903156][ T7724] ? clear_bhb_loop+0x40/0x90 [ 239.907864][ T7724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.913806][ T7724] RIP: 0033:0x7f555139e199 [ 239.918270][ T7724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.937959][ T7724] RSP: 002b:00007f5552214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.946423][ T7724] RAX: ffffffffffffffda RBX: 00007f5551625fa0 RCX: 00007f555139e199 [ 239.954426][ T7724] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.962445][ T7724] RBP: 00007f55514350b8 R08: 0000000000000490 R09: 0000000000000000 [ 239.970461][ T7724] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.978464][ T7724] R13: 00007f5551626038 R14: 00007f5551625fa0 R15: 00007ffccde666b8 [ 239.986481][ T7724] [ 239.996698][ T7724] Mem-Info: [ 239.999912][ T7724] active_anon:6714 inactive_anon:0 isolated_anon:0 [ 239.999912][ T7724] active_file:14860 inactive_file:40021 isolated_file:0 [ 239.999912][ T7724] unevictable:768 dirty:145 writeback:0 [ 239.999912][ T7724] slab_reclaimable:10678 slab_unreclaimable:93550 [ 239.999912][ T7724] mapped:24508 shmem:2486 pagetables:602 [ 239.999912][ T7724] sec_pagetables:0 bounce:0 [ 239.999912][ T7724] kernel_misc_reclaimable:0 [ 239.999912][ T7724] free:1335570 free_pcp:6260 free_cma:0 [ 240.088471][ T7724] Node 0 active_anon:29556kB inactive_anon:0kB active_file:59440kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98032kB dirty:580kB writeback:0kB shmem:11308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10856kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no [ 240.150150][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.165364][ T7724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 240.205601][ T7724] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.296555][ T7724] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 240.302452][ T7724] Node 0 DMA32 free:1421664kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35212kB inactive_anon:0kB active_file:59436kB inactive_file:159048kB unevictable:1536kB writepending:584kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:7052kB local_pcp:348kB free_cma:0kB [ 240.363661][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 240.368887][ T7724] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.418447][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 240.423304][ T7724] Node 1 Normal free:3892880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21920kB local_pcp:10272kB free_cma:0kB [ 240.461813][ T7783] loop3: detected capacity change from 0 to 32768 [ 240.465210][ T7724] lowmem_reserve[]: 0 0 0 0 0 [ 240.495235][ T7724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 240.505751][ T7783] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.611 (7783) [ 240.536163][ T7783] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 240.550076][ T7783] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 240.562852][ T7783] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.574078][ T7783] BTRFS info (device loop3): use zstd compression, level 3 [ 240.585227][ T7724] Node 0 DMA32: 3*4kB (UME) 2*8kB (ME) 400*16kB (UME) 568*32kB (UME) 376*64kB (UME) 264*128kB (UME) 125*256kB (UM) 86*512kB (UME) 49*1024kB (UME) 23*2048kB (UM) 283*4096kB (UM) = 1414940kB [ 240.617651][ T7783] BTRFS info (device loop3): force clearing of disk cache [ 240.628951][ T7783] BTRFS info (device loop3): enabling disk space caching [ 240.638827][ T7783] BTRFS info (device loop3): disk space caching is enabled [ 240.648464][ T7724] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 240.679886][ T7724] Node 1 Normal: 294*4kB (UME) 73*8kB (UME) 53*16kB (UME) 89*32kB (UME) 33*64kB (UME) 6*128kB (UE) 2*256kB (UE) 2*512kB (UM) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3892880kB [ 240.719147][ T7724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.842023][ T7724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 240.949261][ T7783] BTRFS info (device loop3): enabling ssd optimizations [ 240.966467][ T7724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.054229][ T7783] BTRFS info (device loop3): auto enabling async discard [ 241.128987][ T7724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 241.203615][ T7783] BTRFS info (device loop3): rebuilding free space tree [ 241.272806][ T7724] 60419 total pagecache pages [ 241.400373][ T7724] 0 pages in swap cache [ 241.463438][ T7724] Free swap = 124472kB [ 241.510763][ T7724] Total swap = 124996kB [ 241.619801][ T7724] 2097051 pages RAM [ 241.650103][ T7724] 0 pages HighMem/MovableOnly [ 241.655003][ T7724] 416970 pages reserved [ 241.659210][ T7724] 0 pages cma reserved [ 241.721436][ T7783] BTRFS info (device loop3): disabling free space tree [ 241.757568][ T7783] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.826238][ T7783] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 242.406034][ T5779] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 242.476800][ T7825] loop1: detected capacity change from 0 to 1024 [ 242.505876][ T7825] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.557694][ T7825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.603475][ T7825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.722013][ T7825] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #11: comm syz.1.620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 242.792341][ T7825] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.620: couldn't read orphan inode 11 (err -117) [ 242.848258][ T7825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.941681][ T7825] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.620: Invalid block bitmap block 0 in block_group 0 [ 242.960549][ T7825] Quota error (device loop1): write_blk: dquota write failed [ 242.993334][ T7825] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 243.022083][ T7825] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.620: Failed to acquire dquot type 0 [ 243.128220][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.161978][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 243.179947][ T7841] FAULT_INJECTION: forcing a failure. [ 243.179947][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.193497][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 243.212747][ T7841] CPU: 1 PID: 7841 Comm: syz.3.624 Not tainted syzkaller #0 [ 243.220183][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.230291][ T7841] Call Trace: [ 243.233621][ T7841] [ 243.236629][ T7841] dump_stack_lvl+0x18c/0x250 [ 243.241392][ T7841] ? show_regs_print_info+0x20/0x20 [ 243.246694][ T7841] ? load_image+0x420/0x420 [ 243.251274][ T7841] ? __might_fault+0xaa/0x120 [ 243.256007][ T7841] ? __lock_acquire+0x7eb0/0x7eb0 [ 243.261099][ T7841] should_fail_ex+0x394/0x4c0 [ 243.265857][ T7841] _copy_from_user+0x2f/0xe0 [ 243.270515][ T7841] __se_sys_prlimit64+0x12f/0xbf0 [ 243.275625][ T7841] ? __x64_sys_prlimit64+0xb0/0xb0 [ 243.280818][ T7841] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 243.286876][ T7841] ? lock_chain_count+0x20/0x20 [ 243.291824][ T7841] ? lockdep_hardirqs_on+0x98/0x150 [ 243.297091][ T7841] do_syscall_64+0x55/0xb0 [ 243.301572][ T7841] ? clear_bhb_loop+0x40/0x90 [ 243.306335][ T7841] ? clear_bhb_loop+0x40/0x90 [ 243.311078][ T7841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.317036][ T7841] RIP: 0033:0x7effddf9e199 [ 243.321511][ T7841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.341224][ T7841] RSP: 002b:00007effdee26028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 243.349711][ T7841] RAX: ffffffffffffffda RBX: 00007effde225fa0 RCX: 00007effddf9e199 [ 243.357755][ T7841] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 243.365795][ T7841] RBP: 00007effde0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 243.373803][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.381803][ T7841] R13: 00007effde226038 R14: 00007effde225fa0 R15: 00007fff94777cf8 [ 243.389822][ T7841] [ 243.708493][ T7848] loop1: detected capacity change from 0 to 256 [ 245.945128][ T7892] loop0: detected capacity change from 0 to 128 [ 246.057241][ T7892] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.096381][ T7895] netlink: 'syz.2.645': attribute type 1 has an invalid length. [ 246.112213][ T7892] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.428319][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.445576][ T7895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.811927][ T7924] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 247.868460][ T7924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.530547][ T7942] loop1: detected capacity change from 0 to 512 [ 249.638484][ T7942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.733523][ T7942] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.004174][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.501704][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 250.626414][ T7961] loop0: detected capacity change from 0 to 256 [ 251.216752][ T7961] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.993215][ T28] audit: type=1800 audit(1700011634.440:36): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="file1" dev="loop0" ino=1048935 res=0 errno=0 [ 252.381619][ T7970] loop1: detected capacity change from 0 to 512 [ 252.434853][ T7970] EXT4-fs (loop1): bad block size 32768 [ 253.012683][ T7983] loop2: detected capacity change from 0 to 512 [ 253.089111][ T7983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.110828][ T7983] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.234920][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.504763][ T8002] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 253.541415][ T8002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.659481][ T8012] loop2: detected capacity change from 0 to 2048 [ 253.700178][ T8012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.728073][ T8012] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.848365][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.986716][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002583][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.949432][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.958359][ T8078] FAULT_INJECTION: forcing a failure. [ 256.958359][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.985306][ T8078] CPU: 0 PID: 8078 Comm: syz.3.709 Not tainted syzkaller #0 [ 256.992694][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 257.002803][ T8078] Call Trace: [ 257.006132][ T8078] [ 257.009111][ T8078] dump_stack_lvl+0x18c/0x250 [ 257.013862][ T8078] ? show_regs_print_info+0x20/0x20 [ 257.019119][ T8078] ? load_image+0x420/0x420 [ 257.023689][ T8078] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.028770][ T8078] ? __kasan_slab_alloc+0x6c/0x80 [ 257.033855][ T8078] should_fail_ex+0x394/0x4c0 [ 257.038599][ T8078] strncpy_from_user+0x36/0x2f0 [ 257.043522][ T8078] getname_flags+0xf6/0x500 [ 257.048089][ T8078] user_path_at_empty+0x2c/0x60 [ 257.053001][ T8078] path_getxattr+0xf0/0x4d0 [ 257.057586][ T8078] ? do_futex+0x2ff/0x3e0 [ 257.061962][ T8078] ? path_setxattr+0x590/0x590 [ 257.066794][ T8078] ? __ia32_sys_get_robust_list+0x110/0x110 [ 257.072742][ T8078] ? bpf_link_show_fdinfo+0x560/0x560 [ 257.078182][ T8078] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 257.084232][ T8078] ? lock_chain_count+0x20/0x20 [ 257.089143][ T8078] ? lockdep_hardirqs_on+0x98/0x150 [ 257.094404][ T8078] do_syscall_64+0x55/0xb0 [ 257.098876][ T8078] ? clear_bhb_loop+0x40/0x90 [ 257.103604][ T8078] ? clear_bhb_loop+0x40/0x90 [ 257.108335][ T8078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.114286][ T8078] RIP: 0033:0x7effddf9e199 [ 257.118748][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.138415][ T8078] RSP: 002b:00007effdee05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 257.146897][ T8078] RAX: ffffffffffffffda RBX: 00007effde226090 RCX: 00007effddf9e199 [ 257.154926][ T8078] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 257.162953][ T8078] RBP: 00007effde0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 257.170979][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.178989][ T8078] R13: 00007effde226128 R14: 00007effde226090 R15: 00007fff94777cf8 [ 257.187019][ T8078] [ 257.335965][ T8084] loop3: detected capacity change from 0 to 128 [ 257.378514][ T8084] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.438018][ T8084] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.554313][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 257.579654][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.764139][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.931288][ T8100] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 258.977547][ T8100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.499004][ T8110] loop2: detected capacity change from 0 to 64 [ 260.294912][ T28] audit: type=1800 audit(1700011642.841:37): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.719" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 260.316867][ T8110] db_root: cannot open: /dev/sequencer2 [ 260.382434][ T8110] db_root: not a directory: /dev/sequencer2 [ 260.407731][ T970] usb 2-1: USB disconnect, device number 15 [ 260.566534][ T8117] loop1: detected capacity change from 0 to 128 [ 260.639249][ T8117] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.679171][ T8123] loop3: detected capacity change from 0 to 512 [ 260.696997][ T8117] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.797899][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.829280][ T8123] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.878978][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.989110][ T8128] FAULT_INJECTION: forcing a failure. [ 260.989110][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 261.003697][ T8128] CPU: 1 PID: 8128 Comm: syz.2.724 Not tainted syzkaller #0 [ 261.011075][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.021193][ T8128] Call Trace: [ 261.024528][ T8128] [ 261.027515][ T8128] dump_stack_lvl+0x18c/0x250 [ 261.032264][ T8128] ? show_regs_print_info+0x20/0x20 [ 261.037540][ T8128] ? load_image+0x420/0x420 [ 261.042113][ T8128] ? __might_sleep+0xe0/0xe0 [ 261.046782][ T8128] ? __lock_acquire+0x7eb0/0x7eb0 [ 261.051892][ T8128] should_fail_ex+0x394/0x4c0 [ 261.056690][ T8128] should_failslab+0x9/0x20 [ 261.061283][ T8128] slab_pre_alloc_hook+0x59/0x300 [ 261.066401][ T8128] kmem_cache_alloc_lru+0x4d/0x2b0 [ 261.071590][ T8128] ? new_inode_pseudo+0x82/0x1d0 [ 261.076608][ T8128] new_inode_pseudo+0x82/0x1d0 [ 261.081454][ T8128] create_pipe_files+0x51/0x700 [ 261.086371][ T8128] ? __ia32_sys_get_robust_list+0x110/0x110 [ 261.092333][ T8128] __do_pipe_flags+0x4c/0x2c0 [ 261.097089][ T8128] do_pipe2+0xab/0x190 [ 261.101255][ T8128] ? _compound_head+0x120/0x120 [ 261.106185][ T8128] ? lock_chain_count+0x20/0x20 [ 261.111101][ T8128] ? syscall_enter_from_user_mode+0x25/0x80 [ 261.117067][ T8128] __x64_sys_pipe+0x3a/0x40 [ 261.121672][ T8128] do_syscall_64+0x55/0xb0 [ 261.126163][ T8128] ? clear_bhb_loop+0x40/0x90 [ 261.130911][ T8128] ? clear_bhb_loop+0x40/0x90 [ 261.135653][ T8128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.141701][ T8128] RIP: 0033:0x7f555139e199 [ 261.146159][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.165914][ T8128] RSP: 002b:00007f5552214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 261.174372][ T8128] RAX: ffffffffffffffda RBX: 00007f5551625fa0 RCX: 00007f555139e199 [ 261.182375][ T8128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.190372][ T8128] RBP: 00007f55514350b8 R08: 0000000000000000 R09: 0000000000000000 [ 261.198376][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.206380][ T8128] R13: 00007f5551626038 R14: 00007f5551625fa0 R15: 00007ffccde666b8 [ 261.214403][ T8128] [ 261.233944][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.406818][ T8135] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 262.419457][ T8150] loop2: detected capacity change from 0 to 64 [ 262.441796][ T28] audit: type=1800 audit(1700011644.992:38): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.733" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 263.174935][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 265.561833][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 265.754080][ T27] usb 1-1: config 0 has no interfaces? [ 265.767631][ T27] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 265.788481][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.801094][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 265.824665][ T8202] gadgetfs: bound to dummy_udc driver [ 265.843183][ T27] usb 1-1: config 0 descriptor?? [ 265.876675][ T27] usb 1-1: can't set config #0, error -71 [ 265.885194][ T27] usb 1-1: USB disconnect, device number 7 [ 266.032908][ T8212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.094604][ T8215] loop3: detected capacity change from 0 to 128 [ 266.109557][ T8215] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.130924][ T173] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 266.144060][ C0] gadgetfs: connected [ 266.149915][ T8198] gadgetfs: suspended from state 3 [ 266.157069][ T8198] gadgetfs: disconnected [ 266.166480][ T8215] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.691646][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 267.497507][ T8235] loop0: detected capacity change from 0 to 2048 [ 267.540534][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.554056][ T8237] gadgetfs: bound to dummy_udc driver [ 267.743414][ T27] usb 3-1: config 0 has no interfaces? [ 267.749293][ T27] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 267.777582][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.830343][ T970] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 267.845930][ C1] gadgetfs: connected [ 267.852123][ T8236] gadgetfs: suspended from state 3 [ 267.858904][ T8236] gadgetfs: disconnected [ 267.883852][ T27] usb 3-1: config 0 descriptor?? [ 268.807204][ T8257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 269.472876][ T8270] gadgetfs: bound to dummy_udc driver [ 269.591999][ T8275] loop1: detected capacity change from 0 to 128 [ 269.609007][ T8275] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.663155][ T8275] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.780264][ T970] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 269.788008][ C1] gadgetfs: connected [ 269.803264][ T8269] gadgetfs: suspended from state 3 [ 269.813200][ T8269] gadgetfs: disconnected [ 270.409958][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 272.253198][ T5846] usb 3-1: USB disconnect, device number 7 [ 273.035151][ T8307] gadgetfs: bound to dummy_udc driver [ 273.036847][ T8308] loop1: detected capacity change from 0 to 128 [ 273.073921][ T8308] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.121927][ T8308] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.332279][ T27] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 273.345490][ C1] gadgetfs: connected [ 273.351471][ T8305] gadgetfs: suspended from state 3 [ 273.356805][ T8305] gadgetfs: disconnected [ 274.720886][ T8335] gadgetfs: bound to dummy_udc driver [ 274.906428][ T8338] loop0: detected capacity change from 0 to 128 [ 274.914618][ T8338] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.981489][ T8338] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.039254][ T27] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 275.082289][ C1] gadgetfs: connected [ 275.086883][ T27] gadgetfs: disconnected [ 275.450797][ T8356] RDS: rds_bind could not find a transport for 3200::, load rds_tcp or rds_rdma? [ 275.547623][ T8360] loop0: detected capacity change from 0 to 64 [ 275.677738][ T28] audit: type=1800 audit(1700011658.224:39): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.807" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 276.661858][ T8367] loop1: detected capacity change from 0 to 128 [ 276.690313][ T8371] tipc: Started in network mode [ 276.696184][ T8371] tipc: Node identity 724d9955800e, cluster identity 4711 [ 276.708559][ T8367] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.709720][ T8371] tipc: Enabled bearer , priority 0 [ 276.906028][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.923146][ T8367] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.942005][ T8371] syzkaller0: entered promiscuous mode [ 277.020404][ T8371] syzkaller0: entered allmulticast mode [ 277.177457][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 277.271115][ T8373] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 277.298794][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.373268][ T8371] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 277.490398][ T8371] tipc: Resetting bearer [ 277.571712][ T8369] tipc: Resetting bearer [ 277.622055][ T8369] tipc: Disabling bearer [ 277.641062][ T8380] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 279.327715][ T8411] syz_tun: entered allmulticast mode [ 279.554789][ T8411] syz_tun: left allmulticast mode [ 279.805752][ T5819] usb 3-1: USB disconnect, device number 8 [ 279.826419][ T8415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 280.374526][ T8438] loop0: detected capacity change from 0 to 512 [ 280.907845][ T8444] loop3: detected capacity change from 0 to 64 [ 280.928114][ T28] audit: type=1800 audit(1700011663.475:40): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.836" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 280.993324][ T8438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.396951][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 281.444266][ T8438] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.838: Abort forced by user [ 281.495171][ T8438] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.610773][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.669701][ T5819] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 281.705281][ T8451] loop2: detected capacity change from 0 to 512 [ 281.910824][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.928030][ T5819] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 281.946633][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.994227][ T8451] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.292746][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.308180][ T8463] loop0: detected capacity change from 0 to 512 [ 282.408526][ T8463] EXT4-fs error (device loop0): ext4_quota_enable:7144: inode #4: comm syz.0.845: casefold flag without casefold feature [ 282.467742][ T8463] EXT4-fs (loop0): Remounting filesystem read-only [ 282.477381][ T8463] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.499390][ T8463] EXT4-fs (loop0): mount failed [ 282.891156][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 282.933198][ T8476] loop2: detected capacity change from 0 to 256 [ 283.049279][ T8476] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.154703][ T28] audit: type=1800 audit(1700011666.635:41): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.846" name="file1" dev="loop2" ino=1048995 res=0 errno=0 [ 284.381119][ T5846] usb 2-1: USB disconnect, device number 17 [ 284.638295][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 285.130385][ T8469] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 285.272054][ T8469] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 285.359124][ T8469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.409096][ T8469] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 285.448658][ T8469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.454771][ T8469] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 285.571555][ T8469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.601115][ T8469] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 287.357031][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 287.417106][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 287.509932][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 290.616865][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 290.623820][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 290.630356][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 300.294813][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 311.402718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 313.552765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 313.962292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 316.112317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 318.671845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 319.081375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 321.231446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 323.791057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 326.350597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 375.003350][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.009813][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.032621][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 143s! [ 430.042385][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 141s! [ 430.051581][ C0] Showing busy workqueues and worker pools: [ 430.057546][ C0] workqueue events: flags=0x0 [ 430.062386][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.062437][ C0] pending: kfree_rcu_monitor [ 430.075268][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 430.075318][ C0] in-flight: 173:kfree_rcu_monitor [ 430.075358][ C0] pending: kfree_rcu_monitor [ 430.075395][ C0] workqueue events: flags=0x0 [ 430.098305][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 430.098352][ C0] pending: free_obj_work, 2*nsim_dev_hwstats_traffic_work, psi_avgs_work, 3*ovs_dp_masks_rebalance, switchdev_deferred_process_work, 3*rht_deferred_worker [ 430.098794][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 430.098835][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, vmstat_shepherd, 2*psi_avgs_work, 2*ovs_dp_masks_rebalance, ima_keys_handler [ 430.099067][ C0] workqueue events_highpri: flags=0x10 [ 430.150700][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 430.150751][ C0] in-flight: 5918:snd_vmidi_output_work snd_vmidi_output_work [ 430.150927][ C0] workqueue events_long: flags=0x0 [ 430.171816][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 430.171866][ C0] pending: defense_work_handler, 3*br_multicast_gc_work, 3*br_fdb_cleanup [ 430.172098][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 430.172140][ C0] pending: 4*defense_work_handler, br_multicast_gc_work, br_fdb_cleanup [ 430.172208][ C0] workqueue events_unbound: flags=0x2 [ 430.210648][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=9/512 refcnt=10 [ 430.210692][ C0] pending: 4*cfg80211_wiphy_work, macvlan_process_broadcast, crng_reseed, 2*macvlan_process_broadcast, idle_cull_fn [ 430.211023][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=17/512 refcnt=18 [ 430.211058][ C0] pending: 4*cfg80211_wiphy_work, toggle_allocation_gate, 4*nsim_dev_trap_report_work, flush_memcg_stats_dwork, 4*macvlan_process_broadcast, 2*idle_cull_fn, macvlan_process_broadcast [ 430.211256][ C0] workqueue events_freezable: flags=0x4 [ 430.262544][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.262591][ C0] pending: update_balloon_stats_func [ 430.262704][ C0] workqueue events_power_efficient: flags=0x80 [ 430.282278][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 430.282335][ C0] pending: wg_ratelimiter_gc_entries, do_cache_clean, gc_worker [ 430.298365][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 430.298420][ C0] pending: 2*neigh_managed_work, 2*neigh_periodic_work, check_lifetime, hash_netport4_gc [ 430.298638][ C0] workqueue mm_percpu_wq: flags=0x8 [ 430.321774][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.321823][ C0] pending: vmstat_update [ 430.321855][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.321894][ C0] pending: vmstat_update [ 430.321924][ C0] workqueue writeback: flags=0x4a [ 430.351680][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.351730][ C0] pending: wb_workfn [ 430.351871][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 430.351906][ C0] pending: 2*wb_workfn [ 430.351944][ C0] workqueue kblockd: flags=0x18 [ 430.380118][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 430.380173][ C0] pending: 2*blk_mq_timeout_work, blk_mq_requeue_work [ 430.380346][ C0] workqueue dm_bufio_cache: flags=0x8 [ 430.400810][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.400862][ C0] pending: work_fn [ 430.400994][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 430.418509][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=8 [ 430.418560][ C0] pending: addrconf_verify_work [ 430.418701][ C0] inactive: 4*addrconf_verify_work [ 430.418735][ C0] workqueue krxrpcd: flags=0xa001a [ 430.441785][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=8 [ 430.441835][ C0] pending: rxrpc_peer_keepalive_worker [ 430.441968][ C0] inactive: 4*rxrpc_peer_keepalive_worker [ 430.442005][ C0] workqueue krdsd: flags=0xe000a [ 430.466867][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=7 [ 430.466916][ C0] pending: rds_connect_worker [ 430.467097][ C0] inactive: 3*rds_connect_worker [ 430.467128][ C0] workqueue bat_events: flags=0xe000a [ 430.490032][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=39 [ 430.490076][ C0] pending: batadv_nc_worker [ 430.490223][ C0] inactive: 3*batadv_nc_worker, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_mcast_mla_update, 4*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge [ 430.490574][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.544050][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.544101][ C0] pending: wg_packet_encrypt_worker [ 430.544140][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.544189][ C0] pending: wg_packet_encrypt_worker [ 430.544222][ C0] workqueue wg-kex-wg1: flags=0x6 [ 430.575853][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.575900][ C0] pending: wg_packet_handshake_send_worker [ 430.575941][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.594715][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.594765][ C0] pending: wg_packet_encrypt_worker [ 430.594801][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.594837][ C0] pending: wg_packet_decrypt_worker [ 430.594870][ C0] workqueue wg-kex-wg2: flags=0x6 [ 430.626663][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.626722][ C0] pending: wg_packet_handshake_send_worker [ 430.626760][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.645541][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.645592][ C0] pending: wg_packet_encrypt_worker [ 430.645627][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.664258][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.664305][ C0] pending: wg_packet_encrypt_worker [ 430.664343][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.664382][ C0] pending: wg_packet_encrypt_worker [ 430.664416][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.696296][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.696345][ C0] pending: wg_packet_encrypt_worker [ 430.696383][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.696425][ C0] pending: wg_packet_encrypt_worker [ 430.696457][ C0] workqueue wg-kex-wg0: flags=0x6 [ 430.728041][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.728088][ C0] pending: wg_packet_handshake_send_worker [ 430.728128][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.746924][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.746971][ C0] pending: wg_packet_encrypt_worker [ 430.747006][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.747040][ C0] pending: wg_packet_encrypt_worker [ 430.747073][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.779020][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.779071][ C0] pending: wg_packet_encrypt_worker [ 430.779106][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.779145][ C0] pending: wg_packet_encrypt_worker [ 430.779176][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.811036][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.811089][ C0] pending: wg_packet_encrypt_worker [ 430.811126][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.811168][ C0] pending: wg_packet_encrypt_worker [ 430.811201][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.843109][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.843157][ C0] pending: wg_packet_encrypt_worker [ 430.843196][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.843238][ C0] pending: wg_packet_encrypt_worker [ 430.843271][ C0] workqueue wg-kex-wg1: flags=0x6 [ 430.874903][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.874952][ C0] pending: wg_packet_handshake_send_worker [ 430.874991][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.893808][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.893861][ C0] pending: wg_packet_encrypt_worker [ 430.893899][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.912508][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.912556][ C0] pending: wg_packet_encrypt_worker [ 430.912590][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.912633][ C0] pending: wg_packet_encrypt_worker [ 430.912684][ C0] workqueue wg-kex-wg2: flags=0x6 [ 430.944289][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.944338][ C0] pending: wg_packet_handshake_send_worker [ 430.944378][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.963158][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.963207][ C0] pending: wg_packet_encrypt_worker [ 430.963247][ C0] workqueue bond1: flags=0xa000a [ 430.981496][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 430.981537][ C0] pending: bond_mii_monitor [ 430.981695][ C0] inactive: bond_alb_monitor [ 430.981720][ C0] workqueue bond1: flags=0xa000a [ 431.003695][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 431.003740][ C0] pending: bond_alb_monitor [ 431.003777][ C0] inactive: bond_mii_monitor [ 431.003811][ C0] workqueue bond1: flags=0xa000a [ 431.025710][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 431.025756][ C0] pending: bond_mii_monitor [ 431.025798][ C0] inactive: bond_alb_monitor [ 431.025822][ C0] workqueue bond2: flags=0xa000a [ 431.047770][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 431.047818][ C0] pending: bond_mii_monitor [ 431.047856][ C0] inactive: bond_alb_monitor [ 431.047880][ C0] workqueue bond3: flags=0xa000a [ 431.069907][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 431.069954][ C0] pending: bond_mii_monitor [ 431.069994][ C0] inactive: bond_alb_monitor [ 431.070018][ C0] workqueue bond4: flags=0xa000a [ 431.091951][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=5 [ 431.091998][ C0] pending: bond_alb_monitor [ 431.092033][ C0] inactive: bond_mii_monitor [ 431.092067][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=144s workers=8 idle: 9 8 5781 5855 5823 5824 5845 [ 431.092149][ C0] pool 1: cpus=0 node=0 flags=0x0 nice=-20 hung=0s workers=3 idle: 10 56 [ 431.092226][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: